efa-project.org

Then it should be working well.
Check your log files for errors.

in the file /etc/mail/spamassassin/init.pre, make sure you have the following code:

In that case, unless you changed some setting that broke SA (SpamAssassin)'s ability to do SPF checks, it appears that incoming emails are meeting the SPF requirements.

Note that if you enabled SPF checks in Postfix so that non-compliant emails are rejected, those emails will never reach SA. This ...

In the EFA portal, go to the "Tools And Links" section and click on "Update SpamAssassin Rule Descriptions"

Then search the results and see if you have the following rules...

SPF_FAIL SPF: sender does not match SPF record (fail)
SPF_HELO_FAIL SPF: HELO does not match SPF record (fail)
SPF_HELO ...

Hi JOP,

Where are you trying to make SPF work?

Postfix?
Sendmail?
SpamAssassin?
Somewhere else?

Before anyone can help you, you will need to help yourself a little

Hi,

Every day I am receiving a warning via email from the EFA Anacron after the daily cron is run.

I understand it's not an error. Nor is it critical. I just want it to stop nagging me.

Anybody have any suggestions?

Here's what I get...


/etc/cron.daily/eFa-Tokens.cron:

WARNING: MYSQL_OPT ...

Excellent. Glad you're all set.

Hi Penguin,

Yes it's still the same.


// Set QUARANTINE_USE_SENDMAIL to true to send released email as original email using sendmail,
// false to send it as an attachment to a release message.
define('QUARANTINE_USE_SENDMAIL', true);
define('QUARANTINE_SENDMAIL_PATH', '/usr/sbin/sendmail ...

According to Cerbot...

The type of key used by Certbot can be controlled through the --key-type option. You can use the --elliptic-curve option to control the curve used in ECDSA certificates and the --rsa-key-size option to control the size of RSA keys.

Ever since installing and migrating to EFA 5, a handful of sending servers were unable to establish a TLS connection due to an inability to match ciphers.

Apparently the LetsEncrypt SSL certificate that was issued with the EFA scripts had a key type of ECDSA and not RSA.

I managed to get around ...

Thank you @shawniverson
I am now on efa5 and all is working well so far

That did it

I discovered the issue by accident. The SFTP authentication completes successfully but the connection is then terminated by the efa initial setup prompt.

I need to transfer the backup files from my efa4 server via SFTP or SCP because the sshfs transfer speed sucks.

I can get around it by ...

After much head scratching and trial and error my frustration pushed me to try creating an alternate user with root privileges and trying that account instead. It works.

So, now the issue is more specific.

SFTP is broken for the root user only.

Any ideas?

Running scriptlet: httpd-2.4.57-8.el9.x86_64 334/334
Running scriptlet: mysql-selinux-1.0.10-1.el9.noarch 334/334
Running scriptlet: fail2ban-selinux-1.0.2-12.el9.noarch 334/334
Running scriptlet: dovecot-1:2.3.16-11.el9.x86_64 334/334
Running scriptlet: fontconfig-2.14.0-2.el9.x86_64 334/334 ...

--------------------------------------------------------------------------------
Total 6.1 MB/s | 125 MB 00:20
Extra Packages for Enterprise Linux 9 - x86_64 1.6 MB/s | 1.6 kB 00:00
Importing GPG key 0x3228467C:
Userid : "Fedora (epel9) <epel@fedoraproject.org>"
Fingerprint: FF8A D134 4597 106E ...

2024.07.14-12:19:33 - System Updated
2024.07.14-12:19:33 - Removing conflicting packages
2024.07.14-12:19:33 - Installing eFa packages (This can take a while)
Last metadata expiration check: 0:00:03 ago on Sun 14 Jul 2024 12:19:30 PM GMT.
Dependencies resolved ...

Running transaction check
Transaction check succeeded.
Running transaction test
Transaction test succeeded.
Running transaction
Preparing : 1/1
Installing : perl-Digest-1.19-4.el9.noarch 1/266
Installing : perl-Digest-MD5-2.58-4.el9.x86_64 2/266
Installing : perl-B-1.80-481.el9.x86_64 3/266 ...

The next few posts constitute a screen dump of what took place during the execution of the install script.
Before the script was run, sftp was working.
After the script, sftp is broken.


[root@efa ~]# sudo bash build.bash
2024.07.14-12:18:36 - ============= EFA 4 (EL 8) / 5 (EL 9) BUILD SCRIPT ...

Good day.

SFTP access to the CentOS 9 server is broken after running the install script for EFA 5.0.0

I have not looked into every line of code in the script to see why yet because I thought perhaps somebody here would know.

Anybody?

Problem resolved.

My local cache was not refreshing.

So here;s the fix.

1. Edit /etc/yum.repos.d/ius.repo by redirecting the url to archive
From: [ius]
name = IUS for Enterprise Linux 7 - $basearch
baseurl = https://repo.ius.io/7/$basearch/
enabled = 1
To: [ius]
name = IUS for Enterprise Linux ...

Thanks henk, but your solution was the first thing I tried. No luck. Same issue.

When I try to upgrade eFa to 4.04-39 from 4.0.4-26, I get the following


[XXXXX@efa ~]# yum update
Loaded plugins: fastestmirror
Loading mirror speeds from cached hostfile
* base: centos.mirror.globo.tech
* eFa4: dl7.efa-project.org
* epel: mirrors.wcupa.edu
* extras: centos.mirror.globo.tech ...

I believe that the next version of EFA (4.1?) must include multi-factor authentication. The tech for it is freely available in the open source community. I'd be happy to assist.

Edit /var/www/html/mailscanner/conf.php and look for the below code and make sure that "QUARANTINE_USE_SENDMAIL" is set to true.


// Set QUARANTINE_USE_SENDMAIL to true to send released email as original email using sendmail,
// false to send it as an attachment to a release message.
define ...