IpCop 2.1.9 and Copfilter 2.1.93beta1

This forum is for all copfilter version 2 support related questions in English. (IPCop version 2)

IpCop 2.1.9 and Copfilter 2.1.93beta1

Postby Marco » 03 Aug 2016 09:06

I installed IPCop 2.1.9 and Copfilter 2.1.93beta1 successfully. It does not work Copfilter. I have a mail server on the network orange (with a public address assigned by forwarding).
I state that I've gone from IPCop 1.4.21 with Copfilter 0.85.3beta4 to this new version.
The IPCop is very stable and it works properly. The CopFilter it does not filter email with spam it with the antivirus.
I uninstalled and reinstalled CopFilter several times but without success. Given the difficulties I proceeded to train the spam with Bayes rules. Though it has loaded 529 spam and 208 non-spam, but filtering is not performed.

I tried to import the operating parameters from copfilter 0.85.3beta4 to 2.1.93beta1 but I got an unresponsive system.

Sorry for my English I can provide other signs look a your help.
Marco
 
Posts: 5
Joined: 02 Aug 2016 13:46

Re: IpCop 2.1.9 and Copfilter 2.1.93beta1

Postby ShelbyGT500 » 20 Aug 2016 10:33

Hi,

and welcome on copfilter forum ! :D

I'm not sure to understand right. Copfilter is filtering for viruses but not for spam?
Are you sure that copfilter downloaded spamassasin rules ?

Regards.

ShelbyGT500
ShelbyGT500
 
Posts: 844
Joined: 13 May 2010 22:37
Location: FRANCE

Re: IpCop 2.1.9 and Copfilter 2.1.93beta1

Postby Marco » 22 Aug 2016 11:27

Copfilter does not filter spam and viruses. But the service is active.
I uninstalled and reinstalled CopFilter without success
I opened the port 8110 and 10025 through the proxy IPCOP but the result is the same.

How do I know if I have downloaded the SpamAssassin rules?

M.
Marco
 
Posts: 5
Joined: 02 Aug 2016 13:46

Re: IpCop 2.1.9 and Copfilter 2.1.93beta1

Postby ShelbyGT500 » 22 Aug 2016 22:45

Hi,

1.
Marco wrote:Copfilter does not filter spam and viruses. But the service is active.
Mmm.. wich services are working (spamd, clamd, p3scan..)?

2.please check if filtering is working or not . Have a try with this: http://www.emailsecuritycheck.net/index.html

3. Are you using Pop3S ?
if yes, if you wish to use POP3S (pop3-ssl) then leave the current settings of your email client just the way they are and only change the PORT number of your POP3 email server from 110 to 995 (DO NOT ACTIVATE SSL!). P3Scan will then automatically open an encrypted pop3s (pop3 ssl secured) connection from your ipcop machine to your pop3 email server and forward the emails to you.

4.I need to know your settings. Please type in the shell :
Code: Select all
cat /var/log/copfilter/default/etc/global_settings | grep CLAMD
cat /var/log/copfilter/default/etc/global_settings | grep SPAM
cat /var/log/copfilter/default/etc/global_settings | grep POP3
cat /var/log/copfilter/default/etc/global_settings | grep SMTP
Then post the results here (except SMTP_AUTH_PASS and SMTP_AUTH_USER, because privacy reason).

5.
Marco wrote:I opened the port 8110 and 10025 through the proxy IPCOP but the result is the same
In standard conditions, you should'nt change settings in IPCOP firewall and IPCOP Proxy, except transparent mode if you're using HAVP or C-ICAP.
Please restore default settings.

6.
Marco wrote:How do I know if I have downloaded the SpamAssassin rules?
It seems it's another issue.

Regards.

ShelbyGT500
ShelbyGT500
 
Posts: 844
Joined: 13 May 2010 22:37
Location: FRANCE

Re: IpCop 2.1.9 and Copfilter 2.1.93beta1

Postby Marco » 23 Aug 2016 08:42

Hi

1.I active these services :

monit Monitoring Utility monit 5.11 ON (PID 7170)
P3Scan Transp. POP3 Proxy p3scan 2.3.2 ON (PID 6535)
ProxSMTP Transp. SMTP Proxy proxsmtpd 1.8 ON (PID 6669)
HAVP Transp. HTTP Proxy havp 0.92 NOT ACTIVATED
Privoxy Transp. HTTP Proxy privoxy 3.0.23 NOT ACTIVATED
frox Transp. FTP Proxy frox 0.7.18 NOT ACTIVATED
SpamAssassin AntiSpam Filter spamd 3.4.0 ON (PID 1735)
ClamAV AntiVirus Program clamd ON (PID 7009)
Imspector Transp. IM-Proxy imspector 0.9 NOT ACTIVATED
C-ICAP Transp. HTTP-Proxy c-icap 0.3.5 NOT ACTIVATED
Renattach Attachment Renamer no daemon 1.2.4 OFF
SA Rules AntiSpam Rulesets no daemon 1.30 ON ACCESS (no pid)

