hMailServer forum

palinka

jimimaseye wrote: ↑
2020-12-30 02:01
There is a script around here somewhere that does as you describe. I think it was written by soren.

Maybe worth comparing.

[Entered by mobile. Excuse my spelling.]

I looked. Didn't see it. My google-fu is poor.

palinka

I've been giving auto whitelisting some thought. I looked at one in the scripting forum and thought, dang, that's complicated. It doesn't need to be. The concept behind auto whitelisting is if a sender was a recipient in the past (of the current recipient), then the sender must be valid. This inform...

palinka

On my set up I still get heaps of SPAMMERS that use StartTLS (TLSv1.2+), AND have valid SPF and DKIM records , This is good against those guys. I usually knock them out before spamhaus catches up to them. I had them regularly up to a few months ago. Now they've become pretty rare. https://www.hmail...

palinka

Just remembered ... I modified my IDS to include ALL ports and ALL protocols ... SMTP not sending email x3 = BAN, POP3/IMAP not authenticating x3 = BAN. I noticed that its botnets that try guessing passwords and because I collect statistics on my firewall ban project, its a rare occasion indeed tha...

palinka

Props to @SorenR...I'm using this criteria to trigger a Rule Action when the connection is secure: Untitled.png Now all that needs to be done is negate it, and write a little piece of script code as the Rule Action to increase the SPAM Score as desired. Try this: ^((?!ESMTPS|ESMTPA).)*$ https://reg...

palinka

Merry Christmas!

palinka

You started me thinking. My port 25 setup is StartTLS(Optional) SMTP incoming, however a look at the logs suggests that every legitimate webserver starts TLS and only the spammers go in plain. So, my question: Is there any reason not to require TLS on port 25? TIA In the modren world, probably not....

palinka

jimimaseye wrote: ↑
2020-12-25 13:46
Don't worry chaps, it was another spam post advertising his website (removed).

¯\_ (ツ)_/¯ They never take a break. Not even on Christmas!

Merry Christmas!

palinka

tell us exactly how you tried to block them in your windows firewall.. in my firewall i have added an rule in "inbound rules" which i named IP BLOCK LIST its enabled in action i chose "block the connection" and i added all ip addresses or networks in scope tab under remote IPadresses how did you se...

palinka

After you migrate, you can check this out for the missing exchange features: https://hmailserver.com/forum/viewtopic ... 21&t=35503

palinka

SorenR wrote: ↑
2020-12-23 20:27
Do some searching on the forum... I made an IDS scripting with a database and an external handler run by scheduler

Can attest! This IDS is both simple and brilliant.

palinka

RvdH wrote: ↑
2020-12-23 21:08
Be warned, disconnect.exe or CPorts, will kill all instances of that ip...also the ones connected to other services, use with caution

Yep. Bad idea to use it on localhost.

(Ask me how I know. Nah, don't ask!

)

palinka

Another thing I do is count how many emails get rejected as over the limit. If someone goes over the limit, its unlikely they will keep trying to many times to resend - if its a hacker though, they'll just keep pumping spam through. So when I roll over an hour I disregard rejections up to the 'huma...

palinka

I like the hourly limit. I think I'll incorporate that into my limiter script.

palinka

I do password change by SMS. Each email user has a cell number associated with their account, so the sender's number is the authentication. There is also password validation for length and type of characters required.

palinka

No. Too bad because that could be a very useful feature.

However, there are a couple of imap sync apps you could try. Sorry, you'll have to google them. I never used them, so I have nothing to say about them except one is literally called "imapsync".

And Merry Christmas to you as well!

palinka

I'm getting thousands of autobans from five IP ranges. I tried putting a block on them in the windows firewall but they keep coming in. BTW, this is an AWS EC2 instance running the hMailserver. I looked at blocking these ranges there but it is over my head. Any suggestions? Thanks. If they're block...

palinka

SorenR wrote: ↑
2020-12-21 21:26
The only reason there is such a thing called Flux Capacitor is that the De Lorean was born a lemon

I won't disagree, but I still want one - an electric one with 3 tesla motors.

palinka

jimimaseye wrote: ↑
2020-12-21 20:18

SorenR wrote: ↑
2020-12-21 19:46
Fixed it...
Turned awstats logging off?

He de-ordinated the flux capacitor. Exactly what I told him to do in the beginning.

palinka

So only domains hosted on O365 can send using their servers? Just googled this smarthost... https://www.smtp2go.com/ Less than 1,000 mail per month is free and they will guide you in how to setup SPF, DKIM and DMARC in your DNS. I do not know them personally and I have never used them but it seems ...

palinka

Sorry - didn't read carefully enough. Those things are for recipients, not senders.

