Page 1 of 1

how to exclude an user from EFA scan

Posted: 06 Feb 2018 09:10
by sbergami
hello,
in my company there is an user who does not want his emails filtered by EFA, he would like all of them to arrive directly in his inbox. I tried to disable the filter from the USER MANAGEMENT menu, but in the menu there is only the user@localdomain.local and not user@webdomain.com and it does not work anyway. All users are imported from the PDC via LDAP.
Is there a way to do that?
Thank you
Kind regards

Re: how to exclude an user from EFA scan

Posted: 18 Feb 2018 12:18
by shawniverson
Simpliest way is to do a header check in postfix and bypass everything for this user.

/etc/postfix/header_checks

Code: Select all

/^To: user@example.com/ PASS
/^Received:/ HOLD
Make sure to reload postfix

Code: Select all

sudo service postfix reload
Of course, this will let everything through for this user, so you have been warned. I don't recommend doing this.

Re: how to exclude an user from EFA scan

Posted: 19 Feb 2018 14:36
by sbergami
many thanks for support.
I tried to explain the danger of exclusion, but the user is one of the owners of the company I work for, so...

Re: how to exclude an user from EFA scan

Posted: 19 Feb 2018 15:24
by sbergami
Hello
I tried to write this:
# Yorktown Heights, NY 10598, USA
#
# HEADER_CHECKS(5)
/^To: myuser@mydomain.mycountry/ IGNORE
/^Received:/ HOLD

and I also tried
/^To: myuser@myLocaldomain/ IGNORE

when postmap I recive a warning

/etc/postfix/header_checks, line 517: record is in "key: value" format; is this an alias file?

restart service is OK

but for user messages are still blocked as spam. where am I wrong?

Re: how to exclude an user from EFA scan

Posted: 20 Feb 2018 07:12
by pdwalker
What's on line 516-518?

Re: how to exclude an user from EFA scan

Posted: 20 Feb 2018 11:16
by sbergami
I'm sorry, you right. Is the line I've added

517 /^To: myuser@mydomain.mycountry/ IGNORE
518 /^Received:/ HOLD

Re: how to exclude an user from EFA scan

Posted: 20 Feb 2018 15:57
by pdwalker
Nothing on 515 or 516?

Re: how to exclude an user from EFA scan

Posted: 20 Feb 2018 23:25
by shawniverson
Try escaping the space after To: i.e. "To:\ someone@example.com"

Re: how to exclude an user from EFA scan

Posted: 21 Feb 2018 09:48
by sbergami
pdwalker, the previous lines are those of the standard file, the only thing I added is the line with the email to be excluded
shawniverson, with escape warning disappears, but messages are still blocked as spam :roll:
Thank you

Re: how to exclude an user from EFA scan

Posted: 21 Feb 2018 16:27
by shawniverson
Whoops my bad, don't postmap that thing.

Remove the header_checks.db if present in /etc/postfix and reload postfix. (I edited the above post).

Re: how to exclude an user from EFA scan

Posted: 21 Feb 2018 16:32
by shawniverson
Also, use "PASS" instead of "IGNORE"

Not at the top of my game today ... :?

Re: how to exclude an user from EFA scan

Posted: 21 Feb 2018 17:12
by sbergami
I'm sorry shawniverson,
removed header_checks.db and replaced "IGNORE" with "PASS" at end of line in header_checks
but messages still blocked
Thank you

Re: how to exclude an user from EFA scan

Posted: 21 Feb 2018 17:15
by shawniverson
Is that escape "\" present? Try it with and without.

Re: how to exclude an user from EFA scan

Posted: 21 Feb 2018 17:52
by sbergami
I've tried with and without escape "\" but nothing change

Re: how to exclude an user from EFA scan

Posted: 22 Feb 2018 15:32
by shawniverson
Did a little research on this issue....

1) We need postfix version 3.2.x for PASS functionality.

2) \@ <----must be escaped

I am wondering if IGNORE would still work, though.

Re: how to exclude an user from EFA scan

Posted: 23 Feb 2018 11:43
by sbergami
shawniverson, thank you for your support,

I noticed that the rule with IGNORE works, but the only effect it has is to remove the line To: from the header, so messages are still filtered but in the header line To: is missing. I did a research and I found this on https://posluns.com/guides/header-checks/

IGNORE will cause that particular header to be removed from the email, and will continue to process the email as normal. This can be useful in some situations. Please seethe Header Removal Guide for more information.

Is this correct to happen?

Re: how to exclude an user from EFA scan

Posted: 26 Feb 2018 13:09
by largo
Hi
Have you tested whitelisting this user
Just put in
from: default
to: user@domain.com

Re: how to exclude an user from EFA scan

Posted: 26 Feb 2018 18:32
by sbergami
HI largo, thank you
yes, but don't work. :|

Re: [Solved] how to exclude an user from EFA scan

Posted: 02 Mar 2018 16:00
by sbergami
HI,
largo was right, and I was in a hurry to check workaround, whitelist from: default and to: usermail works!
Many thanks to everyone

Re: how to exclude an user from EFA scan

Posted: 02 Mar 2018 19:01
by largo
Glad that you solved it.
/Largo