On 2023-04-29 at 06:43:01 UTC-0400 (Sat, 29 Apr 2023 10:43:01 +0000)
Ken Peng via Postfix-users <k...@posthub.me>
is rumored to have said:
Nope. I found that if I enabled protocol test, every provider
including gmail/orange/vodafone sending messages to me will get
response code 450. After I disabled those protocol test, everything
goes fine.
So what's the correct way to deal with postscreen protocol tests?
Do not enable any of the Postscreen "After 220" tests. They are not
worth their cost in delays.
This was discussed earlier in this thread...
I mean the following stuff.
postscreen_pipelining_enable = yes
postscreen_pipelining_action = enforce
postscreen_non_smtp_command_enable = yes
postscreen_non_smtp_command_action = enforce
postscreen_bare_newline_enable = yes
postscreen_bare_newline_action = enforce
Thanks.
On Sat, 29 Apr 2023, Ken Peng via Postfix-users wrote:
Hello
When I enabled postscreen, why even gmail's sender IP was
greylisted?
Did you expect or configure to deal with gmail differently?
The log says:
Apr 29 15:35:35 mxin postfix/postscreen[59408]: NOQUEUE: reject:
RCPT from [209.85.160.53]:50219: 450 4.3.2 Service currently
unavailable; from=<x...@gmail.com>, to=<k...@posthub.me>, proto=ESMTP,
helo=<mail-oa1-f53.google.com>
And this is my configuration for postscreen:
# postscreen
postscreen_access_list = permit_mynetworks
cidr:/etc/postfix/postscreen_access.cidr
postscreen_blacklist_action = drop
postscreen_greet_action = enforce
postscreen_dnsbl_threshold = 2
postscreen_dnsbl_action = enforce
postscreen_dnsbl_sites = zen.spamhaus.org*2
postscreen_dnsbl_whitelist_threshold = -2
# postscreen protocol test
postscreen_pipelining_enable = yes
postscreen_pipelining_action = enforce
postscreen_non_smtp_command_enable = yes
postscreen_non_smtp_command_action = enforce
postscreen_bare_newline_enable = yes
postscreen_bare_newline_action = enforce
There doesn't seem to be anything specific to gmail, so if you enable
greylisting, it will apply to everyone.
Cheers.
_______________________________________________
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org
--
https://kenpeng.pages.dev/
_______________________________________________
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org
--
Bill Cole
b...@scconsult.com or billc...@apache.org
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)
Not Currently Available For Hire
_______________________________________________
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org