efa-project.org

What's up with Barracuda? I've not been following them. Just curious.


A zero day exploit...

https://nvd.nist.gov/vuln/detail/CVE-2023-2868

...and some additional information...

https://www.bleepingcomputer.com/news/security/barracuda-warns-of-email-gateways-breached-via-zero-day-flaw/

I ...

G'day All,

We've just started testing EFA. It's a great product, but I believe the default inclusion for zen in postfix's main.cf file is such that it can easily lead to the full rejection of all email when spamhaus spits their dummy as they tend to do of late.

EFA correctly provides a solution ...

G'day pdwalker,

You won't see them in the main.cf file since they're the default values. Postfix contains a range of default values for configuration items without any entries existing in the main.cf file.

To check for them, use the postconf utility from the CLI...

# postconf address_verify ...

G'day pdwalker,

I just came back to update this post with a solution, and what you suggested is certainly related. Thank you very much.

Restarting postfix, and even rebooting, made no difference. However, after 3 hours, with no configuration changes, the negatively cached address was tested again ...

G'day All,

I just set up an EFA installation, and after working around a socket incompatibility between EFA and opendkim/opendmarc https://forum.efa-project.org/viewtopic.php?p=19491#p19491 , it's running quite nicely for the most part.

The Automated Recipient Verification was working correctly in ...

I just setup a new VM with RockyLinux 8.8 and efa-4.0.4 last night. I was seeing these same errors. Trying to figure out what milter was the culprit seemed more difficult than it should have been especially at 2 am.

I eventually figured out that the opendmarc.conf and opendkiim.conf were both set ...

G'day Team,

Best wishes to all.

Best regards,

LBJ