Search found 16 matches

by murphyk
29 Apr 2016 19:46
Forum: 3.x Bugs
Topic: OLE2Macro Didn't Catch E-mail
Replies: 0
Views: 3334

OLE2Macro Didn't Catch E-mail

Can you ask in the forum about the missed macros – tell them that we use this rule
body MICROSOFT_OLE2MACRO eval:check_microsoft_ole2macro()
and it failed to find the documents that had macros.

The only difference I can see is that the messages encoded in base64 but did not observer line width ...
by murphyk
18 Jan 2016 13:09
Forum: 3.x Bugs
Topic: Blocked Files Today's Total
Replies: 2
Views: 3020

Re: Blocked Files Today's Total

Thank you.
by murphyk
14 Jan 2016 20:23
Forum: 3.x Bugs
Topic: Blocked Files Today's Total
Replies: 2
Views: 3020

Blocked Files Today's Total

The "Blocked Files" in Today's Total in the top-right of the Main screen is not up to date. We have the report filter (see below) when there have been blocked files, but the count is not up to date. Not a huge deal, but something worth mentioning.

contained an Unacceptable Attachment (>0 = TRUE ...
by murphyk
14 Dec 2015 12:53
Forum: How-to
Topic: ClamAV update
Replies: 5
Views: 7383

Re: ClamAV update

The fix is confirmed to be working. All is good.
by murphyk
14 Dec 2015 12:51
Forum: 3.x Bugs
Topic: Update from 3.0.0.6 to 3.0.0.8 Failure
Replies: 11
Views: 9929

Re: Update from 3.0.0.6 to 3.0.0.8 Failure

All is good and updated. Thanks.

Did you just compile clam from source into a new RPM? Just wondering how you fixed it (learning exercise).



daily.cld updated (version: 21162, sigs: 1733857, f-level: 63, builder: neo)
bytecode.cld is up to date (version: 270, sigs: 46, f-level: 63, builder ...
by murphyk
14 Dec 2015 12:27
Forum: 3.x Bugs
Topic: Update from 3.0.0.6 to 3.0.0.8 Failure
Replies: 11
Views: 9929

Re: Update from 3.0.0.6 to 3.0.0.8 Failure

Thanks for the update. I will apply the upgrade again on our test machine.

Kevin
by murphyk
11 Dec 2015 14:54
Forum: 3.x Bugs
Topic: Update from 3.0.0.6 to 3.0.0.8 Failure
Replies: 11
Views: 9929

Update from 3.0.0.6 to 3.0.0.8 Failure

Hello,

We're trying to upgrade from 3.0.0.6 to 3.0.0.8 by running "EFA-Update -update." The 3.0.0.6 to 3.0.0.7 ran just fine, it had me reboot once or twice for that kernel update. However, 3.0.0.7 to 3.0.0.8 is having trouble. It is as if something to with the clamav package not existing on ...
by murphyk
01 May 2015 13:24
Forum: 3.x Bugs
Topic: Domain Reject DNS Bug?
Replies: 5
Views: 6088

Re: Domain Reject DNS Bug?

I would agree that makes sense. However, before we made the fix, mxtoolbox detected the correct MX record which points to EFA. One would think if EFA couldn't find MX record internally, it would then search externally, instead of just giving up? Maybe not...hmm.
by murphyk
30 Apr 2015 18:00
Forum: 3.x Bugs
Topic: Domain Reject DNS Bug?
Replies: 5
Views: 6088

Re: Domain Reject DNS Bug?

Postfix transport:
newdomain.com smtp:[internal IP]

It was inbound e-mail that was not working.

When we had the newdomain hosted externally, all was well.

Then, we moved newdomain to an internal DNS server and we could not receive inbound messages.

By adding the MX record to our internal DNS ...
by murphyk
30 Apr 2015 11:49
Forum: 3.x Bugs
Topic: Domain Reject DNS Bug?
Replies: 5
Views: 6088

Domain Reject DNS Bug?

We recently added a new domain and had the MX record on an external DNS. We had three users successfully receiving e-mail on Exchange 2010 via EFA. We recently switched the domain to our local DNS and our entire company to the new domain to receive e-mails. We accidentally found that for 24 hours we ...
by murphyk
06 Mar 2015 16:58
Forum: How-to
Topic: Users Cannot Release Spam Messages
Replies: 9
Views: 9523

Re: Users Cannot Release Spam Messages

We recently had a message come in that was designated to 4 different people and was marked as spam, but the user could try to release it. However, only one person was able to release it. After anyone else tried, this message came up:

Your message has not been released from quarantine.
Our system ...
by murphyk
26 Feb 2015 12:53
Forum: How-to
Topic: Users Cannot Release Spam Messages
Replies: 9
Views: 9523

Re: Users Cannot Release Spam Messages

I was looking at quarantine_report.php and saw the calls for the messages. I was hesitant on changing anything because it looked like the messages from postmaster, for example, were marked null for isspam and nonspam is marked 0. I saw your change and I bet that will work.
by murphyk
25 Feb 2015 12:07
Forum: How-to
Topic: Users Cannot Release Spam Messages
Replies: 9
Views: 9523

Re: Users Cannot Release Spam Messages

Selection_006.jpg
Selection_006.jpg (78.3 KiB) Viewed 9482 times
by murphyk
24 Feb 2015 13:22
Forum: How-to
Topic: Users Cannot Release Spam Messages
Replies: 9
Views: 9523

Re: Users Cannot Release Spam Messages

Sorry, it is the quarantine report that is saying "Reason: UNKNOWN."

In the e-mail report, all that is sent is:

Code: Select all

Received ----- From ----------------Subject ---- Reason ------- Action
Date/time ----- sender@domain ----- subject ---- UNKNOWN ------ View
by murphyk
23 Feb 2015 16:46
Forum: How-to
Topic: Users Cannot Release Spam Messages
Replies: 9
Views: 9523

Re: Users Cannot Release Spam Messages

Thanks for the help. I noticed that right after I posted.

Another question: Our reports are being sent daily, which is great, but it is listing "UNKOWN" for e-mails like "postmaster@domain.com", which is the e-mail used for releasing messages to people. It's also "UNKNOWN" reporting normal/regular ...
by murphyk
19 Feb 2015 19:40
Forum: How-to
Topic: Users Cannot Release Spam Messages
Replies: 9
Views: 9523

Users Cannot Release Spam Messages

Hello,

I'm trying to implement EFA-3.0.0.6. I've run into an issue where users cannot release quarantined/spam messages. I'm trying to migrate from ESVA to EFA.

With the default setting for /etc/MailScanner/reports/en/recipient.spam.report.txt, the “{Spam Not Delivered}” message is sent to the ...