Search found 47 matches

by mattch
22 Apr 2020 19:03
Forum: How-to
Topic: Greylisting Whitelist
Replies: 1
Views: 12984

Re: Greylisting Whitelist

Im having same issue and find this. It appears whitelist protection.outlook.com instead of customer domains.

viewtopic.php?f=5&t=3685
by mattch
22 Apr 2020 18:39
Forum: How-to
Topic: EFA & PHI Emails
Replies: 7
Views: 4039

Re: EFA & PHI Emails

From my understanding any PHI in unencrypted email is a no no. To encrypt the email requires end to end configuration and not possible without controlling the other sides. People i know needing that end up using those encrypted email services you have to sign up for, or built-in to the emr. I also s...
by mattch
22 Apr 2020 18:32
Forum: How-to
Topic: DCC Plugin score
Replies: 3
Views: 2385

Re: DCC Plugin score

Thank you that is very clear and precise. i will be customing some more scores now.
adding dcc_check in local.cf did the trick. thanks guys you rock!
by mattch
22 Apr 2020 18:05
Forum: Discussion
Topic: Greylist vs EFA vs spf.protection.outlook.com
Replies: 5
Views: 8033

Re: Greylist vs EFA vs spf.protection.outlook.com

Beautiful. i just come across this my self. THANK YOU! I swore the user is crazy but nope. cat /var/log/maillog | grep o365@emails.com [code]Apr 22 12:02:41 mx2 sqlgrey: grey: new: 40.107.237(40.107.237.92), o365@emails.com -> my@efaemail.com Apr 22 12:02:41 mx2 postfix/smtpd[15816]: NOQUEUE: reject...
by mattch
22 Apr 2020 17:32
Forum: 4.x Bugs
Topic: geoipupdate and the 401
Replies: 2
Views: 2897

Re: geoipupdate and the 401

:teasing-dink: So this isnt a bug after all. i cant believe i missed that in tools menu, and in eFa-configure. ****** added license in efa-configure, run the update in mailwatch gui, boom done. ******* too easy, too easy. Here is some closure to my unnecessary saga: -upgrading geoipupdate to v4 and ...
by mattch
22 Apr 2020 02:01
Forum: 4.x Bugs
Topic: geoipupdate and the 401
Replies: 2
Views: 2897

geoipupdate and the 401

04/22/20 EDIT: skip down for the correct method of updating geoip2. this works but is a lot more difficult than it has to be. Using a fresh install of eFa-v4.0.2 (with restored backup from v3) on centos 7 which included geoipupdate v2.5, kept giving a 401 response (geoipupdate -v) complaining invali...
by mattch
08 Apr 2020 16:52
Forum: How-to
Topic: DCC Plugin score
Replies: 3
Views: 2385

DCC Plugin score

Hello everyone! :think: :doh: does anyone know if it's possible to change the default score on DCC_CHECK? i found some examples for custom rule but then results in two "DCC_CHECKS" in rule descriptions. So where does the default one hide, or how to change or remove default dcc_check rule? ...
by mattch
26 Feb 2019 16:53
Forum: How-to
Topic: new install, empty bayes - training
Replies: 2
Views: 2698

Re: new install, empty bayes - training

henk wrote: 17 Feb 2019 23:55 It makes little sense to me to use spam archives.
Just take some time to train Bayes. If you really want spam to train Bayes, create email addresses for wife and kids. :shifty:
:lol:
Good to know! that sounds much easier.
by mattch
26 Feb 2019 16:52
Forum: How-to
Topic: Block specific keyword and subject and content
Replies: 4
Views: 28696

Re: Block specific keyword and subject and content

notes ive taken: you could put these rules in /etc/mail/spamassasin/local.cf , but i find it easier to make a new file, like "jagcbes.cf" then add your custom rules. anything with .cf in the folder is picked up. for a super simple rule to give score if the string is present, score can be &...
by mattch
26 Feb 2019 15:54
Forum: Discussion
Topic: Message Quarantine Report
Replies: 13
Views: 8122

Re: Message Quarantine Report

Is there a way for the administrator of MailWatch to get a quarantine report for all recipients? if thats your goal then dont use the quarantine email report and just manage quarantine from mailwatch web ui. the quarantine report will take to mailwatch anyway. in mailwatch you can add a filter of a...
by mattch
18 Feb 2019 04:31
Forum: How-to
Topic: purge or delete messages
Replies: 2
Views: 3462

Re: purge or delete messages

henk wrote: 17 Feb 2019 23:35 I you wake up and your house is on fire, that should kick you in high gear, not having a some mail ;)
:lol: :doh: :pray:
:angry-extinguishflame: :angry-screaming: :banana-skier:


thanks!
by mattch
18 Feb 2019 04:23
Forum: How-to
Topic: inline.sig.xxx
Replies: 0
Views: 3162

inline.sig.xxx

in /etc/Mailscanner/reports/en/ is inline.sig.txt or inline.sig.html used anywhere in the system?

i know the purposes of inline.sig.in.txt/html and inline.sig.out.txt/html but always wondered about this other one.

