an't send out with attachement

[jamerson]

Dear All,
we have configured the EFA as our mx records to send and recieve the emails, however when user try to send sometimes files using winzip/winrar its blocks the files,
is this a normal behaivor ?

[pdwalker]

Possibly, depending on how the system is configured.

Can you post the actual block message? That'll tell us exactly what is happening and then we can figure out how to fix your problem.

[henk]

I had the same issues on my (zarafa)mailserver when adding winzip/winrar files thru the webclient(http). ( i don't use efa for outbound mail)

If you have modsecurity enabled: take a look in: /var/log/httpd/modsec_audit.log and /var/log/httpd/error.log for errors.

To bypass modsecurity I disabled: base_rules/modsecurity_crs_50_outbound.conf
(remove from it from: /etc/httpd/modsecurity.d/activated_rules)

and added a content types in /etc/httpd/modsecurity.d/security_crs.conf

'application/x-www-form-urlencoded|multipart/form-data|text/xml|application/xml|application/x-amf|application/json|application/vnd.ms-sync.wbxml|application/x-httpd-php'

Disable modsecurity is another option

[jamerson]

Thank you guys for your answers,
the block is often and not always.
also what we noticed when a normal users is strying to send a email, a normal email with txt its error

Code: Select all

Received: from filter.domain.com (mail.domain.com [192.168.4.5])
     (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits))
     (No client certificate requested)
     by filter.domain.com (Postfix) with ESMTPS id 33BFF400EB
     for <p.artz@naturana.nl>; Wed, 6 Dec 2017 09:49:35 +0100 (CET)
Received: from EX02.domain.com (192.168.4.5) by EX02.domain.com
(192.168.4.5) with Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.1261.35; Wed, 6 Dec
2017 09:49:08 +0100
Received: from EX02.domain.com ([::1]) by EX02.domain.com ([::1])
with mapi id 15.01.1261.035; Wed, 6 Dec 2017 09:49:08 +0100
From: Joop Uyl <julien@VGZ.com>
To: Peter Artz <p.artz@naturana.nl>
Subject: RE: modellen
Thread-Topic: modellen
Thread-Index: AdNtGF4cflWclkvjSneeUpR/DiUmcwBSfL6AAAL58sA=
Date: Wed, 6 Dec 2017 08:49:08 +0000
Message-ID: <d1d9c70ccda2413fb67395b2b31a4367@VGZ.com>
References: <3afdbbf9d9974480a6c1692aec14c313@VGZ.com>
<002d01d36e6a$b351fd40$19f5f7c0$@naturana.nl>
In-Reply-To: <002d01d36e6a$b351fd40$19f5f7c0$@naturana.nl>
Accept-Language: nl-NL, en-US
Content-Language: nl-NL
X-MS-Has-Attach: yes
X-MS-TNEF-Correlator:
x-originating-ip: [188.204.238.34]
Content-Type: multipart/related;
     boundary="_008_d1d9c70ccda2413fb67395b2b31a4367highstreetmodelsnl_";
     type="multipart/alternative"
MIME-Version: 1.0

and the score

Code: Select all

Score	Matching Rule	Description
4	vereist	 
-2.06	AWL	Adjusted score from AWL reputation of From: address
0.00	HTML_MESSAGE	HTML included in message
0.20	ImageCerberusPLG2	 
0.50	KAM_EU	Prevalent use of .eu in spam/malware
5.00	KAM_GENERICHEALTH	Matches generic health-related advert/blurbs
1.27	RDNS_NONE	Delivered to internal network by a host with no rDNS
0.16	SHORT_HELO_AND_INLINE_IMAGE	Short HELO string, with inline image

[jamerson]

a test email to the external emails its errors out for our users, its kinda become frustraring for them.
i hope someone can advice how to get this fixed.

Code: Select all

Received: from filter.domain.com (mail.domain.com [192.168.4.5])
     (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits))
     (No client certificate requested)
     by filter.domain.com (Postfix) with ESMTPS id 5CFAA4011D
     for <joma1@joma.com>; Wed, 13 Dec 2017 16:48:03 +0100 (CET)
Received: from EX02.domain.lan (192.168.4.5) by EX02.domain.lan
(192.168.4.5) with Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.1261.35; Wed, 13 Dec
2017 16:47:30 +0100
Received: from EX02.domain.lan ([::1]) by EX02.domain.lan ([::1])
with mapi id 15.01.1261.035; Wed, 13 Dec 2017 16:47:30 +0100
From: Flanto Shipping <info@domain.com>
To: "joma1@joma.com" <joma1@joma.com>
Subject: FW: Rente 2017 Moeder
Thread-Topic: Rente 2017 Moeder
Thread-Index: AdNzMIlZcx8LNJudSqS15Xv+elWu7AA+PCdA
Date: Wed, 13 Dec 2017 15:47:30 +0000
Message-ID: <45814b0270f649959022c3002aa63821@domain.com>
References: <5B1F7937F899914DA9BC28B8BF52C21E068900EC5E96@JS-SBS.js.local>
In-Reply-To: <5B1F7937F899914DA9BC28B8BF52C21E068900EC5E96@JS-SBS.js.local>
Accept-Language: nl-NL, en-US
Content-Language: nl-NL
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-originating-ip: [62.72.193.91]
Content-Type: multipart/alternative;
     boundary="_000_45814b0270f649959022c3002aa63821flantoshippingnl_"

[henk]

This is the original message, without modifications?

If it is, you should explain your mail configuration.

we have configured the EFA as our mx records to send and recieve the emails