efa-project.org

smyers119

The GUI whitelist/blacklist is part of mailwatch.
It's located In the database mailwatch
Greylisting can be duplicated by just replicating the database sqlgrey

smyers119

*.qq.com

Will delete every email from *@*.qq.com but will allow every email from *@qq.com.

smyers119

Hi, I actually do see mails getting through that are on the blacklist in the webconsole. How do they get in effect? I added icu without dot, like this: https://localhost/mailscanner/lists.php Blacklist: From: To: Action: icu default Delete qq.com default Delete space default Delete top default Dele...

smyers119

EDIT: Deleted, though I thought I had a fix but looking further at source it appears TLD's should be supported. So it might jsut be a small syntax issue. I am working on it, doing some tests

smyers119

Seems we need to make a feature request for this. Also seems someone already fixed this for themselves, I have not tried this to see if it works so use at your own risk.
https://www.pokorra.de/2019/03/mailwatc ... blacklist/

smyers119

yes you are correct the blacklist isn't blocking TLD's.

smyers119

I completely understand the need to sanitize, but it's hard for me to follow along with it that way. I don't expect you to trust me, but maybe talk to one of the moderators, and have them look at the unsanitized version so they can help further. From what I can tell though is spf=none, which is same...

smyers119

Detail's are your friend. I would recommend posting your dns txt record that you have for spf. And posting a example of where you think spf is not working correctly.

smyers119

ajmind wrote: ↑04 May 2020 15:16
Code: Select all
1MAILGW1 site-packages]# cat /etc/ld.so.conf
/opt/sophos-av/lib64
include ld.so.conf.d/*.conf

Seems you tried setting up sophosavi at some point as well.

you need to delete

Code: Select all

/opt/sophos-av/lib64

from /etc/ld.so.conf
then run

Code: Select all

sudo ldconfig

smyers119

what's output of

Code: Select all

cat /etc/ld.so.conf

smyers119

I use sophos av without problems. Whats the link to the directions you followed? I'll look and see if maybe I can reverse engineer where it went wrong.

smyers119

What did you do to cause this? IT didn't just happen on it's own. Your probably better off reinstalling eFa. post output of ldd /usr/lib64/python2.7/site-packages/pycurl.so This is what it should look like: [uder@host ~]$ ldd /usr/lib64/python2.7/site-packages/pycurl.so linux-vdso.so.1 => (0x00007ff...

smyers119

so there is something wrong with your unbound service.

Code: Select all

sudo systemctl status unbound

if thats running then check

Code: Select all

cat /etc/resolv.conf

and post contents

smyers119

Anonymous TLS connection established from unknown[209.85.221.45]: TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits) May 3 20:38:29 antispam postfix/smtpd[26620]: warning: 45.221.85.209.zen.spamhaus.org: RBL lookup error: Host or domain name not found. Name service error for name=45.221...

smyers119

your going to need to add some CONTEXT and a whole lot more details for help.

smyers119

smyers119 wrote: ↑03 May 2020 13:10 I am not a expert, and I didn't test this. but you can try adding this in local.cf
Code: Select all
header CLASSMATE_NET Received =~ /208\.84\.4[0-7]\.\d{1,3}/
describe CLASSMATE_NET Spam Mail from 208.84.40.0/21
score CLASSMATE_NET 9.0

^^^^This catches every ip from 208.84.40.0 to 208.84.47.255

smyers119

I think I found the problem thanks to the link you posted above.... THIS: =~ /(208\.84\.40\.)/ Should actually be THIS: =~ (208\.84\.40\.) Does that look right? This first one when entered into that link highlighted both "/" in red and said "pattern error"... Just use mine so yo...

smyers119

bikertrash wrote: ↑03 May 2020 13:49 The file is this in /etc/mail/spamassassin/blockip.cf

The permissions on the file are this:
-rw-r--r--. 1 root root 8271 Apr 29 04:45 blockip.cf

Is this correct?

Permissions match mine

smyers119

Hold up, I found the problem. the ip is encompassed in brackets which is why it's not matching will edit this post with the fix. found a cool regex validator as well (https://regex101.com/) EDIT: Never mind it appears what I posted above is working fine according to the validator. It's showing your ...

smyers119

I am not a expert, and I didn't test this. but you can try adding this in local.cf

Code: Select all

header CLASSMATE_NET Received =~ /208\.84\.4[0-7]\.\d{1,3}/
describe CLASSMATE_NET Spam Mail from 208.84.40.0/21
score CLASSMATE_NET 9.0

smyers119

bikertrash wrote: ↑03 May 2020 12:01 And... another one came right through yesterday... same sub-net...

Oh well...

I don't think your regex syntax is correct.

smyers119

vondess wrote: ↑01 May 2020 09:50 i am trying to enable LDAP logins and followed your instructions, however it does not work for me

Your going to need to add more details then that.

smyers119

Citabria79 wrote: ↑30 Apr 2020 21:20 The problem is that it all was to be done after a fresh install, the system is used now. And impossible to reinstall...

see how far back journalctl goes, it may still have the logs from when you first installed eFa

smyers119

Also a copy of dmesg after a fresh install might catch some pertinent info as well.

Code: Select all

dmesg > dmesg.txt

smyers119

The journalctl logs might give us some insight, but only after a fresh install.

Code: Select all

journalctl --no-pager > logs.txt

efa-project.org

Search found 108 matches

Re: database components backup/export/import to new EFA?

Re: Blacklist TLD

Re: Blacklist TLD

Re: Blacklist TLD

Re: Blacklist TLD

Re: Blacklist TLD

Re: SPF Not working

Re: SPF Not working

Re: Cron job are not running

Re: Cron job are not running

Re: Cron job are not running

Re: Cron job are not running

Re: Postfix all mails Reject - GreyList Off !

Re: Postfix all mails Reject - GreyList Off !

Re: Postfix all mails Reject - GreyList Off !

Re: GeoIP not always tagging email

Re: GeoIP not always tagging email

Re: GeoIP not always tagging email

Re: GeoIP not always tagging email

Re: GeoIP not always tagging email

Re: GeoIP not always tagging email

Re: LDAP Auth and Validation with Active Directory / Exchange for EFA 3.0.2.6

Re: MSMilter not started after installation

Re: MSMilter not started after installation

Re: MSMilter not started after installation