HowTo test EFAv5

[markov]

Hi,

First, greate news and thanks for EFA v5 beta ...
I don't know where to this topic (no EFA v5 Bugs), so I put it here ...

I successfully install EFA v5 on top of Rocky Linux 9.
After initial configuration I type "OK"

and get this errors:
[eFa] - Starting MariaDB and Configuring
/usr/bin/mysqladmin: connect to server at 'localhost.localdomain' failed
error: 'Host '127.0.0.1' is not allowed to connect to this MariaDB server'
ERROR 1067 (42000) at line 58: Invalid default value for 'lastsent'

and

[eFa] - Setting IP settings
cp: cannot stat '/etc/sysconfig/network-scripts/ifcfg-ens33': No such file or directory
[eFa] - Error initializing system! Please try again...

In Rocky Linux 9 all network profiles are stored in "/etc/NetworkManager/system-connections/" and not in "/etc/sysconfig/network-scripts/"

How to go around this ...

[shawniverson]

Thank you for testing. I will be working on fixing these and releasing a new version to test.

[leenooks]

I just tried EFAv5 and came across the same issue... I'll look out for the fix and try again..

[wstemb]

Installed Centos Stream9 server.

All network connection definitions on my Centos stream 9 server (no GUI) have to be administered through NetworkManager (nmcli). The connection definitions are in the /etc/NetworkManager/system-connections directory.

The efa-Configure scripts and Menus (4 - IP settings) are trying to access and modify /etc/sysconfig/network-scripts/ifcfg-ens192, which do not exist on the server, producing a lot of errors and changing/creating wrong files.

Looking at the github, it is obvious you are still using sysconfig/network-scripts interface configuration definitions, now abandoned for NetworkManager.

The Centos Stream 8 installation I have in production is still using ifcfg network-scripts.
Do you want us to switch back from NM to ifcfg, or the changes in scripts toward NetworkManager are in the timeline?

[shawniverson]

I am working on switching over to NetworkManager.

[ajmind]

Today installed on Rocky Linux 9 server. Sofar no problem detected.

I will copy step by step my individual settings from my eFav4 production box.

Should I test something specific?

[ajmind]

After reboot I found this message at Cli:

Code: Select all

 systemd-sysv-generator[595]: SysV service '/etc/rc.d/init.d/adcc' lacks a native systemd unit file. Automatically generating a unit file for compatibility. Please update package to include a native systemd unit file, in order to make it more safe and robust.

I will now transfer my setting from production EFav4 box and test further...

Need to install additionally

Code: Select all

postfix-ldap

due to recipient verification via AD ldap server.

Update:

Had to fiddle with the new openssl version as my internal exchange server 2010 is not compatible with this new version.
For me no problem as this connection is only internally used, so I could exclude STARTTLS and use plain SMTP.

The relay information in mailwatch is again missing as reported here:
viewtopic.php?t=5052

End of next week I start a bigger test during the weekend in other to check the incoming SPAM situation.

[Aryfir]

Got a chance to try eFa version 5 on VM

Install it using Rocky 9.3 and AlmaLinux 9.4, both of them have similar error:

Code: Select all

2024.05.07-16:18:16 - System Updated
2024.05.07-16:18:16 - Installing eFa packages (This can take a while)
Last metadata expiration check: 0:00:02 ago on Tue May  7 16:18:14 2024.
Error:
 Problem: cannot install the best candidate for the job
  - nothing provides spamassassin >= 4.0.1-2 needed by eFa-5.0.0-5.eFa.el9.noarch from eFa5-test
(try to add '--skip-broken' to skip uninstallable packages or '--nobest' to use not only best candidate packages)
2024.05.07-16:18:17 - eFa5 Installed
2024.05.07-16:18:17 - ============  EFA5 BUILD SCRIPT FINISHED  ============
2024.05.07-16:18:17 - ============  PLEASE REBOOT YOUR SYSTEM   ============
Do you wish to reboot the system now? (Y/N):

sudo bash build.bash testing --nobest got same error

so try to install spamassassin independently but the version is:

• spamassassin x86_64 4.0.0-3.eFa.el9 eFa5-test 1.3 M

which is not suitable for eFa version 5 because it needs >= 4.0.1-2 CMIIW

Any clue about this...

BR
Aryfir

[e-d-i-t]

Yep, got the same error after clean install of Rocky 9.3
- nothing provides spamassassin >= 4.0.1-2 needed by eFa-5.0.0-5.eFa.el9.noarch from eFa5-test

Good to know that trying Alma gives the same error, saves me the trouble of trying.

[e-d-i-t]

Switched to install with option "dev" instead of "testing" and it seems to install everything including spamassasin 4.0.1.2

So maybe a package is missing somewhere?

Maybe try:

sudo bash build.bash dev

[Aryfir]

Thank you very much for the hints,

I am just hesitant, cause the word of dev is little bit scary that means whole package is still under heavy development.

If Mr. Shawn Iverson release it under testing then i feel much relieve

But anyway,........You only live once.... i will try tomorrow

TIA,
Aryfir

[e-d-i-t]

Well, it was after viewing the install script just to figure out how it is installed.
There I saw the option "dev", and like The Young Ones - "What does this button do?!"

Webmin is missing though, but you can always install that one manually if you really want it. (not needed ofcourse)

[e-d-i-t]

Seems to me it has to do with which distro you use.
Tried to install it on RHEL 9 and then you will get more of these errors stating missing minimum versions

So, @Shawn?
Which distro do you use originally? I might as well download that ISO for my VM

[shawniverson]

Sorry about that, I uploaded Spamassassin 4.0.1 to test.

I don't recommend using dev. I will likely break your install as I work on things!

