{"id":403,"date":"2026-03-24T17:34:28","date_gmt":"2026-03-24T16:34:28","guid":{"rendered":"https:\/\/netcloud24.com\/pl\/blog\/?p=403"},"modified":"2026-03-24T17:34:28","modified_gmt":"2026-03-24T16:34:28","slug":"greylisting-walka-ze-spamem-postgrey-postfix","status":"publish","type":"post","link":"https:\/\/netcloud24.com\/pl\/blog\/greylisting-walka-ze-spamem-postgrey-postfix\/","title":{"rendered":"Greylisting \u2013 walka ze spamem (Postgrey + Postfix)"},"content":{"rendered":"<p>&nbsp;<\/p>\n<style>\nbody { font-family: Arial, sans-serif; line-height: 1.8; margin: 40px; background:#0f172a; color:#e2e8f0; }<br \/>\nh1,h2,h3 { color:#38bdf8; }<br \/>\ncode { background:#1e293b; padding:4px 6px; border-radius:4px; }<br \/>\npre { background:#020617; padding:16px; overflow:auto; border-radius:10px; }<br \/>\na { color:#22c55e; }<br \/>\n.box { background:#1e293b; padding:22px; border-radius:12px; margin:22px 0; }<br \/>\n.cta { background:#22c55e; color:#000; padding:22px; border-radius:12px; font-weight:bold; }<br \/>\n.author { background:#1e293b; padding:18px; border-radius:12px; margin-bottom:22px; }<br \/>\n.warn { background:#ef4444; padding:18px; border-radius:12px; }<br \/>\n.note { background:#0ea5e9; color:#001; padding:18px; border-radius:12px; }<br \/>\n<\/style>\n<p>&nbsp;<\/p>\n<div class=\"author\"><b>Autor:<\/b> \u0141ukasz Bodziony<br \/>\n<b>Marka:<\/b> <a href=\"https:\/\/netcloud24.com\">netcloud24.com<\/a><br \/>\nVPS Windows (RDP + CAL) \u2022 VPS Linux \u2022 infrastruktura ISPConfig \/ mail<\/div>\n<h1>Greylisting \u2013 walka ze spamem (Postgrey + Postfix)<\/h1>\n<p>Greylisting to skuteczna technika ograniczania spamu, polegaj\u0105ca na tymczasowym odrzucaniu pierwszej pr\u00f3by dostarczenia wiadomo\u015bci od nieznanego nadawcy. Legalne serwery pocztowe ponawiaj\u0105 pr\u00f3b\u0119, natomiast wiele bot\u00f3w spamuj\u0105cych \u2013 nie.<\/p>\n<div class=\"cta\">\ud83d\ude80 Stabilny <a href=\"https:\/\/netcloud24.com\">VPS Linux pod mailserver<\/a><\/p>\n<p>\ud83d\udcbb + <a href=\"https:\/\/netcloud24.com\">VPS Windows RDP (CAL)<\/a> dla aplikacji biznesowych<\/p>\n<p>NVMe \u2022 99.99% SLA \u2022 Backup 14 dni \u2022 Start w 5 minut<\/p><\/div>\n<h2>Jak dzia\u0142a greylisting?<\/h2>\n<ul>\n<li>Serwer zapisuje tr\u00f3jk\u0119: IP nadawcy + adres nadawcy + adres odbiorcy<\/li>\n<li>Pierwsza pr\u00f3ba \u2192 tymczasowe odrzucenie (4xx)<\/li>\n<li>Kolejna pr\u00f3ba (po kilku minutach) \u2192 akceptacja<\/li>\n<\/ul>\n<div class=\"box\">\ud83d\udca1 Efekt: du\u017ca cz\u0119\u015b\u0107 spamu znika bez u\u017cycia filtr\u00f3w tre\u015bci<\/div>\n<h2>Wymagania<\/h2>\n<ul>\n<li>Postfix<\/li>\n<li>Debian \/ Ubuntu<\/li>\n<li>Dost\u0119p root<\/li>\n<\/ul>\n<h2>1. Instalacja Postgrey<\/h2>\n<pre>apt update\r\napt install postgrey -y\r\n<\/pre>\n<p>Us\u0142uga uruchomi si\u0119 automatycznie (port 10023).<\/p>\n<h2>2. Konfiguracja Postfix<\/h2>\n<pre>nano \/etc\/postfix\/main.cf\r\n<\/pre>\n<p>Dodaj do <code>smtpd_recipient_restrictions<\/code>:<\/p>\n<pre>check_policy_service inet:127.0.0.1:10023\r\n<\/pre>\n<p>Przyk\u0142ad:<\/p>\n<pre>smtpd_recipient_restrictions =\r\n    permit_mynetworks,\r\n    permit_sasl_authenticated,\r\n    reject_unauth_destination,\r\n    check_policy_service inet:127.0.0.1:10023\r\n<\/pre>\n<h2>3. Restart us\u0142ug<\/h2>\n<pre>systemctl restart postfix\r\nsystemctl restart postgrey\r\n<\/pre>\n<h2>4. Dostosowanie parametr\u00f3w (wa\u017cne)<\/h2>\n<pre>nano \/etc\/default\/postgrey\r\n<\/pre>\n<p>Przyk\u0142ad:<\/p>\n<pre>POSTGREY_OPTS=\"--delay=300 --max-age=35 --auto-whitelist-clients=5\"\r\n<\/pre>\n<ul>\n<li><b>&#8211;delay<\/b> = czas op\u00f3\u017anienia (sekundy)<\/li>\n<li><b>&#8211;max-age<\/b> = czas przechowywania