Search found 103 matches

by DanCML
2010-08-02 17:29
Forum: General discussions
Topic: Block spoofed mail
Replies: 26
Views: 16199

Re: Block spoofed mail

Bill, you've missed the one combination being discussed by the OP. The issue here is where the MAIL FROM is external, say support@fakedomain.com, but the From: header is local, eg itdept@yourdomain.com. The SPF checks are done against fakedomain.com, and as far as hMailServer is concerned it's an ex...
by DanCML
2010-08-02 16:57
Forum: General discussions
Topic: Block spoofed mail
Replies: 26
Views: 16199

Re: Block spoofed mail

No, it's the other way around. It's the SMTP MAIL FROM that is checked for spoofing - that's the address that hMailServer uses for determining if the sender is "local" or "external". It doesn't matter what is in the From: address in the message headers.
by DanCML
2010-08-02 16:47
Forum: General discussions
Topic: Block spoofed mail
Replies: 26
Views: 16199

Re: Block spoofed mail

No Bill, it doesn't - hMailServer checks the MAIL FROM address used at the SMTP level, and as that is external allows the email to pass. But the mail client displays the From: address which is just a line of text in the message body and can be anything.
by DanCML
2010-08-02 12:00
Forum: General discussions
Topic: Block spoofed mail
Replies: 26
Views: 16199

Re: Block spoofed mail

The issue here is that the email coming in is using a domain in the MAIL FROM that is external, but has the From: header set to a local address so in the mail client appears to be from a local user. It's unauthenticated mail, so that script won't help as oClient will not have an authenticated user n...
by DanCML
2010-07-29 18:29
Forum: General discussions
Topic: Prevent an email from being delivered
Replies: 15
Views: 9086

Re: Prevent an email from being delivered

If the message itself is different that is sent which triggers the rule, then it could be triggering a different check in your ISPs mail system. For instance, if the second message had just LF instead of CRLF for line feeds it would be rejected due to RFC checks.
by DanCML
2010-07-29 18:04
Forum: General discussions
Topic: Prevent an email from being delivered
Replies: 15
Views: 9086

Re: Prevent an email from being delivered

Was it the same content in the email though, right down to the line feeds?
by DanCML
2010-07-29 15:04
Forum: General discussions
Topic: Block spoofed mail
Replies: 26
Views: 16199

Re: Block spoofed mail

I just had a spam mail with my own forged email, talk about coincidence :) I thought I'd take a look at a way of handling this, checking the IP to see if it's in the Internet range (checking higher priority ranges first of course), and tagging the subject if one is found. However, I've hit upon a sn...
by DanCML
2010-07-29 14:54
Forum: General discussions
Topic: Prevent an email from being delivered
Replies: 15
Views: 9086

Re: Prevent an email from being delivered

It's under Settings > SMTP , Delivery of email tab, in the Local host name box. However, if you are always routing to your ISP gateway you can probably just leave it, it would only affect you when sending to recipient servers that do reverse DNS checks or checks for FQDN. Whatever you do don't put y...
by DanCML
2010-07-29 14:21
Forum: General discussions
Topic: Auto-Ban showing the server's IP address?!
Replies: 12
Views: 12734

Re: Auto-Ban showing the server's IP address?!

BTW, if hMail would of had the functionality for host name per domains as opposed to per server, this would of been much less of an issue as I would not have to share an IP with other domains (run by another person) that were the cause of the issue: http://www.hmailserver.com/forum/viewtopic.php?f=...
by DanCML
2010-07-29 14:09
Forum: General discussions
Topic: Prevent an email from being delivered
Replies: 15
Views: 9086

Re: Prevent an email from being delivered

"SMTPC" 2104 34074 "2010-07-28 20:25:45.828" "196.26.208.195" "SENT: HELO SANCA-SERVER" Why are you not use a FQDN for your server? "SMTPC" 2104 34074 "2010-07-28 20:25:45.875" "196.26.208.195" "SENT: MAIL FROM:<>" ... "SMTPC" 2068 34067 "2010-07-28 20:26:47.594" "196.26.208.193" "RECEIVED: 550-Ser...
by DanCML
2010-07-29 12:47
Forum: General discussions
Topic: Block spoofed mail
Replies: 26
Views: 16199

