Search found 74 matches

by budy
28 Mar 2018 07:53
Forum: Discussion
Topic: interesting reporting tool: sendmailanalyzer
Replies: 5
Views: 4405

Re: interesting reporting tool: sendmailanalyzer

I have been using sendmailanalyzer for years and I always found it to be a good tool to have.
by budy
06 Mar 2018 21:47
Forum: 3.x Bugs
Topic: mark message as spam doesn't work
Replies: 14
Views: 12502

Re: mark message as spam doesn't work

Well… afaiks, pdwalker is correct. He asked for the specific text of the link in the footer of your messages. E.g, this is what such a link in the messages, which I get from my eFa, looks like: This message has been scanned for viruses and dangerous content by E.F.A. Project, and is believed to be c...
by budy
06 Mar 2018 10:23
Forum: 3.x Bugs
Topic: ClamAV Vulnerabilities
Replies: 43
Views: 30801

Re: ClamAV Vulnerabilities

Hi henk,

thanks, that solved it.

Thanks,
budy
by budy
05 Mar 2018 18:15
Forum: 3.x Bugs
Topic: ClamAV Vulnerabilities
Replies: 43
Views: 30801

Re: ClamAV Vulnerabilities

Hmmm… my clamav is still on 0.99.2 but yum update won't server a newer one: [root@efa yum.repos.d]# yum list clamav Loaded plugins: fastestmirror, security Loading mirror speeds from cached hostfile * EFA: dl.efa-project.org * base: ftp.rz.uni-frankfurt.de * epel: mirror.de.leaseweb.net * extras: ft...
by budy
05 Mar 2018 17:51
Forum: How-to
Topic: Spammer Alert
Replies: 20
Views: 16903

Re: Spammer Alert

But first, change it on the database!
by budy
03 Mar 2018 10:32
Forum: Discussion
Topic: firewall setting
Replies: 4
Views: 3552

Re: firewall setting

This is not so much a setting in your firewall, but the MX record in your public DNS defines, where incoming mail should be relayed to. If you don't have youe eFa exposed to the internet, either directly or via a DMZ, then a port forwarding of port 25/557 in your firewall to eFa for incoming externa...
by budy
21 Dec 2017 19:10
Forum: How-to
Topic: Problem sending Mails
Replies: 3
Views: 3544

Re: Problem sending Mails

Hi, looks like your eFa picked the backup mx of rzone.de. I just queried rzone.de's mx record and it shows something different for me: budy:~ budy$ host -t mx rzone.de rzone.de mail is handled by 10 fwmx.rzone.de. budy:~ budy$ host fwmx.rzone.de fwmx.rzone.de has address 81.169.144.237 fwmx.rzone.de...
by budy
25 Nov 2017 16:50
Forum: How-to
Topic: Relay Mail to external mailserver
Replies: 1
Views: 1590

Re: Relay Mail to external mailserver

Really? You are using eFa to get e-mail from external servers and then relay it to other external servers? That doesn't sound to be a too clever setup, is it? Or do you mean, you are relaying the messages to another internal postfix server? If that is the case, add eFa's IP to the trusted networks o...
by budy
21 Nov 2017 15:44
Forum: Feature Requests
Topic: Working with large black/whitelists
Replies: 9
Views: 10655

Re: Working with large black/whitelists

Given the transient nature of the internet in general, do you really feel this is a very good idea to pursue?
by budy
19 Nov 2017 14:18
Forum: Discussion
Topic: Protect privacy
Replies: 7
Views: 5781

Re: Protect privacy

What are trying to gain from that? E-Mail in itself isn't encrypted and sending confidential information via non-encrypted e-mail is a failure right from the start. I think the appropriate way to handle these issues are policies and audits. Don't try to turn eFa into something is isn't meant to be a...
by budy
13 Nov 2017 19:04
Forum: Discussion
Topic: Release: error code 75 returned from Sendmail: sendmail: fatal:
Replies: 22
Views: 17314

Re: Release: error code 75 returned from Sendmail: sendmail: fatal:

Take a look at your posfix log file in /var/log/maillog, there you should be able to track your released messages down…
by budy
03 Nov 2017 18:42
Forum: How-to
Topic: Definition on sshd_config are not reflected
Replies: 8
Views: 4413

Re: Definition on sshd_config are not reflected

If you turn off smtp, http, https access, than you could very well just shutdown your efa box, as it will be of no further use…
by budy
03 Nov 2017 18:40
Forum: 3.x Bugs
Topic: Deliver Cleaned Messages and/or Files
Replies: 3
Views: 4245

Re: Deliver Cleaned Messages and/or Files

Hi Ronald, Nov 3 13:31:09 sys-mailgw12 MailScanner[19353]: Clamd::INFECTED:: Heuristics.OLE2.ContainsMacros :: ./13CB2100054.A28F0/Buro Bau Jaarrekening 2016.xls the above states, that MailScanner has deviced to not let that xls file pass. This actually a good practise and sending any kind of MS act...
by budy
02 Nov 2017 17:39
Forum: How-to
Topic: Definition on sshd_config are not reflected
Replies: 8
Views: 4413

