15.06.2010 21:12, Ralf Hildebrandt wrote:
* Wietse Venemawie...@porcupine.org:
More thoroughly, when I search for all IP addresses that show up
in postscreen DNSBL rank XXX records:
% egrep `awk '/DNSBL rank/ { print $NF }' /var/log/maillog | sort -u`
/var/log/maillog | grep smtpd
If I try
Ralf Hildebrandt:
This is postfix-2.8-20100610
From my log:
mail:~# fgrep 79.15.172.144 /var/log/mail.log
Jun 15 18:15:06 mail postfix/dnsblog[12235]: addr 79.15.172.144 blocked by
domain mykey.zen.dq.spamhaus.net as 127.0.0.4
Jun 15 18:15:10 mail postfix/postscreen[14995]: DNSBL rank 1
* Ralf Hildebrandt ralf.hildebra...@charite.de:
Jun 15 18:30:20 mail postfix/dnsblog[15154]: addr 79.15.172.144 blocked by
domain mykey.zen.dq.spamhaus.net as 127.0.0.4
Jun 15 18:30:24 mail postfix/postscreen[14995]: DNSBL rank 1 for 79.15.172.144
again, blacklisted, 15 minutes later.
* Ralf Hildebrandt ralf.hildebra...@charite.de:
I think it was due to me using:
postscreen_blacklist_action = drop
and no postscreen_dnsbl_action at all.
Once I set
postscreen_dnsbl_action = drop
it seems to work as intended.
--
Ralf Hildebrandt
Geschäftsbereich IT | Abteilung Netzwerk
