Can't keep greylisting disabled on Lion Server.

Yeah, I'm having the same problem. I tried issuing the command:

sudo serveradmin settings mail:postfix:smtpd_recipient_restrictions="permit_sasl_authenticated permit_mynetworks reject_unauth_destination permit"

The default value for that line above, although not reported from a normal

serveradmin settings mail

"permit_sasl_authenticated permit_mynetworks reject_unauth_destination check_policy_service unix:private/policy permit"

No idea why this isn't sticking, but it's driving me nuts.

You need to stop using Server Admin or Server.

Everytime you use them it will recreate the file and thus erasing your modification.

I manualy replaced the line:

smtpd_recipient_restrictions = permit_sasl_authenticated permit_mynetworks reject_unauth_destination check_policy_service unix:private/policy permit

with

smtpd_recipient_restrictions = permit_sasl_authenticated permit_mynetworks reject_unauth_destination permit

in /etc/postfix/main.cf.

Greylisting is still disabled even after a reboot

For some reason I had assumed that entering the

serveradmin

For what it's worth to others, note that saving changes to a non-Mail service (VPN, Web, Wiki, etc.) in Server.app or Server Admin.app does not cause a re-write of the Mail config files. If you need to manage the VPN or something else through the GUI, that's fine. Just don't play around with the Mail tab anymore or you'll have to re-greylist afterward.

Thanks, gregoryfromcork.

How do you manually replace the line. Sorry new to MAC and looking at console and getting the same error over and over

8/17/11 9:42:44.000 PM /usr/libexec/postfix/greylist.pl:

Temporary message rejection to: <xxx@xxxxx.net> from: <notification+p1l=hcee@facebookmail.com> sent from: [69.171.232.141] for: 60 seconds due to greylisting

claytonfromgermantown hills wrote:

How do you manually replace the line.

We stated it above, but here's the run-down:

1. Edit:

   /etc/postfix/main.cf

2. Toward the bottom, change the line beginning with with

   smtpd_recipient_restrictions

   to be:

   
   

   smtpd_recipient_restrictions="permit_sasl_authenticated permit_mynetworks reject_unauth_destination permit"

   
   

   (essentially, you'll just remove the

   check_policy_service unix:private/policy entries

   from the line).

   
   

3. Save the file, then reload postfix:
   

   $ sudo postfix reload

A possible partial fix involves adding known domains to the whitelist section of file /etc/mail/spamassassin/local.cf. The edits survive refreshes to the file from Server.app and, once I did that, email from those domains (which was getting greylisted and delayed) now comes through immediately.

I got sick of this and wrote a script to keep it disabled.

jaydisk, this is cool!

But, besides your effort, is there a way of keeping Server.app of touching main.cf? I wonder for example if I create a headerchecks file and put the relevant lines in main,cf, will Server.app remove them as well, since they do not exist on the original?

Best regards

Kostas

Is headerchecks its own directive? I would not expect that Server reverts the entire main.cf file, rather just the directives it maintains.