[Rspamd-Users] greylisting and whitelisting

[Gerben Wierda]

Is there a way I can completely prevent certain mail clients (domains with subdomains) to not be greylisted? Whatever the score? I want to keep the rest around, just not greylisting.

DHL uses mailjet.com to send mail messages about deliveries. This service doesn’t resend from the same server on a 4.7.1 reply but tries again 8 hours later from some other machine which then again is greylisted.

What mailjet.com does is send once on the first mx and on 4.7.1 sends it to the next mx. In my case, that backup is an external service that doesn’t do a lot of anti-spam etc. 


Jan 09 07:03:57 mail postfix/cleanup[83761]: 084CE1A23E08: milter-reject: END-OF-MESSAGE from o204.p26.mailjet.com[185.189.237.204]: 4.7.1 Try again later; from=<b0e07967.AMsAAF6G13YAAAAAAAAAAJttVggAAAAAAbQAAAAAAA69jQBeFsJG at bnc3.dhlparcel.nl> to=<gerben.wierda at rna.nl> proto=ESMTP helo=<o204.p26.mailjet.com>
Jan 09 07:04:02 mail postfix/cleanup[83761]: 924C21A23E09: milter-reject: END-OF-MESSAGE from mxc01.zoneedit.com[64.68.198.23]: 4.7.1 Try again later; from=<SRS0=P3sh=26=bnc3.dhlparcel.nl=b0e07967.AMsAAF6G13YAAAAAAAAAAJttVggAAAAAAbQAAAAAAA69jQBeFsJG at srszone.org> to=<gerben.wierda at rna.nl> proto=ESMTP helo=<mxc01.zoneedit.com>


Jan 09 16:33:57 mail postfix/cleanup[89829]: 062CC1A27201: milter-reject: END-OF-MESSAGE from o176.p26.mailjet.com[185.189.237.176]: 4.7.1 Try again later; from=<6327c1b8.ANAAAF6e-8QAAAAAAAAAAJttVggAAAAAAbQAAAAAAA69jQBeF0fc at bnc3.dhlparcel.nl> to=<gerben.wierda at rna.nl> proto=ESMTP helo=<o176.p26.mailjet.com>
Jan 09 16:34:02 mail postfix/cleanup[89829]: 842401A27207: milter-reject: END-OF-MESSAGE from mxc01.zoneedit.com[64.68.198.23]: 4.7.1 Try again later; from=<SRS0=VBMA=26=bnc3.dhlparcel.nl=6327c1b8.ANAAAF6e-8QAAAAAAAAAAJttVggAAAAAAbQAAAAAAA69jQBeF0fc at srszone.org> to=<gerben.wierda at rna.nl> proto=ESMTP helo=<mxc01.zoneedit.com>

What I need is to make sure DHL mail messages get through. So either tell postfix not to send them to milter or tell milter (rspamd) to let them through. How do I do that? Stock rspamd from MacPorts on macOS Mojave.

(In the past when using spamassassin, I had a postfix setup that said:

#smtpd_recipient_restrictions =
#       reject_non_fqdn_recipient,
#       reject_unlisted_recipient,
#       check_client_access regexp:/opt/local/etc/postfix/rna_policy_whitelist_clients,
#       check_sender_access regexp:/opt/local/etc//postfix/rna_policy_whitelist_senders,
#       check_policy_service unix:private/policy permit

But now I have in postfix

milter_protocol = 6
# if rspamd is down, don't reject mail
milter_default_action = accept
# Use rspamd's socket (add $queue_directory/opt/local/var/run/rspamd/milter.sock in chroot)
smtpd_milters = unix:/opt/local/var/spool/postfix/opt/local/var/run/rspamd/milter.sock
milter_mail_macros = i {mail_addr} {client_addr} {client_name} {auth_authen}


G