Generate Insight when IP is blocked by Proofpoint
Version: 2.0-RC4
Many hosts use Proofpoint blocklist, which requires manual unblocking. We should generate an insight when it happens, as well as document it in the knowledge base.
This is how a log line looks like:
Feb 16 22:10:06 mail postfix/smtp[421]: 83EE09D44A: to=<recipient@yahoo.com>, relay=mxb-00505701.gslb.pphosted.com[148.163.135.35]:25, delay=2.7, delays=1.2/0.01/1.5/0, dsn=4.0.0, status=deferred (host mxb-00505701.gslb.pphosted.com[148.163.135.35] refused to talk to me: 554 Blocked - see https://ipcheck.proofpoint.com/?ip=11.22.33.44)
This closely relates to #615, as multiple hosts use Proofpoint blocklists, including iCloud and Yahoo.
Edited by Leandro Santiago