Search found 20123 matches

by mattg
2019-10-18 07:55
Forum: Development & alpha discussions
Topic: hMailServer 5.7
Replies: 92
Views: 5805

Re: hMailServer 5.7

mattg wrote:
2019-10-11 11:03
Just did this suite of tests
https://www.immuniweb.com/ssl/

I scored an A+ which is awesome
Put a ':25' at the end and it will check mail server on port 25
by mattg
2019-10-18 06:11
Forum: Development & alpha discussions
Topic: hMailServer 5.7
Replies: 92
Views: 5805

Re: hMailServer 5.7

can you please share your current cipher suite mine is HIGH:!TLSv1:!SSLv3; and I only allow TLSv1.2 and TLSv1.3 Also how did you achieve 'OCSP stapling' X509 CERTIFICATES ARE IN VERSION 3 All the X509 certificates provided by the server are in version 3.Good configuration SERVER DOES NOT SUPPORT OCS...
by mattg
2019-10-17 23:29
Forum: Off-topic discussions
Topic: Long shot email recovery
Replies: 3
Views: 39

Re: Long shot email recovery

Its all happening inside the DATA Folder. If hMailServer is sending a qued or scheduled Message, it creates a Temp file at the root of the DATA folder, exactly for the duration until the receiving SMTP has accepted the sending Email. Long story short: Check your entire DATA folder and all its Subfo...
by mattg
2019-10-17 17:18
Forum: General discussions
Topic: marked read mail go back to unread
Replies: 4
Views: 112

Re: marked read mail go back to unread

This is a mail client issue

Nothing to do with your database or your hmailserver
by mattg
2019-10-17 16:48
Forum: Development & alpha discussions
Topic: hMailServer 5.7
Replies: 92
Views: 5805

Re: hMailServer 5.7

How did you pass HIPAA and NIST

What do you do differently than me?

What is your cipher suite?
by mattg
2019-10-17 16:45
Forum: General discussions
Topic: marked read mail go back to unread
Replies: 4
Views: 112

Re: marked read mail go back to unread

Unless you have a script marking messages as read / unread this is always a mail client thing

check that the user doesn't have two mail clients accessing the same account at once
by mattg
2019-10-17 11:41
Forum: General discussions
Topic: Configure Server properly - Blacklisted by spamhouse
Replies: 19
Views: 229

Re: Configure Server properly - Blacklisted by spamhouse

(This is not normal. Figure out why your gateway isn't simply forwarding port 25 smtp requests). This is often because the router is 'inspecting' smtp mail with an Antivirus or as an edge device... I'm guessing that because you keep getting blacklisted that you have a bot on your network that is us...
by mattg
2019-10-17 08:21
Forum: General discussions
Topic: Configure Server properly - Blacklisted by spamhouse
Replies: 19
Views: 229

Re: Configure Server properly - Blacklisted by spamhouse

jim.bus wrote:
2019-10-17 08:00
For Port 465 'StartTLS Required' also works. It is what I use for Port 465 even though in the Outlook Client I use I specify TLS because there is no option for StartTLS in Outlook 2010.
Yes it works, it just isn't standard

Similarly port 1926 will work if you set it up work
by mattg
2019-10-17 04:24
Forum: General discussions
Topic: Delivery thread update
Replies: 6
Views: 128

Re: Delivery thread update

Ok just ran a test This changes the GUI value to 50, and also updates the database no need for a reboot... But does it take immediate effect? I don't know, but I'd assume so You could run this as a scheduled task on your server Option Explicit Private const g_sAdminPassword = "MySecretPassword" dim ...
by mattg
2019-10-17 03:27
Forum: General discussions
Topic: Delivery thread update
Replies: 6
Views: 128

Re: Delivery thread update

Reason I ask is that the admin GUI ONLY uses the API.

