1

Topic: Whitelisting

==== REQUIRED BASIC INFO OF YOUR IREDMAIL SERVER ====
- iRedMail version (check /etc/iredmail-release):
- Deployed with iRedMail Easy or the downloadable installer?
- Linux/BSD distribution name and version:
- Store mail accounts in which backend (LDAP/MySQL/PGSQL):
- Web server (Apache or Nginx):
- Manage mail accounts with iRedAdmin-Pro?
- [IMPORTANT] Related original log or error message is required if you're experiencing an issue.
====

0.9.9 MARIADB edition.
Centos 7
MySQL
Nginx
no

I have issues everytime I add a name to the whitelist and I'm not understanding why it isn't working.  This is the server that's sending the e mail. 

p-west2-cluster5-host6-snip4-1.eps.apple.com

I've added this >> python wblist_admin.py --add --whitelist @eps.apple.com  and this python wblist_admin.py --add --whitelist @.apple.com
and e mails are still being blocked, with this error >> Recipient address rejected: Intentional policy rejection, please try again later;, but they aren't trying again so we don't get the mail..  I've also added the specific email address and it's domain to no avail.  What am I missing?

----

Spider Email Archiver: On-Premises, lightweight email archiving software developed by iRedMail team. Supports Amazon S3 compatible storage and custom branding.

2

Re: Whitelisting

Am I the only one that's ever experienced this?

3 (edited by chris.23lo 2025-07-14 14:30:51)

Re: Whitelisting

maxwellsmart wrote:

Am I the only one that's ever experienced this?

refer to whitelist samples...


you may want to share the config with the smtpd_sender_restrictions

Post's attachments

wblist_samples.png
wblist_samples.png 10.18 kb, 1 downloads since 2025-07-14 

You don't have the permssions to download the attachments of this post.

4

Re: Whitelisting

I've read all the samples and howto set it up.  The issue is that many mail servers are now using multiple ip addresses so it's impossible to know what ip address to whitelist.  The use of simply the name should work as shown in the usage.  This is not working.

Valid formats of whitelisted and blacklisted addresses

    a single user: user@domain.com
    a single domain: @domain.com, @sub.domain.com
    entire domain and all its sub-domains: @.domain.com (there's a dot after @)
    anyone: @. (the ending dot is required). it catches all addresses.
    top-level domain: @.com
    single ip address: 192.168.1.2
    CIDR network: 192.168.1.0/24

5

Re: Whitelisting

Look in my logs, there i found

helo using <XXX.XXX.icloud.com>
from using <xxx@icloud.com>
ip RDNS using <xxx.eps.apple.com>

match the line "Recipient address rejected: Intentional policy rejection, please try again later"
feels like spxxxxy though...

6

Re: Whitelisting

FYI https://docs.iredmail.org/errors.html#i … gain-later