Search found 310 matches

by prisma
2019-09-25 13:44
Forum: Development & alpha discussions
Topic: Removing x86 support in 5.7
Replies: 7
Views: 1464

Re: Removing x86 support in 5.7

Let me annotate that the support for server 2008 (that last 32-bit server) ends also at 14/01/2020 (and that's for professional environments more important than desktop OSs). So, it's absolutely OK to end x86 support in 5.7. BUT some things: There is no .net 3.5/2.0 core package to install in Server...
by prisma
2019-01-22 13:45
Forum: Feature requests
Topic: LUA-Scripting integration
Replies: 2
Views: 1319

Re: LUA-Scripting integration

No, it's not strange. Powershell is perfectly structured, flexible and extensible. Love powershell!
by prisma
2018-11-15 12:11
Forum: Off-topic discussions
Topic: hMailServer - Github Fork and Contributionanalysis
Replies: 4
Views: 1847

Re: hMailServer - Github Fork and Contributionanalysis

Good work! THX a lot.

Hmmm, which knowledge (actions?) can we derive from it? I'm personally not sure, that's why I'm asking.
by prisma
2018-10-11 13:59
Forum: Development & alpha discussions
Topic: LibreSSL built of hMailServer 5.6.8 avaiable (request for testing)
Replies: 13
Views: 3033

Re: LibreSSL built of hMailServer 5.6.8 avaiable (request for testing)

@dravion: the question is not whether your work is necessary or not. Of course it is, I think your analysis helps Martin to decide. If he runs better with libreSSL, here we go (or he should :D ). The basic question is more like: Is it realistic to wait for any kind of improvements in general? Especi...
by prisma
2018-10-11 11:20
Forum: Development & alpha discussions
Topic: LibreSSL built of hMailServer 5.6.8 avaiable (request for testing)
Replies: 13
Views: 3033

Re: LibreSSL built of hMailServer 5.6.8 avaiable (request for testing)

Please let me annotate following: What does Martin say to those trends? OK, core development is slow. But to be honest, for us, hmailserver works pretty perfect and the bug list is rather short in relation to other projects. openSSL 1.0.2.x is supported until 31.12.2019 from what I read. Let's give ...
by prisma
2018-06-21 11:49
Forum: Off-topic discussions
Topic: Force close remotely opened network file handle
Replies: 2
Views: 1371

Re: Force close remotely opened network file handle

THX for info Matt. So, the questions goes to the rest of the highly revered audience:

Did anybody ever find a solution for reliably closing remotely opened network file handles?
E.g. for renaming a remotely crashed EXE during a update process on the server.
by prisma
2018-06-21 11:15
Forum: Off-topic discussions
Topic: Force close remotely opened network file handle
Replies: 2
Views: 1371

Force close remotely opened network file handle

Hey Matt, Are you that guy? https://stackoverflow.com/users/833960/mattg Seems that you had a similar problem like we have at the moment. Did you really ended up in utilizing psexec? Openfiles did never help? https://stackoverflow.com/questions/10780276/windows-can-not-force-close-network-file-handl...
by prisma
2018-03-02 16:09
Forum: Development & alpha discussions
Topic: REQUEST: Allow Users to edit their own rules
Replies: 5
Views: 2158

REQUEST: Allow Users to edit their own rules

Hello, one design problem of the old and the new webfrontend is, that users aren't able to edit their own rules. I assume, this is based on source code restrictions and not changeable because PHP only utilizes COM. Anyway, then let's change the sourcecode. If normal "Users" should be always able to ...
by prisma
2017-11-08 12:57
Forum: User-submitted tutorials
Topic: HOW TO encrypt all incoming email
Replies: 7
Views: 3978

Re: HOW TO encrypt all incoming email

Hi, I agree. The way jacko wants to achieve security does not make many sense. From what I understood from the script, the mailserver has knowledge about the private gnupg key of the user. Or am I wrong? This would break security. If a mail user want to have end-to-end security, he should handle his...
by prisma
2017-10-24 15:32
Forum: Off-topic discussions
Topic: Funny read: MySQL/MariaDB vs. PostgreSQL Datahandling
Replies: 8
Views: 2526

