Search found 116 matches

by MarHMS
2020-02-17 18:47
Forum: General discussions
Topic: IMAP Sync Issue
Replies: 4
Views: 3848

Re: IMAP Sync Issue

mattg wrote:
2020-02-14 08:48
Seems like a dying disk to me

Run some disk checks on those drives
Ran the disk checks and no problem was identified.

Tried Thunderbird and I had to restart it to retrieve new emails.
Webmail works without a problem, it's just those desktop mail clients.
by MarHMS
2020-02-14 08:51
Forum: General discussions
Topic: IMAP Sync Issue
Replies: 4
Views: 3848

Re: IMAP Sync Issue

mattg wrote:
2020-02-14 08:48
Seems like a dying disk to me

Run some disk checks on those drives
Server is a VM. Hyper-V on Windows Server 2016 in raid-5 config. All drives are healthy.
by MarHMS
2020-02-14 08:32
Forum: General discussions
Topic: IMAP Sync Issue
Replies: 4
Views: 3848

IMAP Sync Issue

On February 12th at about 12:30 PM, the explorer.exe for our Windows Server 2012 R2 hanged. We were forced to shutdown the server. Since that incident, we've been encountering synchronization issues with a few of our Outlook email clients. Not all emails would sync. For a few, no emails are being sy...
by MarHMS
2019-10-27 05:02
Forum: User-submitted tutorials
Topic: HOW TO run Clamwin and have a ClamAV system SERVICE
Replies: 196
Views: 174279

Re: HOW TO run Clamwin and have a ClamAV system SERVICE

I'm assuming Clamwin is no longer being updated. We are unable to update ClamAV to 0.101.4.
by MarHMS
2019-10-27 04:59
Forum: General discussions
Topic: Spam Assistance
Replies: 11
Views: 2645

Re: Spam Assistance

So your users are receiving SPAM, not NDRs?? We find the SaneSecurity database catches a lot of this type of SPAM https://www.hmailserver.com/forum/viewtopic.php?p=180258#p180258 I run Clam + SaneSecrity checks via my SpamAssassin rules You could do that or just use ClamAV + SaneSecurity Definition...
by MarHMS
2019-10-24 07:24
Forum: General discussions
Topic: Spam Assistance
Replies: 11
Views: 2645

Re: Spam Assistance

How do you know that these are used to SEND spam? Or is it just that is where the NDRs (Non Delivery Reports) are going, causing everyone in the distribution list to get a copy diagnostics look fine to me That's where the non-delivery reports goes to. All emails associated with the distribution ema...
by MarHMS
2019-10-22 15:15
Forum: General discussions
Topic: Spam Assistance
Replies: 11
Views: 2645

Re: Spam Assistance

How do you know that these are used to SEND spam? Or is it just that is where the NDRs (Non Delivery Reports) are going, causing everyone in the distribution list to get a copy diagnostics look fine to me That's where the non-delivery reports goes to. All emails associated with the distribution ema...
by MarHMS
2019-10-22 14:54
Forum: General discussions
Topic: Spam Assistance
Replies: 11
Views: 2645

Re: Spam Assistance

Is your PFsense on 192.168.0.1? If so you have a config error there somewhere as that IP is 'autobanned' a lot Your Higher IP range takes precedence over the autoban IP range correctly, but a LAN device triggering Autoban typically means that you have bad password stored, or have a Trojan on that m...
by MarHMS
2019-10-22 12:27
Forum: General discussions
Topic: Spam Assistance
Replies: 11
Views: 2645

Re: Spam Assistance

Is the .doc attachment being sent to that list a problem? The anti-virus detects it as a trojan. I viewed it online, and it contains what looks like an image stating that ms word couldn't start the last time and needs start in safe mode. To catch the NDRs you can use a global rule From contains 'ma...
by MarHMS
2019-10-22 03:02
Forum: General discussions
Topic: Spam Assistance
Replies: 11
Views: 2645

Re: Spam Assistance

We have quite a few distribution emails which are being used for sending spam, so all email addresses associated with them are receiving bounce backs. How do you know that these are used to SEND spam? Or is it just that is where the NDRs (Non Delivery Reports) are going, causing everyone in the dis...
by MarHMS
2019-10-21 17:50
Forum: General discussions
Topic: Spam Assistance
Replies: 11
Views: 2645

