User Tools

Site Tools


internet:mail:mailcleaner

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision
Previous revision
internet:mail:mailcleaner [2021/02/16 09:53]
gcooper
internet:mail:mailcleaner [2024/06/06 16:07] (current)
gcooper
Line 1: Line 1:
 ====== MailCleaner AntiSpam ====== ====== MailCleaner AntiSpam ======
 +
 +See also **[[internet:mail:mailcleaner_customize|Customizing MailCleaner]]**
  
 See also **[[quick_guide:mailcleaner|MailCleaner Quick Guide]]** See also **[[quick_guide:mailcleaner|MailCleaner Quick Guide]]**
Line 22: Line 24:
  
 **Traffic Flow**: https://www.mailcleaner.net/downloads/Mailcleaner-process.pdf **Traffic Flow**: https://www.mailcleaner.net/downloads/Mailcleaner-process.pdf
- 
-**Windows LDAP Browser**: http://www.ldapadmin.org/ 
  
 ===== Updates ===== ===== Updates =====
Line 70: Line 70:
  
 https://support.mailcleaner.net/boards/3/topics/63 https://support.mailcleaner.net/boards/3/topics/63
 +
 +==== Password Protected Archives ====
 +
 +https://support.mailcleaner.net/boards/3/topics/61-password-protected-archives-manage-a-whitelist
 +
 +Password protected archives (.zip files) are blocked system-wide in the current MailCleaner configuration.  While it is not possible to change this at the domain level, there is a whitelist to permit whitelisted sender domains.
 +
 +<file>
 +manage_wh_passwd_archives.sh [add|del] domain.tld
 +/usr/mailcleaner/etc/init.d/mailscanner restart ms
 +</file>
 +
 +Don't forget to restart the Filtering MTA service on both servers.
  
 ===== Newsletters ===== ===== Newsletters =====
  
 https://support.mailcleaner.net/boards/3/topics/32-mailcleaner-newsletter-module https://support.mailcleaner.net/boards/3/topics/32-mailcleaner-newsletter-module
 +
 +===== Opt Out User =====
 +
 +:!: This can only be done by administrators.
 +
 +<note tip>In order to **disable filtering completely for a recipient**, you must configure the setting for **each address or alias** you do not want filtered.</note>
 +
 +**Management -> Users -> <address> -> Actions -> Preferences -> Bypass all filtering for this address**
  
 ===== Client Administrators ===== ===== Client Administrators =====
Line 224: Line 245:
 ===== Virtualmin Integration ===== ===== Virtualmin Integration =====
  
-:!: **MailCleaner users will need to be created and maintained manually** in MailCleaner Admin.+<note important>**MailCleaner users will need to be created and maintained manually** in MailCleaner Admin, including credentials This can lead to a disconnect between e-mail account passwords and MailCleaner account passwords.</note>
  
 ==== Address Verification ==== ==== Address Verification ====
Line 247: Line 268:
  
 **Webmin -> Servers -> SpamAssassin -> Header and Body Tests** **Webmin -> Servers -> SpamAssassin -> Header and Body Tests**
 +
 +^Test Name   ^Check            ^Match Expression            ^Score to Apply ^Description ^
 +|Mailcleaner |Received: Header |''\[198.167.189.(28|30)\]'' |-99            |Whitelist Filtered Mail from  MailCleaner |
  
 {{ :internet:mail:mailcleaner_virtualmin_spamassassin_header_check.png?direct&750 |Header Check for Virtualmin}} {{ :internet:mail:mailcleaner_virtualmin_spamassassin_header_check.png?direct&750 |Header Check for Virtualmin}}
Line 256: Line 280:
 ==== User Credentials ==== ==== User Credentials ====
  
-<note tip>Use the Windows tool **LDAP Admin** to **browse, query and verify** your LDAP connection and user details.  Sometimes the username (sAMAccountName) is not exactly what you think it is!</note>+<note tip>Use the Windows **[[https://sourceforge.net/projects/ldapadmin/files/ldapadmin/|LDAP Admin Browser]]** tool to **browse, query and verify** your LDAP connection and user details.  **Sometimes the username (sAMAccountName) is not exactly what you think it is!**</note>
  
 :!: **Exchange users will use their Active Directory (sAMAccountName) user account credentials**.  This is probably **not** their full e-mail address. :!: **Exchange users will use their Active Directory (sAMAccountName) user account credentials**.  This is probably **not** their full e-mail address.
Line 274: Line 298:
 Enable LDAPS on one of your domain controllers: Enable LDAPS on one of your domain controllers:
  
-https://www.youtube.com/watch?v=JFPa_uY8NhY+https://wiki.articatech.com/en/active-directory/active-directory-ldap-ssl-windows-2022 
 + 
 +https://learn.microsoft.com/en-us/troubleshoot/windows-server/active-directory/ldap-over-ssl-connection-issues
  
 :!: **Reboot** the domain controller. :!: **Reboot** the domain controller.
  
