Search found 463 matches

by ovizii
16 May 2017 08:59
Forum: Discussion
Topic: How come I get different Sa scores from EFA GUI vs SA command line?
Replies: 8
Views: 5313

Re: How come I get different Sa scores from EFA GUI vs SA command line?

No, absolutely no issues with --lint for both. The system is working perfectly. I just stumbled upon this by coincidence when I saw that DKIM results varied.
by ovizii
15 May 2017 20:09
Forum: How-to
Topic: Installation F-Prot Free Antivirus to scan attachements
Replies: 38
Views: 693892

Re: Installation F-Prot Free Antivirus to scan attachements

changed Data to Date and Totala to Totals When you change those words, make sure you search and replace them inside the whole file! From the description of your problem I assume you only changed them in the header of those columns. I suggest copying that code into a new file and do a new search and...
by ovizii
15 May 2017 07:49
Forum: Discussion
Topic: How come I get different Sa scores from EFA GUI vs SA command line?
Replies: 8
Views: 5313

Re: How come I get different Sa scores from EFA GUI vs SA command line?

Ok so I did a "normal" Test: spamassassin -D -t E2BCB10005E.A7EEA &> /tmp/dkimornot and one like this: sudo su postfix -p -c 'spamassassin -D -t -d -p /etc/MailScanner/spamassassin.conf E2BCB10005E.A7EEA &> /tmp/dkimornot-su-postfix' dkimornot Content analysis details: (-7.7 points...
by ovizii
11 May 2017 12:46
Forum: Discussion
Topic: How come I get different Sa scores from EFA GUI vs SA command line?
Replies: 8
Views: 5313

How come I get different Sa scores from EFA GUI vs SA command line?

So EFA GUI shows: Spam Report: Score Matching Rule Description -1.00 ALL_TRUSTED Passed through trusted hosts only via SMTP -3.50 BAYES_00 Bayes spam probability is 0 to 1% -1.50 BAYES_WL Bayes Whitelist everything up to 4% -2.50 BAYES_ZERO Bayes 0 percent SPAM 0.30 C_RFC_WHOIS Domain with imprecise...
by ovizii
11 May 2017 09:59
Forum: Discussion
Topic: Need HELP setting up EFA for outgoing emails
Replies: 13
Views: 9708

Re: Need HELP setting up EFA for outgoing emails

Exchange is both a relay (it sends mail from clients to the outside world) and a trusted computer - assuming you think your exchange server is not compromised and sending out junk which is why we add it to both networks. So the requirement to scan outgoing emails for SPAM is to catch an outbreak if...
by ovizii
11 May 2017 09:16
Forum: Discussion
Topic: Need HELP setting up EFA for outgoing emails
Replies: 13
Views: 9708

Re: Need HELP setting up EFA for outgoing emails

pdwalker wrote: 11 May 2017 08:42 Your configuration looks correct as far as I can tell, and no, your exchange server should be in both internal_networks and trusted_networks.
So EX isn't a relay in this case? I wasn't sure what exactly counts as a relay. my EX relays messages from all internal clients and from my webserver.
by ovizii
11 May 2017 08:54
Forum: Discussion
Topic: Need HELP setting up EFA for outgoing emails
Replies: 13
Views: 9708

Re: Need HELP setting up EFA for outgoing emails

The changes aren't live yet. I saw your PM will reply as soon as I can, thanks!
by ovizii
11 May 2017 07:03
Forum: How-to
Topic: Has anyone successfully used add_header?
Replies: 6
Views: 4135

Re: Has anyone successfully used add_header?

also tried this one and no headers get added.

Code: Select all

add_header all RelaysUntrusted _RELAYSUNTRUSTED_ 
details: https://wiki.apache.org/spamassassin/TrustPath
by ovizii
11 May 2017 06:50
Forum: Discussion
Topic: Need HELP setting up EFA for outgoing emails
Replies: 13
Views: 9708

Re: Need HELP setting up EFA for outgoing emails

Thanks for looking into this. Here are a few more facts I stumbled upon: at some point, All_Trusted seems to have worked for me as I see this in my SA rule hits report: ALL_TRUSTED Passed through trusted hosts only via SMTP -1.00 56 56 100 0 0 I know about trusted_networks and internal_networks and ...
by ovizii
10 May 2017 17:26
Forum: Discussion
Topic: Need HELP setting up EFA for outgoing emails
Replies: 13
Views: 9708

Re: Need HELP setting up EFA for outgoing emails

I just noticed that even sending from outlook within my company network, straight to EX then EFA I don't get ALL_TRUSTED status :-/
by ovizii
10 May 2017 17:24
Forum: Discussion
Topic: Need HELP setting up EFA for outgoing emails
Replies: 13
Views: 9708

Re: Need HELP setting up EFA for outgoing emails

Thanks, much appreciated. Well, I don't want to "cheat" ;-) besides, that is what I did by stopping to scan outgoing emails for SPAM. here's an example: a user with his laptop, out in the wild, sending through our in-house EX using RPC over HTTPS so EFA sees the message go from his dial-up...
by ovizii
10 May 2017 10:38
Forum: Discussion
Topic: Need HELP setting up EFA for outgoing emails
Replies: 13
Views: 9708

Need HELP setting up EFA for outgoing emails

Currently EFA scans incoming emails just fine and to avoid my outgoing emails getting marked as SPAM I have told EFA to only check outgoing emails for viruses and NOT SPAM. This was however only a workaround and I do want to check outgoing emails for SPAM to prevent an outbreak in case a client PC g...
by ovizii
10 May 2017 09:53
Forum: Discussion
Topic: Ditch mod_security?
Replies: 8
Views: 6141

Re: Ditch mod_security?

