Search found 16 matches

by gregecslo
22 Jan 2019 11:47
Forum: 3.x Bugs
Topic: How to whitelist this one
Replies: 3
Views: 280

Re: How to whitelist this one

Well I used different approach.

Custom SA rule, which matches on header content which is always present and score it by -10.0 :)

perl regex gave me some trouble but I`ve managed it :)
by gregecslo
22 Jan 2019 09:50
Forum: 3.x Bugs
Topic: How to whitelist this one
Replies: 3
Views: 280

Re: How to whitelist this one

Anyone please?
Can I somehow exclude IP ranges (18.18.18.0/24)
Tried but only IP works, range not.
by gregecslo
21 Jan 2019 11:29
Forum: 3.x Bugs
Topic: How to whitelist this one
Replies: 3
Views: 280

How to whitelist this one

Hi! Weird one. Spamassasing says that SPF pass but score shows spf fail: Received: from mail-183-59.mailgun.info (mail-183-59.mailgun.info [23.253.183.59]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mailhub.domain.com (Postfix) with ES...
by gregecslo
16 Jan 2019 08:01
Forum: 3.x Bugs
Topic: Sophos AV does no more work !
Replies: 22
Views: 1487

Re: Sophos AV does no more work !

Umm no.

This is AVG fix what I posted.

I applied sophos fix and sophos works OK.
by gregecslo
16 Jan 2019 07:31
Forum: 3.x Bugs
Topic: Sophos AV does no more work !
Replies: 22
Views: 1487

Re: Sophos AV does no more work !

Hi! After AVG fix: Reloading MailScanner ... Global symbol "$id" requires explicit package name at /usr/share/MailScanner/perl/MailScanner/SweepViruses.pm line 1812. Global symbol "$id" requires explicit package name at /usr/share/MailScanner/perl/MailScanner/SweepViruses.pm line 1813. Global symbol...
by gregecslo
15 Jan 2019 09:56
Forum: 3.x Bugs
Topic: Sophos AV does no more work !
Replies: 22
Views: 1487

Re: Sophos AV does no more work !

MailWatch for MailScanner v1.2.7-dev running on EFA-3.0.2.6
Clamav: Version: ClamAV 0.100.2
MS: 5.0.7
SpamAssassin version 3.4.1
Postfix 3.1.3
by gregecslo
15 Jan 2019 09:10
Forum: 3.x Bugs
Topic: Sophos AV does no more work !
Replies: 22
Views: 1487

Re: Sophos AV does no more work !

Ummm I don`t have looping messages.
by gregecslo
15 Jan 2019 07:56
Forum: 3.x Bugs
Topic: Sophos AV does no more work !
Replies: 22
Views: 1487

Re: Sophos AV does no more work !

Yes PLEASE :)

I can cook you a coffee or 2 :)
by gregecslo
10 Jan 2019 11:58
Forum: 3.x Bugs
Topic: Sophos AV does no more work !
Replies: 22
Views: 1487

Re: Sophos AV does no more work !

Hi!

Same here.

ClamD works
Esets works
Sophos fails to report and lint is not listing it.
by gregecslo
02 Oct 2018 07:08
Forum: Discussion
Topic: Long text in top virus
Replies: 3
Views: 707

Re: Long text in top virus

There we go: https://github.com/mailwatch/MailWatch/issues/1110

Can I do something in the meantime?

Regards,
G
by gregecslo
01 Oct 2018 09:08
Forum: Discussion
Topic: Long text in top virus
Replies: 3
Views: 707

Long text in top virus

Hi!

Is there a way to change or output or string, eset finds malware and page is borked, see attached image.

Thanks!
by gregecslo
26 Sep 2018 18:11
Forum: Discussion
Topic: Delivery question
Replies: 0
Views: 783

Delivery question

Hi all! Is it possible to set up: a) If users get infected mail they do not get notified at all b) If users get mail with blocked attachment then they DO get notification mail Point is not to disturb users with infected mails but when they do get legit mail with ZIP which is blocked for example they...
by gregecslo
15 Sep 2018 17:35
Forum: Discussion
Topic: SPF issue from internal senders
Replies: 3
Views: 741

Re: SPF issue from internal senders

Huh...
I ended up editing opendmarc.conf and adding ignore.hosts.
That cleared DKIM/SPF issue completley.
by gregecslo
11 Sep 2018 19:44
Forum: Discussion
Topic: SPF issue from internal senders
Replies: 3
Views: 741

SPF issue from internal senders

Hi! My situation. 1 exchange 1 efa appliance. SPF set and working great. Issue: When internal sender sends mail flow is: CLIENT --> EXCHNAGE (10.10.0.90) --> EFA (192.168.1.10) --> internet EFA reports this: DMARC-Filter: OpenDMARC Filter v1.3.2 efa.domain.local 564DA20870 Authentication-Results: ef...
by gregecslo
09 Sep 2018 18:01
Forum: Discussion
Topic: ESET integration
Replies: 4
Views: 1304

ESET integration

Hi all! I have EFA latest running with CLAMD and Sophos just fine. Now I wanted to integrate ESET as well, because we have license for it. I added "esets" to scanners and installed ESET just fine. It works, but not with EFA unfortunatley. Probably because EFA starts it with postfix user and eset den...