Greylist durability

[haiberg]

Hi there,

I have two Questions:
We have enabled Greylisting, but sometimes it needs a very long time till a mail will be delivered.
I found in another Tread, that there is a time period from 5 Minutes up to 4 Hours. Is there any chance to change this period?

2. Will Domains also exclude if they are list in the User Whitlist or just if they are list in Global Whitelist?

Thanks for your answer
Regards
Basti

 

[dietmar]

I have two Questions:
We have enabled Greylisting, but sometimes it needs a very long time till a mail will be delivered.
I found in another Tread, that there is a time period from 5 Minutes up to 4 Hours. Is there any chance to change this period?

Resending the mail is done at the sender - so you cant influence that period.

2. Will Domains also exclude if they are list in the User Whitlist or just if they are list in Global Whitelist?

No, only domains in the SMTP whitelist are exclused (Configuration/MailProxy/Whitelist).

- Dietmar

 

[haiberg]

Thanks for your quick answer.

But a Mail, which is delievered after greylisting should be delivered next without greylisting, right?

We have special situation.

A mail, which is Greylisted, was delivered after 7 tries (03:33pm, 15:39pm, 3:39pm, 4:33pm, 5:19pm, 5:23pm; 5:30pm=greylisted 5:50pm=delivered) from the Sending mailserver.

half an hour later a mail from the same email adress is also greylisted(6:19pm) and delivered (10:39pm) after 2 tries (7:33pm, 8:59pm)
one day later the same.

Why there are so many tries?

I know, that mail who passed the Greylist, that there is an entry in the Greylistdatabase (hold for 2 days?)

Is it possible to expand the database, that the entries will be hold for exampel fo 5 days and why needs the sending mailserver so many tries till the mail will be delivered?

in attachement there are the logs from the mails

 

[tom]

Thanks for your quick answer.

But a Mail, which is delievered after greylisting should be delivered next without greylisting, right?

We have special situation.

A mail, which is Greylisted, was delivered after 7 tries (03:33pm, 15:39pm, 3:39pm, 4:33pm, 5:19pm, 5:23pm; 5:30pm=greylisted 5:50pm=delivered) from the Sending mailserver.

half an hour later a mail from the same email adress is also greylisted(6:19pm) and delivered (10:39pm) after 2 tries (7:33pm, 8:59pm)
one day later the same.

Why there are so many tries?

I know, that mail who passed the Greylist, that there is an entry in the Greylistdatabase (hold for 2 days?)

Is it possible to expand the database, that the entries will be hold for exampel fo 5 days and why needs the sending mailserver so many tries till the mail will be delivered?

in attachment there are the logs from the mails

based on your logs, the sender uses multiple servers for sending, therefore he gets greylisted. (this configuration makes no sense for all receivers using greylisting (most modern gateways use it - so pls contact the email admin of this site or whitelist to work around)

DNS query - multiple A records.

gateway06.websitewelcome.com. A IN 14400 64.5.50.11
gateway06.websitewelcome.com. A IN 14400 64.5.52.9
gateway06.websitewelcome.com. A IN 14400 67.18.1.11
gateway06.websitewelcome.com. A IN 14400 67.18.10.12
gateway06.websitewelcome.com. A IN 14400 67.18.14.11
gateway06.websitewelcome.com. A IN 14400 67.18.15.14
gateway06.websitewelcome.com. A IN 14400 67.18.16.74
gateway06.websitewelcome.com. A IN 14400 67.18.21.22
gateway06.websitewelcome.com. A IN 14400 67.18.22.66
gateway06.websitewelcome.com. A IN 14400 67.18.39.7
gateway06.websitewelcome.com. A IN 14400 67.18.44.20
gateway06.websitewelcome.com. A IN 14400 67.18.52.14
gateway06.websitewelcome.com. A IN 14400 67.18.55.3
gateway06.websitewelcome.com. A IN 14400 67.18.59.2
gateway06.websitewelcome.com. A IN 14400 67.18.103.12
gateway06.websitewelcome.com. A IN 14400 67.18.124.13
gateway06.websitewelcome.com. A IN 14400 67.18.125.13
gateway06.websitewelcome.com. A IN 14400 67.18.144.9
gateway06.websitewelcome.com. A IN 14400 69.56.148.7
gateway06.websitewelcome.com. A IN 14400 69.56.195.6
gateway06.websitewelcome.com. A IN 14400 69.93.35.3
gateway06.websitewelcome.com. A IN 14400 69.93.154.20
gateway06.websitewelcome.com. A IN 14400 69.93.164.14
gateway06.websitewelcome.com. A IN 14400 69.93.179.18
gateway06.websitewelcome.com. A IN 14400 69.93.243.29
gateway06.websitewelcome.com. A IN 14400 64.5.38.4

 

[dietmar]

Greylisting uses the tripple 'sender IP,sender,receiver' to identify an email. Our Algorithm is a bit relaxed, and use only upper 24 bit of sender IP. But in your case the mail is sent quite different IPs (67.18.103.12, 67.18.15.14, ...).

- Dietmar

 

[haiberg]

Thanks for your answer:

I know, that mail who passed the Greylist, that there is an entry in the Greylistdatabase (hold for 2 days?)

Is it possible to expand the database, that the entries will be hold for exampel for 5 days

Is this possible?

Greetings
Basti

 

[dietmar]

extries are hold for 31 days