You could script something to do this. Loop through all messages, pull out senders, reduce list to unique senders, then whitelist each address on the list.

hMailServer whitelisting short circuits spamassassin.

palinka

That's more or less what txrep is.

https://cwiki.apache.org/confluence/dis ... SSIN/TxRep

I never tried it. I'm not sure it can be run on windows.

There's also this script (not spamassassin): https://www.hmailserver.com/forum/viewt ... =whitelist

palinka

SorenR wrote: ↑
2020-12-20 16:14
Christmas ghost showing his ugly face or gremlins?

Krampus.

Just reboot and you'll be fine.

palinka

Have you tried de-ordinating the flux capacitor?

palinka

Your issue is that different similarly named terms mean different things You should turn security off in PHP Mailer for StartTLS connections to your hMailserver StartTLS connections in hMailserver is ONLY available if you have a valid certificate installed Try turning off the IP range requirement f...

palinka

Letsupload.io is down, so last night's run failed at attempting to obtain access token (first step of upload process). Even though the entire site is down, I realized in other circumstances there could be temporary network errors. I have already accounted for that during the file upload process, wit...

palinka

I have a primary 200/200 fiber router with one ISP and a 70/40 4G router with another ISP. Failover between the public IP's and dynamic routing on my LAN. 4G, mail/ftp/web-servers and WiFi is powered with an UPS. I am allways online :mrgreen: Ironically, I downgraded my 4G usb modem to a 2G serial ...

palinka

Interesting results to the poll. Still, 3 people spanning across the time zones - not bad for some free software. UTC+1 ... Remind me to remove the black tape from my camera if I don't show :mrgreen: I just bought a new usb microphone. Its YUUUUGE and crisp. Sounds great. Looks like a Telefunken u4...

palinka

Add this to the bottom of your program files\hmailserver\bin\hmailserver.ini and restart hmailserver. [settings] RewriteEnvelopeFromWhenForwarding=1 ; Defaults to 0 or disabled. ; This will rewrite the FROM envelope of an email message when forwarding it on to another address. ; The default is to re...

palinka

SorenR wrote: ↑
2020-12-17 15:44

RDA wrote: ↑
2020-12-17 13:54
Thanks for the support. I'm receiving email now but can't send ???
enable SMTP logging and post the log where it fails.

And disable IMAP logging. It cuts out mucho log spam.

palinka

One other thing i found out when i had to actually use the backup last month after server crash :roll: was that there is a bug with powershell+mysqldump. For some reason, it encodes the dump file in something other than utf8 so it would not restore. I fixed my immediate issue by changing the encodin...

palinka

SorenR wrote: ↑
2020-12-17 15:39
Hmm...

We need something like this -> https://www.phpbb.com/community/viewtop ... &t=1690905

You can always just use emoji.

palinka

Lots of changes. I think we're well past alpha at this point. Too many to list - don't care about remembering. The "big" ones: * Mulitple checks on files uploaded to make sure the dang thing actually gets uploaded exactly as intended - checks status, size; if any differences, it deletes the remote f...

palinka

RDA wrote: ↑
2020-12-17 13:54
Thanks for the support. I'm receiving email now but can't send ???

Any error logs?

Can you try to send a message, wait a minute, then post the logs around that message try?

palinka

I had one account that was not being processed, and in debugging I found that empty $SkipDomainPruning and $SkipAccountPruning were causing it. I'm not sure why, but adding modifier [regex] to them fixed the problem. If (($hMSDomain.Active) -and ($hMSDomain.Name -notmatch [regex]$SkipDomainPruning) ...

palinka

I think the Gmail outages have something to do with solar winds being outed as YUUUUGE spyware. At least, it's extremely coincidental.

palinka

Hello. Newbie here just moved to HMS from Mdaemon, anyway I got your scripts all setup from https://github.com/palinkas-jo-reggelt/hMailServer-Firewall-Ban and been running for 12+ hours now, mysql db seems to fill with IPs, FW rules gets created aso. However when using the webgui I get: Spammers a...

palinka

I'm no expert but... ....I'm guessing the account that you tried to reach does not exist. [Entered by mobile. Excuse my spelling.] There was a gmail outage today that caused that strange message. I had a couple of messages today for bona fide accounts bounce with "user does not exist". Gmail was co...

palinka

A shot in the dark:

Add a header value when user is authenticated AND on port 587, then make your rule check the header for header.

palinka

So... I opted not to protect my 200/200 fiber router since local gear is powered from same power grid as me (I have 3P+N 400V AC 63A coming in). Here the fiber switchgear all has backup power. Zero downtime. Say whatever you want about Verizon, but they are most definitely an engineering focused co...

palinka

Furball Zen wrote: ↑
2020-12-15 15:59
It doesnt reboot on its own after a power failure

If you use an APC UPS, there is a great piece of software called APCUPSD that gives you lots more options than the windows battery handling. I even scripted mine to notify the utility in the event of an outage.

