HowTo test EFAv5

General eFa discussion
markov
Posts: 7
Joined: 12 Apr 2018 08:35

HowTo test EFAv5

Post by markov »

Hi,

First, greate news and thanks for EFA v5 beta ...
I don't know where to this topic (no EFA v5 Bugs), so I put it here ...

I successfully install EFA v5 on top of Rocky Linux 9.
After initial configuration I type "OK"

and get this errors:
[eFa] - Starting MariaDB and Configuring
/usr/bin/mysqladmin: connect to server at 'localhost.localdomain' failed
error: 'Host '127.0.0.1' is not allowed to connect to this MariaDB server'
ERROR 1067 (42000) at line 58: Invalid default value for 'lastsent'

and

[eFa] - Setting IP settings
cp: cannot stat '/etc/sysconfig/network-scripts/ifcfg-ens33': No such file or directory
[eFa] - Error initializing system! Please try again...

In Rocky Linux 9 all network profiles are stored in "/etc/NetworkManager/system-connections/" and not in "/etc/sysconfig/network-scripts/"

How to go around this ...
User avatar
shawniverson
Posts: 3683
Joined: 13 Jan 2014 23:30
Location: Indianapolis, Indiana USA
Contact:

Re: HowTo test EFAv5

Post by shawniverson »

Thank you for testing. I will be working on fixing these and releasing a new version to test.
leenooks
Posts: 2
Joined: 04 Mar 2024 08:04

Re: HowTo test EFAv5

Post by leenooks »

I just tried EFAv5 and came across the same issue... I'll look out for the fix and try again.. :)
wstemb
Posts: 14
Joined: 16 Mar 2022 07:35

Re: HowTo test EFAv5

Post by wstemb »

Installed Centos Stream9 server.

All network connection definitions on my Centos stream 9 server (no GUI) have to be administered through NetworkManager (nmcli). The connection definitions are in the /etc/NetworkManager/system-connections directory.

The efa-Configure scripts and Menus (4 - IP settings) are trying to access and modify /etc/sysconfig/network-scripts/ifcfg-ens192, which do not exist on the server, producing a lot of errors and changing/creating wrong files.

Looking at the github, it is obvious you are still using sysconfig/network-scripts interface configuration definitions, now abandoned for NetworkManager.

The Centos Stream 8 installation I have in production is still using ifcfg network-scripts.
Do you want us to switch back from NM to ifcfg, or the changes in scripts toward NetworkManager are in the timeline?
User avatar
shawniverson
Posts: 3683
Joined: 13 Jan 2014 23:30
Location: Indianapolis, Indiana USA
Contact:

Re: HowTo test EFAv5

Post by shawniverson »

I am working on switching over to NetworkManager.
ajmind
Posts: 58
Joined: 28 Mar 2017 15:26
Location: Eltville, Germany

Re: HowTo test EFAv5

Post by ajmind »

Today installed on Rocky Linux 9 server. Sofar no problem detected.

I will copy step by step my individual settings from my eFav4 production box.

Should I test something specific?
ajmind
Posts: 58
Joined: 28 Mar 2017 15:26
Location: Eltville, Germany

Re: HowTo test EFAv5

Post by ajmind »

After reboot I found this message at Cli:

Code: Select all

 systemd-sysv-generator[595]: SysV service '/etc/rc.d/init.d/adcc' lacks a native systemd unit file. Automatically generating a unit file for compatibility. Please update package to include a native systemd unit file, in order to make it more safe and robust.
I will now transfer my setting from production EFav4 box and test further...

Need to install additionally

Code: Select all

postfix-ldap
due to recipient verification via AD ldap server.

Update:

Had to fiddle with the new openssl version as my internal exchange server 2010 is not compatible with this new version.
For me no problem as this connection is only internally used, so I could exclude STARTTLS and use plain SMTP.