Re: Block spoofed mail

The From: field is simply part of the body of the message, the actual domain checks are done against the MAIL FROM SMTP command. I think you're going to have to look at creating a script to handle this. EDIT: there is a script here that does checks against the From address in the email, and could be...
by DanCML
2010-07-29 11:31
Forum: General discussions
Topic: Multiple IP addresses on our server
Replies: 27
Views: 15179

Re: Multiple IP addresses on our server

I think the problem really is that SPF and similar techniques are just attempts at patching up a protocol that was never designed for it's current use. There's a lot of knee jerk implementations with little thought for their impact elsewhere, SPF and SenderID only work if something like SRS is also ...
by DanCML
2010-07-28 12:30
Forum: General discussions
Topic: Multiple IP addresses on our server
Replies: 27
Views: 15179

Re: Multiple IP addresses on our server

Hardfail might be recommended by Hotmail, but they don't require it. Feel free to enable it, but you'll switch back to softfail once you started getting SPF rejection bounces due to forwarding accounts - for instance, my own Gmail account simply forwards it to my home account, and that will fail if ...
by DanCML
2010-07-28 10:17
Forum: Scripting
Topic: Domains.ItemByName: member not found
Replies: 10
Views: 7831

Re: Domains.ItemByName: member not found

To use VBScript, simply put all the code into a text file and save it with a filename that has .vbs as the extension. Then double click it - so long as you have Windows Scripting Host installed (it's pre-installed in Windows XP and higher, and is normally present on Windows 2000 too) it will run the...
by DanCML
2010-07-28 10:15
Forum: General discussions
Topic: Multiple IP addresses on our server
Replies: 27
Views: 15179

Re: Multiple IP addresses on our server

Papermouse, that should be fine. However, I would recommend you stick with ~all, because "hardfail" (ie -all) will cause problems with some systems if email is forwarded; as I'd already mentioned, when we switched from ~all to -all we did have some email rejected for Yahoo accounts we were sending t...
by DanCML
2010-07-27 10:08
Forum: Scripting
Topic: Domains.ItemByName: member not found
Replies: 10
Views: 7831

Re: Domains.ItemByName: member not found

OK, I misread your post then - I thought you were getting the output of Domains.Names and using that as input. Try my VBScript for one of your users - change the 3 variables at the top, and the admin password. If it works, then you know the hMailServer COM API is working properly, and it must be a D...
by DanCML
2010-07-27 10:04
Forum: General discussions
Topic: Multiple IP addresses on our server
Replies: 27
Views: 15179

Re: Multiple IP addresses on our server

Papermouse, you need to just change all your SPF records to use 1.1.1.1, it's as simple as that. 2.2.2.2 is never used to send mail, it's always from 1.1.1.1, so use that in your SPF and make sure the reverse DNS FQDN for 1.1.1.1 matches the hostname you've set in hMailServer for sending mail.
by DanCML
2010-07-26 16:36
Forum: Scripting
Topic: Domains.ItemByName: member not found
Replies: 10
Views: 7831

Re: Domains.ItemByName: member not found

Doh! Now I see what you're doing wrong. Domains.Names is a list of domain values, you can't use the output directly. You have to parse it into lines (1 line per domain), and each line is a tab delimited set of values. eg. Dim obApp Set obApp = CreateObject("hMailServer.Application") ' Authenticate. ...
by DanCML
2010-07-26 16:17
Forum: Scripting
Topic: Domains.ItemByName: member not found
Replies: 10
Views: 7831

Re: Domains.ItemByName: member not found

Are you using an alias, or the actual domain name as shown in the hMailServer domain list? I just tried the VBScript example from http://hmailserver.com/documentation/v5.2/?page=com_example_folder_list for the ItemByName and ItemByAddress methods and it works fine, so the methods and properties to g...
by DanCML
2010-07-23 16:26
Forum: General discussions
Topic: SMTP not working - Your a genius if you can answer this....
Replies: 11
Views: 6986

Re: SMTP not working - Your a genius if you can answer this.

