Search found 42 matches

by zohman
18 Apr 2016 06:50
Forum: How-to
Topic: Block entire Countries by IPs
Replies: 7
Views: 10069

Re: Block entire Countries by IPs

Hello everyone, Just started using this wonderful product in our office and while it is doing great. I would like to ask a few questions that after searching have not found clear answers on how to perform. 1) How would i go about blocking entire IP ranges from countries. I use https://www.countryip...
by zohman
11 Nov 2015 23:25
Forum: How-to
Topic: Reverse DNS does not match SMTP banner
Replies: 1
Views: 2507

Re: Reverse DNS does not match SMTP banner

very good practice!

search for smtpd_banner in /etc/postfix/main.cf

Code: Select all

smtpd_banner = mail.example.com ESMTP Mail Service Ready
change mail.example.com to your ptr(rDNS),
restart\reload postfix for the changes to take effect,

Zohman.
by zohman
16 Oct 2015 10:37
Forum: How-to
Topic: NDR from Efa
Replies: 7
Views: 5347

Re: NDR from Efa

nicola.piazzi wrote:ok, thx,
Il will be on E.F.A.3.0.0.9 ?

You know release date ?
need shawniverson respond.
by zohman
16 Oct 2015 10:29
Forum: How-to
Topic: NDR from Efa
Replies: 7
Views: 5347

Re: NDR from Efa

Yes, it is 5 days, i think that can be good the default but there is a way to generate a NDR to inform that the message are still in queue after 1 hour ? yes.. "delay_warning_time" but you need postfix 3.0 and later... and EFA come with postfix 2.6, it may be on the next EFA version. Zohm...
by zohman
16 Oct 2015 10:19
Forum: How-to
Topic: NDR from Efa
Replies: 7
Views: 5347

Re: NDR from Efa

Yes, because you get 4xx status code, meaning that the remote server saying to you "try again later". so the EFA will try to send this message again. read this for more info: http://jrs-s.net/2013/04/17/configuring-retry-duration-in-postfix/ How log does the mail stays in queue? the defaul...
by zohman
14 Oct 2015 17:35
Forum: How-to
Topic: no NDR if Spam
Replies: 6
Views: 4709

Re: no NDR if Spam

Someone@mail.com send a message to user@mydomain.it Efa receive message and pass it to Exchange Exchange deliver it to user@mydomain.it but If user@mydomain.it doesnt exist Exchange generate a NDR for Someone@mail.com Usually, if message is not spam Someone@mail.com is a real people that make a mis...
by zohman
14 Oct 2015 14:44
Forum: How-to
Topic: no NDR if Spam
Replies: 6
Views: 4709

Re: no NDR if Spam

Yes When Exchange doesnt find recipient it generate NDR But usually NDR from mail that "Spam Status = Yes" are from inesistent addressess and then stays in queue "NDR from mail that Spam Status = Yes ?" you get NDRs with Spam Status = Yes? "inesistent addressess?" -- t...
by zohman
14 Oct 2015 12:35
Forum: How-to
Topic: no NDR if Spam
Replies: 6
Views: 4709

Re: no NDR if Spam

I configured EFA between Internet and my internal Exchange, so any mail sento to my domain is filtered by efa and delivered to Exchange but at now all destination mailbox are passed, also that not exist, so Exchange generate a NDR. In Exchange i set SCL=9 when message are marked as SPAM with a TRAN...
by zohman
13 Oct 2015 23:21
Forum: How-to
Topic: question about the release-msg.cgi
Replies: 3
Views: 3198

Re: question about the release-msg.cgi

hello, yes, i'm talking about the spam marked emails. Right after this tag, the server send a spam notification, telling him that he receiced a email, marked as spam, and that he can release it clicking the link provided. It's the text from : /etc/MailScanner/reports/en/recipient.spam.report.txt My...
by zohman
13 Oct 2015 21:09
Forum: How-to
Topic: question about the release-msg.cgi
Replies: 3
Views: 3198

Re: question about the release-msg.cgi

in your mailwatch console the message for this client tagged as spam?
by zohman
13 Oct 2015 15:55
Forum: How-to
Topic: How to enable port 587 and TLS for sending and receiving emails
Replies: 11
Views: 21232

Re: How to enable port 587 and TLS for sending and receiving emails

pdwalker wrote:thank you zohman, I appreciate the help you've been giving.
:obscene-drinkingcheers:

i don't here for medal i'm here for
this project to succeed.

Regards,
Zohman. :D
by zohman
13 Oct 2015 15:39
Forum: Discussion
Topic: Handling Spammy IP Addresses / Address Blocks
Replies: 5
Views: 5812

Re: Handling Spammy IP Addresses / Address Blocks

Hi skoppes , In general SPF come to prevent spoofing senders not spam, because DNS refresh intervals among other things, spammers rarely use SPF because they always need to "adjust" their SPF syntax.. anyway you give me idea, maybe we can create list of senders domains that we always want ...
by zohman
13 Oct 2015 13:14
Forum: How-to
Topic: How to enable port 587 and TLS for sending and receiving emails
Replies: 11
Views: 21232

Re: How to enable port 587 and TLS for sending and receiving emails

how ? To enable port 587, edit the file /etc/postfix/master.cf and remove the # in front of the line: #submission inet n - n - - smtpd so that it looks like this: submission inet n - n - - smtpd and restart postfix: service postfix restart for SASL authentication: http://www.postfix.org/SASL_README...
by zohman
07 Oct 2015 19:05
Forum: How-to
Topic: SQLGrey - Greylisting Improvements with SPF\DNSWL
Replies: 15
Views: 11718

