Search found 441 matches

by ovizii
05 Mar 2019 12:16
Forum: 3.x How-to
Topic: Custom bad sites Phishtank.com
Replies: 12
Views: 534

Re: Custom bad sites Phishtank.com

@alleyviper: you should add this to the github issue tracker as a feature suggestion for EFA v4 though => https://github.com/E-F-A/v4/issues
by ovizii
05 Mar 2019 12:14
Forum: 3.x How-to
Topic: Custom bad sites Phishtank.com
Replies: 12
Views: 534

Re: Custom bad sites Phishtank.com

I do think adding phishtank is unnecessary as after reading this old thread it seems it is or was already incorporated: https://forum.efa-project.org/viewtopic.php?f=14&t=1736 /etc/MailScanner/phishing.bad.sites.conf USED to include this line: # This file is updated once per day from http://www.phis...
by ovizii
05 Mar 2019 12:09
Forum: 3.x How-to
Topic: Interesting email based blacklist
Replies: 11
Views: 1169

Re: Interesting email based blacklist

Hi there, Where to put pm file included? I don't think its necessary to do anything. as of Sa 3.4.2 if you have /etc/mail/spamassassin/hashbl.cf look inside, mine says: loadplugin Mail::SpamAssassin::Plugin::HashBL HashBL.pm ifplugin Mail::SpamAssassin::Plugin::HashBL header HASHBL_EMAIL eval:check...
by ovizii
05 Mar 2019 11:54
Forum: 3.x How-to
Topic: How to use phishing.safe.sites.custom ?
Replies: 4
Views: 447

Re: How to use phishing.safe.sites.custom ?

Sounds good. here is a link to a more current documentation: https://spamassassin.apache.org/full/3. ... _Conf.html

I'm going ahead and will use:

unblacklist_from *@onedrive.live.com
unblacklist_from *@play.google.com
by ovizii
19 Feb 2019 11:12
Forum: 3.x Feature Requests
Topic: Supported Antivirus Consideration & Question
Replies: 6
Views: 1034

Re: Supported Antivirus Consideration & Question

Not trying to hijack your thread just some input: we are also using the free sophos version and have bought additional AV definitions for clamav: securiteinfo - roughly 30€ / year for their professional subscription and malwarepatrol - roughly 40€ / year This and using clamav-unofficial-sigs with th...
by ovizii
29 Nov 2018 20:41
Forum: 3.x How-to
Topic: How to use phishing.safe.sites.custom ?
Replies: 4
Views: 447

Re: How to use phishing.safe.sites.custom ?

Thanks for the workaround. I'll do that until someone finds a better way.
by ovizii
22 Nov 2018 13:05
Forum: 3.x How-to
Topic: How to use phishing.safe.sites.custom ?
Replies: 4
Views: 447

How to use phishing.safe.sites.custom ?

I had read (somewhere) that I can add safe sites in here to mitigate the problem that the global "bad" list lists onedrive.live.com and play.google.com by listing them inside phishing.safe.sites.custom - and yet even after restarting Mailscanner, these lists still get marked as phishing fraud. Did a...
by ovizii
27 Sep 2018 08:22
Forum: Discussion
Topic: web interface unreachable 2-3 times a day
Replies: 7
Views: 650

Re: web interface unreachable 2-3 times a day

Thanks for the pointers. I will do all of that and reply if / when it happens again.
by ovizii
26 Sep 2018 08:36
Forum: Discussion
Topic: web interface unreachable 2-3 times a day
Replies: 7
Views: 650

Re: web interface unreachable 2-3 times a day

nope. the system resources for EFA are actually over-sized. To give you an idea, this EFA instance has about an average of 150 emails per working day and 20 per Sat/Sun. Its a VM with 8GB RAM and 2CPUs. The problem has recently started and hasn't happened again since I posted here. I was rather curi...
by ovizii
24 Sep 2018 07:47
Forum: Discussion
Topic: web interface unreachable 2-3 times a day
Replies: 7
Views: 650

web interface unreachable 2-3 times a day

EFA keeps working but the web interface keep telling me cannot connect or unreachable. Solved by doing a /etc/init.d/httpd restart the /var/log/httpd/error.log file says: [notice] child pid 53446 exit signal Segmentation fault Any ideas? I already did a yum update.This happened twice in the last 24h
by ovizii
09 Aug 2018 11:27
Forum: Discussion
Topic: Another all-in-one mailserver
Replies: 1
Views: 480

Another all-in-one mailserver

@shawniverson: I saw you post in the announcement category about an all-in-one mailserver: viewtopic.php?f=8&t=3142

and wanted to add an alternative: https://github.com/atech/postal
by ovizii
24 Jul 2018 08:16
Forum: 3.x Feature Requests
Topic: Integrate DMARC monitoring into EFA?
Replies: 1
Views: 687

Integrate DMARC monitoring into EFA?