Spam Assistance

I'm requesting a review of my HMS configuration, please. We've been receiving quite a lot of bounce back spam emails. The emails usually originate from 4 of our email addresses. We've changed the passwords numerous times, but the issue remains. SPF, DKIM and DMARC have all been configured for all do...
by MarHMS
2019-09-25 02:42
Forum: General discussions
Topic: Upgrading Database and SSL
Replies: 41
Views: 12465

Re: Upgrading Database and SSL

It worked @mattg - it worked!!! :D internal database size: 767 MB email data directory size: 759 GB I finally upgraded HMS's internal database from the SQL Compact Edition to SQL Server Edition. Took me roughly 14 hours. Pulled an all nighter. Utilized SQL Server Compact Toolbox to extract database ...
by MarHMS
2019-09-23 20:38
Forum: General discussions
Topic: Upgrading Database and SSL
Replies: 41
Views: 12465

Re: Upgrading Database and SSL

Apologies for waking up this thread.

Is it possible for me to use the SQL Server Compact Toolbox to migrate data from the built-in database to SQL Server 2017?
by MarHMS
2019-02-22 03:45
Forum: General discussions
Topic: Upgrading Database and SSL
Replies: 41
Views: 12465

Re: Upgrading Database and SSL

Installing the google certs won't change what the log says. The logs says that communication succeeded, but the hMailserver didn't try to validate the server cert (because it didn't have to as the connection was standard incoming message - these ARE NEVER validated by hMailserver) However to answer...
by MarHMS
2019-02-18 03:26
Forum: General discussions
Topic: Upgrading Database and SSL
Replies: 41
Views: 12465

Re: Upgrading Database and SSL

In fact many servers outside of the EU fail that verification, including many banks and government departments in my Country (Australia), although this is is getting better. In the EU, especially in Germany, they tend to get this correct. In answer to your question I have 'verification' turned ON, ...
by MarHMS
2019-02-17 19:45
Forum: General discussions
Topic: Upgrading Database and SSL
Replies: 41
Views: 12465

Re: Upgrading Database and SSL

TCPConnection - TLS/SSL handshake completed. I think it does This bit Verify certificate: False means that your hmailserver didn't try to validate the name of the certificate used by the other server. Hmailserver will only try to validate for SSL certs for a a route or an SMTP relayer, and then onl...
by MarHMS
2019-02-16 01:48
Forum: General discussions
Topic: Upgrading Database and SSL
Replies: 41
Views: 12465

Re: Upgrading Database and SSL

Headers are unlikely to show any detail of the connection The ONLY way to tell is check your logs Connection Encryption shows up under TCP/IP logging Hi Matt, Wow... tomorrow turned into months... See excerpt in log below. I don't think my SSL works "DEBUG" 4980 "2019-02-15 12:27:41.180" "TCP conne...
by MarHMS
2018-10-29 04:47
Forum: General discussions
Topic: Upgrading Database and SSL
Replies: 41
Views: 12465

Re: Upgrading Database and SSL

Ok... I'll confirm tomorrow
by MarHMS
2018-10-29 02:49
Forum: General discussions
Topic: Upgrading Database and SSL
Replies: 41
Views: 12465

Re: Upgrading Database and SSL

Apologies, I did another test with mobile app and all seem to work. I had seen a ARC-Authentication-Results: i=1; mx.google.com; spf=temperror (google.com: error in processing during lookup of username@domain.com: DNS error) I'm no longer seeing that error now. We're utilizing Afterlogic Webmail Lit...
by MarHMS
2018-10-29 01:24
Forum: General discussions
Topic: Upgrading Database and SSL
Replies: 41
Views: 12465

Re: Upgrading Database and SSL

I just updated my webmail. During the testing of the SSL being on and off, I took a copy of the header files from my gmail account. Can you please say what is happening here as it relates to the SSL? It seem as if there's an error where Gmail isn't able to say where the message is from. Without SSL ...
by MarHMS
2018-10-25 23:19
Forum: General discussions
Topic: Upgrading Database and SSL
Replies: 41
Views: 12465

