Re: dnsbl postscreen - not blocking

2018-12-20 Thread @lbutlr
On 20 Dec 2018, at 06:46, Kai Schaetzl wrote: > Using Sorbs is dangerous, anyway, we abandoned it years ago. If you want > to use it then use it in the way it is intended for weighted RBLs. e.g. do > not use it as the sole source of blocking. I keep parring down my list and am considering

Re: dnsbl postscreen - not blocking

2018-12-20 Thread Kai Schaetzl
Stefan Bauer wrote on Wed, 19 Dec 2018 21:10:10 +0100: > the threshold is at default, so 1. This may not be part of your problem, but using a threshold of 1 and then using this weighting scheme is nonsense: postscreen_dnsbl_sites = zen.spamhaus.org*2 bl.spamcop.net*1 b.barracudacentral.org*1

Re: dnsbl postscreen - not blocking

2018-12-19 Thread Wietse Venema
Stefan Bauer: > the threshold is at default, so 1. > > but the dns timeout, Wietse mentioned, might be the real cause. gonna check > manuals, if this is configurable. postscreen will wait for DNS lookup results until the postscreen_greet_wait timer expires. postscreen_greet_wait =

Re: dnsbl postscreen - not blocking

2018-12-19 Thread Stefan Bauer
the threshold is at default, so 1. but the dns timeout, Wietse mentioned, might be the real cause. gonna check manuals, if this is configurable. Thank you. Am Mittwoch, 19. Dezember 2018 schrieb Viktor Dukhovni < postfix-us...@dukhovni.org>: > On Wed, Dec 19, 2018 at 02:00:34PM +0100, Stefan

Re: dnsbl postscreen - not blocking

2018-12-19 Thread Viktor Dukhovni
On Wed, Dec 19, 2018 at 02:00:34PM +0100, Stefan Bauer wrote: > Dec 19 13:04:36 mx1 postfix/postscreen[4770]: CONNECT from > [209.85.166.196]:52168 to [public-ip]:25 > Dec 19 13:04:42 mx1 postfix/dnsblog[4774]: addr 209.85.166.196 listed by > domain dnsbl.sorbs.net as 127.0.0.6 > Dec 19 13:04:42

Re: dnsbl postscreen - not blocking

2018-12-19 Thread Viktor Dukhovni
On Wed, Dec 19, 2018 at 02:58:00PM +, Dominic Raferd wrote: > This might help OP identify any non-default postscreen settings (kudos: > Viktor) - > > LC_ALL=C join --check-order <(postconf -n) <(postconf -d | sed > 's/=/(default:/; s/$/)/')|grep ^postscreen_ Thanks, but may be worth noting

Re: dnsbl postscreen - not blocking

2018-12-19 Thread Wietse Venema
Stefan Bauer: > Hi, > > Dec 19 13:04:36 mx1 postfix/postscreen[4770]: CONNECT from > [209.85.166.196]:52168 to [public-ip]:25 > Dec 19 13:04:42 mx1 postfix/dnsblog[4774]: addr 209.85.166.196 listed by > domain dnsbl.sorbs.net as 127.0.0.6 It took 6s for dnsblog to figure out that the client is

Re: dnsbl postscreen - not blocking

2018-12-19 Thread Dominic Raferd
On Wed, 19 Dec 2018 at 14:51, Matus UHLAR - fantomas wrote: > On 19.12.18 14:00, Stefan Bauer wrote: > >Dec 19 13:04:36 mx1 postfix/postscreen[4770]: CONNECT from > >[209.85.166.196]:52168 to [public-ip]:25 > >Dec 19 13:04:42 mx1 postfix/dnsblog[4774]: addr 209.85.166.196 listed by > >domain

Re: dnsbl postscreen - not blocking

2018-12-19 Thread Matus UHLAR - fantomas
On 19.12.18 14:00, Stefan Bauer wrote: Dec 19 13:04:36 mx1 postfix/postscreen[4770]: CONNECT from [209.85.166.196]:52168 to [public-ip]:25 Dec 19 13:04:42 mx1 postfix/dnsblog[4774]: addr 209.85.166.196 listed by domain dnsbl.sorbs.net as 127.0.0.6 Dec 19 13:04:42 mx1 postfix/postscreen[4770]:

RE: dnsbl postscreen - not blocking

2018-12-19 Thread Fazzina, Angelo
, ITS, SSG, Server Systems 860-486-9075 From: owner-postfix-us...@postfix.org On Behalf Of Stefan Bauer Sent: Wednesday, December 19, 2018 8:01 AM To: Postfix users Subject: dnsbl postscreen - not blocking Hi, Dec 19 13:04:36 mx1 postfix/postscreen[4770]: CONNECT from [209.85.166.196]:52168

RE: dnsbl postscreen - not blocking

2018-12-19 Thread L . P . H . van Belle
Stefan Bauer Verzonden: woensdag 19 december 2018 14:01 Aan: Postfix users Onderwerp: dnsbl postscreen - not blocking Hi, Dec 19 13:04:36 mx1 postfix/postscreen[4770]: CONNECT from [209.85.166.196]:52168 to [public-ip]:25 Dec 19 13