1 (edited by samtech 2016-06-10 15:25:07)

Topic: Greylisting not enabled, iRedApd still applying greylisting

==== Required information ====
- iRedMail version (check /etc/iredmail-release):      v0.9.5-1
- Linux/BSD distribution name and version: Debian 8
- Store mail accounts in which backend (LDAP/MySQL/PGSQL): MySQL
- Web server (Apache or Nginx): Apache
- Manage mail accounts with iRedAdmin-Pro? Yes  v2.4.0 (MySQL)
- Related log if you're reporting an issue:
====

I had not enabled Greylisting on any domain setup in iRedMail (look attached screenshot). Still iRedApd is applying greylisting, as i found following entries in iredapd.log

2016-06-10 12:11:28 INFO [207.211.34.67] Client retries too soon, greylisted again.
2016-06-10 12:11:28 INFO [207.211.34.67] RCPT, no-reply@external-domain1.com -> sys.admin@internal-domain1.com, 451 4.7.1 Intentional policy rejection, please try again later
...
...
2016-06-10 12:21:06 INFO [202.154.164.100] Client has not been seen before, greylisted.
2016-06-10 12:21:06 INFO [202.154.164.100] RCPT, payoutreport@external-domain.com -> manager.account@internal-domain1.com, 451 4.7.1 Intentional policy rejection, please try again later
2016-06-10 12:23:36 INFO [64.31.2.194] Client has passed the greylisting, accept this email.
2016-06-10 12:23:36 INFO [64.31.2.194] RCPT, e6.hr@internal-domain2.org -> it@internal-domain3.com, DUNNO

I couldn't understand what is happening?

----

Spider Email Archiver: On-Premises, lightweight email archiving software developed by iRedMail team. Supports Amazon S3 compatible storage and custom branding.

2

Re: Greylisting not enabled, iRedApd still applying greylisting

samtech wrote:

(look attached screenshot)

No screenshot attached.

Could you please show us output of command:

python /opt/iredapd/tools/greylisting_admin.py --list

3

Re: Greylisting not enabled, iRedApd still applying greylisting

Sorry for belated reply.

Here is output of that command

samtech@mail:~$ sudo python /opt/iredapd/tools/greylisting_admin.py --list
[sudo] password for samtech: 
Status   Sender                             -> Local Account                 
------------------------------------------------------------------------------
enabled  @. (anyone)                        -> @. (anyone)        

And here is missing sscreenshot
http://postimg.org/image/b3tzrn78n/

4

Re: Greylisting not enabled, iRedApd still applying greylisting

OK, this confusion is caused by iRedAdmin-Pro. when it's unchecked, it actually uses global greylisting setting, not disabled. I will fix this in next release.

The temporary solution is, disable gryelisting for your domain with command line tool:

python /opt/iredapd/tools/greylisting_admin.py --disable --from '@.' --to '@your_domain.com'

Then verify the setting again with command:

python /opt/iredapd/tools/greylisting_admin.py --list

5

Re: Greylisting not enabled, iRedApd still applying greylisting

UPDATE: Upcoming iRedAdmin-Pro release will have 3 options for greylisting setting:

1) Inherit global setting. This option will delete per-domain or per-user greylisting setting in SQL table `iredapd.greylisting`.
2) Enable greylisting service. Explicitly enable it.
3) Disable greylisting service. Explicitly disable it.

Option #2 and #3 are available for per-domain and per-user greylisting settings.