Hi, I'm experiencing some issues related to postfix/postscreen for PMG whenreceiving token emails from ServiceNow.
How do I whitelist it such that it can be received by my mail server sitting behind PMG?
The affected range of IPs are below that could be more but just the sample:
199.91.139.22 -> outbound40.service-now.com
199.91.139.23 -> outbound41.service-now.com
199.91.139.24 -> outbound42.service-now.com
The SMTP logs are below:
Actual PMG IP and Mail Server IP has been replaced.
Feb 6 21:29:51 pmg postfix/postscreen[29141]: CONNECT from [199.91.139.22]:44081 to [PMG IP]:25
Feb 6 21:29:51 pmg postfix/postscreen[29141]: warning: postscreen_access_list: non-null host address bits in "Mail Server IP", perhaps you should use "192.168.1.0/24" instead
Feb 6 21:29:51 pmg postfix/postscreen[29141]: warning: postscreen_access_list: permit_mynetworks: mynetworks lookup error -- ignoring the remainder of this access list
Feb 6 21:29:56 pmg postfix/postscreen[29141]: HANGUP after 5 from [199.91.139.22]:44081 in tests before SMTP handshake
Feb 6 21:29:56 pmg postfix/postscreen[29141]: DISCONNECT [199.91.139.22]:44081
Feb 6 09:18:04 pmg postfix/postscreen[21259]: CONNECT from [199.91.139.23]:2006 to [PMG IP]:25
Feb 6 09:18:04 pmg postfix/postscreen[21259]: warning: postscreen_access_list: non-null host address bits in "Mail Server IP", perhaps you should use "192.168.1.0/24" instead
Feb 6 09:18:04 pmg postfix/postscreen[21259]: warning: postscreen_access_list: permit_mynetworks: mynetworks lookup error -- ignoring the remainder of this access list
Feb 6 09:18:07 pmg postfix/postscreen[21259]: HANGUP after 3.2 from [199.91.139.23]:2006 in tests before SMTP handshake
Feb 6 09:18:07 pmg postfix/postscreen[21259]: DISCONNECT [199.91.139.23]:2006
Feb 6 21:27:58 pmg postfix/postscreen[29044]: CONNECT from [199.91.139.24]:30257 to [PMG IP]:25
Feb 6 21:27:58 pmg postfix/postscreen[29044]: warning: postscreen_access_list: non-null host address bits in "Mail Server IP", perhaps you should use "192.168.1.0/24" instead
Feb 6 21:27:58 pmg postfix/postscreen[29044]: warning: postscreen_access_list: permit_mynetworks: mynetworks lookup error -- ignoring the remainder of this access list
Feb 6 21:28:01 pmg postfix/postscreen[29044]: HANGUP after 3.2 from [199.91.139.24]:30257 in tests before SMTP handshake
Feb 6 21:28:01 pmg postfix/postscreen[29044]: DISCONNECT [199.91.139.24]:30257
Do advise if the below is correct?
How do I whitelist it such that it can be received by my mail server sitting behind PMG?
The affected range of IPs are below that could be more but just the sample:
199.91.139.22 -> outbound40.service-now.com
199.91.139.23 -> outbound41.service-now.com
199.91.139.24 -> outbound42.service-now.com
The SMTP logs are below:
Actual PMG IP and Mail Server IP has been replaced.
Feb 6 21:29:51 pmg postfix/postscreen[29141]: CONNECT from [199.91.139.22]:44081 to [PMG IP]:25
Feb 6 21:29:51 pmg postfix/postscreen[29141]: warning: postscreen_access_list: non-null host address bits in "Mail Server IP", perhaps you should use "192.168.1.0/24" instead
Feb 6 21:29:51 pmg postfix/postscreen[29141]: warning: postscreen_access_list: permit_mynetworks: mynetworks lookup error -- ignoring the remainder of this access list
Feb 6 21:29:56 pmg postfix/postscreen[29141]: HANGUP after 5 from [199.91.139.22]:44081 in tests before SMTP handshake
Feb 6 21:29:56 pmg postfix/postscreen[29141]: DISCONNECT [199.91.139.22]:44081
Feb 6 09:18:04 pmg postfix/postscreen[21259]: CONNECT from [199.91.139.23]:2006 to [PMG IP]:25
Feb 6 09:18:04 pmg postfix/postscreen[21259]: warning: postscreen_access_list: non-null host address bits in "Mail Server IP", perhaps you should use "192.168.1.0/24" instead
Feb 6 09:18:04 pmg postfix/postscreen[21259]: warning: postscreen_access_list: permit_mynetworks: mynetworks lookup error -- ignoring the remainder of this access list
Feb 6 09:18:07 pmg postfix/postscreen[21259]: HANGUP after 3.2 from [199.91.139.23]:2006 in tests before SMTP handshake
Feb 6 09:18:07 pmg postfix/postscreen[21259]: DISCONNECT [199.91.139.23]:2006
Feb 6 21:27:58 pmg postfix/postscreen[29044]: CONNECT from [199.91.139.24]:30257 to [PMG IP]:25
Feb 6 21:27:58 pmg postfix/postscreen[29044]: warning: postscreen_access_list: non-null host address bits in "Mail Server IP", perhaps you should use "192.168.1.0/24" instead
Feb 6 21:27:58 pmg postfix/postscreen[29044]: warning: postscreen_access_list: permit_mynetworks: mynetworks lookup error -- ignoring the remainder of this access list
Feb 6 21:28:01 pmg postfix/postscreen[29044]: HANGUP after 3.2 from [199.91.139.24]:30257 in tests before SMTP handshake
Feb 6 21:28:01 pmg postfix/postscreen[29044]: DISCONNECT [199.91.139.24]:30257
Do advise if the below is correct?
Last edited: