Hello I uploaded a modified version of your detectvba.pl because sigtool cannot process xlsx, docx, etc. directly. You need to unzip these XML files.

https://github.com/ulf1/maia_mailguard/blob/master/scripts/detectvba-xml.pl

I am unable to get beyond the internal-init.php script and end up with error in apache error.log

PHP Fatal error: Call to undefined function: MDB2_Driver_mysql::raiseError(). in /usr/share/pear/MDB2.php on line 1936, referer: http://mmsys/maia/admin/internal-init.php

The php and perl test configuration scripts give no indication of any problem

I have an install of Maia 1.4 installed from this repo, running on Ubuntu 14.04 with Apache 2.4.7

It is set up so that it passes both the configtest.pl and the http://www.example.com/admin/configtest.php.

Apache is set up with DocumentRoot /var/www/ and Maia installed in /var/www/maia

When I browse to http://www.example.com/maia, the page loads but with out the themes as the path to the themes in the php is being written incorrectly.

<link rel="stylesheet" TYPE="text/css" HREF="/themes/ocean_surf//css/style.css">
<link rel="shortcut icon" type="image/x-icon" href="favicon.ico">
<script language="JavaScript" type="text/javascript" src="tooltips.js"></script>
<script type="text/javascript" src="libs/jquery/jquery-1.4.2.min.js"></script>
<script type="text/javascript" src="libs/jquery/jquery-ui.min.js"></script>

In the above snippet from login.php you can see that the href to the themes directory has an extra / at the beginning. while the links to the javascript is correct

e.g.
/themes/ocean_surf//css/style.css = http://www.example.com/themes/ocean_surf//css/style.css
libs/jquery/jquery-ui.min.js = http://www.example.com//maia/libs/jquery/jquery-ui.min.js

So the Maia code is telling apache to look for the themes directory in a folder that does not exist (it should be http://www.example.com/maia/themes/ocean_surf//css/style.css.

It's possible there are other path issues but due to the lack of themes it's hard to navigate and test fully.

edit: I should note that on an older Maia install (1.0.2) the path to themes is listed as themes/whereever rather than /themes/whereever

PHP Fatal error: Uncaught exception 'SmartyCompilerException' with message 'Syntax Error in template "/var/www/mail/themes/desert_sand/templates/list-cache.tpl" on line 58 "<tr class="{cycle values=$body_class,$alt_body_class}" id="row_{$row[hamloop].id}">" - Unexpected ",", expected one of: "}" , " " , ATTR' in /usr/share/php/smarty3/sysplugins/smarty_internal_templatecompilerbase.php:665

Fixed with replacing
{cycle values=$body_class,$alt_body_class }
with
{cycle values="$body_class,$alt_body_class"}
on line 58, PR incoming

I am currently testing the setup of this fork.

When I run https://server/maia/admin/configtest.php it complains of file permission errors and recommends reading Blank Page.

The first thing it suggests doing it making sure that the theme/*/compile directories are writable by web server.

Looking in/var/www/maia/themes/*/ based on this fork it turns out there are no compile directories included. Looking at Maia 1.0.2c the compile folder is included as part of the archive.

The error can be removed by creating the 3 compile directories and chown www-data. the directories.

The current version of Smarty does not work with the php scripts.

Must be improved for security reasons.

In official wiki documentation in point 10. Install amavisd-maia mentioned: "The amavisd-maia file in the Maia Mailguard distribution is a specially-patched version of amavisd-new 2.2.1.". But amavisd-maia file does not exists in distribution. Only file maiad exists in the root folder.

settings.php can set the primary address that is "not" included in maia_users table. Because, maia_users.primary_email_id is set in unique.

proposed measures

1. set maia_users.primary_email_id as non unique.
   -> but it is hard to repair to initial state.
2. suggest to use "adminusers.php -> Link E-mail Address/Alias" to set the primary address when candidates included in maia_users table.
   -> need to reconstruct themes.

possible (initial state)

