Search found 33 matches

by hMailserver-User
2019-11-24 10:07
Forum: Scripting
Topic: Firewall Ban
Replies: 149
Views: 58141

Re: Firewall Ban

You have to be careful with the lords of Microsoft. It can be a false positive in, FQDN as HELO. AM5EUR02FT035.mail.protection.outlook.com EUR04-DB3-obe.outbound.protection.outlook.com EUR03-VE1-obe.outbound.protection.outlook.com I discovered that yesterday too. I added outbound.protection.outlook...
by hMailserver-User
2019-11-24 01:03
Forum: Scripting
Topic: Firewall Ban
Replies: 149
Views: 58141

Re: Firewall Ban

palinka wrote:
2019-11-24 00:52
I think I figured out why marking SAFE didn't remove the firewall rule. I changed the order of operation so processing SAFE comes first. I'm going to experiment a little and see if it works, then I'll update GitHub.
Thank you!
by hMailserver-User
2019-11-23 19:31
Forum: Scripting
Topic: Firewall Ban
Replies: 149
Views: 58141

Re: Firewall Ban

I wouldn't worry about it. If it happens again look in MySQL my.ini and see if you have "max_allowed_packet". If not, add this and reboot: max_allowed_packet = 1M Or 16MB, which is supposedly the default. 1GB is the max. My current my.ini has no entry for that so default will be used ... Now i have...
by hMailserver-User
2019-11-23 16:47
Forum: Scripting
Topic: Firewall Ban
Replies: 149
Views: 58141

Re: Firewall Ban

Here is the entirety of the firewall parsing. Is it possible that you introduced a space by accident? # Get firewall logs - https://github.com/zarabelin/Get-WindowsFirewallLogs/blob/master/Get-WindowsFirewallLog.ps1 $LSRegex = "($LANSubnet\.\d{1,3})|(158\.201\.243\.\d{1,3})" $MinuteSpan = 5 # Shoul...
by hMailserver-User
2019-11-23 15:02
Forum: Scripting
Topic: Firewall Ban
Replies: 149
Views: 58141

Re: Firewall Ban

I noticed there's a space at the beginning: VALUES (' 2019-11-23 08:29:31', The script reads the date and time from the firewall log. So the formatting problem could be coming from the firewall log and not necessarily from powershell. What are the date and time formats in the firewall log (localize...
by hMailserver-User
2019-11-23 11:58
Forum: Scripting
Topic: Firewall Ban
Replies: 149
Views: 58141

Re: Firewall Ban

Mhh - it must have something to do with "duplicate ips". The IP has triggered IDS, i have marked it for release and it have been removed from firewall. I have made no screenshot but the ip (its a 5 minute check from uptimerobot.com) after some time was shown 2 times under duplicate ip's. 1 time with...
by hMailserver-User
2019-11-23 10:45
Forum: Scripting
Topic: Firewall Ban
Replies: 149
Views: 58141

Re: Firewall Ban

Could it have something to do with this: 19.11.23 08:30:02.62 : ERROR : Unable to run query : INSERT INTO hm_fwban_rh (timestamp, ipaddress) VALUES (' 2019-11-23 08:29:31', '45.95.35.35') Ausnahme beim Aufrufen von "Fill" mit 2 Argument(en): "Incorrect datetime value: '' for column 'timestamp' at ro...
by hMailserver-User
2019-11-23 01:11
Forum: Scripting
Topic: Firewall Ban
Replies: 149
Views: 58141

Re: Firewall Ban

Its me again :-) I am still on my "old" version which is working so far as expected. Before i start from scratch: there must be a problem with releasing / unban IPs via webif. The following ip is released / marked as safe. https://www.bilder-upload.eu/bild-0ecb03-1574463709.png.html Afair marking as...
by hMailserver-User
2019-11-22 20:46
Forum: Scripting
Topic: Firewall Ban
Replies: 149
Views: 58141

Re: Firewall Ban

Removed the "countrycode" - thing from search-php (2 times) and now the webif is working again ...
When you updated GitHub with all the latest corrections i will start from scratch again to test :-)
Thx
by hMailserver-User
2019-11-22 20:37
Forum: Scripting
Topic: Firewall Ban
Replies: 149
Views: 58141

Re: Firewall Ban

palinka wrote:
2019-11-22 20:35
Jeez, the answer was in my post. The query DOES contain countrycode, which I completely overlooked. :oops:

When I get home I'll go through every page and make sure it's removed completely. I'll let you know when the changes are uploaded.
thx!
by hMailserver-User
2019-11-22 20:06
Forum: Scripting
Topic: Firewall Ban
Replies: 149
Views: 58141

