Search found 29 matches

by sbergami
21 Mar 2022 13:01
Forum: 4.x Bugs
Topic: mailwatch_ldap_sync.sh error in EFA 4.0.4
Replies: 0
Views: 1552

mailwatch_ldap_sync.sh error in EFA 4.0.4

hello, I am no longer able to run the "mailwatch_ldap_sync.sh! script (which always worked), now it stops saying "ERROR at line 3228: Unknown command '\@' ". Line 3228 in the script is missing (they are much less.) I also tried to rewrite the script but the error does not change. Any ...
by sbergami
15 Mar 2018 10:00
Forum: How-to
Topic: bad content messages in quarantined report
Replies: 2
Views: 2447

Re: bad content messages in quarantined report

Hi henk, thank you
users can only see blocked emails, I will release them after checking if they are good.
by sbergami
02 Mar 2018 16:00
Forum: How-to
Topic: how to exclude an user from EFA scan
Replies: 19
Views: 9495

Re: [Solved] how to exclude an user from EFA scan

HI,
largo was right, and I was in a hurry to check workaround, whitelist from: default and to: usermail works!
Many thanks to everyone
by sbergami
02 Mar 2018 14:37
Forum: How-to
Topic: bad content messages in quarantined report
Replies: 2
Views: 2447

bad content messages in quarantined report

I noticed that messages blocked as bad content are not displayed in the quarantined report, so they are not seen.
I belive, looking in the forum, which they should normally be there.
Can someone tell me how to make them appear in report?
Thank you
by sbergami
26 Feb 2018 18:32
Forum: How-to
Topic: how to exclude an user from EFA scan
Replies: 19
Views: 9495

Re: how to exclude an user from EFA scan

HI largo, thank you
yes, but don't work. :|
by sbergami
23 Feb 2018 11:43
Forum: How-to
Topic: how to exclude an user from EFA scan
Replies: 19
Views: 9495

Re: how to exclude an user from EFA scan

shawniverson, thank you for your support, I noticed that the rule with IGNORE works, but the only effect it has is to remove the line To: from the header, so messages are still filtered but in the header line To: is missing. I did a research and I found this on https://posluns.com/guides/header-chec...
by sbergami
21 Feb 2018 17:52
Forum: How-to
Topic: how to exclude an user from EFA scan
Replies: 19
Views: 9495

Re: how to exclude an user from EFA scan

I've tried with and without escape "\" but nothing change
by sbergami
21 Feb 2018 17:12
Forum: How-to
Topic: how to exclude an user from EFA scan
Replies: 19
Views: 9495

Re: how to exclude an user from EFA scan

I'm sorry shawniverson,
removed header_checks.db and replaced "IGNORE" with "PASS" at end of line in header_checks
but messages still blocked
Thank you
by sbergami
21 Feb 2018 09:48
Forum: How-to
Topic: how to exclude an user from EFA scan
Replies: 19
Views: 9495

Re: how to exclude an user from EFA scan

pdwalker, the previous lines are those of the standard file, the only thing I added is the line with the email to be excluded
shawniverson, with escape warning disappears, but messages are still blocked as spam :roll:
Thank you
by sbergami
20 Feb 2018 11:16
Forum: How-to
Topic: how to exclude an user from EFA scan
Replies: 19
Views: 9495

Re: how to exclude an user from EFA scan

I'm sorry, you right. Is the line I've added

517 /^To: myuser@mydomain.mycountry/ IGNORE
518 /^Received:/ HOLD
by sbergami
19 Feb 2018 15:24
Forum: How-to
Topic: how to exclude an user from EFA scan
Replies: 19
Views: 9495

Re: how to exclude an user from EFA scan

Hello I tried to write this: # Yorktown Heights, NY 10598, USA # # HEADER_CHECKS(5) /^To: myuser@mydomain.mycountry/ IGNORE /^Received:/ HOLD and I also tried /^To: myuser@myLocaldomain/ IGNORE when postmap I recive a warning /etc/postfix/header_checks, line 517: record is in "key: value" ...
by sbergami
19 Feb 2018 14:36
Forum: How-to
Topic: how to exclude an user from EFA scan
Replies: 19
Views: 9495

Re: how to exclude an user from EFA scan

many thanks for support.
I tried to explain the danger of exclusion, but the user is one of the owners of the company I work for, so...
by sbergami
06 Feb 2018 09:10
Forum: How-to
Topic: how to exclude an user from EFA scan
Replies: 19
Views: 9495

how to exclude an user from EFA scan

hello, in my company there is an user who does not want his emails filtered by EFA, he would like all of them to arrive directly in his inbox. I tried to disable the filter from the USER MANAGEMENT menu, but in the menu there is only the user@localdomain.local and not user@webdomain.com and it does ...
by sbergami
17 Nov 2017 17:34
Forum: How-to
Topic: MCP whitelist
Replies: 2
Views: 2209

