Graylisting

[JbS]

Hi there,
We are encounting problems with system-Emails sent to the Gateway. One time it works and an other time I get following errorss in the log:
"
postfix/anvilstatistics: max message rate 1/60s for
(xxxx:yyyy) at Aug 31 15:38:58Aug 31 15:45:28postfix/anvilstatistics: max connection count 1 for
(xxxx:yyyy) at Aug 31 15:38:58Aug 31 15:45:28postfix/anvilstatistics: max connection rate 1/60s for
(xxxx:yyyy) at Aug 31 15:38:58"


At the same time I find the E-Mail in the Graylist.

1. What do the Log-Messages meen?
2. I haven't understood what a graylist ist. Or which checkst lead an e-mail to be on the graylist?

Thanks

 

[tom]

Hi there,
We are encounting problems with system-Emails sent to the Gateway. One time it works and an other time I get following errorss in the log:
"
postfix/anvilstatistics: max message rate 1/60s for
(xxxx:yyyy) at Aug 31 15:38:58Aug 31 15:45:28postfix/anvilstatistics: max connection count 1 for
(xxxx:yyyy) at Aug 31 15:38:58Aug 31 15:45:28postfix/anvilstatistics: max connection rate 1/60s for
(xxxx:yyyy) at Aug 31 15:38:58"


At the same time I find the E-Mail in the Graylist.

1. What do the Log-Messages meen?
2. I haven't understood what a graylist ist. Or which checkst lead an e-mail to be on the graylist?

Thanks

hi,
this is not an error message, just a info about a postfix connection daemon.

greylisting - short description:
http://www.proxmox.com/cms_proxmox/cms/front_content.php?client=1&lang=1&idcat=22

 

[JbS]

Hi tom,
Thanks for the link!
So we have the problem that our Firewall does not resend the Report and as such the graceperiod of the graylist is reached before the next one (24h) comes.
Does that meen I have to whitelist the triplet?
That brings me to a 2nd question? As all the mail traffic comes from the same firewall as the report the last IP would be it's IP-Address. I take it that that will not be recognised as sender-IP in the graylist, as this would mean every mail would come from that IP. Correct?

best regards

J-B

 

[tom]

Hi tom,
Thanks for the link!
So we have the problem that our Firewall does not resend the Report and as such the graceperiod of the graylist is reached before the next one (24h) comes.
Does that meen I have to whitelist the triplet?
That brings me to a 2nd question? As all the mail traffic comes from the same firewall as the report the last IP would be it's IP-Address. I take it that that will not be recognised as sender-IP in the graylist, as this would mean every mail would come from that IP. Correct?

best regards

J-B

hi,

The resend is specified in RFC specifications, all smtp server should work like this.

your firewall should not change the sender IP address of the tcp packets - depends on your firewall (and settings) - please check this.

If you have to use this setting for some reason, you have to disable greylisting (Configuration/Mail Proxy/Options).