efa-project.org

Personally not seeing it, but this might help. create a file in /etc/mail/spamassassin/ called sophos_whitelist.cf. The put the content below in the file. Run spamassassin --lint. If no output you are good to restart sparmassassin systemctl restart spamassassin.

# /etc/mail/spamassassin/sophos ...

Do you have the full header available? Could send in pm if necessary. Also include a snapshot of the email. I think I can provide the rule you are looking for

Here is some thought. I don't have the PCI requirement, but certainly have an interest in being secure.

Edit the Postfix configuration file:
vi /etc/postfix/main.cf
Change this line:tls_medium_cipherlist = ECDSA+AESGCM:ECDH+AESGCM:DH+AESGCM:ECDSA+AES:ECDH+AES:DH+AES:ECDH+3DES:DH+3DES:RSA+AESGCM ...

I have been using primarily opensource software for a long long time and plan to continue. I the EFA community has some great people, engineers, and a great base that should be continued. It will be difficult and or some pretty difficult roads ahead with out Shawn, but I am certainly up for the ...

Try adding this in your local.cf. I don't use the knowbe4 service, but believe this should essentially be what you are asking for.

Add to /etc/mail/spamassassin/local.cf
header __KNOWBE4_1 X-Mailer =~ /KnowBe4/i
header __KNOWBE4_2 X-Sender =~ /\@kb4\.com/i
header __KNOWBE4_3 X-SenderBaseID ...

Thanks for posting this.

I now have two eFa 5 servers running on one bayes database and I am synching the spamassassin/local.cf between the two. This makes customizing rules a breeze.

I operate a inbound only filtering EFA 4. I would like to know if that will allow the filter evaluate incoming emails and deny those senders that don't pass dkim, spf, and dmarc. I have enabled it on the EFA menu, but looking for proof that the EFA filter is evaluating dkim, spf, and dmarc on ...

In the version 4.x it is in /var/www/html/mailscanner/conf.php

Find the line:
// Define how many days of emails to keep.
define('RECORD_DAYS_TO_KEEP', 60);

Change the "60" to whatever retention days you need.

Please share the custom rule that you used. Has it been successful?

I started digging around and looking at the various scripts that involved reporting spam, etc. I noticed that most of them had the $hostname variable in them. So, I decided to look at the /etc/hostname file and it had only the name of the server and not the fully qualified domain name. I changed the ...

Hello,

I am having an issue with the links in the spam reports. In the report sent to the user, the link is no longer to the fully qualified domain name. It is being sent with the name of the server only, example "servername" instead of "servername.example.com. The link to the message following the ...

Ubuntu.

Removing the signatures and then running freshclam was the ticket. I also rebooted for good measure.

Thank you all so very much for your time. How do I donate to the project?

I have removed all of the third party signatures from the freshclam.conf file. I then ran freshclam it updated and provided this output
ClamAV update process started at Wed Nov 18 17:29:25 2020
daily.cld database is up to date (version: 25992, sigs: 4345834, f-level: 63, builder: raynman)
main.cld ...

You did search on Mail forwarding?
The how to search on keywords.
https://forum.efa-project.org/viewtopic.php?f=5&t=2974

result should include : https://forum.efa-project.org/viewtopic.php?f=19&t=4500

The maillog clearly shows errors. Can you answer my previous questions?

To check services ...

Output of systemctl status postfix postfix_relay msmilter milter_relay sqlgrey mailscanner mariadb httpd | less


postfix.service - Postfix Mail Transport Agent
Loaded: loaded (/usr/lib/systemd/system/postfix.service; enabled; vendor preset: disabled)
Active: active (running) since Wed 2020-11 ...

systemctl status clamd@scan
clamd@scan.service - clamd scanner (scan) daemon
Loaded: loaded (/usr/lib/systemd/system/clamd@.service; enabled; vendor preset: disabled)
Drop-In: /etc/systemd/system/clamd@scan.service.d
└─override.conf
Active: activating (start) since Wed 2020-11-18 17:12:28 PST ...

. Report bugs in the bugs section
2. Did efa auto update? ( and did a reboot)
I don't know if EFA did a auto update. Though I logged into via SSH and used option 13 for an EFA update. Non required. Rebooted anyways.

3. Did you check the logfiles?
I have been checking the log files and I believe it ...

Latest logs
tail maillog
Nov 18 15:30:45 zeus MailScanner[15879]: Cannot find Socket (/var/run/clamd.socket/clamd.sock) Exiting!
Nov 18 15:30:45 zeus MailScanner[9573]: Virus Scanning: No virus scanners worked, so message batch will be tried again
Nov 18 15:31:11 zeus MailScanner[16045]: Cannot find ...

Ok. Second EFA-Filter stopped forwarding email. This one is on the other side of town, completely separated and different domains, etc. from the first one in this thread. Help!

Hi All,
Hoping you can help a relatively new EFA-Project user. I have a couple EFA 4.0 servers up and running. All of them have been fine up until one decided to stop last night some time. It has been up and running perfectly for months and last night it decided it just didn't want to forward the ...

I agree that it isn't EFA related. I have the same issue on an owncloud server on a the same host as the EFA device. EFA device is fine, but the owncloud device was receiving lock ups. I adjusted the CPUs deployment and the lock ups have gone away. I also will be adding additional ram to better ...

I am looking for an easy way to have my user mark an email as spam that was passed as clean. I have done a lot of reading and it seems this might be something that was dropped in the past versions. Does EFA 4.x have the functionality of added a link that will allow users to mark an email as spam ...

What functionality is DKIM and dmarc setting providing in EFA4? We run an inbound only scanner and send out directly from the mail servers. I understand the use of dkim and dmarc and have them both setup along with SPF records. I am wondering what the EFA 4 server would be doing on a receive only ...

Definitely. We have been running EFA-4 from about day 2 of the official release. Why are you asking? Need help?