The relay information in mailwatch is again missing as reported here:
viewtopic.php?t=5052

End of next week I start a bigger test during the weekend in other to check the incoming SPAM situation.
User avatar
Aryfir
Posts: 26
Joined: 04 Sep 2020 13:52

Re: HowTo test EFAv5

Post by Aryfir »

Got a chance to try eFa version 5 on VM

Install it using Rocky 9.3 and AlmaLinux 9.4, both of them have similar error:

Code: Select all

2024.05.07-16:18:16 - System Updated
2024.05.07-16:18:16 - Installing eFa packages (This can take a while)
Last metadata expiration check: 0:00:02 ago on Tue May  7 16:18:14 2024.
Error:
 Problem: cannot install the best candidate for the job
  - nothing provides spamassassin >= 4.0.1-2 needed by eFa-5.0.0-5.eFa.el9.noarch from eFa5-test
(try to add '--skip-broken' to skip uninstallable packages or '--nobest' to use not only best candidate packages)
2024.05.07-16:18:17 - eFa5 Installed
2024.05.07-16:18:17 - ============  EFA5 BUILD SCRIPT FINISHED  ============
2024.05.07-16:18:17 - ============  PLEASE REBOOT YOUR SYSTEM   ============
Do you wish to reboot the system now? (Y/N):
sudo bash build.bash testing --nobest got same error

so try to install spamassassin independently but the version is:
  • spamassassin x86_64 4.0.0-3.eFa.el9 eFa5-test 1.3 M
which is not suitable for eFa version 5 because it needs >= 4.0.1-2 CMIIW

Any clue about this...

BR
Aryfir
e-d-i-t
Posts: 104
Joined: 27 Apr 2016 19:28
Contact:

Re: HowTo test EFAv5

Post by e-d-i-t »

Yep, got the same error after clean install of Rocky 9.3
- nothing provides spamassassin >= 4.0.1-2 needed by eFa-5.0.0-5.eFa.el9.noarch from eFa5-test

Good to know that trying Alma gives the same error, saves me the trouble of trying.
e-d-i-t
Posts: 104
Joined: 27 Apr 2016 19:28
Contact:

Re: HowTo test EFAv5

Post by e-d-i-t »

Switched to install with option "dev" instead of "testing" and it seems to install everything including spamassasin 4.0.1.2

So maybe a package is missing somewhere?

Maybe try:

sudo bash build.bash dev
User avatar
Aryfir
Posts: 26
Joined: 04 Sep 2020 13:52

Re: HowTo test EFAv5

Post by Aryfir »

Thank you very much for the hints,

I am just hesitant, cause the word of dev is little bit scary that means whole package is still under heavy development.

If Mr. Shawn Iverson release it under testing then i feel much relieve :D

But anyway,........You only live once.... i will try tomorrow

TIA,
Aryfir
e-d-i-t
Posts: 104
Joined: 27 Apr 2016 19:28
Contact:

Re: HowTo test EFAv5

Post by e-d-i-t »

Well, it was after viewing the install script just to figure out how it is installed.
There I saw the option "dev", and like The Young Ones - "What does this button do?!" :lol:

Webmin is missing though, but you can always install that one manually if you really want it. (not needed ofcourse)
e-d-i-t
Posts: 104
Joined: 27 Apr 2016 19:28
Contact:

Re: HowTo test EFAv5

Post by e-d-i-t »

Seems to me it has to do with which distro you use.
Tried to install it on RHEL 9 and then you will get more of these errors stating missing minimum versions

So, @Shawn?
Which distro do you use originally? I might as well download that ISO for my VM :D
User avatar
shawniverson
Posts: 3683
Joined: 13 Jan 2014 23:30
Location: Indianapolis, Indiana USA
Contact:

Re: HowTo test EFAv5

Post by shawniverson »

Sorry about that, I uploaded Spamassassin 4.0.1 to test.

