sqlgrey: fatal

Report bugs and workarounds
Post Reply
heronimus
Posts: 24
Joined: 11 Sep 2015 10:19
Location: Netherlands

sqlgrey: fatal

Post by heronimus »

Dear all,

EFA sometimes stops accepting mail. In a SMTP session, we see: 451 4.3.5 Server configuration problem

I examined the logfiles in /var/log. In logfile messages, i see the following error:
sqlgrey: fatal: sender domain should be an FQDN, not an address literal at /usr/share/perl5/vendor_perl/Mail/SPF/Query.pm line 267.

After this error, it's not possible to send mail from a not whitelisted ip address.
"Warning: connect to 127.0.0.1:2501 : Connection refused"

I think the process on port 2501 crashes on a message from ip adres 188.165.235.21, i see info@domaine.fr in the log file before the fatal error.

Does anyone have a clue what goes wrong?

Regards, Heronimus

PS. In the logfile below i replaced our domain name with ***ourdomainname***

Code: Select all

Dec  7 05:15:06 mail2 postfix/smtpd[8213]: connect from http://www.dnslookup.fr[188.165.235.21]
Dec  7 05:15:06 mail2 sqlgrey: spf: SPF record:v=spf1 ip4:216.15.236.103 ip4:74.127.58.10 ip4:216.15.236.102 ip4:216.15.153.91 ip4:85.170.221.217 ip4:217.128.192.195 ip4:82.227.127.75 ip4:65.175.116.188 -allinclude:sendgrid.net ~all
Dec  7 05:15:06 mail2 sqlgrey: dnswl: 188.165.235.21 is listed in list.dnswl.org whitelist.
Dec  7 05:15:06 mail2 sqlgrey: dnswl: checking if IP allowed from domaine.fr
Dec  7 05:15:06 mail2 sqlgrey: dnswl: FAIL: domaine.fr NOT listed for 188.165.235.21, details: http://dnswl.org/s?s=33661
Dec  7 05:15:06 mail2 sqlgrey: grey: new: 188.165.235(188.165.235.21), info@domaine.fr -> postmaster@***ourdomainname***
Dec  7 05:15:06 mail2 postfix/smtpd[8213]: NOQUEUE: reject: RCPT from http://www.dnslookup.fr[188.165.235.21]: 451 4.7.1 <www.dnslookup.fr[188.165.235.21]>: Client host rejected: Greylisted for 5 minutes; from=<info@domaine.fr> to=<postmaster@***ourdomainname***> proto=SMTP helo=<dnslookup.fr>
Dec  7 05:15:06 mail2 postfix/smtpd[8213]: lost connection after RCPT from http://www.dnslookup.fr[188.165.235.21]
Dec  7 05:15:06 mail2 postfix/smtpd[8213]: disconnect from http://www.dnslookup.fr[188.165.235.21]
Dec  7 05:15:10 mail2 postfix/smtpd[8213]: connect from http://www.dnslookup.fr[188.165.235.21]
Dec  7 05:15:10 mail2 postfix/smtpd[8213]: lost connection after CONNECT from http://www.dnslookup.fr[188.165.235.21]
Dec  7 05:15:10 mail2 postfix/smtpd[8213]: disconnect from http://www.dnslookup.fr[188.165.235.21]
Dec  7 05:15:10 mail2 postfix/smtpd[8213]: connect from http://www.dnslookup.fr[188.165.235.21]
Dec  7 05:15:10 mail2 sqlgrey: spf: SPF record:v=spf1 ip4:216.15.236.103 ip4:74.127.58.10 ip4:216.15.236.102 ip4:216.15.153.91 ip4:85.170.221.217 ip4:217.128.192.195 ip4:82.227.127.75 ip4:65.175.116.188 -allinclude:sendgrid.net ~all
Dec  7 05:15:10 mail2 sqlgrey: dnswl: 188.165.235.21 is listed in list.dnswl.org whitelist.
Dec  7 05:15:10 mail2 sqlgrey: dnswl: checking if IP allowed from domaine.fr
Dec  7 05:15:10 mail2 sqlgrey: dnswl: FAIL: domaine.fr NOT listed for 188.165.235.21, details: http://dnswl.org/s?s=33661
Dec  7 05:15:10 mail2 sqlgrey: grey: new: 188.165.235(188.165.235.21), info@domaine.fr -> abuse@***ourdomainname***
Dec  7 05:15:10 mail2 postfix/smtpd[8213]: NOQUEUE: reject: RCPT from http://www.dnslookup.fr[188.165.235.21]: 451 4.7.1 <www.dnslookup.fr[188.165.235.21]>: Client host rejected: Greylisted for 5 minutes; from=<info@domaine.fr> to=<abuse@***ourdomainname***> proto=SMTP helo=<dnslookup.fr>
