Back to Community Threads
10
SmarterMail please include CIDR notation for Greylisting Filters...
Idea shared by Joe Wolf - 2/19/2018 at 12:04 PM
Completed
Problem: Some large email providers like Microsoft (Outlook, Hotmail, etc.) never pass Greylisting because they don't resend messages from the same server.  We have to put all their IP Addresses in Greylisting / Filters so that messages will be delivered.
 
To get the list of IP Addresses from Microsoft we simply use their SPF Record.  So an example for just one of their SPF Records is as follows: 
 
"v=spf1 ip4:157.56.232.0/21 ip4:157.56.240.0/20 ip4:207.46.198.0/25 ip4:207.46.4.128/25 ip4:157.56.24.0/25 ip4:157.55.157.128/25 ip4:157.55.61.0/24 ip4:157.55.49.0/25 ip4:65.55.174.0/25 ip4:65.55.126.0/25 ip4:65.55.113.64/26 ip4:65.55.94.0/25 -all" (and that's just one of several SPF Records I have to input).
 
It would be nice to be able to cut and paste the entries into SmarterMail, but SmarterMail does not allow CIDR notation.  So instead of being able to cut and paste 157.56.232.0/21 in as an entry I have to look up the actual IP Address range and find that 157.56.232.0/21 starts at 157.56.232.0 and ends at 157.56.239.254 and then enter each into SmarterMail.
 
Solution:  Please make my job easier and let me use CIDR notation and simply cut and paste the SPF Records like 157.56.232.0/21 in the example above.
 
Thanks,
-Joe

23 Replies

Reply to Thread
6
Better yet: Update Greylisting to handle SMTP Clusters
 
This idea from 2015 has 14 votes:
 
0
Well that's disappointing. It was supposed to be solved long ago. Office 365 is growing so fast I can't keep up with the IP Address changes, and SmarterMail makes delivery from them impossible because they switch delivery servers at every attempt.

I just turned off Greylisting as a result. It's now more of a liability than an asset. We're in the business of delivering the mail and I have to keep that in mind.

-Joe
1
It will be interesting to see if you get more spam from turning off greylisting.
0
I'm sure our daily Quarantine Reports to users will be much longer, but I think out spam filters are good enough to catch nearly all the spam.

