> >egrep -i "554 Service unavailable.*blocked using" /var/log/maillog | less > >none.
ok, now we're getting somewhere. you should see lines like this: Jan 27 00:16:44 mx1 postfix/smtpd[6474]: 04638BF713: reject: RCPT from pcp01966030pcs.nrockv01.md.comcast.net[68.48.109.70]: 554 Service unavailable; Client host [68.48.109.70] blocked using rbl-plus.mail-abuse.org; from=<[EMAIL PROTECTED]> to=<[EMAIL PROTECTED]> proto=SMTP helo=<yahoo.com> ( btw, note this comcast spammer, in Rockville MD, is sending helo=<yahoo.com> :)) ) in your master.cf, for the smtpd line, add -v at the very end, + postfix reload then do this: tail -f /var/log/maillog | egrep -i "rbl" I think that should give you a reduced enough volume for readability. if not, less /var/log/maillog and do /rbl when you're done, remove the -v and postfix reload. Len
