hMailServer forum

mattg

Your A record is your address on the internet. It needs to be your public IP address. Thinking about this, how would me knowing your domain provider's IP address find you? Or how would I know which LAN is yours. The ONLY way that I could find you is your PUBLIC IP address. You probably will set your...

mattg

And these are normally configured on the DNS of the company that sold you your domain name, but you could also do in on a LOCAL DNS server if you have one installed

mattg

The error logs are from your antivirus custom scanner which isn't working

I'd check and double check the credentials used in the SMTP relayer section.
If no luck then PM or post screen shots of the SMTP Relay section, and details of the ACCOUNT NAME required to be used. DON'T SHOW YOUR PASSWORD

mattg

There is some hints here
viewtopic.php?f=21&t=29763

mattg

Probably about your ODBC driver hMailserver is 32 bit, so you need the 32 bit connector, even to a 64 bit MySQL He said he was using the 64 version. The version of hmailserver is: 5.7.0-B2428 (x64) That particular version was made over a year and a half ago, and a LOT of changes have happened since...

mattg

I have no trouble with Lets Encrypt certificates

Try to get one in the correct name

mattg

You have error logs
Can you show those please

ALSO, your LAN IP range should be priority of 25, not 20 and you should check the domain name in the SMTPRelayer section

mattg

How many accounts do you that use that domain name alias?

mattg

That's what greylisting does You can elect to bypass greylisting on SPF pass, and that will allow that mail to come through You can script a fancy Just-in-time solution, OR You can switch off greylisting Just remember that spammers set spf records too, and that the fancy scripting is likely to requi...

mattg

can't be done Here is a work around >> http://www.hmailserver.com/forum/viewtopic.php?f=7&t=33067&p=206863&hilit=dkim+alias#p206772 And a enhancement request to vote on http://www.hmailserver.com/forum/viewtopic.php?f=2&t=29029&p=181446#p181446 Personally I still believe that the D in DKIM is 'Domai...

mattg

Probably about your ODBC driver

hMailserver is 32 bit, so you need the 32 bit connector, even to a 64 bit MySQL

mattg

I connected with a tool and did a SQL backup from internal MySQL DB then after install of new database (on new server too) then restored.
No trouble - but test first to be safe

mattg

Why do multiple senders use the same account?

mattg

In the mail client (Otlook or Thunderbird etc) on the 'other computer', use the 'local IP address of the hmailserver machine' (or it's local host name) as 'Server'

instead of using like

mail.gmail.com as you SMTP or IMAP server
Instead use
192.168.0.1 (or whatever)

mattg

I figured if it went terribly wrong, I'd roll back.

Good news is that the OnHelo and OnClientLogon are both working well, without needing to change my scripts

mattg

RvdH wrote: ↑
2019-08-18 10:05
What OS are you on?

Unsure who you are asking - But I'm running hMailserver on Windows 10 pro

derelvis wrote: ↑
2019-08-18 09:36
Can confirm the part of failing mx query for pop.gmail.com in build 2469.

As Martin has shown it is a 5.7 error.
I was on 5.6.8 until this morning (~8 hours ago)

mattg

I've moved to 5.7.0-B2481 (x64) I see an issue with some (not all) of my external accounts gmail is one "APPLICATION" 85448 "2019-08-18 11:26:31.078" "The IP address for external account gmail could not be resolved. Aborting fetch." The server is 'pop.gmail.com' and was working previosuly When I go ...

mattg

What logging do you have enabled?

I think that is logged as debug, not application

mattg

Good work Check that when you make changes to config I keep SMTP logs so that I can track for too much mail, and you should at least check the size of those logs to ensure that you haven't been hacked. I get about 15 -20 attempts most days to crack passwords, or to test my security and I don't allow...

mattg

That error is because you use port 465 in your SMTP Relayer

If your server works that's great

Do your self a favour and run some open relay tests

https://www.hmailserver.com/documentati ... elay_tests

mattg

There is Thunderbird 'chunk sizes' and IMAP timeouts tyo play with under the hood of Thunderbird.
Have you tried another mail client?

