efa-project.org

Sorry - i got it. it's the version number - not the number of the signatures.

Hi everyone, i just test the efa 5 version in my Proxmox Lab in order to do a new install at my company (eFa Version 3 i think). So i change nothing at the default settings - just controlled all the things i need, and i controlled the clamav-unofficial-sigs.service. Everything works fine :clap: , bu...

Aha, okay.

You will add a score, if the RDNS check points to a unwanted domain like .xyz ?

Hi,

why don't you write your own rules instead ?

https://taborsky.cz/posts/2020/penalizi ... massassin/

https://gist.github.com/zhiephie/def673 ... d9b5a557a4

jamerson wrote: ↑10 Dec 2021 20:13 Glad to know you got it sorted out.

Pssst.
I forget the domain in mail settings / transport settings.
ettings

Shawn,

thank you for your patience - that's it !

Hi, a little bit frustrating :shifty: : i activated the Relay Contry Good / Bad plugin in /etc/mail/spamassassin/init.pre. I get an entry in the Spam report, but there's is no description, and i don't find the error :oops: for example: https://i.ibb.co/R3ffBbN/2021-12-01-09-08-03-Mail-Watch-for-Mail...

Forget it - don't read it. Found my configuration error.

Too embarrassing to tell - i think, i'm getting too old for that.

best regards,
Frank

Hi, again some troubles, because of linux knowledge gaps. :( As you might know, i use EFA differently than thought by shawn - not as directly reachable SMTP Gateway for Exchange (Tobit David) Servers. The EFA is behind a firewall, and i get my mails via fetchmail pop3, and the EFA relays the "f...

2. Use the Dutch language, and no-one will understand a word you say. Works for mail too. Go try :lol: :D :lol: :lol: Consider: i live in border neighbourhood, and the east frisia language has the same speech roots as Dutch. Although i don't speak east frisia language, i understand them, if they sp...

fetchmail issues :shock: Hi, after destroying my local certificate store, i decided to restinstall eFa complete new. :? And i use now fetchmail with option --ssplproto tls1.2 :shifty: as henk suggested - if intelligence services will read your mails, they have way to read with SSL encryption. :ugee...

Take time. I assume the gui only shows one of the official database entries - not all entries in the databases located in /var/lib/clamav. ;) 67201392 100 -rw-r--r--. 1 clamupdate clamupdate 99430 18. Mai 2021 badmacro.ndb 67937546 128 -rw-r--r--. 1 clamupdate clamupdate 130528 23. Nov 08:04 blurl.n...

Hi,

two different results:

shell / gui






How can i fix that ?


best regards,
Frank

Thank you - take time

And i got my old account . found the right password

Hey Henk,

also saved my day - after trying 3 different backups and wondering, what's going on here.

Sorry, i was ill the last days .... :shifty: About the word documents containg trojans. I've never seen such high spam scores. Can you show 1 detail screenshot on how this score is build? --RelayCountry?-- My rules - i use all blacklists avaiable in MailScanner (SPAMCOP/SPAMHAUS/SORBS/BARRACUDA) and...

Henk, i'm a bit lazy about disabling greylisting, you are right. :) My configuration makes no sense: :roll: pop3 -> fetchmail -> efa -> greylisting (5 mins for unkown) -> efa -> mailscanner -> smtp to Tobit David. But: i'm a linux amateur :shifty: - my configuration works and EFA does exactly what i...

Why do you use greylisting when using fetchmail? One day we get a real mailserver like Exchange and not the crap we use now - Tobit David. Therefore i decided to use an e-mail filtering applliance like EFA :D in case we change the MX records for our domain pointing to EFA. Actually all postboxes ar...

Hi henk I watched the 94 minutes episode of mission impossible VIII tonight. Miracles can happen :o Don't use salt on the open wounds.... :lol: ...Netherlands in the Final Four :clap: - who would have thought it a few months ago ? Anyway: Did you modify filename rules? Yes, i modified filename.rules...

Aha, the site admin prefers weekly backups..... ;) So back to my problem i posted last week. For some (other) reason i checked the output of "MailScanner --lint" and was suprised that no installed virusscanner gives a feedback: Checking version numbers... Version number in MailScanner.conf...

Hi, we often get mails with an embbeded download URL, wich contains either a Word/Excel/ZIP archiv infected with a virus/trojan - an example mail like this: -------------------- Dear Sirs, here is the bill you requested: Here is your bill -------------------- These mails pass the mailscanner / spama...

Hey,

after inspecting it i take the default settings - only 5 minutes if a sender is new - acceptable.

LG
Frank

Hi guys, finally i got it - i have to read the earlier post of pdwalker exactly :hand: - he gave the hint to solve my problem. After readings his post detailed than the last time, i search the /var/log/maillog and got this - all mails from outside are whitelisted and came from localhost: (and a lot ...

i also zipped the whole /etc/MailScanner folder: www.elektro-musswessels.de/downloads/MailScanner.zip

I also edited /etc/mail/spamassassin/local.cf like i found here: https://www.lifewire.com/spamassassin-m ... am-1166252


LG
Frank