Search found 97 matches

by TheGr8Wonder
16 Aug 2017 17:14
Forum: Discussion
Topic: EFA v4
Replies: 8
Views: 2691

Re: EFA v4

EFA v4 is still in the works, however it is still going to be a bit before ready for public testing and RTM. What components are you deeming as outdated on v3? I understand Pyzor and DCC are outdated, which are about to be fixed, but just curious for other concerns you have with it. If you mean just...
by TheGr8Wonder
12 Aug 2017 14:24
Forum: Discussion
Topic: Pyzor Questions
Replies: 25
Views: 4523

Re: Pyzor Questions

The test command is my bad. It's called via mailscanner directly. the location we modded is that used by postfix and apache, so that is the right one. You will need to reboot the EFA after changing the file, to restart the services, and then check the mail logs. The location does work, however.
by TheGr8Wonder
12 Aug 2017 13:53
Forum: Discussion
Topic: Pyzor Questions
Replies: 25
Views: 4523

Re: Pyzor Questions

The result you are looking for...

Code: Select all

Aug 12 09:52:26.550 [12987] dbg: pyzor: got response: public.pyzor.org:24441 (200, 'OK') 2587478 80480\n (additioanl servers) 
and when the test is done, type this to exit the result

Code: Select all

:q
by TheGr8Wonder
12 Aug 2017 13:51
Forum: Discussion
Topic: Pyzor Questions
Replies: 25
Views: 4523

Re: Pyzor Questions

You are correct, it will not work as root. You will need to start a new SSH session with EFA, enter the shell, then run that command without elevating to root first. :)
by TheGr8Wonder
12 Aug 2017 13:34
Forum: Discussion
Topic: Pyzor Questions
Replies: 25
Views: 4523

Re: Pyzor Questions

You can add another server that is used as well,

Code: Select all

pyzor.nova53.net:24441
You can run this...

Code: Select all

 echo "test" | spamassassin -D pyzor 2>&1 | less
And you should see near the top that you get a "Ok" response from servers listed in that file.
by TheGr8Wonder
11 Aug 2017 13:37
Forum: 3.x Bugs
Topic: Too many connections
Replies: 9
Views: 3211

Re: Too many connections

What ports are being blocked? There are components such as DCC that use a distributed server network to perform checks against spam. It could also be the DNS lookup for blacklist checks. All depends on the ports.
by TheGr8Wonder
11 Aug 2017 01:54
Forum: 3.x How-to
Topic: external emails inbound skipping efa
Replies: 2
Views: 986

Re: external emails inbound skipping efa

Sounds like you still have a firewall NAT rule that points directly to your exchange for inbound mail. If you want to avoid external mail from getting to it directly, you will need to only allow SMTP inbound to hit EFA, and not both EFA and Exchange. spammers can be using the IP directly to exchange...
by TheGr8Wonder
10 Aug 2017 19:23
Forum: Discussion
Topic: mail flow
Replies: 3
Views: 995

Re: mail flow

Sent you another PM
by TheGr8Wonder
10 Aug 2017 19:09
Forum: Discussion
Topic: email not filtering
Replies: 6
Views: 1778

Re: email not filtering

Sent you a PM
by TheGr8Wonder
10 Aug 2017 18:56
Forum: Discussion
Topic: mail flow
Replies: 3
Views: 995

Re: mail flow

Perhaps you need to update your exchange receive connector scope (based on headers from other thread), and include the EFA IP
by TheGr8Wonder
10 Aug 2017 18:55
Forum: Discussion
Topic: email not filtering
Replies: 6
Views: 1778

Re: email not filtering

Do you happen to be using, or used Trustwave as your prior filter?

I take it that the mail.XXXXXX.org is the EFA appliance?

