Connect. Communicate. Collaborate. Securely.

Home » Kerio User Forums » Kerio Connect » Greylisting broken?
  •  
zebby

Messages: 231
Karma: 0
Send a private message to this user
Since March 3rd the debug logs filling with:
[05/Mar/2015 17:52:29][1156] {greylist} Greylisting: connected to reputation service (166.88.20.100:8045), timeout is 2 minutes, keepalive is not set.
[05/Mar/2015 17:54:29][1156] {greylist} Greylisting: connection terminated.
[05/Mar/2015 17:54:29][1156] {greylist} Greylisting: closing connection to server 166.88.20.100
[05/Mar/2015 17:54:29][1156] {greylist} Greylisting: testing connection to greylisting service finished in 120197 ms, result is CANNOT_CONNECT_GENERIC.
[05/Mar/2015 17:55:55][4816] {greylist} Greylisting resumed.
[05/Mar/2015 17:55:55][4816] {greylist} Greylisting: testing mail from "0000014beb1404f6-a9543abd-9de6-42f2f54-000000@amazonses.com" to "reservations<_at_>ourdomain.co.uk" sent by 54.240.8.28.
[05/Mar/2015 17:55:55][4816] {greylist} Greylisting: connecting to reputation service (166.88.20.100:8045)...
[05/Mar/2015 17:55:56][4816] {greylist} Greylisting: connected to reputation service (166.88.20.100:8045), timeout is 2 minutes, keepalive is not set.
[05/Mar/2015 17:57:11][1508] {greylist} Greylisting: testing mail from "dat@forinc.com" to "accounts<_at_>ourdomain.co.uk" sent by 89.223.104.167.
[05/Mar/2015 17:57:56][4816] {greylist} Greylisting: connection terminated.
[05/Mar/2015 17:57:56][4816] {greylist} Greylisting: closing connection to server 166.88.20.100
[05/Mar/2015 17:57:56][4816] {greylist} Greylisting is accepting mail, query finished in 120221 ms with result "SUSPEND".
[05/Mar/2015 17:57:56][4816] {greylist} Greylisting suspended for 12 minutes. While greylisting is suspended it is not applied to incoming messages.
[05/Mar/2015 17:57:56][1508] {greylist} Greylisting: allocated connection object in 44963 ms.
[05/Mar/2015 17:57:56][1508] {greylist} Greylisting got suspended in the meantime.


Warning logs filling with:
[05/Mar/2015 14:29:47] Greylisting: connection terminated.
[05/Mar/2015 14:29:47] Greylisting suspended for 19 minutes. While greylisting is suspended it is not applied to incoming messages.
[05/Mar/2015 14:51:33] Greylisting: connection terminated.
[05/Mar/2015 14:51:33] Greylisting suspended for 11 minutes. While greylisting is suspended it is not applied to incoming messages.
[05/Mar/2015 15:05:06] Greylisting: connection terminated.
[05/Mar/2015 15:05:06] Greylisting suspended for 11 minutes. While greylisting is suspended it is not applied to incoming messages.
[05/Mar/2015 15:18:27] Greylisting: connection terminated.
[05/Mar/2015 15:18:27] Greylisting suspended for 13 minutes. While greylisting is suspended it is not applied to incoming messages.
[05/Mar/2015 15:33:29] Greylisting: connection terminated.
[05/Mar/2015 15:33:29] Greylisting suspended for 10 minutes. While greylisting is suspended it is not applied to incoming messages.
[05/Mar/2015 15:45:40] Greylisting: connection terminated.
[05/Mar/2015 15:45:40] Greylisting suspended for 12 minutes. While greylisting is suspended it is not applied to incoming messages.
[05/Mar/2015 16:00:56] Greylisting: connection terminated.
[05/Mar/2015 16:00:56] Greylisting suspended for 16 minutes. While greylisting is suspended it is not applied to incoming messages.

There have been no changes to our firewall that would block access to the greylisting service and I can ping and telnet to 166.88.20.100 OK.

Is anyone else seeing this?

