Greylist blocks all
[email protected] Wed, 29 Nov 2006 13:35:56 -0300
| Newsgroups | gmane.mail.spam.greylist.user |
|---|---|
| Message-ID | <[email protected]> |
Hi
I installed greylist in a FreeBSD platform according the tutorial below
but
my mailserever appesars blocks all e-mails received. Below I show part of
the
maillog. Any
idea?
Tutorial
Adding greylisting to your FreeBSD - Postfix
system
amills 07/11/2006 - 02:31
BSD Daemon Greylisting is an important tool in the war against spam,
servers
who connect to our mail server for the first time are given a 450
recipent
address rejected error and are sent
away.
A 450 rejection is not a permanent error and an RFC compliant mail server
will
try and resend the email later, but on the other hand the tools spammers
tend
to use do not adhere to standards and will not bother to try and resend
the
message
again.
Reasons why we should care? It saves system resources, since we are
stopping
its delivery in the first place and wont have to filter out so much crap
out
later on, and its very easy to
implement.
So how do we go about implementing this? stick with me and i will run
you
through the process although this article is based around FreeBSD, it is
not
much different to get greylisting working on other systems with minimal
of
changes.
cd /usr/ports/mail/postgrey/ && make install
clean
Edit your /etc/rc/conf file and add the
line:
postgrey_enable =
YES
Also edit line 45 of the file /usr/local/etc/rc.d/postgrey.sh and change
from
postgrey_enable=${postgrey_enable:-"NO"}
to
postgrey_enable=${postgrey_enable:-"YES"}
Open the file /usr/local/etc/postfix/main.cf and add the line (all on one
line):
smtpd_recipient_restrictions
=
permit_mynetworks,reject_unauth_destination,check_policy_service
inet:172.0.0.1:10023
Now run the
command:
postfix
check
From the command line to check we dont have any
problems.
Then start postgrey
with:
/usr/local/etc/rc.d/postgrey.sh
start
And restart postfix with the
command:
postfix
reload
Use the
command:
tail -f
/var/log/maillog
To check we dont have any errors showing up in the logs we should also
see
entries similar
to:
Nov 7 12:08:29 mail postfix/smtpd[18682]: NOQUEUE: reject: RCPT
from
c9503c2d.bhz.virtua.com.br[201.80.60.45]: 450 <[email protected]>:
Recipient
address rejected: Greylisted for 300 seconds
(see
http://isg.ee.ethz.ch/tools/postgrey/help/sykesgroup.com.html );
from=<[email protected]> to=<[email protected]>
proto=ESMTP
helo=<acer-2e68c49b20.bhz.virtua.com.br>
Further Reading On The
Subject:
http://en.wikipedia.org/wiki/Greylisting
http://isg.ee.ethz.ch/tools/postgrey/
http://www.greylisting.org/
Maillog
Nov 29 14:34:18 camomila postfix/smtpd[79947]: NOQUEUE: reject: RCPT
from
client-81-107-197-44.glfd.adsl.virgin.net[81.107.197.44]: 504
5.5.2
<home-0xhkz8567s>: Helo command rejected: need fully-qualified
hostname;
from=<Gutenberg'[email protected]> to=<[email protected]>
proto=ESMTP
helo=<home-0xhkz8567s>
Nov 29 14:34:18 camomila postfix/smtpd[79947]: NOQUEUE: reject: RCPT
from
client-81-107-197-44.glfd.adsl.virgin.net[81.107.197.44]: 504
5.5.2
<home-0xhkz8567s>: Helo command rejected: need fully-qualified
hostname;
from=<Gutenberg'[email protected]> to=<[email protected]>
proto=ESMTP
helo=<home-0xhkz8567s>
Engº Marcio
Toledo
Analista de Informática - área de
redes
Faculdade de Cïências Farmacêuticas -
UNESP
Tel:
0xx-16-3301-6939