SmarterMail please include CIDR notation for Greylisting Filters...

Idea shared by Joe Wolf - 2/19/2018 at 12:04 PM

Completed

Problem: Some large email providers like Microsoft (Outlook, Hotmail, etc.) never pass Greylisting because they don't resend messages from the same server. We have to put all their IP Addresses in Greylisting / Filters so that messages will be delivered.

To get the list of IP Addresses from Microsoft we simply use their SPF Record. So an example for just one of their SPF Records is as follows:

"v=spf1 ip4:157.56.232.0/21 ip4:157.56.240.0/20 ip4:207.46.198.0/25 ip4:207.46.4.128/25 ip4:157.56.24.0/25 ip4:157.55.157.128/25 ip4:157.55.61.0/24 ip4:157.55.49.0/25 ip4:65.55.174.0/25 ip4:65.55.126.0/25 ip4:65.55.113.64/26 ip4:65.55.94.0/25 -all" (and that's just one of several SPF Records I have to input).

It would be nice to be able to cut and paste the entries into SmarterMail, but SmarterMail does not allow CIDR notation. So instead of being able to cut and paste 157.56.232.0/21 in as an entry I have to look up the actual IP Address range and find that 157.56.232.0/21 starts at 157.56.232.0 and ends at 157.56.239.254 and then enter each into SmarterMail.

Solution: Please make my job easier and let me use CIDR notation and simply cut and paste the SPF Records like 157.56.232.0/21 in the example above.

Thanks,

-Joe

23 Replies

Reply to Thread

kevind Replied

2/19/2018 at 1:14 PM

Better yet: Update Greylisting to handle SMTP Clusters

This idea from 2015 has 14 votes:

https://portal.smartertools.com/community/a87031/amend-greylisting-implementation-to-handle-smtp-clusters.aspx

Joe Wolf Replied

2/19/2018 at 1:39 PM

Well that's disappointing. It was supposed to be solved long ago. Office 365 is growing so fast I can't keep up with the IP Address changes, and SmarterMail makes delivery from them impossible because they switch delivery servers at every attempt.

I just turned off Greylisting as a result. It's now more of a liability than an asset. We're in the business of delivering the mail and I have to keep that in mind.

-Joe

kevind Replied

2/19/2018 at 2:38 PM

It will be interesting to see if you get more spam from turning off greylisting.

Joe Wolf Replied

2/19/2018 at 3:45 PM

I'm sure our daily Quarantine Reports to users will be much longer, but I think out spam filters are good enough to catch nearly all the spam.

I don't like the additional load on the server, but the bottom line is that blocking legitimate email because of Greylisting is unacceptable. Microsoft is probably the second largest email volume in the world and even if they're 100% wrong it doesn't matter.

Merle Wait Replied

2/20/2018 at 5:31 AM

We take complaints everyday, because of latency of delivering emails from outlook.

Turning off greylisting creates another issue....

So....

We have the software to automate a fix... if someone can contribute to the outline...

a.) So software would read SPF records for X domain

b.) Through SM API .. add those IPs to bypass greylisting? (api.Admin.AddGreyListBypass)

Is that it??

