efa-project.org

Hi Nicolca,

can you show your Mysql config /etc/my.cnf.d/mariadb-server.cnf
My config
# This group is only read by MariaDB-10.1 servers.
# If you use the same .cnf file for MariaDB of different versions,
# use this group for options that older servers don't understand
#[mariadb-10.1]
[mariadb-10 ...

I really tried to write some useful words on your help request but, in the nick of time, writersblock kicked-in.

As you mentioned only the Gui is very slow ( with 10 - 30 messages being processed daily)

start monitoring these logfiles and then Login to the Gui and start clicking messages and see what happens if mail comes in.

tail -F /var/log/httpd/error_log /var/log/messages /var/log/php-fpm/www-error.log ...

eFa Current Software versions, for convenience visible on one screen, can save a lot of time solving issues

Suggestions on reporting/solving issues can be found here https://forum.efa-project.org/viewtopic.php?t=2974

With just 4K messages and 20 sec Gui response time, it's obvious there are issues.

In order to be able to troubleshoot, check the logs first and show the Mysqltuner output

I would start ...

Forgot to mention what's on top of my personal 2024 ToDo List.

Dig into Base64 encoded malware.

If you wanna know why, DM me and I'll forward a nice one that will bypass all defences.

Always open to ideas, btw.

Agree 100% with Shawn,

I, and I think many others, check efa's Active Topics on a regular basis and it's my first resouce to check on any efa related issue.

And when I find an issue, I also try to share it in more or less Human readable text, on this forum.
Same on what I think of possible ...

The 'allow \.shp\.xml' looks fine to me

Restarted MailScanner?

Planning and stuff hosted in Azure: Mariadb retirement and migration.
https://learn.microsoft.com/nl-nl/azure ... to-mariadb

Boozy,
There are a few defensive options.

By far the simplest one is NR 1,

1. Train Bayes, via the Gui, to learn these mails are spam.

2. Take a look at the IP ranges these mail are send from and catch them. Works fine.
https://forum.efa-project.org/viewtopic.php?t=2659

3. The Block TLD ...

try

to check the current repos'

yum repolist

If the Archive repo didnt show up

vi /etc/yum.repos.d/ius-archive.repo

Paste this into the file

[ius-archive]
name=IUS Community Archive Packages for Enterprise Linux 7
baseurl=https://repo.ius.io/archive/7/$basearch/
enabled=1
gpgcheck=0


yum ...

You just prooved my point, ADDING the additional ius Archive repo is required for new installs too.

Before you exec the build script, the repo should be present, as all required php moved there:

https://repo.ius.io/archive/7/x86_64/packages/p/

It would be great if the eFa moderators would step ...

Hi Tasone,

There's an dependency error, that affects updates and I think applies to new installs too..

Error: Package: 1:eFa-4.0.4-39.eFa.el7.noarch (eFa4)
Requires: php74-gmp >= 7.4.28-1

Take a look here. Guess ADDING the additional ius Archive repo , as mentioned there, could solve things ...

There's a post about that dependency issue, with solution

viewtopic.php?t=5155

Ran into a Dependency issue with php74-gmp from repo.ius.io on an efa machine today, that didnt update for some time.
( same issue will apply to new installs, I guess)

Had a look at the ius repo to find the php rpm's missing

https://repo.ius.io/7/x86_64/packages/p/


How I resolved the issue ...

No, all seems to work fine. Doing nothing solved nr 3 :-)

However I did enable mariadb ( systemctl enable mariadb) to make sure mariadb stops nicely when you perform a shutdown )

As I did another Mariadb upgrade on another, non efa, system ( from 10.1 -> 10.2) the same error occured during the ...

Just (14-7-2022) updated efa (eFa.noarch 1:4.0.4-39.eFa.el7) , including the MariaDb mariadb104 upgrade on CentOs7

Found 3 issues.

1. Ignored this Error
Installing : 1:eFa-4.0.4-39.eFa.el7.noarch 23/61
Preparing to update eFa...
checkmodule: loading policy configuration from /var/eFa/lib ...

Dear pingu,

There're a lot of posts about Unbound in the efa forum and how to configure Unbound as recursive DNS on your EFA appliance.

Google "site:forum.efa-project.org unbound" to get load of posts about that.

or just start here : https://forum.efa-project.org/viewtopic.php?f=5&t=934

you did already try
as mentioned in viewtopic.php?t=4788

After an update this morning to MailScanner-5.4.2-3

I noticed 2 errors in /var/log/php-fpm/www-error.log

1.
[01-Dec-2021 12:10:21 Europe/Amsterdam] PHP Notice: Undefined variable: dir in /var/www/html/mailscanner/msmail.inc.php on line 33

After a reboot this one is gone. ( due the restart of ...

If it aint broke it needs more... :lol:

Great you've got it working, assuming you also had a look at viewtopic.php?t=2545 :clap:

on the intelligence services reading mail.

2 options.

1. encrypt messages with PGP and use pigeons to send the passphrase :ugeek:
-----BEGIN PGP MESSAGE ...

without any seeming option to use a wildcard or CIDR notation.

There are quite some options, you just need to search this forum.

On Country and IP cidr blocks.
viewtopic.php?t=2659

haha, lost passwords..

can you check openssl version -d openssl version -d
OPENSSLDIR: "/etc/pki/tls"

The wanted CA

ls -l /etc/pki/tls/certs
total 32
lrwxrwxrwx 1 root root 49 Sep 24 15:58 ca-bundle.crt -> /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
lrwxrwxrwx 1 root root 55 Sep 24 15 ...

Frank,

The error is on your (client)side

watch the "verify error:num=20:unable to get local issuer certificate" in your example

Question : When you go and visit any https site with your browser, did you ever needed to download and store anything first?
I dont and I also use fetchmail with pop3s ...