Exempt IP/Domain from DNSBL checking

[karnz]

Hi,

Since PMG 5.x, its work with adding sender to Configuration > Mail Proxy > Whitelist

but this doesn’t work on PMG 6.1. Sender is still rejected.

Any suggestions please?

 

[Stoiko Ivanov]

please post the logs of these rejects - otherwise it's hard to see where the problem is rooted

Thanks

 

[karnz]

As barracudacentral.org is one of DNSBLs I'm using. Here's the log when receiving e-mail.

Dec 13 10:33:27 mxgw postfix/postscreen[340434]: NOQUEUE: reject: RCPT from [61.19.xx.xx]:40742: 550 5.7.1 Service unavailable; client [61.19.xx.xx] blocked using b.barracudacentral.org; from=<spcpur05@XXX.com>, to=<sale1@YYY.com>, proto=ESMTP, helo=<XXX.com>

Since PMG 5.x, I already added IP 61.19.xx.xx and also sender's domain XXX.com to "Configuration > Mail Proxy > Whitelist" and it's working until upgrading to PMG 6.x.

 

[Stoiko Ivanov]

Nothing changed in the code dealing with those whitelists in PMG between 5.x and 6.x

does the ip 61.19.xx.xx show up in the file /etc/postfix/postscreen_access?
(is the file /etc/postfix/postscreen_access.db newer than /etc/postfix/postscreen_access?)

I hope this helps!

 

[karnz]

Yes, IP 61.19.xx.xx is in that file with tag “permit” and two files have the same timestamp.
Any other place I should look for?

 

[Stoiko Ivanov]

hm - check /etc/postfix/main.cf - it needs to have the following inside:

postscreen_access_list =
        permit_mynetworks,
        cidr:/etc/postfix/postscreen_access

if this is the case there is a small chance that the .db file got corrupted - in that case run `postmap /etc/postfix/postscreen_access` and restart postfix. Also check the logs of postfix for any potential problems.

I hope this helps!