efa-project.org

mattch

Hello Folks,

Is there a way to allow outbound relay based on a sasl auth user login in postfix instead of whitelisting the ip address in menu 7) Mail settings > Outbound mail relay menu?

I had to setup sasl to allow the application (cloud :snooty: ) to deliver emails to me, tls/username/pass ...

mattch

shawniverson wrote: 12 Jun 2024 16:39 Ah a package conflict. I'll need to make a custom package for eFa you can use so that it doesn't conflict. Which version of eFa are you using?

Ah ok, thank you!
Is it possible to use the existing spfquery in postfix, or does it have to be pypolicyd-spf?

mattch

Hello!

How to enable postfix spf checks? instead of spamassassin. Spoofers see efa accepting the email and wont stop. Prior I was using the external/internal_sender_access but somebody here is trying to send emails from mailchimp :roll: .

I went to install pypolicyd-spf and was met with:
Error ...

mattch

I dont have an answer to your question on how to split multiple pages but perhaps you can block from your firewall instead of efa since your working with ip blocks. Might keep your efa cpu load a little lower too :)

I use pfblockerng on my firewall which has many pre-compiled and updated lists of ...

mattch

Well.... I am halfway there :lol:

I did my 'auth login' test using port 25 :doh:
Port 25 authenticates ok but not on 587

testing on port 587 i get:
535 5.7.8 Error: authentication failed: UGFzc3dvcmQ6

i tested with openssl:

> openssl s_client -starttls smtp -connect server:587 -crlf -ign ...

mattch

I followed this post from 2017, but I think some things change since then. EFA-4.0.4

https://forum.efa-project.org/viewtopic.php?p=11085#p11085

Make sure you've already ran the LetsEncrypt setup (option 15)...
-enable HTTPS, redirect is fine, open port 80.

1) /etc/postfix/main.cf

smtpd_sasl ...

mattch

Hello!
My mailwatch login page is showing up on google search and I dont want that.
Google suggest adding the "noindex" tag in the header or with an http response.
If it wasnt already indexed then the robots.txt should work too.

<head>
<meta name="robots" content="noindex">
...

Is it ok to ...

mattch

Hello! Im trying to wrap my head around this one and how to prevent it. Ive never seen this type of spam sneak through.

When it was delivered to my mailbox, the from address was my efa domain:
It appears that part of the from domain is missing in the header so efa appends its own? But also part of ...

mattch

Im so curious where its getting changed at, if it is being changed at all. For me it come from a trusted sender with always same source so bypassing has been my work around and it fell on the back burner. If the automated messages come from random source then that can be bigger source of head ache ...

mattch

In MailScanner.conf you could set a ruleset:

# Processing Incoming Mail
# ------------------------
...
Scan Messages = %rules-dir%/scan.messages.rules
...

The rule itself:

From: somebody@domain.com no
From: somebody.else@anotherdomain.com no
FromOrTo: default yes

Capturing an incoming ...

mattch

I have created now a scanMessages.rule were all mails form this particular automated sender account is excluded from incoming processing (mmmhh, what is exactly excluded, Idk).

We have in the meantime received a few messages passing eFa successfully towards our MS-Exchange2010 server, showing the ...

mattch

I've been unable to trigger the problem so far. I'll probably need someone's help. What I need is the MIME part structure. This is basically the raw message before it hits MailScanner, which means intercepting it. The content and headers can be stripped out, I just need the MIME information and ...

mattch

I've been unable to trigger the problem so far. I'll probably need someone's help. What I need is the MIME part structure. This is basically the raw message before it hits MailScanner, which means intercepting it. The content and headers can be stripped out, I just need the MIME information and ...

mattch

So, besides the weird boundary, is the data consistent in the partial message?

Yes.
I get two different emails with this pdf attachment being encoded to base64 in msg body. both from same place just generated and sent from different systems. I bring up bc not sure if helps Ive noticed ...

mattch

Update:
Maybe I have found a possible root cause of the problem. All received messages from that sender do contain a colon followed by a four digit number.

boundary="18446744072854621553-907769865-1620118963 =:6511 "

Could this be a reason for theis problem? Mmmhh.

same here on not ...

mattch

In my case,
These come in my inbox as plain text email with the bas64 (not ascii) in the body. i been coping base64 code from email to a decoder to spit out pdf.

If I resend the message via MailWatch-UI to another addressee on the same MTA, the file is correctly shown with the PDF attachment ...

mattch

i cant seem to get any "rename to" rules working, even basic one. "rename" works which uses default mailscanner.conf setting (.disarmed)

rename attachment with .test to .new

Code: Select all

rename to  .new \.test$

Code: Select all

rename to  .new \.test$   -   -

mattch

just following up with update and looking for any ideas.

i made file with backslash and confirm it doesn't like it. I cant figure out forward slash like in the original attachment but have a theory, maybe the forward slash is unicode \u002f. I tried contacting them but is big company and wont let ...

mattch

Is there any log file i can try to glean some more info on how the attachment is handled?

i dont know if this is a bug, or how to even test but i think it has something to do with the file name of the said pdf attachment having a "/" in the actual file name. Not shown above. I dont know how to ...

mattch

some PDF attachment received is converted to Base64 plain text in the email body. It happen only from one person, pdf attachment from everywhere else come in fine and attached.

Any pointers where to look as to why they coming in plain text? :romance-heartbeating:

email body

--
This message ...

mattch

Well no what i'm looking for is w/b link on the message view page (or more action links listed in the quarantine email report , in addition to the view action).
The reason is that when you click "view" from the quarantine E-Mail report, it takes you directly to the message view page. It would be ...

mattch

Hello. Has anyone done this or is possible to add links "Add to whitelist | Add to blacklist" to "Actions" row on Message Viewer page, viewmail.php?

Viewing a message from the quarantine email report takes me to viewer page and then i have to go recent messages, message details.
Or maybe is there ...

mattch

Yeah me either and I got excited. When no hits on my spammiest users after a day I assumed it wasn't working. i suppose no hits can be considered a good thing.

mattch

oh you're right, dcc pyzor and spamcop show disabled in the lint test.

So that means HashBL.pm file doesn't need to be referenced in the loadplugin in sa v3.4.2+, because its built-in right?

Sorry for such basic questions.

mattch

I see your perspective now and makes sense i agree with you. US and practices from 1 to 10 providers with very shallow pockets. To them, instead of spending more money on technology (just for "email" when their emr has integrated portal maintained by software company for secure messaging) or ...

efa-project.org

Search found 50 matches

outbound relay with auth login instead of IP.

Re: enable postfix spf checks

enable postfix spf checks

Re: How to split very long Black/Whitelist into multiple pages

Re: Getting SASL to work

Getting SASL to work

Implement noindex tag - mailwatch login page

spam missing from domain.

Re: PDF attachment converting to Base64 plain text

Re: PDF attachment converting to Base64 plain text

Re: PDF attachment converting to Base64 plain text

Re: PDF attachment converting to Base64 plain text

Re: PDF attachment converting to Base64 plain text

Re: PDF attachment converting to Base64 plain text

Re: PDF attachment converting to Base64 plain text

Re: PDF attachment converting to Base64 plain text

Re: PDF attachment converting to Base64 plain text

Re: PDF attachment converting to Base64 plain text

Re: PDF attachment converting to Base64 plain text

PDF attachment converting to Base64 plain text

Re: Whitelist blacklist link

Whitelist blacklist link

Re: Interesting email based blacklist

Re: Interesting email based blacklist

Re: EFA & PHI Emails