hMailServer forum

mattg

This is a mail client issue

Nothing to do with your database or your hmailserver

mattg

How did you pass HIPAA and NIST

What do you do differently than me?

What is your cipher suite?

mattg

Unless you have a script marking messages as read / unread this is always a mail client thing

check that the user doesn't have two mail clients accessing the same account at once

mattg

read this >> viewtopic.php?f=21&t=29763

mattg

(This is not normal. Figure out why your gateway isn't simply forwarding port 25 smtp requests). This is often because the router is 'inspecting' smtp mail with an Antivirus or as an edge device... I'm guessing that because you keep getting blacklisted that you have a bot on your network that is us...

mattg

jim.bus wrote: ↑
2019-10-17 08:00
For Port 465 'StartTLS Required' also works. It is what I use for Port 465 even though in the Outlook Client I use I specify TLS because there is no option for StartTLS in Outlook 2010.

Yes it works, it just isn't standard

Similarly port 1926 will work if you set it up work

mattg

Ok just ran a test This changes the GUI value to 50, and also updates the database no need for a reboot... But does it take immediate effect? I don't know, but I'd assume so You could run this as a scheduled task on your server Option Explicit Private const g_sAdminPassword = "MySecretPassword" dim ...

mattg

Reason I ask is that the admin GUI ONLY uses the API.

If it can be done in the admin GUI, it can be done via API

mattg

So when you change it manually using the GUI, does it work without restarting the service?

mattg

I have a webmail interface on mx.example.com (hosted on Ubuntu running Apache elsewhere on my my LAN. Lets Encrypt certs updated by the certbot script) That's ALSO my mailserver local host name I simply copy the fullchain.pem from by Ubuntu box and use it for my hmailserver I used to use the winsimp...

mattg

I think a reset of the service is required

Why don't you just leave them set HIGH?

mattg

ALSO You've set your internet IP range to a priority of 20. That should be UNDER 20 for Autoban to work Change it to 15 Your whitelisting range seems to include too wide a group Turn off SSLv3.0 in SSL StartTLS REQUIRED on port 25 will reject a lot of incoming mail Port 465 should be SSL/TLS Port 58...

mattg

try that sql statement without the auto increment

mattg

Read this thread >> viewtopic.php?f=10&t=34219

The new 64 bit hmailserver ALPHA may work better for you
Some of us USE this ALPHA in production

mattg

jim.bus wrote: ↑
2019-10-15 12:28
Version 5.6.7-B2425.

#5 here >> viewtopic.php?f=10&t=30193&start=180#p213193

Also fixed in the new ALPHA 5.7 that I am running

mattg

what version are you using jim.bus ?

mattg

No sending at all, just lots of blocking

you have an error in your eventhandlers.vbs though
Line 112

The CBL may be triggered for a day or two

You do a AV sweep, and run a Malware scan of your entire network, just to be sure

mattg

@Katip

I think it is pretty clear that there is no issue here, just a couple of wanna be spammers adding links that they shouldn't

mattg

If hmailserver starts on Server 2019, best course of action is to DO A BACKUP using builtin backup with all options selected including compression, copy the backup to the new machine then restore. MS SQL CE uses windows user permissions, so a different username or password will not work, and a diffe...

mattg

Run the internal diagnostics to confirm, especially if you had an earlier version and later upgraded

mattg

SMTPD is mail delivered to your server SMTPC is being delivered FROM your server to another server Most of that SMTPD is just someone trying unsuccessfully to AUTH, using a dictionary attack Doesn't look like much got through There is one account that you seem to be trying to get to but it is 'over ...

mattg

need the actual raw log please, not the HTML from where loaded it into the log analyser

Just put the text of the log in 'code' tags in a post

mattg

You've whitelisted all of gmail.com That's brave I suspect the reason that you've done that is because you have greylisting enabled Greylisting is great, but does come at a cost You already bypass greylisting on SPF pass, or A/MX pass so that should handle @gmail.com mail I'd turn off SSLv3.0 (at le...

mattg

Just did this suite of tests https://www.immuniweb.com/ssl/ I scored an A+ which is awesome I did pass PCI DSS I didn't get HIPAA or NIST passes though because I don't have OCSP stapling Also didn't get perfect in the 'best practices' section due to 'server does not have a cipher preference' I run o...

mattg

Guys, can you give link for integration with ClamAV (not ClamWin) or is this https://www.hmailserver.com/forum/viewtopic.php?f=21&t=26829 still valid? Yes that is still valid I don't like mxtoolbox They tend to discriminate against my .com.au domain Test your security with https://www.checktls.com ...

mattg

Depends on the version of hMailserver, but that is a warning only for recent versions. It has been taken out of ALPHA versions, so won't be there at all soon.

