Search found 691 matches

by RvdH
2019-06-15 09:24
Forum: General discussions
Topic: Order of "Greylisting" "White Listing"
Replies: 9
Views: 243

Re: Order of "Greylisting" "White Listing"

Dynamic GreyWhiteListing? This approach does not only verify the SPF check but it also verifies the received header so it matches the domain it supposed to be arriving from You need a hmailserver build with Sub OnHELO(oClient) support though Mail send from Office 365 users always is received from on...
by RvdH
2019-06-12 08:13
Forum: General discussions
Topic: (RULE) Only registered email addres can send email
Replies: 6
Views: 225

Re: (RULE) Only registered email addres can send email

Thanks Matt, i have tried form viewtopic.php?p=68117#p68117 and its works, i have tried the first code from https://vdhout.nl/2015/04/hmailserver-d ... ed-account its no working. I call that BS, take a closer look,it is literally 99% the same code :lol: :lol: The only reason why it should not work ...
by RvdH
2019-06-09 00:10
Forum: General discussions
Topic: Spamhaus Zen
Replies: 16
Views: 450

Re: Spamhaus Zen

Ps, note 127.0.0.4 is the only return code for CBL Currently I'm using spamhaus to reject snowshoe spam, which is very effective. I'm considering expanding the rejection to other blacklists. Return Codes Contains 127.0.0.2 Direct UBE sources, spam operations & spam services 127.0.0.3 Direct snowshoe...
by RvdH
2019-06-08 23:31
Forum: General discussions
Topic: Spamhaus Zen
Replies: 16
Views: 450

Re: Spamhaus Zen

I actually don't use any of hMailServers builtin DNS Blacklists or SURBL server, i totally rely on SpamAssasin for that, i just score the messages in SA Some info on DNS Blacklists & their effectiveness https://www.intra2net.com/en/support/antispam/index.php As for the (script) code snippets shown a...
by RvdH
2019-06-08 18:35
Forum: General discussions
Topic: Spamhaus Zen
Replies: 16
Views: 450

Re: Spamhaus Zen

I know what lashback is, i just wondered why you posted it here... no one was talking/asking about lashback :o I have it defined in SA, eg: # lashback.com header RCVD_IN_UNSUBSCORE eval:check_rbl('unsubscore-lastexternal','ubl.unsubscore.com.','127.0.0.2') describe RCVD_IN_UNSUBSCORE Listed in Lashb...
by RvdH
2019-06-08 18:09
Forum: General discussions
Topic: Spamhaus Zen
Replies: 16
Views: 450

Re: Spamhaus Zen

Lashback? ' The Spamhaus Block List ("SBL") Advisory is a database of IP addresses from which Spamhaus does not recommend ' the acceptance of electronic mail. ' Spamhaus DROP/EDROP Data (127.0.0.9 in addition to 127.0.0.2, since 01-Jun-2016) Function IsInSpamHausSBL(strIP) : IsInSpamHausSBL = false ...
by RvdH
2019-06-08 16:25
Forum: General discussions
Topic: Spamhaus Zen
Replies: 16
Views: 450

Re: Spamhaus Zen

Does hMailServer stop processing antispam measures once the Spam mark threshold has been reached? Otherwise you would be doing double lookups...
by RvdH
2019-06-08 16:20
Forum: Off-topic discussions
Topic: New kinda spammers?
Replies: 5
Views: 309

Re: New kinda spammers?

I've got a single one auto-banned that shouldn't have been banned, using: mail.something.com as HELO/EHLO with From-address: mail@something.com you can come by this, by adjusting it like: Sub OnSMTPData(oClient, oMessage) Dim oRegEx Set oRegEx = CreateObject("VBScript.RegExp") oRegEx.IgnoreCase = Tr...
by RvdH
2019-06-08 14:06
Forum: General discussions
Topic: Spamhaus Zen
Replies: 16
Views: 450

Re: Spamhaus Zen

I use them all, although through SpamAssassin :)
by RvdH
2019-06-08 13:28
Forum: Off-topic discussions
Topic: New kinda spammers?
Replies: 5
Views: 309

New kinda spammers?

I noticed one of my servers is being hit with spam mails where the HELO and From-address only differ one char, example: HELO/EHLO: eisentraut . zachariaszels.com MAIL FROM: eisentraut @ zachariaszels.com To catch these early i did this: Sub OnSMTPData(oClient, oMessage) If (oMessage.FromAddress <> "...
by RvdH
2019-06-06 13:28
Forum: Development & alpha discussions
Topic: Sub OnHELO(oClient) progress?
Replies: 193
Views: 35383

Re: Sub OnHELO(oClient) progress?

