efa-project.org

ow_outgoing_recipient is a table that is filled with email addresses when someone internal send a mail to these when someone send a message from these email and have spfok from one of these is GOOD ow_outgoing_messageid if filled when someone internal send email and contain your Exchange generated m...

yes i think you must work on it

Plugin never changed
I am not able to support you in this, plugin is very self made
You need to see the format of mesaageid from your Exchange if changed

yes, they are based on real case so hit is 100%

1 ) it is limited to at most 4 requests of any nature in any given 1 minute time frame. 2 ) The public API is a free service, available for any website or application that is free to consumers. The API must not be used in commercial products or services, it can not be used as a substitute for antivi...

Here is the site of this big project by Cisco
https://www.talosintelligence.com/

Someone know how to query it ?

yes,
there are not a lot of hits because this is non a rbl
this is email address based so it have few entries but these are sure that is spam

Only 11 hits in the weekend but absolutely no false positive, i ' ll increase score to 3.00

Hi,
This is done automaticaly by antivirus that scans each message
EFA includes CLAM but if you want is very easy to add SOPHOS so you can have 2 engines

Take a look to this
https://msbl.org

here 2 config files to put in /etc/mail/spamassassin
http://msbl.org/tools/sa-hashbl.tar.gz

I installed it 1 hour ago and i have no hits at the moment

Ciao, finalmente un italiano, se vuoi ti passo il mio imbattibile plugin fatto in casa

Another useful thing is to use SHORTCIRCUIT
i put in email my example

You can put internal IP in mailscanner whitelist from mailscanner panel
This is the effect

I think yes, for this reason i take enabled

try this in your local.cf and then search message fired it hit a lot of messages and all are spam or newsletter ## BLACKLIST dnsbl.abyan.es header C_RBL_ABYAN_ES eval:check_rbl('dnsbl.abyan.es-lastexternal', 'dnsbl.abyan.es.') describe C_RBL_ABYAN_ES Listed in dnsbl.abyan.es tflags C_RBL_ABYAN_ES ne...

can you send me a mail to nicola.piazzi@gruppocomet.it so i send you a reply ?

My mailserver is 10.1.1.126 so I write the first part 10.1.
To use ow efa must be the gateway of incoming and outgoing email

The page http://saplugin.16mb.com is now updated with new plugins and updated old, here an explanation : mxpf SPF and DKIM are useful to know when an incoming email domain is not spoofed, unfortumately not all people use it I found that using both is possible to hit about 55% of incoming emails. Mxp...

a little change to test first external network , this solves internal ipv6 address that give a problem
ipv6 is not supported by plugin

Here an efficient blacklisting and whitelisting

This is BL :
http://dnsbl.inps.de/index.cgi?lang=en&site=00004

This is WL :
http://dnswl.inps.de/index.cgi?lang=en&site=00004

WL has an error so you can load attached CF that is correct to use

It can be useful to weite a plugin that query for this database using the given key


https://www.projecthoneypot.org/httpbl_api.php

This is COMODO ANTIVIRUS FOR LINUX & EMAIL GATEWAY
It is free and seems powerful
https://www.comodo.com/home/internet-se ... -linux.php

Is omeone able to install it in nonresident mode and write a wrapper to integrate it with mailscanner ?

OW plugin give a bonus score to legitimate mail, is very very useful because it learn from email that you send
Used in conjunction to mxpf it can hit near 80% of legitimate incoming emails

I updated ow plugin with a workaround, please download and replace ow.pm with this new one if you use it

http://saplugin.16mb.com/

take a look of this and write me if it help you
http://saplugin.16mb.com/