palinka

¯\_ (ツ)_/¯ I only buy refurbished. And only after catastrophic hardware failure. I replaced my server a couple of years ago after a solid 10 year run. Then last month I rebuilt it after a drive failure. I got a nice workstation from work thanks to covid because my old laptop didn't have the juice fo...

palinka

It seems the "fake" news turned out to be not ago fake (surprise surprise). It's seems the electoral college thought the same. BBC News - Electoral college confirms Joe Biden's presidential victory https://www.bbc.co.uk/news/election-us-2020-55308526 Or are we still waiting for this amazing repubmi...

palinka

I think spamd.log location gets set as a parameter when you install the service. I imagine if you don't set it, then it logs to event log. That's just speculation, though.

palinka

Here's a simple powershell script that will parse your hmailserver logs and spit out SMTPC entries only. It takes a while to run because it has to read each line. 200mb of logs will take a while. ### SCRIPT VARIABLES ### $LogDir = "C:\hMailServer\Logs" #<-- hMailServer Log Folder <# First find logs ...

palinka

yigalr01 wrote: ↑
2020-12-13 16:33
Ok Thank you
How can I receive the status off sent email from the AWStats log ?
I can only see from to without status...

Status is 2nd to last.

250 = OK (success)

5xx = Fail

palinka

Thank you , I know this site very nice but my logfiles is about 200 MB and more and I need offline software for analyzing this files I am looking for most to understand if mail was successfully delivered to some people ! This is the main task for this log files :) But may be very good to have some ...

palinka

Try this: https://log.damnation.org.uk/

Are you looking for something in particular in your logs?

palinka

When i asked where they go, i presumed hM needs a way to reference them, im not that familiar with the deeper workings of hM to be sure. So if you could maybe be a little more specific id really appreciate it :) That's basically as specific as it gets. I posted a bunch of links that I thought were ...

palinka

I saw that somewhere else once.

https://hmailserver.com/forum/viewtopic ... 21&t=32333

palinka

Sorry, could not help myself... If oMessage.HeaderValue("X-Spam-Report") <> "" Then Dim i, XSpamReport : XSpamReport = oMessage.HeaderValue("X-Spam-Report") XSpamReport = Split(XSpamReport, "*") For i = LBound(XSpamReport)+1 To UBound(XSpamReport) oMessage.HeaderValue("X-Spam-Report-" & Right("0" &...

palinka

I get those too... Usually only affect a single mail. 99.99% of the time it is SpamAssassin taking too long to report back. I changed my W2K3 Server Windows settings "Performance Options" in controlpanel to "Processor scheduling = Background" and "Memory usage = Programs" and that seems to have cha...

palinka

SorenR wrote: ↑
2020-12-10 22:46
Took me a couple of try's to figure that one out back in the day

When in doubt - just ask Soren. That's my motto.

palinka

2020-12-10 Hmailserver: 5.6.7-B2425 IP RANGES IP: 192.188.88.1 - 192.188.88.255 Priority: 20 Name: Auto-ban: web Allow connections Other SMTP: False Antispam : False POP3: False Antivirus: False IMAP: False SSL/TLS: False IP: 31.192.241.0 - 31.192.241.255 Priority: 20 Name: Britain Allow connection...

palinka

Im not on the attack, you need to hone your CS skills, youre pretty much a jerk to me every time i post. At least MattG tries to help with his product. Nobody "owns" hmailserver. Its open source and free. And neither Matt nor Jimi are developers of it (me either). There is no "CS", only a bunch of ...

palinka

Since ive never had to mess with them, where do the scripts get stored? Im kinda doing a country blocking by IP address already on some countries, but communicate with people all over the world so i cant just lock it down to a handful of allowed. hmailserver triggers are placed in /events/eventhand...

palinka

Also, KAM.cf adds a bunch of good rules to SpamAssassin.

palinka

I have hM set to delete at 4, mark at 3. So why is it delivering the mail instead of deleting it? I have changed nothing in the settings for years, just in the last 2-3 weeks its almost like someone can see my rules and is crafting their spam to circumvent it. That's extremely low. I thought my set...

palinka

Well, I didn't even think to look for an error log, which I just did. "ERROR" 6392 "2020-12-10 11:17:43.770" "Script Error: Source: Microsoft VBScript runtime error - Error: 800A01A8 - Description: Object required: 'oMessage.HeaderValue(...)' - Line: 1613 Column: 2 - Code: (null)" Line 1613: oMessag...

palinka

Tried removing the 1st message.save and having the single one at the end if? [Entered by mobile. Excuse my spelling.] I'll give it a try. Thanks. Could be a while before I get a hit. You know, my system is laser focused on rejecting spammers before they can get a message through. :mrgreen: http://w...

Search found 2333 matches