AW: Postscreen/Greylisting und Office 365

[Hoyer-Reuther, Christian]

Hallo Martin,

im Technet gibt es eine Liste der verwendeten IP's:

https://technet.microsoft.com/en-us/library/dn163583%28v=exchg.150%29.aspx

Viele Grüße.

Christian

-----Ursprüngliche Nachricht-----
Von: Postfixbuch-users [mailto:postfixbuch-users-bounces at listen.jpberlin.de] Im Auftrag von Martin Steigerwald
Gesendet: Mittwoch, 11. Oktober 2017 10:35
An: Diskussionen und Support rund um Postfix
Betreff: Postscreen/Greylisting und Office 365

Hallo.

Ich sehe hier von einer Mail (immer dieselbe) von einem Office 365-Kunden:

mondschein:~> grep learning /var/log/mail.log
Oct 10 22:42:22 mondschein postfix/postscreen[14335]: NOQUEUE: reject: RCPT from [104.47.32.94]:58188: 450 4.3.2 Service currently unavailable; from=<[…]>, to=<martin@[…]>, proto=ESMTP, helo=<NAM01-SN1-obe.outbound.protection.outlook.com>
Oct 10 22:57:05 mondschein postfix/postscreen[14815]: NOQUEUE: reject: RCPT from [104.47.36.90]:12856: 450 4.3.2 Service currently unavailable; from=<[…]>, to=<martin@[…]>, proto=ESMTP, helo=<NAM02-SN1-obe.outbound.protection.outlook.com>
Oct 10 23:14:30 mondschein postfix/postscreen[15293]: NOQUEUE: reject: RCPT from [104.47.37.120]:54594: 450 4.3.2 Service currently unavailable; from=<[…]>, to=<martin@[…]>, proto=ESMTP, helo=<NAM02-CY1-obe.outbound.protection.outlook.com>
Oct 11 00:14:56 mondschein postfix/postscreen[15293]: NOQUEUE: reject: RCPT from [104.47.32.117]:43776: 450 4.3.2 Service currently unavailable; from=<[…]>, to=<martin@[…]>, proto=ESMTP, helo=<NAM01-SN1-obe.outbound.protection.outlook.com>
Oct 11 01:15:31 mondschein postfix/postscreen[17161]: NOQUEUE: reject: RCPT from [104.47.38.90]:22840: 450 4.3.2 Service currently unavailable; from=<[…]>, to=<martin@[…]>, proto=ESMTP, helo=<NAM02-BL2-obe.outbound.protection.outlook.com>
Oct 11 02:15:36 mondschein postfix/postscreen[17782]: NOQUEUE: reject: RCPT from [104.47.32.106]:17504: 450 4.3.2 Service currently unavailable; from=<[…]>, to=<martin@[…]>, proto=ESMTP, helo=<NAM01-SN1-obe.outbound.protection.outlook.com>
Oct 11 03:15:03 mondschein postfix/postscreen[18080]: NOQUEUE: reject: RCPT from [104.47.42.125]:7104: 450 4.3.2 Service currently unavailable; from=<[…]>, to=<martin@[…]>, proto=ESMTP, helo=<NAM03-BY2-obe.outbound.protection.outlook.com>
Oct 11 04:15:32 mondschein postfix/postscreen[19790]: NOQUEUE: reject: RCPT from [104.47.32.128]:60192: 450 4.3.2 Service currently unavailable; from=<[…]>, to=<martin@[…]>, proto=ESMTP, helo=<NAM01-SN1-obe.outbound.protection.outlook.com>
Oct 11 05:15:36 mondschein postfix/postscreen[20871]: NOQUEUE: reject: RCPT from [104.47.37.116]:63584: 450 4.3.2 Service currently unavailable; from=<[…]>, to=<martin@[…]>, proto=ESMTP, helo=<NAM02-CY1-obe.outbound.protection.outlook.com>
Oct 11 06:15:25 mondschein postfix/postscreen[21421]: NOQUEUE: reject: RCPT from [104.47.41.102]:45469: 450 4.3.2 Service currently unavailable; from=<[…]>, to=<martin@[…]>, proto=ESMTP, helo=<NAM03-DM3-obe.outbound.protection.outlook.com>
Oct 11 07:15:23 mondschein postfix/postscreen[22497]: NOQUEUE: reject: RCPT from [104.47.33.136]:17044: 450 4.3.2 Service currently unavailable; from=<[…]>, to=<martin@[…]>, proto=ESMTP, helo=<NAM01-BN3-obe.outbound.protection.outlook.com>
Oct 11 08:15:28 mondschein postfix/postscreen[23101]: NOQUEUE: reject: RCPT from [104.47.41.110]:55774: 450 4.3.2 Service currently unavailable; from=<[…]>, to=<martin@[…]>, proto=ESMTP, helo=<NAM03-DM3-obe.outbound.protection.outlook.com>
Oct 11 09:15:07 mondschein postfix/postscreen[23532]: NOQUEUE: reject: RCPT from [104.47.33.96]:45380: 450 4.3.2 Service currently unavailable; from=<[…]>, to=<martin@[…]>, proto=ESMTP, helo=<NAM01-BN3-obe.outbound.protection.outlook.com>
Oct 11 10:15:20 mondschein postfix/postscreen[24739]: NOQUEUE: reject: RCPT from [104.47.33.99]:2243: 450 4.3.2 Service currently unavailable; from=<[…]>, to=<martin@[…]>, proto=ESMTP, helo=<NAM01-BN3-obe.outbound.protection.outlook.com>

Und hab da jetzt:

mondschein:/etc/postfix> grep 104 postscreen_access.cidr
104.47.32.0/20          permit


Irgendeine andere Idee?

Finde ich ja jetzt nicht wirklich gut, was Microsoft da macht, aber ob es
wirklich irgendwelche Standards verletzt? Es verletzt halt die Annahme von
Postscreen oder Greylisting, dass es derselbe MTA nochmal versuchen wird.