efa-project.org

Sorry - i got it. it's the version number - not the number of the signatures.

Hi everyone,
i just test the efa 5 version in my Proxmox Lab in order to do a new install at my company (eFa Version 3 i think).
So i change nothing at the default settings - just controlled all the things i need, and i controlled the clamav-unofficial-sigs.service. Everything works fine :clap ...

Aha, okay.

You will add a score, if the RDNS check points to a unwanted domain like .xyz ?

Hi,

why don't you write your own rules instead ?

https://taborsky.cz/posts/2020/penalizi ... massassin/

https://gist.github.com/zhiephie/def673 ... d9b5a557a4

jamerson wrote: 10 Dec 2021 20:13 Glad to know you got it sorted out.

Pssst.
I forget the domain in mail settings / transport settings.
ettings

Shawn,

thank you for your patience - that's it !

Hi,

a little bit frustrating :shifty: : i activated the Relay Contry Good / Bad plugin in /etc/mail/spamassassin/init.pre.
I get an entry in the Spam report, but there's is no description, and i don't find the error :oops:

for example:

https://i.ibb.co/R3ffBbN/2021-12-01-09-08-03-Mail-Watch-for ...

Forget it - don't read it. Found my configuration error.

Too embarrassing to tell - i think, i'm getting too old for that.

best regards,
Frank

Hi,

again some troubles, because of linux knowledge gaps. :(

As you might know, i use EFA differently than thought by shawn - not as directly reachable SMTP Gateway for Exchange (Tobit David) Servers.
The EFA is behind a firewall, and i get my mails via fetchmail pop3, and the EFA relays the ...

2. Use the Dutch language, and no-one will understand a word you say. Works for mail too. Go try :lol:


:D :lol: :lol:

Consider: i live in border neighbourhood, and the east frisia language has the same speech roots as Dutch.
Although i don't speak east frisia language, i understand them, if ...

fetchmail issues :shock:


Hi,

after destroying my local certificate store, i decided to restinstall eFa complete new. :?

And i use now fetchmail with option --ssplproto tls1.2 :shifty: as henk suggested - if intelligence services will read your mails, they have way to read with SSL ...

Take time. I assume the gui only shows one of the official database entries - not all entries in the databases located in /var/lib/clamav. ;)

67201392 100 -rw-r--r--. 1 clamupdate clamupdate 99430 18. Mai 2021 badmacro.ndb
67937546 128 -rw-r--r--. 1 clamupdate clamupdate 130528 23. Nov 08:04 ...

Hi,

two different results:

shell / gui






How can i fix that ?


best regards,
Frank

Thank you - take time

And i got my old account . found the right password

Hey Henk,

also saved my day - after trying 3 different backups and wondering, what's going on here.

Sorry, i was ill the last days .... :shifty:

About the word documents containg trojans. I've never seen such high spam scores. Can you show 1 detail screenshot on how this score is build? --RelayCountry?--
My rules - i use all blacklists avaiable in MailScanner (SPAMCOP/SPAMHAUS/SORBS/BARRACUDA ...

Henk,

i'm a bit lazy about disabling greylisting, you are right. :)
My configuration makes no sense: :roll:

pop3 -> fetchmail -> efa -> greylisting (5 mins for unkown) -> efa -> mailscanner -> smtp to Tobit David.

But: i'm a linux amateur :shifty: - my configuration works and EFA does exactly ...

Why do you use greylisting when using fetchmail?

One day we get a real mailserver like Exchange and not the crap we use now - Tobit David.
Therefore i decided to use an e-mail filtering applliance like EFA :D in case we change the MX records for our domain pointing to EFA.
Actually all postboxes ...

Hi henk

I watched the 94 minutes episode of mission impossible VIII tonight. Miracles can happen :o
Don't use salt on the open wounds.... :lol: ...Netherlands in the Final Four :clap: - who would have thought it a few months ago ?

Anyway:

Did you modify filename rules?

Yes, i modified ...

Aha, the site admin prefers weekly backups..... ;)
So back to my problem i posted last week.

For some (other) reason i checked the output of "MailScanner --lint" and was suprised that no installed virusscanner gives a feedback:

Checking version numbers...
Version number in MailScanner.conf (5.0 ...

Hi,

we often get mails with an embbeded download URL, wich contains either a Word/Excel/ZIP archiv infected with a virus/trojan - an example mail like this:

--------------------
Dear Sirs,

here is the bill you requested:

Here is your bill
--------------------

These mails pass the mailscanner ...

Hey,

after inspecting it i take the default settings - only 5 minutes if a sender is new - acceptable.

LG
Frank

Hi guys,

finally i got it - i have to read the earlier post of pdwalker exactly :hand: - he gave the hint to solve my problem.

After readings his post detailed than the last time, i search the /var/log/maillog and got this - all mails from outside are whitelisted and came from localhost: (and a ...

i also zipped the whole /etc/MailScanner folder: www.elektro-musswessels.de/downloads/MailScanner.zip

I also edited /etc/mail/spamassassin/local.cf like i found here: https://www.lifewire.com/spamassassin-m ... am-1166252


LG
Frank