Re: Funny read: MySQL/MariaDB vs. PostgreSQL Datahandling

We use PostgreSQL with roundabout 600 installations at customers side. We are impressed how robust the WAL tactic of postgres is. Our customers have from time to time very unstable systems, corrupt file systems and so on. We never had any bigger data losses and postgres was evry time repairable or w...
by prisma
2017-06-27 10:47
Forum: Development & alpha discussions
Topic: version 5.6.7 - Build 2407 / 64bit installation
Replies: 6
Views: 4487

Re: version 5.6.7 - Build 2407 / 64bit installation

Brrrr, ruhig Brauner! So schnell mahlen die Mühlen hier (leider) nicht :)

Also an Deiner stelle würde ich nicht auf die stabile 64bit Version warten. Schau dir einfach mal die Releasezyklen an. Das kann noch 2 Jahre dauern bis die kommt. Pessimisten würden sagen 20 ;) *kidding*

Grüße!
by prisma
2017-05-24 13:32
Forum: General discussions
Topic: Moving Hmail to new machine
Replies: 6
Views: 1519

Re: Moving Hmail to new machine

If you use a newer hmailserver version, you should completely remove absolute file paths instead of updating to new absolute paths. The path to messages is taken from the INI.
Search this forum, there should be examples for SQL queries.
by prisma
2017-05-24 13:24
Forum: Off-topic discussions
Topic: Win10 "S" - Windows store only Apps
Replies: 2
Views: 1604

Re: Win10 "S" - Windows store only Apps

The pinky, the pinky and the brain, brain, brain, brain...
by prisma
2017-05-17 13:19
Forum: Development & alpha discussions
Topic: Ideas to increase administrative security / privacy
Replies: 8
Views: 3049

Re: Ideas to increase administrative security / privacy

... someone would need a packet sniffer to see email contents, and then only in transit ... I agree, this risk exists. But let's leave it aside. You're right. hmailserver service could run with a special account, and only this account has access to the share. Easier than using EFS for that account....
by prisma
2017-05-17 11:57
Forum: Development & alpha discussions
Topic: Ideas to increase administrative security / privacy
Replies: 8
Views: 3049

Re: Ideas to increase administrative security / privacy

No problem. I want to hear every opinion. We want to protect the messages folder. The problem is there's at the moment no additional security "around" the messages storage. Storing something plain text and searchable in the FS makes it hard to add security. I did a lot of MCSE/MCSA certifications, s...
by prisma
2017-05-17 10:33
Forum: Development & alpha discussions
Topic: Ideas to increase administrative security / privacy
Replies: 8
Views: 3049

Re: Ideas to increase administrative security / privacy

@Matt: no bad idea, but as long the SAN is mounted, it's not more than a local drive. Searching is even possible with indexing disabled on that volume. But slow. Mounting a drive only for a special user is not possible with windows. NTFS ACLs could be re-adjusted from every local serveradministrator...
by prisma
2017-05-16 17:45
Forum: Development & alpha discussions
Topic: Ideas to increase administrative security / privacy
Replies: 8
Views: 3049

Ideas to increase administrative security / privacy

Hello, regarding exchange I have the possibility to adjust users ACLs. So the user could be able to backup a exchange Server or to do other administrative things with exchange without being able to read all mails. With hmailserver I only have to click on the right mail address within messages folder...
by prisma
2017-03-14 11:43
Forum: Development & alpha discussions
Topic: hMailServer web-interface redesign
Replies: 163
Views: 52537

Re: hMailServer web-interface redesign

Got an error directly on http://localhost/?page=account&action=edit&domainid=3&accountid=10 Operation failed Description: strtotime(): It is not safe to rely on the system's timezone settings. You are *required* to use the date.timezone setting or the date_default_timezone_set() function. In case yo...
by prisma
2016-05-03 16:36
Forum: Development & alpha discussions
Topic: 5.6.5 and 5.7
Replies: 17
Views: 12987

Re: 5.6.5 and 5.7

THX, Martin.
by prisma
2015-10-07 16:20
Forum: User-submitted tutorials
Topic: HMS v5 Windows Server Core - Installation
Replies: 2
Views: 4711

Re: HMS v5 Windows Server Core - Installation

If you want to serve also the phpAdmin you'll have to got through the DCOM hell: On e.g. a Server 2008 Core: use "dcomperm -al {5EDEC473-39E0-43F6-A234-1947071721C8} set IIS_IUSRS permit level:ll,la". Dcomperm is included as sample in "Windows SDK for Windows Server 2008". You'll have to build the e...
by prisma
2015-09-24 17:36
Forum: Feature requests
Topic: Autoreply Start Date
Replies: 15
Views: 5780

Re: Autoreply Start Date

+1

And I'd love to have the already notified addresses persistent in database and not only in memory. Once the Server restarts, everybody is notified again...
by prisma
2015-06-15 13:32
Forum: Feature requests
Topic: Long-term roadmap suggestions?
Replies: 91
Views: 41221

Re: Long-term roadmap suggestions?

