Search found 39 matches

by omer
26 Nov 2023 09:44
Forum: How-to
Topic: MailScanner: No programs allowed
Replies: 5
Views: 3490

Re: MailScanner: No programs allowed

My config files are as follows.

No matter what I did, it didn't work. It also blocks it when it is in Zip or RAR.

archives.filetype.rules.conf - https://pastebin.com/kqtnXDQv
filetype.rules.conf - https://pastebin.com/VFnDppnq
filename.rules.conf - https://pastebin.com/DY8Jzbsx
by omer
26 Nov 2023 08:42
Forum: How-to
Topic: MailScanner: No programs allowed
Replies: 5
Views: 3490

Re: MailScanner: No programs allowed

Hello,

I already tried this but without success.
by omer
21 Nov 2023 15:04
Forum: How-to
Topic: MailScanner: No programs allowed
Replies: 5
Views: 3490

Re: MailScanner: No programs allowed

Hello, I started having a similar problem. Shapefile format is a format used for geographic information systems. This creates an archive and contains files with extensions such as .dbf, .prj, .sbn, .sbx, .shp, .shx. But Efa-Project prevents this. How can I get over this ending? MailScanner: No progr...
by omer
15 Nov 2023 17:07
Forum: How-to
Topic: Attempt to hide real filename extension problem
Replies: 4
Views: 10869

Re: Attempt to hide real filename extension problem

Hello,

Thank you for your help.

When I edited this file "archives.filename.rules.conf", the rule worked.

Thank you.
by omer
15 Nov 2023 11:46
Forum: How-to
Topic: Attempt to hide real filename extension problem
Replies: 4
Views: 10869

Re: Attempt to hide real filename extension problem

Yes, I restarted the services but it did not help.
by omer
13 Nov 2023 08:21
Forum: How-to
Topic: Attempt to hide real filename extension problem
Replies: 4
Views: 10869

Attempt to hide real filename extension problem

Hello, There is a .rar file attached to the email sent by a user. However, there is a file with the ".shp.xml" extension in the .rar file. But EFA prevents this. No matter what I did, it didn't work. I read all the messages I found, but there was no solution. I added different variations t...
by omer
20 Jul 2022 12:42
Forum: Feature Requests
Topic: Remove Whitelist Scoring
Replies: 3
Views: 3742

Re: Remove Whitelist Scoring

Hi,

I am using efa 4.0.4 Where is local.cf. I can not find.
by omer
19 Jul 2022 05:10
Forum: How-to
Topic: I can not send mail via EFA
Replies: 19
Views: 8585

Re: I can not send mail via EFA

Hello, I finally found what the problem was :) Strangely enough, I realized that it was a dns problem. The server used to run on a public ip and there were no problems. Now it works on a private ip address. I am using public dns servers but it was not resolving. I just realized this, I thought the p...
by omer
03 May 2022 20:40
Forum: How-to
Topic: I can not send mail via EFA
Replies: 19
Views: 8585

Re: I can not send mail via EFA

Hi pdwalker,
All I did was change the string. In the past, I used a real ip address of 31.6.86.0/24, now I'm doing NAT using a private ip of 172.17.52.54.
pdwalker wrote: 03 May 2022 05:45 Hi Omer,

What changed between when it worked and when it stopped working?

I could try logging in again to debug it for you.
by omer
03 May 2022 04:32
Forum: How-to
Topic: I can not send mail via EFA
Replies: 19
Views: 8585

Re: I can not send mail via EFA

by omer
01 May 2022 22:09
Forum: How-to
Topic: I can not send mail via EFA
Replies: 19
Views: 8585

Re: I can not send mail via EFA

Hello, Years later I'm having the same problem again :) The only thing I do is I no longer use private ip addresses instead of public. I defined the IP addresses and port numbers over the firewall. Both servers are on 172.17.52.0/24 network. When an e-mail comes from outside, this e-mail reaches the...
by omer
29 Aug 2020 06:58
Forum: 3.x Bugs
Topic: EFA don't block dangerous file attachment.
Replies: 7
Views: 10091

Re: EFA don't block dangerous file attachment.

Hi, I try as you suggest. But since I restarted the MailScanner service it gives an error like this. [root@gw omer]# nano /etc/MailScanner/filename.rules.conf [root@gw omer]# /etc/init.d/mailscanner restart Restarting MailScanner ... Possible syntax error on line 140 of /etc/MailScanner/filename.rul...
by omer
06 Jan 2020 11:28
Forum: How-to
Topic: 60 Day Quarantine
Replies: 1
Views: 1816

60 Day Quarantine

Hello,

I want the e-mails to be kept on the EFA for 60 days. I made a selection from the Settings department for 60 days. But I can't reach any mail for more than 30 days. What can I do for it.

