HANGUPs beim postscreen

Achim Lammerts ml-pbu at syntaxys.de
Mi Apr 27 10:20:27 CEST 2022


Guten Morgen Liste,
im Log finde ich immer wieder Einträge von neuen Verbindungen, die es 
nicht am postscreen vorbei schaffen und ich versuche zu verstehen, woran 
das liegt. Nach 5-6 Sekunden geben die einliefernden MTAs auf, obwohl 
sie eine Freigabe zum smtpd erhalten. Oder interpretiere ich das falsch?

Apr 27 09:14:16 host postfix/postscreen[73824]: connection established 
fd 128
Apr 27 09:14:16 host postfix/postscreen[73824]: master_notify: status 0
Apr 27 09:14:16 host postfix/postscreen[73824]: psc_endpt_lookup_done: 
sq=0 cq=0 connect from [41.139.0.81]:54218
Apr 27 09:14:16 host postfix/postscreen[73824]: CONNECT from 
[41.139.0.81]:54218 to [a.b.c.d]:25
Apr 27 09:14:16 host postfix/postscreen[73824]: 
source=postscreen_access_list address=41.139.0.81 acl=permit_mynetworks
Apr 27 09:14:16 host postfix/postscreen[73824]: match_hostaddr: 
postscreen_access_list: 41.139.0.81 ~? 127.0.0.0/8
Apr 27 09:14:16 host postfix/postscreen[73824]: match_hostaddr: 
postscreen_access_list: 41.139.0.81 ~? 192.168.0.0/16
Apr 27 09:14:16 host postfix/postscreen[73824]: match_hostaddr: 
postscreen_access_list: 41.139.0.81 ~? a.b.c.d
Apr 27 09:14:16 host postfix/postscreen[73824]: match_hostaddr: 
postscreen_access_list: 41.139.0.81 ~? [::ffff:127.0.0.0]/104
Apr 27 09:14:16 host postfix/postscreen[73824]: match_hostaddr: 
postscreen_access_list: 41.139.0.81 ~? [::1]/128
Apr 27 09:14:16 host postfix/postscreen[73824]: match_hostaddr: 
postscreen_access_list: 41.139.0.81 ~? [aa:bb:cc:dd::1]
Apr 27 09:14:16 host postfix/postscreen[73824]: match_list_match: 
41.139.0.81: no match
Apr 27 09:14:16 host postfix/postscreen[73824]: 
source=postscreen_access_list address=41.139.0.81 - no match
Apr 27 09:14:16 host postfix/postscreen[73824]: dict_cache_lookup: 
key=41.139.0.81 value=(not found)
Apr 27 09:14:16 host postfix/postscreen[73824]: psc_endpt_lookup_done: 
new + recent flags: NEW|PREGR_TODO
Apr 27 09:14:16 host postfix/postscreen[73824]: match_hostaddr: 
postscreen_whitelist_interfaces: a.b.c.d ~? static:all(0,lock|utf8_request)
Apr 27 09:14:16 host postfix/postscreen[73824]: > [41.139.0.81]:54218: 
220-host.domain.tld ESMTP Postfix
Apr 27 09:14:16 host postfix/postscreen[73824]: psc_early_tests: 
read-request fd=128
Apr 27 09:14:16 host postfix/postscreen[73824]: master_notify: status 1
Apr 27 09:14:16 host postfix/postscreen[73824]: watchdog_start: 
0x55fa03b257d0
Apr 27 09:14:19 host postfix/postscreen[73824]: watchdog_event: 
0x55fa03b257d0 0
Apr 27 09:14:19 host postfix/postscreen[73824]: watchdog_start: 
0x55fa03b257d0
Apr 27 09:14:19 host postfix/postscreen[73824]: watchdog_start: 
0x55fa03b257d0
Apr 27 09:14:21 host postfix/postscreen[73824]: psc_early_event: sq=0 
cq=1 event 1 on smtp socket 128 from [41.139.0.81]:54218 
flags=NEW|PREGR_TODO
Apr 27 09:14:21 host postfix/postscreen[73824]: psc_early_event: 
clear-request fd=128
Apr 27 09:14:21 host postfix/postscreen[73824]: HANGUP after 5.2 from 
[41.139.0.81]:54218 in tests before SMTP handshake
Apr 27 09:14:21 host postfix/postscreen[73824]: flags for psc_conclude: 
NOFORWARD|NEW|HANGUP|PREGR_TODO
Apr 27 09:14:21 host postfix/postscreen[73824]: DISCONNECT 
[41.139.0.81]:54218
Apr 27 09:14:21 host postfix/postscreen[73824]: connection closed fd 128

Scheinbar passiert das wohl nur bei Spamhosts, bei erwünschten Mails ist 
mir noch nichts aufgefallen. Ist hier eine generelle Einstellung in der 
Konfiguration erforderlich? Wo entsteht diese Verzögerung?

Vielen Dank für Euer Feedback!
Achim

-- 
Wietse, I am so grateful.


Mehr Informationen über die Mailingliste Postfixbuch-users