I don't like the additional load on the server, but the bottom line is that blocking legitimate email because of Greylisting is unacceptable. Microsoft is probably the second largest email volume in the world and even if they're 100% wrong it doesn't matter.
2
We take complaints everyday, because of latency of delivering emails from outlook.
Turning off greylisting  creates another issue....
So....
We have the software to automate a fix... if someone can contribute to the outline...
a.) So software would read SPF records for X domain
b.) Through SM API .. add those IPs to bypass greylisting? (api.Admin.AddGreyListBypass)
Is that it??
~~
What we would do is put the any automated 'greylist' adds in a database or at least a parsefile (text file) ... so that we can keep track of what we have done... or need to undo.
~~~
Run this once a week???
 
 
 
3
Merle, good idea!  Instead of an API, let's bake this feature into SmarterMail for everyone to enjoy...
Read SPF records for a domain and bypass greylisting for those IPs
I proposed this idea and some related items back in 2015 and it has 24 votes!
 
It's marked as completed for v16, but not sure if that's the case.
0
I couldn't find anywhere, where there was an automatic update of greylisting adds, but I could be mistaken.
1
MightyBlue made an app that does this a long time ago. It probably still works.
 
0
Can anyone verify that this app still works? Will it work with complex SPF records that have includes in them? If so then that's great.

SmarterTools, does the SmarterMail service have to be restarted after the ipAccess.xml file is updated for the changes to be in effect?

Thanks,
-Joe
0
lemme check. I have an old SM server spooled down that i can risk.
0
It does a deep dive. Here's the log and resulting xml. I only added outlook.com to its config.

2/20/2018 1:56:14 PM:
2/20/2018 1:56:14 PM: Starting Script: SMWhiteListFromSPF...
2/20/2018 1:56:14 PM: 2/20/2018 1:56:14 PM
2/20/2018 1:56:14 PM:
2/20/2018 1:56:14 PM: Checking SPF Records For: outlook.com
2/20/2018 1:56:14 PM: Getting IPs from SPF at: outlook.com
2/20/2018 1:56:14 PM: Getting IPs from SPF at: spf-a.outlook.com
2/20/2018 1:56:15 PM: Getting IPs from SPF at: spf-b.outlook.com
2/20/2018 1:56:15 PM: Getting IPs from SPF at: spf.protection.outlook.com
2/20/2018 1:56:15 PM: Getting IPs from SPF at: spfa.protection.outlook.com
2/20/2018 1:56:15 PM: Getting IPs from SPF at: spfb.protection.outlook.com
2/20/2018 1:56:16 PM: Getting IPs from SPF at: spf-a.hotmail.com
2/20/2018 1:56:16 PM: Getting IPs from SPF at: _spf-ssg-b.microsoft.com
2/20/2018 1:56:16 PM: Getting IPs from SPF at: _spf-ssg-c.microsoft.com
2/20/2018 1:56:16 PM: Found IPs for outlook.com - 157.56.232.0-157.56.239.255,157.56.240.0-157.56.255.255,207.46.198.0-207.46.198.127,207.46.4.128-207.46.4.255,157.56.24.0-157.56.24.127,157.55.157.128-157.55.157.255,157.55.61.0-157.55.61.255,157.55.49.0-157.55.49.127,65.55.174.0-65.55.174.127,65.55.126.0-65.55.126.127,65.55.113.64-65.55.113.127,65.55.94.0-65.55.94.127,65.55.78.128-65.55.78.255,111.221.112.0-111.221.119.255,207.46.58.128-207.46.58.255,111.221.69.128-111.221.69.255,111.221.66.0-111.221.66.127,111.221.23.128-111.221.23.255,70.37.151.128-70.37.151.255,157.56.248.0-157.56.255.255,213.199.177.0-213.199.177.63,157.55.225.0-157.55.225.127,157.55.11.0-157.55.11.127,157.55.9.128-157.55.9.255,207.46.100.0-207.46.100.255,207.46.163.0-207.46.163.255,65.55.169.0-65.55.169.255,157.56.110.0-157.56.111.255,157.55.234.0-157.55.234.255,213.199.154.0-213.199.154.255,213.199.180.128-213.199.180.191,157.56.112.0-157.56.112.255,207.46.51.64-207.46.51.127,64.4.22.64-64.4.22.127,40.92.0.0-40.95.255.255,40.107.0.0-40.107.127.255,40.107.128.0-40.107.255.255,134.170.140.0-134.170.140.255,23.103.128.0-23.103.159.255,23.103.198.0-23.103.199.255,65.55.88.0-65.55.88.255,104.47.0.0-104.47.127.255,23.103.200.0-23.103.207.255,23.103.208.0-23.103.215.255,23.103.191.0-23.103.191.255,216.32.180.0-216.32.181.255,94.245.120.64-94.245.120.127,157.55.0.192-157.55.0.255,157.55.1.128-157.55.1.191,157.55.2.0-157.55.2.127,65.54.190.0-65.54.190.255,65.54.51.64-65.54.51.127,65.54.61.64-65.54.61.127,65.55