Dec  7 05:15:10 mail2 postfix/smtpd[8213]: lost connection after RCPT from http://www.dnslookup.fr[188.165.235.21]
Dec  7 05:15:10 mail2 postfix/smtpd[8213]: disconnect from http://www.dnslookup.fr[188.165.235.21]
Dec  7 05:15:10 mail2 postfix/smtpd[8213]: connect from http://www.dnslookup.fr[188.165.235.21]
Dec  7 05:15:10 mail2 sqlgrey: spf: SPF record:v=spf1 ip4:216.15.236.103 ip4:74.127.58.10 ip4:216.15.236.102 ip4:216.15.153.91 ip4:85.170.221.217 ip4:217.128.192.195 ip4:82.227.127.75 ip4:65.175.116.188 -allinclude:sendgrid.net ~all
Dec  7 05:15:10 mail2 sqlgrey: dnswl: 188.165.235.21 is listed in list.dnswl.org whitelist.
Dec  7 05:15:10 mail2 sqlgrey: dnswl: checking if IP allowed from domaine.fr
Dec  7 05:15:10 mail2 sqlgrey: dnswl: FAIL: domaine.fr NOT listed for 188.165.235.21, details: http://dnswl.org/s?s=33661
Dec  7 05:15:10 mail2 sqlgrey: grey: early reconnect: 188.165.235(188.165.235.21), info@domaine.fr -> postmaster@***ourdomainname***
Dec  7 05:15:10 mail2 postfix/smtpd[8213]: NOQUEUE: reject: RCPT from http://www.dnslookup.fr[188.165.235.21]: 451 4.7.1 <www.dnslookup.fr[188.165.235.21]>: Client host rejected: Greylisted for 5 minutes; from=<info@domaine.fr> to=<postmaster@***ourdomainname***> proto=SMTP helo=<dnslookup.fr>
Dec  7 05:15:10 mail2 postfix/smtpd[8213]: lost connection after RCPT from http://www.dnslookup.fr[188.165.235.21]
Dec  7 05:15:10 mail2 postfix/smtpd[8213]: disconnect from http://www.dnslookup.fr[188.165.235.21]
Dec  7 05:15:11 mail2 postfix/smtpd[8213]: connect from http://www.dnslookup.fr[188.165.235.21]
Dec  7 05:15:11 mail2 sqlgrey: spf: SPF record:v=spf1 ip4:216.15.236.103 ip4:74.127.58.10 ip4:216.15.236.102 ip4:216.15.153.91 ip4:85.170.221.217 ip4:217.128.192.195 ip4:82.227.127.75 ip4:65.175.116.188 -allinclude:sendgrid.net ~all
Dec  7 05:15:11 mail2 sqlgrey: dnswl: 188.165.235.21 is listed in list.dnswl.org whitelist.
Dec  7 05:15:11 mail2 sqlgrey: dnswl: checking if IP allowed from domaine.fr
Dec  7 05:15:11 mail2 sqlgrey: dnswl: FAIL: domaine.fr NOT listed for 188.165.235.21, details: http://dnswl.org/s?s=33661
Dec  7 05:15:11 mail2 sqlgrey: grey: new: 188.165.235(188.165.235.21), info@domaine.fr -> info@domaine.fr
Dec  7 05:15:11 mail2 postfix/smtpd[8213]: NOQUEUE: reject: RCPT from http://www.dnslookup.fr[188.165.235.21]: 451 4.7.1 <www.dnslookup.fr[188.165.235.21]>: Client host rejected: Greylisted for 5 minutes; from=<info@domaine.fr> to=<info@domaine.fr> proto=SMTP helo=<dnslookup.fr>
Dec  7 05:15:11 mail2 postfix/smtpd[8213]: lost connection after RCPT from http://www.dnslookup.fr[188.165.235.21]
Dec  7 05:15:11 mail2 postfix/smtpd[8213]: disconnect from http://www.dnslookup.fr[188.165.235.21]
Dec  7 05:15:11 mail2 postfix/smtpd[8213]: connect from http://www.dnslookup.fr[188.165.235.21]
Dec  7 05:15:11 mail2 sqlgrey: fatal: sender domain should be an FQDN, not an address literal at /usr/share/perl5/vendor_perl/Mail/SPF/Query.pm line 267.
Dec  7 05:15:12 mail2 postfix/smtpd[8213]: warning: connect to 127.0.0.1:2501: Connection refused
heronimus
Posts: 24
Joined: 11 Sep 2015 10:19
Location: Netherlands

Re: sqlgrey: fatal

Post by heronimus »

In addition to my previous post:
Blacklisting the IP address in EFA seems not te be enough: before the blacklist is checked, sqlgrey does its thing and crashes on the connections with this specific IP address. I now blacklisted it in the firewall.
Post Reply