HowtoForge Forums | HowtoForge - Linux Howtos and Tutorials - postgrey

HowtoForge Forums | HowtoForge - Linux Howtos and Tutorials (http://www.howtoforge.com/forums/index.php)

- Server Operation (http://www.howtoforge.com/forums/forumdisplay.php?f=5)

- - postgrey - postfix greylisting (http://www.howtoforge.com/forums/showthread.php?t=58819)

postgrey - postfix greylisting

Hi everyone,

I'm trying to figure out why postgrey is rejecting incoming mail...

From the syslog:

Sep 21 16:12:24 mail postfix/smtpd[31224]: connect from mail.ncf.ca[134.117.136.45]
Sep 21 16:12:24 mail dovecot: auth: Debug: Loading modules from directory: /usr/lib/dovecot/modules/auth
Sep 21 16:12:24 mail dovecot: auth: Debug: Module loaded: /usr/lib/dovecot/modules/auth/libdriver_mysql.so
Sep 21 16:12:24 mail dovecot: auth: Debug: auth client connected (pid=31224)
Sep 21 16:12:24 mail postfix/smtpd[31224]: Anonymous TLS connection established from mail.ncf.ca[134.117.136.45]: TLSv1 with cipher ADH-AES256-SHA (256/256 bits)
Sep 21 16:12:25 mail postgrey[1519]: action=greylist, reason=new, client_name=mail.ncf.ca, client_address=134.117.136.45, sender=nospam@ncf.ca, recipient=test@comingtoatheatrenearyou.com
Sep 21 16:12:25 mail postfix/smtpd[31224]: NOQUEUE: reject: RCPT from mail.ncf.ca[134.117.136.45]: 450 4.2.0 <test@comingtoatheatrenearyou.com>: Recipient address rejected: Greylisted, see http://postgrey.schweikert.ch/help/c...ryou.com.html; from=<nospam@ncf.ca> to=<test@comingtoatheatrenearyou.com> proto=ESMTP helo=<mail.ncf.ca>
Sep 21 16:12:25 mail postfix/smtpd[31224]: disconnect from mail.ncf.ca[134.117.136.45]

Any help greatly appreciated.

Quote:

"Greylisting is a method of defending email users against spam. A mail transfer agent (MTA) using greylisting will "temporarily reject" any email from a sender it does not recognize. If the mail is legitimate the originating server will, after a delay, try again and, if sufficient time has elapsed, the email will be accepted."

Your log is ok

How interesting... so it's a temporary delay presumably because most spammers won't try several times. I wonder how long the delay is?

Default delay is 5 minutes. You can change it in /etc/default/postgrey

Cheers

I lowered the default to 60 by adjusting hte POSTGREY_OPTS for debugging purposes.

Oh and the missing /etc/var/mail.log was an error on my part. I recreated it with the appropriate chmod switch and postfix is now writing to the mail.log as it should.

I am actually able to send mail out now from the domain to other addresses, and I know mail is arriving as it's shown in the log but, of course, I'm just not quite sure where to look for it... presumably somewhere via mysql.

I thought the "mail" command would show it to me but no such luck.

There is some more progress on the project and I thank you again for your input.