Search found 29 matches

by SelfMan
29 Jan 2025 12:20
Forum: 4.x Bugs
Topic: "Path to message" vs filename length issue
Replies: 4
Views: 30682

Re: "Path to message" vs filename length issue

IIRC File name and path length hare independent. Most operating systems have a limit of 255 characters for the filename. On linux, the maximum path length is defined by PATH_MAX which is in most cases set to 4096. I am not sure why it crashes when I set the regex value to 255, but I assume the regis...
by SelfMan
28 Jan 2025 14:19
Forum: 4.x Bugs
Topic: "Path to message" vs filename length issue
Replies: 4
Views: 30682

Re: "Path to message" vs filename length issue

Thanks for the info. It looks like changing the value to 240 did help. The service did not like it when I set it to 250 though. I do still want to have control over extremely long files, so I keep it at deny for a while. We'll see how it behaves. This will resolve my issue, but does not fix the bug ...
by SelfMan
28 Jan 2025 10:24
Forum: 4.x Bugs
Topic: "Path to message" vs filename length issue
Replies: 4
Views: 30682

"Path to message" vs filename length issue

We have a problem where email is blocked with "Bad content" (Blocked File: Y) because of the filename length. While the filename itself isn't long, the "Path to message" is much longer. i.e. "New document.doc" vs "20250128/45gtsmw4hFzqgP/New document.doc" How ...
by SelfMan
21 Jan 2025 11:35
Forum: How-to
Topic: Avoiding "Very long filenames" blocking
Replies: 1
Views: 4682

Avoiding "Very long filenames" blocking

Many e-mails are blocked as "Bad content" only because: "MailScanner: Very long filenames are good signs of attacks against Microsoft e-mail packages" This happens even though the sender is on a white list and so are the file extensions. I have looked around but haven't found a c...
by SelfMan
30 Nov 2024 09:06
Forum: 4.x Bugs
Topic: filename.xml.pdf - Allowlisted, Bad content [SOLVED]
Replies: 7
Views: 6527

Re: filename.xml.pdf - Allowlisted, Bad content

Ok, I found the "issue". The sequence of rules is important. The general rule for double extensions MUST be last in the sequence of rules. # Deny all other double file extensions. This catches any hidden filenames. deny \.[a-z][a-z0-9]{2,3}\s*\.[a-z0-9]{3}$ Found possible filename hiding A...
by SelfMan
30 Nov 2024 08:39
Forum: 4.x Bugs
Topic: filename.xml.pdf - Allowlisted, Bad content [SOLVED]
Replies: 7
Views: 6527

Re: filename.xml.pdf - Allowlisted, Bad content

I've run the --lint test which found couple other entries with syntax errors that I fixed. (yeah, there were still spaces instead of tabs) They are now fixed and there are no errors reported. Yet, the pdf file I renames to file.xml.pdf is still filtered out: "The following e-mails were found to...
by SelfMan
27 Nov 2024 19:50
Forum: 4.x Bugs
Topic: filename.xml.pdf - Allowlisted, Bad content [SOLVED]
Replies: 7
Views: 6527

Re: filename.xml.pdf - Allowlisted, Bad content

Ah, apologies! Brain fart! oh no Eyefart or something dumb.
Thanks for your patience.
efa-file-filter.png
efa-file-filter.png (12.31 KiB) Viewed 6383 times
I've re-formated a couple lines that were added over time but the e-mails are still being filtered.
"The following e-mails were found to have: Bad Filename Detected"
by SelfMan
27 Nov 2024 16:43
Forum: 4.x Bugs
Topic: filename.xml.pdf - Allowlisted, Bad content [SOLVED]
Replies: 7
Views: 6527

Re: filename.xml.pdf - Allowlisted, Bad content

thanks for the reply _M_P,
I copy/pasted one of the original lines so the tab-formatted content was there the whole time.
I just didn't use the </> code formatting here in the forum. (in hinesight, I should have)
And I also did restart the MailScanner.
by SelfMan
26 Nov 2024 13:58
Forum: 4.x Bugs
Topic: filename.xml.pdf - Allowlisted, Bad content [SOLVED]
Replies: 7
Views: 6527

filename.xml.pdf - Allowlisted, Bad content [SOLVED]

Hi guys, our eFa 4.0.4 with MailScanner v5.5.1 is blocking file attachments with double extension ".xml.pdf" even though I modified the filename.rules.conf to allow it using: allow \.xml\.pdf - - The message details say: Blocked File: Y SPAM Allowlisted: Y Any hints/ideas why that is? Thanks
by SelfMan
10 Nov 2022 21:15
Forum: 4.x Bugs
Topic: Emails that are retained for containing .dat files
Replies: 11
Views: 31261

Re: Emails that are retained for containing .dat files

HI there, is there any progress on this xxxxx.dat problem?
by SelfMan
06 Oct 2022 11:07
Forum: How-to
Topic: Increase spam assassin score for gmail
Replies: 7
Views: 5434