-Test your LDAPS and firewall connectivity:+Test your LDAPS and firewall connectivity (a successful connection will show no response or error):
  
 <file> <file>
Line 286: Line 312:
 ==== Address Verification ==== ==== Address Verification ====
  
-:!: Use **LDAP Admin** tool to interrogate your specific LDAP directory.+:!: Use **[[https://sourceforge.net/projects/ldapadmin/files/ldapadmin/|LDAP Admin Browser]]** tool to interrogate your specific LDAP directory.
  
 **Configuration -> Domains -> <domain> -> Address verification** **Configuration -> Domains -> <domain> -> Address verification**
Line 304: Line 330:
 ^Username modifier |Only use entered username (without the domain)               | ^Username modifier |Only use entered username (without the domain)               |
 ^Address lookup    |Fetch address(es) from LDAP directory                        | ^Address lookup    |Fetch address(es) from LDAP directory                        |
-^User attribute    |sAMAccountName (ADUC -> Enable Advanced -> Attribute Editor) |+^User attribute    |sAMAccountName                                               | 
 + 
 +**ADUC -> Enable Advanced -> Attribute Editor**
  
 ^Test username     |Use the Active Directory sAMAccountName, not e-mail address  | ^Test username     |Use the Active Directory sAMAccountName, not e-mail address  |
Line 312: Line 340:
  
 ===== Troubleshooting ===== ===== Troubleshooting =====
 +
 +==== DNS Shorthand ====
 +
 +:!: The MTA (exim_stage1) must be restarted to activate changes.
 +
 +https://support.mailcleaner.net/boards/3/topics/94#DNS-shorthands
 +
 +==== Watchdogs ====
 +
 +The [[https://support.mailcleaner.net/boards/3/topics/82-watchdogs|Watchdog Report]] points out some possible configuration issues.
  
 ==== Exim ==== ==== Exim ====
Line 338: Line 376:
  
 ==== LDAP ==== ==== LDAP ====
 +
 +:!: On Windows, use **[[https://sourceforge.net/projects/ldapadmin/files/ldapadmin/|LDAP Admin Browser]]** tool to interrogate your specific LDAP directory.
  
 Install ''ldapsearch'' on the MailCleaner host: Install ''ldapsearch'' on the MailCleaner host:
Line 350: Line 390:
 tcpdump -vv -w ldap.pcap -i eth0 src <ip.of.mail.cleaner> tcpdump -vv -w ldap.pcap -i eth0 src <ip.of.mail.cleaner>
 </file> </file>
- 
-===== Customization ===== 
- 
-FIXME Need verify 
- 
-**InfoBox**: https://support.mailcleaner.net/boards/3/topics/48 
  
 ==== Spamassassin ==== ==== Spamassassin ====
Line 362: Line 396:
  
 [[https://support.mailcleaner.net/boards/3/topics/51|Customize SpamAssassin Rules]] [[https://support.mailcleaner.net/boards/3/topics/51|Customize SpamAssassin Rules]]
- 
-==== Admin Web GUI ==== 
- 
-<note>There is no web GUI selection for the Admin template.  You must edit the default Admin template.</note> 
- 
-<file> 
-cd /usr/mailcleaner/www/guis/admin/public/templates/ 
-cp -avr default yourtemplate 
-mv default default.orig 
-mv yourtemplate default 
-</file> 
- 
-<file> 
-vim default/css/login.css 
- 
-#mclogo 
-  background-color 
-</file> 
-https://support.mailcleaner.net/boards/3/topics/42 
- 
-==== User Web GUI and Summary Report ==== 
- 
-**MailCleaner Admin -> Domains -> Domain Default Settings -> Templates** 
- 
-<file> 
-cd /usr/mailcleaner/templates/summary 
-cp -avr default yoursummarytemplate 
-</file> 
- 
-https://support.mailcleaner.net/boards/3/topics/57 
- 
-<file> 
-cd /usr/mailcleaner/www/user/htdocs/templates/ 
-cp -avr default yourtemplate 
-vim /usr/mailcleaner/www/user/htdocs/templates/yourtemplate/footer.tmpl 
-</file> 
  
 ===== Clustered MailCleaner ===== ===== Clustered MailCleaner =====
internet/mail/mailcleaner.1613494398.txt.gz · Last modified: 2021/02/16 09:53 by gcooper