curious email problem when receving mail from smtp.orange.fr

[yohann]

hi,
i sometime receive mail from persons using smtp.orange.fr, sometime not.
here are 2 mail.log extract. the 2 mails have been sent from 2 computers in the same office using the same smtp: smtp.orange.fr

the first one never came in the mailbox, the second one arrived within 2 seconds after being sent.

i see in the log that the fisrt one have DSBL_ORG=ERR(0) while the other one have
DSBL_ORG=SKIP(0).
the only other difference is that one is marked as whitlist while the other is new.

is DSBL_ORG value diference come from the white/grey list difference?
why do i have thoose curious problems with all the mail sent using smtp.orange.fr

it seems my post can be related to this one:
http://isp-control.net/forum/thread-6465...l#pid51845
because at the end certain mail not being delivered.
but i don't dare do change the settings on my server as i do not fully understand what this correction does, (fully desactivate verfication about sender?)
is it relly possible that it has really something to do with orange?
thank you

Code:

root@Web2009:/var/log# cat mail.log | grep yohann@sogelam.com | grep -v -e "pop3d" | grep -v -e "imapd" | grep laurent | ccze -A
May 11 16:01:02 Web2009 postfix/policyd-weight[6115]: weighted check:  NOT_IN_SBL_XBL_SPAMHAUS=-1.5 NOT_IN_SPAMCOP=-1.5 NOT_IN_BL_NJABL=-1.5 DSBL_ORG=ERR(0) HELO_IP_IN_CL_SUBNET=-1.2 (check from: .inforezo. - helo: .smtp23.orange. - helo-domain: .orange.)  FROM/MX_MATCHES_NOT_HELO(DOMAIN)=1; <client=193.252.22.30> <helo=smtp23.orange.fr> <from=laurent@inforezo.com> <to=yohann@sogelam.com>; rate: -4.7  
May 11 16:01:02 Web2009 postfix/policyd-weight[6115]: decided action=PREPEND X-policyd-weight:  NOT_IN_SBL_XBL_SPAMHAUS=-1.5 NOT_IN_SPAMCOP=-1.5 NOT_IN_BL_NJABL=-1.5 DSBL_ORG=ERR(0) HELO_IP_IN_CL_SUBNET=-1.2 (check from: .inforezo. - helo: .smtp23.orange. - helo-domain: .orange.)  FROM/MX_MATCHES_NOT_HELO(DOMAIN)=1; rate: -4.7; <client=193.252.22.30> <helo=smtp23.orange.fr> <from=laurent@inforezo.com> <to=yohann@sogelam.com>; delay: 7s  
May 11 16:01:02 Web2009 postgrey[29352]: action=greylist, reason=new, client_name=unknown, client_address=193.252.22.30, sender=laurent@inforezo.com, recipient=yohann@sogelam.com  
May 11 16:01:02 Web2009 postfix/smtpd[5093]: NOQUEUE: reject: RCPT from unknown[193.252.22.30] 450 4.2.0 <yohann@sogelam.com>: Recipient address rejected: Greylisted, see http://postgrey.schweikert.ch/help/sogelam.com.html; from=<laurent@inforezo.com> to=<yohann@sogelam.com> proto=ESMTP helo=<smtp23.orange.fr>

Code:

root@Web2009:/var/log# cat mail.log | grep yohann@sogelam.com | grep -v -e "pop3d" | grep -v -e "imapd" | grep fabio | ccze -A
May 11 16:38:41 Web2009 postfix/policyd-weight[6115]: weighted check:  NOT_IN_SBL_XBL_SPAMHAUS=-1.5 NOT_IN_SPAMCOP=-1.5 NOT_IN_BL_NJABL=-1.5 DSBL_ORG=SKIP(0) CL_IP_EQ_HELO_IP=-2 (check from: .inforezo. - helo: .smtp21.orange. - helo-domain: .orange.)  FROM/MX_MATCHES_NOT_HELO(DOMAIN)=1; <client=80.12.242.47> <helo=smtp21.orange.fr> <from=fabio@inforezo.com> <to=yohann@sogelam.com>; rate: -5.5  
May 11 16:38:41 Web2009 postfix/policyd-weight[6115]: decided action=PREPEND X-policyd-weight:  NOT_IN_SBL_XBL_SPAMHAUS=-1.5 NOT_IN_SPAMCOP=-1.5 NOT_IN_BL_NJABL=-1.5 DSBL_ORG=SKIP(0) CL_IP_EQ_HELO_IP=-2 (check from: .inforezo. - helo: .smtp21.orange. - helo-domain: .orange.)  FROM/MX_MATCHES_NOT_HELO(DOMAIN)=1; rate: -5.5; <client=80.12.242.47> <helo=smtp21.orange.fr> <from=fabio@inforezo.com> <to=yohann@sogelam.com>; delay: 1s  
May 11 16:38:41 Web2009 postgrey[29352]: action=pass, reason=client whitelist, client_name=smtp21.orange.fr, client_address=80.12.242.47, sender=fabio@inforezo.com, recipient=yohann@sogelam.com  
May 11 16:38:51 Web2009 amavis[5105]: (05105-16) Passed CLEAN, [80.12.242.47] [82.127.50.113] <fabio@inforezo.com> -> <yohann@sogelam.com>, Message-ID: <16AB9880-5DD0-41F7-9964-8BD6E36E6340@inforezo.com>, mail_id: EnCRiPAXKUCk, Hits: -2.389, size: 1476, queued_as: 271F2118FC7, 10140 ms

[kilburn]

DSBL_ORG isn't causing any issue here, as both attemps pass the policyd-weight filer (the one which uses this test).

The only difference between them is that the first one is temporarily rejected (greylisted) because the combination (193.252.22.30, laurent@inforenzo.com, yohann@sogelam.com) has never been seen before. In contrast, (80.12.242.47, fabio@inforenzo.com, yohann@sogelam.com) has already tried, waited and retried a previous delivery and thus got whitelisted.

If the orange smtp server is properly working, it should retry the first delivery after some time (as the SMTP protocol specifies) and then the server will recognise it as a proper server and let the mail in.

[yohann]

so i think this may be the probleme as now 22h later, i still didn't receive this email.
i guess the orange smtp server isn't working properly.
is there a way to tell policyd to accept from the first time all mail sended by orange smtp server?

Thank you

[kilburn]

See /usr/share/doc/postgrey/README.Debian and the /etc/postgrey directory