/dev/rob0: > On Sun, May 12, 2013 at 08:11:14PM -0500, /dev/rob0 wrote: > > On Sun, May 12, 2013 at 08:47:38PM -0400, Wietse Venema wrote: > > > A lightly-tested version is available as postfix-2.11-20130512. > > > > Woohoo! Thanks! > > > > I installed it, set postscreen_dnsbl_whitelist_threshold=-1 > > followed by a reload. Two seconds later I think it is working. > > > > May 13 00:59:50 harrier postfix/postfix-script[12251]: starting the Postfix > > mail system > > May 13 00:59:50 harrier postfix/master[12253]: daemon started -- version > > 2.11-20130512, configuration /etc/postfix > > May 13 01:02:23 harrier postfix/postfix-script[12502]: refreshing the > > Postfix mail system > > May 13 01:02:23 harrier postfix/master[12253]: reload -- version > > 2.11-20130512, configuration /etc/postfix > > May 13 01:02:25 harrier postfix/postscreen[12508]: CONNECT from > > [66.220.144.151]:57808 to [207.223.116.211]:25 > > May 13 01:02:25 harrier postfix/dnsblog[12509]: addr 66.220.144.151 listed > > by domain list.dnswl.org as 127.0.9.1 > > May 13 01:02:25 harrier postfix/smtpd[12518]: connect from > > outmail017.snc4.facebook.com[66.220.144.151] > > May 13 01:02:26 harrier postfix/smtpd[12518]: 3b83fB2KJ4z3B92: > > client=outmail017.snc4.facebook.com[66.220.144.151] > > > > I don't see any PASS OLD in there, so I guess the whitelist did the > > trick? Would anything else be logged?
Found it. With postscreen_dnsbl_whitelist_threshold turned on, postscreen raised the "pregreet test is passed" flag even when that test was disabled. This led to a mis-match between what tests were required versus what tests were passed, resulting in no "PASS NEW" logging. The error is only cosmetic and has no effect on mail deliveries. Wietse