If it can be done in the admin GUI, it can be done via API
by mattg
2019-10-17 03:25
Forum: General discussions
Topic: Delivery thread update
Replies: 6
Views: 128

Re: Delivery thread update

So when you change it manually using the GUI, does it work without restarting the service?
by mattg
2019-10-17 00:06
Forum: Feature requests
Topic: HCD - SSL-Simplification with Letsencrypt
Replies: 24
Views: 2396

Re: HCD - SSL-Simplification with Letsencrypt

I have a webmail interface on mx.example.com (hosted on Ubuntu running Apache elsewhere on my my LAN. Lets Encrypt certs updated by the certbot script) That's ALSO my mailserver local host name I simply copy the fullchain.pem from by Ubuntu box and use it for my hmailserver I used to use the winsimp...
by mattg
2019-10-17 00:00
Forum: General discussions
Topic: Delivery thread update
Replies: 6
Views: 128

Re: Delivery thread update

I think a reset of the service is required

Why don't you just leave them set HIGH?
by mattg
2019-10-16 23:59
Forum: General discussions
Topic: Configure Server properly - Blacklisted by spamhouse
Replies: 19
Views: 229

Re: Configure Server properly - Blacklisted by spamhouse

ALSO You've set your internet IP range to a priority of 20. That should be UNDER 20 for Autoban to work Change it to 15 Your whitelisting range seems to include too wide a group Turn off SSLv3.0 in SSL StartTLS REQUIRED on port 25 will reject a lot of incoming mail Port 465 should be SSL/TLS Port 58...
by mattg
2019-10-16 01:54
Forum: General discussions
Topic: MySQL 8 cluster and hmailserver 5.6.7
Replies: 7
Views: 171

Re: MySQL 8 cluster and hmailserver 5.6.7

try that sql statement without the auto increment
by mattg
2019-10-15 23:48
Forum: General discussions
Topic: MySQL 8 cluster and hmailserver 5.6.7
Replies: 7
Views: 171

Re: MySQL 8 cluster and hmailserver 5.6.7

Read this thread >> viewtopic.php?f=10&t=34219

The new 64 bit hmailserver ALPHA may work better for you
Some of us USE this ALPHA in production
by mattg
2019-10-15 13:44
Forum: Off-topic discussions
Topic: Another wierd attack
Replies: 7
Views: 243

Re: Another wierd attack

jim.bus wrote:
2019-10-15 12:28
Version 5.6.7-B2425.
#5 here >> viewtopic.php?f=10&t=30193&start=180#p213193

Also fixed in the new ALPHA 5.7 that I am running
by mattg
2019-10-15 11:06
Forum: Off-topic discussions
Topic: Another wierd attack
Replies: 7
Views: 243

Re: Another wierd attack

what version are you using jim.bus ?
by mattg
2019-10-14 17:13
Forum: General discussions
Topic: Server properly configures marked as SPAMMER. Please help
Replies: 22
Views: 316

Re: Server properly configures marked as SPAMMER. Please help

No sending at all, just lots of blocking

you have an error in your eventhandlers.vbs though
Line 112


The CBL may be triggered for a day or two

You do a AV sweep, and run a Malware scan of your entire network, just to be sure
by mattg
2019-10-14 00:42
Forum: Development & alpha discussions
Topic: Turkish Language
Replies: 8
Views: 5510

Re: Turkish Language

@Katip

I think it is pretty clear that there is no issue here, just a couple of wanna be spammers adding links that they shouldn't
by mattg
2019-10-13 13:29
Forum: General discussions
Topic: hmailserver migration from ms server 2016 std to ms server 2019 std
Replies: 2
Views: 187

Re: hmailserver migration from ms server 2016 std to ms server 2019 std

If hmailserver starts on Server 2019, best course of action is to DO A BACKUP using builtin backup with all options selected including compression, copy the backup to the new machine then restore. MS SQL CE uses windows user permissions, so a different username or password will not work, and a diffe...
by mattg
2019-10-12 22:46
Forum: General discussions
Topic: Changing data directory
Replies: 3
Views: 142

Re: Changing data directory

Run the internal diagnostics to confirm, especially if you had an earlier version and later upgraded
by mattg
2019-10-12 10:48
Forum: General discussions
Topic: Server properly configures marked as SPAMMER. Please help
Replies: 22
Views: 316

Re: Server properly configures marked as SPAMMER. Please help

SMTPD is mail delivered to your server SMTPC is being delivered FROM your server to another server Most of that SMTPD is just someone trying unsuccessfully to AUTH, using a dictionary attack Doesn't look like much got through There is one account that you seem to be trying to get to but it is 'over ...
by mattg
2019-10-12 04:48
Forum: General discussions
Topic: Server properly configures marked as SPAMMER. Please help
Replies: 22
Views: 316

Re: Server properly configures marked as SPAMMER. Please help

need the actual raw log please, not the HTML from where loaded it into the log analyser

Just put the text of the log in 'code' tags in a post
by mattg
2019-10-12 02:49
Forum: General discussions
Topic: Multiple domains best setup?
Replies: 17
Views: 466

Re: Multiple domains best setup?