I don't recommend using dev. I will likely break your install as I work on things!
e-d-i-t
Posts: 104
Joined: 27 Apr 2016 19:28
Contact:

Re: HowTo test EFAv5

Post by e-d-i-t »

No Problem! I reinstalled dozens of attempts, just finished configging EFA5, but will reinstall again tomorrow. :D

In the meantime also attempting to create a mailserver to replace the Zimbra 8 OSE which is discontinued...
But that's a pain in the... iRedMail free script is fun but not really a good base to alter and expand yourself...
Doing the manual steps postfixadmin, postfix, dovecot, amavisd, MariaDB, nginx, SOGo... Just need a good replacement of Rspamd (webgui trouble) and some tool to manage alias based distribution lists with allowed senders.. Nah, basically an Exchange replacement though...

Seems like I'm having fun with Linux this week on Hyper-V ;)
User avatar
pdwalker
Posts: 1564
Joined: 18 Mar 2015 09:16

Re: HowTo test EFAv5

Post by pdwalker »

e-d-i-t wrote: 07 May 2024 21:36In the meantime also attempting to create a mailserver to replace the Zimbra 8 OSE which is discontinued...
have you consider mailinabox?
e-d-i-t
Posts: 104
Joined: 27 Apr 2016 19:28
Contact:

Re: HowTo test EFAv5

Post by e-d-i-t »

I have seen it listed somewhere.
Now I read about it, my main goal is managed distribution list based on postfix aliases and act as back-end server.
I've got EFA as front-end so no need for Let'sEncrypt on the back-end as all web stuff is behind the revprox.

Thanks for the tip though, but I want to run it from home because I can ;)
ajmind
Posts: 58
Joined: 28 Mar 2017 15:26
Location: Eltville, Germany

Re: HowTo test EFAv5

Post by ajmind »

Is this problem solved with the the recent update?


The relay information in mailwatch is again missing as reported here:

viewtopic.php?t=5052
User avatar
shawniverson
Posts: 3683
Joined: 13 Jan 2014 23:30
Location: Indianapolis, Indiana USA
Contact:

Re: HowTo test EFAv5

Post by shawniverson »

ajmind wrote: 08 May 2024 10:49 Is this problem solved with the the recent update?
I checked my instance and am able to see the relay information. Please let me know if you do not see it.
ajmind
Posts: 58
Joined: 28 Mar 2017 15:26
Location: Eltville, Germany

Re: HowTo test EFAv5

Post by ajmind »

Hi Shawn,

the problem is now gone :-)

Another question for guidance. I wanted to move the quarantine folder to a separate disk on my VM. This resultet in this message:

Code: Select all

MailScanner[4657]: writing to /MailScanner-quarantine/20240508/nonspam/4VZGJK1Hyyz2bVWF: No such file or directory
Seems to be a missing write permission, but how to correct it?

Code: Select all

[root@it1mailgw5 ~]# ls -al /var/spool/MailScanner/quarantine/
insgesamt 0
drwxrwxr-x. 5 postfix mtagroup  54  8. Mai 15:09 .
drwxr-xr-x. 9 root    root     129 25. Apr 15:34 ..
drwxrwx---. 3 postfix mtagroup  21 23. Apr 11:25 20240423
drwxrwx---. 3 postfix mtagroup  21 24. Apr 11:47 20240424
drwxrwx---. 4 postfix mtagroup  45  8. Mai 15:18 20240508
[root@it1mailgw5 ~]# ls -al /MailScanner-quarantine/
insgesamt 4
drwxrwxrwx.  2 postfix mtagroup 4096  8. Mai 15:20 .
drwxrwxr-x. 19 root    root      265  8. Mai 15:21 ..
[root@it1mailgw5 ~]#

User avatar
shawniverson
Posts: 3683
Joined: 13 Jan 2014 23:30
Location: Indianapolis, Indiana USA
Contact:

Re: HowTo test EFAv5

Post by shawniverson »

ajmind wrote: 08 May 2024 13:52 Another question for guidance. I wanted to move the quarantine folder to a separate disk on my VM. This resultet in this message:

