hMailServer forum

mattg

Just to clarify... My primary hmailserver (Windows 2003 R2 Server) is also my MySQL database server and my secondary hmailserver (Windows 2019 Essential) is my Backup-MX. Both servers currently connect to the MySQL server instance on my primary server. So, two mailservers and one database server. A...

mattg

Yes, however it is more 'popular' to use a FQDN like 'mail.example.com' for mail servers, rather than simply 'example.com'

Either will work

mattg

How would your hmailserver know WHICH certificate to present upon connection request?? The way that gmail, Office365 and other mail servers work is like this Local host name = 'mail.example.com' Certificate for ='mail.example.com' All MX records are as follows Domain1 >>MX record = mail.example.com ...

mattg

Your LAN IP range should have a priority of say 50, or it will have no impact Higher number = higher priority ALSO, there are errors present in D:\SERVER\HMAIL\Logs\ERROR_hmailserver_2021-01-15.log Are the few you show, the only entries? If so, I'd like to see a copy of your eventhandlers.vbs (with ...

mattg

how did you backup and restore?

mattg

look for a background 'window' in thunderbird, that allows you accept the self signed certificate

mattg

To ensure that I meet the Australian laws about logging specific detail, I write custom per-domain logs Function DomainLogging(oMessage) 'custom event 'uses functions: CustomMonthlyLog 'uses globals: g_sAdminPassword 'called from: Rules Dim i, j, oDomain, temptext, oApp, Local, tempDomain Set oApp =...

mattg

If your hmailserver 'local host name' is the same as your web address, then you can use the same let's encrypt certificate for hmailserver (Use the 'full chain' and the 'private key' 10.0.0.2 is LOCAL LAN IP address, and not something that will work from the internet I'd remove that entry from your ...

mattg

ALSO you have IP ranges priorities backwards Internet should be LOWEST number, ie 5 IP ranges that you want to take precedence over Autoban should be HIGHER than 20, ie 25 Clearly your Autoban is having no effect at present Higher number = higher priority You should UP date to a newest version of Hm...

mattg

What is your iPhone configuration?

mattg

Watching the U.S implode: makes you proud, doesn't it. Proud to not be American. And I say that as a European but so will Chinese, Russians, Turks and many other less tolerant countries. Perhaps one or more of these countries that you mention are pushing the social media buttons of the general popu...

mattg

gtsolid wrote: ↑
2021-01-06 18:55
I still don't know why I have no problem using Outlook for PC.... Maybe it works in another way

Outlook doesn't upload all mail, it only syncs headers from recent mail - how recent is set in settings

If you have many GB of mail, I'm guessing that goes back a long time

mattg

In SMTP settings, there is an advanced setting called 'recipient hosts' Yours is set to 15 What this means is that if there is up to 15 MX records then hMailserver will attempt them sequentially Note your logs show connections to different IP addresses. I suspect that the greylisting is broken on th...

mattg

lots of detail here >> https://www.hmailserver.com/forum/viewforum.php?f=21

mattg

For what it is worth, I don't remember a single newsletter in 15 years

mattg

Yep, lets start with stats from your server How many messages per day? Typically how many simultaneous IMAP connections? Typically how many simultaneous POP3 connections? Typically how many simultaneous SMTP connections? What is the bandwidth of your network connection (where hMailservevr is install...

mattg

https://www.hmailserver.com/forum/viewt ... =9&t=35463

mattg

perhaps this question is better asked on Github

mattg

Don't think I've ever gotten reports I have (I think) the required txt records and website detail. Perhaps I need to test that setup. I am working towards DANE too. I need DNSSEC and DNS CAA, and I need to make my BIND server publicly accessible to do those. I've been working towards that for over a...

mattg

mattg, I use Let's Encrypt Certificates but only use the 'cert.pem' and 'privkey.pem' files in hMailServer. I do not use the 'chain.pem' file because for some reason the expiration date in the 'chain.pem' file is always expired. However, while I don't have any Thunderbird Clients, I do use an Outlo...

mattg

On my server, I use MTA-STS, I require TLSv1.2 or TLSv1.3 with strong ciphers (I do allow NOT encrypted as fall back). I autoban high score spammers and hackers. Just done a week of tests using this regex in a rule (As provided by SorenR earlier in this thread (?i:^.*\s(ESMTP|!ESMTPA|!ESMTPS|!ESMTPS...

