That's an interesting idea. The problem is that you don't want to assume that every email sent to a honeypot is spam, because some of it may not be. So I am not sure how this would work.
Spam assassin has an auto learn feature already built-in, though.
Search found 3645 matches
- 20 Mar 2014 22:06
- Forum: Discussion
- Topic: honeypot
- Replies: 9
- Views: 7802
- 18 Mar 2014 22:23
- Forum: How-to
- Topic: EFA is spamming me
- Replies: 8
- Views: 5743
Re: EFA is spamming me
For recipients, you may be able to disable all notifications by removing the report definitions. Note that I have not tried this. Back up your config before emptying these entries. Rejection Report = %report-dir%/rejection.report.txt # Set where to find the message text sent to users when one of the...
- 18 Mar 2014 22:18
- Forum: Discussion
- Topic: RBL's
- Replies: 5
- Views: 5869
Re: RBL's
Actually, it may be better to specify an RBL in postfix and stop the email from entering the system...
Here's the default in /etc/postfix/main.cf for zen.spamhaus.org...
Here's the default in /etc/postfix/main.cf for zen.spamhaus.org...
Code: Select all
smtpd_client_restrictions = permit_sasl_authenticated, reject_rbl_client zen.spamhaus.org
- 18 Mar 2014 22:15
- Forum: 3.x Bugs
- Topic: Whitelist isn't working
- Replies: 14
- Views: 12203
Re: Whitelist isn't working
in the to field, you need the word "default" to make a global whitelist entry.
- 15 Mar 2014 17:30
- Forum: Discussion
- Topic: message marked as spam gives a razor error
- Replies: 38
- Views: 33421
Re: message marked as spam gives a razor error
Hmm....this may be related to a postfix update that occurred.
Try this and report the results please
Try this and report the results please
Code: Select all
mkdir /var/spool/postfix/.razor
chown postfix:postfix /var/spool/postfix/.razor
- 15 Mar 2014 00:53
- Forum: 3.x Bugs
- Topic: Quarantine Reports not appearing in Exchange Mailbox
- Replies: 3
- Views: 3959
Re: Quarantine Reports not appearing in Exchange Mailbox
I have determined that the local user does not interfere with delivery.
On my system, another user was assigned the postmaster role, so I was not receiving alerts.
Feel free to share your configuration steps and I will try to reproduce.
On my system, another user was assigned the postmaster role, so I was not receiving alerts.
Feel free to share your configuration steps and I will try to reproduce.
- 15 Mar 2014 00:28
- Forum: How-to
- Topic: Quarantine reports not being delivered
- Replies: 8
- Views: 6159
- 15 Mar 2014 00:26
- Forum: How-to
- Topic: Warning email for removed attachments
- Replies: 2
- Views: 3296
Re: Warning email for removed attachments
That seems accurate, although I have not tested it.
You can also modify the report sent. Look in /etc/MailScanner/reports/en for the reports.
You can also modify the report sent. Look in /etc/MailScanner/reports/en for the reports.
- 15 Mar 2014 00:25
- Forum: How-to
- Topic: EFA not receiver hotmail and gmail
- Replies: 2
- Views: 3246
Re: EFA not receiver hotmail and gmail
Gmail and the like perform reverse lookups on your MX record. Make sure you have a public PTR record for your MX.
- 15 Mar 2014 00:23
- Forum: How-to
- Topic: Archived mail with status of Other
- Replies: 8
- Views: 6581
Re: Archived mail with status of Other
It is important to monitor the performance of your system under high load.
Also, a good rule of thumb is to have no more than 1-2 MailScanner children per processor. Too many MailScanner threads spawning will overload the system and things will start crashing.
Also, a good rule of thumb is to have no more than 1-2 MailScanner children per processor. Too many MailScanner threads spawning will overload the system and things will start crashing.
- 15 Mar 2014 00:21
- Forum: How-to
- Topic: Phishing Fraud Warning
- Replies: 5
- Views: 9253
Re: Phishing Fraud Warning
Yep.
In /etc/MailScanner/MailScanner.conf
This will be added to EFA-Configure in an upcoming release.
In /etc/MailScanner/MailScanner.conf
Code: Select all
Highlight Phishing Fraud = no
- 15 Mar 2014 00:19
- Forum: Discussion
- Topic: permissions on postfix folders
- Replies: 4
- Views: 4195
Re: permissions on postfix folders
This is fixed in the 3.0.0.3 update. Update to receive the latest fixes.
- 13 Mar 2014 16:15
- Forum: 3.x Bugs
- Topic: Quarantine Reports not appearing in Exchange Mailbox
- Replies: 3
- Views: 3959
Re: Quarantine Reports not appearing in Exchange Mailbox
I am tracking another issue where it appears that if a local user on EFA is present with the same name as on the mail server, the reports are never delivered. Does this coincide with your issue?
- 13 Mar 2014 16:09
- Forum: How-to
- Topic: Quarantine reports not being delivered
- Replies: 8
- Views: 6159
Re: Quarantine reports not being delivered
Do you have administrator on your local EFA as a local user?
