efa-project.org

Excellent. Glad you're all set.

Hi Penguin,

Yes it's still the same.


// Set QUARANTINE_USE_SENDMAIL to true to send released email as original email using sendmail,
// false to send it as an attachment to a release message.
define('QUARANTINE_USE_SENDMAIL', true);
define('QUARANTINE_SENDMAIL_PATH', '/usr/sbin/sendmail ...

According to Cerbot...

The type of key used by Certbot can be controlled through the --key-type option. You can use the --elliptic-curve option to control the curve used in ECDSA certificates and the --rsa-key-size option to control the size of RSA keys.

Ever since installing and migrating to EFA 5, a handful of sending servers were unable to establish a TLS connection due to an inability to match ciphers.

Apparently the LetsEncrypt SSL certificate that was issued with the EFA scripts had a key type of ECDSA and not RSA.

I managed to get around ...

Thank you @shawniverson
I am now on efa5 and all is working well so far

That did it

I discovered the issue by accident. The SFTP authentication completes successfully but the connection is then terminated by the efa initial setup prompt.

I need to transfer the backup files from my efa4 server via SFTP or SCP because the sshfs transfer speed sucks.

I can get around it by ...

After much head scratching and trial and error my frustration pushed me to try creating an alternate user with root privileges and trying that account instead. It works.

So, now the issue is more specific.

SFTP is broken for the root user only.

Any ideas?

Running scriptlet: httpd-2.4.57-8.el9.x86_64 334/334
Running scriptlet: mysql-selinux-1.0.10-1.el9.noarch 334/334
Running scriptlet: fail2ban-selinux-1.0.2-12.el9.noarch 334/334
Running scriptlet: dovecot-1:2.3.16-11.el9.x86_64 334/334
Running scriptlet: fontconfig-2.14.0-2.el9.x86_64 334/334 ...

--------------------------------------------------------------------------------
Total 6.1 MB/s | 125 MB 00:20
Extra Packages for Enterprise Linux 9 - x86_64 1.6 MB/s | 1.6 kB 00:00
Importing GPG key 0x3228467C:
Userid : "Fedora (epel9) <epel@fedoraproject.org>"
Fingerprint: FF8A D134 4597 106E ...

2024.07.14-12:19:33 - System Updated
2024.07.14-12:19:33 - Removing conflicting packages
2024.07.14-12:19:33 - Installing eFa packages (This can take a while)
Last metadata expiration check: 0:00:03 ago on Sun 14 Jul 2024 12:19:30 PM GMT.
Dependencies resolved ...

Running transaction check
Transaction check succeeded.
Running transaction test
Transaction test succeeded.
Running transaction
Preparing : 1/1
Installing : perl-Digest-1.19-4.el9.noarch 1/266
Installing : perl-Digest-MD5-2.58-4.el9.x86_64 2/266
Installing : perl-B-1.80-481.el9.x86_64 3/266 ...

The next few posts constitute a screen dump of what took place during the execution of the install script.
Before the script was run, sftp was working.
After the script, sftp is broken.


[root@efa ~]# sudo bash build.bash
2024.07.14-12:18:36 - ============= EFA 4 (EL 8) / 5 (EL 9) BUILD SCRIPT ...

Good day.

SFTP access to the CentOS 9 server is broken after running the install script for EFA 5.0.0

I have not looked into every line of code in the script to see why yet because I thought perhaps somebody here would know.

Anybody?

Problem resolved.

My local cache was not refreshing.

So here;s the fix.

1. Edit /etc/yum.repos.d/ius.repo by redirecting the url to archive
From: [ius]
name = IUS for Enterprise Linux 7 - $basearch
baseurl = https://repo.ius.io/7/$basearch/
enabled = 1
To: [ius]
name = IUS for Enterprise Linux ...

Thanks henk, but your solution was the first thing I tried. No luck. Same issue.

When I try to upgrade eFa to 4.04-39 from 4.0.4-26, I get the following


[XXXXX@efa ~]# yum update
Loaded plugins: fastestmirror
Loading mirror speeds from cached hostfile
* base: centos.mirror.globo.tech
* eFa4: dl7.efa-project.org
* epel: mirrors.wcupa.edu
* extras: centos.mirror.globo.tech ...

I believe that the next version of EFA (4.1?) must include multi-factor authentication. The tech for it is freely available in the open source community. I'd be happy to assist.

Edit /var/www/html/mailscanner/conf.php and look for the below code and make sure that "QUARANTINE_USE_SENDMAIL" is set to true.


// Set QUARANTINE_USE_SENDMAIL to true to send released email as original email using sendmail,
// false to send it as an attachment to a release message.
define ...

Hi andyhud

I'm not sure if that can be done. I have never had a need to do that so I've never researched or tested it. However, there is a way to get around the DNS issue.

1. Set up a random 'A' record hostname in your public DNS records. Something like specialhost.domain.com (substitute domain ...

Thanks Shawn.
This is clearly a weekend job.

Is there a migration path yet?

Can you post more details about how you updated MailScanner?

Does anyone know how this might have happened? and how I can fix it? It started yesterday.

It appears to be showing the total emails for the entire 24 hour period in one bar
.

Hi Telvenes,

Blocking IPs yourself is a losing battle because the pro spammers are always changing their IPs.

Even subscribing to to a blocklist service is not usually good enough.

You probably have one or two valid reasons for turning off grey listing, but now it is time to ask yourself if it ...