MariaDB [maia]> select id, user_name, primary_email_id from maia_users;

possible

MariaDB [maia]> select id, user_name, primary_email_id from maia_users;

impossible (because primary_email_id has unique key)

MariaDB [maia]> select id, user_name, primary_email_id from maia_users;

initial state

MariaDB [maia]> select * from users;

Ubuntu 14.04.3 x64
PHP 5.5.9
Smarty 3.1.13
Maia Mailguard 1.0.4 (cloned on 08/17/15)

Most of the Maia Mailguard interface seems to work properly but accessing some pages, the Stats page or the Settings page for a Domain for example, produces the following error:

[Tue Aug 18 13:38:45.485292 2015] [:error] [pid 2247] [client 10.0.20.10:55664] PHP Fatal error: Uncaught exception 'SmartyCompilerException' with message 'Syntax Error in template "/var/www/mail/themes/ocean_surf/templates/settings/_address.tpl" on line 78 "<input type=text size=7 name=level1 value="{$level1|string_format:"%1.3f"}">" unknown modifier "string_format"' in /usr/share/php/smarty3/sysplugins/smarty_internal_templatecompilerbase.php:665\nStack trace:\n#0 /usr/share/php/smarty3/sysplugins/smarty_internal_compile_private_modifier.php(132): Smarty_Internal_TemplateCompilerBase->trigger_template_error('unknown modifie...', 78)\n#1 /usr/share/php/smarty3/sysplugins/smarty_internal_templatecompilerbase.php(483): Smarty_Internal_Compile_Private_Modifier->compile(Array, Object(Smarty_Internal_SmartyTemplateCompiler), Array, NULL, NULL)\n#2 /usr/share/php/smarty3/sysplugins/smarty_internal_templatecompilerbase.php(257): Smarty_Internal_TemplateCompilerBase->callTagCompiler('private_modifie...', Array, Array)\n#3 /usr/share/php in /usr/share/php/smarty3/sysplugins/smarty_internal_templatecompilerbase.php on line 665, referer: http://10.0.20.191/welcome.php

I have got the following when logging in :

2015/01/13 14:43:35 [error] 66901#0: *104 FastCGI sent in stderr: "PHP message: PHP Fatal error: Call to undefined method MDB2_Error::fetchRow() in /local/www/mail/php/auth.php on line 323" while reading response header from upstream, client: 10.8.8.8, server: mail.example.com, request: "POST /php/xlogin.php HTTP/1.0", upstream: "fastcgi://unix:/var/run/php-fpm.sock:", host: "mail.example.com", referrer: "https://mail.example.com/php/login.php"

Continual PHP error:
[Tue Jul 29 13:14:31.078386 2014] [:error] [pid 14169] [client x.x.x.x:3634] PHP Notice: Undefined index: file in /var/www/html/cache.php on line 531,

configtest.pl should be able to check whether you are running mariadb or mysql and report error / min version based on that.

After following the guide here and it's updates here the configtest.php shows only a warning about LDAP, however login.php shows the following three errors;

Strict Standards: Only variables should be assigned by reference in /usr/local/www/apache24/data/maia/maia_log.php on line 88

Strict Standards: Only variables should be assigned by reference in /usr/local/www/apache24/data/maia/maia_log.php on line 95

Fatal error: Call to undefined method MDB2_Error::execute() in /usr/local/www/apache24/data/maia/smarty.php on line 115

could someone help me to understand the meaning of these errors and how to fix them?

Incident description: I deleted some mails in the web GUI but for some reason they stay in the database.

Some output:

maia=# select * from maia_mail_recipients;
 mail_id | recipient_id | type | token
---------+--------------+------+-------
(0 rows)

maia=# select id,received_date,sender_email,score,autolearn_status from maia_mail;
   id   |       received_date        |     sender_email      | score  | autolearn_status
--------+----------------------------+-----------------------+--------+------------------
 382822 | 2015-10-11 14:02:03.356713 | root@  | -3.071 | ham
 382708 | 2015-10-10 18:28:27.205804 | kdillen@     |  1.182 | no
 382713 | 2015-10-10 19:09:58.464287 | kdillen@     |  1.728 | no
 382725 | 2015-10-10 22:55:21.975898 | root@  | -3.074 | ham
 382697 | 2015-10-10 15:19:16.463165 | kdillen77@ | -0.117 | ham
 382699 | 2015-10-10 17:16:34.960262 | kdillen77@ | -0.237 | ham
 382716 | 2015-10-10 20:05:16.434559 | kdillen@     |  1.215 | no
 382712 | 2015-10-10 19:08:35.682478 | kdillen77@ | -0.298 | ham
 382823 | 2015-10-11 14:19:25.805396 | root@  | -3.071 | ham
 382746 | 2015-10-11 00:59:44.839002 | root@  | -3.073 | ham
 382829 | 2015-10-11 15:35:09.479548 | root@  | -3.071 | ham
 382802 | 2015-10-11 09:23:18.833298 | root@  | -3.071 | ham
(12 rows)

As you see above there are still mail records but the links with the recipients do not exists anymore, in the long term this means or on busy systems a lot of dummy records stay in the tables.

Continuous error:
[Fri Jul 04 12:05:29.553736 2014] [:error] [pid 2596] [client 172.31.1.17:51246] PHP Notice: Undefined index: header_cache_contents in /var/www/html/themes/ocean_surf/compiled/86cea69087948ad8299cd21a0438ac3b567bc3ca.file.welcome.tpl.php on line 113, referer: http://172.31.2.103/login.php
[Fri Jul 04 12:05:33.437688 2014] [:error] [pid 2596] [client 172.31.1.17:51246] PHP Notice: Undefined index: id in /var/www/html/themes/ocean_surf/code/function.form.php on line 90, referer: http://172.31.2.103/stats.php?

Odd question - one of my users blew up their spam scores and ended up blocking hundreds, if not thousands, of emails that shouldn't have been. Is there any way I can bulk-reload their emails to at least re-read, if not just push through, all of those spammed emails? Easy to do it one at a time, but hours and hours of repetitive clicking.

In settings.php:

$rows is not a defined variable, yet we have foreach ($rows..

The resulting SQL is not valid.

In the case of an SMTP failure, no error comes to screen, this shows in logs:

[Fri Jul 11 10:44:25.435858 2014] [:error] [pid 25776] [client xxx:51346] PHP Notice: Undefined index: error in /var/www/html/themes/ocean_surf/compiled/5817d1ab6783f4b5f2a84f884f9a0484f726d527.file.internal-init.tpl.php on line 50, referer: http://host/admin/internal-init.php

This shows up regularly in logs:
[Fri Jul 11 16:54:58.301927 2014] [:error] [pid 26984] [client xxx:52043] PHP Notice: Undefined index: header_cache_contents in /var/www/html/themes/ocean_surf/compiled/86cea69087948ad8299cd21a0438ac3b567bc3ca.file.welcome.tpl.php on line 113, referer: http://xxx/admindomains.php

Are there any basic instructions on upgrading from 1.02c to current? I'm very excited to see this, and hope to be able to move forward!

If you have rough instructions, I could look at trying to flesh them out for you as an expansion.

I am trying to link additional email addresses to existing users in maia_mailguard 1.0.4 on Ubuntu 12.04 (php 5.3.10)

• I go into http://www.example.com/maia/adminusers.php
• in the Link E-mail Address/Alias section I select the:
  • new email in "Email address/aliases"
  • existing user from "user account"
• press link email address/alias

It say that it works but looking at the users account it just has the original email addresses, not the new one.

I can however do the above steps and link the email address to its self, creating a new account.

In /var/log/apache2/error.log I see the following:

[Tue May 19 02:12:41 2015] [error] [client 10.0.10.23] PHP Notice:  Undefined variable: emaila in /var/www/maia/maia_db/user_management.php on line 265, referer: http://www.example.com/maia/adminusers.php

I am using the current commit, my authentication method is pop3, on dovecot i can see i have logged in, but in maia web interface i am going return back to login page, on maia database i can see my account is super administrator. What will the cause of this?

