hMailServer forum

mattg

IP ranges you never want to be autobanned should be 101 or higher. I believe user autobanning overrides priority, so, for example, if you have 127.0.0.1 priority = 110, then IP 127.0.0.7 can never be locked out. However, the user account that triggered the autoban CAN be locked out. This adds secur...

mattg

Can't connect to that server: That is what I suspected Something, probably your ISP, is blocking port 25 outbound You should contact your ISP and ask about business class internet with a static IP address OR You should find a service (probably a paid service) to forward your mail gMail will do mail...

mattg

Show the spamassassin integration page too please

mattg

Thanks for you reply, I of course have both enabled, SPF and host check. But both come out negative. I would just like some setting to add a score to host and spf fail. Default it can be zero, I would like to set a score to it. so many spammers and hackers are trying to get into my server. And stil...

mattg

Here in Australia, we have compulsory voting. We get fined if we don't vote. We are told at school that we are the only country that has this, and that it is good because it prevents gangs / governments / rebels from stopping the population from getting to polling booths. We turn up at a booth, get ...

mattg

Spam test: SpamTestHeloHost, Score: 0 From here >> https://www.hmailserver.com/documentation/latest/?page=reference_antispam Check host in the HELO command Turn on this option if you want hMailServer to check the host name that clients has specified in the HELO command. According to the SMTP specifi...

mattg

run the internal diagnostic tests again, but leave the 'Outbound port 25 test hostname' as 'mail.hmailserver.com'

mattg

Run your internal diagnostics and post the results please

ALSO
then run this >> viewtopic.php?f=20&t=30914
And post the output please

mattg

Constitutional Democracy as I believe most democratic countries are is so for a reason. You elect a groupe of people to govern on your behalf (so YOU don't have to) and then YOU can go do something else. Stop interrupting them while they govern and allow them to get things done! If you believe they...

mattg

Does your speaker of the house wield power?
Our Speaker is a token figure with little authority, and essentially a wasted vote in the house.

mattg

Yep, that is a fair bit of mucking around, and not on a default system. HyperV is mention as one of the solutions, and what that does is trick the OS into seeing multiple NICs, each only seeing LAN segments. Linux and BSD devices have been VLAN capable for a very long time. Most home routers, firewa...

mattg

but your microsoft windows operating system will propabally support VLAN .. I don't think that is correct The only Windows system that I've seen support VLANs is HyperV Server. Sure they see the LAN addresses, but not not VLANs My question is, does hMailServer is capable to run in above network con...

mattg

Just to clarify... My primary hmailserver (Windows 2003 R2 Server) is also my MySQL database server and my secondary hmailserver (Windows 2019 Essential) is my Backup-MX. Both servers currently connect to the MySQL server instance on my primary server. So, two mailservers and one database server. A...

mattg

Yes, however it is more 'popular' to use a FQDN like 'mail.example.com' for mail servers, rather than simply 'example.com'

Either will work

mattg

How would your hmailserver know WHICH certificate to present upon connection request?? The way that gmail, Office365 and other mail servers work is like this Local host name = 'mail.example.com' Certificate for ='mail.example.com' All MX records are as follows Domain1 >>MX record = mail.example.com ...

mattg

Your LAN IP range should have a priority of say 50, or it will have no impact Higher number = higher priority ALSO, there are errors present in D:\SERVER\HMAIL\Logs\ERROR_hmailserver_2021-01-15.log Are the few you show, the only entries? If so, I'd like to see a copy of your eventhandlers.vbs (with ...

mattg

how did you backup and restore?

mattg

look for a background 'window' in thunderbird, that allows you accept the self signed certificate

mattg

To ensure that I meet the Australian laws about logging specific detail, I write custom per-domain logs Function DomainLogging(oMessage) 'custom event 'uses functions: CustomMonthlyLog 'uses globals: g_sAdminPassword 'called from: Rules Dim i, j, oDomain, temptext, oApp, Local, tempDomain Set oApp =...

mattg

If your hmailserver 'local host name' is the same as your web address, then you can use the same let's encrypt certificate for hmailserver (Use the 'full chain' and the 'private key' 10.0.0.2 is LOCAL LAN IP address, and not something that will work from the internet I'd remove that entry from your ...

mattg

ALSO you have IP ranges priorities backwards Internet should be LOWEST number, ie 5 IP ranges that you want to take precedence over Autoban should be HIGHER than 20, ie 25 Clearly your Autoban is having no effect at present Higher number = higher priority You should UP date to a newest version of Hm...

