I'm really suspicious of what's going on here (especially after seeing
the post from Charles Bender). Even when I send a message normally with my
mail client (Thunderbird), it's taking on the order of 10 seconds. Here's some
log entries from an SMTP conversation with the sender I've been discussing:
4 12:04:42.00 <javascript:all(' 4 12:04:42.00','su_5')>:Info:
<javascript:by_thread(' 4 12:04:42.00','su_5')>-1265448048: SurgeSMTP
6.4a-1, User connected (192.168.1.10) (10.254.2.22) Port (25)
4 12:04:42.00 <javascript:all(' 4 12:04:42.00','su_5')>:Info:
<javascript:by_thread(' 4 12:04:42.00','su_5')>-1265448048:
smtp:[192.168.1.10] Out: 250 mars.customer.net. Hello deepthought.zis.com
(192.168.1.10)
4 12:04:42.00 <javascript:all(' 4 12:04:42.00','su_5')>:Info:
<javascript:by_thread(' 4 12:04:42.00','su_5')>-1265448048: msg: Using
gateway as not from (192.168.1.10)
(10.254.2.23,192.168.3.15,192.168.3.14,10.254.2.20)
4 12:04:42.00 <javascript:all(' 4 12:04:42.00','su_5')>:Info:
<javascript:by_thread(' 4 12:04:42.00','su_5')>-1265448048:
msg_allow_sms user(XXXXXX) dom(XXXXXX.com) ip(192.168.1.10) authuser()
access() quota(-1) sms_forward()
4 12:04:42.00 <javascript:all(' 4 12:04:42.00','su_5')>:Info:
<javascript:by_thread(' 4 12:04:42.00','su_5')>-1265448048: maxfrom_add:
allowed more from (192.168.1.10) spam_allow
4 12:04:42.00 <javascript:all(' 4 12:04:42.00','su_5')>:Info:
<javascript:by_thread(' 4 12:04:42.00','su_5')>-1265448048: Adding
header (X-Originating-IP: 192.168.1.10)
4 12:04:53.00 <javascript:all(' 4 12:04:53.00','su_5')>:Info:
<javascript:by_thread(' 4 12:04:53.00','su_5')>-1265448048: aspam: early
mfilter hdr add (X-MyRbl: Color=Unknown (rbl) Age=0 Spam=0 Notspam=0 Stars=0
Good=151 Friend=0 Surbl=0 Catch=0 r=0 ip=192.168.1.10)
4 12:04:53.00 <javascript:all(' 4 12:04:53.00','su_5')>:Info:
<javascript:by_thread(' 4 12:04:53.00','su_5')>-1265448048: aspam: early
mfilter hdr add (X-IP-stats: Incoming Last 0, First 139, in=430896, out=0,
spam=0 ip=192.168.1.10)
4 12:04:53.00 <javascript:all(' 4 12:04:53.00','su_5')>:Info:
<javascript:by_thread(' 4 12:04:53.00','su_5')>-1265448048: msg_relay_ip
matached (192.168.1.10)
4 12:04:53.00 <javascript:all(' 4 12:04:53.00','su_5')>:Info:
<javascript:by_thread(' 4 12:04:53.00','su_5')>-1265448048: aspam:
mfilter hdr add (X-MyRbl: Color=Unknown (rbl) Age=0 Spam=0 Notspam=0 Stars=0
Good=151 Friend=0 Surbl=0 Catch=0 r=0 ip=192.168.1.10)
4 12:04:53.00 <javascript:all(' 4 12:04:53.00','su_5')>:Info:
<javascript:by_thread(' 4 12:04:53.00','su_5')>-1265448048: aspam:
mfilter hdr add (X-IP-stats: Incoming Last 0, First 139, in=430896, out=0,
spam=0 ip=192.168.1.10)
4 12:04:53.00 <javascript:all(' 4 12:04:53.00','su_5')>:Info:
<javascript:by_thread(' 4 12:04:53.00','su_5')>-1265448048: myrbl:
Adding (192.168.1.10) good aspam qnum=13023614
4 12:04:53.00 <javascript:all(' 4 12:04:53.00','su_5')>:Info:
<javascript:by_thread(' 4 12:04:53.00','su_5')>-1265448048: myrbl:
Adding (192.168.1.10) in Stored qnum=13023614
Note the 11 second gap between the "Adding header" line and the first
"aspam" line. This doesn't seem right to me. And I don't want it to do any
anti-spam/RBL processing at all anyway, which I thought I configured for the
sender IP address with g_safe_white and g_spam-allow.
Thanks,
Bob
/Bob Fera
I.T. Manager
Zenith Information Group
18757 Burbank Blvd., Suite 116
Tarzana, CA 91356
Phone: 818-206-8634 Ext. 160
Fax: 818-345-2605
www.zis.com <http://www.zis.com>/
/Members of NACHA
The Electronic Payments Association/
On 2/4/2014 12:01 PM, Paul M. Beck wrote:
You're very welcome,
bomb max is for max messages sent TO an single address, say perhaps
your sonic wall is hammering your account with log messages..
To understand g_bomb_white - see g_bomb_max
what was the error you were getting in the logs, that should help
indicate which setting to correct.
These automated emails, are they to a single user, is it a list server?
Paul
On Feb 4, 2014, at 1:17 PM, Bob Fera <bob@serve.net
<mailto:bob@serve.net>> wrote:
Thanks, Paul!
I've set g_safe_white and also g_spam_allow to the ip address of the
sending machine. I think it's going a bit faster than before, but it still
doesn't seem right.
I also see a setting called g_bomb_white, but it says to enter an
"address" with no indication if they mean email addresses or ip addresses.
g_bomb_white - don't apply bomb_max limit if to address matches
Useful for robots etc that expect high volume
Syntax: g_bomb_white string
/Bob Fera
I.T. Manager
Zenith Information Group
18757 Burbank Blvd., Suite 116
Tarzana, CA 91356
Phone: 818-206-8634 Ext. 160
Fax: 818-345-2605
www.zis.com <http://www.zis.com/>/
/Members of NACHA
The Electronic Payments Association/
On 2/4/2014 11:02 AM, Paul M. Beck wrote:
I believe you're looking for g_gafe_white
or in the IP address is being listed for sending too many emails...
g_user_send_white
On Feb 4, 2014, at 12:40 PM, Bob Fera <bob@serve.net
<mailto:bob@serve.net>> wrote:
Hello,
My Surgemail server has begun tarpitting a particular sender IP
address (an internal server of mine that generates automated emails;
it does not use SMTP auth). How can I get it to stop? (I need to get
these emails out quickly...) I can't find a setting that looks like it
does what I need.
Thanks,
Bob
--
/Bob Fera
I.T. Manager
Zenith Information Group
18757 Burbank Blvd., Suite 116
Tarzana, CA 91356
Phone: 818-206-8634 Ext. 160
Fax: 818-345-2605
www.zis.com <http://www.zis.com/>/
/Members of NACHA
The Electronic Payments Association/