Once we could only backup up to the 1.5 GB, then it moved to 15 GB, but for a while there has been no functional limit

mattg

change the ini file (use a copy of the old one if you have it) then restart the hmailserver service

(copy the new one first just to be safe)
For the CE there is no password stored, just the name of the database, and it uses Windows Authentication

mattg

The thing I think that you are missing is that the CE is the MS SQL, not MySQL

MS SQL CE = Microsoft SQL Server Compact Edition

You need to use hmailserver's internal backup and restore,

Need to back up everything including messages and MUST use compression.
ALL OPTIONS MUST BE SELECTED

mattg

try it - but yes

You may need to set the client SMTP server to be your cloud server

mattg

just turn off SMTP

Only allow connections via IMAP or POP3

mattg

I've been running that a while with ZERO hits so far this month

I don't remember seeing one

mattg

I've been running stats on my autoban list since March 2018 I ban for 7 days Right now I have 6 - port 110 international IPs blocked 20 - port 143 international IPs blocked 18 - port 465 international IPs blocked 21 - port 587 international IPs blocked 20 - port 993 international IPs blocked 9 - por...

mattg

Very VERY strong, impossible-to-remember passwords. I use those kinds of passwords often for email, because email is just set and forget. My daughter had a random 15 character password that was clearly sniffed probably somewhere where she used wifi, many years back. I've tightened up my security si...

mattg

Yeah, I prefer apache too.

IIS can be painful at times

mattg

Also run this please >> viewtopic.php?f=20&t=30914

IIS re-writes are done in IIS manager using 'URL Rewrite'

mattg

Remember that a higher priority is a higher number for IP ranges

A priority of 100 will have precedence over a priority of 10

mattg

maxtor wrote: ↑
2019-10-09 16:10
And how could him know the password?

I don't know
That is for you to manage

palinka wrote: ↑
2019-10-09 16:40
Simple passwords are easily guessed.

Absolutley

mattg

yes

set the SMTP relayer to your Outlook account

mattg

There is NO support for direct manipulation of the database.

You are encouraged to use the published API of hMailserver for all bulk operations, AND THEN the necessary extras are automatically processed.

mattg

Here is the log of the activity: "SMTPD" 48396 185858 "2019-10-08 12:25:23.529" "124.81.236.122" "RECEIVED: AUTH LOGIN" "SMTPD" 48396 185858 "2019-10-08 12:25:23.529" "124.81.236.122" "SENT: 334 VXNlcm5hbWU6" "SMTPD" 51408 185858 "2019-10-08 12:25:24.160" "124.81.236.122" "RECEIVED: Y2xhdWRpb0BtYXJ...

mattg

You could do either having multiple email addresses on the boss's computer, or you could use shared IMAP folders

The managers need to agree to this, otherwise this may well be illegal in many countries...

mattg

you mean 'AutoBAN' address?

If so then you have a device that has incorrect user credentials stored which includes the offending email address

run this and post the results >> viewtopic.php?f=20&t=30914

mattg

Jessy14 wrote: ↑
2019-10-07 23:19
Hi, our auto-span lists an email address with our IP address and our email server stops. I have to remove it in order make it work.

Please give more detail on this

Jessy14 wrote: ↑
2019-10-08 05:47
The client does not have this email address and how to fix it?

What is the 'client' in this situation?

mattg

Is that an M16 + Bipod

My time in 'the green' wasn't nearly so exciting as to be called 'special'.

mattg

Or perhaps using TOR

mattg

Create an IP range for your IP address with a priority of 20 or higher (ie 50)

Find the mail client with an incorrect password saved and fix it

mattg

Why is it not possible?

and yes there are many options including this one >>L viewtopic.php?f=21&t=28139

What database do you use?

mattg

In Outlook have probably dragged the folder to the trash, or 'deleted' it

You could also have dragged from the trash back to your main folder area

mattg

There are some custom builds about that offer an event called 'OnClientConnect'

I use that and some custom logging to track who logs on from where.
How open to using ALPHA software are you? Not for the feint of heart and not recommended on a production machine.

mattg

palinka wrote: ↑
2019-10-07 13:39
Anyway, i think the majority of IDS hits come from password guessers. There's no point in letting them back in. EXILED TO THE BARREN WASTELANDS OF THE INTERNET NEVER TO BE HEARD FROM AGAIN!

Except they are usually connecting from dynamic IPs, which may later end being used by a genuine sender

mattg

What mail client do you use?
Have you tried another

mattg

Did you restart the hmailserver?

Also there is an SMTP setting under RFC compliance 'allow plain text authentication'

mattg

That SHOULD log in the error log (a separate log file)

mattg

jim.bus wrote: ↑
2019-10-04 13:03
I also just looked in General Discussion Forum and there is a Post for a Topic on Pakistani Wedding Photography

We get a dozen or so spam posts per week

We just delete and BanHammer the poster

mattg

palinka wrote: ↑
2019-10-04 12:14
Are you using firefox also? I'm using Brave and i haven't had any of these issues. I tried manually typing in http and it automatically forwarded to https.

I'm currently using Waterfox for this forum, so yes a firefox offshoot
I'll try a different browser.

mattg

I find the sanesecurity defs for ClamAV excellent (I run Clam tests within Spamassassin) The one thing, is that sometimes those defs pick up something an hour or two after it is received. What my script does is trawl all unread mail in every inbox, looking for something that wasn't flagged as spam w...

mattg

I recheck with SpamAssassin If it subsequent scans find spam it is moved to the spam@ account, or deleted if high I have some custom logging included, and run on a schedule (I have cut and pasted some of my script - so it may not work in isolation) I do this Function SpamAssassin_ReCheck() 'custom e...

mattg

Most IMAP Clients will only mark mail as deleted not actually delete the message.

Look for a 'purge' command in your mail client

mattg

Yes with your IP ranges

Also you can stop AUTH on port 25
https://www.hmailserver.com/forum/viewt ... =7&t=29814

mattg

I'm getting http: rather than https: at times too
I suspect that this website isn't set to automatically redirect to https:

Search found 20120 matches