Outlook is crap at lots of things, but is often good at moving large messages. Set timeout to maximum

mattg

Your MX has a priority of 0, change that to 10

You have no A record for mail.931mev.com which should be fixed. My mx record points to an IPv4 address

https://intodns.com/931mev.com

mattg

check this list https://www.hmailserver.com/documentation/latest/?page=ts_receive_messages_from_outside Also, some ISPs stop incoming port 25, but mostly only if they also block outgoing port 25 Please enable all logging, try and send to you from the internet and show all logs created after 30 secon...

mattg

You have External to local requiring SMTP AUTH for the Internet range

That will never work

On the IP ranges tab there is a 'default' button - press that, then try again

mattg

Our Sun will explode in a Superno in 4 billion years. Thats a heck of a lot of time. Hopefully at this point in time Humabs know howro reach out to other Solar systems ;-) They won't. Never will. Europeans once said similar things about the existence of a Great Southern Land - and yet here I sit. S...

mattg

mikedibella wrote: ↑
2019-08-14 16:55
Your nslookup command syntax is wrong.

At the command prompt, type:
Code: Select all
nslookup -type=mx hotmail.com
Post the result.

Thanks for cleaning up after me mikedibella

mattg

We normally don't allow first time posters to share links, but I reckon that this is a great link, so well done and thanks for sharing

mattg

Which shows that your local DNS is the problem

mattg

hMailserver isn't even trying to reach the internet, your ISP won't help

Open a command prompt on the machine with hMailserver installed on it
and type
nslookup
type=mx
hotmail.com

and then post the results

mattg

I think that the t=s is required when you are NOT testing, and that it stipulates that a sub-domain won't have the same DKIM key

http://dkim.org/specs/rfc4871-dkimbase.html
3.6.1 & 7.8

I think that says that t=y would indicate testing

Mine passes all validation tests etc with t=s

mattg

Just remembered too that I have one (ex) client with DVR attached to some IP cameras that will only use SSLv3.0 to connect to mail servers to email footage, or snapshots

Doesn't change my view. SSL3.0 should remain removed from hMailserver

mattg

Have deactivated it (although I can't delete)

mattg

"TCPIP" 4024 "2019-08-14 00:04:16.238" "DNS MX lookup: hotmail.com" "TCPIP" 4024 "2019-08-14 00:04:16.269" "DNS - MX Result: 1 IP addresses were found." "DEBUG" 4024 "2019-08-14 00:04:16.285" "Starting external delivery process. Server: mx1.norelay.link.net (127.0.0.4), Port: 25, Security: 2, User ...

mattg

Also dumping spam wouldn't save electricity to the extent specified. The servers will still need to be maintained up and running to deal for the eventual non-spam emails. Absolutely And why I thought this thread was humorous from the get go. If you really want to REDUCE the impact of SPAM on the in...

mattg

Hassan84 wrote: ↑
2019-08-13 19:28
Error Type: SMTP
Connection to recipients server failed.
Error: Could not connect to 127.0.0.4 on port 25 since this would mean connecting to myself.

That doesn't match the diagnostics shown

Please try to send a message, wait 90 seconds and then show all logs created

mattg

removed

Of course the logic is ridiculous.
I am still trying to work out what value anyone would see in sending garbage like that out. Even the fabled 'sell your kidney on the internet' spam was looking for a someone in extreme desperate need of money. I just don't get the goal of this spam message.

mattg

If the domain exists locally, but not the account, then create a route for the domain and point to where it is hosted.

If the account exists, temporarily re-name it, until the full domain is in your control and then rename it back

mattg

RvdH wrote: ↑
2019-08-13 08:28
OnHelo & OnClientLogon Script Handlers, both very useful for scripting, blocking, reporting abusive IP's

+1 from me

mattg

My Daughter at University was sent some 'vegan' spam this morning. As background, there are a number of vegan activists in Australia at the moment. They raid meatworks and liberate (steal) sheep. They superglue themselves to freeways at peak hour and more. They are wanting our government to act on C...

mattg

Use IP ranges to limit access, and set the firewall to block external traffic

a fake domain will be fine (use fake.local to be sure that it can't be delivered if you like)

Your POP3 issue:-
Enable all logging recreate the issue and then post all logs created

mattg

I found the error in the logs

mail.hmailserver.com requires SMTP Auth to send, and the BB isn't doing that.
I have sent Martin an email with the details

