Quantcast
Channel: iRedMail — iRedMail Support
Viewing all articles
Browse latest Browse all 12095

SMTP Auth 4.7.1 Recipient Address rejected, Greylisting

$
0
0

======== Required information ====
- iRedMail version: 0.8.7
- Store mail accounts in which backend (LDAP/MySQL/PGSQL): MySql
- Linux/BSD distribution name and version: Debian Wheezy 7.6
- Related log if you're reporting an issue:
====

- Sender and Receiver are hosted on iRedMail (Test Accounts)
- rolf@testzone.ch sends an email trough SMTP Auth (587) to rolf@newmail.samplezone.ch
- while sending email a message pops up in Thunderbird telling me "451 4.7.1 <rolf@newmail.samplezone.ch>: Recipient address rejected: Greylisting in effect, please come back late"

- mail.log shows:

Oct 14 10:40:09 test cbpolicyd[27100]: module=Greylisting, action=defer, host=xx.202.195.xx, helo=[10.10.10.180], from=rolf@testzone.ch, to=rolf@newmail.samplezone.ch, reason=greylisted
Oct 14 10:40:09 test postfix/smtpd[17360]: NOQUEUE: reject: RCPT from xx_202_195_xx.inet.ezbase.net[xx.202.195.xx]: 451 4.7.1 <rolf@newmail.samplezone.ch>: Recipient address rejected: Greylisting in effect, please come back later; from=<rolf@testzone.ch> to=<rolf@newmail.samplezone.ch> proto=ESMTP helo=<[xx.xx.xx.xx]>

When I inspect postfix/main.cf there is a configuration for smtpd_recipient_restrictions:

smtpd_recipient_restrictions = reject_unknown_sender_domain, reject_unknown_recipient_domain, reject_non_fqdn_sender, reject_non_fqdn_recipient, reject_unlisted_recipient, check_policy_service inet:127.0.0.1:7777, check_policy_service inet:127.0.0.1:10031, permit_mynetworks, permit_sasl_authenticated, reject_unauth_destination

I wonder if it's better to set permit_sasl_authenticated bevor check_policy_service like this:

smtpd_recipient_restrictions = reject_unknown_sender_domain, reject_unknown_recipient_domain, reject_non_fqdn_sender, reject_non_fqdn_recipient, reject_unlisted_recipient, permit_sasl_authenticated, check_policy_service inet:127.0.0.1:7777, check_policy_service inet:127.0.0.1:10031, permit_mynetworks, reject_unauth_destination

I tested this change and it seems to work? I might be wrong and my second attempt was accepted by greylisting.


Viewing all articles
Browse latest Browse all 12095

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>