efa-project.org

shawniverson wrote: ↑02 Apr 2017 23:09 Yeah, I think it is possible, and yes, I think it would be a good feature to add. I'll open an issue with MailWatch soon and see if we can make this happen.

Thank you

Some mail servers (including Exchange) will not accept duplicate messages with the same message-ID. Have you tried releasing it to an alternate recipient? I know this stuff but do you think it's possible to regenerate an ID when release is selected? for new feature? and for non spam I don't have al...

shawniverson wrote: ↑31 Mar 2017 11:37 Exchange server?

yes, with exchange server 2k10. I know there's a stuff about message-ID but do you think it's possible to do somethings about it?

Hi all, I configured efa to keep a copy of all messages in quarantine, So when I release a spam message directly from webui it happens well in the user mailbox. But When I release a non-spam message that has already been sent ,I do not get the message. I use MailScanner v1.2.0 - RC4 running on EFA-3...

Do you have redirect the smtp traffic to your filter appliance? and do you have create a connector on exchange to receive mail from efa?

Interesting. I just managed to register on the forums. I've been replacing our current appliance ( a Calyptix Security box ) with the EFA-Project and I've been very happy with it. There are a few things left to do. I had managed to get fail2ban working with postfix. I created two jails, postfix and...

HI, for the life of me I cant find this username and password, in the wiki it shows, root/EfaPr0j3ct. does that mean user = root and password = /EfaPr0j3ct. if it does it does not work, searching this forum came up with two others who instead of posting their finding they just posted nevermind, not...

I think with pacemaker you can do this and supported postfix mysql apache

hello everyone, i would like to know if is it possible to have a sandbox solution to open attachment who contain virus. I know dell purpose this solution with the product dell email security appliance. some interest link : https://blog.rootshell.be/2012/06/20/cuckoomx-automating-email-attachments-sc...

hi supportou, Sorry, I have make a mistake on my last post. reject_unlisted_sender = Reject Outbond sender that are listed in our domain. (This rule looks for the existence of the user in the MAIL FROM, as soon as it is in our domain.) In my case I receive a lot mail whose address are scan@mydomain ...

thank's for you reply with reject_unlisted_recipient i don't need to configure an ldap lookup because postfix check "my destination" and if my destination "send user unknown" so postfix reject the message with code 550. conditions for reject_unlisted_recipient: An address is alwa...

On your exchange do you have configure a connector to receive mail from efa server?

Hi, I have found this project fail2web is a fail2ban GUI that communicates with a fail2ban instance via fail2rest fail2ban allows you to administer the following Failregex - Delete and add new failregexes Banned IPs - Ban and Unban IP address Per Jail Config - Configure find time, max retry and used...

I think this part requires a lot of manual work. There are alternatives to malware patrol.
You can take a look at this site
http://malc0de.com/bl/
https://www.servernoobs.com/how-to-inst ... etect-lmd/
https://www.projecthoneypot.org/

thank's

to enable mail report you can configure on /etc/fail2ban/jail.conf

destemail = your email destination

sender = your sender address

mta = sendmail

by default the log for postfix is /var/log/maillog or /var/log/messages

in case in mailscanner indicates several IP address how does the script? is it blocks all the IP addresses? or only one?

Thank's for your reply you can change all.spam-rbl.fr by an other here is a link with a lot of rbl active list http://www.anti-abuse.org/multi-rbl-check/ And with this configuration you can install fail2ban and create a rule to ban some "unknown connect from" Do not hesitate to share your ...

To reject spam before it's filter by mailscanner or spamassasin put this on file /etc/postfix/main.cf : smtpd_client_restrictions = permit_sasl_authenticated reject_rbl_client sbl.spamhaus.org reject_rbl_client cbl.abuseat.org reject_rbl_client all.spam-rbl.fr reject_rbl_client bl.spamcop.net reject...

Hello all,

I would like to know if with efa, It's possible to add DHA prevention ?
Has someone already tried to integrate into efa?

your last reply help me to solved this problem, before I received many fraudulent email while I had already a spf declared. But this entry was misconfigured so I changed. with something like that: before : v=spf1 include:"relay host" ?all now : v=spf1 mx a ptr ip4: "ip address" a...

thank you for your help . I've found and resolved

Sorry for my english,, so if you look at the screen i receive a mail from user@gmail.com but the hostname was not a google server and postfix or mailscanner don't block the message.

So how i can check if the hostname are the same as the sender address. And if not the same it's blocked by mailscanner?

Hello, I would like to know, how I can reject some domain name who is not equal to "from mail address"? I've check on postfix and mailscanner conf in smtp_recipient & data_restriction but it's seem not working and sometime mailscanner let happen spam. the score seem not to be coherent ...

thank you for your return, I will test to see if it corresponds to my config