Hi,

I just installed a new instance of Maia 1.0.4 under Ububuntu 14.04. So far so good... The Install Script was flawless except for the maia_files.tar.gz... But I got around that.

The Problem with Smarty3 also affected me i.e when accessing the settings page as a "domain" user ([email protected]). The error logged in the Apache Error Log is:

[Wed Apr 20 14:47:41.189642 2016] [:error] [pid 2520] [client 172.26.17.124:54532] PHP Fatal error: Uncaught exception 'SmartyCompilerException' with message 'Syntax Error in template "/var/www/mail/themes/ocean_surf/templates/settings/_address.tpl" on line 78 "<input type=text size=7 name=level1 value="{$level1|string_format:"%.3f"}">" unknown modifier "string_format"' in /usr/share/php/smarty3/sysplugins/smarty_internal_templatecompilerbase.php:665\nStack trace:\n#0 /usr/share/php/smarty3/sysplugins/smarty_internal_compile_private_modifier.php(132): Smarty_Internal_TemplateCompilerBase->trigger_template_error('unknown modifie...', 78)\n#1 /usr/share/php/smarty3/sysplugins/smarty_internal_templatecompilerbase.php(483): Smarty_Internal_Compile_Private_Modifier->compile(Array, Object(Smarty_Internal_SmartyTemplateCompiler), Array, NULL, NULL)\n#2 /usr/share/php/smarty3/sysplugins/smarty_internal_templatecompilerbase.php(257): Smarty_Internal_TemplateCompilerBase->callTagCompiler('private_modifie...', Array, Array)\n#3 /usr/share/php/ in /usr/share/php/smarty3/sysplugins/smarty_internal_templatecompilerbase.php on line 665

In the file /var/www/mail/themes/ocean_surf/templates/settings/_address.tpl on lines 78, 85 and 92
|string_format:"%1.3f"
had to be removed - problem solved.

rand_mt not cryptographically secure.

Issue discussed here:
http://www.maiamailguard.com/maia/ticket/306

md5 is the one of the oldest hashing method.
That is very dangerous to use it.

Remember with dictionary and GPU, MD5 could be brute force in less than 1 minute. In cloud calculator (used in mass hack process), there is less.

The standard hashing method arrive with the 3rd genertion : Keccak.
More information with hashing world standard : http://csrc.nist.gov/groups/ST/hash/sha-3/index.html

Considered the time to update tools, code, ..., the Keccak is just coming to be use a the new standard in differnet tools like php. But md5 must not be found in anycode or system since many years...
Offical world standard have send recommends to remove md5 and sha1 capabilities in profit of SHA2 or SHA3. Cypher using MD5/SHA1 are still removed for standard cypher list.

A good method if keccak is not available is to use the SHA256, SHA384 or SHA512 algorithms.
To use it, use the hash function like that : hash('sha256', 'your text')

Keccak algorithm is available in PHP 7.1, so should upgrade to this release for security reason.
And remember that php5.6 will be end of life in 2017. PHP 5.5 is end since 21 Jul 2016. See this page for more information : http://php.net/eol.php

Indeed in the php 7.1 you will find the ARGON2 password processing who's considered as password standard processing. Using like that : password_hash('password', PASSWORD_ARGON2I);

For password hashing competition, more information here : https://password-hashing.net/

Hello All,

I am missing the autolearn part from the X-Spam header. Also this value is not available at the moment the SQL insert is happening, which causes a failure due to the NOT NULL constraint.

I have disabled at the moment the NOT NULL constraint.

Example found in my maillog with a higher log detail:

Jun 8 16:25:32 xxxxxx maiad[13222]: (13222-01) spam_scan: hits=0.315 tests=AWL=0.424,DKIM_SIGNED=0.1,DKIM_VALID=-0.1,DKIM_VALID_AU=-0.1,HTML_MESSAGE=0.001,T_RP_MATCHES_RCVD=-0.01 autolearn=ham autolearn_force=no

Example output

Subject: Test
Message-Id: 20150608143659.7F51E4B@xxxxxxxxxxxxx
Date: Mon, 8 Jun 2015 16:36:59 +0200 (CEST)
From: root@xxxxxxxxxx (root xxxxxxx)
X-Virus-Scanned: Maia Mailguard 1.0.4
X-Spam-Status: No, hits=-0.987 tagged_above=-100 required=5 tests=AWL=-0.986,
NO_RELAYS=-0.001
X-Spam-Level:

As you notice the information is not in the final header.

