最後更新: 2017-02-08

介紹

 

(virtual) appliance for spam fighting using open-source tools

MailScanner: Core Spam Filter    

Version: EFA-3.0.1.5

eFa4: CentOS 7

eFa3: CentOS 6 (Freeze)

DCC (Distributed Checksum Clearinghouses)

https://www.rhyolite.com/dcc/

Ram: 1G (min)

HomePage: https://efa-project.org

Forum: https://forum.efa-project.org/

CHANGELOG: https://github.com/E-F-A/v3/blob/master/CHANGELOG

Source: https://github.com/E-F-A/v3

 

---

Install

 

 

---

Web Interface

 

MailWatch
https://yourEFAserver/

Webmin
http://YOURHOSTNAME:10000

 

 

---

Configure

 

EFA-Configure

 

Adding mail_domains

ssh server -> EFA-Configure -> Mail Settings -> Transport settings

 

 

---

Tuning

 

1. ssh allow root

2. limit port 22, 80 port access

3. disable webmin (10000) [chkconfig webmin off]

3. user env

vim ~/.vimrc  

vim ~/.screenrc

4. munin password [htpasswd /etc/munin/munin-htpasswd munin]

5. useful tools yum install smem

6. /etc/httpd/conf/httpd.conf

ServerLimit      12
MaxClients       12

7. 小數量 tty

/etc/init/start-ttys.conf

8. mail size

postconf -e message_size_limit=20480000

/etc/init.d/postfix restart

 

---

Upgrade

 

[1]

# check if there is a update available

EFA-update -check

[EFA] Getting latest version number from http://dl.efa-project.org
[EFA] You are running EFA version EFA-3.0.1.5
[EFA] Latest version update is EFA-3.0.2.6  

[2]

Stop mail flow temporarily (at firewalls/mailservers)

Snapshot your VM and its memory using your hypervisor tools

[3]

# Update to the latest version

EFA-update -update

 * The first time you run this update, the kernel may update & reboot

reboot

/var/EFA/update/EFA-update-script

 

 

---

Troubleshoot

 

Error

Service webmin down and restarted ( 1 attempts in past day, max attempts is 3 )

Please examine your EFA logs on x.x.x and resources to determine cause of failure.

解決

因為我 Disable 了 webmin

/usr/sbin/EFA-Monitor-cron

MonitoredServices=("mysqld=mysqld" "MailScanner=MailScanner" "master=postfix" "httpd=httpd" "unbound=unbound" "dccifd=adcc")