30 Day
https://prnt.sc/qjyiya

31 Day
https://prnt.sc/qjyjek

Config
https://prnt.sc/qjyh5d

Thank you.
by omer
24 Jun 2019 09:24
Forum: How-to
Topic: Outgoin Mail - Random IP
Replies: 1
Views: 6015

Outgoin Mail - Random IP

Hello, I want each of the outgoing mails to go to the server randomly from different IP addresses defined. Is this possible? In this way, if an IP address is damaged, I want to list it and send the mail to the recipients properly. I found something like this, but I didn't understand how to use it. h...
by omer
21 Jun 2019 11:28
Forum: How-to
Topic: Outbound mail relay (Allowing different ip addresses)
Replies: 2
Views: 2990

Re: Outbound mail relay (Allowing different ip addresses)

Hello, @pihahiroth took care of the problem with the help. It worked with a change to the mynetworks section of the /etc/postfix/main.cf file. The example is as follows. meta_directory = /etc/postfix shlib_directory = no mynetworks = 127.0.0.0/8 31.11.22.0/26 81.22.33.36 header_checks = regexp:/etc/...
by omer
21 Jun 2019 00:13
Forum: How-to
Topic: Outbound mail relay (Allowing different ip addresses)
Replies: 2
Views: 2990

Outbound mail relay (Allowing different ip addresses)

Hello, I use multiple mail servers. One of them works at 35.55.25.x ip address and the other works at 228.45.12.x ip address. I want to use EFA to check outgoing emails. But in the "Outbound mail relay" option, I can only allow one ip address. This is a serious problem if I allow all IP ad...
by omer
14 Feb 2019 19:49
Forum: How-to
Topic: Email Details Invisible
Replies: 5
Views: 5562

Re: Email Details Invisible

I've changed the GeoIP.dat files at this location and it's working right now.

Thank you so much.

/usr/share/GeoIP/GeoIP.dat
/var/www/html/mailscanner/temp/GeoIP.dat
by omer
14 Feb 2019 19:42
Forum: How-to
Topic: Email Details Invisible
Replies: 5
Views: 5562

Re: Email Details Invisible

I did the GeoIP database update two days ago.
by omer
13 Feb 2019 22:14
Forum: How-to
Topic: Email Details Invisible
Replies: 5
Views: 5562

Email Details Invisible

Hello
I've seen e-mails before. All header information seemed. But I haven't seen the details in two days. How can I solve this problem?
Image
by omer
25 Mar 2018 09:37
Forum: How-to
Topic: MailScanner: No programs allowed (4workbook.bin)
Replies: 21
Views: 13270

Re: MailScanner: No programs allowed (4workbook.bin)

Hello,

I just applied the following rule and it worked fine.

filename.rules.conf: # deny \{[a-hA-H0-9-]{25,}\} Filename trying to hide its real type

Thank you so much.
by omer
23 Mar 2018 07:53
Forum: How-to
Topic: MailScanner: No programs allowed (4workbook.bin)
Replies: 21
Views: 13270

Re: MailScanner: No programs allowed (4workbook.bin)

I want to allow this type of file.

Thank you.
by omer
21 Mar 2018 17:49
Forum: How-to
Topic: MailScanner: No programs allowed (4workbook.bin)
Replies: 21
Views: 13270

Re: MailScanner: No programs allowed (4workbook.bin)

Hello
I think the file names are similar. So I want to define it as a rule. What kind of rule should I apply?
by omer
21 Mar 2018 05:38
Forum: How-to
Topic: MailScanner: No programs allowed (4workbook.bin)
Replies: 21
Views: 13270

Re: MailScanner: No programs allowed (4workbook.bin)

Hello,

How should I organize the rule?
by omer
12 Mar 2018 18:45
Forum: How-to
Topic: MailScanner: No programs allowed (4workbook.bin)
Replies: 21
Views: 13270

Re: MailScanner: No programs allowed (4workbook.bin)

I do not have the file, unfortunately. I will ask the user to resend it. I created a file with the same name for experiment purposes and sent this file to myself. Mail came in without any problems.
by omer
12 Mar 2018 14:22
Forum: How-to
Topic: MailScanner: No programs allowed (4workbook.bin)
Replies: 21
Views: 13270

Re: MailScanner: No programs allowed (4workbook.bin)

Hello

What to do for this. Similarly, these files are also blocked.

Report: MailScanner: Files containing CLSID's are trying to hide their real type (%7B90AD475B-0794.pdf)