1 Topic by MP Consulting

  • MP Consulting
  • Member
  • Offline
  • Registered: 2019-06-11
  • Posts: 2

Topic: Whitelist/Intentional Policy Rejection

==== REQUIRED BASIC INFO OF YOUR IREDMAIL SERVER ====
- iRedMail version (check /etc/iredmail-release): v0.9.8
- Deployed with iRedMail Easy or the downloadable installer? Yes
- Linux/BSD distribution name and version:  Unknown
- Store mail accounts in which backend (LDAP/MySQL/PGSQL): MYSQL
- Web server (Apache or Nginx): Nginx
- Manage mail accounts with iRedAdmin-Pro? No
- [IMPORTANT] Related original log or error message is required if you're experiencing an issue.
====

I am having a slight issue with whitelisting as in I am not able to figure out how to do it. I am trying to push customer for iredadmin Pro but they have not purchased it yet. I am seeing this error in the logs:

Recipient address rejected: Intentional policy rejection, please try again later;

It looks like it might be related to Greylisting, I attempted this command:

python /opt/iredapd/tools/greylisting_admin.py --disable --from '@knowbe4.com'

but I don't think it actually did anything.

Also, I've tried to use the whitelisting python scripts as well and they never display any domains or IP which I have whitelisted.

----

Spider Email Archiver: On-Premises, lightweight email archiving software developed by iRedMail team. Supports Amazon S3 compatible storage and custom branding.

2 Reply by Neutro (edited by Neutro 2019-06-11 04:50:47)

  • Neutro
  • Member
  • Offline
  • Registered: 2014-03-17
  • Posts: 123

Re: Whitelist/Intentional Policy Rejection

Hi,

From https://docs.iredmail.org/manage.iredapd.html

--whitelist-domain
        Whitelist the IP addresses/networks in SPF record of specified sender
        domain for greylisting service. Whitelisted domain is stored in sql
        table `greylisting_whitelist_domains`.

--disable
        Explicitly disable greylisting for specified account.

So i think the right command is:

/opt/iredapd/tools/greylisting_admin.py --whitelist-domain --from '@knowbe4.com'

As stated in the same documentation, for setting up your server you can either set greylisting in training mode or disable it alltogether at first, then enable it step by step once everything else works.

3 Reply by MP Consulting

  • MP Consulting
  • Member
  • Offline
  • Registered: 2019-06-11
  • Posts: 2

Re: Whitelist/Intentional Policy Rejection

Thanks for your reply, I think that worked.. however, is there a command to check and confirm it's been added to the whitelist?

Thanks!

4 Reply by Neutro

  • Neutro
  • Member
  • Offline
  • Registered: 2014-03-17
  • Posts: 123

Re: Whitelist/Intentional Policy Rejection

Read the above documentation, it's written wink