Gentoo Forums
Gentoo Forums
Gentoo Forums
Quick Search: in
Postgrey seems to need restart [SOLVED]
View unanswered posts
View posts from last 24 hours

 
Reply to topic    Gentoo Forums Forum Index Networking & Security
View previous topic :: View next topic  
Author Message
audiodef
Watchman
Watchman


Joined: 06 Jul 2005
Posts: 6639
Location: The soundosphere

PostPosted: Tue Aug 07, 2018 8:02 pm    Post subject: Postgrey seems to need restart [SOLVED] Reply with quote

It seems like Postgrey needs to be restarted every so often. I start seeing spam get through, restart Postgrey, then it's fine for a few days. Repeat. Anyone else notice this?
_________________
decibel Linux: https://decibellinux.org
Github: https://github.com/Gentoo-Music-and-Audio-Technology
Facebook: https://www.facebook.com/decibellinux
Discord: https://discord.gg/73XV24dNPN


Last edited by audiodef on Fri Aug 10, 2018 2:04 am; edited 1 time in total
Back to top
View user's profile Send private message
Ant P.
Watchman
Watchman


Joined: 18 Apr 2009
Posts: 6920

PostPosted: Wed Aug 08, 2018 2:42 am    Post subject: Reply with quote

Can't say I've had it fail like that. It's not going to be perfect though, some spam works by exploiting mail forms in insecure web apps (that are backed by a standards-compliant retrying MTA)
Back to top
View user's profile Send private message
axl
Veteran
Veteran


Joined: 11 Oct 2002
Posts: 1144
Location: Romania

PostPosted: Wed Aug 08, 2018 5:37 am    Post subject: Reply with quote

postgrey is a service that does a pretty simple thing. It simply pushes mail 300 seconds. smtp wait 300.

Do you have any indication (logs) postgrey decided not to do that?

I can assure you, some spammers can wait 300 seconds. postgrey is not fullproof.
Back to top
View user's profile Send private message
freke
l33t
l33t


Joined: 23 Jan 2003
Posts: 976
Location: Somewhere in Denmark

PostPosted: Wed Aug 08, 2018 1:09 pm    Post subject: Reply with quote

Not noticed that behaviour either; your're not getting log-entries from postgrey when that happens? ie.:
Quote:
Aug 08 12:21:29 mail.vlh.dk postgrey: cleaning up old logs...
Aug 08 12:27:53 mail.vlh.dk postgrey: 2018/08/08-12:27:53 CONNECT TCP Peer: "[10.0.0.2]:38090" Local: "[10.0.0.2]:10030"
Aug 08 12:27:53 mail.vlh.dk postgrey: action=pass, reason=client AWL, client_name=mx199.a.outbound.createsend.com, client_address=203.55.21.199, sender=JacobfraBarberskabet-adufi1yuuulkhrv1j@cmail19.com, recipient=kibs@vlh.dk
Aug 08 12:39:06 mail.vlh.dk postgrey: 2018/08/08-12:39:06 CONNECT TCP Peer: "[10.0.0.2]:38142" Local: "[10.0.0.2]:10030"
Aug 08 12:39:07 mail.vlh.dk postgrey: action=greylist, reason=new, client_name=mta2.email.hotels.com, client_address=66.231.84.80, sender=bounce-1935712_HTML-1784752296-21777043-177351-17875@bounce.mail.hotels.com, recipient=hotels@vlh.dk
Aug 08 12:54:16 mail.vlh.dk postgrey: 2018/08/08-12:54:16 CONNECT TCP Peer: "[10.0.0.2]:38198" Local: "[10.0.0.2]:10030"
Aug 08 12:54:17 mail.vlh.dk postgrey: action=pass, reason=triplet found, delay=910, client_name=mta2.email.hotels.com, client_address=66.231.84.80, sender=bounce-1935712_HTML-1784752296-21777043-177351-17875@bounce.mail.hotels.com, recipient=hotels@vlh.dk
Back to top
View user's profile Send private message
audiodef
Watchman
Watchman


Joined: 06 Jul 2005
Posts: 6639
Location: The soundosphere

PostPosted: Fri Aug 10, 2018 2:04 am    Post subject: Reply with quote

Actually, it seems to be okay. Definitely a lot less spam now. Thanks, guys.
_________________
decibel Linux: https://decibellinux.org
Github: https://github.com/Gentoo-Music-and-Audio-Technology
Facebook: https://www.facebook.com/decibellinux
Discord: https://discord.gg/73XV24dNPN
Back to top
View user's profile Send private message
Display posts from previous:   
Reply to topic    Gentoo Forums Forum Index Networking & Security All times are GMT
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum