Gentoo Forums
Gentoo Forums
Gentoo Forums
Quick Search: in
Postgrey seems to need restart [SOLVED]
View unanswered posts
View posts from last 24 hours

 
Reply to topic    Gentoo Forums Forum Index Networking & Security
View previous topic :: View next topic  
Author Message
audiodef
Watchman
Watchman


Joined: 06 Jul 2005
Posts: 6279
Location: /usr/lib64/lv2

PostPosted: Tue Aug 07, 2018 8:02 pm    Post subject: Postgrey seems to need restart [SOLVED] Reply with quote

It seems like Postgrey needs to be restarted every so often. I start seeing spam get through, restart Postgrey, then it's fine for a few days. Repeat. Anyone else notice this?
_________________
Gentoo Studio: A Gentoo-based, professional digital audio workstation OS.


Last edited by audiodef on Fri Aug 10, 2018 2:04 am; edited 1 time in total
Back to top
View user's profile Send private message
Ant P.
Watchman
Watchman


Joined: 18 Apr 2009
Posts: 5324

PostPosted: Wed Aug 08, 2018 2:42 am    Post subject: Reply with quote

Can't say I've had it fail like that. It's not going to be perfect though, some spam works by exploiting mail forms in insecure web apps (that are backed by a standards-compliant retrying MTA)
Back to top
View user's profile Send private message
axl
Guru
Guru


Joined: 11 Oct 2002
Posts: 425
Location: Romania

PostPosted: Wed Aug 08, 2018 5:37 am    Post subject: Reply with quote

postgrey is a service that does a pretty simple thing. It simply pushes mail 300 seconds. smtp wait 300.

Do you have any indication (logs) postgrey decided not to do that?

I can assure you, some spammers can wait 300 seconds. postgrey is not fullproof.
_________________
I LOVE GENTOO!!!

You need to learn BOTH OpenRC and SystemD init systems. BOTH!!!
Back to top
View user's profile Send private message
freke
Guru
Guru


Joined: 23 Jan 2003
Posts: 383
Location: Somewhere in Denmark

PostPosted: Wed Aug 08, 2018 1:09 pm    Post subject: Reply with quote

Not noticed that behaviour either; your're not getting log-entries from postgrey when that happens? ie.:
Quote:
Aug 08 12:21:29 mail.vlh.dk postgrey: cleaning up old logs...
Aug 08 12:27:53 mail.vlh.dk postgrey: 2018/08/08-12:27:53 CONNECT TCP Peer: "[10.0.0.2]:38090" Local: "[10.0.0.2]:10030"
Aug 08 12:27:53 mail.vlh.dk postgrey: action=pass, reason=client AWL, client_name=mx199.a.outbound.createsend.com, client_address=203.55.21.199, sender=JacobfraBarberskabet-adufi1yuuulkhrv1j@cmail19.com, recipient=kibs@vlh.dk
Aug 08 12:39:06 mail.vlh.dk postgrey: 2018/08/08-12:39:06 CONNECT TCP Peer: "[10.0.0.2]:38142" Local: "[10.0.0.2]:10030"
Aug 08 12:39:07 mail.vlh.dk postgrey: action=greylist, reason=new, client_name=mta2.email.hotels.com, client_address=66.231.84.80, sender=bounce-1935712_HTML-1784752296-21777043-177351-17875@bounce.mail.hotels.com, recipient=hotels@vlh.dk
Aug 08 12:54:16 mail.vlh.dk postgrey: 2018/08/08-12:54:16 CONNECT TCP Peer: "[10.0.0.2]:38198" Local: "[10.0.0.2]:10030"
Aug 08 12:54:17 mail.vlh.dk postgrey: action=pass, reason=triplet found, delay=910, client_name=mta2.email.hotels.com, client_address=66.231.84.80, sender=bounce-1935712_HTML-1784752296-21777043-177351-17875@bounce.mail.hotels.com, recipient=hotels@vlh.dk
Back to top
View user's profile Send private message
audiodef
Watchman
Watchman


Joined: 06 Jul 2005
Posts: 6279
Location: /usr/lib64/lv2

PostPosted: Fri Aug 10, 2018 2:04 am    Post subject: Reply with quote

Actually, it seems to be okay. Definitely a lot less spam now. Thanks, guys.
_________________
Gentoo Studio: A Gentoo-based, professional digital audio workstation OS.
Back to top
View user's profile Send private message
Display posts from previous:   
Reply to topic    Gentoo Forums Forum Index Networking & Security All times are GMT
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum