hMailServer forum

mattg

Please enable all logging in hmailserver, and show all logs created when you try to connect

My GUESS is that you have username in the form 'account' and not in the form 'account@example.com' in your Thunderbird settings

mattg

AND I can tell that I can't telnet from my server to yours, so I suspect that your router is not forwarding port 25 to your hmailserver correctly Although that really doesn't sit with this earlier statement from you I am able to send and receive emails from local machine, to and from external emails...

mattg

OK
Lets start with the LAN connection

on the LAN machine what are your 'server settings' in your mail client?
What mail client are you using?
Can you telnet your hmailserver on port 25? (Telnet client may need to be added though add/remove windows components)

mattg

Without a paid account at MXtoolbox I can't access that link

Can you run the internal diagnostics, and post the results please

mattg

That problem can happen with or without SSL

And the solution is really easy - just make the IP range have a priority higher than 20 (like say 25) and the autoban will never override it...

mattg

Easy as

I use something like
$config['default_host'] = 'tls://10.10.10.150';
$config['smtp_server'] = 'tls://10.10.10.150';
$config['smtp_port'] = 587;

It means that I can enforce SSL connections for my hMailserver for all connections

mattg

A search of 'wait' by author SorenR turned up 64 responses
Here's one >> http://www.hmailserver.com/forum/viewto ... it#p208249

mattg

on the Error_hmailserver i have these error, any reason why? "ERROR" 2884 "2018-12-12 11:03:20.444" "Severity: 2 (High), Code: HM5508, Source: SpamAssassinTestConnect::TestConnect, Description: The SpamAssassin tests did not complete. Please confirm that the configuration (host name and port) is va...

mattg

blackice856 wrote: ↑
2018-12-12 15:33
If the app tries to guess the hostnames with something like smtp.domain1.com, and the record does not exists, it would point to domain1.com and connect
successfully?

Autoconfigure >> http://www.hmailserver.com/forum/viewto ... 21&t=31549

mattg

so the issue that matters there is no RDNS (or called PTR) - contact your ISP about that

and then work on getting a security certificate set up

mattg

Second: When i configure thunderbird to use my ssl/tls it doesn't support encrypted password, and when i search the net, it always come up with starttls, not the ssl/tls... it encrypted password part of STARTTLS? is SSL/TLS safe for password transfer? Password is PLAIN for hMailserver The connectio...

mattg

In hmailserver terminology it is a little different There are SSL connections - ports 465, 993 and 995 typically (not 587) For these the connection is made secure from the outset. Very first thing is certificate exchange. There are StartTLS connections - typically port 25 optional, 110 required, 143...

mattg

errr

What does your SPF record have to do with your local host name?

mattg

blackice856 wrote: ↑
2018-12-11 15:24
I have tested the domain on https://www.digicert.com/help/

Does that only check https connections?
I can't see that tool tests mail connections

try this one instead >> https://www.checktls.com/

mattg

My lets encrypt certs are in the name 'mx.example.com' (and yes use the fullchain - but I don't think that is your issue) My SMTP >> Delivery of email >> local host name is 'example.com' My RDNS or PTR is 'example.com' My certs are accepted fine, by all mail clients I inserted my mail account creden...

mattg

I thought the solution was MariaDB...

mattg

What is MBOX format?

mattg

don't authenticate If you authenticate it won't send to SpamAssassin of course that opens you up to spammers abusing your system too, so be careful But why do you want to do this? Your spamassassin scores are different to mine, so a pass for your mail, may not pass on my setup? Or do you really have...

mattg

very recent post >> http://www.hmailserver.com/forum/viewto ... =7&t=33337

mattg

mirror feature does that for all messages in hMaislerver
Or you can forward individual addresses, and keep the original

although both of these things happen after spam tests.

You would need to split at your firewall, long before the message made it to hMailserver to test this

mattg

I have two domain, how should i specify my local host name? i hear someone said that if you register one of them, and send email to for example gogole, you will see mail.domain1.com no matter if you send it from domain1 or 2 Let me just say... No-one actually sees the local host name except the oth...

mattg

Do public folders have limits? NO Check the permissions of the public folders? There are permissions to keep seen flag, keep deleted flag and keep other flags, these stop or allow mail being moved from this folder There is a permission for 'Create Mailbox' this allows creation of sub folders (permis...

mattg

My apologies...

Just checked my config files rather than answer from memory.

It is URIBL that I don't score, not the RBLs
and all I do is score them at 0, the tests are performed

And these would be scored twice, as I have many SURBLs in hMailserver

mattg

Personal choice

I disable mine in SpamAssassin and just do them in hMailserver - I find the check more accurate in hMailsevrer anyway because it doesn't just check the IP addresses in the headers, but the actual IP address used instead

mattg

Regarding the Script, i think this approach doesnt help because you need to get rid of attachements and unwanted, text/tag before you use it as input for a FTS-Index. That 'Database Delivery Log', definitely only adds the oMessage.body text to the database. No attachments, no HTML tags. And I perso...

mattg

Are we talking plain text only, or HTMLBody searches as well This script puts a large chunk of each message into the database http://www.hmailserver.com/forum/viewtopic.php?f=20&t=13890 This script adds the first million characters from oMessage.body in to the database, plus sender, subject, time an...

mattg

So in case 1.1 In reality She connects to hosting server via SMTP and sends one message to multiple recipients, irrespective of who the recipient is (internal or external) - Let's say bandwidth by 1 For internal recipients, they individually will download the message via POP3 from hosting to interna...

mattg

Glad you have it sorted

mattg

Except that full mail messages aren't stored in the database
They are stored in the file store, under the data directory.

mattg

Dravion wrote: ↑
2018-12-07 21:38
Result: 90% Less Harddrive Space required.

90% saving??
That a bit optimistic, or that based on experience with other servers that offer this?

mattg

I don't remember that ever being anything but * for wildcard, and I've been using hMailserver since early version 4, about eleven and a half years ago.

mattg

When a client app is contacting the mailserver, it is actually contacting the IMAPD of hMailServer. When a client app is sending through the forexample.com, it is actually contacting the SMTP of theHosting. Then the message is copied to Sent folder in the current email account of hMailServer throug...

mattg

Why do you think that will be better / different than say SpamAssassin?

mattg

I honestly don't know enough about it

If what you say is true, then what does DKIM signing actually achieve?

mattg

If you have something specific happening that is repeatable, then enable all logging, recreate the issue, wait at least 90 seconds and post all logs created Also feel free to run this and post the results >> http://www.hmailserver.com/forum/viewtopic.php?f=20&t=30914 To be honest, what you have said...

mattg

Please do this and post the result s >> http://www.hmailserver.com/forum/viewto ... 20&t=30914

Please ALSO enable all logging, recreate the issue, wait 90 seconds, then post all logs created

mattg

I've just checked a few mail messages Outlook hosted domains have DKIM in the format example.outlook.com or example.microsoft.com gMail hosted domains have two DKIM signatures DKIM-Signature = example.yyyymmmdd.gappssmtp.com AND X-Google-DKIM-Signature which is their own signing It seems to me that ...

mattg

The point of signing is to ensure that the message doesn't get changed, and that includes new headers added. You mean SpamAssassin is better, because it checks all headers and hMailServer not? Not at all If a message is digitally signed, it is signed as it is. For the signature (Including DKIM) to ...

mattg

But isn't DKIM domain dependent, won't you need a separate certificate for each domain name?

mattg

I'm thinking that the database is not accessible to the user running the hmailserver service

mattg

yshaft wrote: ↑
2018-12-05 04:17
Can you provide me with an existing design relationship?

No, there is no existing design relationship, other than the aforementioned API documentation, which displays in a hierarchical arrangement

mattg

Is your Maria DB accessible from the web?

ALSO, you should change your passwords as they were in your post. I have removed them from your post, but you still should change them

mattg

I'm not a developer, but I'd imagine so

Each Domain Alias would require the DKIM implemenation, and each of the settings and files that go with that, so I'd say yes...

mattg

Running the Detail test, I scored 100% with my server Running the detailed SSL probe now Service set: STARTTLS via SMTP Testing protocols via sockets SSLv2 not offered (OK) SSLv3 not offered (OK) TLS 1 not offered TLS 1.1 not offered TLS 1.2 offered (OK) TLS 1.3 not offered Testing cipher categories...

mattg

It may be Antivirus on the machine where the webmail was viewed
Or it may be a hardware firewall that does mail inspection...

This definitely something peculiar to that CLIENT

mattg

PeteP, what version of hMailserver are you running?

This looks like an old issue with a race condition that appeared suddenly many many versions ago

mattg

That is not a hMailserver error message

Check that the machine with hMailserver or the machine with the mail client for Antivirus settings
This is the antivirus blocking these attachments because they can't scan it

mattg

Do you use clamAV + Sanesecurity

I find the Sansecurity defs catch heaps of this kind of junk

I have my spamAssassin to use ClamAv as a source so that these are spam scored rather than deleted as Virus

mattg

Can you show me a link to this online tester so that I can check it

mattg

As well as persistent storage in the SQL database, the actual email files are stored as files in the file storage system of the computer. The IMAP folder data is stored in the database Use the API to create new accounts please - don't do SQL queries https://www.hmailserver.com/documentation/latest/?...

mattg

To me for this to work, would require two separate signatures, one for the Domain, and another for the Domain Alias...

I can't see that this would be easily achieved

mattg

Yep, This is not the feature request section

I saw you posted in the Feature request section also, so I added your poll to the original post in that thread.
http://www.hmailserver.com/forum/viewto ... 46#p181446

mattg

1. yes, some things are cached 2. when you create an account through the API, or through the admin GUI, the inbox is created as an IMAP folder automatically I'm not really sure what you are asking The difference is the IMAP folder assigned to the account If you create an account directly to the SQL ...

mattg

What version of hMailserver are you installing

Can you please show the contents of your hMailserver.ini (with passwords removed)

mattg

hMailserver ONLY checks the most recent DKIM, and compares it to the IP address of the sending server SpamAssassin checks ALL DKIM headers, without any comparison to IP addresses In my mind, hMailserver does this correctly. The point of signing is to ensure that the message doesn't get changed, and ...

mattg

When I added my mailbox account to the linked database through my own program, I managed it with the mail client, which prompted that the validation failed. So you're adding an account via SQL? I don't think that's a good idea. Why don't you use the COM Api hMailServer provides? Absolutely Direct m...

mattg

Why don't you know the details of the receiving server? That doesn't make sense. Other servers I have used have an option to "send mail for unknown local [domain] accounts directly to the internet". hMailserver doesn't do that If you NEED this feature, you should go back to whatever you were using p...

mattg

You can create a feature request for it, but honestly, I doubt that will get implemented

You can create them all programmatically if they are that similar using the API

mattg

Your windows DNS settings

hMailserver uses Windows to do the lookups

Open a command prompt and use NSLOOKUP comands - that will be exactly the same result

You could try a new DNS (8.8.8.8 is Google's DNS - it works well)

mattg

It has benefits for using with webmail but comes with a warning. https://www.hmailserver.com/documentation/latest/?page=reference_performance Message indexing When message indexing is enabled, some additional message meta data is stored in the database. This can greatly improve browsing speed in la...

Search found 19117 matches