First time using EFA for outgoing, need some help

Questions and answers about how to do stuff
Post Reply
ovizii
Posts: 463
Joined: 11 May 2016 08:08

First time using EFA for outgoing, need some help

Post by ovizii »

So if I am not inside my company and use Exchange OWA to send an email to another external address EFA applies scores to it:

Code: Select all

192.168.200.3	(Reverse Lookup Failed)	(GeoIP Lookup Failed)	[  ]	[  ]	[  ]	[  ]
fe80::a064:3331:2355:92eb	(Reverse Lookup Failed)	(GeoIP Lookup Failed)	[  ]	[  ]	[  ]	[  ]
51.254.xxx.83	charxxx.ict-consult.co.za	France
This is me on my PC in France, sending via our internal Exchange server 192.168.200.3 which uses EFA as outgoing relay. 192.168.200.3 is on the whitelist on my EFA and yet it gets checked as EFA looks at my French IP !? Is that supposed to work this way? What if someone sends an email from their mobile device? I had hoped EFA would stop scanning the mails it receives from my Exchange server.

Code: Select all

Score	Matching Rule	Description
-0.57	AWL	 
0.00	HTML_MESSAGE	 
0.00	MIME_HTML_MOSTLY	 
-0.00	RCVD_IN_DNSWL_NONE	 
1.27	RDNS_NONE	 
0.00	TVD_SPACE_RATIO
Any other hints and tips for outgoing emails? Up to right now I never used EFA for outgoing.

Also interested in your architecture; mine looks like this:

Code: Select all

internet => firewall => EFA (in DMZ) => EXCHANGE (in internal network)
and I am also having trouble as EFA needs no use my internal DNS to resolve and successfully hand over the emails to the EX server. How do you guys handle this? As a workaround I can add a fixed entry into /etc/hosts and point to my internal IP for the EX.

How do you guys name your machines if they are in your DMZ? Do you use FQD or local domain names for EFA?
I tried using a FQDN and then adding my local efa.my.domain.tld I am using in my local network into /etc/hosts but I am very unsure if this is the right way to do things :-/
ovizii
Posts: 463
Joined: 11 May 2016 08:08

Re: First time using EFA for outgoing, need some help

Post by ovizii »

I have solved this for now by editing: /etc/MailScanner/rules/scan.messages.rules

and inserting:

From: 192.168.200.3 virus

so that outgoing emails from my Exchange server are only scanned for viruses not SPAM.
Post Reply