It is not mine ;)
by RvdH
2019-06-04 14:44
Forum: General discussions
Topic: Mail blocked by Spamhaus
Replies: 18
Views: 642

Re: Mail blocked by Spamhaus

SorenR wrote:
2019-06-04 13:12
You can ask Spamhaus to remove you from the PBL if you subscribe to "fixed IP" with your provider. I did ... and I'm gone :mrgreen:
ditto
by RvdH
2019-06-04 12:38
Forum: Development & alpha discussions
Topic: Sub OnHELO(oClient) progress?
Replies: 193
Views: 35383

Re: Sub OnHELO(oClient) progress?

Glad you got it resolved :wink:
by RvdH
2019-06-04 12:25
Forum: Development & alpha discussions
Topic: Sub OnHELO(oClient) progress?
Replies: 193
Views: 35383

Re: Sub OnHELO(oClient) progress?

There is no rule defined for those accounts, I do not know if the forwarding behaves internally as if it were a rule. No :!: Do you use? RewriteEnvelopeFromWhenForwarding=1 But yes, also here note that only mails to external recipients are dkim signed, if you forward from a local account to local a...
by RvdH
2019-06-04 11:57
Forum: Development & alpha discussions
Topic: Sub OnHELO(oClient) progress?
Replies: 193
Views: 35383

Re: Sub OnHELO(oClient) progress?

Forwarding? Settings in that Tab, have literally nothing to do with an Account Reply rule, or what am i missing here?
by RvdH
2019-06-04 11:37
Forum: Development & alpha discussions
Topic: Sub OnHELO(oClient) progress?
Replies: 193
Views: 35383

Re: Sub OnHELO(oClient) progress?

The account address this account rule is assigned to and the address defined in the From field are the same?

Addendum: And only emails to external accounts get signed by DKIM
by RvdH
2019-06-02 09:38
Forum: General discussions
Topic: DKIM on reply from rule
Replies: 6
Views: 371

Re: DKIM on reply from rule

If you would like to give my build with this functionality a go, it is found here: https://www.hmailserver.com/forum/viewt ... 68#p212268
by RvdH
2019-06-02 02:37
Forum: Development & alpha discussions
Topic: Sub OnHELO(oClient) progress?
Replies: 193
Views: 35383

Re: Sub OnHELO(oClient) progress?

Install the latest production and/or beta version from the URL below, then copy and overwrite files in this archive in hmailserver '/bin' directory https://build.hmailserver.com/repository/download/HMailServer_BuildHMailServer56/740:id/hMailServer-5.6.8-B2437.exe Supports Sub OnHELO(oClient) event,...
by RvdH
2019-06-02 02:09
Forum: SpamAssassin implementation discussions
Topic: Spam Mail not detected by SpamAssassin
Replies: 7
Views: 365

Re: Spam Mail not detected by SpamAssassin

What? Your name can be spoofed...sure...but you are a fool if you don't notice that, no? What i meant to say if you have require SMTP authentication for "Local to local e-mail addresses" for the "Internet" range you would never get a message from your own email address from the 'outside' when not au...
by RvdH
2019-06-02 01:59
Forum: User-submitted tutorials
Topic: Hardening hMailServer - The ongoing saga!
Replies: 48
Views: 2745

Re: Hardening hMailServer - The ongoing saga!

And it can shortened...ps i have seen cases ip adresses are zero prefixed (see example 107.red-083-059-097.dynamicip.rima-tde.net), my final regexp would look something like: strRegEx = "^(?!(?:\[)(?:(?:ipv6.+)|(?:[0-9]{1,3}[.-]){3}[0-9]{1,3})(?:\]))" &_ "(.*(((?:[0]{0,2})" & a(0) & "|(?:[0]{0,2})" ...
by RvdH
2019-06-01 13:28
Forum: SpamAssassin implementation discussions
Topic: Spam Mail not detected by SpamAssassin
Replies: 7
Views: 365

Re: Spam Mail not detected by SpamAssassin

jimimaseye wrote:
2019-06-01 13:26
He already has. https://www.hmailserver.com/forum/viewt ... 09#p212209

[Entered by mobile. Excuse my spelling.]
Than it couldn't have come from his own Email Address, spoofed or not...
by RvdH
2019-06-01 13:18
Forum: SpamAssassin implementation discussions
Topic: Spam Mail not detected by SpamAssassin
Replies: 7
Views: 365

Re: Spam Mail not detected by SpamAssassin

In that case you should require SMTP authentication for "Local to local e-mail addresses" for the "Internet" range, which is the default i believe....don't touch anything you don't know anything about :!:
by RvdH
2019-06-01 00:31
Forum: User-submitted tutorials
Topic: Hardening hMailServer - The ongoing saga!
Replies: 48
Views: 2745

Re: Hardening hMailServer - The ongoing saga!

