bugZoneCheck - Bugs: bug #9544, Zonecheck fails with greylisting...


bug #9544: Zonecheck fails with greylisting sites

Submitter:  Stephane Bortzmeyer <bortzmeyer>
Submitted:  Sun 04 Jul 2004 05:02:05 AM UTC
Votes: 10
Category:  * tests Severity:  High
Priority:  5 - Normal Item Group:  * Action request
Status:  None Privacy:  Public
Assigned to:  None Open/Closed:  Open
* Mandatory Fields

Add a New Comment Rich Markup

Mon 18 Jun 2012 07:30:03 AM UTC, comment #4: 

Greylisting is now officially standard: RFC 6647

Stephane Bortzmeyer <bortzmeyer>
Group administrator
Tue 17 Mar 2009 07:26:28 AM UTC, comment #3: 


from what I understand, zonecheck should use the empty sender "<>" to verify addresses. Every greylisting implementation I know has a special rule to ignore these from greylisting.


Stefan Pfetzing <dreamind>
Fri 19 Sep 2008 02:12:23 PM UTC, comment #2: 

At least Postfix (and may be other MTA) send a 5xx if the mailbox does not exist:

% telnet smtp
Connected to
Escape character is '^]'.
220 mx1.nic.fr ESMTP Postfix
EHLO toto.example
250-SIZE 10240000
250 DSN
MAIL FROM:<bortzmeyer@generic-nic.net>
250 2.1.0 Ok
RCPT TO:<ddfgjghvjghfgff@nic.fr>
554 5.7.1 <ddfgjghvjghfgff@nic.fr>: Recipient address rejected: Access denied
RCPT TO:<hostmaster@nic.fr>
450 4.7.1 <hostmaster@nic.fr>: Recipient address rejected: Greylisted by greyfix 0.3.9, try again in 365 seconds.  See http://www.kim-minh.com/pub/greyfix/ for more information.

So, may be only 5xx should be considered?

Stephane Bortzmeyer <bortzmeyer>
Group administrator
Mon 05 Jul 2004 03:55:47 AM UTC, comment #1: 

Someone else apparently reported it because nic.fr is now in some whitelists. For instance in postgrey:

# 2004-07-01: nic.fr (address verification, reported by Arnaud Launay)

Stephane Bortzmeyer <bortzmeyer>
Group administrator
Sun 04 Jul 2004 05:02:05 AM UTC, original submission:  

If a mail server uses greylisting (http://www.greylisting.org/), something which is more and more common, Zonecheck mail test fails:

~~~~ |    fatal    || ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
f> The hostmaster can't be contacted by email
 :   Unable to send email to the hostmaster address (hostmaster@nic.af.)
 : using relays: laghman.nic.af..
 `..... .. .. . .  .
=> generic

But the mail server sent back a 450 (a temporary error), as it should. Zonecheck should behave differently between a permanent error (5xx) and a temporary one (4xx). (And Zonecheck should display the error code and the message.)

Here is the log from the server, showing what was sent back:

Jul  4 09:20:43 laghman postfix/smtpd[7544]: connect from eve.generic-nic.net[]
Jul  4 09:20:49 laghman postfix/smtpd[7544]: NOQUEUE: reject: RCPT from eve.generic-nic.net[]: 450 <hostmaster@nic.af>: Recipient address rejected: Greylisted for 300 seconds...; from=<zonecheck@nic.fr> to=<hostmaster@nic.af> proto=SMTP helo=<relay2.nic.fr>

A workaround: try again 300 seconds later (the default greylisting time for most implementations, I use postgrey).

Stephane Bortzmeyer <bortzmeyer>
Group administrator


(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach Files:

No files currently attached


Depends on the following items: None found

Items that depend on this one: None found


Carbon-Copy List
  • -email is unavailable- added by dreamind (Posted a comment)
  • -email is unavailable- added by bortzmeyer (Posted a comment)
  • -email is unavailable- added by mdavids (Voted in favor of this item)

    There are 10 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.

    Only logged-in users can vote.


    Follow 2 latest changes.

    Date Changed by Updated Field Previous Value => Replaced by
    2008-04-16 mdavids Carbon-Copy- Added mdavids
    2004-07-04 bortzmeyer Carbon-Copy- Added hostmaster --AT-- nic --DOT-- af

    Back to the top

    Powered by Savane 3.13-4b48.
    Corresponding source code