efa-project.org

Can you show the log ?

Glad to know you got it sorted out.

its happens before.
i disabled the Lets encrypt and enabled it and it seems to have fixed it.

i was about to say the same.
i had faced this with the min installation.
let me say with the Rocky version you'll notice a good improvement.

The easiest best solution to prevent spoofing in a standard, simple environment is ADD BLACKLIST from @yourdomain to @yourdomain. If you handle multiple domains, add a BLACKLIST entry for each combination which should NEVER pass through your external SMTP gateway.

Internally, all network ...

its telling you the email you are sending to doesnt exisit.
are you sure the email adres is correct?

its appear to be a brut force or something similar to manipulate EFA.
what firewall are you using in front of the EFA? what ports are open from the WAN to the EFA? are you using some kind of ids/IPS?

pdwalker wrote: 09 Feb 2021 05:58 You might want to consider adding the postfix-sasl jail as well, if you get a lot of failed sasl authentication attempts.

this is a good idea, maybe add it out of the box.

pdwalker wrote: 05 Jan 2021 07:47 I am sure there are many tutorials online for doing this.

Do you need one for winscp and putty?

Thank you my friend,
ive got it set up already.

now the Centos 8 announcement, does mean anything for the efa project?
no patches will be available soon?
I think ubuntu or RH is a good OS.

I strongly suggest that you use ssh keys to allow access to your root account rather than setting a password.

It'll also make the winscp and putty tools easier to use.

Personally, I use a non admin account as my login using ssh keys, and then taking the second step of using sudo to make any ...

i would love to have this set up, how can i get it configured? tried the above but broke the installation.

smyers119 wrote: 20 May 2020 14:18

Authentication-Results: mx-01.domain.com; spf=fail smtp.mailfrom=julien@domain.com

good catch, i didnt see that one, but using mail-tester it scores 10/10 and spf is succecefully passed.
is this only google thing that dkim and spf failed

smyers119 wrote: 18 May 2020 12:08 So gmail is showing that spf and dmarc are failing. Can you pm your domain so I can find out what your doing wrong. I'll also pm you my email so you can send me a test email.

only Dmarc is failing, spf and dkim are set up correctly.

Is your dmarc configured correctly? Were you able to check/test it using a dmarc testing service? At least make sure that you have that part right.

what do you mean exactly here? how to check Dmarc settings? is enabled and its published at the public dns.
using mxtoolbox comes up with the right ...

@pdwalker we have spf/dkim configured wel and is valid, when we do a mail-test it does score 10/10.


What are your spf settings for mail that comes from invalid servers? accept? maybe spam or reject? (+all, ~all, -all)

Remember, it is up to the destination mail server to determine whether they ...

Yup, check the mail header it should give you the path the mail has taken to reach the client mailbox and go from there to figure out how the mail reached the clients inbox. (maybe you missed it in eFa or maybe it was malware directly from client to client..)


Got catch i checked the header and ...

Dear all,

Today one of our customer has called because they recieved a email from someone calimed to be from our company.
let assume our domain is company.com
they received email from someone user@company.com time and date.
when we checked the email was flagged as spam on their outlook folder.

so ...

its seems you can ping ip but not fqdn
mostely is dns,

check if you have dns server installed/configured.
PS: make sure to disable ipv6

i am wondering why are you using office 365 spf record to send out using your EFA?
please provide more details if you need support.

wihtout info/details/screenshot we wont be able to help.

SPF records /IP are published ips which means you dont have to mask them, everyone on the internet can find ...

i beleive i am on the same boat, my box keeps having issues with oubound,i thought it was ipv6 but good catch Henk " dank je wel"
i'll give it a try and check it.

i beleive i ve found the issue,

if you guys using IPV6 on the network settings, make sure you disable it.
somehow its perefer to use IPV6.

ive done that and the issue is gone somehow.

Dear all,

the below keeps happening however the box is connect online and able to ping the internet,
emails arrives and send out over the efa, connection is correct.
any suggestions what could be the cause?


/etc/cron.hourly/0yum-hourly.cron:

Could not get metalink https://mirrors.fedoraproject ...

Dear All,

Lately been having issues with Grey listing, when customers email us from Office 365 takes ages untill its arrives.
So we decieded to start using Grey listing white listing.

let start

Step 1.

let create a file called clients_fqdn_whitelist.local on the sqlgrey listing

/etc/sqlgrey ...

DKIM (DomainKeys Identified Mail) is a method of signing electronic emails using public-private key. DKIM is used by receiving mail server for identifying email, that they are sent by authorized mail servers. It also minimizes the possibility of getting emails SPAM.

This tutorial will provide you a ...