| View previous topic :: View next topic |
| Author |
Message |
audiodef
Watchman
Joined: 06 Jul 2005
Posts: 6319
Location: /usr/lib64/lv2
|
 Posted: Tue Aug 07, 2018 8:02 pm Post subject: Postgrey seems to need restart [SOLVED] |
 |
|
It seems like Postgrey needs to be restarted every so often. I start seeing spam get through, restart Postgrey, then it's fine for a few days. Repeat. Anyone else notice this?
_________________
Gentoo Studio: A Gentoo-based, professional digital audio workstation OS.
Last edited by audiodef on Fri Aug 10, 2018 2:04 am; edited 1 time in total |
|
| Back to top |
|
 |
Ant P.
Watchman
Joined: 18 Apr 2009
Posts: 6139
|
| Posted: Wed Aug 08, 2018 2:42 am Post subject: |
|
|
| Can't say I've had it fail like that. It's not going to be perfect though, some spam works by exploiting mail forms in insecure web apps (that are backed by a standards-compliant retrying MTA) |
|
| Back to top |
|
|
axl
l33t
Joined: 11 Oct 2002
Posts: 801
Location: Romania
|
| Posted: Wed Aug 08, 2018 5:37 am Post subject: |
|
|
postgrey is a service that does a pretty simple thing. It simply pushes mail 300 seconds. smtp wait 300.
Do you have any indication (logs) postgrey decided not to do that?
I can assure you, some spammers can wait 300 seconds. postgrey is not fullproof. |
|
| Back to top |
|
|
freke
Guru
Joined: 23 Jan 2003
Posts: 529
Location: Somewhere in Denmark
|
| Posted: Wed Aug 08, 2018 1:09 pm Post subject: |
|
|
Not noticed that behaviour either; your're not getting log-entries from postgrey when that happens? ie.: | Quote: | Aug 08 12:21:29 mail.vlh.dk postgrey: cleaning up old logs...
Aug 08 12:27:53 mail.vlh.dk postgrey: 2018/08/08-12:27:53 CONNECT TCP Peer: "[10.0.0.2]:38090" Local: "[10.0.0.2]:10030"
Aug 08 12:27:53 mail.vlh.dk postgrey: action=pass, reason=client AWL, client_name=mx199.a.outbound.createsend.com, client_address=203.55.21.199, sender=JacobfraBarberskabet-adufi1yuuulkhrv1j@cmail19.com, recipient=kibs@vlh.dk
Aug 08 12:39:06 mail.vlh.dk postgrey: 2018/08/08-12:39:06 CONNECT TCP Peer: "[10.0.0.2]:38142" Local: "[10.0.0.2]:10030"
Aug 08 12:39:07 mail.vlh.dk postgrey: action=greylist, reason=new, client_name=mta2.email.hotels.com, client_address=66.231.84.80, sender=bounce-1935712_HTML-1784752296-21777043-177351-17875@bounce.mail.hotels.com, recipient=hotels@vlh.dk
Aug 08 12:54:16 mail.vlh.dk postgrey: 2018/08/08-12:54:16 CONNECT TCP Peer: "[10.0.0.2]:38198" Local: "[10.0.0.2]:10030"
Aug 08 12:54:17 mail.vlh.dk postgrey: action=pass, reason=triplet found, delay=910, client_name=mta2.email.hotels.com, client_address=66.231.84.80, sender=bounce-1935712_HTML-1784752296-21777043-177351-17875@bounce.mail.hotels.com, recipient=hotels@vlh.dk |
|
|
| Back to top |
|
|
audiodef
Watchman
Joined: 06 Jul 2005
Posts: 6319
Location: /usr/lib64/lv2
|
| Posted: Fri Aug 10, 2018 2:04 am Post subject: |
|
|
Actually, it seems to be okay. Definitely a lot less spam now. Thanks, guys.
_________________
Gentoo Studio: A Gentoo-based, professional digital audio workstation OS. |
|
| Back to top |
|
|
|
Networking & Security
