Search found 18 matches

by kidtriton
30 Jul 2024 13:48
Forum: Discussion
Topic: Very different spam scoring with spamassasin 3 vs 4
Replies: 5
Views: 36728

Re: Very different spam scoring with spamassasin 3 vs 4


Is your eFa behind another smarthost or accepting email directly from the Internet?

Bayes doesn't kick in until at least 200 messages have been learned as spam or ham.


Sorry for the late reply, its not behind anything, it has a public IP. Accepts directly from Internet.

When I posted the ...
by kidtriton
24 Jul 2024 13:59
Forum: Discussion
Topic: Very different spam scoring with spamassasin 3 vs 4
Replies: 5
Views: 36728

Re: Very different spam scoring with spamassasin 3 vs 4


Those mails may be similar but are not the same. Chances are the sender domain is not the same...

The second email hit RCVD_IN_DNSWL_HI, which is the bulk of the negative scoring

You also have some problems....

You have no Bayes scoring happening currently. You might need to retrain your Bayes ...
by kidtriton
22 Jul 2024 13:38
Forum: Discussion
Topic: Very different spam scoring with spamassasin 3 vs 4
Replies: 5
Views: 36728

Very different spam scoring with spamassasin 3 vs 4

When going from EFA 4 to EFA 5 I'm getting quite a few messages come through that used to be blocked as spam (they are unsolicited spam). I guess this is completely a function of the spamassasin version and settings, so just looking for suggestions on how to get these to score as spam.

Here's the ...
by kidtriton
26 Jun 2024 19:24
Forum: Discussion
Topic: How to configure/lock down linux for EFA 5?
Replies: 3
Views: 6955

Re: How to configure/lock down linux for EFA 5?

Awesome, thanks for the quick reply! So basically install Linux, run the installation and configuration and it's ready to face the web?
by kidtriton
26 Jun 2024 19:11
Forum: Discussion
Topic: How to configure/lock down linux for EFA 5?
Replies: 3
Views: 6955

How to configure/lock down linux for EFA 5?

I've been running three EFA 4 servers for many years and want to build out EFA 5 and migrate over. In the past, I've deployed the VM with the OS already installed and configured. I'm no Linux guru by any means and don't see documentation on what to do between a fresh install of Linux, running the ...
by kidtriton
01 Feb 2021 18:27
Forum: How-to
Topic: Allowing a blocked file type to just one user
Replies: 1
Views: 1735

Allowing a blocked file type to just one user

In my situation I have blocked .doc and .docm files but allow .docx and it's been like this for years. Lately I have a user that is being sent a lot of legitimate .doc attachments and I'm having to chase them down and release them almost daily. I'm looking for a way to either allow .doc attachments ...
by kidtriton
18 Jun 2020 12:54
Forum: Discussion
Topic: Lots of BUG: soft lockup emails
Replies: 6
Views: 7742

Re: Lots of BUG: soft lockup emails

What's weird is that the VM with the least amount of use is the only one doing this. This EFA VM had 37 emails through it yesterday and I got 10-12 of these lockup messages and the other two EFA VMs had 1936 and 765 emails through them yesterday with none of these messages ever.
by kidtriton
17 Jun 2020 17:16
Forum: Discussion
Topic: Lots of BUG: soft lockup emails
Replies: 6
Views: 7742

Lots of BUG: soft lockup emails

I have a Dell R730 that runs ESXi 6.7 and has only three EFA 4 virtual machines on it. They each handle email for different domains. I keep getting emails with the subject "[abrt] kernel: NMI watchdog: BUG: soft lockup - CPU#0 stuck for 24s! [kswapd0:36]" from just one of the instances, never get ...
by kidtriton
29 Apr 2020 14:06
Forum: How-to
Topic: Send notification to admin that an incoming attachememt was blocked
Replies: 5
Views: 5005