You've whitelisted all of gmail.com That's brave I suspect the reason that you've done that is because you have greylisting enabled Greylisting is great, but does come at a cost You already bypass greylisting on SPF pass, or A/MX pass so that should handle @gmail.com mail I'd turn off SSLv3.0 (at le...
by mattg
2019-10-11 11:03
Forum: Development & alpha discussions
Topic: hMailServer 5.7
Replies: 92
Views: 5805

Re: hMailServer 5.7

Just did this suite of tests https://www.immuniweb.com/ssl/ I scored an A+ which is awesome I did pass PCI DSS I didn't get HIPAA or NIST passes though because I don't have OCSP stapling Also didn't get perfect in the 'best practices' section due to 'server does not have a cipher preference' I run o...
by mattg
2019-10-11 10:24
Forum: General discussions
Topic: Multiple domains best setup?
Replies: 17
Views: 466

Re: Multiple domains best setup?

Guys, can you give link for integration with ClamAV (not ClamWin) or is this https://www.hmailserver.com/forum/viewtopic.php?f=21&t=26829 still valid? Yes that is still valid I don't like mxtoolbox They tend to discriminate against my .com.au domain Test your security with https://www.checktls.com ...
by mattg
2019-10-11 01:05
Forum: General discussions
Topic: MySQL - Is the release distributed with WAMP ok?
Replies: 12
Views: 240

Re: MySQL - Is the release distributed with WAMP ok?

Depends on the version of hMailserver, but that is a warning only for recent versions. It has been taken out of ALPHA versions, so won't be there at all soon.

Once we could only backup up to the 1.5 GB, then it moved to 15 GB, but for a while there has been no functional limit
by mattg
2019-10-11 00:30
Forum: General discussions
Topic: MySQL - Is the release distributed with WAMP ok?
Replies: 12
Views: 240

Re: MySQL - Is the release distributed with WAMP ok?

change the ini file (use a copy of the old one if you have it) then restart the hmailserver service

(copy the new one first just to be safe)
For the CE there is no password stored, just the name of the database, and it uses Windows Authentication
by mattg
2019-10-11 00:03
Forum: General discussions
Topic: MySQL - Is the release distributed with WAMP ok?
Replies: 12
Views: 240

Re: MySQL - Is the release distributed with WAMP ok?

The thing I think that you are missing is that the CE is the MS SQL, not MySQL

MS SQL CE = Microsoft SQL Server Compact Edition

You need to use hmailserver's internal backup and restore,

Need to back up everything including messages and MUST use compression.
ALL OPTIONS MUST BE SELECTED
by mattg
2019-10-10 17:15
Forum: General discussions
Topic: Deactivate Send
Replies: 3
Views: 199

Re: Deactivate Send

try it - but yes

You may need to set the client SMTP server to be your cloud server
by mattg
2019-10-10 16:58
Forum: General discussions
Topic: Deactivate Send
Replies: 3
Views: 199

Re: Deactivate Send

just turn off SMTP

Only allow connections via IMAP or POP3
by mattg
2019-10-10 16:06
Forum: General discussions
Topic: Stop intruder
Replies: 68
Views: 3103

Re: Stop intruder

I've been running that a while with ZERO hits so far this month

I don't remember seeing one
by mattg
2019-10-10 12:23
Forum: General discussions
Topic: Urgent help! Why can someone send an email through my mail server without verification?
Replies: 16
Views: 737

Re: Urgent help! Why can someone send an email through my mail server without verification?

I've been running stats on my autoban list since March 2018 I ban for 7 days Right now I have 6 - port 110 international IPs blocked 20 - port 143 international IPs blocked 18 - port 465 international IPs blocked 21 - port 587 international IPs blocked 20 - port 993 international IPs blocked 9 - por...
by mattg
2019-10-10 06:34
Forum: General discussions
Topic: Urgent help! Why can someone send an email through my mail server without verification?
Replies: 16
Views: 737

Re: Urgent help! Why can someone send an email through my mail server without verification?

