1

Topic: Problem with graylisting from big providers

==== Required information ====
- iRedMail version (check /etc/iredmail-release):  0.9.5-1
- Linux/BSD distribution name and version: OEL 7
- Store mail accounts in which backend (LDAP/MySQL/PGSQL):  mysql
- Web server (Apache or Nginx): apache
- Manage mail accounts with iRedAdmin-Pro? yes
- [IMPORTANT] Related original log or error message is required if you're experiencing an issue.
====
Hello,
I'm facing the problem of greylisting of messages sent from big mail providers. You use IP and sender address combination. It works fine until mail is resent from the different  SRC IP. You can see in log below that it had taken several hours for mail to be delivered.
I know that I can probably whitelist it with python spf_to_greylist_whitelists.py however I'd like to have more complex solution. I'd like it to be done automatically. Maybe it wold be good idea to whitelist all C class for a particular domain

2018-01-17 14:03:06 INFO [A.B.C.139] RCPT, sender@sender-domain.com -> recipent@mydomain.com, 451 4.7.1 Intentional policy rejection, please try again later
2018-01-17 14:18:58 INFO [A.B.C.116] RCPT, sender@sender-domain.com -> recipent@mydomain.com, 451 4.7.1 Intentional policy rejection, please try again later
2018-01-17 14:36:19 INFO [A.B.C.105] RCPT, sender@sender-domain.com -> recipent@mydomain.com, 451 4.7.1 Intentional policy rejection, please try again later
2018-01-17 15:36:19 INFO [A.B.C.95] RCPT, sender@sender-domain.com -> recipent@mydomain.com, 451 4.7.1 Intentional policy rejection, please try again later
2018-01-17 16:36:40 INFO [A.B.C.128] RCPT, sender@sender-domain.com -> recipent@mydomain.com, 451 4.7.1 Intentional policy rejection, please try again later
2018-01-17 17:36:22 INFO [A.B.C.94] RCPT, sender@sender-domain.com -> recipent@mydomain.com, 451 4.7.1 Intentional policy rejection, please try again later
2018-01-17 18:36:52 INFO [A.B.C.90] RCPT, sender@sender-domain.com -> recipent@mydomain.com, 451 4.7.1 Intentional policy rejection, please try again later
2018-01-17 19:36:16 INFO [51.4.72.106] RCPT, sender@sender-domain.com -> recipent@mydomain.com, 451 4.7.1 Intentional policy rejection, please try again later
2018-01-17 20:36:10 INFO [51.4.72.90] RCPT, sender@sender-domain.com -> recipent@mydomain.com, 451 4.7.1 Intentional policy rejection, please try again later
2018-01-17 21:36:12 INFO [A.B.C.105] RCPT, sender@sender-domain.com -> recipent@mydomain.com, DUNNO
2018-01-17 21:36:13 INFO [A.B.C.105] END-OF-MESSAGE, sender@sender-domain.com -> recipent@mydomain.com, DUNNO

I'd be grateful for any suggestions.
Regards

----

Spider Email Archiver: On-Premises, lightweight email archiving software developed by iRedMail team. Supports Amazon S3 compatible storage and custom branding.

2

Re: Problem with graylisting from big providers

Whitelist its SPF/MX/A records with commands below:

cd /opt/iredapd/tools/
python spf_to_greylist_whitelists.py --submit sender-domain.com sender-domain2.com