I have downloaded the code for this: http://www.j-interop.org/ but never got around to unpack it and test it - Java skills still a bit rusty... It may just just be the best FREE solution available. What's the plan? Writing a java servlet using DCOM to configure hmailserver remotely? And writing a r...
by prisma
2015-06-12 14:33
Forum: Feature requests
Topic: Long-term roadmap suggestions?
Replies: 91
Views: 41221

Re: Long-term roadmap suggestions?

I vote for other because I need a webmail integration to change passwords and some other minor things but Roundcube in Windows/IIS have a very bad performance and I can't integrate Linux/Apache Roundcube with Windows hMailserver (https://myroundcube.com/myroundcube-plugins/hmail_password-plugin). J...
by prisma
2015-06-09 12:57
Forum: Feature requests
Topic: Internal Backup With Messages but without EML Files
Replies: 8
Views: 4470

Re: Internal Backup With Messages but without EML Files

Merged or deleted? :wink: Seems that everybody who voted yes for the other poll has also voted yes here. Because the 15 yes have not changed here... miraculous but not implausible :wink:
by prisma
2015-06-09 01:17
Forum: General discussions
Topic: [BUG] Backup Script Crashing Periodically
Replies: 50
Views: 10503

Re: [BUG] Backup Script Crashing Periodically

Guys, I'm not able to understand why we have to write batches and patches, do tricks, read hints about bugs, write post after post. This software has a build in backup and should be able to do a hot backup compressed, not compressed or completely without messages. But it is not able to. This should ...
by prisma
2015-06-08 16:18
Forum: Feature requests
Topic: Internal Backup With Messages but without EML Files
Replies: 8
Views: 4470

Re: Internal Backup With Messages but without EML Files

Has an duplicate: viewtopic.php?t=22365

Anybody able to merge these two?
by prisma
2015-06-08 16:07
Forum: Feature requests
Topic: Backup Progress
Replies: 4
Views: 2099

Re: Backup Progress

If this was the only problem of the backup I was happy. But I'll vote yes. If this would be improved the other problems would have possibly been also touched. Many conjunctives, maybe wrong, but you'll know what I mean ;)
by prisma
2015-05-21 12:43
Forum: Off-topic discussions
Topic: Quiet, isnt it.....
Replies: 4
Views: 2238

Re: Quiet, isnt it.....

Hey guys, hey martin, only wanted to say: I had time now for updating from 5.4-billspecialbuild to 5.6.3 (yiepieh). Worked like charm, no problems with cert validation. Seems that most ISPs in Germany have valid certs for their relayers and pop servers. Possibly imagination, but the server feels mor...
by prisma
2015-03-31 12:04
Forum: General discussions
Topic: Backups no longer working
Replies: 15
Views: 3898

Re: Backups no longer working

(Dont ask why, it's too long to explain and frankly ridiculously contentious. Just accept what I am saying). LOL, ROFL :lol: However, that backup shouldnt really be relied on and it is infinitely better if you create your own backup procedure. Sad. ... Hmmm, we're talking about the lack of a reliab...
by prisma
2015-03-26 18:35
Forum: Development & alpha discussions
Topic: Internal Backup/Restore - Reasonable Restrictions?
Replies: 11
Views: 5323

Re: Internal Backup/Restore - Reasonable Restrictions?