.111.0-65.55.111.255,65.55.116.0-65.55.116.127,65.55.34.0-65.55.34.255,65.55.90.0-65.55.90.255,65.54.241.0-65.54.241.255,207.46.117.0-207.46.117.255,207.68.169.173-207.68.169.176,207.68.176.0-207.68.176.63,207.46.132.128-207.46.132.159,207.68.176.96-207.68.176.127,65.55.238.129-65.55.238.192,65.55.238.129-65.55.238.192,207.46.116.128-207.46.116.135,65.55.178.128-65.55.178.159,213.199.161.128-213.199.161.159,65.55.33.64-65.55.33.79,65.54.121.120-65.54.121.127,65.55.81.48-65.55.81.63,65.55.234.192-65.55.234.255,207.46.200.0-207.46.200.31,65.55.52.224-65.55.52.255,94.245.112.10-94.245.112.11,94.245.112.0-94.245.112.31,111.221.26.0-111.221.26.31,207.46.50.192-207.46.50.255,207.46.50.224-207.46.50.224
2/20/2018 1:56:16 PM: Adding IPArr: 157.56.232.0-157.56.239.255
2/20/2018 1:56:16 PM: Adding IPArr: 157.56.240.0-157.56.255.255
2/20/2018 1:56:16 PM: Adding IPArr: 207.46.198.0-207.46.198.127
2/20/2018 1:56:16 PM: Adding IPArr: 207.46.4.128-207.46.4.255
2/20/2018 1:56:16 PM: Adding IPArr: 157.56.24.0-157.56.24.127
2/20/2018 1:56:16 PM: Adding IPArr: 157.55.157.128-157.55.157.255
2/20/2018 1:56:16 PM: Adding IPArr: 157.55.61.0-157.55.61.255
2/20/2018 1:56:16 PM: Adding IPArr: 157.55.49.0-157.55.49.127
2/20/2018 1:56:16 PM: Adding IPArr: 65.55.174.0-65.55.174.127
2/20/2018 1:56:16 PM: Adding IPArr: 65.55.126.0-65.55.126.127
2/20/2018 1:56:16 PM: Adding IPArr: 65.55.113.64-65.55.113.127
2/20/2018 1:56:16 PM: Adding IPArr: 65.55.94.0-65.55.94.127
2/20/2018 1:56:16 PM: Adding IPArr: 65.55.78.128-65.55.78.255
2/20/2018 1:56:16 PM: Adding IPArr: 111.221.112.0-111.221.119.255
2/20/2018 1:56:16 PM: Adding IPArr: 207.46.58.128-207.46.58.255
2/20/2018 1:56:16 PM: Adding IPArr: 111.221.69.128-111.221.69.255
2/20/2018 1:56:16 PM: Adding IPArr: 111.221.66.0-111.221.66.127
2/20/2018 1:56:16 PM: Adding IPArr: 111.221.23.128-111.221.23.255
2/20/2018 1:56:16 PM: Adding IPArr: 70.37.151.128-70.37.151.255
2/20/2018 1:56:16 PM: Adding IPArr: 157.56.248.0-157.56.255.255
2/20/2018 1:56:16 PM: Adding IPArr: 213.199.177.0-213.199.177.63
2/20/2018 1:56:16 PM: Adding IPArr: 157.55.225.0-157.55.225.127
2/20/2018 1:56:16 PM: Adding IPArr: 157.55.11.0-157.55.11.127
2/20/2018 1:56:16 PM: Adding IPArr: 157.55.9.128-157.55.9.255
2/20/2018 1:56:16 PM: Adding IPArr: 207.46.100.0-207.46.100.255
2/20/2018 1:56:16 PM: Adding IPArr: 207.46.163.0-207.46.163.255
2/20/2018 1:56:16 PM: Adding IPArr: 65.55.169.0-65.55.169.255
2/20/2018 1:56:17 PM: Adding IPArr: 157.56.110.0-157.56.111.255
2/20/2018 1:56:17 PM: Adding IPArr: 157.55.234.0-157.55.234.255
2/20/2018 1:56:17 PM: Adding IPArr: 213.199.154.0-213.199.154.255
2/20/2018 1:56:17 PM: Adding IPArr: 213.199.180.128-213.199.180.191
2/20/2018 1:56:17 PM: Adding IPArr: 157.56.112.0-157.56.112.255
2/20/2018 1:56:17 PM: Adding IPArr: 207.46.51.64-207.46.51.127
2/20/2018 1:56:17 PM: Adding IPArr: 64.4.22.64-64.4.22.127
2/20/2018 1:56:17 PM: Adding IPArr: 40.92.0.0-40.95.255.255
2/20/2018 1:56:17 PM: Adding IPArr: 40.107.0.0-40.107.127.255
2/20/2018 1:56:17 PM: Adding IPArr: 40.107.128.0-40.107.255.255
2/20/2018 1:56:17 PM: Adding IPArr: 134.170.140.0-134.170.140.255
2/20/2018 1:56:17 PM: Adding IPArr: 23.103.128.0-23.103.159.255
2/20/2018 1:56:17 PM: Adding IPArr: 23.103.198.0-23.103.199.255
2/20/2018 1:56:17 PM: Adding IPArr: 65.55.88.0-65.55.88.255
2/20/2018 1:56:17 PM: Adding IPArr: 104.47.0.0-104.47.127.255
2/20/2018 1:56:17 PM: Adding IPArr: 23.103.200.0-23.103.207.255
2/20/2018 1:56:17 PM: Adding IPArr: 23.103.208.0-23.103.215.255
2/20/2018 1:56:17 PM: Adding IPArr: 23.103.191.0-23.103.191.255
2/20/2018 1:56:17 PM: Adding IPArr: 216.32.180.0-216.32.181.255
2/20/2018 1:56:17 PM: Adding IPArr: 94.245.120.64-94.245.120.127
2/20/2018 1:56:17 PM: Adding IPArr: 157.55.0.192-157.55.0.255
2/20/2018 1:56:17 PM: Adding IPArr: 157.55.1.128-157.55.1.191
2/20/2018 1:56:17 PM: Adding IPArr: 157.55.2.0-157.55.2.127
2/20/2018 1:56:17 PM: Adding IPArr: 65.54.190.0-65.54.190.255
2/20/2018 1:56:17 PM: Adding IPArr: 65.54.51.64-65.54.51.127
2/20/2018 1:56:17 PM: Adding IPArr: 65.54.61.64-65.54.61.127
2/20/2018 1:56:17 PM: Adding IPArr: 65.55.111.0-65.55.111.255
2/20/2018 1:56:17 PM: Adding IPArr: 65.55.116.0-65.55.116.127
