Search found 28 matches

by Daniel Beardsmore
31 Oct 2019 16:10
Forum: Discussion
Topic: Conditionally disable SpamAssassin rule
Replies: 0
Views: 495

Conditionally disable SpamAssassin rule

I have wished for a long time that I could use one rule in SpamAssassin to control another, specifically, to mitigate a built-in rule under specific circumstances. The SpamAssassin rule syntax is overly limited and seems to prevent you from doing this, but I wondered if anyone had ever found a worka...
by Daniel Beardsmore
20 Aug 2019 09:30
Forum: 4.x Bugs
Topic: eFa-Init does not fail gracefully
Replies: 4
Views: 3468

Re: eFa-Init does not fail gracefully

I’m not so sure — it all seems to have installed correctly without errors. Repo broken or not, the init script should still give instructions on how to re-run it, and it should still re-read previous values on a subsequent invocation.
by Daniel Beardsmore
20 Aug 2019 09:28
Forum: 4.x Bugs
Topic: Please answer yes or no. (install error)
Replies: 3
Views: 3217

Re: Please answer yes or no. (install error)

I don’t think that it is the repo. The line that fails is this: read -p "Do you wish to reboot the system now?" yn Notice how this message does not even appear at all. At a guess, when bash is fed its script on standard input via cURL, the read command cannot collect any input and thus fails to func...
by Daniel Beardsmore
19 Aug 2019 18:40
Forum: 4.x Bugs
Topic: eFa-Init does not fail gracefully
Replies: 4
Views: 3468

Re: eFa-Init does not fail gracefully

Incidentally it appears that the configuration is stored in /etc/eFa, so this means that eFa-Init could re-read these values as defaults next time, even going so far as to skip the wizard entirely and just proceed to the final checklist mode.
by Daniel Beardsmore
19 Aug 2019 16:40
Forum: 4.x Bugs
Topic: eFa-Init does not fail gracefully
Replies: 4
Views: 3468

eFa-Init does not fail gracefully

Clean installation onto CentOS 7 Minimal with: curl -sSL https://install.efa-project.org | bash Something is wrong with sqlgrey. (I don’t even want it — I may have to find some way to throw it away as it doesn’t work and it doesn’t know why.) I am going to ignore all those errors and warnings as the...
by Daniel Beardsmore
19 Aug 2019 15:52
Forum: 4.x Bugs
Topic: Please answer yes or no. (install error)
Replies: 3
Views: 3217

Please answer yes or no. (install error)

Couple of oddities with this command on a fresh CentOS 7 Minimal install: curl -sSL https://install.efa-project.org | bash 1) the installation fails unceremoniously with: ERROR: eFa4 failed to install From /var/log/eFa/build.log it became apparent that gpgcheck must be set to 0 in /etc/yum.conf due ...
by Daniel Beardsmore
06 Jul 2017 12:02
Forum: Discussion
Topic: EFA Monitor Alert
Replies: 4
Views: 1795

Re: EFA Monitor Alert

At the moment it's more like the Cyberman volume knob :)

Pain!
by Daniel Beardsmore
13 Apr 2017 18:10
Forum: 3.x Bugs
Topic: Errors during yum don't halt update
Replies: 3
Views: 1372

Re: Errors during yum don't halt update

Ah, I see … I had a feeling that EFA update was manipulating yum — kernel updates were blocked in /etc/yum.conf (which I can see was modified earlier this evening), which is why yum was furtively ignoring all attempts to get it to update the kernel. Once the first yum update fell over, EFA update ig...
by Daniel Beardsmore
13 Apr 2017 17:52
Forum: 3.x Bugs
Topic: Errors during yum don't halt update
Replies: 3
Views: 1372

Errors during yum don't halt update

If yum fails due to lack of RAM ("Cannot allocate memory"), then the EFA updater ignores this and proceeds regardless. The rest of the update completed (although ^Z to suspend it to check the RAM just froze the entire update process, so I rebooted and tried again) but the kernel update was skipped a...
by Daniel Beardsmore
29 Mar 2017 18:22
Forum: Discussion
Topic: 3.0.1.9 - upgrade
Replies: 4
Views: 1389

Re: 3.0.1.9 - upgrade

Just in case this means anything to anyone: Updating database schema: … - Adding missing index `subject_idx` on table `maillog`.............. WARNING … *** ERROR/WARNING SUMMARY *** Table Index: MySQL version unsupported for index `subject_idx` on table `maillog`, upgrade to version >= 50604 (you ha...
by Daniel Beardsmore
08 Aug 2016 09:09
Forum: Discussion
Topic: Infected messages getting delivered
Replies: 1
Views: 1159

Infected messages getting delivered

I've noticed a strange problem: messages being successfully delivered despite ClamAV finding a virus. When viewing the message in MailWatch, the Virus field is marked "Y", but the message status is clean and the message is delivered regardless. The virus scanning settings are a little confusing, and...
by Daniel Beardsmore
02 Aug 2016 17:43
Forum: Discussion
Topic: EFA Monitor Alert
Replies: 4
Views: 1795

EFA Monitor Alert

I notice that, when upgrading EFA, you're advised to stop the mail service during this process. Now, 3.0.0.9 introduced service monitoring. If any services are down, an e-mail message "EFA Monitor Alert" gets generated and the service is started. Unfortunately this message isn't documented and it's ...
by Daniel Beardsmore
28 Jul 2016 19:21
Forum: Discussion
Topic: Default SPF configuration?
Replies: 18
Views: 4586

Re: Default SPF configuration?

