Search results

We have a few clients with small networks - sometimes one or two computers. It is generous of Proxmox to offer $80 community pricing, but for for these very small networks, it can be hard to justify spending $80 annually. I humbly suggest that Proxmox offer a 10 (or 25) pack of enterprise...

Better, but still no results :-( root@stl-mx:~# perl /usr/local/bin/sa-stats.pl --logdir /var/log --filename '.*' /var/log/. not found.. /var/log/.. not found.. /var/log/avast not found.. /var/log/pmgproxy not found.. /var/log/private not found.. /var/log/postgresql not found.. /var/log/apt not...

I want to get rule statistics, this shows a blank slate: perl /usr/local/bin/sa-stats.pl --logdir /var/log --filename * Anyone know where I went wrong? I downloaded sa-stats from: https://svn.apache.org/repos/asf/spamassassin/trunk/tools/sare-sa-stats.pl This should yield something similar...

I am still using my minimal updater, the EFA project offers a more thorough updater.

There are several interesting items in the change log

The Facebook messages were getting held up due to DMARC/SPF, so in this situation, I ended up using sender_canonical to re-write notification@facebookmail.com to facebook-notifications@pmgdomain.com. Now all is well. Side note: Am I the only guy seeing loads of dictionary attacks from Facebook?

Several clients bcc incoming and outgoing email to their gmail account. It works well, however Google won't accept messages bcc'd from notification@facebookmail.com. I want to deliver these messages to the client without copying the messages to gmail. So I need some way to bcc gmail unless the...

Solved by: rm -f /etc/apt/sources.list.d/pve-no-subscription.list

When I ran apt update -y ; apt dist-upgrade -y, the output read in part: Get:3 http://download.proxmox.com/debian buster/pve-no-subscription amd64 libpve-common-perl all 6.0-7 [97.7 kB] Get:4 http://download.proxmox.com/debian buster/pve-no-subscription amd64 pve-kernel-5.0.21-4-pve amd64...

Anyone have a better method of keeping kam up to date? Or, did I miss a setting in PMG? My kam.cf was a couple months old. #!/bin/sh # /etc/cron.daily/katycomputer_spamassassin_rule_update update custom Spamassassin rules sleep $(shuf -i 20-3600 -n 1) wget -N -P /usr/share/spamassassin-extra...

A wildcard certificate covers your domain and subdomains, it uses dns records instead of a public facing html server, you should be able to create the certs behind your firewall, then update as needed. One of these days, I am going to try implementing wildcard LetsEncrypt certificates using...

We have an end-user that keeps their phone on the nightstand, when he gets the daily report at midnight it wakes him. Can we change the delivery time? Mid-afternoon might be better for everyone.

I must have something misconfigured, but cannot figure out why our most popular domain has spam listed in the spam quarantine (pmgSpamQuarantine), but nothing listed in receiver statistics (pmgReceiverStatistics)

Make sure port 26 is open on PMG: iptables -S | grep 26 From the Zimbra server, run: telnet pmg 26

I experimented with PowerDNS & Unbound. Both worked well, Unbound was a bit faster.

I was trying to understand how a Hotmail address gets a 15 point deduction just for passing through a Microsoft server, I couldn't figure it out, so I sent myself an email from schmerold@hotmail.com. No 15 point deduction. So I am guessing this is happening when an end-user whitelists an address...

You said: cp /etc/fail2ban/jail.conf /etc/fail2ban/jail.local If we don't follow this step are the directives in jail.conf ignored?

Perhaps Fail2Ban would work here, there are quite a few recipes. For the temporary block (3 < DNSBL rank > 20), we could use something like: failregex = ^%(__prefix_line)sDNSBL rank (([3-9]|1[09])) for \[<HOST>\]:.*$

The other piece of this question is, how do we put a block on IPs delivering spammy email? Something along the lines of score a 20, get a 5 day block, score a 10, get a 1 day block etc

Spam is getting delivered using a server with a good reputation at 6am, by 10am several DNSBL sites will have corrected the server's reputation, so by increasing the delay, we buy ourselves some ability to catch this scam. I am using Postwhite to mitigate delivery delays from Office 365, Google...