Jump to content

marmu

Members
  • Posts

    2
  • Joined

  • Last visited

Everything posted by marmu

  1. I thought it is possible to whitelist complete domains like that: /etc/opt/eset/esets/esets_smtp_spec.cfg: [white-list] action_av = "accept" action_as = "accept" ... [domain.com] parent_id="white-list" But this does not work. Although man eset_smtp says: "Note also that the section header name can be only domain subset of an appropriate fully qualified email address as shown in an example below [domain.com] av_scan_obj_archives = yes" Any hints? Is it possible to specify whole domains here or use wildcards? My work around for now is as follows, which seems to work: /etc/opt/eset/esets/esets.cfg: ... as_approved_senders = "domain1.com" ... Thanks in advance for your time! Cheers, Marcus
  2. We got "newsline-noreply@horizont.net" in our whitelist: esets_smtp_spec.cfg: [white-list] action_av = "accept" action_as = "accept" ... [|newsline-noreply@horizont.net] parent_id="white-list" But a mail was delivered to our spam inbox and not to the user's inbox. How can that be? Could someone please shed some light on this case? Any hints? We configured "bayes" yesterday, but this souldn't result in ignoring the whitelist. Extract of the header of this mail: X-ESET-AntiSpam: OK;86;calc;2014-12-01 17:18:11;1412011718110005;FD8E X-EsetResult: is OK mail.log: Dec 1 17:18:11 zarafa esets_daemon[22752]: summ[58e00107]: vdb=21342, agent=smtp, name="from: HORIZONT Newsline <newsline-noreply@horizont.net> to: XXX <xxx@domain.com> with subject "Spiegel" / Wolfgang Büchner / Adblocker-Klage / Andreas Fuhlisch / Golf-Kampagne / Eurobest / Penelope Winterhager / Swarovski / Edeka-Spot / HUK Coburg / VW Passat / Burger King Etat / Bild Buzz / heute-Show dated Mon, 01 Dec 2014 17:05:02 +0100 ", virus="is OK", action="", info="", avstatus="clean", hop="accepted" (Recipient replaced by "XXX") We checked the functionality of the whitelist with another mail address and the sample spam string: "XJS*C4JDBQADN1.NSBN3*2IDNEN*GTUBE-STANDARD-ANTI-UBE-TEST-EMAIL*C.34X" Everything worked as expected. Thanks in advance! Cheers, Marcus
×
×
  • Create New...