Recent content by facyber

Hi Stoikov, Just a small final update. Ever since Pyzor is disabled, no more high CPU spikes so indeed it was causing the issue. And indeed I don't see much bigger security enabling it, I guess other filters are good enough. Thanks for the support. For everyone else just in case you need to...

I disabled pyzor soon after my last report and it does seem better again, at least for now. I will then keep watching it for a few days. I also found some people complained about same issue but yes, those were years ago. Hah wasn't aware of that, will try to search for it if there some maybe...

I forgot to mention also that the main issue is that mails are late, when I check tracking center, I see this for almost all mails as they are in queued/deferred status. delivery temporarily suspended: conversation with 127.0.0.1[127.0.0.1] timed out while receiving the initial server greeting

Hmm going through it I see only something like this that is interesting but I doubt that is the issue, as there is a lot of these: May 20 11:30:09.075 [25603] dbg: config: warning: score set for non-existent rule SCHAALIT_URI_114 May 20 11:30:09.075 [25603] dbg: config: warning: score set for...

Hi Stoiko, 1. and 3. Yes I do, but I was trying to go 100% with the recommendations in a term to not change original files, but always to use templates. In /etc/pmg/templates/v320.pre.in I enabled Rule2XSBody. 2) We also have some custom scores that we imported from the previous mail...

Hello, In the pas few days out of nowhere PMG CPU just started to be overwhelmed, 100% most of the times. First I thought it was low on resources as I searched through the forum and somebody mentioned to check that. Server had 2 CPU and 4GB of RAM, so I double it. And after that it was fine for...

Hi Stoikov, Thanks for the help. Will then check that up, that was also something we had in mind but still wanted to check to be sure. We tried this Mailprotection guidance and indeed we set only PMG IP but we were still able to send a mail that went straight to office365, not through the PMG...

Hi everyone, I was wondering if anybody (or believe it is possible to) setup that all incoming mails must go first through the PMG first then to the office 365? We tried with guidance from Mailrpotector when it comes to the Office365 configuration, but still mails can be send directly and not...

HI Stoiko, Thanks for the reply. It seems this could be indeed what we need, but we will test it of course. Cheers!

Hi everyone, Is there possibility to make filter rules based on Sanesecurity output for example? Basically we would like to separate the spam viruses which are in some cases just regular spams, and those that are actually virus, that could be detected by Sanesecurity. Something similar to the...

Hi Stokio, Yes one option would be to include full URL to the Quarantine which would also work for us, but users would need LDAP to access it (which is also fine) and the link would always be the same. You could be right, but we will see. I wanted to start with some levels and then slowly...

Hi Stoiko, We already do that for specific spam level, but this would be like higher level of spam. My idea was this to gain: 1. Spam level 0-6 is not spam 2. Spam level 6-10 is a "light" spam. Subject will be modified with SPAM but still sent to the customer (and to our specific quarantine)...

Hi oguz, As far as I see that is only in order to use different DNS for a link instead of the server name. While that is useful too, it is not what I had in mind. So there is no possibility to send instant notification with a ticket? Is there possibility to include hyperlink in the body of...

So far I found the way including a link like https://myproxmox.com:8006/quarantine#pmgSpamQuarantine but that would lead toward LDAP authentication only. I guess I am interested in possibility to include ticket link.

Hi community, Is there possibility to receive some generic mail notification about quarantined spam mail with a link to see it? For example: "Dear customer, You received this mail because our protection blocked spam or harmful message. You can review the mail on the this link. Kind regards,"...