If it is Orange blocking, then you would need to see if the remote server has SSL enabled (I'm assuming it's not your server as it's Exim). If it hasn't then you are out of luck.
by DanCML
2010-07-23 15:20
Forum: General discussions
Topic: SMTP not working - Your a genius if you can answer this....
Replies: 11
Views: 6986

Re: SMTP not working - Your a genius if you can answer this.

If I'm reading the OP right, it's a remote server called relay.xxx.xxx (real name would help anyone to determine if there's another issue here) with SMTP open on port 980, and a local hMailServer being used to connect to that server. When connecting to this server from Virgin it works, with Orange i...
by DanCML
2010-07-23 13:00
Forum: General discussions
Topic: Multiple IP addresses on our server
Replies: 27
Views: 15179

Re: Multiple IP addresses on our server

The last line in this article sums it up quite nicely: http://www.spambutcher.com/art1/152941/ :P
by DanCML
2010-07-23 12:49
Forum: General discussions
Topic: Multiple IP addresses on our server
Replies: 27
Views: 15179

Re: Multiple IP addresses on our server

Doom, some anti-spam systems do check the mail server domain against the from domain and add a spam score if there's a mismatch, but this score tends to be very small and insignificant - a reverse DNS mismatch is often a much higher spam score addition. EDIT: just checked the standard Spamassassin r...
by DanCML
2010-07-23 12:38
Forum: General discussions
Topic: Multiple IP addresses on our server
Replies: 27
Views: 15179

Re: Multiple IP addresses on our server

Make sure your reverse lookup matches the host name that you've configured in hMailServer. That's a key configuration mistake, and trips up quite a few people. If your single IP reverse DNS is mail.bob.com, then put mail.bob.com in the hMailServer configuration. It has nothing do with the from addre...
by DanCML
2010-07-23 12:06
Forum: General discussions
Topic: W2K8 Task scheduler
Replies: 7
Views: 4869

Re: W2K8 Task scheduler

Way to ignore the RFCs too :D
by DanCML
2010-07-23 11:42
Forum: General discussions
Topic: W2K8 Task scheduler
Replies: 7
Views: 4869

Re: W2K8 Task scheduler

This looks like an issue in the task scheduler itself - apparently it assumes it's sending to the Windows SMTP server and uses Windows NTLM authentication, and is nigh on impossible to get working with anything else. Once it sees the standard response to the AUTH LOGIN rather than the Windows SMTP s...
by DanCML
2010-07-23 11:35
Forum: General discussions
Topic: Multiple IP addresses on our server
Replies: 27
Views: 15179

Re: Multiple IP addresses on our server

I used to use NTMail (it's not free!) which can do this, but I switched to hMail back in August 2009 because I needed a system that was more flexible and with lower operating costs. At first I thought we'd have problems with using a single IP and hostname due to reverse DNS, but it's actually worked...
by DanCML
2010-07-16 16:59
Forum: General discussions
Topic: SMTP Error "451 Please try again later."
Replies: 8
Views: 23265

Re: SMTP Error "451 Please try again later."

That's ok, these things happen.
by DanCML
2010-07-16 16:54
Forum: General discussions
Topic: SMTP Error "451 Please try again later."
Replies: 8
Views: 23265

Re: SMTP Error "451 Please try again later."

Bill, I don't have a problem, I was replying to the OP ;) And I added an extra range because I have multiple PCs and servers that send to my hMail servers without using authentication (it's way too much hassle to reconfigure all the apps I've written over the years that send email to use auth!). We ...
by DanCML
2010-07-16 16:42
Forum: General discussions
Topic: SMTP Error "451 Please try again later."
Replies: 8
Views: 23265

Re: SMTP Error "451 Please try again later."

