Search found 463 matches

by ovizii
06 Feb 2020 13:10
Forum: Discussion
Topic: EFA v3 vs v4 - what are the differences?
Replies: 4
Views: 1407

Re: EFA v3 vs v4 - what are the differences?

Thanks for the detailed answer, that's about all I wanted to know :-)

P.S. Thanks for making such a great tool!
by ovizii
06 Feb 2020 11:17
Forum: Discussion
Topic: EFA v3 vs v4 - what are the differences?
Replies: 4
Views: 1407

EFA v3 vs v4 - what are the differences?

I haven't found a comparison so far hence my question.
I'm just curious what changed i.e. do both use the same components (i.e. postfix, spamassassin, mailwatch etc.?)
What else is different?
by ovizii
29 Jan 2020 11:41
Forum: Discussion
Topic: SASL LOGIN authentication failed
Replies: 24
Views: 11206

Re: SASL LOGIN authentication failed

shawniverson wrote:
29 Jan 2020 11:37
I can send my alerts to you? :roll: :dance: :lol:
Please don't do that. :roll:
I learned a very valuable lesson to double check my posted snippets before publicly submitting them.
by ovizii
29 Jan 2020 08:41
Forum: Discussion
Topic: SASL LOGIN authentication failed
Replies: 24
Views: 11206

Re: SASL LOGIN authentication failed

pdwalker wrote:
06 Dec 2017 07:19
:D

Good luck!
no luck. still getting those pesky emails :roll:
by ovizii
05 Nov 2019 09:13
Forum: How-to
Topic: Problems releasing an infected email from quarantine
Replies: 7
Views: 11326

Re: Problems releasing an infected email from quarantine

I would be very interested, just yesterday I noticed one of my clients had about 40 incoming emails blocked as VIRUS because malwarepatrol as far as I remember blocked emails from alibaba because they contain links to alibaba CDN. Now imagine having to search for 40 mails manually, copy/paste their ...
by ovizii
31 Oct 2019 13:03
Forum: How-to
Topic: Problems releasing an infected email from quarantine
Replies: 7
Views: 11326

Re: Problems releasing an infected email from quarantine

manually releasing isn't a problem. I installed alpine on EFA that way I can send them out via Email straight away, very easy, I was wondering why the "rele4ase" button in Mailscanner wasn't working for me :-)
by ovizii
28 Oct 2019 13:42
Forum: How-to
Topic: Problems releasing an infected email from quarantine
Replies: 7
Views: 11326

Re: Problems releasing an infected email from quarantine

pdwalker wrote:
28 Oct 2019 11:49
This is what I do when that happens:
  • resubmit the message
    /usr/sbin/sendmail.postfix -t < /var/spool/MailScanner/quarantine/<YYMMDD>/<MESSAGEID>/message
Thanks. I will try this tip to see if I can resubmit the email the next time this happens.
by ovizii
10 Sep 2019 21:12
Forum: How-to
Topic: Problems releasing an infected email from quarantine
Replies: 7
Views: 11326

Problems releasing an infected email from quarantine

Hi there, I have read a couple of similar posts around here but I think my problem is different. Recently apparently malwarepatrol seems to have started marking email containing docs.gogle.com as viruses: sigtool --find-sigs MBL_34101911 [malwarepatrol.ndb] MBL_34101911:0:*:68747470733a2f2f646f63732...
by ovizii
04 Sep 2019 11:42
Forum: 3.x Bugs
Topic: Mailwatch interface somehow stopped showing details about email?
Replies: 4
Views: 3953

Re: Mailwatch interface somehow stopped showing details about email?

I am pretty sure this is only a display problem as going back I cannot see that info for older email either.
by ovizii
04 Sep 2019 11:40
Forum: 3.x Bugs
Topic: Mailwatch interface somehow stopped showing details about email?
Replies: 4
Views: 3953

Re: Mailwatch interface somehow stopped showing details about email?

I have retraced my steps. All I did before this problem occured was this: inside /etc/mail/spamassassin I edited my my-adjusted-scores.cf and added this content at the bottom of the file (I had more modified scores inside there) # # these ones scored well, upping their score # # original 0.10 #score...
by ovizii
04 Sep 2019 11:31
Forum: 3.x Bugs
Topic: Mailwatch interface somehow stopped showing details about email?
Replies: 4
Views: 3953

Re: Mailwatch interface somehow stopped showing details about email?

This seems to be only the case for incoming emails where this info is missing...
by ovizii
04 Sep 2019 11:29
Forum: 3.x Bugs
Topic: Mailwatch interface somehow stopped showing details about email?
Replies: 4
Views: 3953

Mailwatch interface somehow stopped showing details about email?