Very VERY strong, impossible-to-remember passwords. I use those kinds of passwords often for email, because email is just set and forget. My daughter had a random 15 character password that was clearly sniffed probably somewhere where she used wifi, many years back. I've tightened up my security si...
by mattg
2019-10-10 06:28
Forum: General discussions
Topic: Multiple domains best setup?
Replies: 17
Views: 466

Re: Multiple domains best setup?

Yeah, I prefer apache too.

IIS can be painful at times
by mattg
2019-10-10 01:56
Forum: General discussions
Topic: Multiple domains best setup?
Replies: 17
Views: 466

Re: Multiple domains best setup?

Also run this please >> viewtopic.php?f=20&t=30914

IIS re-writes are done in IIS manager using 'URL Rewrite'
by mattg
2019-10-10 01:46
Forum: General discussions
Topic: Better way to handle spam attacks?
Replies: 5
Views: 386

Re: Better way to handle spam attacks?

Remember that a higher priority is a higher number for IP ranges

A priority of 100 will have precedence over a priority of 10
by mattg
2019-10-10 01:45
Forum: General discussions
Topic: Urgent help! Why can someone send an email through my mail server without verification?
Replies: 16
Views: 737

Re: Urgent help! Why can someone send an email through my mail server without verification?

maxtor wrote:
2019-10-09 16:10
And how could him know the password?
I don't know
That is for you to manage
palinka wrote:
2019-10-09 16:40
Simple passwords are easily guessed.
Absolutley
by mattg
2019-10-09 11:05
Forum: General discussions
Topic: SPF Error when i sent Mails
Replies: 1
Views: 202

Re: SPF Error when i sent Mails

yes

set the SMTP relayer to your Outlook account
by mattg
2019-10-09 05:41
Forum: General discussions
Topic: Lots of errors, after upgrade
Replies: 14
Views: 2688

Re: Lots of errors, after upgrade

There is NO support for direct manipulation of the database.

You are encouraged to use the published API of hMailserver for all bulk operations, AND THEN the necessary extras are automatically processed.
by mattg
2019-10-09 05:38
Forum: General discussions
Topic: Urgent help! Why can someone send an email through my mail server without verification?
Replies: 16
Views: 737

Re: Urgent help! Why can someone send an email through my mail server without verification?

Here is the log of the activity: "SMTPD" 48396 185858 "2019-10-08 12:25:23.529" "124.81.236.122" "RECEIVED: AUTH LOGIN" "SMTPD" 48396 185858 "2019-10-08 12:25:23.529" "124.81.236.122" "SENT: 334 VXNlcm5hbWU6" "SMTPD" 51408 185858 "2019-10-08 12:25:24.160" "124.81.236.122" "RECEIVED: Y2xhdWRpb0BtYXJ...
by mattg
2019-10-09 02:50
Forum: General discussions
Topic: How add folders from multiple email accounts
Replies: 1
Views: 247

Re: How add folders from multiple email accounts

You could do either having multiple email addresses on the boss's computer, or you could use shared IMAP folders

The managers need to agree to this, otherwise this may well be illegal in many countries...
by mattg
2019-10-08 23:33
Forum: General discussions
Topic: email server stops
Replies: 5
Views: 312

Re: email server stops

you mean 'AutoBAN' address?

If so then you have a device that has incorrect user credentials stored which includes the offending email address

run this and post the results >> viewtopic.php?f=20&t=30914
by mattg
2019-10-08 06:14
Forum: General discussions
Topic: email server stops
Replies: 5
Views: 312

Re: email server stops

Jessy14 wrote:
2019-10-07 23:19
Hi, our auto-span lists an email address with our IP address and our email server stops. I have to remove it in order make it work.
Please give more detail on this
Jessy14 wrote:
2019-10-08 05:47
The client does not have this email address and how to fix it?
What is the 'client' in this situation?
by mattg
2019-10-08 02:07
Forum: General discussions
Topic: Getting Different Presentaion Of hMailServer Forum Topics
Replies: 21
Views: 735

Re: Getting Different Presentaion Of hMailServer Forum Topics

Is that an M16 + Bipod

My time in 'the green' wasn't nearly so exciting as to be called 'special'.
by mattg
2019-10-08 02:00
Forum: General discussions
Topic: Stop intruder
Replies: 68
Views: 3103

