Search found 518 matches

by henk
06 Aug 2018 12:56
Forum: How-to
Topic: EFA mail queue - Holding emails
Replies: 4
Views: 4626

Re: EFA mail queue - Holding emails

google site:forum.efa-project.org VGAuthService

aka: viewtopic.php?t=2277
by henk
06 Aug 2018 10:42
Forum: How-to
Topic: EFA mail queue - Holding emails
Replies: 4
Views: 4626

Re: EFA mail queue - Holding emails

I saw article that this can be ignored
which article ?

Just read the next post to solve your problem. ( on page 2)
viewtopic.php?f=13&t=2928
by henk
31 Jul 2018 22:05
Forum: Introduction
Topic: Good day from South Africa
Replies: 5
Views: 5744

Re: Good day from South Africa

Hi Ebenjb, quarentined emails not there anymore That should not suprise you. 8-) Upgrading form 3.0.1.7 to 3.0.2.6 should not be a problem. You should have saved the upgrade log, as logs are our best friends. The first thing that comes to mind is available space. So cleanup your system and check you...
by henk
30 Jul 2018 08:37
Forum: 3.x Bugs
Topic: ClamAV Vulnerabilities
Replies: 43
Views: 31531

Re: ClamAV Vulnerabilities

Seems you missed some steps in this post to get rid of yara related errors. ( you can always enable it again) /etc/clamav-unofficial-sigs/master.conf yararulesproject_enabled="no" enable_yararules="no" And delete or move to backup dir from /var/lib/clamav/ Code: Select all rm /va...
by henk
30 Jul 2018 08:32
Forum: Introduction
Topic: Good day from South Africa
Replies: 5
Views: 5744

Re: Good day from South Africa

If there is no .my.cnf file for root, containing credentials, you need to pass them from the EFA-Config [client] user=root password=your EFA-Config root pwd or mysqlcheck --all-databases -a -uroot -p`grep ROOT /etc/EFA-Config | awk -F: '{print $2}'` The MySql log is always a nice place to start
by henk
30 Jul 2018 08:15
Forum: 3.x Bugs
Topic: Unbound cache ttl
Replies: 0
Views: 4229

Unbound cache ttl

My gateway died tonight, resulting in a massive amount of messages from monitoring. Monitoring works best when you are awake :) After fixing the gateway, unbound was still unable to query dns. Any other host had no issues, since they use different dns servers. I sure like to know if someone had the ...
by henk
28 Jul 2018 10:04
Forum: How-to
Topic: How block host ip from a whole country?
Replies: 1
Views: 2222

Re: How block host ip from a whole country?

To block countries or ip's, you could use SpamAssassin, and leave postfix untouched.
viewtopic.php?&t=2659
Due the assigned score the message is moved to quarantaine.

Make sure your dns (unbound) is working fine to avoid discussion on performance isues...
by henk
28 Jul 2018 09:22
Forum: How-to
Topic: migration of E.F.A to a new hosting
Replies: 1
Views: 1923

Re: migration of E.F.A to a new hosting

To get some ideas:take a look at viewtopic.php?&t=3096
by henk
25 Jul 2018 07:26
Forum: 3.x Bugs
Topic: ClamAV Vulnerabilities
Replies: 43
Views: 31531

Clamav 100.1-1 - ClamAV Vulnerabilities

Clamav 100.1-1 available. yum list clamav Installed Packages clamav.x86_64 0.100.0-1.el6 @epel Available Packages clamav.i686 0.100.1-1.el6 epel clamav.x86_64 0.100.1-1.el6 epel after update: run freshclam -v and sa-update -v check clamav service clamd restart Stopping Clam AntiVirus Daemon: [ OK ] ...
by henk
24 Jul 2018 13:48
Forum: Discussion
Topic: Upgrading from 3.0.0.8
Replies: 2
Views: 2672

Re: Upgrading from 3.0.0.8

you did try

Code: Select all

yum-complete-transaction
as mentioned in the log?

Upgrading from 3008......
by henk
24 Jul 2018 13:40
Forum: 3.x Bugs
Topic: mail issues after update
Replies: 2
Views: 3002

Re: mail issues after update

take a look at viewtopic.php?&t=3010

it will solve this issue to I quess.

Howto to search this forum: viewtopic.php?t=2974
by henk
24 Jul 2018 13:29
Forum: 3.x Bugs
Topic: Release: error code 75 returned from Sendmail
Replies: 10
Views: 8262

Re: Release: error code 75 returned from Sendmail

just as dwagner stated:

change to valid email adress. ( you know how to use vi editor?)

Code: Select all

vi /var/www/html/mailscanner/conf.php
and change MAILWATCH_FROM_ADDR as mentioned.

