efa-project.org

Thanks for your help, it pointed me in the right direction.

There was a setting in Exchange that was causing HTML emails to be sent in Microsoft's TNEF format, with a winmail.dat attachment. I was able to disable that using the Exchange Management Shell command:

Set-RemoteDomain -Identity ...

HTML emails sent from Exchange 2016 through eFa are being converted to plain text. Images in the signature show up as attachment, things like bold, italics are lost.

This behaviour appears to have started around a month ago.

Is there a setting I should check?

I am using eFa as a mail gateway / "smart host". It is hosted on a VPS, and receives and processes external emails for 2 domains, then relays them to two Exchange servers, which are the final destination. It is also relays outbound email from the Exchange servers to the outside world.

The idea is ...

I was able to disable the additional internal headers being added by Exchange by executing:

Get-SendConnector "eFa MailScanner" | Remove-ADPermission -User "NT AUTHORITY\ANONYMOUS LOGON" -ExtendedRights ms-Exch-Send-Headers-Routing

...in the Exchange Management PowerShell.

So now the only ...

The are three received headers.

The first is from the client computer to the Exchange server. This IP is an fe80 IP.
The second is from Exchange to itself. This is also from an fe80 IP
The third is from Exchange to eFa. It is the external IPv4 address of the Exchange server, and does match the ...

Anyone have any ideas or suggestions on this one?

I have an Exchange 2016 server using eFa 4.0.4 hosted in a VPS as a smart host. Recently I have made my SPF checking rules more aggressive by increasing SPF_FAIL to 7, as I find enforcing SPF checks almost totally eliminates the remaining spam, and in my case has not impacted any valid senders ...

I have several domains running through the one eFA host.

What is the correct format in Black and White Lists page to impact an entire domain for every domain being hosted?

Say I'm hosting 2 domains, abc.com and xyz.com. I want to whitelist messages coming from whitelistme.com

Is it:

From ...

Workaround:

PERL_MM_OPT='' sa-compile

is PERL_MB_OPT defined in your environment anywhere?


Hi Phil, seems to have taken me a while to loop back around to look at this issue again, but I tried your workaround and it seems to have worked!

PERL_MB_OPT was defined as the last line in .bashrc ...

I want to run a fairly strict email filter for inbound email. I can get eFa to block incoming email with bad SPF records:

In /etc/mail/spamassassin/mailscanner.cf:

score SPF_FAIL 7.00
score SPF_SOFTFAIL 4.50
score SPF_HELO_FAIL 7.00
score SPF_NEUTRAL 3.00

How can I achieve a similar outcome for ...

No, unfortunately I haven't been able to resolve this at all. Still getting the same error running sa-compile.

I will try again tomorrow. Just tried now and still no luck...

Here is the full output of the two commands.... do you notice anything odd (other than the error)?

[root@scanner spamassassin]# sa-update
[root@scanner spamassassin]# sa-compile
Aug 7 21:32:29.897 [32394] info: generic: base ...

Running efa 4.0.2 with openDKIM and openDMARC installed and seemingly working.

I wanted to add some spamassassin rules for applying DMARC policy.

I created /etc/mail/spamassassin/opendmarc.cf:

header DMARC_PASS Authentication-Results =~ /remote.goldnugget.com.au; dmarc=pass /
describe DMARC_PASS ...

I applied the changes mentioned in Henk's first post above, and all seems well. There's no error in the GUI any more.

Is there a way to determine if Razor is working, such as a command that will tell me which emails I've submitted?

I am seeing this error in a recent, 20 day old fresh install of 4.0.2, in the GUI:

SpamAssassin: Jun 30 01:35:56.023 [9217] warn: reporter: razor2 report failed: No such file or directory report requires authentication at /usr/share/perl5/vendor_perl/Mail/SpamAssassin/Plugin/Razor2.pm line 176. at ...