Search results

I've taken the attachments from one of the emails, sent them to myself from Gmail and the same problem is happening. Found some more logs and it appears it is just the time taken to scan. Whilst it is rejecting the message to the sender via 451, it still processes and accepts the message...

The logs were from mail.log. The syslog gives nothing else useful. Outside what I posted above, syslog shows the following around the same time period: Mar 9 10:35:16 xxxx pmg-smtp-filter[940]: starting database maintainance Mar 9 10:35:16 xxxx pmg-smtp-filter[940]: end database...

Have already tried restarting and can confirm it is running as other mail is just fine. Also, these messages sometimes come through without error so it appears they may complete quicker. Is there anyway to add more logging to the filter to know what is happening as for the ones rejected, we're...

Mar 9 10:34:16 xxx postfix/postscreen[349]: CONNECT from [x.x.x.x]:12313 to [x.x.x.x]:25 Mar 9 10:34:16 xxx postfix/postscreen[349]: PASS OLD [x.x.x.x]:12313 Mar 9 10:34:16 xxx postfix/smtpd[612]: connect from xxx.xxx.xxx[x.x.x.x] Mar 9 10:34:16 xxx pmgpolicy[30521]: reloading configuration...

Disk is fine. This error is happening on all four of our PMG servers but only for these messages (with attachments). Every single other message is fine and sometimes it gets through but as it reports back to the sending server the error, it is resent multiple times.

Getting this error in the logs. Mar 8 22:36:10 xxx postfix/smtpd[19218]: proxy-reject: END-OF-MESSAGE: 451 4.3.0 Error: queue file write error; from=<xxxx@xxxx> to=<xxxx@xxxx> proto=ESMTP helo=<xxxxxxx> Along with Mar 8 22:36:10 xxx postfix/smtpd[19218]: warning: timeout talking to proxy...

Sure. https://bugzilla.proxmox.com/show_bug.cgi?id=3287 Right now, not many but we plan to be pushing through many (5k+) domains on a move away from a different solution.

I think the output then relies on us going through each message? Like with https://pmg.proxmox.com/pmg-docs/api-viewer/index.html#/quarantine/spam, we can send over `pmail` to show the messages by email. Where as virus and attachment don't have this field so it would be nice to search by that...

Are there any plans for you to alter the system that mails with held attachments and viruses can be searched by email address? This information would be captured on the receiving message and would then allow us to build against the API so users can see these messages and release them if required.

I think this was actually due to a cluster sync issue. All the non-master nodes were stuck in "syncing". No matter what I did I could not get that to change so rebooted them all and now things are fine. So the issue appears to be that the changes on one node (master), were not filtering through...

They are matching the mail as they appear in the mail headers but the score is not the custom one set. Have run the message through to check but no errors were seen. Are all custom scores matchable or will there be some just ignored?

We've got about 25 custom scores set via the GUI with pmg-smtp-filter reloaded via the GUI and also on the command line. Is there anyway to debug why SA is ignoring the custom scores?

Are there any plans to improve this? Having to log in to each node to check the logs/tracking/queue seems a bit add odds with the clustered nature. At least, it would be a good idea to be able to do this via the GUI to select a node like that can be done with PVE.

This does not work. The only way to work around it is disable the fw at datecentre level which means all HV nodes as well as VMs are unprotected. We'll check out the SDN stuff once it becomes non-experimental.

The issue is the same as reported. Whilst the thread is from 2015, there is at least one other post from Feb 2020 which had no reply hence why I opened this afresh. Essentially this relates to conn tracking. In our case, we're running BGP with VRRP against two difference proxmox servers (with...

As per https://forum.proxmox.com/threads/firewall-enabled-in-datacenter-prevent-bridge-vm-comunication-on-the-same-node.21372/page-2, this appears to affect many. The suggested rule change of iptables -D PVEFW-FORWARD -m conntrack --ctstate INVALID -j DROP does "resolve" this although may not...

We'd love that to be true but it isn't. Over 60% of our customers administer/play with their settings on a regular basis.

Nope, these would be for shared/reseller hosting customers. So one install per customer would be unworkable.

Thanks for confirming that. It would be nice if you could tie entries like white lists, rules and so on to domain - so when the domain is deleted, they are too to prevent domains being removed and things being left in the system for non-existent names,

I did consider that although I think it would get quite and overly complex. Users would want to change their own settings, which they can do right now, so removing that would cause an increase in queries for us to do things manually. We also use S/E and things like blocking protected archives...