:?: :think:
by mattch
17 Feb 2019 23:12
Forum: How-to
Topic: new install, empty bayes - training
Replies: 2
Views: 2698

new install, empty bayes - training

hopefully im allowed to post about this, i just stumble on a cool website that offers spam archives to download and train SA with. i dont know the quality of spam messages it has but for a new install it should be better than nothing, right? Besides a starter database you can download (to replace a ...
by mattch
17 Feb 2019 22:50
Forum: Discussion
Topic: Message Quarantine Report
Replies: 13
Views: 8122

Re: Message Quarantine Report

only spam messages come through in the quarantine report. "clean" messages wont show in the report. get a spam though to that user and then send the report from mailwatch. for me sending spam test messages was easily achieved with a custom SA rule that assigns high score with a certain str...
by mattch
17 Feb 2019 17:49
Forum: Discussion
Topic: Message Quarantine Report
Replies: 13
Views: 8122

Re: Message Quarantine Report

Maybe one-day mailwatch can connect to multiple LDAP connections like postfix can. using the Mailwatch-Ad-Sync script works flawlessly. so much so its easy enough for me to build a EFA/vm dedicated for each "exchange server" then backup and restore the bayes from one that has a good amount...
by mattch
17 Feb 2019 17:01
Forum: How-to
Topic: purge or delete messages
Replies: 2
Views: 3462

purge or delete messages

i hope this is the right place to ask. any pointer or suggestion much appreciated! how can i remove messages in quarantine, mass delete all of them? a folder? #i try to set in /var/www/html/mailscanner/conf.php define('QUARANTINE_DAYS_TO_KEEP', 0); #and force it by /usr/local/bin/mailwatch/tools/Cro...
by mattch
10 Feb 2019 19:07
Forum: How-to
Topic: signature direction confusion (solved)
Replies: 1
Views: 2277

Re: signature direction confusion

Ok some follow up. its funny how right after i make a post i have a stroke of luck... i hope anyway. Maybe someone can confirm this but the order seems to matter. also whitelisted emails dont get in sig, which i think is by design. making "default" last seem to help. changing from: sig.tex...
by mattch
10 Feb 2019 17:57
Forum: How-to
Topic: signature direction confusion (solved)
Replies: 1
Views: 2277

signature direction confusion (solved)

Hey Guys, i hope this isnt duplicate ive scoured google and the forum, makes me think my install is wonky, or i just dont get it. My problem is the direction of the inline signature. the EFA filters domain.com spam and forward it to local MTA, nothing special. i went to EFA-configure and enable sign...
by mattch
09 Apr 2018 16:26
Forum: How-to
Topic: AD / LDAP
Replies: 0
Views: 2344

AD / LDAP

i just want to be clear what can be done by connecting EFA to AD/LDAP lookups. Thank you! From my understanding this is useful for: 1) LDAP lookup to auto-populate the EFA users (for sending out quarantine reports without manually creating all the users in EFA) 2) lookup valid recipients, if no vali...
by mattch
02 Apr 2018 02:29
Forum: How-to
Topic: bypass string
Replies: 7
Views: 3702

Re: bypass string

I got it working, exactly what i wanted. THANKS! a few things: 1) the file i added the rule to: /etc/mail/spamassasin/local.cf added at end of file: body BYPASS_RULE /thestringforbypass/ score BYPASS_RULE -100 describe BYPASS_RULE Bypass Rule 2) the describe description does not seem to show up but ...
by mattch
29 Mar 2018 14:22
Forum: How-to
Topic: bypass string
Replies: 7
Views: 3702

Re: bypass string

I have an EFA server that serves multiple remote domains. Periodically i need to send out test emails, usually the telnet test to test mail flow on the various remote mail servers. Occasionally i will tweak postfix settings and its annoying to do tests and they get flagged for spam. I have been whit...
by mattch
28 Mar 2018 22:30
Forum: How-to
Topic: bypass string
Replies: 7
Views: 3702

bypass string

Is there a way to set a bypass string or code? Some string of characters within subject or body that allows a message to bypass spam checks.