mattg

What is your iPhone configuration?

mattg

Watching the U.S implode: makes you proud, doesn't it. Proud to not be American. And I say that as a European but so will Chinese, Russians, Turks and many other less tolerant countries. Perhaps one or more of these countries that you mention are pushing the social media buttons of the general popu...

mattg

gtsolid wrote: ↑
2021-01-06 18:55
I still don't know why I have no problem using Outlook for PC.... Maybe it works in another way

Outlook doesn't upload all mail, it only syncs headers from recent mail - how recent is set in settings

If you have many GB of mail, I'm guessing that goes back a long time

mattg

In SMTP settings, there is an advanced setting called 'recipient hosts' Yours is set to 15 What this means is that if there is up to 15 MX records then hMailserver will attempt them sequentially Note your logs show connections to different IP addresses. I suspect that the greylisting is broken on th...

mattg

lots of detail here >> https://www.hmailserver.com/forum/viewforum.php?f=21

mattg

For what it is worth, I don't remember a single newsletter in 15 years

mattg

Yep, lets start with stats from your server How many messages per day? Typically how many simultaneous IMAP connections? Typically how many simultaneous POP3 connections? Typically how many simultaneous SMTP connections? What is the bandwidth of your network connection (where hMailservevr is install...

mattg

https://www.hmailserver.com/forum/viewt ... =9&t=35463

mattg

perhaps this question is better asked on Github

mattg

Don't think I've ever gotten reports I have (I think) the required txt records and website detail. Perhaps I need to test that setup. I am working towards DANE too. I need DNSSEC and DNS CAA, and I need to make my BIND server publicly accessible to do those. I've been working towards that for over a...

mattg

mattg, I use Let's Encrypt Certificates but only use the 'cert.pem' and 'privkey.pem' files in hMailServer. I do not use the 'chain.pem' file because for some reason the expiration date in the 'chain.pem' file is always expired. However, while I don't have any Thunderbird Clients, I do use an Outlo...

mattg

On my server, I use MTA-STS, I require TLSv1.2 or TLSv1.3 with strong ciphers (I do allow NOT encrypted as fall back). I autoban high score spammers and hackers. Just done a week of tests using this regex in a rule (As provided by SorenR earlier in this thread (?i:^.*\s(ESMTP|!ESMTPA|!ESMTPS|!ESMTPS...

mattg

or #3
PAY to use a service

Look into having Office365 or gmail host your domains

mattg

... Removed selection from "Verify remote server...." from hMailAdmin -> Settings -> Advanced -> SSL/TLS 'Verify' isn't actually used much. It is used on SMTP routes, and for upstream 'External Account POP3' connections and not much else https://www.hmailserver.com/forum/viewtopic.php?f=10&t=29078&...

mattg

Try with StartTLS Required on port 25 on your backup server's SMTP route

mattg

I'm sure that you checked all of these settings, but just getting how this works out of my head and written down... So it has to be one of the settings specific to the IP address of your backup server, as shown on your Primary server, and different to the internet IP range OR It could be in the SMTP...

mattg

...is there any place to specify the interval for another batch to be sent? no Hostgator support suggested this link https://www.hmailserver.com/forum/viewt ... 20&t=28269. But i dont know how implement it. That post says in BOLD type what you need to do for instructions for use - check the link an...

mattg

jimimaseye wrote: ↑
2021-01-01 01:54
Happy new year!

How is 2021 so far matt?

Like a sleepy Sunday morning

No Noise, no dogs barking, no lawn mowers, adult teenagers and wife all still in bed, 'sleeping in'...it's now 10.45 am

Time for me to go and start cooking the bacon and eggs and coffee, and to make some noise

mattg

johang wrote: ↑
2020-12-31 16:17
and i will kick off by wishing those that celebrate the new year starting at 1st of january a merry new year ( 9 hours in advance here, but should be in half of Australia by now )

Yep, that was 12:17 am my time when you posted that

Happy New Year

mattg

palinka wrote: ↑
2020-12-30 01:51
The concept behind auto whitelisting is if a sender was a recipient in the past (of the current recipient), then the sender must be valid. This information is available in the hmailserver database. Why create new tables or text files to hold this info?