Re: Definition on sshd_config are not reflected

What does your iptable look like. The way you added those rules will append them after any other rule already existing and thus it is no wonder that they don't do anything… This is my iptable setup, I haven't done much tinkering with it,except adding support for the check-mk-agent: [root@efa ~]# ipt...
by budy
26 Oct 2017 15:33
Forum: 3.x Bugs
Topic: Personal spam thresholds are ignored
Replies: 11
Views: 8533

Re: Personal spam thresholds are ignored

Well, there has been an admin account already. And that admin account also had the thresholds set up, so it doesn't seem that MailScanner still does this.
by budy
25 Oct 2017 18:52
Forum: 3.x Bugs
Topic: Personal spam thresholds are ignored
Replies: 11
Views: 8533

Re: Personal spam thresholds are ignored

…soo… it seems, that having thresholds set to 0/0 doesn't actually resolve to the domain's defaults of 5/7, but lead to the accounts messages are not checked for spam. Once I manually set user-defined thresholds in the user list as the admin user, messages started to be recognized as spam. I surely ...
by budy
25 Oct 2017 13:21
Forum: 3.x Bugs
Topic: Personal spam thresholds are ignored
Replies: 11
Views: 8533

Re: Personal spam thresholds are ignored

Hi guys, I just checked with my eFa box at work and unfortuanetly I have to treport, that it doesn't seem enough for the users to be in the list, as almost none of them is checked for spam. I have just run a report on messages that have a spam assassin score of 5+ and got 5k+ results, where almost n...
by budy
20 Oct 2017 13:02
Forum: 3.x Bugs
Topic: blacklist - adding address not working
Replies: 6
Views: 6907

Re: blacklist - adding address not working

Downloading the current version of FF ist amlost the first thing I do, when I need to do any work on any Windows installation… :lol:
by budy
19 Oct 2017 10:14
Forum: How-to
Topic: Where can I edit the scores for RECEIVED_IN_MSPIKE?
Replies: 4
Views: 4050

Re: Where can I edit the scores for RECEIVED_IN_MSPIKE?

Yeah - I know, but from looking at Anubis site, what qualifies the H2 hosts to be more trustworthy then the higher ones?
H3 to H5 only get their SA scores reduced marginally. H5 gets credit of only -1.0, H3 and H4 only receive -0.1 each.
by budy
19 Oct 2017 08:31
Forum: 3.x Bugs
Topic: greylisted ip addresses not displayed correctly
Replies: 6
Views: 4736

Re: greylisted ip addresses not displayed correctly

What about other, more odd netmasks, e.g. /23? That wouldn't be easily recognizeable, would it?
by budy
19 Oct 2017 07:25
Forum: How-to
Topic: Where can I edit the scores for RECEIVED_IN_MSPIKE?
Replies: 4
Views: 4050

Re: Where can I edit the scores for RECEIVED_IN_MSPIKE?

Great - thanks. Now looking at the scores, can anybody enlighten me as of why a message received in H2 gets such an excellent score:

72_scores.cf:score RCVD_IN_MSPIKE_H2 0.001 -2.800 0.001 -2.800

when the higher reputation senders don't?
by budy
18 Oct 2017 11:05
Forum: How-to
Topic: Where can I edit the scores for RECEIVED_IN_MSPIKE?
Replies: 4
Views: 4050

Where can I edit the scores for RECEIVED_IN_MSPIKE?

Hi, I want to play a bit with efa's scores regarding the mailspike scores, but I seem to be unable to find the config for those on the eFa box. I assumed, that they somewhow would show up in /etc/MailScanner/spamassasin.conf, but they don't. Where are those configured and is there a sanctioned way o...
by budy
17 Oct 2017 06:33
Forum: 3.x Bugs
Topic: razor report doesn't work
Replies: 1
Views: 2139

razor report doesn't work

Hi, whenever I am telling eFa to learn + report a message as spam, I am getting this result in the following screen, after hitting submit: SpamAssassin: Oct 17 08:30:40.596 [610] warn: reporter: razor2 report failed: No such file or directory report requires authentication at /usr/share/perl5/vendor...
by budy
17 Oct 2017 06:29
Forum: 3.x Bugs
Topic: Personal spam thresholds are ignored
Replies: 11
Views: 8533

Re: Personal spam thresholds are ignored

Yes - this totally does it - thanks!
by budy
17 Oct 2017 06:29
Forum: 3.x Bugs
Topic: Some messages are being "defaced"
Replies: 6
Views: 5478

Re: Some messages are being "defaced"

Hi guys, thank you for your help. I am totally aware of the risks, regarding these "masqued" links, but more often than not, automated messages from Akamai and others do contain such links and we do have a very high fluctuation of employees, which would cause in always other people filling...