Search 
You are here: Forums   
Latest PostsMinimize
RE: RSET?
by SteveT
on 08 Feb 2012 08:07 PM
Webmail problem with attachments.
by jshaffer@fslgroup.com
on 08 Feb 2012 02:26 PM
RSET?
by electricpet
on 08 Feb 2012 12:28 PM
RE: Hack attempts seem to be taking down POP3
by SteveT
on 05 Feb 2012 11:46 AM
RE: Hack attempts seem to be taking down POP3
by ub
on 04 Feb 2012 04:52 PM
RE: relaying denied errors
by SteveT
on 02 Feb 2012 10:29 AM
RE: relaying denied errors
by electricpet
on 02 Feb 2012 09:12 AM
RE: relaying denied errors
by SteveT
on 02 Feb 2012 12:57 AM
relaying denied errors
by electricpet
on 30 Jan 2012 10:47 AM
RE: Hack attempts seem to be taking down POP3
by ub
on 25 Jan 2012 07:56 PM
RE: Hack attempts seem to be taking down POP3
by TheOtherBob
on 25 Jan 2012 03:01 PM
RE: Hack attempts seem to be taking down POP3
by ub
on 24 Jan 2012 08:26 PM
RE: I have to migrate mailserver pro > mailserver.net
by vincewarde
on 18 Jan 2012 11:08 AM
I have to migrate mailserver pro > mailserver.net
by vincewarde
on 17 Jan 2012 08:20 PM
RE: How can I set up a DNS server - MySQL
by StephenRussell
on 13 Jan 2012 09:15 AM
RE: How can I set up a DNS server - MySQL
by SteveT
on 12 Jan 2012 01:58 PM
How can I set up a DNS server - MySQL
by StephenRussell
on 12 Jan 2012 05:18 AM
RE: IMAP / iPhone
by Eskissimo
on 06 Jan 2012 07:47 AM

ArGoStuff User to User Support Forums
Graylisting Question
Last Post 02 Mar 2009 09:30 AM by Archie. 4 Replies.
Printer Friendly
Sort:
PrevPrev NextNext
You are not authorized to post a reply.
AuthorMessages
Thomas -User is Offline
New Member
New Member
Send Private Message
Posts:17

--
25 Feb 2009 04:56 PM  
I got some complaints that a customer fails to receive mail sometimes from a certain sender. I made some investigation and found the following situation:

A first mail was accepted:
[SMTP 001639 15-02-09 00:05:24] Received SMTP Connection from 195.186.18.81
[SMTP 001639 15-02-09 00:05:24] 220 ms.3sweb.net ArGoSoft Mail Server SMTP Module v.1.0.6.0 at Sat, 14 Feb 2009 23:05:24 GMT
[SMTP 001639 15-02-09 00:05:24] EHLO tr11.bluewin.ch
[SMTP 001639 15-02-09 00:05:24] 250-Welcome 195.186.18.81, nice to meet you...
[SMTP 001639 15-02-09 00:05:24] 250-AUTH=LOGIN
[SMTP 001639 15-02-09 00:05:24] 250-AUTH LOGIN
[SMTP 001639 15-02-09 00:05:24] 250-ETRN
[SMTP 001639 15-02-09 00:05:24] 250 HELP
[SMTP 001639 15-02-09 00:05:25] MAIL FROM:
[SMTP 001639 15-02-09 00:05:25] 250 Sender "violinge@bluewin.ch" OK...
[SMTP 001639 15-02-09 00:05:25] RCPT TO:
[SMTP 001639 15-02-09 00:05:25] 451 Please try again after between 30 and 240 minutes.
[SMTP 001639 15-02-09 00:05:25] Greylisting...
[SMTP 001639 15-02-09 00:05:25] RSET
[SMTP 001639 15-02-09 00:05:25] 250 Reset state
[SMTP 001639 15-02-09 00:05:25] QUIT
[SMTP 001639 15-02-09 00:05:25] 221 Goodbye
[SMTP 001639 15-02-09 00:05:25] SMTP Connection with 195.186.18.81 ended

