My next step- i want to install Postgrey on my Ubuntu 14.04 with ISPConfig. I found tutorial: https://www.howtoforge.com/greylisting_postfix_postgrey Should it work on Ubuntu?
Yep, the tutorial title even mentions "on Debian and Ubuntu". Ubuntu has a postgrey package, you should be able to follow that tutorial with little to no changes needed.
It should; if it doesn't, I'd check for a setting in /etc/default/postgrey and/or check the logs for errors.
Yeah, you can change to port 6000 by editing /etc/default/postgrey as per the readme .. or just change your postfix config to utilize 10023 if you prefer, it really doesn't matter as long as you set things up consistently.
Seems that some messages are greylisted for 5min despite the fact that Code: POSTGREY_OPTS="--inet=127.0.0.1:10023 --delay=60"
That looks correct, per both the howtoforge article and https://help.ubuntu.com/community/PostfixGreylisting - did you restart postgrey after adding that setting?
yes, stop, then start. Now will look at mail.log again. Found very long delay: Mar 10 15:46:48 server postgrey[1190]: action=greylist, reason=new, client_name=cpanel26.proisp.no, client_address=5.9.14.109, sender=***@tfmworld.com, recipient=***@modilinos.com Mar 10 15:46:48 server postfix/smtpd[27274]: NOQUEUE: reject: RCPT from cpanel26.proisp.no[5.9.14.109]: 450 4.2.0 <***@modilinos.com>: Recipient address rejected: Greylisted, see http://postgrey.schweikert.ch/help/modilinos.com.html; from=<***@tfmworld.com> to=<***@modilinos.com> proto=ESMTP helo=<cpanel26.proisp.no> Mar 10 15:46:48 server postfix/smtpd[27274]: disconnect from cpanel26.proisp.no[5.9.14.109] Mar 10 16:05:29 server postgrey[1190]: action=pass, reason=triplet found, delay=1121, client_name=cpanel26.proisp.no, client_address=5.9.14.109, sender=***@tfmworld.com, recipient=***@modilinos.com .. but probably i should learn more how greylisting working ..
The ~19 minute delay you see in the log entries there between 450 temporary reject and the delivery is determined by the sending side, not postgrey - ie. if they would have attempted delivery again sooner, it would have worked. Try testing by sending an email from somewhere (another domain/server or webmail service maybe), after postgrey temp rejects it, immediately send another one; if your second one is under 60 seconds it should also be temp rejected; send another one after 60 seconds (but under 5 minutes) and it should be accepted.
