hMailServer forum

mattg

no, not really

But why would you want to?
The API will only work with a local hMailserver

mattg

You still need port 25 active in hMailserver to get mail from the world We all still try and send mail to you on port 25. Have you restarted your hMailserver since you changed the ini file? If you have please show some logs of where Auth Login Access is shown (about 20 lines each side of that please...

mattg

As originally linked here >> http://www.hmailserver.com/forum/viewtopic.php?f=7&t=29183&p=182742&hilit=windows+7+TLSv1.2+registry#p182717 This is the single easiest way to ensure that only TLS v1.2 is used by Outlook when connection to your hMailserver (or to Office365 servers) http://www.rainingfor...

mattg

Also, I have already started a new error log as it was filled with all of these messages before as we had over 17,000 messages in the queue. I forgot to mention them in the initial post. "ERROR" 2024 "2018-10-15 08:12:56.238" "Severity: 3 (Medium), Code: HM5064, Source: RuleApplier::ApplyAction_For...

mattg

you are set up fine for TLS1.2
That's not your issue

mattg

FWIW I average about 15 brute force attacks per day

A couple of weeks back it was over 100 per day (that's different IP addresses, and 100 per day means more than 4 per hour on average)

mattg

Exclude your hMailserver data directory from real time AV scanning

mattg

Can I use the same SSL I created and is being used for our webmail? I do I have my webmail at mail.example.com, and use the same certificate on my hMailserver. I know the DDS will move all emails to the user's inbox, which is what we're trying to avoid. DDS will only move UNKNOWN messages to inbox,...

mattg

do you have debug logging enabled?

Normally when that happens a rule has something unexpected.
Debug logging will show which rules fire...

mattg

You don't

You do this at your DNS Provider
(like where you created your A record for your webmail)

mattg

harsh wrote: ↑
2018-10-15 01:23
How to connect to Outbound port 25?

<SIGH>

mattg wrote: ↑
2018-10-12 01:58
YOU NEED TO FIX your delivery, by getting a plan from your ISP that allows port 25 outbound traffic, OR by using a relay service

mattg

You need an MX record entry like

mail.proverweb.com.br
Priority = 10
IP address = 74.208.221.151

That's enough to get you started...

mattg

I don't know the answers to your questions

In saying that, having a valid DKIM as Sent (or as Received) makes more sense to me. Why should a message pass DKIM, and then be changed / modified by another server, and not have to be DKIM signed again

mattg

In saying that hMailserver's API is very varsatile, and you could easily script a solution that will copy information from one , and the restore to another.

DO you want to copy ALL accounts, or only some, or only a single domain?
Do you want to copy messages?

What is your use case?

mattg

Make sure that you white list the SMTP Envelope From address (the one in SMTP logs) not the address shown in the message headers

mattg

So when the message was received by hMailserver there was no DKIM signature

The previous received header is followed immediately by a DKIM header

mattg

I don't manually create a chain, and I don't use a third party site to generate the certificates. I have my websites hosted on a Ubuntu / Apache server, and I used the standard LetsEncrypt install for Ubuntu/Apache to create the certificates and the 'chain' was automatically created. I open the fold...

mattg

Yes, and I'm confident that my hMailserver would pass

It is to do with the certificate that you have and lack of full chain built in.

mattg

I think that you will find that

hMailserver checks only the most recent DKIM signature
SpamAssassin checks ALL DKIM signatures

mattg

Admin Gui >> Settings >> Protocols >> SMTP >> delivery of email >> Local host name this should be something like 'mail.example.com' That is still NOT going to get your mail delivered. YOU NEED TO FIX your delivery, by getting a plan from your ISP that allows port 25 outbound traffic, OR by using a r...

mattg

Have you contacted them and asked them what they recommend?

That site looks much more professional

mattg

try using a * for email address not a % Really, IP address blocks should be set using IP ranges, and just not doing spam checks, setting a priority like 50 If you have a specific email address, that's where the white list works well. IP range 0.0.0.0 through 255.255.255.255 email address = "mattg@ex...

mattg

Nearly five year old thread and still not even close to a record

mattg

you can't The world's mail servers listen on port 25 You need a business class plan from your ISP that allows mail to be sent out, or you need to relay your mail For a few messages this can easily be done through gmail, but they will change the FROM of all messages to your gmail account - not suitab...

mattg

harsh wrote: ↑
2018-10-10 23:52
. Trying to fix this problem by clearing out hm_messages table in database and doing sync. Does this help?

No that will CAUSE the issue you see of missing file...

While ever port 25 outbound is blocked, you will NOT SEND any mail

mattg

Looks scary (ie doesn't look reputable in my personal view)

What are you hoping to achieve by using that?

mattg

Test: Test outbound port SMTP relayer not in use. Attempting mail.hmailserver.com:25... Trying to connect to host mail.hmailserver.com... Trying to connect to TCP/IP address 5.189.183.138 on port 25. ERROR: It was not possible to connect This bit is the issue Port 25 outbound is blocked, probably b...

mattg

Whitelisting in hMailserver will bypass spam testing

check what you did with the whitelist

mattg

mattg wrote: ↑
2018-10-10 10:38
What third party apps are you using?

mattg

TLSv1.3 was published only on 10 August 2018, after much discussion. It is only very recently (ie since that date I believe) that Facebook changed from TLSv1.0 to TLSv1.2 Windows 7, Server 2008 R2 need registry modifications to even use TLs1.2 iOS and Android systems that are even just a couple of y...

mattg

And personally I'd check with management before you did anything

ALSO, let management know that this may be illegal, depending on where they are located

mattg

mattg wrote: ↑
2018-10-10 08:03
Certificate verify false, just means that hMailserver did NOT TRY and verify the certificate.

mattg

yep using notepad or similar copy the ca-bundle to a new document copy the contents of the public.crt to the bottom, with no blank lines in between, save as fullchain.crt What third party apps are you using? ALSO this won't change what your logs say. They will continue to NOT attempt to validate oth...

mattg

Can you please link to some of the posts that you saw about this

Can you please show your relevant code

mattg

But the problem is not able to connect my smtp account using third party. That's probably due to your certificate NOT being from a trusted source. What you need is the fullchain certificate for your mail.domain.com Is fullchain offered by sslforfree.com? (I get my Lets Encrypt certificates direct f...

mattg

Certificate verify false, just means that hMailserver did NOT TRY and verify the certificate.