[SMTP 001645 15-02-09 00:14:20] Received SMTP Connection from 77.72.71.62
[SMTP 001645 15-02-09 00:14:20] 220 ms.3sweb.net ArGoSoft Mail Server SMTP Module v.1.0.6.0 at Sat, 14 Feb 2009 23:14:20 GMT
[SMTP 001645 15-02-09 00:14:20] Trusted IP or host
[SMTP 001645 15-02-09 00:14:20] EHLO 3S-WEB1
[SMTP 001645 15-02-09 00:14:20] 250-Welcome 77.72.71.62, nice to meet you...
[SMTP 001645 15-02-09 00:14:20] 250-AUTH=LOGIN
[SMTP 001645 15-02-09 00:14:20] 250-AUTH LOGIN
[SMTP 001645 15-02-09 00:14:20] 250-ETRN
[SMTP 001645 15-02-09 00:14:20] 250 HELP
[SMTP 001645 15-02-09 00:14:20] MAIL FROM:
[SMTP 001645 15-02-09 00:14:20] 250 Sender "ursula.jones@3sweb.net" OK...
[SMTP 001645 15-02-09 00:14:20] RCPT TO:
[SMTP 001645 15-02-09 00:14:20] 250 Recipient "violinge@bluewin.ch" OK...
[SMTP 001645 15-02-09 00:14:20] DATA
[SMTP 001645 15-02-09 00:14:20] 354 Enter mail, end with "." on a line by itself
[SMTP 001645 15-02-09 00:14:20] Appended to delivery queue with id 11921
[SMTP 001645 15-02-09 00:14:20] 250 Message accepted for delivery
[SMTP 001645 15-02-09 00:14:20] QUIT
[SMTP 001645 15-02-09 00:14:20] 221 Goodbye
[SMTP 001645 15-02-09 00:14:20] SMTP Connection with 77.72.71.62 ended
[SMTP 001645 15-02-09 00:14:20] Number of current SMTP connections: 1

The next mail was rejected and I do not understand the reason for that:
[SMTP 005266 19-02-09 10:05:12] Received SMTP Connection from 195.186.18.81
[SMTP 005266 19-02-09 10:05:12] 220 ms.3sweb.net ArGoSoft Mail Server SMTP Module v.1.0.6.0 at Thu, 19 Feb 2009 09:05:12 GMT
[SMTP 005266 19-02-09 10:05:12] EHLO tr11.bluewin.ch
[SMTP 005266 19-02-09 10:05:12] 250-Welcome 195.186.18.81, nice to meet you...
[SMTP 005266 19-02-09 10:05:12] 250-AUTH=LOGIN
[SMTP 005266 19-02-09 10:05:12] 250-AUTH LOGIN
[SMTP 005266 19-02-09 10:05:12] 250-ETRN
[SMTP 005266 19-02-09 10:05:12] 250 HELP
[SMTP 005266 19-02-09 10:05:12] MAIL FROM:
[SMTP 005266 19-02-09 10:05:12] 250 Sender "violinge@bluewin.ch" OK...
[SMTP 005266 19-02-09 10:05:12] RCPT TO:
[SMTP 005266 19-02-09 10:05:12] 451 Please try again after between 30 and 240 minutes.
[SMTP 005266 19-02-09 10:05:12] Greylisting...
[SMTP 005266 19-02-09 10:05:12] RSET
[SMTP 005266 19-02-09 10:05:12] 250 Reset state
[SMTP 005266 19-02-09 10:05:12] QUIT
[SMTP 005266 19-02-09 10:05:12] 221 Goodbye
[SMTP 005266 19-02-09 10:05:12] SMTP Connection with 195.186.18.81 ended


[SMTP 005281 19-02-09 10:26:59] Received SMTP Connection from 195.186.18.81
[SMTP 005281 19-02-09 10:26:59] 220 ms.3sweb.net ArGoSoft Mail Server SMTP Module v.1.0.6.0 at Thu, 19 Feb 2009 09:26:59 GMT
[SMTP 005281 19-02-09 10:26:59] EHLO tr11.bluewin.ch
[SMTP 005281 19-02-09 10:26:59] 250-Welcome 195.186.18.81, nice to meet you...
[SMTP 005281 19-02-09 10:26:59] 250-AUTH=LOGIN
[SMTP 005281 19-02-09 10:26:59] 250-AUTH LOGIN
[SMTP 005281 19-02-09 10:26:59] 250-ETRN
[SMTP 005281 19-02-09 10:26:59] 250 HELP
[SMTP 005281 19-02-09 10:26:59] MAIL FROM:
[SMTP 005281 19-02-09 10:26:59] 250 Sender "violinge@bluewin.ch" OK...
[SMTP 005281 19-02-09 10:26:59] RCPT TO:
[SMTP 005281 19-02-09 10:26:59] 550 Graylisting delay has not been met for more than 20 times. Mail will be rejected...
[SMTP 005281 19-02-09 10:26:59] Too many greylisting violations
[SMTP 005281 19-02-09 10:26:59] RSET
[SMTP 005281 19-02-09 10:26:59] 250 Reset state
[SMTP 005281 19-02-09 10:27:00] QUIT
[SMTP 005281 19-02-09 10:27:00] 221 Goodbye
[SMTP 005281 19-02-09 10:27:00] SMTP Connection with 195.186.18.81 ended

I understood that graylisting should store a successful connection and not ask for retry after that.
But I may be wrong. Could someone explain me what happened here?

