hMailServer forum

mattg

Can someone point me to the right direction ? IN the code in the last post in that thread, you probably need to change this line SamAccountName = ObjMember.samAccountName But what you change it to will depend on the exact naming convention used in your AD and what that looks like But I'm not sure i...

mattg

And thinking about this for a few minutes, I already force all senders to AUTH with their own account no matter the port that they connect to - all via a script in OnAcceptMessage

mattg

Sorry peeps, but I think you all have it wrong In IP ranges you can require AUTH for certain IP range / connections, but not by port For instance you can't define port 587 must be AUTH for the entire internet range by doing this without also requiring AUTH for port 25 (both being SMTP) In TCP/IP ran...

mattg

RockNLol wrote: ↑
2019-02-20 10:32
Ok, I did now. Do you think the antivirus doesn't let hmail read some mails?

Slow access to files often presents as poor performing disk
Antivirus scanning files will slow down access (and make files disappear)

mattg

I've been using 3.4.2 since 13 September 2018 on my Ubuntu box it seems

mattg

And port forwarding is different than opening ports

mattg

Ensure that your server anti-virus has the hMailserver data directory excluded

mattg

Which mail client is being used?

Are single accounts accessed by multiple mail clients simultaneously?

mattg

I reread your post and looked up the device. That's a hotspot modem, correct? Some of us have NBN in Australia, which stands for National Broadband Network. I have FTTP = Fibre to the premises I have a fibre optic cable running to a NBN router at my premises, which offers a LAN type connector to my...

mattg

Does your router forward mail ports to your hMailserver?

https://www.hmailserver.com/documentati ... om_outside

mattg

What are the chances of hMailServer getting an option of checking From header? None SpamAssassin does, if you implemented SpamAssassin. SpamAssassin can't test the SMTP envelope as it doesn't ever see it. Those scripts I mentioned really are easy to implement. Also, the great thing about hMailserve...

mattg

How does it pass SPF? And what can I do to stop that? hMailserver checks the SMTP envelope from, not the from header This can only be checked in the SMTP logs ALSO, you don't show your logging so we can't tell if this messages passed or failed SPF checking, and we can't see your SPF and other spam ...

mattg

I've been using ubl.unsubscore.com as an RBL for a long time

It had it set to 1, but checking a few this morning, SpamAssassin normally rejects these, and no other RBL picks them up

Think I'll increase my score for this RBL
Thanks

mattg

... is set up a SMS gateway, which I did last night using a spare SIM I have with my mobile plan and gammu/kalkun as the gateway. What hardware did you use to achieve this?? I bought the cheapest usb modem i could find on Amazon. $10 huawei e352. Getting gammu to work was kind of a pain since the p...

mattg

I get these shutdown issues almost every time I try and 'Pause' hmailserver or stop the service That the main reason that I don't shutdown or pause to run backups, I just run backups live. I suspect that it is because some SMTP connections are not closed properly. RvdH shared some code saved as disc...

mattg

To be honest I'm not sure that you understand what is required to run a mailserver Incoming mail from another server comes to your server via SMTP on port 25 Other ways that incoming mail gets to your server is that the mail is delivered to another server, and then you connect to that server via Ext...

mattg

Installing the google certs won't change what the log says. The logs says that communication succeeded, but the hMailserver didn't try to validate the server cert (because it didn't have to as the connection was standard incoming message - these ARE NEVER validated by hMailserver) However to answer...

mattg

You don't allow port 25 communication. Why not?

Please enable all logging in hmailserver, try to send a message to gmail
Wait until you get an error, and post a screen shot of the error, and ALL logs created

mattg

palinka wrote: ↑
2019-02-17 19:25
... is set up a SMS gateway, which I did last night using a spare SIM I have with my mobile plan and gammu/kalkun as the gateway.

What hardware did you use to achieve this??

mattg

Often these emails contain a real password, sometimes an old one. https://haveibeenpwned.com/ recently added 772 MILLION addresses and passwords in one haul. https://haveibeenpwned.com/PwnedWebsites#Collection1 That in itself is one email address for every 6 or so people in the world, just in that o...

mattg

In fact many servers outside of the EU fail that verification, including many banks and government departments in my Country (Australia), although this is is getting better. In the EU, especially in Germany, they tend to get this correct. In answer to your question I have 'verification' turned ON, b...

mattg

Do this and post the results please
http://www.hmailserver.com/forum/viewto ... 20&t=30914

mattg

A little while back I changed my Spam routine. I used to reject all above about 15 on my system, catch all 7-15 in Quarantine, and pass 6 and under (I have fairly high scores and deliberately inflate SpamAssassin Scores) Now I accept and quarantine everything from 7 and up, with an account level rul...

mattg

For those following this thread The default hMailserver settings are safe and appropriate for most users. A poor password is ALWAYS the weakest link. hMailserver in default mode does allow users to AUTH as a@example.com and then send mail from 'president@whitehouse.com' (or wahtever) If the password...

mattg

Doesn't SQL Server 2017 need an encrypted connection? Have you checked and rechecked your credentials. HMailserver creates the database as part of the install, do your permissions allow that?
Does SQL Server log anything?

And yes, there are some users who are using SQL Server 2017

mattg

TCPConnection - TLS/SSL handshake completed. I think it does This bit Verify certificate: False means that your hmailserver didn't try to validate the name of the certificate used by the other server. Hmailserver will only try to validate for SSL certs for a a route or an SMTP relayer, and then onl...

mattg

Is the recipient on a domain hosted on your hMailserver?

mattg

Only a few companies?
Do you have logs of the times when they have tried?