That also matches: IPAddress = "193.126.23.235" HELO = "[193.126.23.235]" Which is allowed, see RFC2821 4.1.3 But i think this will do to filter out ip4 and ip6 adresses between brackets strRegEx="^(?!(?:\[)(?:(?:ipv6.+)|(?:[0-9]{1,3}[.-]){3}[0-9]{1,3})(?:\])$)" &_ "((" & a(0) & "|" & a(1) & "|" & a...
by RvdH
2019-05-31 10:28
Forum: General discussions
Topic: Problem, different from address when forwarding using account forwarding tab and account rule
Replies: 12
Views: 453

Re: Problem, different from address when forwarding using account forwarding tab and account rule

I can make you a test build that respects the 'RewriteEnvelopeFromWhenForwarding' ini file setting when used in Account Forwarding rules I think it actually very simple, eg: // We need to update the SMTP envelope from address, if this // message is forwarded by a user-level account. std::shared_ptr<...
by RvdH
2019-05-30 16:02
Forum: Off-topic discussions
Topic: ClamAV hangs server
Replies: 23
Views: 1670

Re: ClamAV hangs server

In "ClamWin Free Antivirus Scanner Service" service properties under tab "Recovery" I have set First and Second Failure to restart the service, so that's been triggered as soon the service terminates
(Subsequent failures I left as is, eg: Take no action)
by RvdH
2019-05-30 14:31
Forum: Off-topic discussions
Topic: ClamAV hangs server
Replies: 23
Views: 1670

Re: ClamAV hangs server

I use some additional sanesecurity definitions, these are updated more regular, at least once per hour it seems looking at my logs With these the database modification is detected at least once every hour. Forcing a reload, followed by a ClamAv crash (ERROR: reload db failed: Can't allocate memory) ...
by RvdH
2019-05-30 14:21
Forum: General discussions
Topic: Problem, different from address when forwarding using account forwarding tab and account rule
Replies: 12
Views: 453

Re: Problem, different from address when forwarding using account forwarding tab and account rule

Is this the expected behavior? Is there any way to change it? If you know your c++ and build your own hmailserver.exe the code you are looking for is in RuleApplier.cpp approx line 248 void RuleApplier::ApplyAction_Forward(std::shared_ptr<RuleAction> pAction, std::shared_ptr<const Account> account,...
by RvdH
2019-05-30 12:27
Forum: Off-topic discussions
Topic: ClamAV hangs server
Replies: 23
Views: 1670

Re: ClamAV hangs server

Nope, but i only notice this behavior occasionally... maybe 1 or 2 times a month Most times this issue fixes itself when a database modification is detected. Forcing a reload, followed by a crash and then a restart of the service Do you experience this more regularly? What version of ClamAv are you ...
by RvdH
2019-05-30 11:44
Forum: General discussions
Topic: Problem, different from address when forwarding using account forwarding tab and account rule
Replies: 12
Views: 453

Re: Problem, different from address when forwarding using account forwarding tab and account rule

@ilpanos You are right, the FromAddress is modified using the Forward Account rule mechanism...but i do'nt see why you need that to be different as you pointed out If it's forwarded to a domain on the same hmailserver instance it doens't influence anything If it's forwarded to a external domain the ...
by RvdH
2019-05-24 16:04
Forum: General discussions
Topic: Code: HM4403
Replies: 31
Views: 1029

Re: Code: HM4403

SorenR wrote:
2019-05-24 15:45
I still fail to see why a 20 second wait would cause this. The script trigger is done and control is returned to core.
If a supposed 20 second delay is delayed for 40 seconds I can not see why the issue is not within that call :mrgreen:
by RvdH
2019-05-24 15:31
Forum: General discussions
Topic: Code: HM4403
Replies: 31
Views: 1029

Re: Code: HM4403

Fingers crossed then ;)

I have been running test since this morning ...i haven't been able to reproduce the HM4403 error (yet)
by RvdH
2019-05-24 15:25
Forum: General discussions
Topic: Code: HM4403
Replies: 31
Views: 1029

Re: Code: HM4403

So we can conclude the issue you had was indeed introduced by using the Wait(20) and caused by some incompatibilities with sleep/timeout on Server Core?
Or with this change, the issue still is not resolved?
by RvdH
2019-05-24 13:22
Forum: General discussions
Topic: Code: HM4403
Replies: 31
Views: 1029