Re: Firewall Ban

If it still doesn't work, run these queries in phpmyadmin and report any errors: These queries are exactly as presented to mysql after the variables are filled in by php. I only left off "LIMIT ".$offset.", ".$no_of_records_per_page;" because its unnecessary to see if the query is working. If you g...
by hMailserver-User
2019-11-22 16:48
Forum: Scripting
Topic: Firewall Ban
Replies: 149
Views: 58141

Re: Firewall Ban

i try to visualize what i mean:
Image
by hMailserver-User
2019-11-22 15:59
Forum: User-submitted tutorials
Topic: hMSLog2Ban - Logfile ip blocker
Replies: 36
Views: 15376

Re: hMSLog2Ban - Logfile ip blocker

Dravion wrote:
2019-11-11 12:07
Ok, will look into it if i have time
Do you had time to take a look? :?:
by hMailserver-User
2019-11-22 15:41
Forum: Scripting
Topic: Firewall Ban
Replies: 149
Views: 58141

Re: Firewall Ban

And: it seems that the above changes have broken the webinterface. Stats are working, but details for a specitic stat returns a "no result". No results for search term "Russi", no No results for search term "2019-11-22" and so on.
by hMailserver-User
2019-11-22 14:42
Forum: Scripting
Topic: Firewall Ban
Replies: 149
Views: 58141

Re: Firewall Ban

This is due to MySQL table hm_fwban : column "countrycode" REQUIRING a default value. Countrycode is basically an orphan left over from the very beginning, but abandoned later. I was lazy in not removing it. To permanently get rid of this error, you need to do a couple of things. First, you need to...
by hMailserver-User
2019-11-22 01:34
Forum: Scripting
Topic: Firewall Ban
Replies: 149
Views: 58141

Re: Firewall Ban

Ok. Awesome. I will update the instructions. Thanks for the heads up. Hiho - its me again :-) hmsFirewallBan.ps1 produces errors like this (in the DBError.log): 19.11.22 00:30:01.80 : ERROR : Unable to run query : INSERT INTO hm_fwban (timestamp,ipaddress,ban_reason,country,flag) VALUES (NOW(),'139...
by hMailserver-User
2019-11-19 21:13
Forum: Scripting
Topic: Firewall Ban
Replies: 149
Views: 58141

Re: Firewall Ban

So, it seems that i have found the problem: the mysql-connector-net must be installed. Which wasn't on my setup.
I think you should ad this to the instructions on GitHub @palinka ...

Going to check out again a fresh copy from GitHub and set it up again from scratch
by hMailserver-User
2019-11-19 19:07
Forum: Scripting
Topic: Firewall Ban
Replies: 149
Views: 58141

Re: Firewall Ban

palinka wrote:
2019-11-19 16:25
The type [MySql.Data.MySqlClient.MySqlConnection] can not be found.

You said you re-downloaded the powershell file. Did you forget to change the database variables st the top? :D
Nope, MySQL and Fireall-Rules are changed to fit my setup ...
by hMailserver-User
2019-11-18 22:47
Forum: Scripting
Topic: Firewall Ban
Replies: 149
Views: 58141

Re: Firewall Ban

and from the now created DBError.log (in parts): Der Typ [MySql.Data.MySqlClient.MySqlConnection] kann nicht gefunden werden. Stellen Sie sicher, dass die Assembly, die diesen Typ enthält, geladen wird. Es ist nicht möglich, eine Methode für einen Ausdruck aufzurufen, der den NULL hat. Der Typ [MySq...
by hMailserver-User
2019-11-18 22:43
Forum: Scripting
Topic: Firewall Ban
Replies: 149
Views: 58141

Re: Firewall Ban

Arrrrggg! In the mysqlquery function, put the $ in front of DBError.log Missing the $.... you'd be up and running if it weren't for my typos. :lol: However, there must be a database error still, so when you get that sorted out, let me know what's actually in the error log. Edit No! Quotes are missi...
by hMailserver-User
2019-11-18 20:32
Forum: Scripting
Topic: Firewall Ban
Replies: 149
Views: 58141

Re: Firewall Ban

And let me know when its working. :D Checked out GitHub so i am on the bleeding edge now :-) - now i got this error: In D:\hMailServer\Addons\HMSFirewallBan\hmsFirewallBan.ps1:47 Characters:31 + $DBErrorLog = $PSScriptRoot\DBError.log + ~~~~~~~~~~~~ Unexpected token "\DBError.log" in expression or ...
by hMailserver-User
2019-11-18 00:49
Forum: Scripting
Topic: Firewall Ban
Replies: 149
Views: 58141

