Postfix

Mailcow Postfix 日誌(PASS OLD、NEW、DNSBL Rank、白名單查找)

  • August 25, 2018

我得到了這些 Postfix 資訊的組合,我想知道我是否應該知道某事/某人。

30.4.2018, 10:08:33 info    statistics: max cache size 1 at Apr 30 10:05:13
30.4.2018, 10:08:33 info    statistics: max connection count 1 for (smtpd:87.243.7.183) at Apr 30 10:05:13
30.4.2018, 10:08:33 info    statistics: max connection rate 1/60s for (smtpd:87.243.7.183) at Apr 30 10:05:13
30.4.2018, 10:05:13 info    disconnect from unknown[87.243.7.183] helo=1 auth=0/1 quit=1 commands=2/3
30.4.2018, 10:05:13 info    connect from unknown[87.243.7.183]
30.4.2018, 10:05:13 warning warning: hostname 183.7.243.87.static.primetelecom.ro does not resolve to address 87.243.7.183: Name or service not known
30.4.2018, 10:05:12 info    PASS OLD [87.243.7.183]:64492
30.4.2018, 10:05:09 info    addr 87.243.7.183 listed by domain zen.spamhaus.org as 127.0.0.4
30.4.2018, 10:05:09 info    Look up 87.243.7.183 on whitelist, result 200 DUNNO
30.4.2018, 10:05:09 info    CONNECT from [87.243.7.183]:64492 to [172.22.1.6]:25
30.4.2018, 09:56:57 info    DISCONNECT [182.176.115.31]:54308
30.4.2018, 09:56:57 info    DNSBL rank 14 for [182.176.115.31]:54308
30.4.2018, 09:56:55 info    addr 182.176.115.31 listed by domain zen.spamhaus.org as 127.0.0.4
30.4.2018, 09:56:55 info    addr 182.176.115.31 listed by domain zen.spamhaus.org as 127.0.0.11
30.4.2018, 09:56:54 info    Look up 182.176.115.31 on whitelist, result 200 DUNNO
30.4.2018, 09:56:54 info    CONNECT from [182.176.115.31]:54308 to [172.22.1.6]:25
30.4.2018, 09:51:40 info    statistics: max cache size 1 at Apr 30 09:48:20
30.4.2018, 09:51:40 info    statistics: max connection count 1 for (smtpd:87.243.7.183) at Apr 30 09:48:20
30.4.2018, 09:51:40 info    statistics: max connection rate 1/60s for (smtpd:87.243.7.183) at Apr 30 09:48:20
30.4.2018, 09:50:00 info    DISCONNECT [185.234.216.221]:59101
30.4.2018, 09:50:00 info    DNSBL rank 9 for [185.234.216.221]:59101
30.4.2018, 09:50:00 info    addr 185.234.216.221 listed by domain b.barracudacentral.org as 127.0.0.2
30.4.2018, 09:49:57 info    addr 185.234.216.221 listed by domain zen.spamhaus.org as 127.0.0.4
30.4.2018, 09:49:57 info    addr 185.234.216.221 listed by domain zen.spamhaus.org as 127.0.0.2
30.4.2018, 09:49:57 info    PREGREET 11 after 0.03 from [185.234.216.221]:59101: EHLO User\r\n
30.4.2018, 09:49:56 info    Look up 185.234.216.221 on whitelist, result 200 DUNNO
30.4.2018, 09:49:56 info    CONNECT from [185.234.216.221]:59101 to [172.22.1.6]:25
30.4.2018, 09:48:20 info    disconnect from unknown[87.243.7.183] helo=1 auth=0/1 quit=1 commands=2/3
30.4.2018, 09:48:20 info    connect from unknown[87.243.7.183]
30.4.2018, 09:48:20 warning warning: hostname 183.7.243.87.static.primetelecom.ro does not resolve to address 87.243.7.183: Name or service not known

有些部分喜歡Look up 182.176.115.31 on whitelist, result 200 DUNNOPASS OLD [87.243.7.183]:64492我不太了解。PASS OLD 或 PASS NEW 是什麼意思?我用Google搜尋它並閱讀了一些關於垃圾郵件預防的內容,但對我來說這看起來像垃圾郵件,那麼為什麼 postfix 會阻止它的 IP 呢?

看一下 postfix 的“postscreen”功能:

http://www.postfix.org/POSTSCREEN_README.html

對不同的 RBL 服務進行 RBL 檢查,以檢查發送郵件伺服器是否被稱為垃圾郵件發送者。

日誌條目顯示所有測試的DNSBL rank排名值。如果這超出postscreen_dnsbl_threshold了 主要配置的值3,則伺服器拒絕郵件,並要求發件人稍後再試。大多數垃圾郵件發送者不會這樣做,因為他們只會盡可能多地推出,而不會嘗試重新發送。

Postscreen 將記住來自特定發送伺服器的連接嘗試和接收郵件地址。

如果postscreen_dnsbl_threshold未達到,稍後的嘗試將讓郵件通過(使用 記錄它PASS NEW)。

如果伺服器在幾分鐘後重新發送郵件,postscreen 將允許它(用 記錄它PASS OLD),

引用自:https://serverfault.com/questions/909970