Loading ...
Sorry, an error occurred while loading the content.

AW: AW: postfix - postgrey - lost connection after RSET

Expand Messages
  • Braun Björn
    Thanks so far, the funny thing about the sending Mailserver is, that the MX for the domain in question is: forward : mail.bbb.com - ddd.dd.ddd.70 reverse :
    Message 1 of 1 , Dec 1, 2009
    • 0 Attachment
      Thanks so far,

      the "funny" thing about the sending Mailserver is, that the MX for the domain in question is:

      forward : mail.bbb.com -> ddd.dd.ddd.70

      reverse : ddd.dd.ddd.70 -> mail.bbb.com

      BUT

      the mail is delivered via ddd.dd.ddd.66

      Might it be a problem of wrong NATing on "their" side?

      Thanks
      B

      -----Ursprüngliche Nachricht-----
      Von: owner-postfix-users@... [mailto:owner-postfix-users@...] Im Auftrag von lst_hoe02@...
      Gesendet: Freitag, 27. November 2009 15:48
      An: postfix-users@...
      Betreff: Re: AW: postfix - postgrey - lost connection after RSET

      Zitat von Eero Volotinen <eero.volotinen@...>:

      > Braun Björn wrote:
      >> My logs (mail.log)
      >>
      >> Nov 5 10:07:56 grey2 postfix/smtpd[7153]: connect from
      >> unknown[ddd.dd.ddd.dd]
      >> Nov 5 10:07:56 grey2 postfix/smtpd[7153]: NOQUEUE: reject: RCPT
      >> from unknown[ddd.dd.ddd.dd]: 450 4.7.1 <aaa@...>: Recipient
      >> address rejected: Greylisted, see
      >> http://isg.ee.ethz.ch/tools/postgrey/help/aaa.DE.html;
      >> from=<bbb@...> to=<aaa@...> proto=ESMTP helo=<mail.bbb.com>
      >> Nov 5 10:07:56 grey2 postfix/smtpd[7153]: lost connection after
      >> RSET from unknown[ddd.dd.ddd.dd]
      >> Nov 5 10:07:56 grey2 postfix/smtpd[7153]: disconnect from
      >> unknown[ddd.dd.ddd.dd]
      >>
      >> Or are these the wrong logs?
      >
      > Well, looks like spammer is connecting from ddd.dd.ddd.dd and after
      > graylisting (45X temporary error) spammer software just drops
      > connection.

      This depends if "aaa@..." is missing a mail from "bbb@..." and
      "ddd.dd.ddd.dd" is a valid mailserver for "bbb.com" then the problem
      is worth to investigate.

      Regards

      Andreas
    Your message has been successfully submitted and would be delivered to recipients shortly.