~~
What we would do is put the any automated 'greylist' adds in a database or at least a parsefile (text file) ... so that we can keep track of what we have done... or need to undo.

~~~

Run this once a week???

kevind Replied

2/20/2018 at 8:35 AM

Merle, good idea! Instead of an API, let's bake this feature into SmarterMail for everyone to enjoy...

Read SPF records for a domain and bypass greylisting for those IPs

I proposed this idea and some related items back in 2015 and it has 24 votes!

https://portal.smartertools.com/community/a86864/why-not-validate-trusted-senders.aspx

It's marked as completed for v16, but not sure if that's the case.

Merle Wait Replied

2/20/2018 at 9:08 AM

I couldn't find anywhere, where there was an automatic update of greylisting adds, but I could be mistaken.

Emmet McGovern Replied

2/20/2018 at 10:15 AM

MightyBlue made an app that does this a long time ago. It probably still works.

http://www.mightyblue.com/products.php?pid=5

Joe Wolf Replied

2/20/2018 at 11:30 AM

Can anyone verify that this app still works? Will it work with complex SPF records that have includes in them? If so then that's great.

SmarterTools, does the SmarterMail service have to be restarted after the ipAccess.xml file is updated for the changes to be in effect?

Thanks,
-Joe

Emmet McGovern Replied

2/20/2018 at 11:49 AM

lemme check. I have an old SM server spooled down that i can risk.

Emmet McGovern Replied

2/20/2018 at 11:57 AM

It does a deep dive. Here's the log and resulting xml. I only added outlook.com to its config.

2/20/2018 1:56:14 PM:
2/20/2018 1:56:14 PM: Starting Script: SMWhiteListFromSPF...
2/20/2018 1:56:14 PM: 2/20/2018 1:56:14 PM
2/20/2018 1:56:14 PM:
2/20/2018 1:56:14 PM: Checking SPF Records For: outlook.com
2/20/2018 1:56:14 PM: Getting IPs from SPF at: outlook.com
2/20/2018 1:56:14 PM: Getting IPs from SPF at: spf-a.outlook.com
2/20/2018 1:56:15 PM: Getting IPs from SPF at: spf-b.outlook.com
2/20/2018 1:56:15 PM: Getting IPs from SPF at: spf.protection.outlook.com
2/20/2018 1:56:15 PM: Getting IPs from SPF at: spfa.protection.outlook.com
2/20/2018 1:56:15 PM: Getting IPs from SPF at: spfb.protection.outlook.com
2/20/2018 1:56:16 PM: Getting IPs from SPF at: spf-a.hotmail.com
2/20/2018 1:56:16 PM: Getting IPs from SPF at: _spf-ssg-b.microsoft.com
2/20/2018 1:56:16 PM: Getting IPs from SPF at: _spf-ssg-c.microsoft.com
2/20/2018 1:56:16 PM: Found IPs for outlook.com - 157.56.232.0-157.56.239.255,157.56.240.0-157.56.255.255,207.46.198.0-207.46.198.127,207.46.4.128-207.46.4.255,157.56.24.0-157.56.24.127,157.55.157.128-157.55.157.255,157.55.61.0-157.55.61.255,157.55.49.0-157.55.49.127,65.55.174.0-65.55.174.127,65.55.126.0-65.55.126.127,65.55.113.64-65.55.113.127,65.55.94.0-65.55.94.127,65.55.78.128-65.55.78.255,111.221.112.0-111.221.119.255,207.46.58.128-207.46.58.255,111.221.69.128-111.221.69.255,111.221.66.0-111.221.66.127,111.221.23.128-111.221.23.255,70.37.151.128-70.37.151.255,157.56.248.0-157.56.255.255,213.199.177.0-213.199.177.63,157.55.225.0-157.55.225.127,157.55.11.0-157.55.11.127,157.55.9.128-157.55.9.255,207.46.100.0-207.46.100.255,207.46.163.0-207.46.163.255,65.55.169.0-65.55.169.255,157.56.110.0-157.56.111.255,157.55.234.0-157.55.234.255,213.199.154.0-213.199.154.255,213.199.180.128-213.199.180.191,157.56.112.0-157.56.112.255,207.46.51.64-207.46.51.127,64.4.22.64-64.4.22.127,40.92.0.0-40.95.255.255,40.107.0.0-40.107.127.255,40.107.128.0-40.107.255.255,134.170.140.0-134.170.140.255,23.103.128.0-23.103.159.255,23.103.198.0-23.103.199.255,65.55.88.0-65.55.88.255,104.47.0.0-104.47.127.255,23.103.200.0-23.103.207.255,23.103.208.0-23.103.215.255,23.103.191.0-23.103.191.255,216.32.180.0-216.32.181.255,94.245.120.64-94.245.120.127,157.55.0.192-157.55.0.255,157.55.1.128-157.55.1.191,157.55.2.0-157.55.2.127,65.54.190.0-65.54.190.255,65.54.51.64-65.54.51.127,65.54.61.64-65.54.61.127,65.55.111.0-65.55.111.255,65.55.116.0-65.55.116.127,65.55.34.0-65.55.34.255,65.55.90.0-65.55.90.255,65.54.241.0-65.54.241.255,207.46.117.0-207.46.117.255,207.68.169.173-207.68.169.176,207.68.176.0-207.68.176.63,207.46.132.128-207.46.132.159,207.68.176.96-207.68.176.127,65.55.238.129-65.55.238.192,65.55.238.129-65.55.238.192,207.46.116.128-207.46.116.135,65.55.178.128-65.55.178.159,213.199.161.128-213.199.161.159,65.55.33.64-65.55.33.79,65.54.121.120-65.54.121.127,65.55.81.48-65.55.81.63,65.55.234.192-65.55.234.255,207.46.200.0-207.46.200.31,65.55.52.224-65.55.52.255,94.245.112.10-94.245.112.11,94.245.112.0-94.245.112.31,111.221.26.0-111.221.26.31,207.46.50.192-207.46.50.255,207.46.50.224-207.46.50.224