2/20/2018 1:56:17 PM: Adding IPArr: 65.55.34.0-65.55.34.255
2/20/2018 1:56:17 PM: Adding IPArr: 65.55.90.0-65.55.90.255
2/20/2018 1:56:17 PM: Adding IPArr: 65.54.241.0-65.54.241.255
2/20/2018 1:56:17 PM: Adding IPArr: 207.46.117.0-207.46.117.255
2/20/2018 1:56:17 PM: Adding IPArr: 207.68.169.173-207.68.169.176
2/20/2018 1:56:17 PM: Adding IPArr: 207.68.176.0-207.68.176.63
2/20/2018 1:56:17 PM: Adding IPArr: 207.46.132.128-207.46.132.159
2/20/2018 1:56:17 PM: Adding IPArr: 207.68.176.96-207.68.176.127
2/20/2018 1:56:17 PM: Adding IPArr: 65.55.238.129-65.55.238.192
2/20/2018 1:56:17 PM: Adding IPArr: 65.55.238.129-65.55.238.192
2/20/2018 1:56:17 PM: Adding IPArr: 207.46.116.128-207.46.116.135
2/20/2018 1:56:17 PM: Adding IPArr: 65.55.178.128-65.55.178.159
2/20/2018 1:56:17 PM: Adding IPArr: 213.199.161.128-213.199.161.159
2/20/2018 1:56:17 PM: Adding IPArr: 65.55.33.64-65.55.33.79
2/20/2018 1:56:17 PM: Adding IPArr: 65.54.121.120-65.54.121.127
2/20/2018 1:56:17 PM: Adding IPArr: 65.55.81.48-65.55.81.63
2/20/2018 1:56:17 PM: Adding IPArr: 65.55.234.192-65.55.234.255
2/20/2018 1:56:17 PM: Adding IPArr: 207.46.200.0-207.46.200.31
2/20/2018 1:56:17 PM: Adding IPArr: 65.55.52.224-65.55.52.255
2/20/2018 1:56:17 PM: Adding IPArr: 94.245.112.10-94.245.112.11
2/20/2018 1:56:17 PM: Adding IPArr: 94.245.112.0-94.245.112.31
2/20/2018 1:56:17 PM: Adding IPArr: 111.221.26.0-111.221.26.31
2/20/2018 1:56:17 PM: Adding IPArr: 207.46.50.192-207.46.50.255
2/20/2018 1:56:17 PM: Adding IPArr: 207.46.50.224-207.46.50.224
2/20/2018 1:56:17 PM: SMWhiteListFromSPF Finished...
2/20/2018 1:56:17 PM:

<?xml version="1.0" encoding="utf-8"?>
<Accesses>
<WhiteListAccess>
<AccessItem>
<IP>157.56.232.0-157.56.239.255</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>157.56.240.0-157.56.255.255</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>207.46.198.0-207.46.198.127</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>207.46.4.128-207.46.4.255</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>157.56.24.0-157.56.24.127</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>157.55.157.128-157.55.157.255</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>157.55.61.0-157.55.61.255</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>157.55.49.0-157.55.49.127</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>65.55.174.0-65.55.174.127</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>65.55.126.0-65.55.126.127</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>65.55.113.64-65.55.113.127</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>65.55.94.0-65.55.94.127</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>65.55.78.128-65.55.78.255</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>111.221.112.0-111.221.119.255</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>207.46.58.128-207.46.58.255</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>111.221.69.128-111.221.69.255</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>111.221.66.0-111.221.66.127</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>111.221.23.128-111.221.23.255</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>70.37.151.128-70.37.151.255</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>157.56.248.0-157.56.255.255</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>213.199.177.0-213.199.177.63</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>157.55.225.0-157.55.225.127</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>157.55.11.0-157.55.11.127</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>157.55.9.128-157.55.9.255</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>207.46.100.0-207.46.100.255</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>207.46.163.0-207.46.163.255</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>65.55.169.0-65.55.169.255</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>157.56.110.0-157.56.111.255</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>157.55.234.0-157.55.234.255</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>213.199.154.0-213.199.154.255</