Re: MCP whitelist

Hello,
sorry for long delay, I finally configured spamassassin instead of MCP in this way it works.
Thanks for your help! :)
by sbergami
20 Sep 2017 10:06
Forum: How-to
Topic: MCP whitelist
Replies: 2
Views: 2209

MCP whitelist

Hello, I like to know if there is a way to allow some emails that are normally blocked by the MCP filter. We recive so many newsletters that no one has requested, so I've created some rules in the MCP filter that block emails that contain text like "If you can not read this message click here&q...
by sbergami
20 Sep 2017 09:02
Forum: 3.x Bugs
Topic: Too many connections
Replies: 9
Views: 6989

Re: Too many connections

Hello, thanks to everyone for the answers. I probably found the solution. Our firewall by default constantly monitors the connections number that each host enable and if this number reaches a threshold limit these connections are blocked. I've seen in the status monitor (not in logs pages) that all ...
by sbergami
11 Sep 2017 16:29
Forum: How-to
Topic: error during update 3.0.2.4
Replies: 2
Views: 2500

Re: error during update 3.0.2.4

thank you for you reply.

Now works, our new firewall has a feature named "session control" by default set to max 3000/host, I have set EFA as unlimited and now update is in progress

thank you for your help.
Kind regards
by sbergami
11 Sep 2017 12:55
Forum: How-to
Topic: error during update 3.0.2.4
Replies: 2
Views: 2500

error during update 3.0.2.4

hello, after restarting EFA ANtispam for updating kernel, after giving the command EFA-Update -update I get the message [root @ EFA admin] # EFA Update -update [EFA] Good you are root ERROR: The file downloaded version does not seem to be valid. ERROR: exiting now how can I do to continue the instal...
by sbergami
11 Sep 2017 12:42
Forum: 3.x Bugs
Topic: Too many connections
Replies: 9
Views: 6989

Re: Too many connections

thank you for you reply and sorry for my (long) delay.
All our pc have a commercial antivirus, so I don't think this is a spam problem, futhermore EFA antispam should relay every outgoing email to a remote smtp server. so I do not even have an idea of what all those ips are contacted around the world.
by sbergami
11 Aug 2017 16:55
Forum: 3.x Bugs
Topic: Too many connections
Replies: 9
Views: 6989

Re: Too many connections

thank you for your reply,
from lan to wan no ports are blocked, so I think is an answer that is blocked, but I don't know on wich port...

I will try to set a monitor on this public ip addresses
by sbergami
11 Aug 2017 09:37
Forum: 3.x Bugs
Topic: Too many connections
Replies: 9
Views: 6989

Too many connections

Hello, We bought a new firewall and I noticed from the logs that it seems that EFA (10.0.0.4) sends thousands of requests every second around the world (as can be seen from the attachment below) efa_firewall.jpg Does anyone know the reason for all these requests? Are correct or there is something to...
by sbergami
24 May 2017 16:37
Forum: 3.x Bugs
Topic: quarantine report not work
Replies: 11
Views: 7972

Re: quarantine report not work

Yes, I changed sender email from localdomain to remotedomain in conf.php and now works!

Thank you very much for your help. :)
Bye
by sbergami
24 May 2017 13:55
Forum: 3.x Bugs
Topic: quarantine report not work
Replies: 11
Views: 7972

Re: quarantine report not work

I don't have /usr/local/bin/mailwatch/tools/Cron_jobs/quarantine_quaraninte_report.php but there is /usr/local/bin/mailwatch/tools/Cron_jobs/mailwatch_quaraninte_report.php run this one I read, for every users this warning message === Generating report for <user@remotedomain> type=U ==== Recipient e...
by sbergami
24 May 2017 12:28
Forum: 3.x Bugs
Topic: quarantine report not work
Replies: 11
Views: 7972

quarantine report not work

I installed EFA 3.0.2.3 on VMWARE that works excellently. Only I can not send quarantine reports to users. Users are load from the domain controller through ldap, all of them have triggered the flag for sending the report, but nobody receives it. If, as admin, I click on SEND NOW button I get the me...
by sbergami
14 Mar 2017 08:44
Forum: How-to
Topic: filesnames that contain only numbers
Replies: 2
Views: 2383

Re: filesnames that contain only numbers

thank you for your quick relply
it works perfectly!
thank you very much