2/20/2018 1:56:16 PM: Adding IPArr: 157.56.232.0-157.56.239.255
2/20/2018 1:56:16 PM: Adding IPArr: 157.56.240.0-157.56.255.255
2/20/2018 1:56:16 PM: Adding IPArr: 207.46.198.0-207.46.198.127
2/20/2018 1:56:16 PM: Adding IPArr: 207.46.4.128-207.46.4.255
2/20/2018 1:56:16 PM: Adding IPArr: 157.56.24.0-157.56.24.127
2/20/2018 1:56:16 PM: Adding IPArr: 157.55.157.128-157.55.157.255
2/20/2018 1:56:16 PM: Adding IPArr: 157.55.61.0-157.55.61.255
2/20/2018 1:56:16 PM: Adding IPArr: 157.55.49.0-157.55.49.127
2/20/2018 1:56:16 PM: Adding IPArr: 65.55.174.0-65.55.174.127
2/20/2018 1:56:16 PM: Adding IPArr: 65.55.126.0-65.55.126.127
2/20/2018 1:56:16 PM: Adding IPArr: 65.55.113.64-65.55.113.127
2/20/2018 1:56:16 PM: Adding IPArr: 65.55.94.0-65.55.94.127
2/20/2018 1:56:16 PM: Adding IPArr: 65.55.78.128-65.55.78.255
2/20/2018 1:56:16 PM: Adding IPArr: 111.221.112.0-111.221.119.255
2/20/2018 1:56:16 PM: Adding IPArr: 207.46.58.128-207.46.58.255
2/20/2018 1:56:16 PM: Adding IPArr: 111.221.69.128-111.221.69.255
2/20/2018 1:56:16 PM: Adding IPArr: 111.221.66.0-111.221.66.127
2/20/2018 1:56:16 PM: Adding IPArr: 111.221.23.128-111.221.23.255
2/20/2018 1:56:16 PM: Adding IPArr: 70.37.151.128-70.37.151.255
2/20/2018 1:56:16 PM: Adding IPArr: 157.56.248.0-157.56.255.255
2/20/2018 1:56:16 PM: Adding IPArr: 213.199.177.0-213.199.177.63
2/20/2018 1:56:16 PM: Adding IPArr: 157.55.225.0-157.55.225.127
2/20/2018 1:56:16 PM: Adding IPArr: 157.55.11.0-157.55.11.127
2/20/2018 1:56:16 PM: Adding IPArr: 157.55.9.128-157.55.9.255
2/20/2018 1:56:16 PM: Adding IPArr: 207.46.100.0-207.46.100.255
2/20/2018 1:56:16 PM: Adding IPArr: 207.46.163.0-207.46.163.255
2/20/2018 1:56:16 PM: Adding IPArr: 65.55.169.0-65.55.169.255
2/20/2018 1:56:17 PM: Adding IPArr: 157.56.110.0-157.56.111.255
2/20/2018 1:56:17 PM: Adding IPArr: 157.55.234.0-157.55.234.255
2/20/2018 1:56:17 PM: Adding IPArr: 213.199.154.0-213.199.154.255
2/20/2018 1:56:17 PM: Adding IPArr: 213.199.180.128-213.199.180.191
2/20/2018 1:56:17 PM: Adding IPArr: 157.56.112.0-157.56.112.255
2/20/2018 1:56:17 PM: Adding IPArr: 207.46.51.64-207.46.51.127
2/20/2018 1:56:17 PM: Adding IPArr: 64.4.22.64-64.4.22.127
2/20/2018 1:56:17 PM: Adding IPArr: 40.92.0.0-40.95.255.255
2/20/2018 1:56:17 PM: Adding IPArr: 40.107.0.0-40.107.127.255
2/20/2018 1:56:17 PM: Adding IPArr: 40.107.128.0-40.107.255.255
2/20/2018 1:56:17 PM: Adding IPArr: 134.170.140.0-134.170.140.255
2/20/2018 1:56:17 PM: Adding IPArr: 23.103.128.0-23.103.159.255
2/20/2018 1:56:17 PM: Adding IPArr: 23.103.198.0-23.103.199.255
2/20/2018 1:56:17 PM: Adding IPArr: 65.55.88.0-65.55.88.255
2/20/2018 1:56:17 PM: Adding IPArr: 104.47.0.0-104.47.127.255
2/20/2018 1:56:17 PM: Adding IPArr: 23.103.200.0-23.103.207.255
2/20/2018 1:56:17 PM: Adding IPArr: 23.103.208.0-23.103.215.255
2/20/2018 1:56:17 PM: Adding IPArr: 23.103.191.0-23.103.191.255
2/20/2018 1:56:17 PM: Adding IPArr: 216.32.180.0-216.32.181.255
2/20/2018 1:56:17 PM: Adding IPArr: 94.245.120.64-94.245.120.127
2/20/2018 1:56:17 PM: Adding IPArr: 157.55.0.192-157.55.0.255
2/20/2018 1:56:17 PM: Adding IPArr: 157.55.1.128-157.55.1.191
2/20/2018 1:56:17 PM: Adding IPArr: 157.55.2.0-157.55.2.127
2/20/2018 1:56:17 PM: Adding IPArr: 65.54.190.0-65.54.190.255
2/20/2018 1:56:17 PM: Adding IPArr: 65.54.51.64-65.54.51.127
2/20/2018 1:56:17 PM: Adding IPArr: 65.54.61.64-65.54.61.127
2/20/2018 1:56:17 PM: Adding IPArr: 65.55.111.0-65.55.111.255
2/20/2018 1:56:17 PM: Adding IPArr: 65.55.116.0-65.55.116.127
2/20/2018 1:56:17 PM: Adding IPArr: 65.55.34.0-65.55.34.255
