efa-project.org

Thank you for your answer. Meanwhile I got another mail from VIP. "5 mails have been blocked yesterday" Me: "yes sir, they contained macros, i explained that to you earlier" "but they were important" Aaaaarrrggghhhh Why do all antimalware programmer forget this damn &qu...

Hi All, I have a serious problem with one user. Can you help me either on technical aspect or how to argue in those cases? We block Office documents with macros. There is this OLE2macro Option for Clam. In Addition we don't quarantine on Virus Alarms. We found, this is a good Setting These days for ...

ok, thanks!

It seems, that it is already on the list at github.

Hi All, my EFA seems to accept mail for users, that are not existing on the destination server. I have "spam not delivered" report activated. I then get an NDR to postmaster@myefa for that report email. That's kind of shot in my knee :D I bet postfix is the point to look at for this as it ...

ah, ok. thx! that means, the token is (in every case) generated on the system, that handles the mail. That means in a distributed Setup, I must not stop the mysql service on the "slave" Systems. Which I haven't since, but good to know. Is there any documention about the Tokens? Where in th...

yes, that makes sense :D can I override anything that's elsewhere in the SA chain in local.cf? e.g. adding just score PHP_ORIG_SCRIPT 0.500 1.000 0.500 1.000 in local.cf will override the statement no matter in which other file it is used? I'd like to override the Image Cerberus myself, because it i...

Hi,
watch -n 1 mailq

Hi, you can edit the score in /var/lib/spamassassin/3.004001/updates_spamassassin_org/72_scores.cf I am running EFA 3.0.0.9 and my scores are score PHP_ORIG_SCRIPT 0.500 2.245 0.500 2.245 I assume, that you have a different ruleset base because it is 2.25 in your posting. This might be because of up...

Hello, sure is it nice to let the computer search your mail. Thanks for that trick. I really didn't realize myself, that there is a search form :-) But you can also change the amount of displayed mails very easy. Edit /var/www/html/mailwatch/conf.php you'll find this section in the file // Default n...

Hello, when you see your existing Domains you should see a number before each entry. Simply enter the corresponding number and you get this choice: Do you want to [r] replace, [d] delete this entry, or [c] cancel? : I suggest replace. You can also edit /etc/postfix/transport and run postmap /etc/pos...

Hi All, can anybody tell me what the "Tokens" in the EFA db stands for? How are they generated and where are refenreces to that value? Why do I ask: I have a distributed Setup with 2 EFA boxes. I set them up with help from the mailwatch community and as far as I understood, the second box ...

Hi Shawn,

the Viewer seems to be not working for me.
Here is a screenshot of what I see by clicking on "view"

Can you help?

Thx

akl

Hi,

what is that "make a filesystem executable" all about?
I never did that before for anything?

Thx
akl

ok, maybe my "call for help" was a Little quick, but maybe somebody is interested too. I found out, that the quarantine report is most likely created by the script /usr/local/bin/mailwatch/Tools/Cron_jobs/quarantine_report.php What I don't understand is, that this script is executed by /et...

Hi All,

can someone tell me where to find the template for the weekly quarantine Report?
I want to customize that.

Does anyone know wether it is possible to create the Report on a daily Basis?

Thanks in advance
akl

Thank you for your answer. While diving through several posts in this forum i stumbled about a discussion you had on how to handle user customization during updates. It will be no problem for me to track my own custumizations on configfiles and so on...but...how can I find out which files you overri...

Hi Shawn, I understood, that a migration is not successful because the passwords in the backup EFA-Config dont match the passwords on the target machine. Every installation has its own randomly created passwords. Is that correct? Since data in EFA-Config seems to contain only machine individual para...

Hi All,

I am new to EFA and read across the default clamd.conf

Is there a reason, why scanning PDF and Ole2BlockMacros are disabled?
Maybe this is handled somewhere else in the logic flow...

If not, is it OK to edit it via console in clamd.conf?

Regards
akl