AW: AW: postfix - postgrey - lost connection after RSET

2009-12-01 Thread Braun Björn
Thanks so far,

the funny thing about the sending Mailserver is, that the MX for the domain 
in question is: 

forward : mail.bbb.com - ddd.dd.ddd.70

reverse : ddd.dd.ddd.70 - mail.bbb.com

BUT

the mail is delivered via ddd.dd.ddd.66

Might it be a problem of wrong NATing on their side?

Thanks 
B

-Ursprüngliche Nachricht-
Von: owner-postfix-us...@postfix.org [mailto:owner-postfix-us...@postfix.org] 
Im Auftrag von lst_ho...@kwsoft.de
Gesendet: Freitag, 27. November 2009 15:48
An: postfix-users@postfix.org
Betreff: Re: AW: postfix - postgrey - lost connection after RSET

Zitat von Eero Volotinen eero.voloti...@iki.fi:

 Braun Björn wrote:
 My logs (mail.log)

 Nov  5 10:07:56 grey2 postfix/smtpd[7153]: connect from  
 unknown[ddd.dd.ddd.dd]
 Nov  5 10:07:56 grey2 postfix/smtpd[7153]: NOQUEUE: reject: RCPT  
 from unknown[ddd.dd.ddd.dd]: 450 4.7.1 a...@aaa.de: Recipient  
 address rejected: Greylisted, see  
 http://isg.ee.ethz.ch/tools/postgrey/help/aaa.DE.html;  
 from=b...@bbb.com to=a...@bbb.de proto=ESMTP helo=mail.bbb.com
 Nov  5 10:07:56 grey2 postfix/smtpd[7153]: lost connection after  
 RSET from unknown[ddd.dd.ddd.dd]
 Nov  5 10:07:56 grey2 postfix/smtpd[7153]: disconnect from  
 unknown[ddd.dd.ddd.dd]

 Or are these the wrong logs?

 Well, looks like spammer is connecting from ddd.dd.ddd.dd and after  
 graylisting (45X temporary error) spammer software just drops  
 connection.

This depends if a...@aaa.de is missing a mail from b...@bbb.com and  
ddd.dd.ddd.dd is a valid mailserver for bbb.com then the problem  
is worth to investigate.

Regards

Andreas




postfix - postgrey - lost connection after RSET

2009-11-27 Thread Braun Björn
Hiho,

I'm using debian 4.0r6 / postfix / postgrey ...

This works really fine for 99+% of emailsenders

From time to time I get

Nov 11 09:01:54 grey2 postfix/smtpd[28926]: lost connection after RSET from 
unknown[xxx.xxx.xxx.xxx]

... and users complaining about not being able to receive email from certain 
senders.

I tried the following:

grey2:~# telnet localhost 25
Trying 127.0.0.1...
Connected to localhost.
Escape character is '^]'.
220 grey2.fade2grey.xxx.de ESMTP Postfix
helo localhost
250 grey2.fade2grey.xxx.de
mail from: b...@xxx.de
250 2.1.0 Ok
rcpt to: b...@xxx.de
250 2.1.5 Ok
rset
250 2.0.0 Ok
quit
221 2.0.0 Bye
Connection closed by foreign host.

Can anybody please help me?!

Thanks
B.



AW: postfix - postgrey - lost connection after RSET

2009-11-27 Thread Braun Björn
My logs (mail.log)

Nov  5 10:07:56 grey2 postfix/smtpd[7153]: connect from unknown[ddd.dd.ddd.dd]
Nov  5 10:07:56 grey2 postfix/smtpd[7153]: NOQUEUE: reject: RCPT from 
unknown[ddd.dd.ddd.dd]: 450 4.7.1 a...@aaa.de: Recipient address rejected: 
Greylisted, see http://isg.ee.ethz.ch/tools/postgrey/help/aaa.DE.html; 
from=b...@bbb.com to=a...@bbb.de proto=ESMTP helo=mail.bbb.com
Nov  5 10:07:56 grey2 postfix/smtpd[7153]: lost connection after RSET from 
unknown[ddd.dd.ddd.dd]
Nov  5 10:07:56 grey2 postfix/smtpd[7153]: disconnect from 
unknown[ddd.dd.ddd.dd]

Or are these the wrong logs?

Thanks
B.

PS: Etiquette: Do I usually reply just _ho...@kwsoft.de or the List?

-Ursprüngliche Nachricht-
Von: owner-postfix-us...@postfix.org [mailto:owner-postfix-us...@postfix.org] 
Im Auftrag von lst_ho...@kwsoft.de
Gesendet: Freitag, 27. November 2009 13:17
An: postfix-users@postfix.org
Betreff: Re: postfix - postgrey - lost connection after RSET

Zitat von Braun Björn bjoern.br...@igbau.de:

 Hiho,

 I'm using debian 4.0r6 / postfix / postgrey ...

 This works really fine for 99+% of emailsenders

 From time to time I get

 Nov 11 09:01:54 grey2 postfix/smtpd[28926]: lost connection after  
 RSET from unknown[xxx.xxx.xxx.xxx]

This has probably nothing to do with your problem
Most of the time these are simply spammers cutting the connection  
after RSET.

 ... and users complaining about not being able to receive email from  
 certain senders.

Ask the users for the *sender* address and grep your logs for failed  
delievery attempts from this address.

Regards

Andreas