Re: Code: HM4403

Function Wait(tSec) With CreateObject("WScript.Shell") .Run "timeout /T " & Int(tSec), 0, True '.Run "sleep -m " & Int(tSec * 1000), 0, True '.Run "powershell Start-Sleep -Milliseconds " & Int(tSec * 1000), 0, True End With End Function Some incompatible with timeout.exe on Server Core maybe? Could...
by RvdH
2019-05-24 10:12
Forum: General discussions
Topic: Code: HM4403
Replies: 31
Views: 1029

Re: Code: HM4403

"DEBUG" 2740 "2019-04-25 14:11:20.142" "Executing event OnSMTPData"

"DEBUG" 2740 "2019-04-25 14:12:00.166" "Event completed"
that looks more like a 40 sec delay...something else get triggered there?
by RvdH
2019-05-23 23:18
Forum: General discussions
Topic: Code: HM4403
Replies: 31
Views: 1029

Re: Code: HM4403

@tunis Does SURBL detection work correctly? In both cases? (eg: with and without the wait(20)) I am thinking the problem might be related to: SURBL detection properly fails to detect url's ending with a query string issue #108 Hmm... Could this be the temporary file sent to SA that is not supposed t...
by RvdH
2019-05-21 12:44
Forum: Scripting
Topic: Mail Header Received from Unknown via GMAIL
Replies: 9
Views: 327

Re: Mail Header Received from Unknown via GMAIL

@w3ph
Are you sure it's because of the missing PTR record or could it possibly be the actual IP address it origination from is on one or more blacklists?

Maybe you could anonymise the offending ip in the 'Receiver from' header
https://www.hmailserver.com/forum/viewtopic.php?t=18467
by RvdH
2019-05-17 13:03
Forum: General discussions
Topic: Time to say good bye ...
Replies: 21
Views: 1120

Re: Time to say good bye ...

@jim.bus
Not entirely sure, but i think you can use 32-bit ODBC 5.3.13 dll without problems to connect to a 64-bit Mysql 8.x instance (I am still on Mysql 5.7.x though)
by RvdH
2019-05-17 10:30
Forum: General discussions
Topic: Time to say good bye ...
Replies: 21
Views: 1120

Re: Time to say good bye ...

I agree, hMailserver still serves my needs brilliantly, people demanding instant TLS 1.3 support....wow!!! Half the internet doesn't support TLS 1.3 at this stage...even Windows 10 to my knowledge still has no build-in support for it (yet), and TLS 1.2 and lower are still suitable for most user cases.
by RvdH
2019-05-17 08:53
Forum: Development & alpha discussions
Topic: hMailServer 5.7.0 64-Bit (LTS) - April Release with OpenSSL 1.0.2r update
Replies: 38
Views: 1795

Re: hMailServer 5.7.0 64-Bit (LTS) - April Release with OpenSSL 1.0.2r update

@mattg
That pull request seems incomplete.... where have all the "Return.Value" entries gone?
As per https://www.hmailserver.com/forum/viewt ... 68#p188768 it is known this function can use "Return.Value"
by RvdH
2019-05-16 23:12
Forum: General discussions
Topic: Time to say good bye ...
Replies: 21
Views: 1120

Re: Time to say good bye ...

Nice story...a lot of questions though... I understand exactly what you trying ask, answering is another thing without knowing Martin's plans and ambitions in this project. A few answers are obvious though...all forks, like dravions and mine are never to be released through the official hmailserver....
by RvdH
2019-05-10 17:03
Forum: General discussions
Topic: Attack by SYN_RCVD
Replies: 19
Views: 702

Re: Attack by SYN_RCVD

I see the same IP's (the above mentioned ones) only not SYN_RCVD connected to hmailserver.exe, but to "FileZilla Server.exe"
Weird stuff
by RvdH
2019-05-10 11:22
Forum: General discussions
Topic: Error 7760 / HM4406 - Could not read the message header, since the file was not available
Replies: 22
Views: 751

Re: Error 7760 / HM4406 - Could not read the message header, since the file was not available

That leaves orphaned data, that really is not the best practice...but as Matt already pointed out, it is not recommended to alter database directly in the first place
by RvdH
2019-05-10 09:01
Forum: General discussions
Topic: Error 7760 / HM4406 - Could not read the message header, since the file was not available
Replies: 22
Views: 751

Re: Error 7760 / HM4406 - Could not read the message header, since the file was not available