Re: Upgrading Database and SSL

@mattg I enabled SSL within HMS and I've haven't gotten any errors. I switched my SMTP ports within Outlook and webmail to use 465. Is there a way for me to confirm that my messages are indeed being sent securely?
by MarHMS
2018-10-18 03:41
Forum: General discussions
Topic: Upgrading Database and SSL
Replies: 41
Views: 12465

Re: Upgrading Database and SSL

Can I use the same SSL I created and is being used for our webmail? I do I have my webmail at mail.example.com, and use the same certificate on my hMailserver. Noted. I know the DDS will move all emails to the user's inbox, which is what we're trying to avoid. DDS will only move UNKNOWN messages to...
by MarHMS
2018-10-15 18:07
Forum: General discussions
Topic: Upgrading Database and SSL
Replies: 41
Views: 12465

Re: Upgrading Database and SSL

In addition to this we recently acquired and secured our webmail with a Standard SSL from GoDaddy. Based on other threads, they've encountered errors and I don't recall seeing those resolved. My issue is that my installation of HMS is hosting 5 domains. Will my current SSL certificate with only one...
by MarHMS
2018-10-15 15:50
Forum: General discussions
Topic: Upgrading Database and SSL
Replies: 41
Views: 12465

Re: Upgrading Database and SSL

Seen it on be before with another user (i remote connected to think to see it myself). Proved it to be a rogue message by (temporarily) removing the accounts messages one by one (renaming away from the data directory) to identify where. Never understood why though. You could try a dds and https://w...
by MarHMS
2018-09-29 02:56
Forum: General discussions
Topic: Upgrading Database and SSL
Replies: 41
Views: 12465

Re: Upgrading Database and SSL

mattg wrote:
2018-09-26 23:00
Sounds like a problematic message to me, but I'm not sure how you would find it.

Does your Antivirus exclude the data directory?
Only anti-virus installed in a sense is the ClamAV service.
by MarHMS
2018-09-26 20:39
Forum: General discussions
Topic: Upgrading Database and SSL
Replies: 41
Views: 12465

Re: Upgrading Database and SSL

Any thoughts on this @jimimaseye and @mattg?
by MarHMS
2018-09-23 23:17
Forum: General discussions
Topic: Upgrading Database and SSL
Replies: 41
Views: 12465

Re: Upgrading Database and SSL

I don't think it's working. Only the first 3 domains got backed up and then nothing happens. No related process running in task manager. Seem to have halted midway 3rrd domain backup. Also, shouldn't the HMS service be halted during this process? 2018-09-23 15:57:09.050 Backup started 2018-09-23 15...
by MarHMS
2018-09-23 22:56
Forum: General discussions
Topic: Upgrading Database and SSL
Replies: 41
Views: 12465

Re: Upgrading Database and SSL

Thanks mattg It works now. Though it was cut short last night. I will reattempt tonight. Warning: if the backup was interrupted then its likely it wont work tonight *with some message about "backup already started/running"). Ensure your BACKUP directory is completely empty of folders before you res...
by MarHMS
2018-09-14 02:33
Forum: General discussions
Topic: Upgrading Database and SSL
Replies: 41
Views: 12465

Re: Upgrading Database and SSL

No it's not Once you install that version of hMailserver, download the link here >> http://www.hmailserver.com/forum/viewtopic.php?f=10&t=30193&start=60#p203420 (Also linked above) and then download the custom build with the same version number, in your case 5.6.7-B2425.16.7z Make sure that the hma...
by MarHMS
2018-09-13 07:15
Forum: General discussions
Topic: Upgrading Database and SSL
Replies: 41
Views: 12465

Re: Upgrading Database and SSL

Just attempted a backup. Is that not the correct HMS version? 2018-09-13 00:09:01.903 Backup started 2018-09-13 00:09:01.903 Loading backup settings.... 2018-09-13 00:09:14.090 The size of the data directory exceeds the maximum RECOMMENDED size for the built in backup (1.5GB). Please consult the ...
by MarHMS
2018-09-12 13:55
Forum: General discussions
Topic: Upgrading Database and SSL
Replies: 41
Views: 12465

Re: Upgrading Database and SSL

Thanks.