2/20/2018 1:56:17 PM: Adding IPArr: 65.55.90.0-65.55.90.255
2/20/2018 1:56:17 PM: Adding IPArr: 65.54.241.0-65.54.241.255
2/20/2018 1:56:17 PM: Adding IPArr: 207.46.117.0-207.46.117.255
2/20/2018 1:56:17 PM: Adding IPArr: 207.68.169.173-207.68.169.176
2/20/2018 1:56:17 PM: Adding IPArr: 207.68.176.0-207.68.176.63
2/20/2018 1:56:17 PM: Adding IPArr: 207.46.132.128-207.46.132.159
2/20/2018 1:56:17 PM: Adding IPArr: 207.68.176.96-207.68.176.127
2/20/2018 1:56:17 PM: Adding IPArr: 65.55.238.129-65.55.238.192
2/20/2018 1:56:17 PM: Adding IPArr: 65.55.238.129-65.55.238.192
2/20/2018 1:56:17 PM: Adding IPArr: 207.46.116.128-207.46.116.135
2/20/2018 1:56:17 PM: Adding IPArr: 65.55.178.128-65.55.178.159
2/20/2018 1:56:17 PM: Adding IPArr: 213.199.161.128-213.199.161.159
2/20/2018 1:56:17 PM: Adding IPArr: 65.55.33.64-65.55.33.79
2/20/2018 1:56:17 PM: Adding IPArr: 65.54.121.120-65.54.121.127
2/20/2018 1:56:17 PM: Adding IPArr: 65.55.81.48-65.55.81.63
2/20/2018 1:56:17 PM: Adding IPArr: 65.55.234.192-65.55.234.255
2/20/2018 1:56:17 PM: Adding IPArr: 207.46.200.0-207.46.200.31
2/20/2018 1:56:17 PM: Adding IPArr: 65.55.52.224-65.55.52.255
2/20/2018 1:56:17 PM: Adding IPArr: 94.245.112.10-94.245.112.11
2/20/2018 1:56:17 PM: Adding IPArr: 94.245.112.0-94.245.112.31
2/20/2018 1:56:17 PM: Adding IPArr: 111.221.26.0-111.221.26.31
2/20/2018 1:56:17 PM: Adding IPArr: 207.46.50.192-207.46.50.255
2/20/2018 1:56:17 PM: Adding IPArr: 207.46.50.224-207.46.50.224
2/20/2018 1:56:17 PM: SMWhiteListFromSPF Finished...
2/20/2018 1:56:17 PM:

<?xml version="1.0" encoding="utf-8"?>
<Accesses>
<WhiteListAccess>
<AccessItem>
<IP>157.56.232.0-157.56.239.255</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>157.56.240.0-157.56.255.255</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>207.46.198.0-207.46.198.127</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>207.46.4.128-207.46.4.255</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>157.56.24.0-157.56.24.127</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>157.55.157.128-157.55.157.255</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>157.55.61.0-157.55.61.255</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>157.55.49.0-157.55.49.127</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>65.55.174.0-65.55.174.127</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>65.55.126.0-65.55.126.127</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>65.55.113.64-65.55.113.127</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>65.55.94.0-65.55.94.127</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>65.55.78.128-65.55.78.255</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>111.221.112.0-111.221.119.255</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>207.46.58.128-207.46.58.255</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>111.221.69.128-111.221.69.255</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>111.221.66.0-111.221.66.127</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>111.221.23.128-111.221.23.255</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>70.37.151.128-70.37.151.255</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>157.56.248.0-157.56.255.255</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>213.199.177.0-213.199.177.63</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>157.55.225.0-157.55.225.127</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>157.55.11.0-157.55.11.127</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>157.55.9.128-157.55.9.255</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>207.46.100.0-207.46.100.255</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>207.46.163.0-207.46.163.255</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>65.55.169.0-65.55.169.255</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>157.56.110.0-157.56.111.255</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>157.55.234.0-157.55.234.255</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>213.199.154.0-213.199.154.255</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