Search found 9 matches

by ali.kalamchi
2020-05-07 20:05
Forum: User contributed hMailServer 4 scripts
Topic: unknown users sending e-mails from our hmailserver
Replies: 14
Views: 3088

Re: unknown users sending e-mails from our hmailserver

many thanks. I really do appreciate the help.
I have completely disabled this account for tonight. Will monitor the server and see how it goes.

have a nice evening :)
by ali.kalamchi
2020-05-07 19:14
Forum: User contributed hMailServer 4 scripts
Topic: unknown users sending e-mails from our hmailserver
Replies: 14
Views: 3088

Re: unknown users sending e-mails from our hmailserver

Hi,

Many thanks. Will do and watch the situation. Yes, it is a NAS device. In the worst case I might even stop it from accessing the mail server at this point.
May I ask how did you specify exactly which account might be causing the issue ?

regards
by ali.kalamchi
2020-05-07 17:39
Forum: User contributed hMailServer 4 scripts
Topic: unknown users sending e-mails from our hmailserver
Replies: 14
Views: 3088

Re: unknown users sending e-mails from our hmailserver

sorry, changing the font color didn't work. below are examples of the fake accounts from the posted log:

leivisonviana@talia.systems
lelek1978@talia.systems
esi2001@talia.systems

We don't have any of those accounts within our talia.systems domain.
by ali.kalamchi
2020-05-07 17:37
Forum: User contributed hMailServer 4 scripts
Topic: unknown users sending e-mails from our hmailserver
Replies: 14
Views: 3088

Re: unknown users sending e-mails from our hmailserver

Here is some log samples, fake e-mail addresses highlighted: "SMTPD" 2080 52721398 "2020-05-07 00:10:46.804" "171.35.169.187" "SENT: 220 Welcome to talia.systems." "SMTPD" 2084 52721398 "2020-05-07 00:10:47.429" "171.35.169.187" "RECEIVED: EHLO mail.talia.systems" "SMTPD" 2084 52721398 "2020-05-07 0...
by ali.kalamchi
2020-05-07 17:00
Forum: User contributed hMailServer 4 scripts
Topic: unknown users sending e-mails from our hmailserver
Replies: 14
Views: 3088

Re: unknown users sending e-mails from our hmailserver

Hey, I'm just trying to figure out how to solve the issue we are having, and I really don't have experience with hmailserver or its scripts/logs, and I have not been offensive so i'm not sure why are you taking it personally.
I do genuinely need help with the issue.

thanks anyway
by ali.kalamchi
2020-05-07 15:57
Forum: User contributed hMailServer 4 scripts
Topic: unknown users sending e-mails from our hmailserver
Replies: 14
Views: 3088

Re: unknown users sending e-mails from our hmailserver

Here is what I have in EventHandlers: ' Sub OnClientConnect(oClient) ' End Sub ' Sub OnSMTPData(oClient, oMessage) ' End Sub ' Sub OnAcceptMessage(oClient, oMessage) ' End Sub ' Sub OnDeliveryStart(oMessage) ' End Sub ' Sub OnDeliverMessage(oMessage) ' End Sub ' Sub OnBackupFailed(sReason) ' End Sub...
by ali.kalamchi
2020-05-07 14:39
Forum: User contributed hMailServer 4 scripts
Topic: unknown users sending e-mails from our hmailserver
Replies: 14
Views: 3088

Re: unknown users sending e-mails from our hmailserver

Hi, Thank you very much for the quick response. Our hmailserver is version 5.6.4-B2283, running on Windows Server 2012r2. - Was the spammer using the authenticated accounts (From) e-mailadres? Or just random (non-existing) names? I see a lot of ramodon-names@our.domain. So the domain looks correct, ...
by ali.kalamchi
2020-05-07 11:38
Forum: User contributed hMailServer 4 scripts
Topic: unknown users sending e-mails from our hmailserver
Replies: 14
Views: 3088

unknown users sending e-mails from our hmailserver

Hi Guys, I really need some help on this. We have an hmail server that we use for our OTRS ticketing system, and for our devices (routers, switches, servers, scanners, ... etc) to send notifications. The problem I see is that there are many unknown users (no account on the server) using this mail se...
by ali.kalamchi
2020-03-09 12:47
Forum: User contributed hMailServer 5 scripts
Topic: Check incoming connections with AbuseIPDB
Replies: 94
Views: 42274

Re: Check incoming connections with AbuseIPDB

Hi Guys,

Could you please post the latest update of the script with support for APIv2.

Also (a beginner's question) this is to be saved as .vbs file along with the other Hmail scripts, correct ?

Thanks