2. Unfortunately they come all the 7 test email

3. I don't use pop3/s

4.
cat /var/log/copfilter/default/etc/global_settings | grep CLAMD
CLAMD_ENABLE=on
CLAMD_NOTIFICATION=on
CLAMD_PHISHING_SIGS=on
CLAMD_SETDAY=08
CLAMD_SETHOUR=15
CLAMD_SETMINUTES=12
CLAMD_SETMONTH=05
CLAMD_SETYEAR=2004
CLAMD_UPDATE_METHOD=periodically
CLAMD_UPDATE_PERIOD=hourly
CLAMD_UPDATE_VALUE=4
CLAMD_VALID=yes
CLAMD_VIRUS_EZIPS=off

cat /var/log/copfilter/default/etc/global_settings | grep SPAM
DISABLE_SPAM_SCANNING_FROM_OUTGOING_MAIL=on
IMAP_NO_SPAM_FOLDER=not-spam
IMAP_SPAM_FOLDER=spam
POP3_SPAM_QUARANTINE=on
POP3_SPAM_QUARANTINE_NOTIF=off
POP3_SPAM_SCAN=on
POP3_SPAM_SCAN_QUARANTINE_SCORE_LEVEL=8
POP3_SPAM_WHITELIST=on
SMTP_SPAM_QUARANTINE=on
SMTP_SPAM_QUARANTINE_NOTIFY_USER=off
SMTP_SPAM_SCAN=on
SMTP_SPAM_SCAN_BOUNCE=off
SMTP_SPAM_SCAN_BOUNCE_SCORE_LEVEL=20
SMTP_SPAM_SCAN_DISCARD=on
SMTP_SPAM_SCAN_DISCARD_SCORE_LEVEL=19
SMTP_SPAM_SCAN_QUARANTINE_SCORE_LEVEL=15
SMTP_SPAM_WHITELIST=on
SPAMASSASSIN=$BASEDIR/opt/mail-spamassassin/default/bin/spamc
SPAMASSASSIN_DIR=$BASEDIR/opt/mail-spamassassin/etc/mail/spamassassin
SPAMASSASSIN_LINT=$BASEDIR/opt/mail-spamassassin/default/bin/spamassassin
SPAMD=$BASEDIR/opt/mail-spamassassin/etc/init.d/spamd
SPAMD_ENABLE=on
SPAM_DAILY_DIGEST=off
SPAM_SCAN_RBL=off
SPAM_SCAN_SCORE_LEVEL=8
SPAM_SCAN_SPEEDUP=on
SPAM_SCORE_BAYES_00=-2.500
SPAM_SCORE_BAYES_05=-0.300
SPAM_SCORE_BAYES_20=-1.900
SPAM_SCORE_BAYES_40=-0.900
SPAM_SCORE_BAYES_50=0.100
SPAM_SCORE_BAYES_60=1.100
SPAM_SCORE_BAYES_80=2.100
SPAM_SCORE_BAYES_95=3.200
SPAM_SCORE_BAYES_99=3.600

cat /var/log/copfilter/default/etc/global_settings | grep POP3
POP3_ATTACHMENT_SCAN=off
POP3_DOMAIN=
POP3_MAIL_ADD_BODY=off
POP3_MAIL_ADD_HEADER=on
POP3_MAIL_REWRITE_SUBJECT=off
POP3_SANITIZE_SCAN=off
POP3_SCAN_BLUE=off
POP3_SCAN_GREEN=off
POP3_SCAN_ORANGE=on
POP3_SCAN_RED=off
POP3_SPAM_QUARANTINE=on
POP3_SPAM_QUARANTINE_NOTIF=off
POP3_SPAM_SCAN=on
POP3_SPAM_SCAN_QUARANTINE_SCORE_LEVEL=8
POP3_SPAM_WHITELIST=on
POP3_VIRUS_ADMINNOTIF=off
POP3_VIRUS_QUARANTINE=on
POP3_VIRUS_QUARANTINE_REMOVAL_DAYS=13
POP3_VIRUS_SCAN=on