[Updated on: Thu, 05 March 2015 19:44]

  •  
ksnyder (KERIO)

Messages: 526
Karma: 34
Send a private message to this user
Hmm...I believe the valid servers are 166.88.20.100, 166.88.20.101, and 166.88.20.102

My server (currently) queries the last one (.102) successfully.

Are you able to successfully telnet? telnet 166.88.20.100 8045

[Updated on: Thu, 05 March 2015 20:52]


Ken Snyder
Director, Sales Engineering | Kerio
Stay Connected Anytime, Anywhere. Discover Kerio Cloud!
  •  
zebby

Messages: 231
Karma: 0
Send a private message to this user
So I've tried telnet to 166.88.20.100 but it doesn't look happy. I just get a black window, flashing cursor and it won't accept a quit command.
Telnet 166.88.20.101 or 166.88.20.102 I get '100 Master Greylisting Server ready' and I can quit OK.
Maybe an issue with 166.88.20.100?
  •  
ksnyder (KERIO)

Messages: 526
Karma: 34
Send a private message to this user
Perhaps. I'm now getting something different than I'd gotten yesterday. On .100 it's blank (as you said). On .101 I get the same thing, "100 Master Greylisting..."

Ken Snyder
Director, Sales Engineering | Kerio
Stay Connected Anytime, Anywhere. Discover Kerio Cloud!
  •  
Lyle M

Messages: 410

Karma: 7
Send a private message to this user
I'm in the same boat it appears:

mail:~ admin$ telnet 166.88.20.100 8045
Trying 166.88.20.100...
Connected to 166.88.20.100.
Escape character is '^]'.
^]
telnet> quit
Connection closed.
mail:~ admin$ telnet 166.88.20.101 8045
Trying 166.88.20.101...
Connected to 166.88.20.101.
Escape character is '^]'.
100 Master Greylisting Server ready
^]
telnet> quit
Connection closed.
mail:~ admin$ telnet 166.88.20.102 8045
Trying 166.88.20.102...
Connected to 166.88.20.102.
Escape character is '^]'.
100 Master Greylisting Server ready
^]
telnet> quit
Connection closed.

[08/Mar/2015 06:10:41][4823838720] {greylist} Greylisting: closing connection to server 166.88.20.100
[08/Mar/2015 06:10:41][4823838720] {greylist} Greylisting: testing connection to greylisting service finished in 120565 ms, result is CANNOT_CONNECT_GENERIC.
  •  
Lukas Petrlik (Kerio)

Messages: 108
Karma: 7
Send a private message to this user
One of the Greylisting servers was congested, the problem is now fixed. We apologize for any inconveniences this caused you.
  •  
Lyle M

Messages: 410

Karma: 7
Send a private message to this user
Lukas Petrlik (Kerio) wrote on Mon, 09 March 2015 06:50
One of the Greylisting servers was congested, the problem is now fixed. We apologize for any inconveniences this caused you.

Thanks for the fix and update, Lukas.

One thought on this, would it be possible in a future update for Connect to automatically adapt to a greylist server problem by just using the other two servers?

It appears that a failure of 166.88.20.100 kills the whole process. I get this impression because every time I clicked the greylist test connection button, it would go to .100 and fail. Oddly, the host "reputation-service.kerio.com" resolves in a round-robin for the three listed servers, while Connect appears to always start with .100.

Cheers,
Lyle

[Updated on: Tue, 17 March 2015 18:05]

  •  
Lukas Petrlik (Kerio)

Messages: 108
Karma: 7
Send a private message to this user
You are right, Connect incorrectly assumed that it was just a broken connection and attempted to resume it instead of trying another Greylisting server. We will fix it.
  •  
Lyle M

Messages: 410

Karma: 7
Send a private message to this user
  •  
howare

Messages: 16
Karma: 0
Send a private message to this user
Since 01/Apr till yesterday in our Warning Log are also Entry like that.

Are there any new problems?

