echochio

先改 /opt/iredapd/libs/default_settings.py 改收到的 log message 及 timeout 次數時間

GREYLISTING_MESSAGE = 'Intentional GREYLISTING policy rejection, please try again later'
GREYLISTING_BLOCK_EXPIRE = 3
GREYLISTING_AUTH_TRIPLET_EXPIRE = 30
GREYLISTING_UNAUTH_TRIPLET_EXPIRE = 2

原文是這樣的 :

GREYLISTING_MESSAGE: the rejection message which will be sent to sender server. Default is Intentional policy rejection, please try again later.

GREYLISTING_BLOCK_EXPIRE: Time (in MINUTES) to wait before client retrying, client will be rejected if retires too soon (in less than specified minutes). Defaults to 15 minutes.

GREYLISTING_AUTH_TRIPLET_EXPIRE: Disable greylisting for how long (in DAYS) for clients which passed greylisting (retried and delivered). It's also used to clean up old greylisting tracking records. Defaults to 30 days.

GREYLISTING_UNAUTH_TRIPLET_EXPIRE: Time (in DAYS) to keep tracking records if client didn't pass the greylisting, and no further deliver attempts. Defaults to 2 days.

用  python greylisting_admin.py --list 查看

先設 所有 domain 要檢查

python greylisting_admin.py --enable --from '@.' --to '@.'

看 log 發現雖然是內部 domain 但還是會擋, 真不合理要手動加 .....XD
收到的 log 是 :

postfix/smtpd[11111]: NOQUEUE: reject: RCPT from unknown[111.111.111.111]: 451 4.7.1 <111111@163.com>: 
Recipient address rejected: Intentional GREYLISTING policy rejection, 
please try again later; from=<test@mydomain1.com> to=<111111@163.com> proto=ESMTP helo=<DFXMS2>

--disable --from 內部 domain 

python greylisting_admin.py --disable --from '@mydomain1.com'
python greylisting_admin.py --disable --from '@mydomain2.com'

--delete 移除設定

    python greylisting_admin.py --delete --from '@mydomain1.com'

用  python greylisting_admin.py --list 查看

GSender                             -> Local Account                  Status
------------------------------------------------------------------------------
@mydomain1.com                     -> @. (anyone)                    disabled
@mydomain2.com                     -> @. (anyone)                    disabled
@. (anyone)                           -> @. (anyone)                    enabled