wpis\u00f3w<\/li>\n<li><b>auto-whitelist<\/b> = automatyczne whitelistowanie<\/li>\n<\/ul>\n<h2>5. Whitelist (kluczowe dla UX)<\/h2>\n<pre>nano \/etc\/postgrey\/whitelist_clients\r\n<\/pre>\n<p>Dodaj np.:<\/p>\n<pre>.gmail.com\r\n.outlook.com\r\n<\/pre>\n<div class=\"note\">\ud83d\udca1 Dzi\u0119ki whitelist unikniesz op\u00f3\u017anie\u0144 dla du\u017cych dostawc\u00f3w poczty<\/div>\n<h2>6. Test dzia\u0142ania<\/h2>\n<pre>tail -f \/var\/log\/mail.log\r\n<\/pre>\n<p>Szukaj wpis\u00f3w typu:<\/p>\n<pre>Greylisted, see http:\/\/postgrey.schweikert.ch\/help\/\r\n<\/pre>\n<h2>7. Integracja z ISPConfig<\/h2>\n<p>Greylisting dzia\u0142a na poziomie Postfix \u2013 ISPConfig nie wymaga dodatkowej konfiguracji.<\/p>\n<h2>8. Zalety i wady<\/h2>\n<h3>Zalety<\/h3>\n<ul>\n<li>Redukcja spamu nawet o 70\u201390%<\/li>\n<li>Niskie zu\u017cycie zasob\u00f3w<\/li>\n<li>Prosta konfiguracja<\/li>\n<\/ul>\n<h3>Wady<\/h3>\n<ul>\n<li>Op\u00f3\u017anienie pierwszego maila<\/li>\n<li>Niekt\u00f3re systemy mog\u0105 nie retryowa\u0107<\/li>\n<\/ul>\n<div class=\"warn\">\u2757 Nie stosuj greylistingu bez whitelist \u2013 mo\u017ce to pogorszy\u0107 UX<\/div>\n<h2>9. Dodatkowe zabezpieczenia (zalecane)<\/h2>\n<ul>\n<li>SPF<\/li>\n<li>DKIM<\/li>\n<li>DMARC<\/li>\n<li>RBL (Spamhaus)<\/li>\n<\/ul>\n<h2>10. Wydajno\u015b\u0107 i infrastruktura<\/h2>\n<p>Greylisting jest lekki, ale ca\u0142y mail stack wymaga stabilnego \u015brodowiska:<\/p>\n<div class=\"cta\">\u2714 <a href=\"https:\/\/netcloud24.com\">VPS Linux pod mailserver ISPConfig<\/a><\/p>\n<p>\u2714 <a href=\"https:\/\/netcloud24.com\">Windows VPS (RDP + CAL)<\/a><\/p>\n<p>\u2714 Backup + ochrona DDoS<\/p><\/div>\n<h2>Podsumowanie<\/h2>\n<p>Postgrey + Postfix to proste i skuteczne rozwi\u0105zanie ograniczaj\u0105ce spam bez skomplikowanych filtr\u00f3w. W po\u0142\u0105czeniu z poprawn\u0105 konfiguracj\u0105 DNS i TLS daje bardzo dobr\u0105 ochron\u0119 produkcyjn\u0105.<\/p>\n<div class=\"author\">Autor: <b>\u0141ukasz Bodziony<\/b><br \/>\n\ud83d\udc49 <a href=\"https:\/\/netcloud24.com\">netcloud24.com \u2013 VPS Windows, Linux, RDS<\/a><\/div>\n<p>&nbsp;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>&nbsp; &nbsp; Autor: \u0141ukasz Bodziony Marka: netcloud24.com VPS Windows (RDP + CAL) \u2022 VPS Linux \u2022 infrastruktura ISPConfig \/ mail Greylisting \u2013 walka ze spamem\u2026<\/p>\n","protected":false},"author":1,"featured_media":377,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1,2],"tags":[],"class_list":["post-403","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-linux","category-windows"],"_links":{"self":[{"href":"https:\/\/netcloud24.com\/pl\/blog\/wp-json\/wp\/v2\/posts\/403","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/netcloud24.com\/pl\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/netcloud24.com\/pl\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/netcloud24.com\/pl\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/netcloud24.com\/pl\/blog\/wp-json\/wp\/v2\/comments?post=403"}],"version-history":[{"count":2,"href":"https:\/\/netcloud24.com\/pl\/blog\/wp-json\/wp\/v2\/posts\/403\/revisions"}],"predecessor-version":[{"id":405,"href":"https:\/\/netcloud24.com\/pl\/blog\/wp-json\/wp\/v2\/posts\/403\/revisions\/405"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/netcloud24.com\/pl\/blog\/wp-json\/wp\/v2\/media\/377"}],"wp:attachment":[{"href":"https:\/\/netcloud24.com\/pl\/blog\/wp-json\/wp\/v2\/media?parent=403"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/netcloud24.com\/pl\/blog\/wp-json\/wp\/v2\/categories?post=403"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/netcloud24.com\/pl\/blog\/wp-json\/wp\/v2\/tags?post=403"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}