----- Original Message ----- > From: "Wietse Venema" <[email protected]> > To: "Postfix users" <[email protected]> > Cc: [email protected], [email protected] > Sent: Saturday, January 23, 2016 7:29:00 AM > Subject: Re: Postfix Postscreen Pregreet Test
> Nguyen Nang Thang: >> I donot know how to demonstrate the test "postscreen_greet_wait" to know that >> Postscreen is protecting zombies/spambots that speak before its turn. >> Any tools or ways for this test? > > Turn it on, and let the zombies be your testers. > > Jan 22 00:00:53 spike postfix/postscreen[44350]: CONNECT from > [177.231.207.212]:38026 to [168.100.189.4]:25 > Jan 22 00:00:53 spike postfix/dnsblog[44354]: addr 177.231.207.212 listed by > domain zen.spamhaus.org as 127.0.0.11 > Jan 22 00:00:53 spike postfix/dnsblog[44354]: addr 177.231.207.212 listed by > domain zen.spamhaus.org as 127.0.0.3 > Jan 22 00:00:53 spike postfix/dnsblog[44354]: addr 177.231.207.212 listed by > domain zen.spamhaus.org as 127.0.0.4 > Jan 22 00:00:53 spike postfix/postscreen[44350]: PREGREET 16 after 0.69 from > [177.231.207.212]:38026: HELO bryozoann\r\n > Jan 22 00:00:54 spike postfix/postscreen[44350]: DNSBL rank 2 for > [177.231.207.212]:38026 > Jan 22 00:00:54 spike postfix/postscreen[44350]: NOQUEUE: reject: RCPT from > [177.231.207.212]:38026: 550 5.7.1 Service unavailable; client > [177.231.207.212] blocked using zen.spamhaus.org; > from=<[email protected]>, to=<[email protected]>, proto=SMTP, > helo=<bryozoann> > Jan 22 00:01:01 spike postfix/postscreen[44350]: DISCONNECT > [177.231.207.212]:38026 Wietse Venema: I'm clear that zombies/spambots is my testers. The feature DNSBL works fine. But, I'm not clear that how to know that "SMTP clients speak before its turns" by some tests? I've configured the parameter "postscreen_greet_wait = 6s" due to my goal is find out some ways to test this parameter (not the feature DNSBL that worked fine). Your example log is for the DNSBL, not for the parameter "postscreen_greet_wait", right? Regards, Thang