I can't vote either but you have my YES.

Also, any particula reason for using Apache? Could it not be replaced by nginx with php5_fpm?
by ovizii
10 May 2017 09:52
Forum: Discussion
Topic: efa settings domain and ip
Replies: 4
Views: 3303

Re: efa settings domain and ip

Those settings are saved into /etc/postfix/transport so you coudl check the postfix documentation for that file.

maybe as a workaround something like
example.com smtp:bar.example

and have bar.example resolve to both IPs so no matter which server goes down things will work?
by ovizii
09 May 2017 06:09
Forum: Discussion
Topic: Quick question regarding FCrDNS
Replies: 3
Views: 3003

Re: Quick question regarding FCrDNS

forward confirmed reverse DNS. I think I've figured it out. Apparently the recipient receives my hello, then does check if there is an A record pointing to the IP I am sending from. After that it checks if there is a PTR record for the sending IP returning the hostname I announced via the helo. and ...
by ovizii
08 May 2017 07:07
Forum: Discussion
Topic: Quick question regarding FCrDNS
Replies: 3
Views: 3003

Quick question regarding FCrDNS

I've gotten a bit confused here, can someone please help me figure out what exactly is checked when a FCrDNS is done? i.e. I am sending an email to recipient A. When A checks my server's FCrDNS does it check simply based on the IP I am sending from or does it take into account what's inside my /etc/...
by ovizii
05 May 2017 09:24
Forum: How-to
Topic: Installation F-Prot Free Antivirus to scan attachements
Replies: 38
Views: 693892

Re: Installation F-Prot Free Antivirus to scan attachements

figured it out, edit reports.php and add:
$filter->AddReport("virus-stats.php", "Virus Statistics");
by ovizii
05 May 2017 09:17
Forum: How-to
Topic: Installation F-Prot Free Antivirus to scan attachements
Replies: 38
Views: 693892

Re: Installation F-Prot Free Antivirus to scan attachements

Thanks, I've put this into /var/www/html/mailscanner/virus-stats.php and I can open it and it works but how would I add it to mailwatch's menu so I don't have to always open the URL directly?
by ovizii
05 May 2017 07:22
Forum: How-to
Topic: [howto] Installing and using opendkim with EFA 3.0.0.7
Replies: 54
Views: 558148

Re: [howto] Installing and using opendkim with EFA 3.0.0.7

Sorry for this oversight, I had enquired about DKIm in a few threads. What finally got it working (not sure which one) was stopping any kind of signing emails and changing my DKIM key to 1024 as I had read some DNS servers having problems with a 2048 bit key. All working now.
by ovizii
05 May 2017 07:20
Forum: How-to
Topic: Has anyone successfully used add_header?
Replies: 6
Views: 4135

Re: Has anyone successfully used add_header?

jepp. never changed. BUT might have to look at it again after updating (still on a slightly older version, was waiting for a more stable version of EFA)
by ovizii
03 May 2017 06:13
Forum: How-to
Topic: How to setup a some sort of backup for an email server?
Replies: 6
Views: 4531

Re: How to setup a some sort of backup for an email server?

Thanks everyone for the amazing feedback. I'm busy putting my current mail flow to paper in form of a drawing to help me visualize things. I'm almost done with my new drawing and will post both here for feedback once done.
by ovizii
26 Apr 2017 13:40
Forum: How-to
Topic: How to setup a some sort of backup for an email server?
Replies: 6
Views: 4531

Re: How to setup a some sort of backup for an email server?

Thanks for the feedback, this is exactly what I was looking for, I mean get an insight into what other people chose as their solution. let me add some more info: - management doesn't believe in cloud services so messagelabs and the likes are not an option - self-hosted would be ok-ish so say a 2nd E...
by ovizii
26 Apr 2017 11:25
Forum: How-to
Topic: How to setup a some sort of backup for an email server?
Replies: 6
Views: 4531

How to setup a some sort of backup for an email server?

just thinking out loud asking for general feedback on how others handle this issue. The scenario is this: - small company - EFA appliance in the office - MX record points to a static IP we get from our ISP which points to EFA - EFA relays incoming emails to an Exchange server on premises - Exchange ...
by ovizii
26 Apr 2017 11:06
Forum: Discussion
Topic: SASL LOGIN authentication failed
Replies: 24
Views: 24815

Re: SASL LOGIN authentication failed

And the reason I disabled the postfix and postfix-rbl fail2ban jails is most of our mail comes through the messagelabs Antivirus/Antispam filtering service. The service still lets some spam through, and the fail2pan postfix/postfix-rbl rules starts blocking it. You're right. What I did was use the ...
by ovizii
26 Apr 2017 09:16
Forum: Discussion
Topic: SASL LOGIN authentication failed
Replies: 24
Views: 24815

Re: SASL LOGIN authentication failed

To make this easy for me and maybe for others, you should copy your configuration for us with your editted rule(s). as I said above: copy jail.conf to jail.local then edit jail.local and delete everything you don't change. here is mine: https://transfer.sh/5XAfY/jail.local or https://pastebin.com/j...