Check the Settings > Anti-spam options to see if you have grey-listing enabled there too. If you then go to Advanced > IP Ranges see if you have Anti-spam ticked for the My Computer range, if so that will explain why grey-listing is enabled for outgoing mail from 127.0.0.1. If it's ticked for the ra...
by DanCML
2010-07-14 17:55
Forum: Feature requests
Topic: New OnEvent Procedure OnStartUp
Replies: 2
Views: 3139

Re: New OnEvent Procedure OnStartUp

@kfl42hmail, I'm assuming (although I might be off the mark here, martin will be able to clarify things) that the script is loaded into the engine for each thread as required, so unless your OnStartup script was used to store settings outside of the script (for instance in a configuration file or th...
by DanCML
2010-07-07 12:16
Forum: General discussions
Topic: Empty data folder
Replies: 19
Views: 8829

Re: Empty data folder

This sounds like the user account (LocalSystem?) that hMail is running under doesn't have sufficient permissions to create folders in that Data folder (this would likely be the case with Windows 2008 as the Program Files subfolders are locked down tighter than in previous versions of Windows). I wou...
by DanCML
2010-06-11 10:36
Forum: General discussions
Topic: Does hMailserver supports clustering across multiple servers
Replies: 9
Views: 6758

Re: Does hMailserver supports clustering across multiple ser

It's not supported - it's feasible at the OS level, and as Martin suggested active-passive should be ok. There isn't clustering built into hMail, but that isn't the same as not supporting clustering full stop.
by DanCML
2010-06-11 10:12
Forum: General discussions
Topic: Does hMailserver supports clustering across multiple servers
Replies: 9
Views: 6758

Re: Does hMailserver supports clustering across multiple ser

I don't know about the clustering side, but you can definitely put the hMail folder on a different drive - the paths are set in the .ini file, and you can change them during install too. I have my data folder on drive D of my servers.

For clustering, you'll probably be ok with active-passive.
by DanCML
2010-06-09 17:48
Forum: General discussions
Topic: 451 4.1.8 Domain of sender address... issue
Replies: 7
Views: 7628

Re: 451 4.1.8 Domain of sender address... issue

That looks like a Postfix error message ...
by DanCML
2010-06-07 15:17
Forum: General discussions
Topic: Relay access denied
Replies: 2
Views: 2892

Re: Relay access denied

Looks like that email address has the wrong MX record, the server that your hMailServer is connecting to is refusing to handle the email for that domain. It's not a problem with your configuration, your client needs to check their setup as they may have switched mail host but not updated their MX re...
by DanCML
2010-04-22 17:09
Forum: General discussions
Topic: Connection interrupted - large messages not downloaded
Replies: 17
Views: 11306

Re: Connection interrupted - large messages not downloaded

Given that you had problems on systems with no local AV, and the "solution" was to increase timeouts to 10 minutes, this does suggest that you have a performance/resource problem on your mail server and it may be directly related to Clamwin. You're just hiding the problem by using excessively long t...
by DanCML
2010-04-22 16:33
Forum: General discussions
Topic: Connection interrupted - large messages not downloaded
Replies: 17
Views: 11306

Re: Connection interrupted - large messages not downloaded

Did you use the installer from the Clamwin site? See http://www.hmailserver.com/forum/viewtopic.php?f=7&t=18019 Apparently Clamwin is not a good choice for a mail server. You should be using the stripped down ClamAV. There's a thread from westdam about using the Clamwin GUI with tBB's ClamAV port he...
by DanCML
2010-04-22 16:12
Forum: General discussions
Topic: Connection interrupted - large messages not downloaded
Replies: 17
Views: 11306

Re: Connection interrupted - large messages not downloaded

Make sure Clam is only scanning mail when hMail sends it over - if you've got it scanning POP3 and SMTP connections too then that's another source of delays on processing mail.
by DanCML
2010-04-22 15:47
Forum: General discussions
Topic: Connection interrupted - large messages not downloaded
Replies: 17
Views: 11306

Re: Connection interrupted - large messages not downloaded

Have you got AVG on the server as well? Or some other proxy?
by DanCML
2010-04-22 13:33
Forum: General discussions
Topic: Connection interrupted - large messages not downloaded
Replies: 17
Views: 11306

Re: Connection interrupted - large messages not downloaded

Disable AVG and try again - AVG includes local POP3 and SMTP proxies which intercept all data even when the realtime scanning is disabled, and can cause problems.
by DanCML
2010-04-22 12:58
Forum: General discussions
Topic: Connection interrupted - large messages not downloaded
Replies: 17
Views: 11306

