Greylisting defers emails from senders that use multiple IP addresses




  • Avatar
    Fouad Ahmed Fouad

    I didn't use Greylisting for this issue, it's not Outlook domains only what use many ip addresses, it's all major companies like Google and other major hosting companies.

  • Avatar
    Pavel Mikhaylov

    Hello, Fouad Ahmed Fouad,

    The article addresses a particular issue related to greylisting and Office 365 services.

    In case you are experiencing an issue with different symptoms and the information from our knowledge base does not help, please create a request to our Support team:

  • Avatar

    I do not get this solved:

    Apr 24 18:42:22 mail postfix/cleanup[9088]: 4CDAA102851: message-id=<>
    Apr 24 18:42:32 mail postfix/cleanup[9088]: 4CDAA102851: milter-reject: END-OF-MESSAGE from[]: 4.7.24 SPF validation defer.; from=<> to=<> proto=ESMTP helo=<>

    I think 40.107.*.* and all according domains should be whitelisted. 😫

  • Avatar
    Denis Bykov


    According to log message, mail was deferred during SPF validation. To avoid it, you can add '' to  SPF local rules as described here -

  • Avatar

    @Denis Bykov

    I set up already the following local rule yesterday:

    v=spf1 a mx ptr ~all

    This was not enough?

    My /etc/psa/dmar.conf includes

    SPFSelfValidate 0

    Could this be a problem?

  • Avatar
    Daria Gavrilova

    Hello @smbraun,

    Thank you for your question.

    The correct SPF local rule as following should be set at Tools & Settings > Mail Server Settings > SPF Spam Protection:

    As for the /etc/psa/dmarc.conf file:
    The value of SPFSelfValidate can be only boolean one only.
    Currently no issues are encountered with DMARC, so I recommend to leave this file empty.
    If emails are started to be rejected by DMARC, then it will be needed to add the record as following in /etc/psa/dmarc.conf:


    But please note, currently there is no need in it.

  • Avatar
    smbraun (Edited )

    Hello @Daria

    Before I configured this /etc/psa/dmarc.conf , I had to move several hundred mails from quaratine to the inbox in the fetchall mailbox everyday or were blocked which was even worse.


    # 2019-04-25 - nothing changes for
    #SPFSelfValidate 0
    #SPFIgnoreResults 1
    RejectFailures 1
    # Interesting Fact "RejectFailures 1" leads to our-external-newsletter-sender mails in inbox instead of spam

    I had a lot a problems to avoid our OWN newsletter with perfectly configured SPF und DKIM settings was blocked and another partner's mails months ago.

    Now everything was fine except some greylisting loops with changing IPs like, but whitelisting always worked until this dutch partner which makes me crazy.

    For positive values, the following are accepted: "T", "t", "Y", "y", "1". For negative values, the following are accepted: "F", "f", "N", "n", "0".

    So 1 and 0 should be totally ok for boolean.


    The "Lokale SPF-Regeln" field inside plesk is:

    v=spf1 a mx ptr ~all
  • Avatar
    Nikita Nikushkin

    Hi @smbraun,

    Local rules - the rules that are used by the spam filter before the SPF check is actually done by the mail server.

    These rules are concatenated with the rules specified in the SPF-related DNS record or the sender.

    For example, if the sender has the following SPF policy: TXT v=spf1 +a +mx –all

    and the local rule is:

    then the resulting policy will be: TXT v=spf1 +a +mx –all

    Right now, you have too long "Local SPF" rule:

    v=spf1 a mx ptr ~all

    Change it to this one:

    If the issue still occurs, I suggest creating a request to the Support Department - we will be glad to take a look at the issue and figure it out

  • Avatar

    Is there no possibility to simply whitelist this senders domain?

  • Avatar
    Maxim Krasikov (Edited )

    Hello @smbraun,

    Plesk uses several spam-filters which can be configured independently.

    Server-wide Plesk white-list can be configured using the following instruction:
    Please note that IP addresses should be specified instead of domain names, for example:

    CONFIG_TEXT: 203.0.113.*

    Spam-filter gray listing is configured using the command from this article:

    # /usr/local/psa/bin/grey_listing -u -domains-whitelist add:*

    SPF policy was already applied by you above.
    ( )

    If after whitelisting the domain name emails from the partner still cannot be delivered, please contact Plesk Support department for assistance:

  • Avatar


    thank you for the help. I already have this settings for days and still get the errors in the log without any emails.



    # /usr/local/psa/bin/grey_listing --info-server
    Grey listing configuration.

    Grey listing checking enabled
    Grey interval 5 minutes
    Expire interval 51840 minutes
    Penalty interval 2 minutes
    Penalty disabled
    Personal grey listing
    configuration allowed

    Server-wide black list:

    Server-wide white list:

    White domains patterns list:

    Black domains patterns list:

    SUCCESS: Gathering of server wide information complete.


    ./mail.log.1:1125722:Apr 26 16:12:52 mail postfix/cleanup[16074]: D30CA10084C: milter-reject: END-OF-MESSAGE from[]: 4.7.24 SPF validation defer.; from=<> to=<> proto=ESMTP helo=<>


    We have gotten Plesk to our Server-Hosting I do not think I can enter a support request.


    Thank you


  • Avatar
    Daria Gavrilova

    Hello @smbraun,

    The issue requires the deeper investigation on the server directly.
    So it is recommend to contact your Server-Hosting provider if it is not possible to create the support request to Plesk directly.

    If you would like to get the direct support assistance from Plesk, you may purchase the support subscription and then create the support request.

    We do appreciate your user experience, but the deeper technical investigation should be done in the scope of support request.

    Thank you for understanding.

Please sign in to leave a comment.

Have more questions? Submit a request