Thanks so far, the "funny" thing about the sending Mailserver is, that the MX for the domain in question is:
forward : mail.bbb.com -> ddd.dd.ddd.70 reverse : ddd.dd.ddd.70 -> mail.bbb.com BUT the mail is delivered via ddd.dd.ddd.66 Might it be a problem of wrong NATing on "their" side? Thanks B -----Ursprüngliche Nachricht----- Von: owner-postfix-us...@postfix.org [mailto:owner-postfix-us...@postfix.org] Im Auftrag von lst_ho...@kwsoft.de Gesendet: Freitag, 27. November 2009 15:48 An: postfix-users@postfix.org Betreff: Re: AW: postfix - postgrey - lost connection after RSET Zitat von Eero Volotinen <eero.voloti...@iki.fi>: > Braun Björn wrote: >> My logs (mail.log) >> >> Nov 5 10:07:56 grey2 postfix/smtpd[7153]: connect from >> unknown[ddd.dd.ddd.dd] >> Nov 5 10:07:56 grey2 postfix/smtpd[7153]: NOQUEUE: reject: RCPT >> from unknown[ddd.dd.ddd.dd]: 450 4.7.1 <a...@aaa.de>: Recipient >> address rejected: Greylisted, see >> http://isg.ee.ethz.ch/tools/postgrey/help/aaa.DE.html; >> from=<b...@bbb.com> to=<a...@bbb.de> proto=ESMTP helo=<mail.bbb.com> >> Nov 5 10:07:56 grey2 postfix/smtpd[7153]: lost connection after >> RSET from unknown[ddd.dd.ddd.dd] >> Nov 5 10:07:56 grey2 postfix/smtpd[7153]: disconnect from >> unknown[ddd.dd.ddd.dd] >> >> Or are these the wrong logs? > > Well, looks like spammer is connecting from ddd.dd.ddd.dd and after > graylisting (45X temporary error) spammer software just drops > connection. This depends if "a...@aaa.de" is missing a mail from "b...@bbb.com" and "ddd.dd.ddd.dd" is a valid mailserver for "bbb.com" then the problem is worth to investigate. Regards Andreas