You also can stop hMailServer, login into your DB and delete the orphaned DB Records yourself For example like this: DELETE FROM 'hmailserver'.'hm_messages' WHERE messagefilename like '{8F79335E-A0A3-4B0A-9099-6F802E6737D0}.eml' After this, restart hMailServer, the Error should be gone. And what ab...
by RvdH
2019-05-09 14:25
Forum: General discussions
Topic: DKIM on reply from rule
Replies: 6
Views: 371

Re: DKIM on reply from rule

Fix... added check if it is a global rule or an account rule global rule = not DKIM signed, Empty return-path header (this is the current behaviour!) account rule = DKIM signed (if enabled), Non empty return-path header Replace the whole: void RuleApplier::ApplyAction_Reply(std::shared_ptr<RuleActio...
by RvdH
2019-05-09 14:11
Forum: General discussions
Topic: SMTP 25 POORT NOT WORKING
Replies: 3
Views: 130

Re: SMTP 25 POORT NOT WORKING

Perhaps you used anything other then STARTTLS (optional) or None in the security settings
by RvdH
2019-05-09 10:48
Forum: General discussions
Topic: DKIM on reply from rule
Replies: 6
Views: 371

Re: DKIM on reply from rule

I think this Reply rule is kinda weird anyway....why would one allow to Reply from another account other then the account this rule is applied to in the first place??? @weinberk, how are your coding skills? Changes below DKIM Sign messages using account-level reply rules RuleApplier.h replace: void ...
by RvdH
2019-05-08 13:34
Forum: General discussions
Topic: DKIM on reply from rule
Replies: 6
Views: 371

Re: DKIM on reply from rule

The problem with such rule is that the filled in email address in Reply rule doesn't have to be a local address/domain. You can type anything you like there.
That, as well as the missing SMTPFromAddress (empty due to Auto-Submitted header) is responsible for not signing the message (i think ;) )
by RvdH
2019-05-03 11:03
Forum: Development & alpha discussions
Topic: Sub OnHELO(oClient) progress?
Replies: 193
Views: 35383

Re: Sub OnHELO(oClient) progress?

Weird. Nothing worked. Finally I uninstalled and reinstalled official 5.6.7-b2425 hmailserver. Now its working again (OnClientConnect). So conclusion? You f***ked up your scripting, and still you need to rollback to the official build? That doesn't make sense :!: :?: Nothing is changed in OnClientC...
by RvdH
2019-04-25 09:13
Forum: Development & alpha discussions
Topic: Sub OnHELO(oClient) progress?
Replies: 193
Views: 35383

Re: Sub OnHELO(oClient) progress?

Should I assume that this is your most recent build (obvious question, i know..) RvdH? @insomniac2k2 5.6.8-B2437.17 i think is latest: https://d-fault.nl/files , i have a private build with updated OpenSSL libs but that isn't shared publicly (yet) @mattg, just curious, what server you are looking i...
by RvdH
2019-04-24 11:01
Forum: Development & alpha discussions
Topic: Sub OnHELO(oClient) progress?
Replies: 193
Views: 35383

Re: Sub OnHELO(oClient) progress?

Downloads should be fixed, sorry i didn't even noticed something was wrong until you guys here made me aware of this
by RvdH
2019-03-23 18:37
Forum: General discussions
Topic: File extension whitelisting an adress or domain
Replies: 8
Views: 883

Re: File extension whitelisting an adress or domain

Example: ifplugin mail::SpamAssassin::Plugin::MIMEHeader mimeheader ZIP_ATTACHED Content-Type =~ /\bzip\b/i describe ZIP_ATTACHED email contains a ZIP file attachment score ZIP_ATTACHED 0.5 # mimeheader PDF_ATTACHED Content-Type =~ /\bpdf\b/i # describe PDF_ATTACHED email contains a PDF file attachm...
by RvdH
2019-03-23 02:47
Forum: General discussions
Topic: About SMTP port?
Replies: 9
Views: 1032

Re: About SMTP port?

If this option under the IP Internet Range would accomplish the same thing then this might be more preferable to change than changing the hMailAdmin.ini configuration file because it would make installing upgrades to hMailServer less complicated because you would not have to make an additional chan...
by RvdH
2019-03-08 10:13
Forum: General discussions
Topic: DKIM Error Shown In Outlook Message Header
Replies: 19
Views: 1296

Re: DKIM Error Shown In Outlook Message Header

palinka wrote:
2019-03-07 12:58
How long ago did you set up the dns record? Could be a propagation issue.

Also, this is handy for testing: https://dkimvalidator.com

There are other sites that help you test as well.
Alternative: https://www.port25.com/authentication-checker/