Disable filter 1 level checks selectively

jors

Member
Apr 10, 2012
21
2
23
Hi there,

We know that Proxmox Mail Gateway has a 1st level of SMTP checks (before reaching 2nd leven Mail Filters/antispam rules) like the following:
  • Greylisting
  • SPF
  • RBL (at SMTP level)
  • Reiceiver Verification (on SMTP level)
And that they can be all disabled -in bulk- by adding some e-mail/domain/ip address at Configuration -> Mail Proxy -> Whitelist. But we would like to know if we can disable only one or two of them selectively.

The reason to ask this is that when some big providers (Gmail, Outlook) send mail to destinations with Proxmox Mail Gateway as MX filter, greylist delays the delivery of some messages for up to 1 hour. We guess this is because big providers have lots of SMTP host and when delivery is being delayed because of greylisting (or any other temporary 4xx reason), they try the delivery some time later through another ip address. Does Proxmox Mail Gateway has any big-providers SMTP database to avoid this hassle?

Thanks for any help.

Kind regards.
 
currently this is not possible (and I would also not want to introduce 4 further places where certain ips/mailaddresses/domains can be whitelisted)

However we recently added the option to set a netmask for greylisting (telling PMG which hosts should be allowed if one of their neighbors tried before) That should address the issue you're describing with Gmail, Outlook -> just set the netmask a bit larger (default and current implementation) is '/24' -> try with '/19')

I hope this helps!
 
currently this is not possible (and I would also not want to introduce 4 further places where certain ips/mailaddresses/domains can be whitelisted)

However we recently added the option to set a netmask for greylisting (telling PMG which hosts should be allowed if one of their neighbors tried before) That should address the issue you're describing with Gmail, Outlook -> just set the netmask a bit larger (default and current implementation) is '/24' -> try with '/19')

I hope this helps!

Hi Stoiko,

Thanks for your reply. Where and how we do that? Cannot see any place in the webgui to define any kind of greylisting configuration other than the possibility to enable/disable it.

Kind regards.
 
Last edited:
Thanks for your reply. Where and how we do that? Cannot see any place in the webgui to define any kind of greylisting configuration other than the possibility to enable/disable it.
sorry - did not paste the link to the mailing-list - it just got applied yesterday ;)

however package-versions with the patch applied (pmg-api >= 6.1-9, pmg-gui >= 2.1-6) are available (since today) in the pmgtest repository.

If you try it please let us know how it works for you!

Thanks!
 
sorry - did not paste the link to the mailing-list - it just got applied yesterday ;)

however package-versions with the patch applied (pmg-api >= 6.1-9, pmg-gui >= 2.1-6) are available (since today) in the pmgtest repository.

If you try it please let us know how it works for you!

Thanks!

Hi Stoiko, it is a production environment, so no possibility to test it. We will wait for the patch to reach stable, thank you.

Kind regards.
 

About

The Proxmox community has been around for many years and offers help and support for Proxmox VE, Proxmox Backup Server, and Proxmox Mail Gateway.
We think our community is one of the best thanks to people like you!

Get your subscription!

The Proxmox team works very hard to make sure you are running the best software and getting stable updates and security enhancements, as well as quick enterprise support. Tens of thousands of happy customers have a Proxmox subscription. Get yours easily in our online shop.

Buy now!