hMailServer forum

phil54

Thanks for the help, i'll have a look at nasmail first.

phil54

Thanks Martin, are they generally the three bits of webmail software that you recommend you use with hmail?

phil54

I've been asked to setup webmail for use with our hmail install, now i'm wondering what's the easiest to setup?

What webmail does everyone use with hmail?

Thanks all

phil54

If it's a new router, have you forwarded the ports to the server? Ie 25, 21 etc etc

phil54

since mid june i'm on about 180'000 now...

/shakes fist at the dirty spammers

Edit: You are definately rejecting spam, just ran your logfile through logparser and it's rejected:

Spamhaus: 1153
no mx records: 78
blocked by spf: 55

phil54

gmorken, thats working ok. These are the blacklist i use on our server

zen.spamhaus.org
bl.spamcop.net
dnsbl.njabl.org
ix.dnsbl.manitu.net

Seems to work well at the moment

phil54

Have you activated the dns blacklists in the spam settings gmorken?

phil54

We use basically the same as Rainer, but without the greylisting. Something i should do lol

phil54

Ha Ha Slug, i must of been. I'm sure i saw it on here as well

I've just used this one, seems quite good. I tested it first with the eicar test virus.

http://virusscan.jotti.org/

Anyone for a pint

phil54

Lo all,

i seem to remember someone on here posting a link to a website, where it's possible to upload a file that you think might have a virus and it checks it online against all the top virus scanning companies.

Have i just made that up?

Ta

phil54

It sounds like a DNS issue to me, has the dns definately resolved to the right place?

What's the domain in question, private message me if you dont want on the forums and i'll check the dns out

phil54

lol, you deserve to make some cash from this martin. It really is a great product

phil54

I cant get to port 80 or 25 now mate, try the check dns again

phil54

Sounds about right mate, as your website is working. Looks like the port forwarding isnt working properly, check your router and that should be it Edit: I've checked the dns again and i'm getting a different error message, as it cant connect to port 25: Error connecting to mail server mail.cnczone.c...

phil54

That looks ok to me, have a look at this website:

https://www.grc.com/x/ne.dll?bh0bkyd2

It will probe your ports and tell you what's open etc, see if port 25 is forwarding over correctly. Use the common ports option

phil54

You'll need a mail.cnczone.co.uk for the MX record, add it in and then use this website to check the domain cnczone.co.uk http://www.checkdns.net/quickcheckdomainf.aspx At the moment this is what i get at the end of the check for your mail records: "CheckDNS.NET tests mail-servers Domain cnczone.co....

phil54

I think it's just a normal spam attack, the person is trying to log in as anonymous from a chinese ip.

I'm not sure there is much you can do to stop it, perhaps block the ip at your firewall if you can

phil54

Since everyone is getting a new signature, i thought i'd use one of mine

phil54

Bit of an update, i deleted our domain from the hmail server and it's now working as it should be

Mails are now arriving at our exchange server, hooray!

phil54

Hi mate,

this is what i'm using at the moment:

zen.spamhaus.org
bl.spamcop.net
dnsbl.njabl.org
ix.dnsbl.manitu.net

Along with SPF Checked and check sender has DNS-MX records, it seems to be working really well.

phil54

Straight away: 550 Domain has been disabled system undeliverable.

Does hmail cache dns addresses in anyway?

phil54

haha thanks for getting back to me Martin, you have to love my insane writings :mrgreen: You mention that you have two servers but it's not clear to me which server you're referring to throughout your post. :) Sorry the server with Hmail Why did you change DNS to hMailServers? Have you set up all th...

phil54

Hi all, this is a strange one, and it's got me beaten at the moment. In the office we have an exchange 2007 server and we have our hosting/mail server (hmail) in a data centre, last monday we had a power cut at the office so i changed the dns to our pop3 hmail accounts and it worked fine. Once the p...

phil54

Good shout doom, let's get upgrading people

phil54

Do you have any sort of hardware firewall running ?

phil54

Katakana, i've just checked the dns for the esaote.ro domain and i'm not getting anything back from port 25.

Are you sure you have no firewall running on the server?

phil54

I already use spf on the mail server, is there anything else i can do bar that list?

phil54

Is there anyway of stopping this?

phil54

Thanks doom, they tried for a little bit again on the monday with a similar ip and today it seems ok.