I'll remove the other mx records.
by MarHMS
2018-09-11 21:40
Forum: General discussions
Topic: Upgrading Database and SSL
Replies: 41
Views: 12465

Re: Upgrading Database and SSL

jimimaseye wrote:
2018-09-10 22:43
Correct.

There are numerous benefits in taking option 3 and no reason why you shouldn't.

Go for it.

[Entered by mobile. Excuse my spelling.]
Thank you!
by MarHMS
2018-09-11 21:38
Forum: General discussions
Topic: Upgrading Database and SSL
Replies: 41
Views: 12465

Re: Upgrading Database and SSL

In addition to this we recently acquired and secured our webmail with a Standard SSL from GoDaddy. Based on other threads, they've encountered errors and I don't recall seeing those resolved. My issue is that my installation of HMS is hosting 5 domains. Will my current SSL certificate with only one...
by MarHMS
2018-09-10 21:18
Forum: General discussions
Topic: Upgrading Database and SSL
Replies: 41
Views: 12465

Re: Upgrading Database and SSL

A few things in all of that Your Option #1 is a last resort Your option #2 should be easily achieved by doing this Start >> All programs >> Microsoft SQL Server >> SQL Server Installation Centre >> Maintenance >> Edition Upgrade Your Option #3 is here >> http://www.hmailserver.com/forum/viewtopic.p...
by MarHMS
2018-09-10 01:08
Forum: General discussions
Topic: Upgrading Database and SSL
Replies: 41
Views: 12465

Upgrading Database and SSL

We're in the process of upgrading our SQL server. This is inclusive of acquiring additional storage, upgrade from MSSQL Server Express to Standard edition, and migrate from bare metal installation to VM. The 2 databases being hosted are being accessed by 50 workstations and a terminal server with 50...
by MarHMS
2018-06-25 22:09
Forum: General discussions
Topic: We're under attack
Replies: 26
Views: 6292

Re: We're under attack

jimimaseye wrote:
2018-06-21 01:08
Here you go:

The guide has been updated with commands that will also work for you using DatabaseBrowser: viewtopic.php?f=21&t=28914
It works on my test environment... thanks a lot...
Now to migrate this database to SQL Server and perform the updates.
by MarHMS
2018-06-23 10:54
Forum: General discussions
Topic: We're under attack
Replies: 26
Views: 6292

Re: We're under attack

jimimaseye wrote:
2018-06-21 01:08
Here you go:

The guide has been updated with commands that will also work for you using DatabaseBrowser: viewtopic.php?f=21&t=28914
Thanks a lot! Will try on Monday.
by MarHMS
2018-06-19 15:22
Forum: General discussions
Topic: We're under attack
Replies: 26
Views: 6292

Re: We're under attack

jimimaseye wrote:
2018-06-13 00:16
MarHMS wrote:
2018-06-13 00:13
@jimimaseye any word on the SQL query?
I'm away at the moment so not with computer to test. I will reply when I'm back.

[Entered by mobile. Excuse my spelling.]
Just a simple reminder
by MarHMS
2018-06-13 00:13
Forum: General discussions
Topic: We're under attack
Replies: 26
Views: 6292

Re: We're under attack

@jimimaseye any word on the SQL query?
by MarHMS
2018-06-11 23:58
Forum: General discussions
Topic: We're under attack
Replies: 26
Views: 6292

Re: We're under attack

Are you using the correct password? (It is not the admin password but the database password, decrypted, as stored in your ini file). I know it works because i have used it myself. Yes, it is the correct password. I followed the procedure to acquire the password, and same was used to access the data...
by MarHMS
2018-06-11 23:40
Forum: General discussions
Topic: We're under attack
Replies: 26
Views: 6292

Re: We're under attack

Its related to this: ERROR: Messages exists which are located outside of the data directory E:\HMAIL\Data. ERROR: Full paths are stored in the database. Run through this procedure: https://www.hmailserver.com/forum/viewtopic.php?f=21&t=28914 I remember I had this issue before. I was advised then to...
by MarHMS
2018-05-28 20:44
Forum: General discussions
Topic: hMailServer Down
Replies: 2
Views: 1129

Re: hMailServer Down

System's back up.

