Search found 30 matches

by mattch
24 Apr 2020 20:38
Forum: Discussion
Topic: Whitelist blacklist link
Replies: 2
Views: 213

Re: Whitelist blacklist link

Well no what i'm looking for is w/b link on the message view page (or more action links listed in the quarantine email report , in addition to the view action). The reason is that when you click "view" from the quarantine E-Mail report, it takes you directly to the message view page. It would be hel...
by mattch
24 Apr 2020 19:35
Forum: Discussion
Topic: Whitelist blacklist link
Replies: 2
Views: 213

Whitelist blacklist link

Hello. Has anyone done this or is possible to add links "Add to whitelist | Add to blacklist" to "Actions" row on Message Viewer page, viewmail.php? Viewing a message from the quarantine email report takes me to viewer page and then i have to go recent messages, message details. Or maybe is there a ...
by mattch
23 Apr 2020 16:23
Forum: How-to
Topic: Interesting email based blacklist
Replies: 20
Views: 4971

Re: Interesting email based blacklist

Yeah me either and I got excited. When no hits on my spammiest users after a day I assumed it wasn't working. i suppose no hits can be considered a good thing.
by mattch
23 Apr 2020 16:08
Forum: How-to
Topic: Interesting email based blacklist
Replies: 20
Views: 4971

Re: Interesting email based blacklist

oh you're right, dcc pyzor and spamcop show disabled in the lint test.

So that means HashBL.pm file doesn't need to be referenced in the loadplugin in sa v3.4.2+, because its built-in right?

Sorry for such basic questions.
by mattch
23 Apr 2020 15:52
Forum: How-to
Topic: EFA & PHI Emails
Replies: 7
Views: 419

Re: EFA & PHI Emails

I see your perspective now and makes sense i agree with you. US and practices from 1 to 10 providers with very shallow pockets. To them, instead of spending more money on technology (just for "email" when their emr has integrated portal maintained by software company for secure messaging) or worryin...
by mattch
23 Apr 2020 15:04
Forum: How-to
Topic: Interesting email based blacklist
Replies: 20
Views: 4971

Re: Interesting email based blacklist

I did but i also get this:

Apr 23 11:02:14.523 [28636] dbg: plugin: loading Mail::SpamAssassin::Plugin::HashBL from @INC 0.00332
Apr 23 11:02:14.544 [28636] dbg: HashBL: local tests only, disabling HashBL
by mattch
23 Apr 2020 15:03
Forum: How-to
Topic: EFA & PHI Emails
Replies: 7
Views: 419

Re: EFA & PHI Emails

im not hipaa policy or compliance expert by any means, i do not have any medical credentials either. I should have mentioned this and that not sending PHI externally is only a recommendation that many people seem to follow for obvious reasons. That doesn't mean i know what im talking about, nor that...
by mattch
22 Apr 2020 20:21
Forum: How-to
Topic: Interesting email based blacklist
Replies: 20
Views: 4971

Re: Interesting email based blacklist

Using v4 the HashBL plugin is already loaded in v342.pre but not listing any HashBL.pm file.

I commented out loadplugin for hashbl in v342.pre file, or alternatively add HashBL.pm and then comment loadplugin listed in the hashbl.cf file.
by mattch
22 Apr 2020 19:03
Forum: How-to
Topic: Greylisting Whitelist
Replies: 1
Views: 1068

Re: Greylisting Whitelist

Im having same issue and find this. It appears whitelist protection.outlook.com instead of customer domains.

viewtopic.php?f=5&t=3685
by mattch
22 Apr 2020 18:39
Forum: How-to
Topic: EFA & PHI Emails
Replies: 7
Views: 419

Re: EFA & PHI Emails

From my understanding any PHI in unencrypted email is a no no. To encrypt the email requires end to end configuration and not possible without controlling the other sides. People i know needing that end up using those encrypted email services you have to sign up for, or built-in to the emr. I also s...
by mattch
22 Apr 2020 18:32
Forum: How-to
Topic: DCC Plugin score
Replies: 3
Views: 315

Re: DCC Plugin score

Thank you that is very clear and precise. i will be customing some more scores now.
adding dcc_check in local.cf did the trick. thanks guys you rock!
by mattch
22 Apr 2020 18:05
Forum: Discussion
Topic: Greylist vs EFA vs spf.protection.outlook.com
Replies: 5
Views: 4375

Re: Greylist vs EFA vs spf.protection.outlook.com

Beautiful. i just come across this my self. THANK YOU! I swore the user is crazy but nope. cat /var/log/maillog | grep o365@emails.com [code]Apr 22 12:02:41 mx2 sqlgrey: grey: new: 40.107.237(40.107.237.92), o365@emails.com -> my@efaemail.com Apr 22 12:02:41 mx2 postfix/smtpd[15816]: NOQUEUE: reject...
by mattch
22 Apr 2020 17:32
Forum: 4.x Bugs
Topic: geoipupdate and the 401
Replies: 2
Views: 515

