hMailServer forum

mattg

ALSO check the IP addresses in the log

The line
"SMTPC" 11532 2775 "2020-10-21 11:55:17.848" "200.1.116.12" "SENT: [nl]."
Is the last line shown for that message.

It is NOT identified that the message is actually received (or even sent)

mattg

"TCPIP" 9848 "2020-10-21 11:55:15.193" "Connecting to 200.1.116.12:25..." "DEBUG" 6268 "2020-10-21 11:55:15.348" "TCP connection started for session 2775" "SMTPC" 6268 2775 "2020-10-21 11:55:15.989" "200.1.116.12" "RECEIVED: 220 ..." "SMTPC" 6268 2775 "2020-10-21 11:55:15.989" "200.1.116.12" "SENT:...

mattg

Hello All, I'm relatively new to mail servers and HMail in general so just a heads up. I have one user out of 50 or so that is receiving an SMTP error that is blocking them from sending emails. The error comes back like so... The following recipient(s) could not be reached: Error Type: SMTP Remote ...

mattg

don't think that you can

mattg

I thought that the war had already began...

mattg

Yes select that IP ranges require SSL for AUTH (although you may want to ensure that it works before you force it to happen) SSL/TLS probably doesn't need any changes (what version of hMailserver did you install?) TCP/IP Ports is where the magic happens First step is to add the certificate and Priva...

mattg

I've found that despite the terms StartTLS being used To prototype it quickly, I used SmtpClient, which only supports STARTTLS. I added a new port to my server: Protocol SMTP, IP 0.0.0.0, Port 587, Security STARTTLS(optional), with the same cert as port 465. In the code, I set port to 587, EnableSsl...

mattg

There are many reasons that gMail (or ANY provider) will mark your mail as spam - ultimately you need to check with them (each provider) why Here is some hints >> https://www.hmailserver.com/forum/viewtopic.php?f=21&t=32458 At the end of the day if you send mail that is unwanted by recipients, it wi...

mattg

It's been so long since I used the internal backup - thanks for the cleanup @jimimaseye

That's one reason I guess why I wrote my own.
I use robocopy and zip domains individually

But my solution won't restore to a different database type

mattg

Don't clear the backup directory just yet. I think that existing mail is skipped. Subsequent backups may be faster 'Bad allocation' is usually literally a hard disk error, that is reported to Windows, that is re-reported by hMailserver repeating the backup may not hive the same response - it may wor...

mattg

hmailserver is IMAP, POP# and SMTP standards compliant MAIL Transfer Agent (also called a Mail server) hMailserver doesn't offer any shared calendar or tasks. There are many 'groupware' applications that build their own event and task sharing capacity, and work with compliant mailservers. You should...

mattg

SMTP relayer works for ALL outgoing mail for domains NOT hosted locally on your hMailserver SMTP Route works for recipient 'domain name' ie mail addressed to 'users@example.com', whether example.com is located on your server or not, would be affected by a SMTP route for 'example.com'. Also senders f...

mattg

Which version of hMailserver are you trying to install

there is a 5.7 ALPHA version that I've been using for over a year that has the required Connector.
Or you can use another Database, eg MySQL

mattg

https://www.hmailserver.com/forum/viewt ... 0&p=218032

says

Open a Windows Command prompt and run the this command

"%programfiles(x86)%\hMailServer\bin\hMailServer.exe" /Register

exit the Windows Command prompt and check if the error is gone.

try that

mattg

I suspect that the hmailserver SERVICE is not set to be dependent on the DATABASE SERVICE

Make sure that the database service is started first, then restart the hMailserver service

What database do you use?

mattg

You can't completely block port 25 - all incoming mail comes via port 25

What we block is the ability to use Port 25 to AUTH

anyone who sends mail on my server must AUTH, and they must AUTH on another port eg 465 or 587, both of which are secured with a suitable certificate

mattg

kfj wrote: ↑
2020-10-12 18:16
They are rejected with

Delivery expired (message too old)

