efa-project.org

IIRC File name and path length hare independent.
Most operating systems have a limit of 255 characters for the filename.
On linux, the maximum path length is defined by PATH_MAX which is in most cases set to 4096.
I am not sure why it crashes when I set the regex value to 255, but I assume the ...

Resolved
see viewtopic.php?p=20291

Thanks for the info.
It looks like changing the value to 240 did help. The service did not like it when I set it to 250 though.
I do still want to have control over extremely long files, so I keep it at deny for a while. We'll see how it behaves.

This will resolve my issue, but does not fix the bug ...

We have a problem where email is blocked with "Bad content" (Blocked File: Y) because of the filename length.
While the filename itself isn't long, the "Path to message" is much longer.
i.e. "New document.doc" vs "20250128/45gtsmw4hFzqgP/New document.doc"

How is this handled?
How can I change the ...

Many e-mails are blocked as "Bad content" only because:
"MailScanner: Very long filenames are good signs of attacks against Microsoft e-mail packages"

This happens even though the sender is on a white list and so are the file extensions.
I have looked around but haven't found a configuration option ...

Ok, I found the "issue".
The sequence of rules is important.

The general rule for double extensions MUST be last in the sequence of rules.

# Deny all other double file extensions. This catches any hidden filenames.
deny \.[a-z][a-z0-9]{2,3}\s*\.[a-z0-9]{3}$ Found possible filename hiding Attempt ...

I've run the --lint test which found couple other entries with syntax errors that I fixed. (yeah, there were still spaces instead of tabs)
They are now fixed and there are no errors reported. Yet, the pdf file I renames to file.xml.pdf is still filtered out:
"The following e-mails were found to ...

Ah, apologies! Brain fart! oh no Eyefart or something dumb.
Thanks for your patience. I've re-formated a couple lines that were added over time but the e-mails are still being filtered.
"The following e-mails were found to have: Bad Filename Detected"

thanks for the reply _M_P,
I copy/pasted one of the original lines so the tab-formatted content was there the whole time.
I just didn't use the </> code formatting here in the forum. (in hinesight, I should have)
And I also did restart the MailScanner.

Hi guys,
our eFa 4.0.4 with MailScanner v5.5.1 is blocking file attachments with double extension ".xml.pdf" even though I modified the filename.rules.conf to allow it using:
allow \.xml\.pdf - -

The message details say:
Blocked File: Y
SPAM Allowlisted: Y

Any hints/ideas why that is?
Thanks

HI there, is there any progress on this xxxxx.dat problem?

Since I created the rule, there were several updates and restarts of the system. Never the less, I've re-checked all the recent 20 mail from gmail and the rule was applied just fine. I had the problem with the rule not being applied every time only after I created the rule some months ago.
So, from ...

I added these 2 lines at the end of the /etc/mail/spamassassin/local.cf It seems to work partially as I don't see the rule being applied every time a mail from gmail.com is received.

Do you have eFa behind firewall? Are you using a tunnel through NAT?
Let'sEncrypt requires http AND https to communicate.

Hi,
I added the custom rules, but they were not applied.
I found out that I have to run sa-update and sa-compile from /etc/mail/spamassassin/ folder.
Is it enough to run this from the GUI console in webmit or does this need to be run as root? (using sudo)

Are a ny other steps required?

Thanks

Thanks!
will try that asap.

Hi guys,
is there a way to increase the spam score of all e-mail received from gmail?
Most of the spam these days comes from the fake/overtaken mailboxes at Gmail.
Sadly, most of them manage to pass through the eFa filters.

Thanks

MailWatch Version: 1.2.18
Operating System Version: CentOS Linux 7 ...

Hi,
try the same solution as in this thread.
viewtopic.php?f=19&t=4845&p=18134#p18134
It might be a timeout problem.

Ok, thank you. The "Ignore Denial of Service = yes" seems to be working.

Ok, thanks will do.
Was any of the samples useful for you?
Thanks

I think that this emoji in mail problem is related
viewtopic.php?f=13&t=3692&p=14380&hilit ... ion#p14380

Oct 21 08:55:57 efa43 MailScanner[10070]: Quarantined message 4HZdXy4LMbzqqL as it caused MailScanner to crash several times

Where can i find the details of the crash?

Further investigation revealed the following:
Mail (anonimized)
Received: from mail.xxx.xx (mail.xxx.xx [123.456.789.10])
(using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
(no client certificate requested)
by efa43.xxxxxxx.zzz (MailScanner Milter) with SMTP id 4HZdXy4LMbzqqL ...

Today, for some unknown reason, eFa started to block most of the incoming e-mails as "Other bad content detected".
All the e-mails were stored in "/var/spool/MailScanner/quarantine", so I was able to recover them and store as *.eml
These e-mails are not listed in the "Recent messages" tab, nor are ...

Hi, that variable is set all the time to yes.