Re: Send notification to admin that an incoming attachememt was blocked

Is there a way to get these notification emails for blocked files but not for viruses? I'm getting what I wanted as far as being notified a .doc or .zip has been blocked but I'm getting a bunch of virus warning emails due to porcupine.junk and would like to not get those.
by kidtriton
23 Apr 2020 15:59
Forum: How-to
Topic: Send notification to admin that an incoming attachememt was blocked
Replies: 5
Views: 5005

Send notification to admin that an incoming attachememt was blocked

Is there a way to have an email alert go to admin when there is a file type blocked? We block certain file types like .doc, .zip, using the /etc/mailscanner/filename.rules.conf method and no one has any idea a blocked file has been sent to them until they find out from the external sender that they ...
by kidtriton
04 Mar 2020 19:39
Forum: Discussion
Topic: How does SA Learn actually work?
Replies: 1
Views: 2295

How does SA Learn actually work?

I've been a long time user of EFA but recently I've been more curious about what submitting the drop down for SA Learn as HAM or SPAM actually does on the back end. I've read that you want to give it a good sample of HAM as well as SPAM to help it learn for your environment but is that all something ...
by kidtriton
03 Mar 2020 19:14
Forum: How-to
Topic: How to restart MailScanner service in EFA4?
Replies: 2
Views: 4383

Re: How to restart MailScanner service in EFA4?

Great, thanks! I guess its normal not to see a stopping and starting message anymore.
by kidtriton
03 Mar 2020 15:27
Forum: How-to
Topic: How to restart MailScanner service in EFA4?
Replies: 2
Views: 4383

How to restart MailScanner service in EFA4?

I sometimes modify the blocked attachments list and had these instructions saved for EFA3. I just rebuilt using EFA4 and the sudo service MailScanner restart doesn't work. I modified the filename.rules.conf and then restarted the whole OS and my list works but I'd like to be able to make the changes ...
by kidtriton
24 Mar 2016 19:36
Forum: How-to
Topic: How to change the SMTP delivery port from 25 to 26
Replies: 4
Views: 6381

Re: How to change the SMTP delivery port from 25 to 26

I fixed it!

It is done there in the /etc/postfix/transport file but the syntax is for the :26 to be outside the brakets.

So instead of:

# START E.F.A ADDED DOMAINS ######
mydomain.net smtp:[mailserver.mydomain.net:26]

It's supposed to be:

# START E.F.A ADDED DOMAINS ######
mydomain.net smtp ...
by kidtriton
24 Mar 2016 19:11
Forum: How-to
Topic: How to change the SMTP delivery port from 25 to 26
Replies: 4
Views: 6381

Re: How to change the SMTP delivery port from 25 to 26

I also edited the /etc/postfix/transport file to have the IP address instead of fqdn like this:

# START E.F.A ADDED DOMAINS ######
mydomain.net smtp:[xxx.xxx.xxx.xxx:26]

but it still doesn't work. And I'm finding this in the logs:


postfix/smtp[12848]: fatal: valid hostname or network address ...
by kidtriton
24 Mar 2016 17:56
Forum: How-to
Topic: How to change the SMTP delivery port from 25 to 26
Replies: 4
Views: 6381

Re: How to change the SMTP delivery port from 25 to 26

I didn't do those two commands at first but I just did and tried again and still getting a status of (unknown mail transport error)

here is the entry at the end of the /etc/postfix/transport file, is this correct?

# START E.F.A ADDED DOMAINS ######
mydomain.net smtp:[mailserver.mydomain.net:26 ...
by kidtriton
24 Mar 2016 16:31
Forum: How-to
Topic: How to change the SMTP delivery port from 25 to 26
Replies: 4
Views: 6381

How to change the SMTP delivery port from 25 to 26

My Exchange server is behind a home account that blocks port 25. I also used to run EFA behind that same router and used a service called GhettoSMTP to send all my incoming mail to port 26 and then I used a Cisco router nat statement to map incoming port 26 to internal port 25 of the EFA server. So ...