Search found 1038 matches

by pdwalker
25 Apr 2018 10:24
Forum: 3.x Feature Requests
Topic: Mailscanner plugin for checking download URLs
Replies: 3
Views: 192

Re: Mailscanner plugin for checking download URLs

interesting.

Do you have an actual link to one of these files that I could test it on?
by pdwalker
25 Apr 2018 10:23
Forum: 3.x How-to
Topic: Not to store non-spam messages from some domains
Replies: 1
Views: 22

Re: Not to store non-spam messages from some domains

I don't believe so. Either all the non-spam messages are stored, or none of them are. Maybe you could configure the MCP to this - e.g. check for the domains you are interested in, store them and then forward them onto the destination while your main mailscanner configuration would not store the mess...
by pdwalker
25 Apr 2018 10:21
Forum: 3.x How-to
Topic: Efficient use of Search Filters in MailWatch
Replies: 1
Views: 15

Re: Efficient use of Search Filters in MailWatch

1/ Spam Report contains RCVD_IN_PSBL

2/ Spam Report contains URIBL_GREY

3/ Spam Report contains BAYES_50
(bayes = 40-60% - not 50-60%)

I think you can see where I am going with this. Give it a try and see if you get more than 0 messages found.
by pdwalker
25 Apr 2018 10:15
Forum: 3.x How-to
Topic: Quaranatine password protected Archives
Replies: 5
Views: 36

Re: Quaranatine password protected Archives

So, according to what I see, I believe password protected archive files should be automatically quarantined.

Is your system not quarantining password protected archive files?
by pdwalker
25 Apr 2018 10:07
Forum: Discussion
Topic: Why move this spam folder
Replies: 6
Views: 60

Re: Why move this spam folder

Yeah, I'm confused. You have a local rule that gives a score of 1.0, yet your spam is getting a 9.0 for that rule it seems. Something weird is going on.

Did you add this local rule, or did someone else add this rule?
by pdwalker
24 Apr 2018 02:17
Forum: Discussion
Topic: Fail2ban
Replies: 9
Views: 1308

Re: Fail2ban

Sure. Assuming that there is a recognizable pattern in some log files, you can configure Fail2Ban to watch for it and block appropriately. The first question to ask yourself, is how do you know you are being brute forced? (i.e. does that show up in the log files in a recognizable pattern). Once you ...
by pdwalker
24 Apr 2018 02:15
Forum: 3.x How-to
Topic: Quaranatine password protected Archives
Replies: 5
Views: 36

Re: Quaranatine password protected Archives

What are your "Quarantine *" settings in MailScanner.conf?
by pdwalker
23 Apr 2018 09:59
Forum: 3.x How-to
Topic: Quaranatine password protected Archives
Replies: 5
Views: 36

Re: Quaranatine password protected Archives

/etc/Mailscanner.conf
Allow Password-Protected Archives = no

This will quarantine password protected files
by pdwalker
23 Apr 2018 05:08
Forum: Discussion
Topic: Why move this spam folder
Replies: 6
Views: 60

Re: Why move this spam folder

Try this: do any files return results?

Code: Select all

grep DMARC_FAIL_REJECT /etc/mail/spamassassin/*
grep DMARC_FAIL_REJECT /var/lib/spamassassin/3.004001/updates_spamassassin_org/*
I suspect that if you get a hit, it should be in the first directory. Let me know.
by pdwalker
23 Apr 2018 05:01
Forum: 3.x How-to
Topic: Whitelisted but Bad Content
Replies: 4
Views: 500

Re: Whitelisted but Bad Content

go into /etc/MailScanner then search for the bad content rule in question. Once you find the *.conf file that contains that rule, comment it out with a # character at the start of the line and that rule will be disabled. In case you are having problems finding a particular rule, there are numerous t...
by pdwalker
18 Apr 2018 12:04
Forum: 3.x How-to
Topic: How I did setup let's encrypt on my EFA
Replies: 13
Views: 4362

Re: How I did setup let's encrypt on my EFA

Whoops. I missed this earlier.

jamerson, did you ever resolve your problem?
by pdwalker
18 Apr 2018 11:13
Forum: Discussion
Topic: block deny extension in .zip or .rar file
Replies: 6
Views: 87

Re: block deny extension in .zip or .rar file

Can you show me the contents of your archives.filename.rules.conf file?
by pdwalker
18 Apr 2018 11:11
Forum: Discussion
Topic: Why move this spam folder
Replies: 6
Views: 60

Re: Why move this spam folder

Is your question, "why did this message get moved into the spam folder"? It's because the message had a high enough spam score X-Spam-Flag: YES X-Spam-Score: 10.042 X-Spam-Level: ********** X-Spam-Status: Yes, score= 10.042 required= 6.6 tests=[ DKIM_SIGNED=0.1, DMARC_FAIL_REJECT=9, HTML_FONT_LOW_CO...
by pdwalker
18 Apr 2018 11:04
Forum: Discussion
Topic: Fail2ban
Replies: 9
Views: 1308

Re: Fail2ban

Sure, why not?