Those logs look OK to me. What issue are you having?

mattg

Doesn't that still have a service?

I understand that is just a flat file, but ....yeah, maybe you are correct
Do you know the file name for the database? Next step would be to check Windows permissions on the file...

mattg

DO you have an 'SQL Server' service running in services?

mattg

Please remove the passwords and otherwise show the contents of your hMailserver.ini

mattg

OK

ALSO make sure that your Smtp Relayer connection security is set to StartTLS Required

mattg

In settings >> Advanced >> SSL/TLS do you have TLSv1.2 checked
(it is checked by default)

If so then you are good to go

How do you connect to Office265?
Pop3 External Download?
SMTP relayer?
SMTP route?
normal SMTP (server to server) traffic?

mattg

hmailadmin.exe won't run unless the hmailsevrer service is running first That explains all of your errors. check the hmailserver service, and post screen shots here of the various tabs. How long since this machine has been restarted? When the service starts (or fails to start) the windows event log ...

mattg

Step through the CSR request and creation of keys again Personally I use LetsEncrypt I run a https://mail.example.com which hosts my webmail I get a lets encrypt cert for that I use this same cert (and key) for my hMailserver, which answers to that same FQDN All of the MX records for domains that I ...

mattg

This one I think >> https://github.com/RvdHout/hmailserver

mattg

Did LibreSSL just bolt in with no changes to hMailserver code?

I would love to test, but I am addicted to the extra stuff that RvdH puts into their builds
http://www.hmailserver.com/forum/viewto ... 60#p203420

mattg

That will fix the 'from', but not set the reply-to You should do that with a script. Do your domains have mx records that point to your server? I'm guessing yes. Add this to your eventhandlers.vbs, ensure that scripts are enabled etc (This is untested, but should work. Please test and report back) S...

mattg

which version of hMailserver? Same for all three servers? In your hMailserver.ini do you have a '[settings]' section at the bottom? If so do you have this setting, and if so what value do you have it set at RewriteEnvelopeFromWhenForwarding=1 ; When performing forwarding, hMailServer now keeps the o...

mattg

Activesync is definitely helpful

@palinka, do you have multiple users access the same account at the same time

mattg

You should check the chain.pem as it probably already contains the site certificate as well as all of the intermediates and root cert.

I use (from my Ubuntu Apache webserver) the fullchain.pem and the privkey.pem without alteration

mattg

The updated cache message is because Outlook is trying to cache stuff offline Try reducing HOW MUCH is cached Better yet, don't cache it all, but that requires you to NOT USE Outlook, because you can't turn cache off in outlook. You could also try dropping your Outlook profile and re-creating it. Ho...

mattg

Then why is 'everything forwarded to gmail'? If I could understand specifically what it is that you want to do, then I could provide advice on how to achieve that. I host about 12 domains, including a few personal ones, because I like the freedom and low $ cost of doing it myself. But I don't forwar...

mattg

between not sure also why everytime we switch between sent items and different folder in the same mailbox we have this message on the bottom of outlook "update cached messages" Outlook is terrible with IMAP, and stores a lot of stuff offline. You can also turn down how much time is stored offline (...

mattg

If everything is forwarded to gmail, what is hMailserver doing in the middle?

mattg

edit: I should add that hMailServer is installed on a Windows box. hMailserver ONLY installs on Windows, it is a windows ONLY product Our implementation is such that inbound SMTP is not allowed (so I can't send from an email client), but outbound messages from the server are forwarded by rules thro...

mattg

ALSO

You have errors in your error log
Please show that

Code: Select all

Error:    C:\Program Files (x86)\hMailServer\Logs\ERROR_hmailserver_2018-10-05.log - !! ERRORS PRESENT !!

mattg

lucb1e wrote: ↑
2018-10-05 20:17
Is it possible to modify the EHLO response without having to recompile the whole project?

sorry, no

You'll need to recompile once you make changes
You could post a fork on github if you achieve that though

mattg

That would be the eventhandlers.vbs, located in the /hmailserver/events directory To be honest easiest way is to backup and then restore using built in tools. It will be a while since anyone has looked at that page of the documentation - I'll do that now. Backup EVERYTHING , and use compressed backu...

mattg

You don't need two hMailservers to achieve this if that is what you have done On one hmailserver install Create the domain Add the route to the hosted Office365 If you wish to have multiple servers to load share then on each set both settings, a local domain, AND a route (If you are really clever, a...

mattg

Are you using OutLook with IMAP, and opening the same account on multiple computers at the same time? Have you tried Thunderbird? Outlook is terrible with IMAP, and stores a lot of stuff offline. You can also turn down how much time is stored offline (not turn off though unfortunately with newer Out...

mattg

TCPIP PORTS Connection Sec 192.154.253.67 / 25 / SMTP - None 192.154.253.67 / 110 / POP3 - None 192.154.253.67 / 143 / IMAP - None 192.154.253.67 / 587 / SMTP - None 192.154.253.67 / 995 / POP3 - None You haven't enabled ANY security at all. Creating and loading the cert is just the first step. Typ...

Search found 18883 matches