efa-project.org

Agreed. Might have gotten a little bit ahead of myself. That being said, I have done a lot of work on the natural language processing and have integrated it into the efa. So, stay tuned. it is coming soon.

Dear eFa Community,
We’re proud to introduce OpenEFA, a modern continuation of the original eFa-Project—built on the solid foundation laid by Shawn Iverson, whose work brought intelligent and accessible email filtering to thousands of organizations.

OpenEFA is a community-driven effort to preserve ...

After Shawns departure, We have forked the project over to openefa.com and integrated AI and a natural language server SpaCy server. We are working on our first release. Are you available for a discussion about eFa future? Call me at 7025618743 or email at scott@seguelogic.com. new site is https ...

We have enhanced spamassassin using a SpaCy server and integrated it into the efa appliance. Due to Shawn's departure from the project we have forked the great work he has accomplished and are integrating SpaCy and AI into our next release. Let me know how we can help. The new site is http://openefa ...

Personally not seeing it, but this might help. create a file in /etc/mail/spamassassin/ called sophos_whitelist.cf. The put the content below in the file. Run spamassassin --lint. If no output you are good to restart sparmassassin systemctl restart spamassassin.

# /etc/mail/spamassassin/sophos ...

Do you have the full header available? Could send in pm if necessary. Also include a snapshot of the email. I think I can provide the rule you are looking for

Here is some thought. I don't have the PCI requirement, but certainly have an interest in being secure.

Edit the Postfix configuration file:
vi /etc/postfix/main.cf
Change this line:tls_medium_cipherlist = ECDSA+AESGCM:ECDH+AESGCM:DH+AESGCM:ECDSA+AES:ECDH+AES:DH+AES:ECDH+3DES:DH+3DES:RSA+AESGCM ...

I have been using primarily opensource software for a long long time and plan to continue. I the EFA community has some great people, engineers, and a great base that should be continued. It will be difficult and or some pretty difficult roads ahead with out Shawn, but I am certainly up for the ...

Try adding this in your local.cf. I don't use the knowbe4 service, but believe this should essentially be what you are asking for.

Add to /etc/mail/spamassassin/local.cf
header __KNOWBE4_1 X-Mailer =~ /KnowBe4/i
header __KNOWBE4_2 X-Sender =~ /\@kb4\.com/i
header __KNOWBE4_3 X-SenderBaseID ...

Thanks for posting this.

I now have two eFa 5 servers running on one bayes database and I am synching the spamassassin/local.cf between the two. This makes customizing rules a breeze.

I operate a inbound only filtering EFA 4. I would like to know if that will allow the filter evaluate incoming emails and deny those senders that don't pass dkim, spf, and dmarc. I have enabled it on the EFA menu, but looking for proof that the EFA filter is evaluating dkim, spf, and dmarc on ...

In the version 4.x it is in /var/www/html/mailscanner/conf.php

Find the line:
// Define how many days of emails to keep.
define('RECORD_DAYS_TO_KEEP', 60);

Change the "60" to whatever retention days you need.

Please share the custom rule that you used. Has it been successful?

I started digging around and looking at the various scripts that involved reporting spam, etc. I noticed that most of them had the $hostname variable in them. So, I decided to look at the /etc/hostname file and it had only the name of the server and not the fully qualified domain name. I changed the ...

Hello,

I am having an issue with the links in the spam reports. In the report sent to the user, the link is no longer to the fully qualified domain name. It is being sent with the name of the server only, example "servername" instead of "servername.example.com. The link to the message following the ...

Ubuntu.

Removing the signatures and then running freshclam was the ticket. I also rebooted for good measure.

Thank you all so very much for your time. How do I donate to the project?

I have removed all of the third party signatures from the freshclam.conf file. I then ran freshclam it updated and provided this output
ClamAV update process started at Wed Nov 18 17:29:25 2020
daily.cld database is up to date (version: 25992, sigs: 4345834, f-level: 63, builder: raynman)
main.cld ...

You did search on Mail forwarding?
The how to search on keywords.
https://forum.efa-project.org/viewtopic.php?f=5&t=2974

result should include : https://forum.efa-project.org/viewtopic.php?f=19&t=4500

The maillog clearly shows errors. Can you answer my previous questions?

To check services ...

Output of systemctl status postfix postfix_relay msmilter milter_relay sqlgrey mailscanner mariadb httpd | less


postfix.service - Postfix Mail Transport Agent
Loaded: loaded (/usr/lib/systemd/system/postfix.service; enabled; vendor preset: disabled)
Active: active (running) since Wed 2020-11 ...

systemctl status clamd@scan
clamd@scan.service - clamd scanner (scan) daemon
Loaded: loaded (/usr/lib/systemd/system/clamd@.service; enabled; vendor preset: disabled)
Drop-In: /etc/systemd/system/clamd@scan.service.d
└─override.conf
Active: activating (start) since Wed 2020-11-18 17:12:28 PST ...

. Report bugs in the bugs section
2. Did efa auto update? ( and did a reboot)
I don't know if EFA did a auto update. Though I logged into via SSH and used option 13 for an EFA update. Non required. Rebooted anyways.

3. Did you check the logfiles?
I have been checking the log files and I believe it ...

Latest logs
tail maillog
Nov 18 15:30:45 zeus MailScanner[15879]: Cannot find Socket (/var/run/clamd.socket/clamd.sock) Exiting!
Nov 18 15:30:45 zeus MailScanner[9573]: Virus Scanning: No virus scanners worked, so message batch will be tried again
Nov 18 15:31:11 zeus MailScanner[16045]: Cannot find ...

Ok. Second EFA-Filter stopped forwarding email. This one is on the other side of town, completely separated and different domains, etc. from the first one in this thread. Help!

Hi All,
Hoping you can help a relatively new EFA-Project user. I have a couple EFA 4.0 servers up and running. All of them have been fine up until one decided to stop last night some time. It has been up and running perfectly for months and last night it decided it just didn't want to forward the ...