I am noticing a similar problem where I have a postmaster on my EFA, but I also have a postmaster on my mail server.
I am troubleshooting this. My theory is that EFA is not queuing it out because of the presence of the local account.
I am noticing a similar problem where I have a postmaster on my EFA, but I also have a postmaster on my mail server.
I am troubleshooting this. My theory is that EFA is not queuing it out because of the presence of the local account.
- 13 Mar 2014 16:06
- Forum: How-to
- Topic: Restrict Archive Messages to Spam
- Replies: 4
- Views: 3757
Re: Restrict Archive Messages to Spam
Yes, you will need to reconfigure MailScanner as follows:
In /etc/MailScanner/MailScanner.conf change the following from store to delete.
In /etc/MailScanner/MailScanner.conf change the following from store to delete.
Code: Select all
High Scoring Spam Actions = delete
Code: Select all
sudo service MailScanner restart
- 13 Mar 2014 16:02
- Forum: How-to
- Topic: EFA is spamming me
- Replies: 8
- Views: 5743
Re: EFA is spamming me
ssh into your EFA as your user you set up initially (not root) and run Spam Settings Option 9 then Option 2
(/usr/local/sbin/EFA-Configure should run automatically upon login, if not, run this script with sudo)
(/usr/local/sbin/EFA-Configure should run automatically upon login, if not, run this script with sudo)
Code: Select all
sudo /usr/local/sbin/EFA-Configure
- 13 Mar 2014 16:00
- Forum: Discussion
- Topic: Reports via mail
- Replies: 1
- Views: 2492
Re: Reports via mail
Depending on the configuration, EFA sends out daily quarantine reports. Is that what you are wanting?
- 12 Mar 2014 22:27
- Forum: Discussion
- Topic: modify This message has been scanned by E.F.A. Project and i
- Replies: 2
- Views: 3247
Re: modify This message has been scanned by E.F.A. Project a
Yep
Look in:
/etc/MailScanner/reports/en
You'll find the signature definitions here, and they can be modified.
Look in:
/etc/MailScanner/reports/en
You'll find the signature definitions here, and they can be modified.
- 12 Mar 2014 21:51
- Forum: How-to
- Topic: installing vmware tools gives permission denied
- Replies: 12
- Views: 28278
Re: installing vmware tools gives permission denied
Wow. What does the permissions on perl look like?
/usr/bin/perl I think.
/usr/bin/perl I think.
- 12 Mar 2014 21:49
- Forum: Discussion
- Topic: EFA 2 and 3
- Replies: 5
- Views: 5983
Re: EFA 2 and 3
I don't know very much about Baruwa, Darky's the expert on that one. He's been very busy. I'm sure he'll chime in with some thoughts.
- 11 Mar 2014 11:06
- Forum: Introduction
- Topic: Hello from Oz
- Replies: 2
- Views: 3477
Re: Hello from Oz
Greetings! Yep, you can install to a VPS. What you need to do is install CentOS 6.5 x64 and review the ks.cfg and install all the packages listed/configure as it describes. https://github.com/E-F-A/v3/tree/3.0.0.4/build After that, fetch the build.bash as shown at the bottom of ks.cfg and run it.
- 10 Mar 2014 19:51
- Forum: 3.x Bugs
- Topic: EFA-SA-update 3.0.3
- Replies: 2
- Views: 3244
Re: EFA-SA-update 3.0.3
Well, crud, that was my bad!
The script belongs in /usr/local/sbin! *beating head off of wall now*
Also, we need to dump /etc/mail/spamassassin/kam.cf.backup from all installs
The script belongs in /usr/local/sbin! *beating head off of wall now*
Also, we need to dump /etc/mail/spamassassin/kam.cf.backup from all installs
- 09 Mar 2014 17:34
- Forum: How-to
- Topic: Increasing Partition Sizes
- Replies: 16
- Views: 66765
Increasing Partition Sizes
You may find after running E.F.A. for a while that you may need more capacity. Here's a how-to. 1) Shutdown MailScanner to halt mail processing sudo service MailScanner stop 2) Recommend a full backup before proceeding. (Don't snapshot, you won't be able to resize the disk...) This procedure varies ...
- 09 Mar 2014 16:37
- Forum: 3.x Bugs
- Topic: incoming queue growing
- Replies: 12
- Views: 11536
Re: incoming queue growing
I am also curious about your CPU and memory utilization. Mine was crashing due to memory/CPU exhaustion (from too many threads). I wonder if your system is a busier one, maybe it needs more horsepower assigned to it?
Just a thought....
Just a thought....
- 09 Mar 2014 13:42
- Forum: How-to
- Topic: installing vmware tools gives permission denied
- Replies: 12
- Views: 28278
Re: installing vmware tools gives permission denied
Even though you are root, what happens when you sudo?
Code: Select all
sudo ./vmware-install.pl --default