[Logcheck-devel] Bug#448788: postfix/postgrey: "Sender address rejected: " are not filtered out

[Justin Pryzby]

On Wed, Oct 31, 2007 at 05:42:50PM -0500, Florin Iucha wrote:
> Package: logcheck-database
> Version: 1.2.63
> Severity: important
> 
> 
> I am running postfix with postgrey for graylisting and I'm getting tons
> of :
> 
>    Oct 31 16:20:21 hermes postfix/smtpd[6778]: NOQUEUE: reject: RCPT from $HOST[$IP]: 450 4.2.0 <>: Sender address rejected: Server unavailable.  Try again later.; from=<> to=<abqnm$WHATEVER at iucha.net> proto=ESMTP  helo=<$HOST>
> 
> I am getting too many of those with an zero-length from and with
> abqnm$RANDOM_STRING as the originator, so I suspect it is some
> clever antispam or open relay testing tool.  At any rate, it is
> generating waay too much noise.
That's because the rule is:

<[^[:space:]]+>: (Sender|Recipient) address rejected:

so it seems that it should be

<[^[:space:]]*>: (Sender|Recipient) address rejected:

However it's not clear to me why the sender address is being rejected,
as <> is not only valid but required to be allowed for bounces.  I
note that postfix is using <> when I do: "mail from:>" but not giving
the "server unavailable" message (instead apparently treating it as
the null originator).

Can you confirm that DNS on the logcheck/postfix machine(s) is
working?