Re: Connection interrupted - large messages not downloaded

Any mail scanning anti-virus between hMailServer and Outlook? For instance, local AV software on the PC running Outlook.
by DanCML
2010-03-15 12:00
Forum: General discussions
Topic: Can't seem to send email to new user in existing domain
Replies: 4
Views: 2879

Re: Can't seem to send email to new user in existing domain

Checking the MX records for home.stufftoread.com I get the following: mail2.no-ip.com internet address = 69.65.5.110 mail2.no-ip.com internet address = 69.65.5.113 mail1.no-ip.com internet address = 204.16.252.100 Don't you have to configure individual email forwarding accounts at No-ip.com for this...
by DanCML
2010-03-01 16:21
Forum: General discussions
Topic: Protecting Your Server
Replies: 4
Views: 2502

Re: Protecting Your Server

I see the same as you but a few steps I have taken to reduce spam and attacks are Setting up a third MX record with a low priority that actually points to my main emails servers IP. A lot of spammers send email to the low priority mail servers because backup MX's are usually less secured than main ...
by DanCML
2010-02-26 11:13
Forum: Scripting
Topic: Do any events fire between connection and SPF check?
Replies: 3
Views: 3008

Re: Do any events fire between connection and SPF check?

Thanks for replying Martin. Not a problem, I've identified some of the IP ranges from the logs and I'll just have to scan them periodically and add any new IPs to the whitelist that pop up that I need to add. These are for domains that get almost zero legitimate traffic anyway, they're just used as ...
by DanCML
2010-02-25 19:23
Forum: General discussions
Topic: Uptime records
Replies: 6
Views: 3877

Re: Uptime records

I don't understand how people can have uptime more than a week or so? Doesn't your computers reboot? My server is rebooted quite regularly due to Windows updates... :) Our old fileserver had an uptime of over 5 years running Windows NT4 SP4. It only went down when we had to replace the motherboard ...
by DanCML
2010-02-25 19:15
Forum: General discussions
Topic: Auto Reply
Replies: 2
Views: 2461

Re: Auto Reply

Why not just have an account for the old address and use the autoreply option on that, and set it to delete all messages. That way you're not dealing with rules, and you get the handling you want.
by DanCML
2010-02-24 13:15
Forum: Scripting
Topic: Do any events fire between connection and SPF check?
Replies: 3
Views: 3008

Re: Do any events fire between connection and SPF check?

Either I'm blind, or there's no way to edit the above post ...

Anyway, would OnClientConnect work here?

EDIT: scrub that, a quick search of the forums suggests that only the IP address is available at this stage, not the HELO/EHLO hostname. :(
by DanCML
2010-02-24 12:23
Forum: Scripting
Topic: Do any events fire between connection and SPF check?
Replies: 3
Views: 3008

Do any events fire between connection and SPF check?

Hi, I'm trying to figure out if it's possible to write a script that can whitelist IP addresses before the SPF anti-spam check is run. Is this possible? I can figure out the scripting myself (although if anyone has existing code that might help it would be appreciated), but obviously if there's no w...
by DanCML
2010-01-26 15:12
Forum: General discussions
Topic: Domain Resolution Problem
Replies: 5
Views: 3514

Re: Domain Resolution Problem

The DNS part looks fine, and I can't see why hMailServer wouldn't deliver to it normally. I would check for a few things in your setup: 1) Any route for brackenwilliams.co.uk that have been added to the hMail configuration, which point back to your server? 2) Local DNS cache on the server has an int...
by DanCML
2010-01-26 12:54
Forum: General discussions
Topic: Remote server replied: 550 5.0.0 SPAM!
Replies: 11
Views: 8047

Re: Remote server replied: 550 5.0.0 SPAM!

So this mean that I have the same IP since 2006 and it is a dynamic IP ??? I am really getting lost here as I have the same IP since 2006, I have my own web server on it ??? How can it be a dynamic IP. Can an IP address be static and your ISP forgets to tell it somewhere It's possible you have what...
by DanCML
2010-01-22 19:18
Forum: General discussions
Topic: hMailserver fails 2 of 18 open relay tests ...
Replies: 27
Views: 17050

Re: hMailserver fails 2 of 18 open relay tests ...