Code: Select all

// Change with a fully qualified email address
define('MAILWATCH_FROM_ADDR', 'valid_email@example.com');
by henk
14 Jul 2018 21:42
Forum: 3.x Bugs
Topic: Issue with clamd upgrade to 0.100.0-1
Replies: 4
Views: 4076

Re: Issue with clamd upgrade to 0.100.0-1

Just read (on the last page) my upgrade steps. viewtopic.php?f=13&t=2928&start=25#p12163
by henk
14 Jul 2018 21:38
Forum: 3.x Bugs
Topic: ClamAV Vulnerabilities
Replies: 43
Views: 31531

Re: ClamAV 0.100.0 available

As there is already version 0.100.1, upgrading to 0.100.0 is still recommended. It contains many code submissions from the ClamAV community. https://github.com/Cisco-Talos/clamav-devel/blob/dev/0.101/NEWS.md My upgrade steps. Check for updates yum check-update Make backup :lol: As I dont like cronjo...
by henk
18 Jun 2018 23:04
Forum: How-to
Topic: Unable to release some blocked messages
Replies: 26
Views: 25576

Re: Unable to release some blocked messages

Hi Bob

Just look at MailScanner.conf as mentioned in the comments above, aka do you store the bad content mail or not (move to Quarantine)
remember to restart mailscanner

And read EFAai's comment as he did mention some additional issues when using Exchange.
by henk
11 Jun 2018 11:22
Forum: Discussion
Topic: Some ideas for new features for V4
Replies: 11
Views: 10319

Re: Some ideas for new features for V4

Before you decide to use encrypted email, I would read this first: https://thehackernews.com/2018/05/pgp-smime-email-encryption.html Link to: Breaking S/MIME and OpenPGP Email Encryption.pdf https://efail.de/efail-attack-paper.pdf SeppMAIL : https://www.seppmail.com/secure-email/email-encryption/
by henk
28 May 2018 22:30
Forum: How-to
Topic: Sender verify failed
Replies: 7
Views: 4546

Re: Sender verify failed

Somehow its difficult to understand the nature of this issue, is it you, the supplier or both? I have a perl script that keeps the recipient list updates out of my AD regularly, So there is no issue in missing recipients due the update interval? I assume ( there we go again :roll:) you did read/try ...
by henk
26 May 2018 07:52
Forum: How-to
Topic: EFA Unbound and reverse DNS.
Replies: 5
Views: 9250

bug-fix EFA Unbound and reverse DNS.

Had some strange issues resolving some local dns names on EFA. The check: https://forum.efa-project.org/viewtopic.php?t=3032 As EFA uses 127.0.0.1 as nameserver, and Unbound uses conditional forwarding to the pfsense box or the samba4 box, it's strange that it works in this last example. ( there is ...
by henk
25 May 2018 10:09
Forum: Discussion
Topic: EFA corrupting pdf files with extension .PDF and .PDF.pdf
Replies: 9
Views: 12060

Re: EFA corrupting pdf files with extension .PDF and .PDF.pdf

Please post the complete message detail of this mail. As clamav does not modify attachments, as far as I know. Take al look at https://forum.efa-project.org/viewtopic.php?t=3102 --the sa-learn part- replacing filename / date/message-ID. sa-learn -D --spam /var/spool/MailScanner/quarantine/20180522/...
by henk
23 May 2018 10:47
Forum: How-to
Topic: How to use DNSBL and check DNS/trust/etc issues
Replies: 0
Views: 5733

How to use DNSBL and check DNS/trust/etc issues

As I cannot use postfix to reject mail(using fetchmail and Dovecot on EFA), but still want to catch spam from blocklists, there is a quite simple way to configure this outside postfix. (besides the options you can use in /etc/mail/spamassassin) You can also use this in the 'normal' EFA setup. Do NOT...
by henk
23 May 2018 07:22
Forum: Discussion
Topic: EFA corrupting pdf files with extension .PDF and .PDF.pdf
Replies: 9
Views: 12060

Re: EFA corrupting pdf files with extension .PDF and .PDF.pdf

You did restart MailScanner? It's a bit strange that no other EFA user reported this behaviour. Seems you are the only one having this issue. To be sure: By corrupted you mean unreadable or moved to quarantaine? last thing I can think off: In your log an HTML tag is found. To be sure, you can tempor...
by henk
22 May 2018 06:58
Forum: Discussion
Topic: New firewall, now massive increase in spam. (Received From IP has changed)
Replies: 5
Views: 3778

Re: New firewall, now massive increase in spam. (Received From IP has changed)

As you mention you installed a new SonicWall firewal, meaning replacing? Trusting the wrong network: ALL_TRUSTED score Just read this in to get some ideas :idea: /etc/MailScanner/spamassassin.conf # Steve@fsl.com edit Sun Jan 16 12:17:16 CST 2005 # disable the ALL_TRUSTED ruleset that comes with SA ...
by henk
21 May 2018 09:08
Forum: Discussion
Topic: EFA corrupting pdf files with extension .PDF and .PDF.pdf
Replies: 9
Views: 12060

Re: EFA corrupting pdf files with extension .PDF and .PDF.pdf

Hi Rapid, As only some domains have this issue, you could first try modifying your TNEF decoder settings in /etc/MailScanner/MailScanner.conf to get the root cause of this issue. TNEF Contents = replace ==> Use TNEF Contents = no for the source that sends you problematic TNEF attachments. Password p...
by henk
19 May 2018 10:16
Forum: How-to
Topic: NEW SETUP IDEA, NEED TO KNOW IF ITS POSSIBLE
Replies: 4
Views: 3392

Re: NEW SETUP IDEA, NEED TO KNOW IF ITS POSSIBLE

To get the idea, I'm a bit lost in the translation to Dutch. Could be me, having my regular bad day. :doh: I am a hardcore windows guy (i know, i know) but everytime i use Linux/Unix i break something without even knowing it and want to pull my hair out. Somehow moving from Windows to Linux stopped ...