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>213.199.180.128-213.199.180.191</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>157.56.112.0-157.56.112.255</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>207.46.51.64-207.46.51.127</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>64.4.22.64-64.4.22.127</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>40.92.0.0-40.95.255.255</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>40.107.0.0-40.107.127.255</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>40.107.128.0-40.107.255.255</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>134.170.140.0-134.170.140.255</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>23.103.128.0-23.103.159.255</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>23.103.198.0-23.103.199.255</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>65.55.88.0-65.55.88.255</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>104.47.0.0-104.47.127.255</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>23.103.200.0-23.103.207.255</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>23.103.208.0-23.103.215.255</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>23.103.191.0-23.103.191.255</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>216.32.180.0-216.32.181.255</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>94.245.120.64-94.245.120.127</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>157.55.0.192-157.55.0.255</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>157.55.1.128-157.55.1.191</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>157.55.2.0-157.55.2.127</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>65.54.190.0-65.54.190.255</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>65.54.51.64-65.54.51.127</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>65.54.61.64-65.54.61.127</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>65.55.111.0-65.55.111.255</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>65.55.116.0-65.55.116.127</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>65.55.34.0-65.55.34.255</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>65.55.90.0-65.55.90.255</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>65.54.241.0-65.54.241.255</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>207.46.117.0-207.46.117.255</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>207.68.169.173-207.68.169.176</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>207.68.176.0-207.68.176.63</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>207.46.132.128-207.46.132.159</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>207.68.176.96-207.68.176.127</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>65.55.238.129-65.55.238.192</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>65.55.238.129-65.55.238.192</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>207.46.116.128-207.46.116.135</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>65.55.178.128-65.55.178.159</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>213.199.161.128-213.199.161.159</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>65.55.33.64-65.55.33.79</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>65.54.121.120-65.54.121.127</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>65.55.81.48-65.55.81.63</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>65.55.234.192-65.55.234.255</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>207.46.200.0-207.46.200.31</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>65.55.52.224-65.55.52.255</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>94.245.112.10-94.245.112.11</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>94.245.112.0-94.245.112.31</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>111.221.26.0-111.221.26.31</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>207.46.50.192-207.46.50.255</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
<AccessItem>
<IP>207.46.50.224-207.46.50.224</IP>
<Description>SMWhiteListFromSPF-Do-Not-Edit-Manually:outlook.com</Description>
<Protocols>GREYLIST</Protocols>
</AccessItem>
</WhiteListAccess>
