Results 1 to 9 of 9

Thread: Problems with Greylisting: mails gets rejected

  1. #1
    Join Date
    Feb 2009
    Location
    Lecco, Italy
    Posts
    554
    Rep Power
    7

    Default Problems with Greylisting: mails gets rejected

    Hi.

    I'm trying to set up Greylisting as per the wiki:
    Improving Anti-spam system - Zimbra :: Wiki
    looks quite easy to, do, but I'm having troubles.

    When I set up Zimbra to use postgrey, mails are rejected like when the user is not found, so they are not retried!

    In logs I see this (hosts and ips masked)
    Code:
    postfix/smtp[18539]: 8A4857FC82: to=<maxxer@fake.com>, relay=none, delay=587, delays=566/0.01/21/0, dsn=4.4.1, 
    status=deferred (connect to testzimbra[1.1.1.1]:25: Connection timed out)
    postgrey[4708]: action=greylist, reason=new, client_name=posta.myserver.it, client_address=1.1.1.1, sender=maxxer@fake,com, recipient=admin@ubuntu10.ufficyo.com
    postfix/smtpd[12382]: NOQUEUE: reject: RCPT from posta.myserver.it[10.6.1.1]: 450 4.2.0 <admin@ubuntu10.ufficyo.com>: Recipient address rejected: Greylisted, see http://postgrey.schweikert.ch/help/ubuntu10.ufficyo.com.html; from=<my@testdomain.it> to=<admin@ubuntu10.ufficyo.com> proto=ESMTP helo=<posta.myserver.it>
    but then I get to the sender a mail saying mailbox does not exists!
    In my /opt/zimbra/conf/postfix_recipient_restrictions.cf I have
    Code:
    %%contains VAR:zimbraServiceEnabled cbpolicyd, check_policy_service inet:127.0.0.1:10031%%
    reject_non_fqdn_recipient
    permit_sasl_authenticated
    permit_mynetworks
    reject_unauth_destination
    reject_unlisted_recipient
    check_policy_service inet:127.0.0.1:10023
    %%contains VAR:zimbraMtaRestriction reject_invalid_hostname%%
    %%contains VAR:zimbraMtaRestriction reject_non_fqdn_hostname%%
    %%contains VAR:zimbraMtaRestriction reject_non_fqdn_sender%%
    %%contains VAR:zimbraMtaRestriction reject_unknown_client%%
    %%contains VAR:zimbraMtaRestriction reject_unknown_hostname%%
    %%contains VAR:zimbraMtaRestriction reject_unknown_sender_domain%%
    %%explode reject_rbl_client VAR:zimbraMtaRestrictionRBLs%%
    %%contains VAR:zimbraMtaRestriction check_policy_service unix:private/policy%%
    (port is fine, as i'm on ubuntu).

    what's wrong?
    thanks
    YetOpen S.r.l. ~ Your open source partner
    Lecco (LC) - ITALY
    http://www.yetopen.it

  2. #2
    Join Date
    Sep 2011
    Posts
    17
    Rep Power
    4

    Default

    Hi Maxxer

    I am also having the same problem.
    Has solved?

    Thanks

  3. #3
    Join Date
    Feb 2009
    Location
    Lecco, Italy
    Posts
    554
    Rep Power
    7

    Default

    no I never solved, I had to remove greylisting, never had time to investigate more
    YetOpen S.r.l. ~ Your open source partner
    Lecco (LC) - ITALY
    http://www.yetopen.it

  4. #4
    Join Date
    Sep 2011
    Posts
    17
    Rep Power
    4

    Default

    Ok I'll keep searching.
    Any new share the resolution

    thank you

  5. #5
    Join Date
    Oct 2005
    Location
    USA, Canada and India
    Posts
    777
    Rep Power
    11

    Default

    i dont think policyD is ready to be used in current version of zimbra..i may be wrong.
    what i know is the ORDER in which the line
    %%contains VAR:zimbraServiceEnabled cbpolicyd, check_policy_service inet:127.0.0.1:10031%%
    appears in the main thing.
    in my personal policyd setting outside of zimbra i put below few lines and then i had to change some code to make it work properly as i liked.

    from this implementation of zimbra your SMTP AUTH will get greylisted..as policy line is on top of
    permit_sasl_authenticated

    Raj
    i2k2 Networks
    Dedicated & Shared Zimbra Hosting Provider

  6. #6
    Join Date
    Sep 2011
    Posts
    17
    Rep Power
    4

    Default

    Quote Originally Posted by raj View Post
    i dont think policyD is ready to be used in current version of zimbra..i may be wrong.
    what i know is the ORDER in which the line
    %%contains VAR:zimbraServiceEnabled cbpolicyd, check_policy_service inet:127.0.0.1:10031%%
    appears in the main thing.
    in my personal policyd setting outside of zimbra i put below few lines and then i had to change some code to make it work properly as i liked.

    from this implementation of zimbra your SMTP AUTH will get greylisted..as policy line is on top of
    permit_sasl_authenticated

    Raj
    Hi Raj

    I changed the order as said.
    I'm still the same problem.