Code: Select all

MailScanner[4657]: writing to /MailScanner-quarantine/20240508/nonspam/4VZGJK1Hyyz2bVWF: No such file or directory
Seems to be a missing write permission, but how to correct it?
Your problem is likely SELinux, since you changed the path of the quarantine directory. If you look in /var/log/audit/audit.log you'll likely see a lot of denied operations.
User avatar
Aryfir
Posts: 26
Joined: 04 Sep 2020 13:52

Re: HowTo test EFAv5

Post by Aryfir »

Hi Shawn,

I've been testing for the last 3 days, there are a few issues I'd like to report:

1). ClamAV does not update automatically so I have to run freshclam manually

2). Quarantine Report is useful for detecting false positive spam, I have changed the email address in /var/www/html/mailscanner/conf.php to a valid email address then ssh root:

Code: Select all

/usr/bin/mailwatch/tools/Cron_jobs/mailwatch_quarantine_report.php
but still have not received the email.
Check cron.daily, there is mailwatch script over there. Would like to help find the problem by reporting from log file, but i can not find it.

3. certbot is not included in the package, I had to run:

Code: Select all

dnf install certbot
and choose option 15 (Let's Encrypt) on the eFa Configuration Program

BR
Aryfir
User avatar
shawniverson
Posts: 3683
Joined: 13 Jan 2014 23:30
Location: Indianapolis, Indiana USA
Contact:

Re: HowTo test EFAv5

Post by shawniverson »

Aryfir wrote: 11 May 2024 17:57 Hi Shawn,

I've been testing for the last 3 days, there are a few issues I'd like to report:

1). ClamAV does not update automatically so I have to run freshclam manually
Good catch, looks like the clamav-freshclam.service isn't enabled by default anymore. Fixing.
Aryfir wrote: 11 May 2024 17:57 2). Quarantine Report is useful for detecting false positive spam, I have changed the email address in /var/www/html/mailscanner/conf.php to a valid email address then ssh root:

Code: Select all

/usr/bin/mailwatch/tools/Cron_jobs/mailwatch_quarantine_report.php
but still have not received the email.
Check cron.daily, there is mailwatch script over there. Would like to help find the problem by reporting from log file, but i can not find it.
Mine is working, did you enable the quarantine report flag for the users in MailWatch?
Screenshot from 2024-05-12 09-36-00.png
Screenshot from 2024-05-12 09-36-00.png (6.44 KiB) Viewed 307 times
Aryfir wrote: 11 May 2024 17:57 3. certbot is not included in the package, I had to run:

Code: Select all

dnf install certbot
and choose option 15 (Let's Encrypt) on the eFa Configuration Program
Adding to the required package list.
User avatar
Aryfir
Posts: 26
Joined: 04 Sep 2020 13:52

Re: HowTo test EFAv5

Post by Aryfir »

shawniverson wrote: 12 May 2024 13:32
Mine is working, did you enable the quarantine report flag for the users in MailWatch?

Screenshot from 2024-05-12 09-36-00.png

Sorry Shawn, my bad.... Feels stupid about it

Thats the reason also why when i execute /usr/bin/mailwatch/tools/Cron Jobs/mailwatch_quarantine_report.php there is no response at all...

Thanks in advance,
Aryfir
e-d-i-t
Posts: 104
Joined: 27 Apr 2016 19:28
Contact:

Re: HowTo test EFAv5

Post by e-d-i-t »

I guess a ' is missing just before the new password in the script.

But that's the only thing missing I guess, seems to work now, thanks!

[eFa] Please enter a root password to use for webmin:
[eFa] Please re-enter a root password to use for webmin:
sh: -c: line 1: syntax error near unexpected token `newline'
sh: -c: line 1: `/usr/libexec/webmin/bin/webmin passwd --config /etc/webmin --user root --pass >xyz<'
Error:
[eFa] Webmin is now enabled.
Press [Enter] key to continue...
Post Reply