WARNING: "pear/DB" is deprecated in favor of "pear/MDB2"

Hi!

After Replace this line:
host=localhost
With this:
hosts=127.0.0.1

The postfix still with error to connect to mysql. How can I fix it?

Thanks

Do u have any installation steps?? i cant access this link.
http://www200.pair.com/mecham/spam/rhel5-maia.html

this is the error massage .. Forbidden

You don't have permission to access /mecham/spam/rhel5-maia.html on this server.

Would it be possible to make use of releases on the github so that we can easily download an archive for a particular version.

At the moment users would be reliant on downloading the master archive which could result in them downloading a buggy version as changes get made.

configtest.php tests for MDB2 but does not test for the required MySQL extension.

I ran into an issue with maia_mailguard 1.0.4 on ubuntu 12.04 (php5.3.10) and clamav 0.98.7.

When maiad started to try and process emails it was failing with the following error

/usr/sbin/maiad[2460]: (02460-07) TROUBLE in check_mail: virus_scan FAILED: virus_scan: ALL VIRUS SCANNERS FAILED: ClamAV-clamscan av-scanner FAILED: /usr/bin/clamscan unexpected exit 2, output="ERROR: Option --tempdir requires a non-empty string argument\nERROR: Can't parse command line options" at (eval 82) line 424.

As a work around I updated line 416 in /etc/maia/maiad.conf hardcoding --tempdir=$TEMPBASE to --tempdir=/var/lib/maia/tmp, which is where I believe $TEMPBASE is supposed to be. After that maia_mailguard was able to process mail again.

root@mail /]# /var/maiad/maia/scripts/send-quarantine-digests.pl

defined(@array) is deprecated at
/var/maiad/maia/scripts/send-quarantine-digests.pl line 152.
(Maybe you should just omit the defined()?)

Hello, I am testing Maia 1.0.4 on Ubuntu 12.04.5 and seeing a possible bug

What is happening:

1. log in as my account which is super user
2. click the admin key icon
3. select domains
4. select the domain @example.com
5. verify you are "Default User for Domain @example.com"
6. click settings

You get a blank page and in apache logs you see the error:

PHP Fatal error:  Call to undefined method MDB2_Error::execute() in /var/www/maia/settings.php on line 296, referer: http://mail.example.com/maia/welcome.php

What happens on Maia 1.0.2c

1. log in as my account which is super user
2. click the admin key icon
3. select domains
4. select the domain @example.com
5. verify you are "Default User for Domain @example.com"
6. click settings

You get the settings for my user.

Hi,

if clicking a "confirm all" link in one of the status mails, which lead in my case to

<domainwashere>/mail/confirm.php?id=70&euid=70&ts=2016-06-09%2000%3A00%3A01&token=<tokenwashere>&report_ham=true

we get an error like
[Mon Jun 13 22:40:26.670741 2016] [:error] [pid 5603] [client <internal>] PHP Fatal error: Call to undefined method MDB2_Error::fetchRow() in /var/www/html/confirm.php on line 131
and a white page for the user

tracking it down, an unset $euid was passed to the query above the line.

caused by

        $select = "SELECT maia_mail.id " .
                  "FROM maia_mail, maia_mail_recipients " .
                  "WHERE maia_mail.id = maia_mail_recipients.mail_id " .
                  "AND maia_mail.received_date <= ? " .
                  "AND maia_mail_recipients.type = 'H' " .
                  "AND maia_mail_recipients.recipient_id = ?";
        $sth = $dbh->query($select, array($cutoff_date, $euid));

the query can't complete, so an unhandled error is thrown which results in a blank page for the user, not reporting mails as ham and the logline above.