    When I create a new account to receive the first time the other domains prevents Greylist.

    action = Greylist, reason = new
    Recipient address rejected: Greylisted, see Postgrey Help

    Order postfix_recipient_restrictions.cf
    %% contains VAR: zimbraServiceEnabled cbpolicyd, check_policy_service inet: 127.0.0.1:10031%%
    reject_non_fqdn_recipient
    permit_mynetworks
    check_policy_service inet: 127.0.0.1:60000
    permit_sasl_authenticated
    reject_unauth_destination
    reject_unlisted_recipient
    %% contains VAR: zimbraMtaRestriction reject_invalid_hostname%%
    %% contains VAR: zimbraMtaRestriction reject_non_fqdn_hostname%%
    %% contains VAR: zimbraMtaRestriction reject_non_fqdn_sender%%
    %% contains VAR: zimbraMtaRestriction reject_unknown_client%%
    %% contains VAR: zimbraMtaRestriction reject_unknown_hostname%%
    %% contains VAR: zimbraMtaRestriction reject_unknown_sender_domain%%
    explodes reject_rbl_client%% VAR:%% zimbraMtaRestrictionRBLs
    %% contains VAR: zimbraMtaRestriction check_policy_service unix: private / policy%%
    permit

    Any idea?

    Thanks
    Robson

  7. #7
    Join Date
    Sep 2011
    Posts
    17
    Rep Power
    4

    Default

    Any idea? Please

  8. #8
    Join Date
    Apr 2011
    Posts
    7
    Rep Power
    4

    Default

    I know it is an old thread, but if someone is looking for the answer:

    1. Fix sending mail from web interface:
    - put following lines in your postgrey_whitelist_clients.local (usually found in /etc/postfix)
    Code:
        localhost
        <your IP address>
        < your host name>

    2. Fix for sending with clients (thunderbird, outlook.......)
    - in file postfix_recipient_restrictions.cf (found in /opt/zimbra/conf/zmconfigd or /opt/zimbra/postfix/conf) is important the order of entries:
    Code:
    %%contains VAR:zimbraServiceEnabled cbpolicyd, check_policy_service inet:localhost:@@cbpolicyd_bind_port@@%%
    reject_non_fqdn_recipient
    permit_sasl_authenticated
    permit_mynetworks
    check_policy_service inet:127.0.0.1:60000
    reject_unauth_destination
    reject_unlisted_recipient
    %%contains VAR:zimbraMtaRestriction reject_invalid_helo_hostname%%
    %%contains VAR:zimbraMtaRestriction reject_non_fqdn_helo_hostname%%
    %%contains VAR:zimbraMtaRestriction reject_non_fqdn_sender%%
    %%contains VAR:zimbraMtaRestriction reject_unknown_client_hostname%%
    %%contains VAR:zimbraMtaRestriction reject_unknown_helo_hostname%%
    %%contains VAR:zimbraMtaRestriction reject_unknown_sender_domain%%
    %%explode reject_rbl_client VAR:zimbraMtaRestrictionRBLs%%
    %%contains VAR:zimbraMtaRestriction check_policy_service unix:private/policy%%
    permit
    Last edited by kontrabant; 10-05-2012 at 03:36 AM.

  9. #9
    Join Date
    Oct 2009
    Location
    China
    Posts
    34
    Rep Power
    6

    Default

    Nothing you need do. Just wait for a moment.
    "450 4.2.0 <admin@ubuntu10.ufficyo.com>: Recipient address rejected: Greylisted, see....."

    As you know, the error code 450 means an error temporary. The smtp server will try to send it later.
    Just do it.
    覧覧覧覧覧覧覧
    QQ:307741085
    Email:fine@zcsmail.com

Similar Threads

  1. [SOLVED] Send mails to MTAs using greylisting
    By rouven in forum Administrators
    Replies: 10
    Last Post: 01-20-2011, 09:51 AM
  2. Problems while sending mails
    By tegyat in forum Administrators
    Replies: 6
    Last Post: 03-11-2008, 09:27 AM
  3. [SOLVED] Problems with Mails queue
    By danny.sierra@omtech.net in forum Administrators
    Replies: 3
    Last Post: 02-08-2008, 08:00 PM
  4. Still problems with snet mails in imap accounts
    By chh in forum Zimbra Connector for Outlook
    Replies: 3
    Last Post: 01-08-2007, 09:26 AM
  5. Replies: 2
    Last Post: 04-17-2006, 04:12 PM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •