Spam Filter ISP Support - Greylist Serious Problem

Greylist Serious Problem

Printed From: LogSat Software
Category: Spam Filter ISP
Forum Name: Spam Filter ISP Support
Forum Description: General support for Spam Filter ISP
URL: https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6451
Printed Date: 23 November 2025 at 2:24pm

Topic: Greylist Serious Problem

Posted By: IKILLSPAM1
Subject: Greylist Serious Problem
Date Posted: 04 April 2008 at 11:16am

Here is some activity from my log file. This is scary and I need it to be resolved ASAP:

04/03/08 10:44:14:627 -- (3116) Connection from: 64.202.165.22 - Originating country : United States
04/03/08 10:44:14:627 -- (3116) GreyList limbo - Added 64.202.165.22
04/03/08 10:44:14:627 -- (3116) IP is in not in GreyList Allowed. Disconnecting: 64.202.165.22
04/03/08 10:44:14:689 -- (3116) No Data Received
04/03/08 10:44:14:689 -- (3116) Disconnect

04/03/08 10:50:53:955 -- (5404) Connection from: 64.202.165.22 - Originating country : United States
04/03/08 10:50:53:955 -- (5404) IP is in not in GreyList Allowed. Disconnecting: 64.202.165.22
04/03/08 10:50:54:017 -- (5404) No Data Received
04/03/08 10:50:54:017 -- (5404) Disconnect

***Received an email from this server without issue***

04/03/08 11:21:18:486 -- (4772) Connection from: 64.202.165.22 - Originating country : United States
04/03/08 11:21:18:486 -- (4772) GreyList limbo - Added 64.202.165.22
04/03/08 11:21:18:486 -- (4772) IP is in not in GreyList Allowed. Disconnecting: 64.202.165.22
04/03/08 11:21:18:549 -- (4772) No Data Received
04/03/08 11:21:18:549 -- (4772) Disconnect

04/03/08 11:27:57:470 -- (2352) Connection from: 64.202.165.22 - Originating country : United States
04/03/08 11:27:57:470 -- (2352) IP is in not in GreyList Allowed. Disconnecting: 64.202.165.22
04/03/08 11:27:57:533 -- (2352) No Data Received
04/03/08 11:27:57:533 -- (2352) Disconnect

***Received an email from this server without issue***

04/03/08 11:57:28:080 -- (9380) Connection from: 64.202.165.22 - Originating country : United States
04/03/08 11:57:28:080 -- (9380) GreyList limbo - Added 64.202.165.22
04/03/08 11:57:28:080 -- (9380) IP is in not in GreyList Allowed. Disconnecting: 64.202.165.22
04/03/08 11:57:28:142 -- (9380) No Data Received
04/03/08 11:57:28:142 -- (9380) Disconnect

How can I be receiving emails from that server inbetween all these greylist screwups?

.ini settings for greylisting

GreyListInterval=420
GreyListLimboHold=8
GreyListAllowedHold=30
GreyListEnabled=1

Replies:

Posted By: Desperado
Date Posted: 04 April 2008 at 11:52am

IKILLSPAM!,

Is 64.202.165.22 being written the the greylist file? The default location is spamfilter-root\domails\GreyListAllowed.txt.

There should be an entry that looks something like:

64.202.165.22~39536.0898887847

-------------
The Desperado
Dan Seligmann.
Work: http://www.mags.net
Personal: http://www.desperado.com

Posted By: IKILLSPAM1
Date Posted: 04 April 2008 at 11:56am

No but these are:

64.202.165.12~39526.5562524653
64.202.165.17~39524.4358439815
64.202.165.181~39527.6075263194
64.202.165.182~39524.5696223958
64.202.165.183~39525.4332801273
64.202.165.196~39524.6916592477
64.202.165.221~39527.6559082986
64.202.165.227~39524.5027571644
64.202.165.233~39523.5787820255
64.202.165.238~39524.5037424074
64.202.165.29~39523.5925394329
64.202.165.30~39525.4456866319
64.202.165.31~39524.5573019676
64.202.165.33~39524.4002370602
64.202.165.35~39530.8118373958
64.202.165.36~39526.5248921528
64.202.165.37~39524.5086031481
64.202.165.38~39527.5301303009
64.202.165.39~39523.630581713
64.202.165.44~39526.6752572917
64.202.165.47~39526.6760443056
64.202.165.76~39528.4550403704
64.202.165.95~39524.5370511458
64.202.165.99~39524.4095710069

Posted By: LogSat
Date Posted: 04 April 2008 at 4:01pm

IKILLSPAM1,

Can you please either post or email us the full headers for one of the emails you have received above?

-------------
Roberto Franceschetti

http://www.logsat.com" rel="nofollow - LogSat Software

http://www.logsat.com/sfi-spam-filter.asp" rel="nofollow - Spam Filter ISP

Posted By: IKILLSPAM1
Date Posted: 07 April 2008 at 2:51pm

Roberto I didn't receive the email myself so I have no headers. This was an issue a user had. I really have no other info other than whats in my logs.