>213.199.180.128-213.199.180.191</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>157.56.112.0-157.56.112.255</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>207.46.51.64-207.46.51.127</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>64.4.22.64-64.4.22.127</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>40.92.0.0-40.95.255.255</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>40.107.0.0-40.107.127.255</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>40.107.128.0-40.107.255.255</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>134.170.140.0-134.170.140.255</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>23.103.128.0-23.103.159.255</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>23.103.198.0-23.103.199.255</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>65.55.88.0-65.55.88.255</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>104.47.0.0-104.47.127.255</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>23.103.200.0-23.103.207.255</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>23.103.208.0-23.103.215.255</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>23.103.191.0-23.103.191.255</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>216.32.180.0-216.32.181.255</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>94.245.120.64-94.245.120.127</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>157.55.0.192-157.55.0.255</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>157.55.1.128-157.55.1.191</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>157.55.2.0-157.55.2.127</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>65.54.190.0-65.54.190.255</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>65.54.51.64-65.54.51.127</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>65.54.61.64-65.54.61.127</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>65.55.111.0-65.55.111.255</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>65.55.116.0-65.55.116.127</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>65.55.34.0-65.55.34.255</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>65.55.90.0-65.55.90.255</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>65.54.241.0-65.54.241.255</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>207.46.117.0-207.46.117.255</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>207.68.169.173-207.68.169.176</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>207.68.176.0-207.68.176.63</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>207.46.132.128-207.46.132.159</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>207.68.176.96-207.68.176.127</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>65.55.238.129-65.55.238.192</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>65.55.238.129-65.55.238.192</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>207.46.116.128-207.46.116.135</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>65.55.178.128-65.55.178.159</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>213.199.161.128-213.199.161.159</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>65.55.33.64-65.55.33.79</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>65.54.121.120-65.54.121.127</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>65.55.81.48-65.55.81.63</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>65.55.234.192-65.55.234.255</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>207.46.200.0-207.46.200.31</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>65.55.52.224-65.55.52.255</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>94.245.112.10-94.245.112.11</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>94.245.112.0-94.245.112.31</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>111.221.26.0-111.221.26.31</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>207.46.50.192-207.46.50.255</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>207.46.50.224-207.46.50.224</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
</WhiteListAccess>
<BlackListAccess />
</Accesses>