Re: SQLGrey - Greylisting Improvements with SPF\DNSWL

Zohman, Thank you again for the very informative post, and for the attempted clarification. Unfortunately, I'm still confused. I understand 'comment out' to mean any line starting with # in this case. When I read the 'don't comment out this' I am confused, because it is already commented out in you...
by zohman
07 Oct 2015 15:31
Forum: How-to
Topic: SQLGrey - Greylisting Improvements with SPF\DNSWL
Replies: 15
Views: 11718

Re: SQLGrey - Greylisting Improvements with SPF\DNSWL

Should dnswl_reject_unauthorized be commented out as indicated, or not? I'm not completely understanding how the implementation of these checks is working. I still have lots to learn with EFA! Thanks! well, don't comment out this if you not fully understand the consequences and how DNSWL queries wo...
by zohman
07 Oct 2015 15:23
Forum: How-to
Topic: how to teach spamassassin that a message is spam without blacklisting it.
Replies: 4
Views: 5234

Re: how to teach spamassassin that a message is spam without blacklisting it.

can i do meta MY_COUSTOM1 (RCVD_IN_BRBL_LASTEXT + RDNS_NONE) describe MY_COUSTOM1 Not exactly trusted score MY_COUSTOM1 5.0 with out the "header MY_COUSTOM1 From =~ /\@example.com/i" reason why i ask is because im noticing that is not comming from the same @sample.com yes. should i just s...
by zohman
07 Oct 2015 13:45
Forum: How-to
Topic: How to notify sender that I classified as span a message ?
Replies: 3
Views: 3154

Re: How to notify sender that I classified as span a message ?

Hi Paul, It is not really true Sometimes some valid mail can be classified as spam I want to do this only for SPAM and not for HIGH SCORING SPAM The perfect thing will be that these notifications have a custom queue retention of 1 hour and not 5 days as default postfix i most agree with Paul here, ...
by zohman
06 Oct 2015 21:48
Forum: How-to
Topic: New user: Feature questions, SMTP delay HELO
Replies: 2
Views: 2639

Re: New user: Feature questions, SMTP delay HELO

First, is it possible to introduce an artificial delay to the SMTP greeting? Legitimate mail servers will typically wait at least 2 minutes before closing the connection, while spam engines may wait only a few seconds. This adjustment will eliminate a significant amount of spam, without causing any...
by zohman
06 Oct 2015 21:04
Forum: How-to
Topic: how to teach spamassassin that a message is spam without blacklisting it.
Replies: 4
Views: 5234

Re: how to teach spamassassin that a message is spam without blacklisting it.

How can I teach SpamAssassin to learn from a message that is spam? is this even possible? how can i tell spam assassin to learn from the message to give it a higher score? is this even possible? Hi curibe, you most be aware what is spam and what could be mail subscription by users. this message pas...
by zohman
06 Oct 2015 17:27
Forum: How-to
Topic: disable Clean emails store
Replies: 7
Views: 4912

Re: disable Clean emails store

Hello, i'm using EFA since 2-3 weeks, works nice ;-) Is there a way to disable the storing of all the clean emails ? Actually, our appliances store everything, but i configured only the half of our mail servers, and it use about 2,5Gb every day ... Thanks to let me know. Best regards yes you can :)...
by zohman
06 Oct 2015 14:31
Forum: How-to
Topic: SQLGrey - Greylisting Improvements with SPF\DNSWL
Replies: 15
Views: 11718

Re: SQLGrey - Greylisting Improvements with SPF\DNSWL

One day after i implemented the improvement, i've already 2 complaining people who can't reach us by mail. I examined their SPF record; both their domains were in error (sending on other IP address and SPF signed with -all ). So the rejection of this improvement works very well! To discover the SPF...
by zohman
05 Oct 2015 20:02
Forum: How-to
Topic: spoofed domain emails coming through
Replies: 9
Views: 9648

Re: spoofed domain emails coming through

Could this be added to the system permanently, the amount of mail im stopping now is huge - over 1000 emails in 1 day Thanks RFC Alert, OK, there is another thing we need to add.. :) I notice that EFA wont let bounce messages to get out from Exchange.. after little investigation I saw that Exchange...
by zohman
05 Oct 2015 14:08
Forum: How-to
Topic: spoofed domain emails coming through
Replies: 9
Views: 9648

Re: spoofed domain emails coming through

Useful! Just remember that you may not want to do this if you have valid mobile users that send mail via an external smtp server. This is my case, so I cannot turn it on. Blerg. Hi pdwalker, you should use it all the time in any case! if you have external smtp server that send behalf of your sender...
by zohman
05 Oct 2015 13:52
Forum: How-to
Topic: SQLGrey - Greylisting Improvements with SPF\DNSWL
Replies: 15
Views: 11718

Re: SQLGrey - Greylisting Improvements with SPF\DNSWL

heronimus wrote: OK, i've already taken these steps. I will now restart the services and monitor how it works. Thanks!
Great,
Zohman. :D
by zohman
05 Oct 2015 13:43
Forum: How-to
Topic: SQLGrey - Greylisting Improvements with SPF\DNSWL
Replies: 15
Views: 11718

Re: SQLGrey - Greylisting Improvements with SPF\DNSWL

I can't find anything that matches sqlgrey in this file. oh, sorry for the misunderstanding, i meant "check_policy_service inet:127.0.0.1:2501" (this is the sqlgrey line you find) you wont find sqlgrey-check_policy_service in the file.. just take "check_policy_service inet:127.0.0.1:...