Or are you looking for what rule to implement to make this happen?
by pdwalker
18 Apr 2018 11:03
Forum: Discussion
Topic: Why Say Mailscanner
Replies: 1
Views: 38

Re: Why Say Mailscanner

What problem are you trying to solve exactly?
by pdwalker
16 Apr 2018 11:02
Forum: 3.x Bugs
Topic: SA Learn config: path "/root/.spamassassin" is inaccessible
Replies: 7
Views: 160

Re: SA Learn config: path "/root/.spamassassin" is inaccessible

Keep an eye on your BAYES scores. If you are confident the BAYES is helping, then you can increase the spamscore on the top end. For example, I use a score of 4.0 for BAYES_99 and a score of 2.0 for BAYES_999 (bayes_999 is additive to bayes_99 on my system thus the final score is +6.0). These number...
by pdwalker
11 Apr 2018 20:12
Forum: Discussion
Topic: New SPAM or back scatter?
Replies: 1
Views: 33

Re: New SPAM or back scatter?

Can you look at one of the messages and post the details?
by pdwalker
11 Apr 2018 10:53
Forum: 3.x How-to
Topic: Which DNS servers are used when DNS Recursion is enabled?
Replies: 1
Views: 34

Re: Which DNS servers are used when DNS Recursion is enabled?

iridium1191 wrote:
11 Apr 2018 10:23
is unbound resolving each new request from the root DNS servers and then caching it?
yes.
by pdwalker
11 Apr 2018 06:32
Forum: 3.x How-to
Topic: EFA displaying firewall/router LAN IP as from address
Replies: 10
Views: 90

Re: EFA displaying firewall/router LAN IP as from address

Oh. I wouldn't have thought of that.

I have just the port forward rule, not outbound nat, so didn't have that problem.
by pdwalker
11 Apr 2018 01:28
Forum: Discussion
Topic: problem with pop3 and imap
Replies: 8
Views: 57

Re: problem with pop3 and imap

Nope. Still with us. Still with us...
by pdwalker
11 Apr 2018 01:27
Forum: Discussion
Topic: block deny extension in .zip or .rar file
Replies: 6
Views: 87

Re: block deny extension in .zip or .rar file

What is your maximum archive depth setting?
by pdwalker
10 Apr 2018 15:34
Forum: 3.x How-to
Topic: EFA displaying firewall/router LAN IP as from address
Replies: 10
Views: 90

Re: EFA displaying firewall/router LAN IP as from address

Hi Largo,

Why not? That's how I do it. I don't need to assign the public IP to the mail server, I only need to map the port 25 traffic thus leaving the other ports for other public services in my network.
by pdwalker
10 Apr 2018 15:01
Forum: 3.x How-to
Topic: Building EFA, no network
Replies: 6
Views: 83

Re: Building EFA, no network

so, can this efa vm reach the internet?

can you use the nslookup command? if so, set your dns to 8.8.8.8 and see if you can resolve any addresses from that machine with those settings.
by pdwalker
10 Apr 2018 08:08
Forum: 3.x How-to
Topic: EFA displaying firewall/router LAN IP as from address
Replies: 10
Views: 90

Re: EFA displaying firewall/router LAN IP as from address

I have the basically the same setup as you (replace Domino with Exchange), and my efa instance shows me the correct Received From IP, so there must be a difference in our settings. What are your settings for the following? 1/ trusted_networks setting in /etc/mail/spamassassin/local.cf 2/ mynetworks ...
by pdwalker
10 Apr 2018 07:58
Forum: 3.x How-to
Topic: Building EFA, no network
Replies: 6
Views: 83

Re: Building EFA, no network

Did you set the DNS server during the setup?

The error message is saying that efa-project.org cannot be resolved which suggests your DNS server has not been specified correctly.