Search found 388 matches

by nicola.piazzi
19 Jan 2021 17:25
Forum: 4.x Bugs
Topic: TLS 1.0 1.1 not working on postfix
Replies: 24
Views: 12282

TLS 1.0 1.1 not working on postfix

Latest EFA I have problem in comminications with servers that have TLS 1.1, seems that now postfix dont allow it and lots on mailserver gives some this warning: TLS library problem: error:14209102:SSL routines:tls_early_post_process_client_hello:unsupported protocol:ssl/statem/statem_srvr.c:1686: Th...
by nicola.piazzi
18 Jan 2021 17:33
Forum: How-to
Topic: Change web session timeout
Replies: 2
Views: 1505

Re: Change web session timeout

vi /var/www/html/mailscanner/conf.php
// define('SESSION_TIMEOUT', 600);
define('SESSION_TIMEOUT', 12000);
by nicola.piazzi
15 Jan 2021 11:13
Forum: How-to
Topic: Ehnancement for SqlGrey users in MailWatch
Replies: 2
Views: 1654

Ehnancement for SqlGrey users in MailWatch

When we use graylist can be useful to have these 2 lines in MailWatch Cattura.PNG They tell GreyList waiting queue at 5 and 30 minutes And tell today delayed messages ang % delayed of total messages To do this 2 steps : Add mailwatch user to sqlgrey database mysqlp=$(grep MYSQLROOTPWD /etc/eFa/MySQL...
by nicola.piazzi
15 Jan 2021 10:09
Forum: Discussion
Topic: No score for MAILSPIKE
Replies: 2
Views: 2225

No score for MAILSPIKE

I found no scores form mailspike cores comes from 72_scores.cf but are empty I sdont know why default install have no scores for this 72_scores.cf:score RCVD_IN_MSPIKE_BL 0.001 0.001 0.001 0.001 72_scores.cf:score RCVD_IN_MSPIKE_H2 0.001 -0.001 0.001 -0.001 72_scores.cf:score RCVD_IN_MSPIKE_H3 0.001...
by nicola.piazzi
14 Jan 2021 10:22
Forum: 4.x Bugs
Topic: clamd scan pdf cpu
Replies: 9
Views: 4282

Re: clamd scan pdf cpu

In these tests i run 10 minutes of mailserver activity with and without JJencode.yar in signature As you can see with JJencode.yar it takes more than 10 minutes of cpu and without it takes 1 minute !!!! Now test 1st time CLAMD CPU USAGE IN 10 MINUTES JJencode.yar PRESENT ----------------------------...
by nicola.piazzi
14 Jan 2021 09:28
Forum: 4.x Bugs
Topic: clamd scan pdf cpu
Replies: 9
Views: 4282

Re: clamd scan pdf cpu

I am testing clamd cpu usage and i found that this is caused by JJencode.yar
Is possible to remove it from installation ?
by nicola.piazzi
14 Jan 2021 07:26
Forum: 4.x Bugs
Topic: clamd scan pdf cpu
Replies: 9
Views: 4282

Re: clamd scan pdf cpu

can you send me that script :-) ?
by nicola.piazzi
13 Jan 2021 16:14
Forum: 4.x Bugs
Topic: clamd scan pdf cpu
Replies: 9
Views: 4282

Re: clamd scan pdf cpu

no more problems moving these, now mission is to find problem signature mv CVE-2010-0805.yar park mv CVE-2010-0887.yar park mv CVE-2010-1297.yar park mv CVE-2012-0158.yar park mv CVE-2013-0074.yar park mv CVE-2013-0422.yar park mv CVE-2015-1701.yar park mv CVE-2015-2426.yar park mv CVE-2015-2545.yar...
by nicola.piazzi
13 Jan 2021 15:04
Forum: 4.x Bugs
Topic: clamd scan pdf cpu
Replies: 9
Views: 4282

clamd scan pdf cpu

clamd take an excessive cpu time scanning pdf, and we always have pdf to scan so system hangs as you can see whith clandtop we have files that take minutes to scan (and they are normal files not large) disabling unofficial signatures seems to be ok older efa with signatures was ok COMMAND QUEUEDSINC...
by nicola.piazzi
13 Jan 2021 10:57
Forum: How-to
Topic: [SOLVED] duplicate dkim
Replies: 3
Views: 3244

[SOLVED] duplicate dkim

In my case i had a duplicate DKIM bec2ause it sign also when I receive from my internal mailserver

sulution is to put only localhost into internal hosts so it doennt sign when it arrives from internal mailserver
vi /etc/opendkim/TrustedHosts
127.0.0.1
::1
by nicola.piazzi
13 Jan 2021 09:35
Forum: How-to
Topic: [SOLVED] duplicate dkim
Replies: 3
Views: 3244

Re: [SOLVED] duplicate dkim

hi
how you solved double dkim ?
by nicola.piazzi
12 Jan 2021 08:55
Forum: 4.x Bugs
Topic: Virus Scanning rule doesnt work
Replies: 4
Views: 2762

Deep test virus scan rule

[In the MailScanner.conf i put Virus Scanning directive so it use a fixed path file so i am sure that is not wrong] vi /etc/MailScanner/MailScanner.conf Virus Scanning = /mio/mio.rule [In the file i put only negate scan by default] vi /mio/mio.rule FromOrTo: Default No [chmod dir and file to ensure ...
by nicola.piazzi
11 Jan 2021 16:19
Forum: 4.x Bugs
Topic: Virus Scanning rule doesnt work
Replies: 4
Views: 2762

