Difference between revisions of "Postfix greylisting"

From Finninday
Jump to: navigation, search
Line 9: Line 9:
 
And my logs look like this:
 
And my logs look like this:
 
<pre>
 
<pre>
Oct 17 16:09:44 localhost postfix/smtpd[32111]: connect from 201-89-2-130.mganm702.dsl.brasiltelecom.net.br[201.89.2.130]
+
Oct 17 16:16:32 localhost postfix/smtpd[32484]: connect from unknown[201.226.226.55]
Oct 17 16:09:46 localhost postfix/smtpd[32111]: NOQUEUE: reject: RCPT from 201-89-2-130.mganm702.dsl.brasiltelecom.net.br[201.89.2.130]: 504 <major>: Helo command rejected: need fully-qualified hostname; from=<AngelinaexceptKern@linksys.com> to=<sam@finninday.net> proto=SMTP helo=<major>
+
Oct 17 16:16:35 localhost postfix/smtpd[32484]: NOQUEUE: reject: RCPT from unknown[201.226.226.55]: 450 <rday@finninday.net>: Recipient address rejected: Greylisted for 300 seconds (see http://isg.ee.ethz.ch/tools/postgrey/help/finninday.net.html); from=<lingrossfastenrathmet@grossfastenrath.de> to=<rday@finninday.net> proto=ESMTP helo=<auditoria01.cwpanama.net>
Oct 17 16:09:46 localhost postfix/smtpd[32111]: lost connection after RCPT from 201-89-2-130.mganm702.dsl.brasiltelecom.net.br[201.89.2.130]
+
Oct 17 16:16:35 localhost postfix/smtpd[32484]: lost connection after DATA from unknown[201.226.226.55]
Oct 17 16:09:46 localhost postfix/smtpd[32111]: disconnect from 201-89-2-130.mganm702.dsl.brasiltelecom.net.br[201.89.2.130]
+
Oct 17 16:16:35 localhost postfix/smtpd[32484]: disconnect from unknown[201.226.226.55]
 
</pre>
 
</pre>
  
 
My Bayes filter might get rusty from lack of use now.  Hardly anything is persistent enough to get through the greylist.
 
My Bayes filter might get rusty from lack of use now.  Hardly anything is persistent enough to get through the greylist.

Revision as of 23:21, 17 October 2007

On a lark, I decided to implement greylisting on my mail server. It was as easy as "apt-get install postgrey". Well, almost that easy. I also had to add this to my /etc/postfix/main.cf:

   check_policy_service inet:127.0.0.1:60000

This was slipped in at the end of smtpd_recipient_restrictions.

Now I have a new service in /etc/init.d: postgrey

And my logs look like this:

Oct 17 16:16:32 localhost postfix/smtpd[32484]: connect from unknown[201.226.226.55]
Oct 17 16:16:35 localhost postfix/smtpd[32484]: NOQUEUE: reject: RCPT from unknown[201.226.226.55]: 450 <rday@finninday.net>: Recipient address rejected: Greylisted for 300 seconds (see http://isg.ee.ethz.ch/tools/postgrey/help/finninday.net.html); from=<lingrossfastenrathmet@grossfastenrath.de> to=<rday@finninday.net> proto=ESMTP helo=<auditoria01.cwpanama.net>
Oct 17 16:16:35 localhost postfix/smtpd[32484]: lost connection after DATA from unknown[201.226.226.55]
Oct 17 16:16:35 localhost postfix/smtpd[32484]: disconnect from unknown[201.226.226.55]

My Bayes filter might get rusty from lack of use now. Hardly anything is persistent enough to get through the greylist.