efa-project.org

Ok, I found the "issue". The sequence of rules is important. The general rule for double extensions MUST be last in the sequence of rules. # Deny all other double file extensions. This catches any hidden filenames. deny \.[a-z][a-z0-9]{2,3}\s*\.[a-z0-9]{3}$ Found possible filename hiding A...

I've run the --lint test which found couple other entries with syntax errors that I fixed. (yeah, there were still spaces instead of tabs) They are now fixed and there are no errors reported. Yet, the pdf file I renames to file.xml.pdf is still filtered out: "The following e-mails were found to...

Ah, apologies! Brain fart! oh no Eyefart or something dumb.
Thanks for your patience. I've re-formated a couple lines that were added over time but the e-mails are still being filtered.
"The following e-mails were found to have: Bad Filename Detected"

thanks for the reply _M_P,
I copy/pasted one of the original lines so the tab-formatted content was there the whole time.
I just didn't use the </> code formatting here in the forum. (in hinesight, I should have)
And I also did restart the MailScanner.

Hi guys, our eFa 4.0.4 with MailScanner v5.5.1 is blocking file attachments with double extension ".xml.pdf" even though I modified the filename.rules.conf to allow it using: allow \.xml\.pdf - - The message details say: Blocked File: Y SPAM Allowlisted: Y Any hints/ideas why that is? Thanks

HI there, is there any progress on this xxxxx.dat problem?

Since I created the rule, there were several updates and restarts of the system. Never the less, I've re-checked all the recent 20 mail from gmail and the rule was applied just fine. I had the problem with the rule not being applied every time only after I created the rule some months ago. So, from ...

I added these 2 lines at the end of the /etc/mail/spamassassin/local.cf It seems to work partially as I don't see the rule being applied every time a mail from gmail.com is received.

Do you have eFa behind firewall? Are you using a tunnel through NAT?
Let'sEncrypt requires http AND https to communicate.

Hi,
I added the custom rules, but they were not applied.
I found out that I have to run sa-update and sa-compile from /etc/mail/spamassassin/ folder.
Is it enough to run this from the GUI console in webmit or does this need to be run as root? (using sudo)

Are a ny other steps required?

Thanks

Thanks!
will try that asap.

Hi guys, is there a way to increase the spam score of all e-mail received from gmail? Most of the spam these days comes from the fake/overtaken mailboxes at Gmail. Sadly, most of them manage to pass through the eFa filters. Thanks MailWatch Version: 1.2.18 Operating System Version: CentOS Linux 7 (C...

Hi,
try the same solution as in this thread.
viewtopic.php?f=19&t=4845&p=18134#p18134
It might be a timeout problem.

Ok, thank you. The "Ignore Denial of Service = yes" seems to be working.

Ok, thanks will do.
Was any of the samples useful for you?
Thanks

I think that this emoji in mail problem is related
viewtopic.php?f=13&t=3692&p=14380&hilit ... ion#p14380

Oct 21 08:55:57 efa43 MailScanner[10070]: Quarantined message 4HZdXy4LMbzqqL as it caused MailScanner to crash several times

Where can i find the details of the crash?

Further investigation revealed the following: Mail (anonimized) Received: from mail.xxx.xx (mail.xxx.xx [123.456.789.10]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (no client certificate requested) by efa43.xxxxxxx.zzz (MailScanner Milter) with SMTP id 4HZdXy4LMbzqqL; Th...

Today, for some unknown reason, eFa started to block most of the incoming e-mails as "Other bad content detected". All the e-mails were stored in "/var/spool/MailScanner/quarantine", so I was able to recover them and store as *.eml These e-mails are not listed in the "Recent...

Hi, that variable is set all the time to yes.

Hi Peter,
the file contains definition for behavior based on the file extension.
This way you can define which file types are allowed to pass and which are not.

peter.barlabas wrote: ↑30 Sep 2021 09:31 What do I check in /etc/MailScanner/filename.rules.conf ?

For few days it was fine and today the situation repeated. The following e-mails were found to have: Bad Filename Detected Sender: admin@uniba.sk IP Address: 23.237.5.146 Recipient: xxxxx@xxxxxx.xxx Subject: ŽIADOSŤ O CENOVÚ PONUKU (Univerzita Komenského v Bratislave) EUI894/SK4633 MessageID: 4H...

Hi,
check /etc/MailScanner/filename.rules.conf

BTW are you sure that those files are not *.xlsx.exe?

Hi guys, I am running: eFa-4.0.4 - with MailWatch Version: 1.2.16 Operating System Version: CentOS Linux 7 (Core) Postfix Version: 3.5.9 MailScanner Version: 5.4.1 ClamAV Version: 0.103.3 SpamAssassin Version: 3.4.6 PHP Version: 7.4.23 MySQL Version: 10.2.30-MariaDB GeoIP Database Version: GeoLite2 ...