If you have a default domain and a catch-all account on a local domain, any address without an @ will be considered local (and have the default domain appended). If you have a default domain and a route without a list of allowed email addresses, any address without an @ will be considered local and ...
by DanCML
2010-01-22 18:54
Forum: General discussions
Topic: hMailserver fails 2 of 18 open relay tests ...
Replies: 27
Views: 17050

Re: hMailserver fails 2 of 18 open relay tests ...

I've just tested both of my hMailServer servers, and one passed while the other failed on the same 2 tests as the OP. It also fails on the same tests at abuse.net. I removed the default domain setting on the "backup" - and it passes the tests (I'm not sure why I set this, I really didn't need it) :D...
by DanCML
2010-01-19 11:09
Forum: General discussions
Topic: Catch-all & Rules broken after update from 5.0 to 5.3.1
Replies: 6
Views: 5076

Re: Catch-all & Rules broken after update from 5.0 to 5.3.1

The 5.3.2 beta is, according to Martin's post, identical to 5.3.1 apart from the fix for the catch-all handling, so it does sound like something else was wrong with your setup if it started causing problems. As to W2K and SQL Server 2005, I too am running that combination on both of my servers runni...
by DanCML
2010-01-18 13:58
Forum: General discussions
Topic: Catch-all & Rules broken after update from 5.0 to 5.3.1
Replies: 6
Views: 5076

Re: Catch-all & Rules broken after update from 5.0 to 5.3.1

As replied to your other post (that you tacked onto an old topic in General Discussion), this is a problem with 5.3.1 as Martin mentions in this thread: http://www.hmailserver.com/forum/viewtopic.php?f=7&t=17249&p=102278&hilit=beta#p102278 The fix is to not use 5.3.1 - get the 5.3.2 beta and install...
by DanCML
2010-01-18 13:52
Forum: General discussions
Topic: Help please - 5.1.0 - Unknown address error 550
Replies: 6
Views: 19727

Re: Help please - 5.1.0 - Unknown address error 550

rekabis, a similar topic was posted last week, and Martin stated that there is a problem with the catchall handling in 5.3.1. The 5.3.2 beta fixes this. However, in your last post you state you have 5.3.2, and then later that you have 5.3.1 - which is it? The topic discussing this last week is here:...
by DanCML
2010-01-07 16:10
Forum: General discussions
Topic: BCC Delivery problem
Replies: 16
Views: 10274

Re: BCC Delivery problem

What about "Maximum number of recipients in batch" on the Settings > Protocols > SMTP > Advanced tab? Mine is 25, can't remember if I changed that or if it's the default, if that's lower than the number of addresses being BCC'd to then hMail will reject it, won't it?
by DanCML
2010-01-06 14:24
Forum: General discussions
Topic: Issue sending to craigslist
Replies: 6
Views: 5665

Re: Issue sending to craigslist

sheffters is right - the PTR should match the hostname. You may find that when sending out mail your hMailServer will state it's smtp.ntwnet.com in the EHLO command, but the PTR for the IP address is ntwnet.com and this is not a match. Some systems might be happy with it, but at some point you're go...
by DanCML
2009-12-24 11:52
Forum: General discussions
Topic: Why is Yahoo calling these headers spam...?
Replies: 14
Views: 7932

Re: Why is Yahoo calling these headers spam...?

That message from Yahoo looks like a canned reply, and it's possible the sender picked the wrong one. Your headers show DKIM is a pass, so it's not that. It's more likely that your mail is being classed as spam (I'm assuming it's going to a spam folder in the Yahoo webmail interface?) because you ha...
by DanCML
2009-12-16 11:31
Forum: Development & alpha discussions
Topic: MySQL and indexes
Replies: 7
Views: 7668

Re: MySQL and indexes

I don't know what the execution plans are like on MySQL, but on SQL Server 2005 Express if you are selecting only a single row then the ORDER BY makes no difference as the query optimiser ignores it. The MySQL optimizer is a very "bed" optimizer, so it can't ignore something what is can be ignored ...