Disabled both Autoban and SpamAssassin

Our local LAN (192.168.0.x) got banned.

Added it to IP Ranges as 192.168.0.1-192.168.0.254 with 15 priority. Is that okay?
This didn't bring up the system. It came up after disabling both Autoban and SpamAssassin.
by MarHMS
2018-05-28 20:31
Forum: General discussions
Topic: hMailServer Down
Replies: 2
Views: 1129

hMailServer Down

Our hMailServer is currently down. Cannot log into accounts. Username and password is incorrect. Please see log below: "ERROR" 4340 "2018-05-28 12:44:29.147" "Severity: 3 (Medium), Code: HM4227, Source: File::ReadFile, Description: An unknown error occurred while reading file from disk." "ERROR" 434...
by MarHMS
2018-05-26 00:19
Forum: General discussions
Topic: We're under attack
Replies: 26
Views: 6292

Re: We're under attack

ALSO that latest diagnostic shows that an error log is present Please show the contents of the error log (I have my invalid login attepmts in Autoban set to 3. 10 is a lot) See excerpt below: "ERROR" 1072 "2018-05-24 00:00:00.011" "Severity: 3 (Medium), Code: HM5050, Source: File::CreateDirectory, ...
by MarHMS
2018-05-24 18:29
Forum: General discussions
Topic: We're under attack
Replies: 26
Views: 6292

Re: We're under attack

Here are the new settings 2018-05-24 Hmailserver: 5.6.4-B2283 DOMAINS "Domain1.com" - emxxxxxxxx.com Enabled: True SIGNATURE LIMITS DKIM ADVANCED Enabled: False Max size: 0 Enabled: False Max message size: 0 Plus addressing: False Max size of accounts: 0 Greylisting: False "Domain2.com" - fixxxxxxxx...
by MarHMS
2018-05-24 15:09
Forum: General discussions
Topic: We're under attack
Replies: 26
Views: 6292

Re: We're under attack

So set an individual IP RANGE that covers the webmail server, set it priority 25 or more then re-enable autoban. BTW this: IP: 0.0.0.0 - 255.255.255.255 Priority: 10 Name: Internet Allow Deliveries from Require Authentication from Local To Local - True Local To Local - False Leaves you open to rece...
by MarHMS
2018-05-24 14:07
Forum: General discussions
Topic: We're under attack
Replies: 26
Views: 6292

Re: We're under attack

Now that I am seeing this, I realize that auto-ban is disabled. I believed we had disabled same due to the warning that our webmail could be blocked too. This is likely if staff's AD passwords have expired and they continue the log in attempt. Our approach is to lock user accounts for 1 hour after 5...
by MarHMS
2018-05-24 14:02
Forum: General discussions
Topic: We're under attack
Replies: 26
Views: 6292

Re: We're under attack

2018-05-24 Hmailserver: 5.6.4-B2283 DOMAINS "Domain1.com" - emxxxxxxxx.com Enabled: True SIGNATURE LIMITS DKIM ADVANCED Enabled: False Max size: 0 Enabled: False Max message size: 0 Plus addressing: False Max size of accounts: 0 Greylisting: False "Domain2.com" - fixxxxxxxxxxxxx.com Enabled: True S...
by MarHMS
2018-05-23 13:55
Forum: General discussions
Topic: We're under attack
Replies: 26
Views: 6292

Re: We're under attack

Upon inspection of the logs, I've identified quite a few of our accounts that are being "drilled" by over 20 IP addresses. These IP addresses are blacklisted IP addresses. I get heaps of these too I routinely block all logon attempts from outside Australia. These IP addresses are blacklisted IP add...
by MarHMS
2018-05-23 13:51
Forum: General discussions
Topic: We're under attack
Replies: 26
Views: 6292

Re: We're under attack

jimimaseye wrote:
2018-05-22 22:56
Ensure passwords are strong and your autoban settings are strong.

