efa-project.org

Thanks Shawn. This works perfectly!

Your outbound mail relay should be the local IP address of your hMailserver.
Your outbound smarthost should be configured with your ISP's SMTP server settings.
Then set hMailserver to relay outbound messages through EFA.

Depending upon how your ISP transfers messages, you may continue to have ...

The outbound mail relay settings are used to tell EFA to accept SMTP messages from your local mail server. You would use this if you want EFA to deliver outgoing messages to remote servers (to prevent outbound spam/viruses, for example) rather than having your local mail server deliver the message ...

Not quite, because what I was hoping to do was avoid having to use a local non-forwarding DNS server for the entire network. I would prefer to have unbound act as an EFA-only caching non-forwarding DNS server, but I'm not sure that's actually how it works when DNS recursion is enabled.

I use Kerio Connect as my mail server (essentially a cross platform Exchange clone). Kerio is great for small businesses who want to self-host email, but its built-in anti-spam features are not as powerful as they could be. I am starting to write a how-to for the Kerio forums for using EFA in front ...

Thank you. My current file did not have the local DNS servers listed. Here's what I had:

I am having trouble making DNS recursion work. Regardless of whether recursion (settings > 4) is turned on, I receive errors that some of my block list lookups are being blocked. As a temporary fix, I turned my Windows DNS server to non-forwarding mode and that solved the block list fails, but the ...

I had a similar problem. Here's a link to the message thread that fixed it for me:
viewtopic.php?f=5&t=1490

I solved this issue. Here's what happened:

The error in this log entry turned out to be the issue:
EFA postfix/qmgr[1653]: fatal: parameter queue_run_delay: bad time value or unit: 180smeta_directory = /etc/postfix

I edited the configuration file at: /etc/postfix/main.cf

I edited the line ...

These are the log files from /var/log/maillog

Mar 22 21:09:06 EFA postfix/qmgr[1653]: fatal: parameter queue_run_delay: bad time value or unit: 180smeta_directory = /etc/postfix
Mar 22 21:09:07 EFA postfix/master[1651]: warning: process /usr/libexec/postfix/qmgr pid 1653 exit status 1
Mar 22 21:09 ...

Which log files should I look at for this?

Yes, rebooted a few times. I'm not seeing anything in particular in the logs.

After updating to 3.0.0.9 from 3.0.0.8, my Postfix queue is not processing inbound or outbound messages. Any suggestions?

I followed the instructions in Shawn's link above, to block the .top TLD, and it worked without any problems. The sender_access file already exists. I just copied and pasted the additional four lines to the end of the /etc/postfix/main.cf file:
smtpd_client_restrictions = reject_unknown_client ...

Thanks Dan. I hadn't found that post yet. I'm glad to see that I'm not alone with this issue. The funny thing is that I'm not using an Exchange server behind EFA; it's a Kerio Connect server on CentOS 7. The Kerio logs do not show that the message has ever hit the mail server.

I'm also confused by ...

No, I do not use greylist. It seems the common thread is Mimecast, Exchange, and a message with attachments. I was able to obtain Mimecast logs from one of the senders, and they are posted below. It seems to be a broken socket. I just can't tell, and don't know how to tell, whether the issue is on ...

I am having a problem that seems to be limited to receiving messages with attachments from senders who relay through Mimecast. This problem is with more than one sender companies (they are completely unrelated), but both use Exchange servers through Mimecast. I am unable to find any logs in ...

Your MX records should point to the EFA server. The idea is that your mail server will accept incoming SMTP traffic only from the EFA server. As far remote mail servers are concerns, your EFA server is your mail server. Here's a very general overview of the topology:

1. Remote server looks up your ...

Thanks for the information. I look forward to future releases of EFA. You are correct that reject_unknown_sender_domain is enabled by default.

I'm new to the EFA-Project, and I'm very impressed with the project so far. I am using the VMWare image in front of a Kerio Connect mail server with good results. There are a few features that were available to me using Kerio's built-in spam filters that I have not yet been able to replicate in the ...