the threshold is at default, so 1. but the dns timeout, Wietse mentioned, might be the real cause. gonna check manuals, if this is configurable.
Thank you. Am Mittwoch, 19. Dezember 2018 schrieb Viktor Dukhovni < postfix-us...@dukhovni.org>: > On Wed, Dec 19, 2018 at 02:00:34PM +0100, Stefan Bauer wrote: > >> Dec 19 13:04:36 mx1 postfix/postscreen[4770]: CONNECT from >> [209.85.166.196]:52168 to [public-ip]:25 >> Dec 19 13:04:42 mx1 postfix/dnsblog[4774]: addr 209.85.166.196 listed by >> domain dnsbl.sorbs.net as 127.0.0.6 >> Dec 19 13:04:42 mx1 postfix/postscreen[4770]: PASS NEW >> [209.85.166.196]:52168 >> Dec 19 13:04:42 mx1 postfix/smtpd[4778]: connect from >> mail-it1-f196.google.com[209.85.166.196] >> >> why did google pass postscreen even though its listed in one of the RBL? >> >> postscreen_dnsbl_sites = zen.spamhaus.org*2 bl.spamcop.net*1 >> b.barracudacentral.org*1 dnsbl.sorbs.net*1 >> postscreen_blacklist_action = drop >> postscreen_dnsbl_action = enforce >> >> Am i missing something obvious? > > What is the minimum weight you require for an RBL block? The sorbs > RBL has weight 1, perhaps you require 2 or more. > > http://www.postfix.org/postconf.5.html#postscreen_dnsbl_threshold > > You've not posted your complete "postconf -n" output, so it is all > conjectural. > > -- > Viktor. >