mattg

or #3
PAY to use a service

Look into having Office365 or gmail host your domains

mattg

... Removed selection from "Verify remote server...." from hMailAdmin -> Settings -> Advanced -> SSL/TLS 'Verify' isn't actually used much. It is used on SMTP routes, and for upstream 'External Account POP3' connections and not much else https://www.hmailserver.com/forum/viewtopic.php?f=10&t=29078&...

mattg

Try with StartTLS Required on port 25 on your backup server's SMTP route

mattg

I'm sure that you checked all of these settings, but just getting how this works out of my head and written down... So it has to be one of the settings specific to the IP address of your backup server, as shown on your Primary server, and different to the internet IP range OR It could be in the SMTP...

mattg

...is there any place to specify the interval for another batch to be sent? no Hostgator support suggested this link https://www.hmailserver.com/forum/viewt ... 20&t=28269. But i dont know how implement it. That post says in BOLD type what you need to do for instructions for use - check the link an...

mattg

jimimaseye wrote: ↑
2021-01-01 01:54
Happy new year!

How is 2021 so far matt?

Like a sleepy Sunday morning

No Noise, no dogs barking, no lawn mowers, adult teenagers and wife all still in bed, 'sleeping in'...it's now 10.45 am

Time for me to go and start cooking the bacon and eggs and coffee, and to make some noise

mattg

johang wrote: ↑
2020-12-31 16:17
and i will kick off by wishing those that celebrate the new year starting at 1st of january a merry new year ( 9 hours in advance here, but should be in half of Australia by now )

Yep, that was 12:17 am my time when you posted that

Happy New Year

mattg

palinka wrote: ↑
2020-12-30 01:51
The concept behind auto whitelisting is if a sender was a recipient in the past (of the current recipient), then the sender must be valid. This information is available in the hmailserver database. Why create new tables or text files to hold this info?

I like the simplicity of this concept

mattg

SorenR wrote: ↑
2020-12-30 02:47
One use could be to let the account know when and if their password has become unsafe

Google is doing this

In chrome, go to settings >> passwords and they will show you any username / password combos that are unsafe. I assume from the same list

mattg

a script triggered from a rule

(not tested)

Code: Select all

function add126.com(oMessage)
oMessage.subject = "[126.com]" & oMessage.subject
oMessage.save
end function

Global rule

If sender contains '@126.com'
Then
Run function 'add126.com'

mattg

The error was probably more due to the way that the security protocols were impleneted TCPIP PORTS Connection Sec 0.0.0.0 / 25 / SMTP - SSL/TLS !! External Email Blocked !! Cert: bthubnetmailingssl 0.0.0.0 / 110 / POP3 - SSL/TLS Cert: bthubnetmailingssl 0.0.0.0 / 143 / IMAP - SSL/TLS Cert: bthubnetm...

mattg

You started me thinking. My port 25 setup is StartTLS(Optional) SMTP incoming, however a look at the logs suggests that every legitimate webserver starts TLS and only the spammers go in plain. So, my question: Is there any reason not to require TLS on port 25? I've found that many legitimate mail s...

mattg

You must use the same base version...

mattg

search for a tool like IMAP sync

Depending on number of accounts, it might just be easier to add hmailserver account to the individual mail clients that connect to the Exchange 2010, and simply copy all mail and folders from one account to the other

mattg

ports not forwarded in router
ports not opened in firewall
https://www.hmailserver.com/documentati ... om_outside

Next step is run this and post the results >> viewtopic.php?f=20&t=30914

mattg

The read operation failed literally means that your server was unable to read what was next in the I/O stream. The rest of that message says 'An existing connection was forcibly closed by the remote host' It means one of a couple of things #1 that there was no further transmission in the stream (ie ...

mattg

I went in and put strong passwords on all the accounts - but there's nothing to stop them putting simple ones back... #1 change your admin password ASAP #2 they can log onto the web app to manage their own passwords with their own email address and password - they DON'T NEED TO USE ADMINISTRATOR to...

mattg

Ah, so the log entry for a bad login/password combination does not say that but ssl error? Where is the SSL error? "DEBUG" 6916 "2020-12-12 02:45:59.732" "Creating session 64645" "TCPIP" 6916 "2020-12-12 02:45:59.732" "TCP - 193.*.*.114 connected to 192.*.*.31:995." "DEBUG" 6916 "2020-12-12 02:45:5...

