1

Topic: Weird greylist behaviour?

======== Required information ====
- iRedMail version (check /etc/iredmail-release): 0.9.6
- Linux/BSD distribution name and version: Debian 8.7
- Store mail accounts in which backend (LDAP/MySQL/PGSQL): MySQL
- Web server (Apache or Nginx): Nginx
- Manage mail accounts with iRedAdmin-Pro? No
- Related log if you're reporting an issue:
====

Hi,

Since I updated to 0.9.6 I am experiencing a weird issue. For most of the email the greylisting queue seems to last a very long time.

For example, the sender told me he sent the email this morning at 9:53 GMT but the receiver hasn't received it yet. In the log I see that the email is still in the greylist queue after 10 hours. I couldn't find anything in here (http://www.iredmail.org/docs/manage.ire … reylisting) about reducing the number of tries or the waiting time...

Feb 20 09:53:04 mail postfix/smtpd[26594]: NOQUEUE: reject: RCPT from mail-ve1eur01on0123.outbound.protection.outlook.com[104.47.1.123]: 451 4.7.1 <receiver@mydomain.com>: Recipient address rejected: Intentional policy rejection, please try again later; from=<sender@hisdomain.com> to=<receiver@mydomain.com> proto=ESMTP helo=<EUR01-VE1-obe.outbound.protection.outlook.com>
Feb 20 10:08:14 mail postfix/smtpd[26810]: NOQUEUE: reject: RCPT from mail-he1eur01on0091.outbound.protection.outlook.com[104.47.0.91]: 451 4.7.1 <receiver@mydomain.com>: Recipient address rejected: Intentional policy rejection, please try again later; from=<sender@hisdomain.com> to=<receiver@mydomain.com> proto=ESMTP helo=<EUR01-HE1-obe.outbound.protection.outlook.com>
Feb 20 10:26:22 mail postfix/smtpd[27078]: NOQUEUE: reject: RCPT from mail-eopbgr00093.outbound.protection.outlook.com[40.107.0.93]: 451 4.7.1 <receiver@mydomain.com>: Recipient address rejected: Intentional policy rejection, please try again later; from=<sender@hisdomain.com> to=<receiver@mydomain.com> proto=ESMTP helo=<EUR02-AM5-obe.outbound.protection.outlook.com>
Feb 20 11:26:07 mail postfix/smtpd[27865]: NOQUEUE: reject: RCPT from mail-eopbgr50131.outbound.protection.outlook.com[40.107.5.131]: 451 4.7.1 <receiver@mydomain.com>: Recipient address rejected: Intentional policy rejection, please try again later; from=<sender@hisdomain.com> to=<receiver@mydomain.com> proto=ESMTP helo=<EUR03-VE1-obe.outbound.protection.outlook.com>
Feb 20 12:25:31 mail postfix/smtpd[28578]: NOQUEUE: reject: RCPT from mail-eopbgr20132.outbound.protection.outlook.com[40.107.2.132]: 451 4.7.1 <receiver@mydomain.com>: Recipient address rejected: Intentional policy rejection, please try again later; from=<sender@hisdomain.com> to=<receiver@mydomain.com> proto=ESMTP helo=<EUR02-VE1-obe.outbound.protection.outlook.com>
Feb 20 13:25:16 mail postfix/smtpd[29306]: NOQUEUE: reject: RCPT from mail-eopbgr20104.outbound.protection.outlook.com[40.107.2.104]: 451 4.7.1 <receiver@mydomain.com>: Recipient address rejected: Intentional policy rejection, please try again later; from=<sender@hisdomain.com> to=<receiver@mydomain.com> proto=ESMTP helo=<EUR02-VE1-obe.outbound.protection.outlook.com>
Feb 20 14:24:48 mail postfix/smtpd[30078]: NOQUEUE: reject: RCPT from mail-he1eur01on0121.outbound.protection.outlook.com[104.47.0.121]: 451 4.7.1 <receiver@mydomain.com>: Recipient address rejected: Intentional policy rejection, please try again later; from=<sender@hisdomain.com> to=<receiver@mydomain.com> proto=ESMTP helo=<EUR01-HE1-obe.outbound.protection.outlook.com>
Feb 20 15:24:38 mail postfix/smtpd[30884]: NOQUEUE: reject: RCPT from mail-ve1eur01on0119.outbound.protection.outlook.com[104.47.1.119]: 451 4.7.1 <receiver@mydomain.com>: Recipient address rejected: Intentional policy rejection, please try again later; from=<sender@hisdomain.com> to=<receiver@mydomain.com> proto=ESMTP helo=<EUR01-VE1-obe.outbound.protection.outlook.com>
Feb 20 16:24:26 mail postfix/smtpd[31626]: NOQUEUE: reject: RCPT from mail-eopbgr10097.outbound.protection.outlook.com[40.107.1.97]: 451 4.7.1 <receiver@mydomain.com>: Recipient address rejected: Intentional policy rejection, please try again later; from=<sender@hisdomain.com> to=<receiver@mydomain.com> proto=ESMTP helo=<EUR02-HE1-obe.outbound.protection.outlook.com>
Feb 20 17:24:54 mail postfix/smtpd[32591]: NOQUEUE: reject: RCPT from mail-db5eur01on0116.outbound.protection.outlook.com[104.47.2.116]: 451 4.7.1 <receiver@mydomain.com>: Recipient address rejected: Intentional policy rejection, please try again later; from=<sender@hisdomain.com> to=<receiver@mydomain.com> proto=ESMTP helo=<EUR01-DB5-obe.outbound.protection.outlook.com>
Feb 20 18:24:00 mail postfix/smtpd[880]: NOQUEUE: reject: RCPT from mail-eopbgr10102.outbound.protection.outlook.com[40.107.1.102]: 451 4.7.1 <receiver@mydomain.com>: Recipient address rejected: Intentional policy rejection, please try again later; from=<sender@hisdomain.com> to=<receiver@mydomain.com> proto=ESMTP helo=<EUR02-HE1-obe.outbound.protection.outlook.com>
Feb 20 19:24:43 mail postfix/smtpd[1610]: NOQUEUE: reject: RCPT from mail-ve1eur01on0114.outbound.protection.outlook.com[104.47.1.114]: 451 4.7.1 <receiver@mydomain.com>: Recipient address rejected: Intentional policy rejection, please try again later; from=<sender@hisdomain.com> to=<receiver@mydomain.com> proto=ESMTP helo=<EUR01-VE1-obe.outbound.protection.outlook.com>

----

Spider Email Archiver: On-Premises, lightweight email archiving software developed by iRedMail team. Supports Amazon S3 compatible storage and custom branding.

2

Re: Weird greylist behaviour?

It is probably a different problem, but trying to whitelist the sender as an immediate fix I get this:

# python wblist_admin.py --list --whitelist
python: can't open file 'wblist_admin.py': [Errno 2] No such file or directory

3

Re: Weird greylist behaviour?

As you can see in the log, sender server (outlook.com) tried to deliver same (?) email from different servers, so it cannot bypass greylisting at all. The solution is whitelisting all outlook.com servers.

outlook.com is listed in file /opt/iredapd/SQL/greylisting_whitelist_domains.sql, you can simply import it, then run:

cd /opt/iredapd/tools/
python spf_to_greylist_whitelists.py

Then problem solved.

NOTE: file /opt/iredapd/SQL/greylisting_whitelist_domains.sql should be imported automatically during iRedAPD installation or upgrading. Not sure why you didn't have it.

4

Re: Weird greylist behaviour?

Thanks it worked