Topic: iredapd greylist - whitelist IP/CIDR not checked
==== Required information ====
- iRedMail version (check /etc/iredmail-release):
- Linux/BSD distribution name and version:
- Store mail accounts in which backend (LDAP/MySQL/PGSQL):
- Web server (Apache or Nginx):
- Manage mail accounts with iRedAdmin-Pro?
- Related log if you're reporting an issue:
======== Required information ====
- iRedMail version (check /etc/iredmail-release): v0.9.5-1
- Linux/BSD distribution name and version: CentOS 6.8
- Store mail accounts in which backend (LDAP/MySQL/PGSQL): MySQL
- Web server (Apache or Nginx): Apache
- Manage mail accounts with iRedAdmin-Pro? yes, v2.4.0 (MySQL)
- Related log if you're reporting an issue:
====
Hello,
after adding some whitelist CIDR under system -> antispam -> greylisting -> "Do not apply greylisting on listed senders" , they never get evaluated by IredAPD .
I've already checked debug information on iredapd.log and there's no query that checking that, only sender and sender domain or triplet to match greylist.
Here are the query that occour when iredapd check for incoming mail:
---
SELECT id, sender, COMMENT
FROM greylisting_whitelists
WHERE account IN ('RECIPIENT@MYDOMAIN.TLD', '@MYDOMAIN.TLD', '@.');
SELECT id, account, sender, sender_priority, active
FROM greylisting
WHERE account IN ('RECIPIENT@MYDOMAIN.TLD', '@MYDOMAIN.TLD', '@.');
ORDER BY priority DESC, sender_priority DESC;
SELECT init_time, blocked_count, block_expired, record_expired
FROM greylisting_tracking
WHERE sender='SENDER@SENDERDOMAIN.TLD'
AND recipient='RECIPIENT@MYDOMAIN.TLD'
AND client_address='SENDER.IP.ADDRE.SS'
LIMIT 1;
---
Our problem is mainly with outlook/google smtp servers that work very bad with greylist.
For now we've bypassed the problem with a CIDR lookup table before "check_policy_service inet:127.0.0.1:7777," in smtpd_recipient_restrictions (postfix's main.cf) :
---
check_client_access cidr:/etc/postfix/bypass_rbl.cidr,
check_policy_service inet:127.0.0.1:7777,
---
But is difficult to manage if you're not a sysadmin .
Thanks Mattia
----
Spider Email Archiver: On-Premises, lightweight email archiving software developed by iRedMail team. Supports Amazon S3 compatible storage and custom branding.