I like the simplicity of this concept

mattg

SorenR wrote: ↑
2020-12-30 02:47
One use could be to let the account know when and if their password has become unsafe

Google is doing this

In chrome, go to settings >> passwords and they will show you any username / password combos that are unsafe. I assume from the same list

mattg

a script triggered from a rule

(not tested)

Code: Select all

function add126.com(oMessage)
oMessage.subject = "[126.com]" & oMessage.subject
oMessage.save
end function

Global rule

If sender contains '@126.com'
Then
Run function 'add126.com'

mattg

The error was probably more due to the way that the security protocols were impleneted TCPIP PORTS Connection Sec 0.0.0.0 / 25 / SMTP - SSL/TLS !! External Email Blocked !! Cert: bthubnetmailingssl 0.0.0.0 / 110 / POP3 - SSL/TLS Cert: bthubnetmailingssl 0.0.0.0 / 143 / IMAP - SSL/TLS Cert: bthubnetm...

mattg

You started me thinking. My port 25 setup is StartTLS(Optional) SMTP incoming, however a look at the logs suggests that every legitimate webserver starts TLS and only the spammers go in plain. So, my question: Is there any reason not to require TLS on port 25? I've found that many legitimate mail s...

mattg

You must use the same base version...

mattg

search for a tool like IMAP sync

Depending on number of accounts, it might just be easier to add hmailserver account to the individual mail clients that connect to the Exchange 2010, and simply copy all mail and folders from one account to the other

mattg

ports not forwarded in router
ports not opened in firewall
https://www.hmailserver.com/documentati ... om_outside

Next step is run this and post the results >> viewtopic.php?f=20&t=30914

mattg

The read operation failed literally means that your server was unable to read what was next in the I/O stream. The rest of that message says 'An existing connection was forcibly closed by the remote host' It means one of a couple of things #1 that there was no further transmission in the stream (ie ...

mattg

I went in and put strong passwords on all the accounts - but there's nothing to stop them putting simple ones back... #1 change your admin password ASAP #2 they can log onto the web app to manage their own passwords with their own email address and password - they DON'T NEED TO USE ADMINISTRATOR to...

mattg

Ah, so the log entry for a bad login/password combination does not say that but ssl error? Where is the SSL error? "DEBUG" 6916 "2020-12-12 02:45:59.732" "Creating session 64645" "TCPIP" 6916 "2020-12-12 02:45:59.732" "TCP - 193.*.*.114 connected to 192.*.*.31:995." "DEBUG" 6916 "2020-12-12 02:45:5...

mattg

The 'rules' say this Port 25 NONE - SMTP incoming Port 110 StartTLS (Optional) - POP3 Port 465 SSL/TLS - SSMTP Submission Port 587 StartTLS (Optional) - SMTP Submission Port 143 StartTLS (Optional) - IMAP Port 993 SSL/TLS - IMAPS Port 995 SSL/TLS - POP3S This is what I do Port 25 StartTLS(Optional) ...

mattg

I was going to say that I get that message ALL of the time (hundreds of times per day), but I also log AWSTATS

mattg

Your issue is that different similarly named terms mean different things You should turn security off in PHP Mailer for StartTLS connections to your hMailserver StartTLS connections in hMailserver is ONLY available if you have a valid certificate installed Try turning off the IP range requirement fo...

mattg

You could copy using the 'run function', you would just need to script an appropriate function

There is also 'Create and send copy'
https://www.hmailserver.com/forum/viewt ... =7&t=30770

mattg

DrmCa wrote: ↑
2020-12-14 02:43
What is the IP 193.*.*.114 doing?

I suspect that is a hacker trying to guess a username / password combo on port 995, and thus avoiding the autoban (Autoban is only for SMTP connections)

mattg

There is this ini setting. Does it have an impact RewriteEnvelopeFromWhenForwarding=1 ; When performing forwarding, hMailServer now keeps the original From address rather than changing to that of the forwarding account. ; This change was made to reduce risk of message delivery failures. ; To force t...

mattg

Also, just found this
https://www.hmailserver.com/forum/viewt ... 66#p197079

mattg

run this and post the results
viewtopic.php?f=20&t=30914

ALSO, where have you installed spamassassin

mattg

Right, so you clearly get past the initial connection There will be much more log line associated with the test. The logs line you show initially include some rejections but that is to be expected when they are testing, they try different things and move on. Your screen shot shows 'no weak ciphers',...

Search found 21199 matches