Re: Virus Scanning rule doesnt work

MailScanner version 5.3.4 In MailScanner.Conf i put directive to use default rule file : Virus Scanning = %rules-dir%/scan.messages.virus.rules This file contains 10. That is prefix of mailserver that send mail to mailscanner, no other clients are sending mail to this mailscanner at now ! /etc/MailS...
by nicola.piazzi
11 Jan 2021 08:09
Forum: 4.x Bugs
Topic: Virus Scanning rule doesnt work
Replies: 4
Views: 2762

Re: Virus Scanning rule doesnt work

I tried this , only negate in rule file : vi /etc/MailScanner/rules/scan.messages.virus.rules FromOrTo: default no But clamd also run : PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND 2622 clamscan 20 0 2784356 1.7g 6940 S 23.7 14.7 1:20.26 clamd 1500 mysql 20 0 3496500 184128 19692 S 12.7 1.5...
by nicola.piazzi
08 Jan 2021 17:07
Forum: 4.x Bugs
Topic: Virus Scanning rule doesnt work
Replies: 4
Views: 2762

Virus Scanning rule doesnt work

Latest eFa Now i am using for outbound only so i have all messages that i dont want to scan If i put Virus Scanning = no I see that there is no clamd activity load with top command If i put Virus Scanning = %rules-dir%/scan.messages.virus.rules i see same activity as Virus Scanning = yes I configure...
by nicola.piazzi
08 Jan 2021 16:55
Forum: Feature Requests
Topic: variables missing in efa v4
Replies: 2
Views: 3564

variables missing in efa v4

In efa v3 there was a custom aaction (/usr/share/MailScanner/perl/custom/CustomAction.pm) that transfers some variables to messages and that canbe used in signatures Now seems that this is no more implemented so if i search this file there is mailscanner original example Why you abandoned this ? To ...
by nicola.piazzi
07 Jan 2021 17:05
Forum: Discussion
Topic: dmarc & spf differences
Replies: 1
Views: 1475

dmarc & spf differences

I dont know dmarc differences from spf
dmark tell to quarantine, none or reject unauthorized servers, but also spf can do this
it adds dkim to chek, but it can be done by a ruule also without dmark
by nicola.piazzi
07 Jan 2021 11:27
Forum: Feature Requests
Topic: unbound priority start
Replies: 1
Views: 2999

unbound priority start

When Box starts for about 10 seconds is unable to accept mail i suppose that unbuund need to be active is possiboe to start it first by default ? mailsend -f nicola.piazzi@g*t.it -t check-auth@verifier.port25.com -M CORPO -sub TESTDKIM -smtp efa42.gruppocomet.it Error: RCPT TO: <check-auth@verifier....
by nicola.piazzi
06 Jan 2021 06:50
Forum: 4.x Bugs
Topic: MailWatch lint slow
Replies: 5
Views: 8072

Re: MailWatch lint slow

THere is a problem with SELINUX
If i disable it at all also lint in webinterface have same values
by nicola.piazzi
05 Jan 2021 14:54
Forum: Discussion
Topic: ldap authentication backup
Replies: 1
Views: 1564

ldap authentication backup

Using this our efa is able to get mail for our exchange real users rejcting others : relay_recipient_maps = ldap:/etc/postfix/ldap_relay_recipient_maps.cf 1) If I send to an exiting email and this is correct : Mail sent successfully 2) If i send to a non existing email i get the error : Error: RCPT ...
by nicola.piazzi
05 Jan 2021 13:04
Forum: 4.x Bugs
Topic: MailWatch lint slow
Replies: 5
Views: 8072

Re: MailWatch lint slow

I use also a v3 of efa and mailscanner lint are identical in web and in shell
now with v4 i have this problem
by nicola.piazzi
05 Jan 2021 12:58
Forum: 4.x Bugs
Topic: MailWatch lint slow
Replies: 5
Views: 8072

Re: MailWatch lint slow

Latest 4.0.3
by nicola.piazzi
05 Jan 2021 12:55
Forum: How-to
Topic: Unofficial Signatures : SecuriteInfo : https://www.securiteinfo.com
Replies: 0
Views: 2608

Unofficial Signatures : SecuriteInfo : https://www.securiteinfo.com

I found these signatures that seems to be very useful You ned to register and it make a personalized link to download https://www.securiteinfo.com I am using free verson limited to 1 ip address that can download 24 times a day ll /var/lib/clamav/securite* -rw-r--r--. 1 clamupdate clamupdate 7646557 ...
by nicola.piazzi
05 Jan 2021 09:05
Forum: 4.x Bugs
Topic: MailWatch lint slow
Replies: 5
Views: 8072

MailWatch lint slow

In a freash install i found that MailScanner lind using interface takes 26 seconds, a lot of time if i do in bash it takes about 1 second Is there a problem in installation ? Your box are same ? [root@EFA42 ~]# time MailScanner --lint Trying to setlogsock(unix) Reading configuration file /etc/MailSc...
by nicola.piazzi
03 Jan 2021 11:17
Forum: Feature Requests
Topic: Mailwatch centralized
Replies: 4
Views: 4371

Re: Mailwatch centralized

I tried to install 3 machines but i also not able to see cenralized