That is NOT a hMailserver error message
https://www.hmailserver.com/documentati ... otocolsmtp

That rejection is coming from elsewhere

mattg

Rules Store A rules store contains the list of rules used by a firewall to determine whether unsolicited incoming traffic is allowed or blocked. A typical rules store is created around the notion of “implicit deny,” which means that all unsolicited incoming traffic is blocked (denied) unless there ...

mattg

See 'rules store' here >> https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2003/cc755604(v=ws.10)?redirectedfrom=MSDN Rules are run from the top down the Hmailserver rule take precedence to the block single IP rule (In saying that, when I create a test block IP rule, ...

mattg

And your mail client doesn't work now, then please run this and post the results
viewtopic.php?f=20&t=30914

mattg

The log excerpt above was from a file ...in the hmailserver Logs folder. Don't see any other logs. Where would ERROR logs be located ? Same place I went back and changed config for port 587 FROM SSL/TLS to STARTLS and tried again This time it did the SSL handshake but failed the authentication whic...

mattg

Is there an error log? "TCP - 68.5.184.74 connected to 172.31.27.134:587." "DEBUG" 3500 "2020-10-11 20:33:19.518" "TCP connection started for session 105" "DEBUG" 3500 "2020-10-11 20:33:19.534" "Performing SSL/TLS handshake for session 105. Verify certificate: False" "TCPIP" 2496 "2020-10-11 20:33:...

mattg

Let me explain. Distribution list is for delivery only right? So If I have user1, user2, user3 and list1, list2 and I send email to list1 where user1 and user3 is members, message will be delivered to them. But wht if I want to send email from user1 as list1. Now I can change send from in Thunderbi...

mattg

ehii wrote: ↑
2020-10-11 11:38
But I don't understand why the IP which I blocked can access my hmailserver. (screenshot)

Because you have allowed the hMailserver PROGRAM through your firewall

Block PORTS not programs

mattg

yes, windows default firewall on ALL windows systems by default blocks incoming connection to hMailserver

You shouldn't add exceptions for the program
you SHOULD only add exceptions for the ports that you will use, ie some of 25,110, 143, 485, 587, 993 and 995 in a typical install

mattg

I replaced the self signed certificate with a sectigo certificate. Same result , log says "Verify Certificate: false" That is saying that hmailserver is NOT TRYING to verify the signature - not that the verification failed The next line was the problem "TCPIP" 4476 "2020-10-10 06:26:30.246" "TCPCon...

mattg

Anything is possible

I really don't get what you are trying to achieve though

Distribution lists can be set so that ONLY members can send to it, and you can require AUTH to send to the list

mattg

What script are you using for Defender Firewall IP blocking?

(This really should be in ALPHA discussions)

mattg

smjhunt wrote: ↑
2020-10-10 08:44
Could it be the problem is my test client won't accept the self-signed certificate ?

Likely to be the case

What client are you using? Some of them will accept self signed certificates, and have a 'accept this certifcate' type window open, often in the background
Check with [ALT] + [Left TAB]

mattg

Aside on this, I found that in the hmail log file, there are a lot of different IPs trying to access but most of them get "Authentication failed. Restarting authentication process." Many of us block AUTH on port 25 to mitigate these threats. (This is done in the hMailserverv.ini, and MAY require th...

mattg

What I want to do is really simple. My hmailserver is associated with a domain, let's call it X. I have an MX record that points the domain to my hmailservers IP address. I want external MTAs to be able to connect to my ip address on port 25 to deliver email whose destination is domain X but block ...

mattg

That might be why they were still there

The AV may have scanning the file a SpamAssassin was dealing with it, and it got 'locked' by the AV

mattg

I leave 'verify remote server SSL/TLS certifciates' checked

If port 25 is 'StartTLS required' you will miss much GENUINE MAIL
You will still get SPAM.