mattg

The 'rules' say this Port 25 NONE - SMTP incoming Port 110 StartTLS (Optional) - POP3 Port 465 SSL/TLS - SSMTP Submission Port 587 StartTLS (Optional) - SMTP Submission Port 143 StartTLS (Optional) - IMAP Port 993 SSL/TLS - IMAPS Port 995 SSL/TLS - POP3S This is what I do Port 25 StartTLS(Optional) ...

mattg

I was going to say that I get that message ALL of the time (hundreds of times per day), but I also log AWSTATS

mattg

Your issue is that different similarly named terms mean different things You should turn security off in PHP Mailer for StartTLS connections to your hMailserver StartTLS connections in hMailserver is ONLY available if you have a valid certificate installed Try turning off the IP range requirement fo...

mattg

You could copy using the 'run function', you would just need to script an appropriate function

There is also 'Create and send copy'
https://www.hmailserver.com/forum/viewt ... =7&t=30770

mattg

DrmCa wrote: ↑
2020-12-14 02:43
What is the IP 193.*.*.114 doing?

I suspect that is a hacker trying to guess a username / password combo on port 995, and thus avoiding the autoban (Autoban is only for SMTP connections)

mattg

There is this ini setting. Does it have an impact RewriteEnvelopeFromWhenForwarding=1 ; When performing forwarding, hMailServer now keeps the original From address rather than changing to that of the forwarding account. ; This change was made to reduce risk of message delivery failures. ; To force t...

mattg

Also, just found this
https://www.hmailserver.com/forum/viewt ... 66#p197079

mattg

run this and post the results
viewtopic.php?f=20&t=30914

ALSO, where have you installed spamassassin

mattg

Right, so you clearly get past the initial connection There will be much more log line associated with the test. The logs line you show initially include some rejections but that is to be expected when they are testing, they try different things and move on. Your screen shot shows 'no weak ciphers',...

mattg

Try the spamassassin support
It certainly seems like your SpamAssassin isn't optimal

mattg

In TCP/IP Ports change the certificate to YOUR certificate ( mareike.Domain1.com), not the CA certificate You are trying to use the CA certificate on your hmailserverv - that won't work. You should chain your certs into one file in this order top down CA2 CA Yours Include all 'start' and 'end' lines...

mattg

After reviewing your settings, and checking your log file (which you still haven't confirmed is only SA connection issues), my best guess is that SpamAssassin timed out (or was unavailable) and I'm trying to suggest ways to limit that. Yes i did, in Post #9, maybe i was a little general vs specific...

mattg

run this and post the output please
viewtopic.php?f=20&t=30914

Also, where did you get your certificate

Ciphers depend a lot on what level of authentication is used - settings above will give us more info

And yes, changing ciphers may have broken your system

mattg

Is SpamAssassin on the same machine? Do you use a local DNS? Did you actually check that log file? The machine only handles hM and SA, so yes same machine. No DNS, just default localhost. A local DNS server will improve your search speed immensely I know no one gets paid, but im the level of user, ...

mattg

What does this file contain? C:\Program Files\hMailServer\Logs\ERROR_hmailserver_2020-12-10.log The only errors i ever get is it complaining it cant talk to SA, im guessing based on the amount of traffic, cause it only complains once in a while, never more than once a day. The previous error log wa...

mattg

...can it be directly sent to the recipient's domain email server? Yes, relays are optional If you send direct then your IP probably needs to be clean, business class and static, plus you need a good reputation PLUS much more - but really that is just about watching to ensure that you aren't sendin...

mattg

Try and catch the bounces with a global rule, then forward it to your email address and delete it so that it doesn't deliver to the list users If FROM contains 'mailer-daemon' AND Recipient list not include 'your email' Then Forward to your email AND Delete Message Do a second rule, replacing the 'm...

mattg

What does this file contain?
C:\Program Files\hMailServer\Logs\ERROR_hmailserver_2020-12-10.log

mattg

you should copy paste (as you have done)

Make sure that you include the lines

Code: Select all

-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----

Between them

mattg

When I looked at doing this a while back, I considered using normal email protocol to exchange emails - with body text containing settings changes that are read, sanitised and then used. I have a specific subject line that triggers any one of a number of robot actions, but only when the email is fro...

mattg

viewtopic.php?p=68117#p68117

Search found 21187 matches