Re: geoipupdate and the 401

:teasing-dink: So this isnt a bug after all. i cant believe i missed that in tools menu, and in eFa-configure. ****** added license in efa-configure, run the update in mailwatch gui, boom done. ******* too easy, too easy. Here is some closure to my unnecessary saga: -upgrading geoipupdate to v4 and ...
by mattch
22 Apr 2020 02:01
Forum: 4.x Bugs
Topic: geoipupdate and the 401
Replies: 2
Views: 515

geoipupdate and the 401

04/22/20 EDIT: skip down for the correct method of updating geoip2. this works but is a lot more difficult than it has to be. Using a fresh install of eFa-v4.0.2 (with restored backup from v3) on centos 7 which included geoipupdate v2.5, kept giving a 401 response (geoipupdate -v) complaining invali...
by mattch
08 Apr 2020 16:52
Forum: How-to
Topic: DCC Plugin score
Replies: 3
Views: 315

DCC Plugin score

Hello everyone! :think: :doh: does anyone know if it's possible to change the default score on DCC_CHECK? i found some examples for custom rule but then results in two "DCC_CHECKS" in rule descriptions. So where does the default one hide, or how to change or remove default dcc_check rule? custom exa...
by mattch
26 Feb 2019 16:53
Forum: How-to
Topic: new install, empty bayes - training
Replies: 2
Views: 1404

Re: new install, empty bayes - training

henk wrote:
17 Feb 2019 23:55
It makes little sense to me to use spam archives.
Just take some time to train Bayes. If you really want spam to train Bayes, create email addresses for wife and kids. :shifty:
:lol:
Good to know! that sounds much easier.
by mattch
26 Feb 2019 16:52
Forum: How-to
Topic: Block specific keyword and subject and content
Replies: 4
Views: 1946

Re: Block specific keyword and subject and content

notes ive taken: you could put these rules in /etc/mail/spamassasin/local.cf , but i find it easier to make a new file, like "jagcbes.cf" then add your custom rules. anything with .cf in the folder is picked up. for a super simple rule to give score if the string is present, score can be "+" or "-":...
by mattch
26 Feb 2019 15:54
Forum: Discussion
Topic: Message Quarantine Report
Replies: 13
Views: 3244

Re: Message Quarantine Report

Is there a way for the administrator of MailWatch to get a quarantine report for all recipients? if thats your goal then dont use the quarantine email report and just manage quarantine from mailwatch web ui. the quarantine report will take to mailwatch anyway. in mailwatch you can add a filter of a...
by mattch
18 Feb 2019 04:31
Forum: How-to
Topic: purge or delete messages
Replies: 2
Views: 1588

Re: purge or delete messages

henk wrote:
17 Feb 2019 23:35
I you wake up and your house is on fire, that should kick you in high gear, not having a some mail ;)
:lol: :doh: :pray:
:angry-extinguishflame: :angry-screaming: :banana-skier:


thanks!
by mattch
18 Feb 2019 04:23
Forum: How-to
Topic: inline.sig.xxx
Replies: 0
Views: 1832

inline.sig.xxx

in /etc/Mailscanner/reports/en/ is inline.sig.txt or inline.sig.html used anywhere in the system?

i know the purposes of inline.sig.in.txt/html and inline.sig.out.txt/html but always wondered about this other one.

:?: :think:
by mattch
17 Feb 2019 23:12
Forum: How-to
Topic: new install, empty bayes - training
Replies: 2
Views: 1404

new install, empty bayes - training

hopefully im allowed to post about this, i just stumble on a cool website that offers spam archives to download and train SA with. i dont know the quality of spam messages it has but for a new install it should be better than nothing, right? Besides a starter database you can download (to replace a ...
by mattch
17 Feb 2019 22:50
Forum: Discussion
Topic: Message Quarantine Report
Replies: 13
Views: 3244

Re: Message Quarantine Report

only spam messages come through in the quarantine report. "clean" messages wont show in the report. get a spam though to that user and then send the report from mailwatch. for me sending spam test messages was easily achieved with a custom SA rule that assigns high score with a certain string in the...
by mattch
17 Feb 2019 17:49
Forum: Discussion
Topic: Message Quarantine Report
Replies: 13
Views: 3244

Re: Message Quarantine Report

Maybe one-day mailwatch can connect to multiple LDAP connections like postfix can. using the Mailwatch-Ad-Sync script works flawlessly. so much so its easy enough for me to build a EFA/vm dedicated for each "exchange server" then backup and restore the bayes from one that has a good amount of tokens...
by mattch
17 Feb 2019 17:01
Forum: How-to
Topic: purge or delete messages
Replies: 2
Views: 1588

purge or delete messages

i hope this is the right place to ask. any pointer or suggestion much appreciated! how can i remove messages in quarantine, mass delete all of them? a folder? #i try to set in /var/www/html/mailscanner/conf.php define('QUARANTINE_DAYS_TO_KEEP', 0); #and force it by /usr/local/bin/mailwatch/tools/Cro...
by mattch
10 Feb 2019 19:07
Forum: How-to
Topic: signature direction confusion (solved)
Replies: 1
Views: 1221

Re: signature direction confusion

Ok some follow up. its funny how right after i make a post i have a stroke of luck... i hope anyway. Maybe someone can confirm this but the order seems to matter. also whitelisted emails dont get in sig, which i think is by design. making "default" last seem to help. changing from: sig.text.rules(ht...