Re: Stop intruder

Or perhaps using TOR
by mattg
2019-10-08 01:54
Forum: General discussions
Topic: email server stops
Replies: 5
Views: 312

Re: email server stops

Create an IP range for your IP address with a priority of 20 or higher (ie 50)

Find the mail client with an incorrect password saved and fix it
by mattg
2019-10-08 01:52
Forum: General discussions
Topic: backup
Replies: 1
Views: 218

Re: backup

Why is it not possible?

and yes there are many options including this one >>L viewtopic.php?f=21&t=28139

What database do you use?
by mattg
2019-10-08 01:51
Forum: General discussions
Topic: imap folder limit
Replies: 5
Views: 304

Re: imap folder limit

In Outlook have probably dragged the folder to the trash, or 'deleted' it

You could also have dragged from the trash back to your main folder area
by mattg
2019-10-08 01:42
Forum: General discussions
Topic: Errors HM5136 and HM4208
Replies: 9
Views: 497

Re: Errors HM5136 and HM4208

There are some custom builds about that offer an event called 'OnClientConnect'

I use that and some custom logging to track who logs on from where.
How open to using ALPHA software are you? Not for the feint of heart and not recommended on a production machine.
by mattg
2019-10-08 01:36
Forum: General discussions
Topic: Stop intruder
Replies: 68
Views: 3103

Re: Stop intruder

palinka wrote:
2019-10-07 13:39
Anyway, i think the majority of IDS hits come from password guessers. There's no point in letting them back in. EXILED TO THE BARREN WASTELANDS OF THE INTERNET NEVER TO BE HEARD FROM AGAIN!
Except they are usually connecting from dynamic IPs, which may later end being used by a genuine sender
by mattg
2019-10-07 14:14
Forum: General discussions
Topic: imap folder limit
Replies: 5
Views: 304

Re: imap folder limit

What mail client do you use?
Have you tried another
by mattg
2019-10-07 03:47
Forum: General discussions
Topic: SMTH AUTH?
Replies: 13
Views: 2177

Re: SMTH AUTH?

Did you restart the hmailserver?

Also there is an SMTP setting under RFC compliance 'allow plain text authentication'
by mattg
2019-10-05 08:00
Forum: General discussions
Topic: Mail from delivery queue not sent
Replies: 20
Views: 3327

Re: Mail from delivery queue not sent

That SHOULD log in the error log (a separate log file)
by mattg
2019-10-05 07:58
Forum: General discussions
Topic: Getting Different Presentaion Of hMailServer Forum Topics
Replies: 21
Views: 735

Re: Getting Different Presentaion Of hMailServer Forum Topics

jim.bus wrote:
2019-10-04 13:03
I also just looked in General Discussion Forum and there is a Post for a Topic on Pakistani Wedding Photography
We get a dozen or so spam posts per week

We just delete and BanHammer the poster
by mattg
2019-10-05 07:56
Forum: General discussions
Topic: Getting Different Presentaion Of hMailServer Forum Topics
Replies: 21
Views: 735

Re: Getting Different Presentaion Of hMailServer Forum Topics

palinka wrote:
2019-10-04 12:14
Are you using firefox also? I'm using Brave and i haven't had any of these issues. I tried manually typing in http and it automatically forwarded to https.
I'm currently using Waterfox for this forum, so yes a firefox offshoot
I'll try a different browser.
by mattg
2019-10-05 07:54
Forum: General discussions
Topic: How do you check antispam settings?
Replies: 5
Views: 397

Re: How do you check antispam settings?

I find the sanesecurity defs for ClamAV excellent (I run Clam tests within Spamassassin) The one thing, is that sometimes those defs pick up something an hour or two after it is received. What my script does is trawl all unread mail in every inbox, looking for something that wasn't flagged as spam w...
by mattg
2019-10-04 02:06
Forum: General discussions
Topic: How do you check antispam settings?
Replies: 5
Views: 397

Re: How do you check antispam settings?

I recheck with SpamAssassin If it subsequent scans find spam it is moved to the spam@ account, or deleted if high I have some custom logging included, and run on a schedule (I have cut and pasted some of my script - so it may not work in isolation) I do this Function SpamAssassin_ReCheck() 'custom e...