cat /var/log/copfilter/default/etc/global_settings | grep SMTP
SMTPCLIENT=$BASEDIR/opt/tools/bin/smtpclient
SMTP_ATTACHMENT_SCAN=off
SMTP_ATTACHMENT_SCAN_BOUNCE=off
SMTP_ATTACHMENT_SCAN_DISCARD=off
SMTP_AUTH_ENABLE=off
SMTP_AUTH_PASS=
SMTP_AUTH_SECURE=off
SMTP_AUTH_USER=
SMTP_DOMAIN=
SMTP_EXT_PORT=25
SMTP_GREYLISTING=off
SMTP_HOST=192.168.1.2
SMTP_INT2_PORT=587
SMTP_INT_PORT=25
SMTP_MAIL_ADD_BODY=off
SMTP_MAIL_ADD_HEADER=on
SMTP_MAIL_REWRITE_SUBJECT=off
SMTP_SANITIZE_SCAN=off
SMTP_SCAN_BLUE=off
SMTP_SCAN_GREEN=off
SMTP_SCAN_ORANGE=on
SMTP_SCAN_RED=on
SMTP_SPAM_QUARANTINE=on
SMTP_SPAM_QUARANTINE_NOTIFY_USER=off
SMTP_SPAM_SCAN=on
SMTP_SPAM_SCAN_BOUNCE=off
SMTP_SPAM_SCAN_BOUNCE_SCORE_LEVEL=20
SMTP_SPAM_SCAN_DISCARD=on
SMTP_SPAM_SCAN_DISCARD_SCORE_LEVEL=19
SMTP_SPAM_SCAN_QUARANTINE_SCORE_LEVEL=15
SMTP_SPAM_WHITELIST=on
SMTP_VIRUS_ADMINNOTIF=off
SMTP_VIRUS_NOTIFY_USER=off
SMTP_VIRUS_QUARANTINE=on
SMTP_VIRUS_QUARANTINE_REMOVAL_DAYS=14
SMTP_VIRUS_SCAN=on
SMTP_VIRUS_SCAN_BOUNCE=off
SMTP_VIRUS_SCAN_DISCARD=off
SMTP_VIRUS_SCAN_JUST_DELETE=off

5. OK

6. ........

Regards

Marco
Marco
 
Posts: 5
Joined: 02 Aug 2016 13:46

Re: IpCop 2.1.9 and Copfilter 2.1.93beta1

Postby ShelbyGT500 » 24 Aug 2016 19:54

Hi

Sorry, I don't understand your settings.
You enabled ProxSMTP to filter outgoing traffic on ORANGE, enabled ProxSMTP to filter incoming traffic on RED, and enabled P3Scan to filter incoming traffic on ORANGE.

Please type in the shell :
Code: Select all
cat /var/log/copfilter/default/etc/global_settings | grep MAIL


Please, can you explain with a picture:
- where is your email server ( in orange ? ) and its IP if it is in internal network
- where is your email client ( in orange ? in green ?) and its IP
- IPCOP IP for green and orange

Regards.

ShelbyGT500
ShelbyGT500
 
Posts: 844
Joined: 13 May 2010 22:37
Location: FRANCE

Re: IpCop 2.1.9 and Copfilter 2.1.93beta1

Postby Marco » 25 Aug 2016 11:12

1.The mail server is located on the orange network (DMZ) and address 192.168.1.2. This server also has a public address on the RED network (I have available several public addresses about 20). There is a forwarding rule that runs this.

Orange
(ServerMail)--

Green --- IPCOP ---- Red
Marco
 
Posts: 5
Joined: 02 Aug 2016 13:46

Re: IpCop 2.1.9 and Copfilter 2.1.93beta1

Postby Marco » 25 Aug 2016 11:21

1.
The mail server is located on the orange network (DMZ) and address 192.168.1.2. This server also has a public address on the RED network (I have available several public addresses about 20). There is a forwarding rule that runs this.

2.
cat /var/log/copfilter/default/etc/global_settings | grep MAIL
ALLOW_MAIL_ONLY_FROM_IP=
BIN_P3PMAIL=$BASEDIR/opt/p3pmail/default/bin/p3pmail
DISABLE_SPAM_SCANNING_FROM_OUTGOING_MAIL=on
EMAIL_ADR=XXXXXXX
ICAP_SENDMAIL=off
MAILSERVER=192.168.1.2
MAILSERVER_PORT=25
MAIL_REWRITE_SUBJECT_CONTENT='[Copfilter scanned]'
MAIL_SRV_LOCATION=ORANGE
POP3_MAIL_ADD_BODY=off
POP3_MAIL_ADD_HEADER=on
POP3_MAIL_REWRITE_SUBJECT=off
REJECT_INSTEAD_OF_DISCARD_EMAIL=on
SANITIZE_METHOD=P3PMAIL
SENDEMAIL=$BASEDIR/opt/tools/bin/sendEmail
SMTP_MAIL_ADD_BODY=off
SMTP_MAIL_ADD_HEADER=on
SMTP_MAIL_REWRITE_SUBJECT=off
UPDATE_MAIL_NOTIF=off
WHITELIST_OUTGOING_EMAIL=on
WHITELIST_OUTGOING_EMAIL_QUARANTINE=

Orange (ServerMail) -----------------------------------|
(192.168.1.2) |
(IP Ipcop orange 192.168.1.1)
Green -----------(Ip IpCop green 10.0.0.169) IPCOP ---- Red

my mail clients are all on green

I hope I was clear
M.
Last edited by ShelbyGT500 on 25 Aug 2016 22:08, edited 1 time in total.
Reason: removed email data for privacy reason
Marco
 
Posts: 5
Joined: 02 Aug 2016 13:46


Return to English Copfilter v2 Support

Who is online

Users browsing this forum: No registered users and 1 guest

cron