It might have been me modifying some configs but I can't retrace what triggered this:

https://pasteboard.co/IvQaTUK.png

Any ideas? The emails are still being scanned properly and everythign works but I still want to see those details :-(
by ovizii
29 Jun 2019 13:23
Forum: Discussion
Topic: Additional ClamAV signatures?
Replies: 1
Views: 3062

Additional ClamAV signatures?

Just stumbled across these free signatures: https://malware.expert/signatures/ - anyone knows those guys?
Any hitns on the best way to add them in addition to the other sources?
by ovizii
13 Jun 2019 09:45
Forum: How-to
Topic: new Plugin [sadwl]
Replies: 5
Views: 3524

Re: new Plugin [sadwl]

I'm sorry can you quickly explain what exactly this is: "reverse sender host domain"?
Do you take the IP of the sending server and do a reverse DNS lookup?
by ovizii
06 Jun 2019 15:44
Forum: Discussion
Topic: Alternative to Spamassassin
Replies: 2
Views: 3857

Re: Alternative to Spamassassin

Oh wow, looking at what you linked to you are totally right and one should not consider this a viable alternative.
I found the product via a tech newsletter, looks like someone didn't really quality check their newsletter :-)
by ovizii
05 Jun 2019 10:43
Forum: Discussion
Topic: question about user types
Replies: 8
Views: 7770

Re: question about user types

I can try and explain how I understand the situation but I might be wrong. Looking at https://docs.mailwatch.org/using/user-filter.html and https://forum.efa-project.org/viewtopic.php?t=3002 this is what I took away: If you create a user named johndoe@example.com as user type User and I log-in as th...
by ovizii
04 Jun 2019 15:12
Forum: Discussion
Topic: Alternative to Spamassassin
Replies: 2
Views: 3857

Alternative to Spamassassin

I'm not sure what you have decided for EFA v4 but I jsut stumbled upon this project and thought I'd share it here: https://orangeassassin.org/ From their description: OrangeAssassin was created as an upgraded open-source drop-in replacement for SpamAssassin for Linux users and control panel provider...
by ovizii
15 May 2019 04:41
Forum: Discussion
Topic: question about user types
Replies: 8
Views: 7770

Re: question about user types

Thanks for confirming and digging out that old post. I did not have to add a new user in a while but when I tried adding 2 new domains and saw that all my old users were in a different format, I just vaguely remembered there was a reason for that but couldn't find where it was described :-) I'll get...
by ovizii
14 May 2019 07:32
Forum: Discussion
Topic: question about user types
Replies: 8
Views: 7770

Re: question about user types

Yes, thanks henk, that is exactly what I meant but the link you posted is a bit confusing as the screenshot does not exactly fit the text you wrote there. This is what I am confused about: In previous MailWatch versions we could enter any username in a non valid email format, to generate 1 single qu...
by ovizii
13 May 2019 04:45
Forum: Discussion
Topic: question about user types
Replies: 8
Views: 7770

Re: question about user types

Found this manual entry: https://docs.mailwatch.org/using/user-filter.html

is that how it works now? Should I rename my domain admin users?
by ovizii
13 May 2019 04:44
Forum: Discussion
Topic: question about user types
Replies: 8
Views: 7770

question about user types

I previously had only listed one user per domain as domain administrator, it looked like this: https://monosnap.com/file/TMty0szOLSMhTJiuoezZF11tILsmiE you notice the user name is the full domain. Seems that is no longer possible as I now get: "For all users other than Administrator you must use an ...
by ovizii
05 Mar 2019 12:16
Forum: How-to
Topic: Custom bad sites Phishtank.com
Replies: 13
Views: 13125

Re: Custom bad sites Phishtank.com

@alleyviper: you should add this to the github issue tracker as a feature suggestion for EFA v4 though => https://github.com/E-F-A/v4/issues
by ovizii
05 Mar 2019 12:14
Forum: How-to
Topic: Custom bad sites Phishtank.com
Replies: 13
Views: 13125

Re: Custom bad sites Phishtank.com

I do think adding phishtank is unnecessary as after reading this old thread it seems it is or was already incorporated: https://forum.efa-project.org/viewtopic.php?f=14&t=1736 /etc/MailScanner/phishing.bad.sites.conf USED to include this line: # This file is updated once per day from http://www.phis...
by ovizii
05 Mar 2019 12:09
Forum: How-to
Topic: Interesting email based blacklist
Replies: 20
Views: 6364

Re: Interesting email based blacklist

Hi there, Where to put pm file included? I don't think its necessary to do anything. as of Sa 3.4.2 if you have /etc/mail/spamassassin/hashbl.cf look inside, mine says: loadplugin Mail::SpamAssassin::Plugin::HashBL HashBL.pm ifplugin Mail::SpamAssassin::Plugin::HashBL header HASHBL_EMAIL eval:check...