ALSO, run this and post the results
http://www.hmailserver.com/forum/viewto ... 20&t=30914

mattg

This is nearly always that the data directory has no been excluded from Antivurus scanning

Check again please

mattg

However the 'standard' is that port 587 is StartTLS required, and that port 465 (where used) is SSL The difference being SSL negotiates the security of the connection in the first instance immediately when trying to connect StartTLS makes the connection, and then sets the security before any usernam...

mattg

you should not have StartTLS Required for port 25 Port 25 should be StartTLS optional This is a fault with the other end of the connection, in that their machine can't negotiate your SSL / STartTLS connections, either they don't support a TLS version that you require, or they don't have a suitable c...

mattg

https://www.hmailserver.com/documentati ... in_datadir

mattg

http://www.hmailserver.com/forum/viewto ... 117#p68117

mattg

is pretty accurate though

Not for noobs, not for those that can't commit the time

mattg

Do you have access to wireshark on the hMailserver machine?

That will tell you more about the connection and what happens...
Do you have anti-virus on the Macs? sometimes AV will block this kind of traffic

mattg

Does anything else use port 587 on your hmailserver? if not change it to no security, and change your php mailer to no security on the connection and confirm that it works. My guess is that you have a self signed or otherwise untrusted certificate on your hMailserver, that your PHP system doesn't li...

mattg

That error is because your PHP system and your hmailserver can't agree on a protocol or a cipher, or that your self signed cert isn't trusted by your PHP system

Is OpenSSL loaded in PHP?

Other hints here >> https://github.com/PHPMailer/PHPMailer/ ... leshooting

mattg

Are you forwarding from 1st to 2nd server?

mattg

If it works, I'd guess only if they became compromised

mattg

What options do you have selected in the distribution list?

mattg

The opposite is possible, but not that way round

You could use SMTP route, but that would require another machine to do the sending

mattg

does that user have to AUTH to be able to send mail?

mattg

I really don't understand what you are trying to do
Can you provide some specific examples of what you are trying to do with 'anonymous access'

mattg

Yes, I'm a fan of TFA too...

mattg

That probably means that the connection from Postfix to gmail wasn't encrypted

mattg

On the 'protocols' branch of the admin GUI, can you confirm that SMTP is checked

mattg

SMTP Relayer = IIS Smart Host

Anonymous usage must be by IP address
I'm trying to visualise how 'by domain' could work safely and not be abused by spammers...

mattg

I noticed in my hMailserver logs that one sender was reaching my preset limit to sending mail (80 messages per day) It was my my 'server' address used by a few of my servers to detail errors etc. a bit of chasing, and a readjusted script to allow these messages to a specific address, and I find that...

mattg

Or you can just send directly from hMailserver... Can you post the SMTPC entries from hms (in text form, not an image) that match these delivery attempts. @jimimaseye - Here : "APPLICATION" 8928 "2019-02-03 14:20:30.445" "SMTPDeliverer - Message 37: Delivering message from contact@xxx.xxx to person@...

mattg

There should also be a database section... add something like this to the bottom of your hmailserver.ini [Database] Type=MYSQL Username=root Password=******** PasswordEncryption=0 Port=3306 Server=localhost Database=hmailserver Internal=0 More detail Here >> https://www.hmailserver.com/documentation...

mattg

In your internal diagnostics you have masked the SMTP Relayer address used to test

If that was gmail's address you wouldn't need to do that.

What do you have in your SMTP relayer section?
jimimaseye's diagnostics script will show that, so I agree, run the diagnostics in the link provided please

mattg

palinka wrote: ↑
2019-02-02 19:02

mattg wrote: ↑
2019-02-02 02:57
Make sure that you are also logging SMTP please
ALSO, change your BIND TO in SMTP >> Advanced to 0.0.0.0 and see if that makes a difference
Should that actually be left blank?

Yes, you are correct
This should be blank in most circumstances

mattg

After reading this >> http://www.dontbouncespam.org/ I've actually stopped rejecting very high score spam, and just autoban the IP and drop (delete) the message I now only bounce medium score spam, and accept and quarantine low score spam. On my system, using scripts 'big mail senders' (eg Gmail, Ou...

mattg

That they told you 9 hours after the flight left?

mattg

Please show your hmailserver.ini with the passwords removed

mattg

Make sure that you are also logging SMTP please ALSO, change your BIND TO in SMTP >> Advanced to 0.0.0.0 and see if that makes a difference Try again and post your entire log Outgoing connections to another server will use their certificate, not yours, and you are set correctly to connect via StartT...

mattg

Does MySQL log show anything?

You must use the 32 bit DLL to connect to the 64 bit database, because hMailserver is 32 bit

mattg

You didn't post enough of the log to show who you are sending too. That log just shows the receiving server doing nothing, not rejecting, not communicating, just doing nothing I'd check your DNS entry for that recipient Also check that your LAN firewall device allows outgoing connections Can you sen...

mattg

#1 connections to another server use that server's certificate, not your server's certificate In SMTP >> Advanced >> Delivery of email There is a check box 'use startTLS if available'. Check that if it is not checked and that will secure your connections to outlook.com servers #2 jimimaseye's advice...

mattg

in your current config (as posted) You won't receive ANY mail from the internet without AUTH, which means that you won't receive ANY mail from the internet On the IP ranges tab - press the default button and try again ALSO There are errors in your error log Please post the contents of that C:\Progra...

Search found 19363 matches