Quote:

[01/Apr/2016 22:38:55] Greylisting suspended for 17 minutes. While greylisting is suspended it is not applied to incoming messages.
[01/Apr/2016 22:56:00] Greylisting: unable to contact reputation service.
[01/Apr/2016 22:56:00] Greylisting suspended for 11 minutes. While greylisting is suspended it is not applied to incoming messages.
[01/Apr/2016 23:09:11] Greylisting: unable to contact reputation service.
[01/Apr/2016 23:09:11] Greylisting suspended for 13 minutes. While greylisting is suspended it is not applied to incoming messages.
[02/Apr/2016 00:42:05] Greylisting: unable to contact reputation service.
[02/Apr/2016 00:42:05] Greylisting suspended for 19 minutes. While greylisting is suspended it is not applied to incoming messages.
[02/Apr/2016 01:08:11] Greylisting: unable to contact reputation service.
[02/Apr/2016 01:08:11] Greylisting suspended for 17 minutes. While greylisting is suspended it is not applied to incoming messages.
[02/Apr/2016 01:27:28] Greylisting: unable to contact reputation service.
[02/Apr/2016 01:27:28] Greylisting suspended for 17 minutes. While greylisting is suspended it is not applied to incoming messages.
[02/Apr/2016 02:14:30] Greylisting: unable to contact reputation service.
[02/Apr/2016 02:14:30] Greylisting suspended for 18 minutes. While greylisting is suspended it is not applied to incoming messages.
[02/Apr/2016 02:33:21] Greylisting: unable to contact reputation service.
[02/Apr/2016 02:33:21] Greylisting suspended for 16 minutes. While greylisting is suspended it is not applied to incoming messages.
[02/Apr/2016 02:52:33] Greylisting: unable to contact reputation service.
[02/Apr/2016 02:52:33] Greylisting suspended for 16 minutes. While greylisting is suspended it is not applied to incoming messages.
  •  
Lukas Petrlik (Kerio)

Messages: 108
Karma: 7
Send a private message to this user
howare wrote on Tue, 24 May 2016 08:18
Since 01/Apr till yesterday in our Warning Log are also Entry like that.
Does it currently work properly? (I.e. with no new entries in warning log.)
  •  
howare

Messages: 16
Karma: 0
Send a private message to this user
  •  
Skotsh

Messages: 5
Karma: 0
Send a private message to this user
Getting a lot of these to error log..

"Greylisting: connection terminated."
"Greylisting suspended for 19 minutes. While greylisting is suspended it is not applied to incoming messages."

Everything ok in Kerio server side?

[Updated on: Tue, 01 November 2016 19:29]

  •  
howare

Messages: 16
Karma: 0
Send a private message to this user
We have the same problems.
I found the first entry [25/Oct/2016 23:16:30] Greylisting suspended for 17 minutes. While greylisting is suspended it is not applied to incoming mes


Since 28/Oct/2016 23:53:13 the log is full of this entrys
Pavel Dobry (Kerio)

Messages: 5144
Karma: 241
Send a private message to this user
Skotsh wrote on Tue, 01 November 2016 19:28

Everything ok in Kerio server side?


It should be ok now. We've improved adjustment of cloud service to make connections from clients more reliable for all world regions.

Knowledge Base: http://kb.kerio.com/.
Technical support: http://www.kerio.com/support
------------------
Stay Connected Anytime, Anywhere. Discover Kerio Cloud!
Previous Topic: Outlook not showing new calendar events
Next Topic: Cannot send mails after office upgrading
Goto Forum:
  


Disclaimer:
Kerio discussion forums are intended for open communication between forum members and may contain information and material posted by members which may be useful in learning about Kerio products. The discussion forums are not intended to provide technical support for any specific product. Any information implied or expressed in the discussion forums is that of the posting member. Kerio is in no way responsible for the information posted in the forums, or its accuracy. Kerio employees may participate in the discussions, but their postings do not represent an offical position of the company on any issues raised or discussed. Kerio reserves the right to monitor and maintain the forums to promote free and accurate exchange of information.

Current Time: Sun Dec 11 14:47:12 CET 2016

Total time taken to generate the page: 0.01265 seconds
.:: Contact :: Home ::.
Powered by: FUDforum 3.0.4.