Unable to receive token emails from ServiceNow

reachmedia

Active Member
Jan 24, 2018
19
2
43
44
Hi, I'm experiencing some issues related to postfix/postscreen for PMG whenreceiving token emails from ServiceNow.

How do I whitelist it such that it can be received by my mail server sitting behind PMG?

The affected range of IPs are below that could be more but just the sample:

199.91.139.22 -> outbound40.service-now.com
199.91.139.23 -> outbound41.service-now.com
199.91.139.24 -> outbound42.service-now.com

The SMTP logs are below:

Actual PMG IP and Mail Server IP has been replaced.

Feb 6 21:29:51 pmg postfix/postscreen[29141]: CONNECT from [199.91.139.22]:44081 to [PMG IP]:25
Feb 6 21:29:51 pmg postfix/postscreen[29141]: warning: postscreen_access_list: non-null host address bits in "Mail Server IP", perhaps you should use "192.168.1.0/24" instead
Feb 6 21:29:51 pmg postfix/postscreen[29141]: warning: postscreen_access_list: permit_mynetworks: mynetworks lookup error -- ignoring the remainder of this access list
Feb 6 21:29:56 pmg postfix/postscreen[29141]: HANGUP after 5 from [199.91.139.22]:44081 in tests before SMTP handshake
Feb 6 21:29:56 pmg postfix/postscreen[29141]: DISCONNECT [199.91.139.22]:44081

Feb 6 09:18:04 pmg postfix/postscreen[21259]: CONNECT from [199.91.139.23]:2006 to [PMG IP]:25
Feb 6 09:18:04 pmg postfix/postscreen[21259]: warning: postscreen_access_list: non-null host address bits in "Mail Server IP", perhaps you should use "192.168.1.0/24" instead
Feb 6 09:18:04 pmg postfix/postscreen[21259]: warning: postscreen_access_list: permit_mynetworks: mynetworks lookup error -- ignoring the remainder of this access list
Feb 6 09:18:07 pmg postfix/postscreen[21259]: HANGUP after 3.2 from [199.91.139.23]:2006 in tests before SMTP handshake
Feb 6 09:18:07 pmg postfix/postscreen[21259]: DISCONNECT [199.91.139.23]:2006

Feb 6 21:27:58 pmg postfix/postscreen[29044]: CONNECT from [199.91.139.24]:30257 to [PMG IP]:25
Feb 6 21:27:58 pmg postfix/postscreen[29044]: warning: postscreen_access_list: non-null host address bits in "Mail Server IP", perhaps you should use "192.168.1.0/24" instead
Feb 6 21:27:58 pmg postfix/postscreen[29044]: warning: postscreen_access_list: permit_mynetworks: mynetworks lookup error -- ignoring the remainder of this access list
Feb 6 21:28:01 pmg postfix/postscreen[29044]: HANGUP after 3.2 from [199.91.139.24]:30257 in tests before SMTP handshake
Feb 6 21:28:01 pmg postfix/postscreen[29044]: DISCONNECT [199.91.139.24]:30257

Do advise if the below is correct?

1707248642096.png
 
Last edited:
Feb 6 21:29:51 pmg postfix/postscreen[29141]: warning: postscreen_access_list: non-null host address bits in "Mail Server IP", perhaps you should use "192.168.1.0/24" instead
this is the hint- I assume you have listed 192.168.1.X/24 (where X is not 0) - just follow the hint in the logs and change that to 192.168.1.0/24

also the regular expression should be '.*\.service-now\.com' (there are quite many tutorials on regular expressions on the internet)

I hope this helps!