Re: Increase spam assassin score for gmail

Since I created the rule, there were several updates and restarts of the system. Never the less, I've re-checked all the recent 20 mail from gmail and the rule was applied just fine. I had the problem with the rule not being applied every time only after I created the rule some months ago. So, from ...
by SelfMan
17 Sep 2022 01:31
Forum: How-to
Topic: Increase spam assassin score for gmail
Replies: 7
Views: 5434

Re: Increase spam assassin score for gmail

I added these 2 lines at the end of the /etc/mail/spamassassin/local.cf

Code: Select all

header LOCAL_DEMONSTRATION_FROM	From =~ /\@gmail\.com/i
score LOCAL_DEMONSTRATION_FROM	2.0
It seems to work partially as I don't see the rule being applied every time a mail from gmail.com is received.
by SelfMan
07 Mar 2022 14:48
Forum: Discussion
Topic: not sure if this is Bug as none has reported similar
Replies: 3
Views: 3972

Re: not sure if this is Bug as none has reported similar

Do you have eFa behind firewall? Are you using a tunnel through NAT?
Let'sEncrypt requires http AND https to communicate.
by SelfMan
11 Feb 2022 11:34
Forum: How-to
Topic: Increase spam assassin score for gmail
Replies: 7
Views: 5434

Re: Increase spam assassin score for gmail

Hi,
I added the custom rules, but they were not applied.
I found out that I have to run sa-update and sa-compile from /etc/mail/spamassassin/ folder.
Is it enough to run this from the GUI console in webmit or does this need to be run as root? (using sudo)

Are a ny other steps required?

Thanks
by SelfMan
10 Feb 2022 13:16
Forum: How-to
Topic: Increase spam assassin score for gmail
Replies: 7
Views: 5434

Re: Increase spam assassin score for gmail

Thanks!
will try that asap.
by SelfMan
10 Feb 2022 12:25
Forum: How-to
Topic: Increase spam assassin score for gmail
Replies: 7
Views: 5434

Increase spam assassin score for gmail

Hi guys, is there a way to increase the spam score of all e-mail received from gmail? Most of the spam these days comes from the fake/overtaken mailboxes at Gmail. Sadly, most of them manage to pass through the eFa filters. Thanks MailWatch Version: 1.2.18 Operating System Version: CentOS Linux 7 (C...
by SelfMan
08 Feb 2022 16:54
Forum: 4.x Bugs
Topic: EFA is not processing all mail
Replies: 1
Views: 1850

Re: EFA is not processing all mail

Hi,
try the same solution as in this thread.
viewtopic.php?f=19&t=4845&p=18134#p18134
It might be a timeout problem.
by SelfMan
02 Nov 2021 09:23
Forum: 4.x Bugs
Topic: Missing entries for "Bad content detected"
Replies: 11
Views: 28776

Re: Missing entries for "Bad content detected"

Ok, thank you. The "Ignore Denial of Service = yes" seems to be working.
by SelfMan
22 Oct 2021 00:46
Forum: 4.x Bugs
Topic: Missing entries for "Bad content detected"
Replies: 11
Views: 28776

Re: Missing entries for "Bad content detected"

Ok, thanks will do.
Was any of the samples useful for you?
Thanks
by SelfMan
21 Oct 2021 11:01
Forum: 4.x Bugs
Topic: Missing entries for "Bad content detected"
Replies: 11
Views: 28776

Re: Missing entries for "Bad content detected"

I think that this emoji in mail problem is related
viewtopic.php?f=13&t=3692&p=14380&hilit ... ion#p14380
by SelfMan
21 Oct 2021 10:54
Forum: 4.x Bugs
Topic: Missing entries for "Bad content detected"
Replies: 11
Views: 28776

Re: Missing entries for "Bad content detected"

Oct 21 08:55:57 efa43 MailScanner[10070]: Quarantined message 4HZdXy4LMbzqqL as it caused MailScanner to crash several times

Where can i find the details of the crash?
by SelfMan
21 Oct 2021 10:38
Forum: 4.x Bugs
Topic: Missing entries for "Bad content detected"
Replies: 11
Views: 28776

Re: Missing entries for "Bad content detected"

Further investigation revealed the following: Mail (anonimized) Received: from mail.xxx.xx (mail.xxx.xx [123.456.789.10]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (no client certificate requested) by efa43.xxxxxxx.zzz (MailScanner Milter) with SMTP id 4HZdXy4LMbzqqL; Th...
by SelfMan
21 Oct 2021 09:32
Forum: 4.x Bugs
Topic: Missing entries for "Bad content detected"
Replies: 11
Views: 28776

Re: Missing entries for "Bad content detected"

Today, for some unknown reason, eFa started to block most of the incoming e-mails as "Other bad content detected". All the e-mails were stored in "/var/spool/MailScanner/quarantine", so I was able to recover them and store as *.eml These e-mails are not listed in the "Recent...
by SelfMan
21 Oct 2021 08:02
Forum: 4.x Bugs
Topic: Missing entries for "Bad content detected"
Replies: 11
Views: 28776

Re: Missing entries for "Bad content detected"

Hi, that variable is set all the time to yes.