Results 1 to 8 of 8

Thread: rejected and warnings

  1. #1
    Join Date
    Apr 2012
    Posts
    13
    Rep Power
    3

    Default rejected and warnings

    Hello! Zimbra and you all users and administrators moderators, opened my first post:

    dated 20.04.2012 Friday we noticed in the daily report rejected:
    Daily Mail Report for 4/20/2012 / 1395 rejected (51%)
    Daily Mail Report for 4/21/2012 / 7395 rejected (91%)
    Daily Mail Report for 4/22/2012 / 4395 rejected (87%)
    Daily Mail Report for 4/23/2012 / 5910 rejected (76%)


    daily warning: is
    Warnings
    --------
    21.04.2012 / smtpd (total: 1801)
    22.04.2012 / smtpd (total: 1476)
    23.04.2012 / smtpd (total: 1942)

    My questions:
    A. how to reduce the emails that are rejected
    Two. how to reduce, from those who want to authenticate.

    a good week!

  2. #2
    phoenix is offline Zimbra Consultant & Moderator
    Join Date
    Sep 2005
    Location
    Vannes, France
    Posts
    23,587
    Rep Power
    58

    Default

    Why do you think that the rejected email is a problem? That doesn't really tell us anything about your server nor why those emails have been rejected, they could have been rejected because they are 'known' spammer and on an RBL.
    Regards


    Bill


    Acompli: A new adventure for Co-Founder KevinH.

  3. #3
    Join Date
    Apr 2012
    Posts
    13
    Rep Power
    3

    Default

    are not rejected as spam authentication and verification
    is normally understand, not to reduce the warnings?
    give you an example:

    Thank you for your prompt response.


    smtpd (total: 753)
    448 unknown[122.155.18.140]: SASL LOGIN authentication failed: auth...
    124 network_biopair_interop: error reading 5 bytes from the network...
    56 SASL authentication failure: Password verification failed
    13 82.76.70.10: hostname 82-76-70-10.rdsnet.ro verification failed...
    7 vm0260.cs04.seeweb.it[85.94.209.226]: SASL PLAIN authentication...
    7 mail.dorholding.com[78.93.203.22]: SASL PLAIN authentication fa...
    6 unknown[82.212.73.3]: SASL PLAIN authentication failed: authent...
    5 91.206.206.26: address not listed for hostname web6.hostingweb.ro
    4 unknown[83.96.46.34]: SASL PLAIN authentication failed: authent...
    4 unknown[83.111.253.81]: SASL PLAIN authentication failed: authe...
    3 host117-17-static.29-79-b.business.telecomitalia.it[79.29.17.11...
    3 unknown[2.50.162.124]: SASL PLAIN authentication failed: authen...
    3 unknown[62.150.73.194]: SASL PLAIN authentication failed: authe...
    3 mail-ish-online.de[62.109.82.194]: SASL PLAIN authentication fa...
    3 75-146-255-149-Philadelphia.hfc.comcastbusiness.net[75.146.255....
    2 187.126.163.101: hostname 187126163101.user.veloxzone.com.br ve...
    2 74-131-244-112.dhcp.insightbb.com[74.131.244.112]: SASL PLAIN a...
    2 93.114.65.121: address not listed for hostname mail.publicshare.ro
    2 86.125.23.133: hostname static-86-125-23-133.rdsnet.ro verifica...
    2 94.53.26.134: hostname 94-53-26-134.next-gen.ro verification fa...
    2 81.12.176.18: address not listed for hostname mobifin.ro

  4. #4
    phoenix is offline Zimbra Consultant & Moderator
    Join Date
    Sep 2005
    Location
    Vannes, France
    Posts
    23,587
    Rep Power
    58

    Default

    They are being rejected for various checks that are being performed by the server, you need to look in the Admin UI and see what settings you have enabled. If that's what's causing the problem you should take time to read and understand what the implications are in setting or removing those options. To an internet search about those settings to get some more detail on their usage.
    Regards


    Bill


    Acompli: A new adventure for Co-Founder KevinH.

  5. #5
    Join Date
    Apr 2012
    Posts
    13
    Rep Power
    3

    Default

    hello, the restrictions we have:

    zimbraMtaRestriction: reject_invalid_hostname
    zimbraMtaRestriction: reject_non_fqdn_hostname
    zimbraMtaRestriction: reject_non_fqdn_sender
    zimbraMtaRestriction: reject_rbl_client dnsbl.njabl.org
    zimbraMtaRestriction: reject_rbl_client cbl.abuseat.org
    zimbraMtaRestriction: reject_rbl_client bl.spamcop.net
    zimbraMtaRestriction: reject_rbl_client dnsbl.sorbs.net
    zimbraMtaRestriction: reject_rbl_client sbl.spamhaus.org
    zimbraMtaRestriction: reject_rbl_client relays.mail-abuse.org
    zimbraMtaRestriction: reject_rbl_client zen.spamhaus.org

    have to add another filter? to reduce the connections rejected and warnings?

    I can count to enable:
    Log /TLS authentification only

    DNS checks have not enabled options:

    Client's IP address (reject_unknown_client)
    Hostname in greeting (reject_unknown_hostname)
    Sender's Domain (reject_unknown_sender_domain)

  6. #6
    phoenix is offline Zimbra Consultant & Moderator
    Join Date
    Sep 2005
    Location
    Vannes, France
    Posts
    23,587
    Rep Power
    58

    Default

    Quote Originally Posted by kalculator View Post
    hello, the restrictions we have:

    zimbraMtaRestriction: reject_invalid_hostname
    zimbraMtaRestriction: reject_non_fqdn_hostname
    zimbraMtaRestriction: reject_non_fqdn_sender
    zimbraMtaRestriction: reject_rbl_client dnsbl.njabl.org
    zimbraMtaRestriction: reject_rbl_client cbl.abuseat.org
    zimbraMtaRestriction: reject_rbl_client bl.spamcop.net
    zimbraMtaRestriction: reject_rbl_client dnsbl.sorbs.net
    zimbraMtaRestriction: reject_rbl_client sbl.spamhaus.org
    zimbraMtaRestriction: reject_rbl_client relays.mail-abuse.org
    zimbraMtaRestriction: reject_rbl_client zen.spamhaus.org
    You also have too many RBLs listed there, you only need three (or four) at most and they should be listed in order of most effective first.

    Quote Originally Posted by kalculator View Post
    DNS checks have not enabled options:
    Yes you have:

    Code:
    zimbraMtaRestriction: reject_invalid_hostname
    zimbraMtaRestriction: reject_non_fqdn_hostname
    zimbraMtaRestriction: reject_non_fqdn_sender
    You really need to look in the log files to see why those connections are rejected.
    Regards


    Bill


    Acompli: A new adventure for Co-Founder KevinH.

  7. #7
    Join Date
    Apr 2012
    Posts
    13
    Rep Power
    3

    Default

    hello! so you have to reduce the spamm filters.
    which are best suited, or the current, or to put others?.

    So the DNS options to activate and the 3 options.
    This can eliminate the warnings, verification / authentication server?

    I can look in log files, and send some in detail.

    Thanks, a good day!

  8. #8
    Join Date
    Apr 2012
    Posts
    13
    Rep Power
    3

    Default

    finally understand that they can not reduce warnings smtp authentication and verification as are those who have been rejected ... various reasons such as:

    NOQUEUE: reject: RCPT from unknown
    Helo command rejected: Need Fully ualified hostname;

    etc ...

Tags for this Thread

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •