efa-project.org

My pleasure

JOP wrote: 17 Jul 2025 18:08 not solving my problem.

One more thing you can try

In the MailScanner portal under "Tools & Links", run the "MailScanner Lint" and "Spamassassin Lint" and check for errors or warnings in each one.

Since the other pages load, I'm willing to bet the file /etc/MailScanner/rules/spam.blacklist.rules is one or more of the following:
1. Empty
2. Incorrectly formatted
3. Has file security improperly set

If the file actually has content and is correctly formatted, then check to make sure that both ...

I don't understand your point.

You asked for help and I offered you some to the limit of my abilities.

If there are no errors, then everything is working as configured.

Postfix, MailScanner and Spamassassin all log to: /var/log/maillog

Then it should be working well.
Check your log files for errors.

in the file /etc/mail/spamassassin/init.pre, make sure you have the following code:

In that case, unless you changed some setting that broke SA (SpamAssassin)'s ability to do SPF checks, it appears that incoming emails are meeting the SPF requirements.

Note that if you enabled SPF checks in Postfix so that non-compliant emails are rejected, those emails will never reach SA. This ...

In the EFA portal, go to the "Tools And Links" section and click on "Update SpamAssassin Rule Descriptions"

Then search the results and see if you have the following rules...

SPF_FAIL SPF: sender does not match SPF record (fail)
SPF_HELO_FAIL SPF: HELO does not match SPF record (fail)
SPF_HELO ...

Hi JOP,

Where are you trying to make SPF work?

Postfix?
Sendmail?
SpamAssassin?
Somewhere else?

Before anyone can help you, you will need to help yourself a little

Hi,

Every day I am receiving a warning via email from the EFA Anacron after the daily cron is run.

I understand it's not an error. Nor is it critical. I just want it to stop nagging me.

Anybody have any suggestions?

Here's what I get...


/etc/cron.daily/eFa-Tokens.cron:

WARNING: MYSQL_OPT ...

Excellent. Glad you're all set.

Hi Penguin,

Yes it's still the same.


// Set QUARANTINE_USE_SENDMAIL to true to send released email as original email using sendmail,
// false to send it as an attachment to a release message.
define('QUARANTINE_USE_SENDMAIL', true);
define('QUARANTINE_SENDMAIL_PATH', '/usr/sbin/sendmail ...

According to Cerbot...

The type of key used by Certbot can be controlled through the --key-type option. You can use the --elliptic-curve option to control the curve used in ECDSA certificates and the --rsa-key-size option to control the size of RSA keys.

Ever since installing and migrating to EFA 5, a handful of sending servers were unable to establish a TLS connection due to an inability to match ciphers.

Apparently the LetsEncrypt SSL certificate that was issued with the EFA scripts had a key type of ECDSA and not RSA.

I managed to get around ...

Thank you @shawniverson
I am now on efa5 and all is working well so far

That did it

I discovered the issue by accident. The SFTP authentication completes successfully but the connection is then terminated by the efa initial setup prompt.

I need to transfer the backup files from my efa4 server via SFTP or SCP because the sshfs transfer speed sucks.

I can get around it by ...

After much head scratching and trial and error my frustration pushed me to try creating an alternate user with root privileges and trying that account instead. It works.

So, now the issue is more specific.

SFTP is broken for the root user only.

Any ideas?

Running scriptlet: httpd-2.4.57-8.el9.x86_64 334/334
Running scriptlet: mysql-selinux-1.0.10-1.el9.noarch 334/334
Running scriptlet: fail2ban-selinux-1.0.2-12.el9.noarch 334/334
Running scriptlet: dovecot-1:2.3.16-11.el9.x86_64 334/334
Running scriptlet: fontconfig-2.14.0-2.el9.x86_64 334/334 ...

--------------------------------------------------------------------------------
Total 6.1 MB/s | 125 MB 00:20
Extra Packages for Enterprise Linux 9 - x86_64 1.6 MB/s | 1.6 kB 00:00
Importing GPG key 0x3228467C:
Userid : "Fedora (epel9) <epel@fedoraproject.org>"
Fingerprint: FF8A D134 4597 106E ...

2024.07.14-12:19:33 - System Updated
2024.07.14-12:19:33 - Removing conflicting packages
2024.07.14-12:19:33 - Installing eFa packages (This can take a while)
Last metadata expiration check: 0:00:03 ago on Sun 14 Jul 2024 12:19:30 PM GMT.
Dependencies resolved ...

Running transaction check
Transaction check succeeded.
Running transaction test
Transaction test succeeded.
Running transaction
Preparing : 1/1
Installing : perl-Digest-1.19-4.el9.noarch 1/266
Installing : perl-Digest-MD5-2.58-4.el9.x86_64 2/266
Installing : perl-B-1.80-481.el9.x86_64 3/266 ...

The next few posts constitute a screen dump of what took place during the execution of the install script.
Before the script was run, sftp was working.
After the script, sftp is broken.


[root@efa ~]# sudo bash build.bash
2024.07.14-12:18:36 - ============= EFA 4 (EL 8) / 5 (EL 9) BUILD SCRIPT ...