I know about 2 services, the first one is free for personal use: https://dmarcian.com/ and hte second app free for anyone but only reports basic stats: https://dmarc.postmarkapp.com/ so my idea was, could it be possible to implement this somehow, maybe at a much later stage into EFA? i.e. I set a re...
by ovizii
11 Jun 2018 12:50
Forum: Discussion
Topic: Some ideas for new features for V4
Replies: 11
Views: 1437

Re: Some ideas for new features for V4

Before you decide to use encrypted email, I would read this first: https://thehackernews.com/2018/05/pgp-smime-email-encryption.html Link to: Breaking S/MIME and OpenPGP Email Encryption.pdf https://efail.de/efail-attack-paper.pdf SeppMAIL : https://www.seppmail.com/secure-email/email-encryption/ I...
by ovizii
11 Jun 2018 12:47
Forum: Discussion
Topic: Some ideas for new features for V4
Replies: 11
Views: 1437

Re: Some ideas for new features for V4

pdwalker wrote:
11 Jun 2018 10:37
Link?
https://www.deeztek.com/products/hermes ... l-gateway/

it was my first link, sorry for not being too specific.
by ovizii
07 Jun 2018 09:08
Forum: Discussion
Topic: Some ideas for new features for V4
Replies: 11
Views: 1437

Re: Some ideas for new features for V4

Thanks for all the input. I only posted this when I found that deeztech appliance which does everything EFa does and incorporates email archiving and the encryption gateway so I thought people around here might take a look if there#s anything that could be beneficial to EFA :-)
by ovizii
06 Jun 2018 10:14
Forum: Discussion
Topic: Some ideas for new features for V4
Replies: 11
Views: 1437

Re: Some ideas for new features for V4

I am aware that EFA has a certain specialization and I usually prefer a single tool for a single job but sometimes its easier to use a all-in-one solution when i.e. both tools would normally handle DKIM or certificates I am looking for something like this constellation: internet <=> email encryption...
by ovizii
05 Jun 2018 11:50
Forum: Discussion
Topic: Some ideas for new features for V4
Replies: 11
Views: 1437

Some ideas for new features for V4

While searching for a free / open-source email encryption gateway I found this product: https://www.deeztek.com/products/hermes-secure-email-gateway/ which seems to combine the functionality of EFA + email archiving + encryption gateway so I thought maybe the developer of EFA could have a look for p...
by ovizii
01 Jun 2018 07:33
Forum: 3.x How-to
Topic: Install Sophos Antivirus
Replies: 26
Views: 11124

Re: Install Sophos Antivirus

I think something along the lines of (for Debian) dpkg-reconfigure locales and chose the additional locales - there is also locale-gen or locales-gen on Debian - not sure how that works on Centos.
by ovizii
30 May 2018 06:51
Forum: 3.x How-to
Topic: Install Sophos Antivirus
Replies: 26
Views: 11124

Re: Install Sophos Antivirus

I've never received any attachments with a completely foreign locale, could this be made to work if you install the correct locales on the EFA system?
by ovizii
25 Apr 2018 10:02
Forum: 3.x Feature Requests
Topic: Mailscanner plugin for checking download URLs
Replies: 3
Views: 1382

Re: Mailscanner plugin for checking download URLs

nicola.piazzi wrote:
24 Nov 2017 15:18
Hi,
This is done automaticaly by antivirus that scans each message
EFA includes CLAM but if you want is very easy to add SOPHOS so you can have 2 engines
Are you sure the AV covers this? I thought AV only checks attachments and not links.
by ovizii
19 Jan 2018 09:10
Forum: Discussion
Topic: Question regarding the Meltdown and Spectre announcement
Replies: 4
Views: 952

Re: Question regarding the Meltdown and Spectre announcement

ah, I understand, thanks for taking the time to explain.
by ovizii
18 Jan 2018 11:14
Forum: Discussion
Topic: Question regarding the Meltdown and Spectre announcement
Replies: 4
Views: 952

Re: Question regarding the Meltdown and Spectre announcement

ah, ok, thanks.

May I ask why kernel updates were blocked to start with?
by ovizii
18 Jan 2018 09:06
Forum: Discussion
Topic: Question regarding the Meltdown and Spectre announcement
Replies: 4
Views: 952

Question regarding the Meltdown and Spectre announcement

Hi there, I am referring to this thread: viewtopic.php?f=8&t=2896

Would someone more knowledgeable than me please explain what exactly that line does?
by ovizii
05 Dec 2017 13:35
Forum: Discussion
Topic: SASL LOGIN authentication failed
Replies: 20
Views: 5542

Re: SASL LOGIN authentication failed

!!!ATTENTION!!! Whoever copied my sample config from https://pastebin.com/jn8K6Ztw please go edit your config and replace my email address with yours. I keep receiving emails for someone else's fail2ban installation :-) I'm not naming the sender here as to not embarrass anyone and I have edited the...
by ovizii
27 Nov 2017 10:16
Forum: Discussion
Topic: Spam getting through with spamassasin score of 0.00
Replies: 6
Views: 1610

Re: Spam getting through with spamassasin score of 0.00

Well, lets look at these issues one by one: a) Outlook / Exchange settings prohibit download of images until allowed by user. Nothing to be done on EFA's side. b) Images external/internal/etc. I see someone said: When you save one of these as an eml and then open it up in notepad, you get the header...