Most of the spam that gets to my machine has valid DKIM, SPF, and comes via StartTLS

mattg

Try restarting the hmailserver SERVICE - sometimes things get stuck and need a push

mattg

SMTP routes Use a global rule to catch a message, and then use action 'send using route' If all outgoing mail is to be relayed, use the 'SMTP relayer' settings in SMTP Most the of the port, TCP/IP settings and IP range setting only affect incoming connections. hMailserver will ALWAYS send outbound o...

mattg

jemm971 wrote: ↑
2020-10-07 23:53
port 25 : SMTP STARTTLS (required)

This will limit your incoming mail.

There are many servers in the world that can't do StartTLS on port 25, and much is legitimate mail

mattg

Not quite Palinka hMailserver will ONLY attempt to verify certificates in specific cases. That log line means that hmailserver did NOT attempt to verify the certificate Many servers use self signed certificates, and these of course can't be verified Many servers use a certificate that doesn't match ...

mattg

I think that the last thing that hMailserver does for mail that is Local >> (local |External) is add the received from header
even after all rules and scripts are run

i think that script will ONLY impact on incoming mail

mattg

yes you can clear them manually (unless they are for NOW)

mattg

Yeah , I tend to agree

I think the application log line includes the words 'SMTP deliverer' incorrectly

mattg

so no rules?

What about account forwards?

mattg

jimimaseye wrote: ↑
2020-10-05 23:16
And if it's not clear to you then run this and post the results: https://www.hmailserver.com/forum/viewt ... 20&t=30914

And include rules please...

mattg

I think perhaps the OP is talking about POP3 accounts, not IMAP

mattg

so this is a client side script issue?
Is that what you are saying?

mattg

gmail and Outlook.com certainly both show originating IP address and machine name (when not using their webmail portal)
Does that mean that both of these services aren't good servers too?

mattg

I went back and looked through the last few days of headers of messages received at my server many, many mailing lists don't show this info (Some of this spam, some is not) Many messages have a single received from header Mail from any LAN user on my system shows as from my WAN IP address This must ...

mattg

Can you name the other servers that do this...

mattg

Thinking obtusely... I'm wondering if i should spam score a mail message without a chain of received from, with a suitably named originator...

(That would indicate to me that they are hiding something, and therefore may by dodgy)

mattg

What are you hoping will be achieved by removing that detail?

mattg

StartTLS is set as REQUIRED for that port
Enable TCP/IP logging and you will see what port the client is trying to connect on

OR

The Ip range is set to have 'Must use SSL/TLS for AUTH'

mattg

viewtopic.php?p=68117#p68117

mattg

much_r wrote: ↑
2020-10-01 10:59
Maybe someone can help

Help with what?

Is there a problem with your script?

mattg

viewtopic.php?p=68117#p68117

mattg

Yes, the installer asks if you want it installed to the last directory, but offers an opportunity to change. Then copying the hmailserverv.ini from old directory to new directory and adding the correct libmysql.dll, then restarting should be fine Check the internal diagnostics of the old install to ...

mattg

1) uses existing install path (I have mine installed to C:/hmailserver and that always comes up). The move to 'Program files' would only happen for new installs, not upgrades

2) Certainly keep a copy of the ini file with all backups - you shouldn't need to anything though

3) yep, that is what I did

mattg

What mail client same machine as hMailserver?
Are you using Credentials to AUTH?

mattg

SorenR wrote: ↑
2020-09-29 13:50
RACING: Every other sport only require one ball

Quidditch ?
Showjumping?
Frisbee?

mattg

More like: 1. Telephony mail client initiates the POP request opening a connection the hMailServer in DMZ 2. hMailServer opens a connection to GMail and requests new mail from the required mailbox. 3. hMailServer returns new mail to the Telephony mail client. 4. Telephony system processes email and...

mattg

SorenR wrote: ↑
2020-09-25 20:12
I modified the OnClientLogon(oClient) trigger to include password; Sub OnClientLogon(oClient, sPassword)

This would be interesting to have in our main builds, just so that we can see the password being used in failed attempts.
I wouldn't like to record passwords used in successful connections

mattg

I just change 'branches' in the tree in the left pane, then change back

Search found 21028 matches