I'll have to keep my eye on this, another sql query for log parser lol

phil54

I've saw it on FTP logs before but on the mailserver

phil54

I've just noticed a lot of this on one particular day, i'm just wondering is the normal type of crap that goes on? This is the first time i've saw it, there is a lot of it, what type of program would they use for this? "POP3D" 3700 40471 "2008-05-04 17:34:08.359" "65.12.248.14" "RECEIVED: USER sales...

phil54

AlanSilver, what dns blacklists etc are you using?

phil54

thanks rainer, i'll have a play about with that command today

phil54

With my crappy sql skills, i've managed to get a list of all mails going to the mail server and another list of all the mails being rejected, what i cant do is combine them. :evil: I want the above two and then another list of mails that have been accepted, anyone got any ideas? Ie Soren and Rainer ...

phil54

Woah, thats awesome! Just think of the log parser commands i could try and do with that lol

phil54

LoL can i hire them to clean this keyboard?

phil54

take a screenshot and upload it to: http://imageshack.us/

you should be able to then show in the thread

phil54

Thanks Rainer, thats excellent. It just shows you can do a lot with this program if you know what your doing

I wonder if it would be possible to create one that will tell you how many spam emails are getting through? I think i'll have a look into this

phil54

nice going rainer, is that the output from one sql query?

phil54

well i didnt know that, thanks dzekas

phil54

Does anyone use this one?

http://cbl.abuseat.org/

phil54

Hi Carl, yeah i've been using log parser to do this, with a lot of help from Soren. Easy to do: 1) Create a file called "smtpd.tsv with the following inside" logtype timestamp remotehost text excess (Tab between each) 2) Download logparser from the ms site 3) Create a batch file and put the followin...

phil54

How many people use the psbl.surriel.com blacklist? What sort of results are you getting from it? Reason i'm asking, i added it in around the start of this month and so far it hasnt blocked 1 spam mail. Were i added the manitu list last week and it seems to be blocking quite a few everyday. This is ...

phil54

Ah sweet, just checking

phil54

While on the subject, doom you mentioned before:

You should also have ticked, Require authentication for deliveries TO REMOTE ACCOUNTS.

Should that be on the computer and internet range?

phil54

Rabol, i'll post some of the code i've been messing with (thanks to Soren) in here if you need it

phil54

I can see you've given this some thought dzekas lol

phil54

Ah right thanks dzekas, this is a new one for me.

I wonder why the spammer is targetting that particular domain?

phil54

Lo all, just a quick question, if anyone can explain this to me that would be ace. I'm just looking through the mail server logs and i find this relay/spam attempt, the bit i dont understand is the couple of lines in bold. How is there no address in the sent mail field and why does the server accept...

phil54

It'll be good to have some scripting documentation, as i have no clue what i'm doing in that area at the moment

phil54

I've checked the dns for *.com and it shows the mail.*.com is working fine, are you sure you've ticked "My server requires authentication" in more settings in outlook?

phil54

haha thanks rainer, i'm using:

zen.spamhaus.org
bl.spamcop.net
dnsbl.njabl.org

and i think i'll add:

psbl.surriel.com
ix.dnsbl.manitu.net

and see how i go from there

phil54

Excellent thanks rainer, i'll add another couple of blacklists later and monitor how many get rejected

phil54

If a mail comes in, is it checked against the first blacklist, then the second, third etc.

phil54

Out of interest and sorry for hijacking this thread rainer, i've got three blacklists running at the moment: zen.spamhaus.org bl.spamcop.net dnsbl.njabl.org After a lot of help from Soren with the sql queries in logparser, i can see that spamhaus stops the majority of the spam on the server, with th...

phil54

Is it worth using greylisting? I havent got it setup at the moment, if i did would i see a decrease in spam being rejected on the server?

phil54

As doom said, are there any errors in the logs?

I've checked your dns for arvixe.com and it looks fine

phil54

Ok more than a couple of times lol

phil54

I've noticed this line a couple of times in the logs: "250-hmailserver[nl]250-SIZE[nl]250 AUTH LOGIN" Is this someone testing the server as an open relay? "RECEIVED: EHLO dyn-91-168-233-89.ppp.tiscali.fr" "91.168.233.89" "SENT: 250-hmailserver[nl]250-SIZE[nl]250 AUTH LOGIN" "91.168.233.89" "RECEIVED...

phil54

Thanks mate, that batch file works ok.

I was running it straight from the command line before, you the man soren

Search found 195 matches