Just a thought...
Did you disable "real time scanning" in EFS?
Or maybe a trial license is not enough for on demand scanning.
Search found 15 matches
- 20 Apr 2022 18:52
- Forum: How-to
- Topic: Integrate Eset File Security 8.0.375.0
- Replies: 20
- Views: 14009
- 14 Mar 2022 16:13
- Forum: How-to
- Topic: Integrate Eset File Security 8.0.375.0
- Replies: 20
- Views: 14009
Re: Integrate Eset File Security 8.0.375.0
Another one to fix
Detetection by EFS don't show up in Top Viruses / Virus report.
Patrick
Detetection by EFS don't show up in Top Viruses / Virus report.
Patrick
- 25 Jan 2022 11:31
- Forum: How-to
- Topic: Integrate Eset File Security 8.0.375.0
- Replies: 20
- Views: 14009
Re: Integrate Eset File Security 8.0.375.0
Sophos Linux is now retired. A few additional things about EFS on EFA... In order for EFS to function (postfix in sudoers), selinux needs to be set to "permissive", or disabled altogether EFS needs to be activated with a valid license, or it wil not show up in MailScanner --lint. It does s...
- 10 Dec 2021 11:56
- Forum: How-to
- Topic: Integrate Eset File Security 8.0.375.0
- Replies: 20
- Views: 14009
Re: Integrate Eset File Security 8.0.375.0
I just repeated all my steps on a fresh EFA. It works Virus Scanner test reports: Esets said "found Eicar in eicar.com" Sophos said ">>> Virus 'EICAR-AV-Test' found in file /var/spool/MailScanner/incoming/84075/1/eicar.com" Clamd said "eicar.com was infected: {HEX}EICAR.TEST...
- 10 Nov 2021 08:35
- Forum: How-to
- Topic: Integrate Eset File Security 8.0.375.0
- Replies: 20
- Views: 14009
Re: Integrate Eset File Security 8.0.375.0
https://github.com/MailScanner/v5/issues/383
You can try (as root)
You can try (as root)
Code: Select all
touch /var/spool/MailScanner/incoming/Locks/esetsefsBusy.lock
chown postfix:postfix /var/spool/MailScanner/incoming/Locks/esetsefsBusy.lock
- 09 Nov 2021 15:39
- Forum: How-to
- Topic: Running out of disk space
- Replies: 1
- Views: 971
Running out of disk space
eFa 4.0.4 - CentOS 7 Free Disk Space / 5.52GB [11%] /boot 772.73MB [76%] /home 100.95GB [100%] /tmp 5.52GB [11%] /var/tmp 5.52GB [11%] / = 50GB /home = 100GB Everyting eFa gets stored in/var/spool/MailScanner/quarantine (=36GB) So effectively, only 1/3, of available disk space is used? Is it possibl...
- 09 Nov 2021 12:52
- Forum: How-to
- Topic: Integrate Eset File Security 8.0.375.0
- Replies: 20
- Views: 14009
Re: Integrate Eset File Security 8.0.375.0
What is in there? ls -l /var/spool/MailScanner/incoming/Locks/ -rw------- 1 postfix postfix 52 Nov 9 13:49 esetsefsBusy.lock Did you edit sudoers? Add these to /etc/sudoers.d/eFa-users (need to be root) postfix ALL=(ALL) NOPASSWD: /opt/eset/efs/bin/odscan postfix ALL=(ALL) NOPASSWD: /opt/eset/efs/bi...
- 25 Oct 2021 13:37
- Forum: How-to
- Topic: Integrate Eset File Security 8.0.375.0
- Replies: 20
- Views: 14009
Re: Integrate Eset File Security 8.0.375.0
I did it by hand... Basically (assuming you have esets efs installed): Add this line to /etc/MailScanner/virus.scanners.conf esetsefs /usr/lib/MailScanner/wrapper/esetsefs-wrapper /opt/eset/efs/bin Create this file: /usr/lib/MailScanner/wrapper/esetsefs-wrapper And put this into it. Make it exec: su...
- 23 Jun 2021 14:13
- Forum: How-to
- Topic: Integrate Eset File Security 8.0.375.0
- Replies: 20
- Views: 14009
Re: Integrate Eset File Security 8.0.375.0
Answering my own post... Getting closer MailScanner.conf says "Virus Scanners = esets sophos clamd" 0.00013 Found these virus scanners installed: sophos, esets, clamd 0.08471 =========================================================================== 2.0E-5 Filename Checks: Windows/DOS Exe...
- 23 Jun 2021 13:57
- Forum: How-to
- Topic: Integrate Eset File Security 8.0.375.0
- Replies: 20
- Views: 14009
Re: Integrate Eset File Security 8.0.375.0
I second this request. Sophos Linux Free is end of life, will only last untill end 2021. ClamAV is simply not good enough. I got EFS working. It works from the command line, but I can't get MailScanner to recognise it is installed... MailScanner.conf says "Virus Scanners = esets sophos clamd&qu...
- 20 Dec 2019 13:53
- Forum: How-to
- Topic: receiver-domain based retention period
- Replies: 2
- Views: 1703
Re: receiver-domain based retention period
Ok, I will be looking at that then.
Thank you.
Thank you.
- 18 Dec 2019 13:07
- Forum: How-to
- Topic: receiver-domain based retention period
- Replies: 2
- Views: 1703
receiver-domain based retention period
Is there a setting/way that would enable a different QUARANTINE_DAYS_TO_KEEP / RECORD_DAYS_TO_KEEP based on the domain of the receiver?
e. g.
e. g.
Code: Select all
to domain1.dom = 90d
to domain2.dom = 7d
to domain3.dom = 0d //(never keep)
- 18 Sep 2018 12:55
- Forum: How-to
- Topic: no watermark or sender
- Replies: 5
- Views: 5052
Re: no watermark or sender
Add the complete report to the header, that shows what was hit.
X-***-MailScanner-EFA-SpamCheck: spam (no watermark or sender address),
SpamAssassin (not cached, score=2.923, required 4, ALL_TRUSTED -1.00,
AWL 2.62, BAYES_50 0.80, KAM_NUMSUBJECT 0.50, SPF_HELO_PASS -0.00)
X-***-MailScanner-EFA-SpamCheck: spam (no watermark or sender address),
SpamAssassin (not cached, score=2.923, required 4, ALL_TRUSTED -1.00,
AWL 2.62, BAYES_50 0.80, KAM_NUMSUBJECT 0.50, SPF_HELO_PASS -0.00)
- 17 Jul 2018 14:17
- Forum: How-to
- Topic: Release spam without whitelist 127.0.0.1 default
- Replies: 2
- Views: 2542
Re: Release spam without whitelist 127.0.0.1 default
I couldn't get postfix to listen on that (although telnet 127.0.0.2 2525 did answer, with postfix on inet_interfaces = all). I'm not too familiar with CentOS, so maybe I created a half-baked lo:10. postfix: fatal: parameter inet_interfaces: no local interface found for 127.0.0.2 But I figured, there...
- 13 Jul 2018 12:52
- Forum: How-to
- Topic: Release spam without whitelist 127.0.0.1 default
- Replies: 2
- Views: 2542
Release spam without whitelist 127.0.0.1 default
I've been playing around with EFA (latest) for the past few weeks, and plan to deploy it in production soon. I like it. My final set-up is a bit weird. It has another MTA in front of postfix. So myMTA listens on 25, receives, passes on to postfix (listening on 2525) on the same box, Maiscanner does ...