Joe Wolf Replied

2/20/2018 at 12:02 PM

Emmet,

Thank you! What version of SM did you test?

That does in seconds what would take at least an hour of manual loading!

I hope the SM service doesn't have to be restarted for it to take effect.

Thanks much,
-Joe

Emmet McGovern Replied

2/20/2018 at 12:19 PM

This was just an old v13. You don't really need a SM server to test. Its a standalone application. I did have to restart the SM service.

Matthew Leyda Replied

2/20/2018 at 1:00 PM

I use it on V15.7.6614 and it works. Haven't tried it on V16.

Kendra Support http://www.kendra.com support@kendra.com 425-397-7911 Junk Email filtered ISP

Joe Wolf Replied

2/20/2018 at 1:27 PM

I also verified that it works on SM 15.x

A couple of notes...

It seems that the SM service must be restarted (a negative)

It does a very good job of extracting and converting SPF Records.

This program updates the ipAccess.xml file which is the main Whitelist / Blacklist file. I'd much rather it update the greyListBypass.xml which only deals with Greylisting. They accomplish the same thing, but I think greyListBypass.xml would be the proper file to update. You can't just manually change the file name because the format of the two .xml files is slightly different. I don't know the author but maybe we can get it changed?

Great find though!! This SHOULD be built into SmarterMail!!!

-Joe

Emmet McGovern Replied

2/20/2018 at 1:33 PM

This has been out since at least SM6. That's when I used it last in production. I don't know if I would trust an automated restart. It would be nice if SM reloaded xml on file changes.

Ben Smith Replied

11/23/2018 at 11:28 PM

Would Mightyblue work on a 2012 R2 server? It requires .NET 3.5 and I dont want to break my newer versions of .NET.

Installing .NET versions 'out of order' can cause issues sometimes.

Thanks

Derek Curtis Replied

11/26/2018 at 10:30 AM

Employee Post

I changed this to "Under Consideration" as we're discussing the ability to add CIDR across the product. This is just one area where it would be helpful but there are others.

Derek Curtis COO SmarterTools Inc. www.smartertools.com

Paul Blank Replied

11/28/2018 at 9:50 AM

Ben, looks like you can download the Mightyblue RBL scan trial and see if that works. Usually having .net 3.5 installed doesn't break newer versions. Note that the programs in the trial .zip are dated 2011, so this hasn't been updated in some time.

David Fisher Replied

12/18/2018 at 1:35 PM

Hi,

Instead of disabling Greylisting, couldn't you just add Country .us and this would allow all the Microsoft and other US based IP's? But still do greylisting from other countries?

It would be nice if SM would look up the rDNS and allow us to add like *.outlook.com to the greylisting exception area (Filters).

Also hasn't CIDR adding been added to SM v17/100?

-dave

echoDreamz Replied

12/19/2018 at 4:11 PM

Wasnt the country thing a feature of older SMs?

Reto Replied

12/20/2018 at 11:38 AM

Yes, not in v17 and I miss it.

We had local countries on the whitelist and since we upraded to v17 we have some complaints about emails getting in with big delay.

Employee Replied

3/11/2019 at 3:40 PM

Employee Post

In Build 6985, which was released on Feb 15, 2019, we added greylist filters back to SmarterMail. As a system administrator, you can find the Greylist Filters tab in the Antispam settings. In conjunction with the Options tab > Applies To setting, the Greylist Filters tab allows you to specify whether to apply greylisting to all IPs, all IPs except the ones added as filters, or only the IPs added as filters.

On fresh installations, and those that use the Reset Antispam Settings option, we include over 140 default filters for common providers like Outlook.com, AOL.com, Gmail.com, Amazon.com, Amazon Cloud and more. You can add filters by IP address (by entering a single IP address, IP range or CIDR block) or by country code.

Back to Community Threads

Please leave this box unchecked

23 Replies

Reply to Thread

Tags

Related Knowledge Base Articles