If you want them reviewed then run this and post the results: viewtopic.php?f=20&t=30914
I will perform the test tomorrow. It's now a holiday here: Labour Day.
by MarHMS
2018-05-22 21:04
Forum: General discussions
Topic: We're under attack
Replies: 26
Views: 6292

We're under attack

I require assistance on how to deal with the below mess. We have 4 accounts that are constantly being locked out and that's due to hMailServer. The accounts are authenticated via a domain controller. Upon inspection of the logs, I've identified quite a few of our accounts that are being "drilled" by...
by MarHMS
2017-04-03 00:57
Forum: General discussions
Topic: SSL Query
Replies: 4
Views: 1573

Re: SSL Query

Post by MarHMS » 2017-04-03 00:18 johang wrote: by MarHMS » 2017-04-03 00:04 Our company purchased an SSL package from Godaddy. We have Afterlogic Webmail Lite. Where should we implement the SSL certificate? Should it be implemented in HMS or in wamp? so you want the SSL for your webmail users (pad...
by MarHMS
2017-04-03 00:18
Forum: General discussions
Topic: SSL Query
Replies: 4
Views: 1573

Re: SSL Query

by MarHMS » 2017-04-03 00:04 Our company purchased an SSL package from Godaddy. We have Afterlogic Webmail Lite. Where should we implement the SSL certificate? Should it be implemented in HMS or in wamp? so you want the SSL for your webmail users (padlock in the webbrowser)? include in WAMP... ( go...
by MarHMS
2017-04-03 00:04
Forum: General discussions
Topic: SSL Query
Replies: 4
Views: 1573

SSL Query

Our company purchased an SSL package from Godaddy.

We have Afterlogic Webmail Lite. Where should we implement the SSL certificate?
Should it be implemented in HMS or in wamp?

Please assist.

Thanks.
by MarHMS
2017-03-04 01:18
Forum: General discussions
Topic: HMS sending Spam
Replies: 16
Views: 4299

Re: HMS sending Spam

jimimaseye wrote:You use whatever the IP ADDRESS is that is identified to HMS at the time of connection and the priority must be higher than 20.
Will do that.

Thanks
by MarHMS
2017-03-03 19:37
Forum: General discussions
Topic: HMS sending Spam
Replies: 16
Views: 4299

Re: HMS sending Spam

having a default domain set is the ONLY way that accounts can authenticate with just a username Admin GUI >> Advanced You have a default domain set, please make that blank I cleared the default domain box. Thanks a lot guys! I also enabled Auto Ban. I use a webmail which resides on the same server ...
by MarHMS
2017-03-03 04:44
Forum: General discussions
Topic: HMS sending Spam
Replies: 16
Views: 4299

Re: HMS sending Spam

The accounts are authenticated using username@example.com, not username. It's odd though how it got authenticated with just voicemail though.

Default domain?
I don't think I'm understanding.
by MarHMS
2017-03-02 19:18
Forum: General discussions
Topic: HMS sending Spam
Replies: 16
Views: 4299

Re: HMS sending Spam

I can't edit the post above. Those excerpts are before the suspicious email got authenticated. Can you explain? Below excerpt is when it got authenticated: "DEBUG" 1848 "2017-03-02 02:27:26.278" "Creating session 1221903" "TCPIP" 1848 "2017-03-02 02:27:26.278" "TCP - 112.124.76.177 connected to 192....
by MarHMS
2017-03-02 18:46
Forum: General discussions
Topic: HMS sending Spam
Replies: 16
Views: 4299

Re: HMS sending Spam

Okay, I'm getting somewhere, but I need your assistance Jim. I pasted 3 excerpts of the log below. I see where authentications are failing with some random accounts, also with one being almost legit. I see where the suspicious email is sending, but not where it got authenticated. Suspicious email be...
by MarHMS
2017-03-02 16:33
Forum: General discussions
Topic: HMS sending Spam
Replies: 16
Views: 4299

Re: HMS sending Spam

I see.
So should I delete LAN IP range, or change its priority?
Will make the changes. Thanks as usual! :)

I'm going through the document.
Mail server passed open relay tests, but there are definitely ongoing suspicious activities based on the queue.