I see the message received from O365 (since that is hotmail's backend) via mail.XXXXX.org, but with a trustwave signature?
by TheGr8Wonder
10 Aug 2017 15:57
Forum: 3.x How-to
Topic: Some Mails don't get delivered to Exchange [SOLVED]
Replies: 15
Views: 3467

Re: Some Mails don't get delivered to Exchange

On the main status page of EFA, there is a mail queue listing. Is there a # listing next to either inbound or outbound? Most likely there will be a # there and if you click that, it will most likely say that the remote connection refused it. If there are, I suggest you check your exchange server con...
by TheGr8Wonder
09 Aug 2017 23:25
Forum: 3.x How-to
Topic: Plenty of mail stuck in Quarantine
Replies: 1
Views: 641

Re: Plenty of mail stuck in Quarantine

Even with exchange licensing issues, such as a trial period extending beyond the 180 days, and receiving a notice in ECP that the trial is over and you need to apply a key, exchange will still function and receive mail. If exchange were down and not receiving during this time, the messages would hav...
by TheGr8Wonder
09 Aug 2017 19:36
Forum: 3.x Bugs
Topic: After Update from EFA-3.0.1.8 to EFA-3.0.2.3 - Date/Time in Mailwatch from all Mails is the same
Replies: 5
Views: 2325

Re: After Update from EFA-3.0.1.8 to EFA-3.0.2.3 - Date/Time in Mailwatch from all Mails is the same

At what time did you perform your upgrade? Is there a device that queues messages going to EFA, when EFA is offline?
by TheGr8Wonder
09 Aug 2017 15:09
Forum: Discussion
Topic: Pyzor Questions
Replies: 25
Views: 4523

Re: Pyzor Questions

It will when checking the message at first, to see if it matches. It will not submit new hashes unless you choose the SA option of "SPAM+Report", and it will upload the hash of the spam message to all pyzor servers listed in your server file.
by TheGr8Wonder
09 Aug 2017 14:31
Forum: Discussion
Topic: Pyzor Questions
Replies: 25
Views: 4523

Re: Pyzor Questions

Sent you a PM
by TheGr8Wonder
09 Aug 2017 12:47
Forum: Discussion
Topic: Pyzor Questions
Replies: 25
Views: 4523

Re: Pyzor Questions

Can you add 'pyzor.nova53.net:24441' to your list and give it a try again?
by TheGr8Wonder
09 Aug 2017 00:37
Forum: Discussion
Topic: email not filtering
Replies: 6
Views: 1778

Re: email not filtering

Are you able to post the headers of the message received? Just so this way we can verify the route the message took, and rule out misconfigured port forwarding on the firewall
by TheGr8Wonder
08 Aug 2017 14:10
Forum: Discussion
Topic: quick question about incoming email for users not yet created
Replies: 11
Views: 3080

Re: quick question about incoming email for users not yet created

You are correct. If you enable per-user scoring, then email processed for users that are not defined in EFA, will not be filtered.
by TheGr8Wonder
07 Aug 2017 22:28
Forum: 3.x Bugs
Topic: IP address and subnet lost after reboot
Replies: 16
Views: 3539

Re: IP address and subnet lost after reboot

Which hyper-visor are you using? Was the VM based from a template or installed fresh via the build script?
by TheGr8Wonder
07 Aug 2017 22:23
Forum: Discussion
Topic: Pyzor Questions
Replies: 25
Views: 4523

Re: Pyzor Questions

To add additional Pyzor nodes to your setup, you will need to create a servers file at /var/spool/postifx/.pyzor/servers nano /var/spool/postfix/.pyzor/servers Add the servers you want... public.pyzor.org:24441 pyzor.scrolloutf1.com:24441 Save the file. Once saved you'll need to update permissions o...
by TheGr8Wonder
05 Aug 2017 18:02
Forum: 3.x How-to
Topic: ClamAV replacement
Replies: 2
Views: 1155

Re: ClamAV replacement

Hi there - this feature is already slated for v4 and is a thread located at - viewtopic.php?f=15&t=2461

Thanks