SpamFilter don't close connection after quit
Printed From: LogSat Software
Category: Spam Filter ISP
Forum Name: Spam Filter ISP Support
Forum Description: General support for Spam Filter ISP
URL: https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6791
Printed Date: 27 December 2024 at 3:53pm
Topic: SpamFilter don't close connection after quit
Posted By: Hassan
Subject: SpamFilter don't close connection after quit
Date Posted: 13 January 2010 at 8:30am
|
Hi, We have some complains that if the greylisting is enabled the "QUIT" request don't close the connection. And the only way to be able to send an email to us is restarting the mail server
Any idea? ------------- Worldsoft |
Replies:
Posted By: Neolisk
Date Posted: 13 January 2010 at 4:09pm
| Disable McAfee? :) |
Posted By: gillonba
Date Posted: 13 January 2010 at 5:24pm
| I'd have to agree. Greylisting has been working well for us. Are you running the latest version? |
Posted By: Hassan
Date Posted: 13 January 2010 at 5:41pm
This log is from the sender part. We don't have McAfee. The sender complain against our Spamfilter that after sending QUIT connection is keeped open. ------------- Worldsoft |
Posted By: Hassan
Date Posted: 13 January 2010 at 5:43pm
We are running the version 4.1.2.819 ------------- Worldsoft |
Posted By: LogSat
Date Posted: 13 January 2010 at 5:44pm
|
Hassan, When SpamFilter rejects a connection due to the greylist filter, the remote IP address (McAfee in your case) will be forcefully disconnected. If the remote server (McAfee) does not recognize that the connection was closed before trying to send the "QUIT" command, that command will of course fail as there isn't a connection anymore. Please note that the greylist filters are designed to reject all connections from an IP for a few minutes (5 by default). After that initial interval of time, if the IP retries to connect, the connection will always be allowed. More details on the greylist filter are found here: http://www.logsat.com/sfi-spam-filter-how-it-works/sfi-spam-filter-greylisting.asp - logsat.com/sfi-spam-filter-how-it-works/sfi-spam-filter-greylisting.asp This said, the complain of "not being able to send an email without restarting server" from the remote administrators may be just an issue of not knowing what greylisting is, and of the fact that by the time the admins restarted the mail server, that initial 5 minutes delay went by, and thus from then on the McAfee server was able to send emails (regardless of the reboot). ------------- Roberto Franceschetti http://www.logsat.com" rel="nofollow - LogSat Software http://www.logsat.com/sfi-spam-filter.asp" rel="nofollow - Spam Filter ISP |
Posted By: gillonba
Date Posted: 13 January 2010 at 6:20pm
|
Sometimes you will get complaints because a server does not respond to greylisting well. We had a customer complain last week that they were not getting messages from one of their clients... Turns out the mail server would only try sending once, and since the client was only sending one message every couple days they never ended up in the greylist cache. We ended up adding them to our cache manually. I even received a message a month ago in broken Engrish complaining that our spam filter was blocking messages from their, in his words, "spam appliance", and asking us to disable greylisting. Needless to say, that message ended up in the circular file real quick
|
Posted By: Hassan
Date Posted: 13 January 2010 at 6:27pm
|
Thanks folks. I'll explain the scenario to the other company who complain. ------------- Worldsoft |