[e-d-i-t]

No Problem! I reinstalled dozens of attempts, just finished configging EFA5, but will reinstall again tomorrow.

In the meantime also attempting to create a mailserver to replace the Zimbra 8 OSE which is discontinued...
But that's a pain in the... iRedMail free script is fun but not really a good base to alter and expand yourself...
Doing the manual steps postfixadmin, postfix, dovecot, amavisd, MariaDB, nginx, SOGo... Just need a good replacement of Rspamd (webgui trouble) and some tool to manage alias based distribution lists with allowed senders.. Nah, basically an Exchange replacement though...

Seems like I'm having fun with Linux this week on Hyper-V

[pdwalker]

In the meantime also attempting to create a mailserver to replace the Zimbra 8 OSE which is discontinued...

have you consider mailinabox?

[e-d-i-t]

I have seen it listed somewhere.
Now I read about it, my main goal is managed distribution list based on postfix aliases and act as back-end server.
I've got EFA as front-end so no need for Let'sEncrypt on the back-end as all web stuff is behind the revprox.

Thanks for the tip though, but I want to run it from home because I can

[ajmind]

Is this problem solved with the the recent update?


The relay information in mailwatch is again missing as reported here:

viewtopic.php?t=5052

[shawniverson]

Is this problem solved with the the recent update?

I checked my instance and am able to see the relay information. Please let me know if you do not see it.

[ajmind]

Hi Shawn,

the problem is now gone

Another question for guidance. I wanted to move the quarantine folder to a separate disk on my VM. This resultet in this message:

Code: Select all

MailScanner[4657]: writing to /MailScanner-quarantine/20240508/nonspam/4VZGJK1Hyyz2bVWF: No such file or directory

Seems to be a missing write permission, but how to correct it?

Code: Select all

[root@it1mailgw5 ~]# ls -al /var/spool/MailScanner/quarantine/
insgesamt 0
drwxrwxr-x. 5 postfix mtagroup  54  8. Mai 15:09 .
drwxr-xr-x. 9 root    root     129 25. Apr 15:34 ..
drwxrwx---. 3 postfix mtagroup  21 23. Apr 11:25 20240423
drwxrwx---. 3 postfix mtagroup  21 24. Apr 11:47 20240424
drwxrwx---. 4 postfix mtagroup  45  8. Mai 15:18 20240508
[root@it1mailgw5 ~]# ls -al /MailScanner-quarantine/
insgesamt 4
drwxrwxrwx.  2 postfix mtagroup 4096  8. Mai 15:20 .
drwxrwxr-x. 19 root    root      265  8. Mai 15:21 ..
[root@it1mailgw5 ~]#

[shawniverson]

Another question for guidance. I wanted to move the quarantine folder to a separate disk on my VM. This resultet in this message:

Code: Select all

MailScanner[4657]: writing to /MailScanner-quarantine/20240508/nonspam/4VZGJK1Hyyz2bVWF: No such file or directory

Seems to be a missing write permission, but how to correct it?

Your problem is likely SELinux, since you changed the path of the quarantine directory. If you look in /var/log/audit/audit.log you'll likely see a lot of denied operations.

[Aryfir]

Hi Shawn,

I've been testing for the last 3 days, there are a few issues I'd like to report:

1). ClamAV does not update automatically so I have to run freshclam manually

2). Quarantine Report is useful for detecting false positive spam, I have changed the email address in /var/www/html/mailscanner/conf.php to a valid email address then ssh root:

Code: Select all

/usr/bin/mailwatch/tools/Cron_jobs/mailwatch_quarantine_report.php

but still have not received the email.
Check cron.daily, there is mailwatch script over there. Would like to help find the problem by reporting from log file, but i can not find it.

3. certbot is not included in the package, I had to run:

Code: Select all

dnf install certbot

and choose option 15 (Let's Encrypt) on the eFa Configuration Program

BR
Aryfir

[shawniverson]

Hi Shawn,

I've been testing for the last 3 days, there are a few issues I'd like to report:

1). ClamAV does not update automatically so I have to run freshclam manually

Good catch, looks like the clamav-freshclam.service isn't enabled by default anymore. Fixing.

2). Quarantine Report is useful for detecting false positive spam, I have changed the email address in /var/www/html/mailscanner/conf.php to a valid email address then ssh root:

Code: Select all

/usr/bin/mailwatch/tools/Cron_jobs/mailwatch_quarantine_report.php

but still have not received the email.
Check cron.daily, there is mailwatch script over there. Would like to help find the problem by reporting from log file, but i can not find it.

Mine is working, did you enable the quarantine report flag for the users in MailWatch?

Screenshot from 2024-05-12 09-36-00.png (6.44 KiB) Viewed 15467 times

3. certbot is not included in the package, I had to run:

Code: Select all

dnf install certbot

and choose option 15 (Let's Encrypt) on the eFa Configuration Program

Adding to the required package list.

[Aryfir]

Mine is working, did you enable the quarantine report flag for the users in MailWatch?

Screenshot from 2024-05-12 09-36-00.png

Sorry Shawn, my bad.... Feels stupid about it

Thats the reason also why when i execute /usr/bin/mailwatch/tools/Cron Jobs/mailwatch_quarantine_report.php there is no response at all...

Thanks in advance,
Aryfir

[e-d-i-t]

I guess a ' is missing just before the new password in the script.

But that's the only thing missing I guess, seems to work now, thanks!

[eFa] Please enter a root password to use for webmin:
[eFa] Please re-enter a root password to use for webmin:
sh: -c: line 1: syntax error near unexpected token `newline'
sh: -c: line 1: `/usr/libexec/webmin/bin/webmin passwd --config /etc/webmin --user root --pass >xyz<'
Error:
[eFa] Webmin is now enabled.
Press [Enter] key to continue...