efa-project.org

Hello toghter,

it is an old Post but i reopen it because we have the same error with a installed 4.0.4 Efa system.
We had used a efa 3 for some years.

Now we switch to the efa4 and got the problem in the logs.

But the mails will be delivered

milter-discard: END-OF-MESSAGE from.....: milter ...

Hi Shawniverson,

i have modified the script above.. varible "incoming" now is "releasequeue"

sure the release folder can be specified here:

releasequeue=/var/spool/postfix/incoming/ #postfix input folder

to release the mails to hold instead of incoming

releasequeue=/var/spool/postfix/hold ...

Hi,

Is there a way to release blocked emails/content from the cli?
Because in the webinterface we can configure that some checks should be done on released mails like anti virus scan.

My Script can release the files directly to the postfix incoming folder. But in this folder there is no more scan ...

Is there a way to release mails from Quarantine by console script instead of webinterface?

Changing the /etc/Mailscanner/Mailscanner.conf
Quarantine Whole Messages As Queue Files = yes

Here we can copy the queue file directly in postfix queue

I think this could be handled by a script
As an ...

Looks like this is the cause.

I think it should be something like disarmed subfolder or something like that or in the nospam folder.
And it shouldn't be stored twice.

Is there a way to solve this in Future releases?

But then we have no original mail only the disarmed one right?

But why are these files stored in both folders nospam and in the root of the date folder ?

Yes this is activated.

Perl Modules which you have and my installation not:

perl-Authen-SASL-2.13-3.el6.noarch
perl-Convert-ASN1-0.22-1.el6.noarch
perl-Curses-1.28-1.el6.rf.x86_64
perl-GSSAPI-0.26-6.el6.x86_64
perl-IO-Tty-1.08-4.el6.x86_64
perl-LDAP-0.40-1.el6.noarch
perl-POE-1.354-1.el6.noarch
perl-POE-Component-Client ...

compared

Scan Messages = %rules-dir%/scan.messages.rules
Maximum Archive Depth = 2
Virus Scanners = esets clamd
Spam-Virus Header = X-%org-name%-MailScanner-SpamVirus-Report:
Allow Password-Protected Archives = yes
Find Phishing Fraud = no
Also Find Numeric Phishing = no
Use Stricter Phishing Net ...

We are using a System Updatet from 3.0.0.8 to 3.0.0.9.

We have set this up with 3.0.0.8 and Upgraded when the new version was released.

How can we Exchange the file?

I will try to find a not Critical mail.

Sorry thats not possible.
But here are some screenshots.


Content Checks: Detected and have disarmed phishing tags in HTML message in F369D12031B.A2B76

Is it possible that this occurs only for mails which are disarmed?

Because the normal mails aren't in the quarantine.
But in the log i see the content check messaged

Detected and have disarmed phishing tags
Detected and have disarmed web bug

only this one are stored after disabling store non ...

Yes thats it they are stored as folders and in it is a file message
The folder is named like the Quarantine ID

The mails which are clean are stored in

/var/spool/MailScanner/quarantine/DATE/

as folders..

And the Spam marked are stored in

/var/spool/MailScanner/quarantine/DATE/spam

there is another folder
/var/spool/MailScanner/quarantine/DATE/nonspam

after reconfigure with EFA-Configure

9 spam ...

Received on: 22/03/16 10:30:40
Received by:
Received from:
*********** [Add to Whitelist | Add to Blacklist]
Received Via:
IP Address Hostname Country RBL Spam Virus All
******* (GeoIP Lookup Failed) [ ] [ ] [ ] [ ]

ID: ************
Message Headers: X-Greylist: from auto-whitelisted by SQLgrey-1 ...

Hi,

we have the appliance 3.0.0.9 running.

And all works fine.

But we see some clean messages in the Quarantine the mails are delivered and marked as no spam.

Is this a bug in the new Version 3.0.0.9?

The mails with clean mark are in

/var/spool/MailScanner/quarantine/20160322/

And the spam ...

Hi,

is it possible to filter out specific emails with attachments like word and excel files to Quarantain?
And is it possible to rescan this files after a couple of ours (24 h) and if they are clean deliver them to the receipient?

And this should happen automatically not by hand.

Thanks

CABIT