efa-project.org

Buzzo,

Do you have notes on what you did to get to ClamAV 0.98.1 using RPM?

I would be interested in adding this as an official update (without the freshclam issue, of course...)

I wonder why the matching rule "not cached" is being triggered on this mail?

umm...I see a potential problem.

EFA was built with a compiled version of ClamAV....0.98

You are using RPM version of ClamAV 0.98.1?

This can be done, but I say it with caution as it would require rewriting the code and extending it to allow this...(definitely will consider this, especially if it helps others) The system is designed to allow a single release of the message. This is to prevent the public from clicking on release m...

Can you share any details of the message in MailWatch or a screenshot? (feel free to strip out watermark or other identifying or sensititive info)

That looks good. It should work.

Wouldn't need to rewrite the URL with that prerouting directive...

Change UTC=false

to

UTC=true

Restart EFA and see what happens.

Great find! May want to roll this one into EFA...

Yes.

Mimic the settings in the ks.cfg file manually (storage, packages, etc., default EFA password, etc.)

Then launch the build script as shown at the end of ks.cfg

Should be the same as your "normal" EFA user. But if that doesn't work... look in /etc/EFA-Config for MYSQLROOTPW /usr/bin/mysql -u root -pMYSQLROOTPW mailscanner -e "INSERT INTO users SET username = 'MYADMINUSER', password = md5('MYPASSWORD'), fullname = 'MYADMINUSER', type ='A'"...

Interesting....

I am not seeing this on my system, just ran a freshclam update.

Nothing else should be trying to update clamav except /etc/cron.daily/freshclam

Are you using ClamAV 0.98 or 0.98.1?

Was it a virus infected email? I know those won't get stored on the system by default...

What's the contents of the following file on your system?

/etc/sysconfig/clock

There's another cert that is worth rotating...

Code: Select all

sudo cp /etc/postfix/ssl/smtpd.pem /etc/postfix/ssl/smtpd.pem.old
sudo  openssl req -new -x509 -nodes -out /etc/postfix/ssl/smtpd.pem -keyout /etc/postfix/ssl/smtpd.pem -days 3650

Code: Select all

sudo /usr/local/sbin/EFA-Configure

Head over to spam settings and change your spam delivery method.

Code: Select all

sudo chown postfix:apache /var/spool/postfix/incoming
sudo chown postfix:apache /var/spool/postfix/hold
sudo chmod 740 /var/spool/postfix/incoming
sudo chmod 740 /var/spool/postfix/hold

Correcting my instructions.

Why not join us anyway?

From: domain
To: default

The word default is required in the to: field for this to work.

Also, restart mailscanner for the change to take effect immediately

Code: Select all

sudo service MailScanner restart

yep.

Code: Select all

Treat Invalid Watermarks With No Sender as Spam = high-scoring spam

Be aware this is likely to also block sender receipts as I have observed many remote servers (such as Exchange) stripping the watermark from the header on response.

Is your system set to use UTC or local time?

4.

If you chose to install open-vm-tools, then you are all set.

If not, you can install vmware-tools using VMware.

http://kb.vmware.com/selfservice/search ... Id=1018414

Found the bugs

The iptables-save command is writing to stdout instead of the config file

Edit /etc/sysconfig/iptables

Add the following after the port 80 line:

-A INPUT -m state --state NEW -m tcp -p tcp --dport 443 -j ACCEPT

Code: Select all

sudo service iptables reload

What does the following reveal?

Code: Select all

sudo iptables -L

and the following

Code: Select all

sudo service httpd status

efa-project.org

Search found 3651 matches

Re: permssions issue with freshclam and updates

Re: Some mails do not get delivered

Re: permssions issue with freshclam and updates

Re: How can I stop releasing being limited to once?

Re: Some mails do not get delivered

Re: EFA webgui (MailWatch) change to HTTPS

Re: EFA-configure system time wrong

Re: Email Daily Reports

Re: Poslible to Install on a linux virtual server

Re: Can't login to Mailscanner after initial OVF install

Re: permssions issue with freshclam and updates

Re: Some mails do not get delivered

Re: EFA-configure system time wrong

Re: HeartBleed Vulnerability Guidance

Re: Stop emails - {Spam not delivered}

Re: Migrate from ESVA to EFA

Re: Postfix - Hold and incoming

Re: HeartBleed Vulnerability Guidance

Re: Hello from Mississippi ('sippi)

Re: Blackilisting

Re: No from field.

Re: EFA-configure system time wrong

Re: Some issues

Re: EFA webgui (MailWatch) change to HTTPS

Re: EFA webgui (MailWatch) change to HTTPS