Thanks for any help
Thomas

Thomas Jakober 3S System Software Support http://www.3sweb.net
Steve TopilnyckyUser is Offline
Forum Administrator
Veteran Member
Veteran Member
Send Private Message
Posts:1278
Avatar

--
25 Feb 2009 11:21 PM  
Thomas,
Based on your logs, The set has 8 hrs 56 min gap between attempts and the second as 21 min gap. Now the 451 message states try again between 30 and 240 minutes (4 hours). As you can see both messages from the logs did not meet this criteria, one was too soon, the other to long. You may have to tweak your Grey listing parameters. I do no use this feature, so I can not advise you further on this matter.
- - - - - - -
Regards,
Steve Topilnycky
Top Cat Computing
http://www.topcatcomputing.com/
ArchieUser is Offline
ArGoSoft Developer
Basic Member
Basic Member
Send Private Message
Posts:152

--
26 Feb 2009 08:25 AM  
Hi Thomas,

Please go to Security - Anti Spam - Greylisting, and decrease "Initial Delay..." and so on value from 30 minutes to 10.

The problem is, according to greylisting, connections which retry "too soon" should be considered as a potential spam. Before I was using default value 30 there, but it turned out it was too long... Make it 10. New default value is 10.

Archie

Thomas -User is Offline
New Member
New Member
Send Private Message
Posts:17

--
26 Feb 2009 09:37 AM  
Thanks alot. I have set it to 10 and I observing further to look if it is better.

Actually turning on greylisting did reduce alot the spam so I think it is a good method.
Thomas

Thomas Jakober 3S System Software Support http://www.3sweb.net
ArchieUser is Offline
ArGoSoft Developer
Basic Member
Basic Member
Send Private Message
Posts:152

--
02 Mar 2009 09:30 AM  
Yes, I believe, greylisting is one of the best...

Archie
You are not authorized to post a reply.

Active Forums 4.2
DonationsMinimize

Find our site useful? Make a donation to show your support

Donate

logo_ccMC.giflogo_ccVisa.giflogo_ccDiscover.giflogo_ccAmex.gif

ArGoStuff Supporters

 


News from ArGoSoftMinimize
1 2 3 4 5 6


Mail Server v1.0.8.3
  • Added support of STARTTLS (STLS) command for SMTP, POP3, IMAP, and SMTP relay and delivery, which will allow secure, fully encrypted connections, when possible;
11/6/2011 1:10:34 PM
Mail Server v1.0.8.2
  • Optimized delivery speed. In earlier versions each "tick" which was checking whether messages were in the outbox queue, was picking up only one message at a time. Now it will attempt to pick MaximumAllowedThreads-ActiveDelivery threads messages, which should considerably increase deliver speed;
  • Optimized SEARCH and STATUS IMAP commands. They appear to be used very extensively by Android, and (not that extensively, but still) by iPhone. Now users who use mobile phones to access their IMAP accounts will see considerable improvement;
  • Optimized STORE IMAP command. Before storing of IMAP flags was occuring one message at a time, which seemed to be fine with SQL server, but proved to be slow for SQLite... Now it happens with single SQL call.
10/8/2011 7:59:35 PM
ArGoSoft Mail Server v1.0.8.1
  • Fixed a bug: when using IMAP via Firefox with "When I delete a message, move it to Trash folder" option, marking messages in the trash folder was causing high CPU usage, and was taking some time, making the server pretty much non-responsive. The problem was happening only when using SQLite.
6/6/2011 9:33:36 PM
ArGoSoft Mail Server v1.0.8.0
  • Fixed a problem with web interface - was showing only first page of messages, and would not switch to other pages; In order to fix the web interface, mail server itself has to be updated;
  • When installint initially, was still using SQLite, even when SQL was requested;
  • There was a problem with switching from SQLite database engine to SQL server database engine: the SQL database was not being created;
5/23/2011 5:53:55 PM
ArGoSoft Mail Server .NET v1.0.7.9
  • The server no longer requires Microsoft SQL Server. If SQL server is not found, it will use SQLite engine, which does not require separate installation. If SQL server is found, then user will be prompted whether he wants to use it;
  • Made other improvements, such as, now mailbox rebuild indexes orphaned records, rather then deleting them, also added an opotion to increment UIDL validity of folder (both on the Mailbox viewer box);
  • Made minor improvements on web interface;
4/26/2011 9:47:25 PM


1 2 3 4 5 6

Protect Your Computer today withGet AVG Today


Home:ArGoStuff:Forums:Articles:Cyber Security Tips:FAQ:Downloads:Links
Copyright 2006-2011 by ArGoStuff Terms Of UsePrivacy Statement