Virtual Architects Support Wiki

User Tools

Site Tools

You are here: start » internet » mail » mailcleaner
Trace: • zimbra_ose • zimbra_android_contacts
internet:mail:mailcleaner

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision 		Previous revision
internet:mail:mailcleaner [2021/06/21 09:19]
gcooper 		internet:mail:mailcleaner [2024/06/06 16:07] (current)
gcooper
Line 24: Line 24:
  
 **Traffic Flow**: https://www.mailcleaner.net/downloads/Mailcleaner-process.pdf **Traffic Flow**: https://www.mailcleaner.net/downloads/Mailcleaner-process.pdf
- 
-**Windows LDAP Browser**: http://www.ldapadmin.org/ 
  
 ===== Updates ===== ===== Updates =====
Line 72: Line 70:
  
 https://support.mailcleaner.net/boards/3/topics/63 https://support.mailcleaner.net/boards/3/topics/63
 +
 +==== Password Protected Archives ====
 +
 +https://support.mailcleaner.net/boards/3/topics/61-password-protected-archives-manage-a-whitelist
 +
 +Password protected archives (.zip files) are blocked system-wide in the current MailCleaner configuration.  While it is not possible to change this at the domain level, there is a whitelist to permit whitelisted sender domains.
 +
 +<file>
 +manage_wh_passwd_archives.sh [add|del] domain.tld
 +/usr/mailcleaner/etc/init.d/mailscanner restart ms
 +</file>
 +
 +Don't forget to restart the Filtering MTA service on both servers.
  
 ===== Newsletters ===== ===== Newsletters =====
Line 80: Line 91:
  
 :!: This can only be done by administrators. :!: This can only be done by administrators.
- 
-, search for and select the "Email Address" you would like to configure then change the following setting from there: 
  
 <note tip>In order to **disable filtering completely for a recipient**, you must configure the setting for **each address or alias** you do not want filtered.</note> <note tip>In order to **disable filtering completely for a recipient**, you must configure the setting for **each address or alias** you do not want filtered.</note>
Line 236: Line 245:
 ===== Virtualmin Integration ===== ===== Virtualmin Integration =====
  
-:!: **MailCleaner users will need to be created and maintained manually** in MailCleaner Admin.+<note important>**MailCleaner users will need to be created and maintained manually** in MailCleaner Admin, including credentials.  This can lead to a disconnect between e-mail account passwords and MailCleaner account passwords.</note>
  
 ==== Address Verification ==== ==== Address Verification ====
Line 259: Line 268:
  
 **Webmin -> Servers -> SpamAssassin -> Header and Body Tests** **Webmin -> Servers -> SpamAssassin -> Header and Body Tests**
 +
 +^Test Name   ^Check            ^Match Expression            ^Score to Apply ^Description ^
 +|Mailcleaner |Received: Header |''\[198.167.189.(28|30)\]'' |-99            |Whitelist Filtered Mail from  MailCleaner |
  
 {{ :internet:mail:mailcleaner_virtualmin_spamassassin_header_check.png?direct&750 |Header Check for Virtualmin}} {{ :internet:mail:mailcleaner_virtualmin_spamassassin_header_check.png?direct&750 |Header Check for Virtualmin}}
Line 268: Line 280:
 ==== User Credentials ==== ==== User Credentials ====
  
-<note tip>Use the Windows tool **LDAP Admin** to **browse, query and verify** your LDAP connection and user details.  Sometimes the username (sAMAccountName) is not exactly what you think it is!</note>+<note tip>Use the Windows **[[https://sourceforge.net/projects/ldapadmin/files/ldapadmin/|LDAP Admin Browser]]** tool to **browse, query and verify** your LDAP connection and user details.  **Sometimes the username (sAMAccountName) is not exactly what you think it is!**</note>
  
 :!: **Exchange users will use their Active Directory (sAMAccountName) user account credentials**.  This is probably **not** their full e-mail address. :!: **Exchange users will use their Active Directory (sAMAccountName) user account credentials**.  This is probably **not** their full e-mail address.
Line 286: Line 298:
 Enable LDAPS on one of your domain controllers: Enable LDAPS on one of your domain controllers:
  
-https://www.youtube.com/watch?v=JFPa_uY8NhY+https://wiki.articatech.com/en/active-directory/active-directory-ldap-ssl-windows-2022 
 + 
 +https://learn.microsoft.com/en-us/troubleshoot/windows-server/active-directory/ldap-over-ssl-connection-issues
  
 :!: **Reboot** the domain controller. :!: **Reboot** the domain controller.
  
-Test your LDAPS and firewall connectivity:+Test your LDAPS and firewall connectivity (a successful connection will show no response or error):
  
 <file> <file>
Line 298: Line 312:
 ==== Address Verification ==== ==== Address Verification ====
  
-:!: Use **LDAP Admin** tool to interrogate your specific LDAP directory.+:!: Use **[[https://sourceforge.net/projects/ldapadmin/files/ldapadmin/|LDAP Admin Browser]]** tool to interrogate your specific LDAP directory.
  
 **Configuration -> Domains -> <domain> -> Address verification** **Configuration -> Domains -> <domain> -> Address verification**
Line 326: Line 340:
  
 ===== Troubleshooting ===== ===== Troubleshooting =====
 +
 +==== DNS Shorthand ====
 +
 +:!: The MTA (exim_stage1) must be restarted to activate changes.
 +
 +https://support.mailcleaner.net/boards/3/topics/94#DNS-shorthands
 +
 +==== Watchdogs ====
 +
 +The [[https://support.mailcleaner.net/boards/3/topics/82-watchdogs|Watchdog Report]] points out some possible configuration issues.
  
 ==== Exim ==== ==== Exim ====
Line 352: Line 376:
  
 ==== LDAP ==== ==== LDAP ====
 +
 +:!: On Windows, use **[[https://sourceforge.net/projects/ldapadmin/files/ldapadmin/|LDAP Admin Browser]]** tool to interrogate your specific LDAP directory.
  
 Install ''ldapsearch'' on the MailCleaner host: Install ''ldapsearch'' on the MailCleaner host:
internet/mail/mailcleaner.1624288794.txt.gz · Last modified: 2021/06/21 09:19 by gcooper

Page Tools

Except where otherwise noted, content on this wiki is licensed under the following license: CC Attribution-Share Alike 4.0 International
CC Attribution-Share Alike 4.0 International Donate Powered by PHP Valid HTML5 Valid CSS Driven by DokuWiki