Re: Firewall Ban

Jeez... That's embarrasing. Field 'ID' should be autoincrement. I just looked at the GitHub readme and it does not list autoincrement as a property. Actually I've been thinking of adding "if not exist create table" to the powershell file. Anyway, run this sql in phpmyadmin: ALTER TABLE hm_fwban MOD...
by hMailserver-User
2019-11-17 22:08
Forum: Scripting
Topic: Firewall Ban
Replies: 149
Views: 58141

Re: Firewall Ban

Ah, sorry. Looks like diverging too far from my own setup is causing me to leave things out. I'll fix this on GitHub. In the meantime, the issue is "wrong number of arguments". The call is sending 3: (oClient.IPAddress, "GeoIP", oClient.HELO). The function is asking for 2: (sIPAddress, sReason). Si...
by hMailserver-User
2019-11-17 11:24
Forum: Scripting
Topic: Firewall Ban
Replies: 149
Views: 58141

Re: Firewall Ban

And: thank you for your patience!
by hMailserver-User
2019-11-17 11:22
Forum: Scripting
Topic: Firewall Ban
Replies: 149
Views: 58141

Re: Firewall Ban

Can you post a little more of the script surrounding it? Where is it? When is it being called? Do you have a version of hmailserver that has OnHELO? Or an official version before 5.7.0? I'm using RvdH's custom build v5.6.8-B2489.22 as you suggested a few postings before. I am using the latest Event...
by hMailserver-User
2019-11-17 00:42
Forum: Scripting
Topic: Firewall Ban
Replies: 149
Views: 58141

Re: Firewall Ban

I may have added this after you downloaded it. I made several changes today. It should go at the top of EventHandlers.vbs (below "option explicit", of course). ' COM authentication Private Const ADMIN = "Administrator" Private Const PASSWORD = "supersecretpassword" Private Const EVENTDIR = "C:\Prog...
by hMailserver-User
2019-11-16 20:42
Forum: Scripting
Topic: Firewall Ban
Replies: 149
Views: 58141

Re: Firewall Ban

Hi, thx for your efforts. I deleted everything and started all over again with the latest version from github. Now another error is occuring: "ERROR" 3516 "Script Error: Source: Runtime error in Microsoft VBScript - Error: 800A01A8 - Description: Object required: 'LockFile(...)' - Line: 142 Column: ...
by hMailserver-User
2019-11-16 15:52
Forum: Scripting
Topic: Firewall Ban
Replies: 149
Views: 58141

Re: Firewall Ban

Line 261: Call FWBan(oClient.IPAddress, "HELO-Inv", oClient.HELO) Hmm - but "helo" is used in this function: Function idsAddIP(sIPAddress, sCountry, sHELO) Dim strSQL, oDB : Set oDB = GetDatabaseObject strSQL = "INSERT INTO hm_ids (timestamp,ipaddress,hits,country,helo) VALUES (NOW(),'" & sIPAddress...
by hMailserver-User
2019-11-16 15:11
Forum: Scripting
Topic: Firewall Ban
Replies: 149
Views: 58141

Re: Firewall Ban

I still post my experience in setting this up - i hope you don't mind :-) There is another line (114) which is using "idsTable". Changed it to hm_ids because in your project its not defined as variable. Another thing is that on the example for adding the three MSSQL tables on the hm_ids - table the ...
by hMailserver-User
2019-11-16 13:21
Forum: Scripting
Topic: Firewall Ban
Replies: 149
Views: 58141

Re: Firewall Ban

hi palinka, currently i'm running into another problem, error message: "ERROR" 2556 "2019-11-16 12:07:16.696" "Script Error: Source: Runtime error in Microsoft VBScript - Error: 800A01F4 - Description: Variable is not defined: 'idsTable' - Line: 107 Column: 4 - Code: (null)" referencing to (my) line...
by hMailserver-User
2019-11-15 18:55
Forum: Scripting
Topic: Firewall Ban
Replies: 149
Views: 58141

Re: Firewall Ban

Hello palinka! trying to get things sorted with my hmailserver - installation so i downloades .48 from your GitHub Is it possible that in EventHandlers.vbs at line 180 a ' is missing? ("Exclude Backup-MX & local LAN from test" -> " ' Exclude Backup-MX & local LAN from test" at line 302 a ) is missin...
by hMailserver-User
2019-11-10 20:50
Forum: Scripting
Topic: Firewall Ban
Replies: 149
Views: 58141

Re: Firewall Ban

Hello palinka,

this would also work with version 5.6.8 of hMailserver?
because according to GitHub version 5.7.0 of hMailserver is required.

Thx!
by hMailserver-User
2019-08-26 22:00
Forum: Development & alpha discussions
Topic: hMailServer 5.7
Replies: 149
Views: 173357

Re: hMailServer 5.7

Hi!

Just to be sure: i can simply update my 5.6.8 installation - i'm using it with mysql x86 - with 5.7?
Thx!