Interesting. org-name had changed at some stage, but X-foo-MailScanner-EFA had not, so the server wasn't consistent with itself. I decided to simply alter the Perl module to log directly: Mail::SpamAssassin::Logger::add_facilities('spf'); Mail::SpamAssassin::Logger::add(method => 'file', filename =>...
by Daniel Beardsmore
28 Jul 2016 16:41
Forum: Discussion
Topic: Default SPF configuration?
Replies: 18
Views: 4586

Re: Default SPF configuration?

When you view a message in MailWatch, you get a readout of rules triggered. The SPF rules simply don't appear, as though SPF checking simply isn't running. So far as I know, it's not DNS, as I get a correct response from running spamassassin -D manually, having added the custom Return-Path header th...
by Daniel Beardsmore
28 Jul 2016 12:36
Forum: Discussion
Topic: Default SPF configuration?
Replies: 18
Views: 4586

Re: Default SPF configuration?

My mistake was in providing any details besides a simple question, as it allows people to answer any question other than than one I wanted answering. It's obvious that something is different, but since EFA itself configured the server, I had no part in configuring SPF checking or pretty much any oth...
by Daniel Beardsmore
28 Jul 2016 11:25
Forum: Discussion
Topic: Default SPF configuration?
Replies: 18
Views: 4586

Re: Default SPF configuration?

I'm referring solely to EFA configuration. If you don't actually EFA's internal configuration, I would suggest that you leave someone who does know to provide the correct answer.

Besides, the SPF records to be checked belong to whatever domain the envelope sender purports to belong to.
by Daniel Beardsmore
28 Jul 2016 11:05
Forum: Discussion
Topic: Default SPF configuration?
Replies: 18
Views: 4586

Re: Default SPF configuration?

They want to be on our DNS servers anyway, so that was worth changing!
by Daniel Beardsmore
28 Jul 2016 10:50
Forum: Discussion
Topic: Default SPF configuration?
Replies: 18
Views: 4586

Re: Default SPF configuration?

That was never my question. I want to know what makes the SPF checking work, and then verify that SPF checking is configured correctly. If I am satisfied that SPF checking is correctly configured, then clearly the problem lies elsewhere.
by Daniel Beardsmore
28 Jul 2016 10:17
Forum: Discussion
Topic: Default SPF configuration?
Replies: 18
Views: 4586

Re: Default SPF configuration?

I've set that one server to use our own DNS servers, and that's not had any effect.

pdwalker: unfortunately, I believe that you were actually being serious …
by Daniel Beardsmore
28 Jul 2016 09:33
Forum: Discussion
Topic: Default SPF configuration?
Replies: 18
Views: 4586

Re: Default SPF configuration?

It's Google DNS with recursion disabled. Actually, it should be updated to use our own DNS servers now.
by Daniel Beardsmore
28 Jul 2016 09:15
Forum: Discussion
Topic: Default SPF configuration?
Replies: 18
Views: 4586

Re: Default SPF configuration?

What makes you believe that Google DNS doesn't support SPF lookups? I've never seen any evidence of that.
by Daniel Beardsmore
26 Jul 2016 17:33
Forum: Feature Requests
Topic: Allow back-out of all menus
Replies: 1
Views: 1549

Allow back-out of all menus

Hello One frustration with EFA is the ability to back yourself into a corner with the menu system, where you are absolutely required to change settings. When perusing the settings to find where some setting might be, you will always hit these brick walls. Right now, I'm looking at an SSH session tha...
by Daniel Beardsmore
26 Jul 2016 17:22
Forum: Discussion
Topic: Default SPF configuration?
Replies: 18
Views: 4586

Default SPF configuration?

Hello [TL;DR] What I'd like to know is, what is the default configuration that makes SPF actually work in EFA (by whatever means it does so)? I'm trying to diagnose the behaviour of a feature that appears not to be configured, and lies about its functionality when tested directly. [/TL;DR] Back stor...
by Daniel Beardsmore
13 Jun 2016 07:57
Forum: Discussion
Topic: ImageCerberusPLG5 high score, no?
Replies: 22
Views: 6510

Re: ImageCerberusPLG5 high score, no?

So far as I can tell, the only information that you can gather from the SpamAssassin Rule Hits report is what percentage of messages are being affected by a rule. If this percentage is low, and the rule caused a false positive, it's safe to disable the rule, as it was doing very little anyway. Let's...
by Daniel Beardsmore
09 Jun 2016 16:49
Forum: Discussion
Topic: ImageCerberusPLG5 high score, no?
Replies: 22
Views: 6510

Re: ImageCerberusPLG5 high score, no?

There is a report that'll show you the spam assassin rule hits and the spam/non spam scoring. That report doesn't bring up the individual messages associated with each rule. You can't determine from the report whether a rule is scoring too lowly (i.e. there are too many false negatives) or whether ...