efa-project.org

Is your eFa behind another smarthost or accepting email directly from the Internet?

Bayes doesn't kick in until at least 200 messages have been learned as spam or ham.


Sorry for the late reply, its not behind anything, it has a public IP. Accepts directly from Internet.

When I posted the ...

Those mails may be similar but are not the same. Chances are the sender domain is not the same...

The second email hit RCVD_IN_DNSWL_HI, which is the bulk of the negative scoring

You also have some problems....

You have no Bayes scoring happening currently. You might need to retrain your Bayes ...

When going from EFA 4 to EFA 5 I'm getting quite a few messages come through that used to be blocked as spam (they are unsolicited spam). I guess this is completely a function of the spamassasin version and settings, so just looking for suggestions on how to get these to score as spam.

Here's the ...

Awesome, thanks for the quick reply! So basically install Linux, run the installation and configuration and it's ready to face the web?

I've been running three EFA 4 servers for many years and want to build out EFA 5 and migrate over. In the past, I've deployed the VM with the OS already installed and configured. I'm no Linux guru by any means and don't see documentation on what to do between a fresh install of Linux, running the ...

In my situation I have blocked .doc and .docm files but allow .docx and it's been like this for years. Lately I have a user that is being sent a lot of legitimate .doc attachments and I'm having to chase them down and release them almost daily. I'm looking for a way to either allow .doc attachments ...

What's weird is that the VM with the least amount of use is the only one doing this. This EFA VM had 37 emails through it yesterday and I got 10-12 of these lockup messages and the other two EFA VMs had 1936 and 765 emails through them yesterday with none of these messages ever.

I have a Dell R730 that runs ESXi 6.7 and has only three EFA 4 virtual machines on it. They each handle email for different domains. I keep getting emails with the subject "[abrt] kernel: NMI watchdog: BUG: soft lockup - CPU#0 stuck for 24s! [kswapd0:36]" from just one of the instances, never get ...

Is there a way to get these notification emails for blocked files but not for viruses? I'm getting what I wanted as far as being notified a .doc or .zip has been blocked but I'm getting a bunch of virus warning emails due to porcupine.junk and would like to not get those.

Thanks guys, I got it working!

Is there a way to have an email alert go to admin when there is a file type blocked? We block certain file types like .doc, .zip, using the /etc/mailscanner/filename.rules.conf method and no one has any idea a blocked file has been sent to them until they find out from the external sender that they ...

I've been a long time user of EFA but recently I've been more curious about what submitting the drop down for SA Learn as HAM or SPAM actually does on the back end. I've read that you want to give it a good sample of HAM as well as SPAM to help it learn for your environment but is that all something ...

Great, thanks! I guess its normal not to see a stopping and starting message anymore.

I sometimes modify the blocked attachments list and had these instructions saved for EFA3. I just rebuilt using EFA4 and the sudo service MailScanner restart doesn't work. I modified the filename.rules.conf and then restarted the whole OS and my list works but I'd like to be able to make the changes ...

I fixed it!

It is done there in the /etc/postfix/transport file but the syntax is for the :26 to be outside the brakets.

So instead of:

# START E.F.A ADDED DOMAINS ######
mydomain.net smtp:[mailserver.mydomain.net:26]

It's supposed to be:

# START E.F.A ADDED DOMAINS ######
mydomain.net smtp ...

I also edited the /etc/postfix/transport file to have the IP address instead of fqdn like this:

# START E.F.A ADDED DOMAINS ######
mydomain.net smtp:[xxx.xxx.xxx.xxx:26]

but it still doesn't work. And I'm finding this in the logs:


postfix/smtp[12848]: fatal: valid hostname or network address ...

I didn't do those two commands at first but I just did and tried again and still getting a status of (unknown mail transport error)

here is the entry at the end of the /etc/postfix/transport file, is this correct?

# START E.F.A ADDED DOMAINS ######
mydomain.net smtp:[mailserver.mydomain.net:26 ...

My Exchange server is behind a home account that blocks port 25. I also used to run EFA behind that same router and used a service called GhettoSMTP to send all my incoming mail to port 26 and then I used a Cisco router nat statement to map incoming port 26 to internal port 25 of the EFA server. So ...