He can't get notifications from the forum meanwhile either

mattg

Test PM sent

mattg

5.7 = 64 bit and no XP or Vista = great I reckon
If they want to use XP or Vista or server 2003 they can stay on 5.6.8 or lower

Most commercial software won't work on Server 2008, or anything less than Windows 7 SP1, and some require much newer OSs

mattg

The reason is that my docker containers are not configured FQDNs I see an easy fix there I have configured rules already, but it seems they are not applied. Please enable all logging in hmailserver, and send a message, then after 30 seconds show all logs created Are rules applied when there is dire...

mattg

I've sent you a private message VinceO

I agree with mikedibella though
When I test that server, I get a StartTLS response.
I think you have Antivirus or an EDGE device that 'inspects' mail that gets in the way...

mattg

Can you please enable all logging, deliberately create the issue, wait 90 seconds and then post all logs created

Are Outlook machines definitely connecting to hMailserver?

mattg

Yes, what you've said kind of makes sense Do you connect with POP3 or IMAP? I've been meaning to update that page for a few weeks. Easiest way Backup using builtin backup tools with all options selected (including compression) install same version on new machine copy back up to new machine Restore t...

mattg

Yup, i am running 5.6.8-B2450.21 (*.21 are a few fixes and changes i made myself) Me too now. but works with: HIGH:!TLSv1:!SSLv3; gmail uses TLS cipher 1.3 as you mentioned Doing this now too thanks - we see how it goes. NOTE: This only is suitable if you only allow TLS 1.2 + 1.3 i know mattg does,...

mattg

Any clues as to why hMail empties the from address here? hMailserver doesn't empty any fields There is one other difference. Outlook authenticates, but PHP mail() does not. I am not suspecting a problem there because hMail does not throw an error - I have turned off "Require SMTP authentication" fo...

mattg

This IS a misconfiguration
Either the receiving server is broken
OR
You are you using a domain on your server that you don't necessarily have rights to, and the recipient server is ALSO hosting the same domain

mattg

Yep, But just checked an RvhD has updated the fork, so I've just installed it and tested.

Verify certs is turned on, and gmail external POP3 download works fine-

Thanks to you both

mattg

The ONLY servers that I am connecting with via TLSv1.3 is the gmail servers, for incoming, outgoing and external pop3 download. All others are still TLSv1.2 (or nude) Not sure if you're saying that there's a problem or just sharing what you're seeing? Just sharing what I'm seeing No problem at all ...

mattg

And PHPWebAdmin is NOT needed to run hMailserver

mattg

The ONLY servers that I am connecting with via TLSv1.3 is the gmail servers, for incoming, outgoing and external pop3 download.

All others are still TLSv1.2 (or nude)

mattg

Don't know why, but I had to turn off 'verify remote server SSL/TLS certificates' for gmail pop3 external download to work http://www.hmailserver.com/forum/viewtopic.php?f=21&t=32158&p=200990&hilit=pki.goog#p200990 I checked that installed all of these. Stopped working (with verify checked) when I u...

mattg

I only have StartTLS Optional for port 25

I get so many unencrypted connections on port 25, don't see how I could force StartTLS on port 25.
However, I also don't allow AUTH on port 25 (using the ini setting), so there are no usernames / passwords accessible

mattg

RvdH wrote: ↑
2019-08-04 12:24
Yup, i am running 5.6.8-B2450.21 (*.21 are a few fixes and changes i made myself)

Me too now.

RvdH wrote: ↑
2019-08-04 12:24
but works with:
Code: Select all
HIGH:!TLSv1:!SSLv3;
gmail uses TLS cipher 1.3 as you mentioned

Doing this now too thanks - we will see how it goes.

Gmail is TLSv1.3 both directions

mattg

Under system requirements is a technical knowledge component
https://www.hmailserver.com/documentati ... quirements

I'm not sure that you have the required technical knowledge to run a mailserver

mattg

martin wrote: ↑
2019-08-03 21:22
The one in hMailServer comes from Mozillas recommendations if I recall correctly.

Not a recent one I don't think
That list changes fairly frequently

I have updated mine a few times over the years

mattg

Joe wrote: ↑
2019-08-03 19:32
installed PHP 4.3.11

now when I point foxfire web browser to http://localhost/PHPWebAdmin, I get:

WebAdmin

"; ?>

Then PHP is clearly STILL not working

Search found 19894 matches