<BlackListAccess />
</Accesses>
0
Emmet,

Thank you! What version of SM did you test?

That does in seconds what would take at least an hour of manual loading!

I hope the SM service doesn't have to be restarted for it to take effect.

Thanks much,
-Joe
0
This was just an old v13. You don't really need a SM server to test. Its a standalone application. I did have to restart the SM service.
0
I use it on V15.7.6614 and it works. Haven't tried it on V16.
Kendra Support http://www.kendra.com support@kendra.com 425-397-7911 Junk Email filtered ISP
0
I also verified that it works on SM 15.x

A couple of notes...

It seems that the SM service must be restarted (a negative)

It does a very good job of extracting and converting SPF Records.

This program updates the ipAccess.xml file which is the main Whitelist / Blacklist file. I'd much rather it update the greyListBypass.xml which only deals with Greylisting. They accomplish the same thing, but I think greyListBypass.xml would be the proper file to update. You can't just manually change the file name because the format of the two .xml files is slightly different. I don't know the author but maybe we can get it changed?

Great find though!! This SHOULD be built into SmarterMail!!!

-Joe
0
This has been out since at least SM6. That's when I used it last in production. I don't know if I would trust an automated restart. It would be nice if SM reloaded xml on file changes.
0
Would Mightyblue work on a 2012 R2 server? It requires .NET 3.5 and I dont want to break my newer versions of .NET.

Installing .NET versions 'out of order' can cause issues sometimes.

Thanks
0
Derek Curtis Replied
11/26/2018 at 10:30 AM
Employee Post
I changed this to "Under Consideration" as we're discussing the ability to add CIDR across the product. This is just one area where it would be helpful but there are others. 
Derek Curtis COO SmarterTools Inc. (877) 357-6278 www.smartertools.com
0
Ben, looks like you can download the Mightyblue RBL scan trial and see if that works. Usually having .net 3.5 installed doesn't break newer versions. Note that the programs in the trial .zip are dated 2011, so this hasn't been updated in some time.
0
Hi,

  Instead of disabling Greylisting, couldn't you just add Country .us and this would allow all the Microsoft and other US based IP's?  But still do greylisting from other countries?

   It would be nice if SM would look up the rDNS and allow us to add like *.outlook.com to the greylisting exception area (Filters).

   Also hasn't CIDR adding been added to SM v17/100?

-dave
1
Wasnt the country thing a feature of older SMs?
0
Yes, not in v17 and I miss it. 

We had local countries on the whitelist and since we upraded to v17 we have some complaints about emails getting in with big delay. 
0
Andrea Free Replied
3/11/2019 at 3:40 PM
Employee Post
In Build 6985, which was released on Feb 15, 2019, we added greylist filters back to SmarterMail. As a system administrator, you can find the Greylist Filters tab in the Antispam settings. In conjunction with the Options tab > Applies To setting, the Greylist Filters tab allows you to specify whether to apply greylisting to all IPs, all IPs except the ones added as filters, or only the IPs added as filters. 

On fresh installations, and those that use the Reset Antispam Settings option, we include over 140 default filters for common providers like Outlook.com, AOL.com, Gmail.com, Amazon.com, Amazon Cloud and more. You can add filters by IP address (by entering a single IP address, IP range or CIDR block) or by country code. 
Andrea Free SmarterTools Inc. 877-357-6278 www.smartertools.com
Back to Community Threads

Reply to Thread

Related Knowledge Base Articles

Recommended SPAM SettingsSmarterMail > Antispam and Antivirus
Configure Perfmon to capture Disk IO activity and potential Disk Issues.SmarterMail > Troubleshooting
Deploying Rspamd For Use With SmarterMailSmarterMail > Server Configuration and Management
Set up SmarterMail as an IIS Site in IIS 8SmarterMail > Server Configuration and Management
Set up Autodiscover for SmarterMailSmarterMail > Installation and Configuration