Patch found here:
http://www200.pair.com/mecham/spam/session_is_registered.patch.txt

Hey,
When an email i send to my Maia it reports this error:
TROUBLE in check_mail: Take Action! FAILED: DBD::mysql::st execute failed: Column 'autolearn_status' cannot be null at /usr/local/sbin/maiad line 4410.

$autolearn_status is: "no autolearn_force=no" before this line:
line 4297 in maiad: $autolearn_status = validate($autolearn_status, '^([a-z]{2,15})$', 'si');
and after it is: ""

I guess I get the wrong information into the $autolearn_status. But I don't understand why, can anybody help me?

I'm running on Ubuntu 16.04.

Thanks,

Kim

Running configtest.php on command line, received this error:
PHP Fatal error: Uncaught Error: Call to undefined function eregi() in /srv/www/main/mailguard/admin/configtest.php:148

Fix was to change line 148 from:
if (!eregi("^..$",$f) && $f!=='.' && $f!=='..'){
to:
if (!preg_match("/^..$/",$f) && $f!=='.' && $f!=='..'){

From the configtest.pl I see that there are now two SHA perl libraries needed

Digest::SHA
Digest::SHA1 (used by razor)

Under Ubuntu Digest::SHA is met by package libdigest-sha-perl but there is nothing for Digest::SHA1, though it can be installed via perl -MCPAN -e shell

Are both actually needed? Based on CPAN, Digest::SHA does SHA1 which at least superficially in my mind makes the need for Digest::SHA1 redundant.

If the config.php file is missing, the server throws a 500 error. Handle gracefully.

Hey,
I am trying to get Maia to work on a Ubuntu 16.04.3 LTS installation. But I have trouble to get web part to connect to the database.
The configtest.php write out that it is not able to login to my database, I have tested the login information and they are correct. I might have missed something here, but I can't get around it. I cannot see anything on the apache error log file.

in config.php:
$maia_sql_dsn = "mysql://test:testtest@tcp(localhost:3306)/maia";

PHP version:
PHP 7.0.18-0ubuntu0.16.04.1 (cli) ( NTS )
Copyright (c) 1997-2017 The PHP Group
Zend Engine v3.0.0, Copyright (c) 1998-2017 Zend Technologies
with Zend OPcache v7.0.18-0ubuntu0.16.04.1, Copyright (c) 1999-2017, by Zend Technologies

Any suggestion or information needed?

Regards,

Kim

Something odd has stopped sending log information to my maiad.log log file. I have syslog off and everything apparently set right in /etc/maia/maiad.conf, and have tried multiple user/group/permission settings, to no avail.

It is currently set to user maia group root, 644, and I have a 0 byte file. I've tried other combinations, no luck. Unfortunately, I suck at Perl and am not sure what to look for with the logging code to see where this could be a problem. Any ideas where to look or what info I could provide that might help pinpoint?

On my linux Debian server I run this commands:
$ sudo cp maiad.service /lib/systemd/system
$ sudo ln -s /lib/systemd/system/maiad.service /etc/systemd/system/maiad.service
$ sudo service maiad start
Job for maiad.service failed because the control process exited with error code.
See "systemctl status maiad.service" and "journalctl -xe" for details.

In log:
systemd[1]: maiad.service: Start request repeated too quickly.
systemd[1]: Failed to start Maiad Daemon.
systemd[1]: maiad.service: Unit entered failed state.
systemd[1]: maiad.service: Failed with result 'exit-code'.

Is there an easy way to alter Maia to ALLOW from the whitelist before it BLOCKS from the blacklist? I have an issue where I'd like to allow certain emails through a general address that I want to blacklist, if that makes sense.

When running configtest.php if the HTML purifier cache directory has not been set you will get the following error

HTMLPurifier cache  SKIPPED: (OPTIONAL) purifer_cache is not set in maia_config.php. Maia will work without it, but the message viewer might be a little faster if you set it to a directory that is writable by the web server.

The referenced file maia_config.php does not exist, it should be config.php