efa-project.org

Posted: **11 Dec 2017 17:05**

Dear All,
we have configured the EFA as our mx records to send and recieve the emails, however when user try to send sometimes files using winzip/winrar its blocks the files,
is this a normal behaivor ?

Posted: **12 Dec 2017 02:22**

Possibly, depending on how the system is configured.

Can you post the actual block message? That'll tell us exactly what is happening and then we can figure out how to fix your problem.

Posted: **12 Dec 2017 10:57**

I had the same issues on my (zarafa)mailserver when adding winzip/winrar files thru the webclient(http). ( i don't use efa for outbound mail)

If you have modsecurity enabled: take a look in: /var/log/httpd/modsec_audit.log and /var/log/httpd/error.log for errors.

To bypass modsecurity I disabled: base_rules/modsecurity_crs_50_outbound.conf
(remove from it from: /etc/httpd/modsecurity.d/activated_rules)

and added a content types in /etc/httpd/modsecurity.d/security_crs.conf

'application/x-www-form-urlencoded|multipart/form-data|text/xml|application/xml|application/x-amf|application/json|application/vnd.ms-sync.wbxml|application/x-httpd-php'

Disable modsecurity is another option

Posted: **13 Dec 2017 11:34**

Thank you guys for your answers,
the block is often and not always.
also what we noticed when a normal users is strying to send a email, a normal email with txt its error

Code: Select all

Received: from filter.domain.com (mail.domain.com [192.168.4.5])
     (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits))
     (No client certificate requested)
     by filter.domain.com (Postfix) with ESMTPS id 33BFF400EB
     for <p.artz@naturana.nl>; Wed, 6 Dec 2017 09:49:35 +0100 (CET)
Received: from EX02.domain.com (192.168.4.5) by EX02.domain.com
(192.168.4.5) with Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.1261.35; Wed, 6 Dec
2017 09:49:08 +0100
Received: from EX02.domain.com ([::1]) by EX02.domain.com ([::1])
with mapi id 15.01.1261.035; Wed, 6 Dec 2017 09:49:08 +0100
From: Joop Uyl <julien@VGZ.com>
To: Peter Artz <p.artz@naturana.nl>
Subject: RE: modellen
Thread-Topic: modellen
Thread-Index: AdNtGF4cflWclkvjSneeUpR/DiUmcwBSfL6AAAL58sA=
Date: Wed, 6 Dec 2017 08:49:08 +0000
Message-ID: <d1d9c70ccda2413fb67395b2b31a4367@VGZ.com>
References: <3afdbbf9d9974480a6c1692aec14c313@VGZ.com>
<002d01d36e6a$b351fd40$19f5f7c0$@naturana.nl>
In-Reply-To: <002d01d36e6a$b351fd40$19f5f7c0$@naturana.nl>
Accept-Language: nl-NL, en-US
Content-Language: nl-NL
X-MS-Has-Attach: yes
X-MS-TNEF-Correlator:
x-originating-ip: [188.204.238.34]
Content-Type: multipart/related;
     boundary="_008_d1d9c70ccda2413fb67395b2b31a4367highstreetmodelsnl_";
     type="multipart/alternative"
MIME-Version: 1.0

and the score

Code: Select all

Score	Matching Rule	Description
4	vereist	 
-2.06	AWL	Adjusted score from AWL reputation of From: address
0.00	HTML_MESSAGE	HTML included in message
0.20	ImageCerberusPLG2	 
0.50	KAM_EU	Prevalent use of .eu in spam/malware
5.00	KAM_GENERICHEALTH	Matches generic health-related advert/blurbs
1.27	RDNS_NONE	Delivered to internal network by a host with no rDNS
0.16	SHORT_HELO_AND_INLINE_IMAGE	Short HELO string, with inline image

Posted: **13 Dec 2017 15:56**

a test email to the external emails its errors out for our users, its kinda become frustraring for them.
i hope someone can advice how to get this fixed.

Code: Select all

Received: from filter.domain.com (mail.domain.com [192.168.4.5])
     (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits))
     (No client certificate requested)
     by filter.domain.com (Postfix) with ESMTPS id 5CFAA4011D
     for <joma1@joma.com>; Wed, 13 Dec 2017 16:48:03 +0100 (CET)
Received: from EX02.domain.lan (192.168.4.5) by EX02.domain.lan
(192.168.4.5) with Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.1261.35; Wed, 13 Dec
2017 16:47:30 +0100
Received: from EX02.domain.lan ([::1]) by EX02.domain.lan ([::1])
with mapi id 15.01.1261.035; Wed, 13 Dec 2017 16:47:30 +0100
From: Flanto Shipping <info@domain.com>
To: "joma1@joma.com" <joma1@joma.com>
Subject: FW: Rente 2017 Moeder
Thread-Topic: Rente 2017 Moeder
Thread-Index: AdNzMIlZcx8LNJudSqS15Xv+elWu7AA+PCdA
Date: Wed, 13 Dec 2017 15:47:30 +0000
Message-ID: <45814b0270f649959022c3002aa63821@domain.com>
References: <5B1F7937F899914DA9BC28B8BF52C21E068900EC5E96@JS-SBS.js.local>
In-Reply-To: <5B1F7937F899914DA9BC28B8BF52C21E068900EC5E96@JS-SBS.js.local>
Accept-Language: nl-NL, en-US
Content-Language: nl-NL
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-originating-ip: [62.72.193.91]
Content-Type: multipart/alternative;
     boundary="_000_45814b0270f649959022c3002aa63821flantoshippingnl_"

Posted: **13 Dec 2017 18:45**

This is the original message, without modifications?

If it is, you should explain your mail configuration.

we have configured the EFA as our mx records to send and recieve the emails

efa-project.org

an't send out with attachement

an't send out with attachement

Re: an't send out with attachement

Re: an't send out with attachement

Re: an't send out with attachement

Re: an't send out with attachement

Re: an't send out with attachement