1 Topic by mikekgr

  • mikekgr
  • Member
  • Offline
  • Registered: 2020-05-30
  • Posts: 80

Topic: Not possible to get mails from blacklisted IP

==== REQUIRED BASIC INFO OF YOUR IREDMAIL SERVER ====
- iRedMail version (check /etc/iredmail-release): 1.3.1
- Deployed with iRedMail Easy or the downloadable installer? Installer
- Linux/BSD distribution name and version: Ubuntu server 20.04.1
- Store mail accounts in which backend (LDAP/MySQL/PGSQL): MariaDB
- Web server (Apache or Nginx): Nginx
- Manage mail accounts with iRedAdmin-Pro? No
- [IMPORTANT] Related original log or error message is required if you're experiencing an issue.
====

Dear Sirs, I want to be able to permit connection to my iRedMail server from an external host with IP 79.130.224.90 that is been blacklisted from barracudacentral.org
So I whitelist this IP using the command:
python3 /opt/iredapd/tools/wblist_admin.py --add --whitelist 79.130.224.90
But even then, I can't get to connect to my iRedMail, see the /var/log/mail.log related logging:

Oct 10 23:46:38 mx postfix/postscreen[2288355]: CONNECT from [79.130.224.90]:2370 to [207.180.246.2]:25
Oct 10 23:46:39 mx postfix/dnsblog[2288356]: addr 79.130.224.90 listed by domain b.barracudacentral.org as 127.0.0.2
Oct 10 23:46:44 mx postfix/postscreen[2288355]: DNSBL rank 2 for [79.130.224.90]:2370
Oct 10 23:46:44 mx postfix/postscreen[2288355]: DISCONNECT [79.130.224.90]:2370

So please tell me how can overcome this blocking?
Thanks

----

Spider Email Archiver: On-Premises, lightweight email archiving software developed by iRedMail team. Supports Amazon S3 compatible storage and custom branding.

2 Reply by ZhangHuangbin

  • ZhangHuangbin
  • ZhangHuangbin
  • iRedMail Developers
  • Offline
  • Registered: 2009-05-06
  • Posts: 31,088

Re: Not possible to get mails from blacklisted IP

Please whitelist it in /etc/postfix/postscreen_access.cidr.

3 Reply by mikekgr

  • mikekgr
  • Member
  • Offline
  • Registered: 2020-05-30
  • Posts: 80

Re: Not possible to get mails from blacklisted IP

ZhangHuangbin wrote:

Please whitelist it in /etc/postfix/postscreen_access.cidr.

Thanks. I will try it later on and I will report back here.

4 Reply by mikekgr (edited by mikekgr 2020-10-11 13:30:21)

  • mikekgr
  • Member
  • Offline
  • Registered: 2020-05-30
  • Posts: 80

Re: Not possible to get mails from blacklisted IP

ZhangHuangbin wrote:

Please whitelist it in /etc/postfix/postscreen_access.cidr.

I did as you suggested but now I have reject as:

Oct 11 08:01:21 mx postfix/postscreen[2307664]: CONNECT from [79.130.224.90]:2545 to [207.180.246.2]:25
Oct 11 08:01:21 mx postfix/postscreen[2307664]: WHITELISTED [79.130.224.90]:2545
Oct 11 08:01:21 mx postfix/smtpd[2307665]: connect from athedsl-4419690.home.otenet.gr[79.130.224.90]
Oct 11 08:01:23 mx postfix/smtpd[2307665]: Anonymous TLS connection established from athedsl-4419690.home.otenet.gr[79.130.224.90]: TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)
Oct 11 08:01:23 mx postfix/smtpd[2307665]: NOQUEUE: reject: RCPT from athedsl-4419690.home.otenet.gr[79.130.224.90]: 504 5.5.2 <BIOFARM>: Helo command rejected: need fully-qualified hostname; from=<biofarm-fax@biofarm.gr> to=<mikek@openforall.com> proto=ESMTP helo=<BIOFARM>

How can overcome this?

Thanks

5 Reply by ZhangHuangbin

  • ZhangHuangbin
  • ZhangHuangbin
  • iRedMail Developers
  • Offline
  • Registered: 2009-05-06
  • Posts: 31,088

Re: Not possible to get mails from blacklisted IP

Whitelist HELO hostname "BIOFARM" in /etc/postfix/helo_access.pcre.

6 Reply by mikekgr

  • mikekgr
  • Member
  • Offline
  • Registered: 2020-05-30
  • Posts: 80

Re: Not possible to get mails from blacklisted IP

ZhangHuangbin wrote:

Whitelist HELO hostname "BIOFARM" in /etc/postfix/helo_access.pcre.

Thanks but what exactly has to be inserted to helo_access.pcre can you help me or to guide me where to find the related documentation?
Thanks again

7 Reply by ms2504

  • ms2504
  • Member
  • Offline
  • Registered: 2019-06-15
  • Posts: 70

Re: Not possible to get mails from blacklisted IP

https://forum.iredmail.org/topic5521-ho … spcre.html

8 Reply by mikekgr

  • mikekgr
  • Member
  • Offline
  • Registered: 2020-05-30
  • Posts: 80

Re: Not possible to get mails from blacklisted IP

ms2504 wrote:

https://forum.iredmail.org/topic5521-ho … spcre.html

Thanks for your answer.
Indeed I have seen this thread but above Mr. Huangbin has suggested to use a rule inside hello_access.pcre so I am looking the way to do this...

Best Regards