How to add *.outlook.com to whitelist

Jul 4, 2022
77
10
13
Poland
Hi.

I have a serious problem with some microsoft servers. From some of them messages are extremly delayed, I suppose this has something to do with greylist.

I've made few tests and after header analyze I noticed same message sent from one account to two different accounts on my server comes from two different xxx.protection.outlook.com servers.

I wonder if there's anyway just to add every outlook.com server to whitelist, because Who filer doesn't accept *.outlook.com

Please take a look on some other example below.

1666873415704.png

1666873600598.png

1666873785677.png
 
Last edited:
I guess you're right - the issue is that outlook uses many ip-addresses to send out its email - and that greylisting in it's default setting considers one /24 as the default network to include in a listing.

You have the following options:
* set the greylist netmask to something quite a bit higher than 24 - judging by https://learn.microsoft.com/en-us/m...rls-and-ip-address-ranges?view=o365-worldwide - maybe even set it to /14...
* disable greylisiting
* add all ip-ranges (from the link above) to the mail-proxy whitelist

see also section 4.7.6 of the reference documentation:
https://pmg.proxmox.com/pmg-docs/pmg-admin-guide.html#_mail_proxy_configuration


I hope this helps!
 
  • Like
Reactions: itret
I guess you're right - the issue is that outlook uses many ip-addresses to send out its email - and that greylisting in it's default setting considers one /24 as the default network to include in a listing.

You have the following options:
* set the greylist netmask to something quite a bit higher than 24 - judging by https://learn.microsoft.com/en-us/m...rls-and-ip-address-ranges?view=o365-worldwide - maybe even set it to /14...
* disable greylisiting
* add all ip-ranges (from the link above) to the mail-proxy whitelist

see also section 4.7.6 of the reference documentation:
https://pmg.proxmox.com/pmg-docs/pmg-admin-guide.html#_mail_proxy_configuration


I hope this helps!

Hi,
since the IP-Adresses might change and Microsoft has some very simple URLs for that - would it be possible to add a feature "add URL" to the whitelist?
As soon as one start adding some IP ranges and networks this list is getting so messy. Alternatively add at least another column Comments please :)

br