Martin had created a poll for future improvements:
viewtopic.php?t=27191
I already wrote there the backup system was a little bit a step child of hmailserver. Unfortunately it not a own item to choose. I think Martin sees no reason for improvements regarding backup.
by prisma
2015-03-23 18:49
Forum: Development & alpha discussions
Topic: Reasons for NOT upgrading...
Replies: 11
Views: 5530

Re: Reasons for NOT upgrading...

c, Upgrading has been problematic to some people (ie BACKUP and then RESTORE of data) The only thing I'm able to remember regarding backup was a problem with restoring uncompressed backups: https://www.hmailserver.com/forum/viewtopic.php?t=25571 But this is definitely not related to 5.6 and has alw...
by prisma
2015-01-27 15:42
Forum: General discussions
Topic: Self-signed certificate no longer accepted by external account download
Replies: 6
Views: 2203

Re: Self-signed certificate no longer accepted by external account download

As far as I understood Martin certificates a checked for smarthost, routes AND pop3c after update to 5.6. This means for every explicit / manually configured host. Certificate are never checked for MX resolved hosts.
by prisma
2014-11-10 11:53
Forum: General discussions
Topic: Blank Email message
Replies: 18
Views: 5129

Re: Blank Email message

I'm surprised still nobody is asking 'Why does hmailserver consume so much memory?'. I reported a memory leak months ago while moving many emails through IMAP folders with thunderbird. This is a big problem `cause a mailserver admin can't never prevent people from moving their emails around. Are you...
by prisma
2014-10-29 14:21
Forum: Development & alpha discussions
Topic: DH-ciphers will be supported in 5.6
Replies: 5
Views: 3289

Re: DH-ciphers will be supported in 5.6

No. Usage of DH or not has nothing to do with HIGH. After deleting HIGH only TLS1.0:DHE_RSA_AES_128_CBC_SHA1:16 was used instead of TLS1.0:DHE_RSA_AES_256_CBC_SHA1:32. Arg! It should be possible to use multiple DH keyfiles, shouldn't it? I'm not sure, but I think 1024 is standard. Openssl generates ...
by prisma
2014-10-21 13:39
Forum: Development & alpha discussions
Topic: DH-ciphers will be supported in 5.6
Replies: 5
Views: 3289

Re: DH-ciphers will be supported in 5.6

While testing 5.6 I noticed that (EC)DH isn't used always. A fall-back to version=TLSv1 cipher=AES256-SHA bits=256 sometimes done. Hmailserver is configured with the ciphers above. My ISP gave me info that only TLSv1 with following ciphers is supported: Accepted TLSv1 256 bits DHE-RSA-AES256-SHA Acc...
by prisma
2014-10-15 13:05
Forum: Feature requests
Topic: Long-term roadmap suggestions?
Replies: 91
Views: 41221

Re: Long-term roadmap suggestions?

So, having a mailserver dealing with the PKI centralized would be highly interesting for you. This gave mail administrators the opportunity to offer similar man-in-the-middle services. Just by the way, in Germany similar "man-in-the-middle" services have been introduced. It's called "De-Mail" or "E-...
by prisma
2014-10-15 10:50
Forum: Feature requests
Topic: Long-term roadmap suggestions?
Replies: 91
Views: 41221

Re: Long-term roadmap suggestions?

I agree that this would be unique, and could only envisage it working with a hMailserver at both ends, unless the keys were somehow shared with a mail client at the other end. Lets add PKI to the mix (That's what we use in Australian Healthcare) Possibly just a misunderstanding. Of course based on ...
by prisma
2014-10-14 19:24
Forum: Feature requests
Topic: Long-term roadmap suggestions?
Replies: 91
Views: 41221

Re: Long-term roadmap suggestions?

I'd say yes, IMAP. But also sending of large attachments can be a pain, although connected via LAN and clamav is deactivated...
by prisma
2014-10-14 10:24
Forum: Feature requests
Topic: Long-term roadmap suggestions?
Replies: 91
Views: 41221

Re: Long-term roadmap suggestions?

PS, regarding clustering support: Would be a great thing, but there are specialists out there for HA clustering. On OS base, on database level, based on whatever. I'm not sure if hMailserver should try to play with these guys :)
by prisma
2014-10-14 09:46
Forum: Feature requests
Topic: Long-term roadmap suggestions?
Replies: 91
Views: 41221

Re: Long-term roadmap suggestions?

My personal opinion is a mailserver has to be reliable, fast and secure. So, my first vote is Security/Privacy. In times where we have to fight more and more against intelligence services and hackers, we have to continuously improve security/privacy features. If you don't go forward, you go backward...
by prisma
2014-10-08 09:15
Forum: Development & alpha discussions
Topic: DH-ciphers will be supported in 5.6
Replies: 5
Views: 3289

Re: DH-ciphers will be supported in 5.6

I very appreciate your work. Regarding backward compatibility you should have no concerns. I'm no crypto guru. But I think "...AES128:AES256:RC4-SHA..." is a build in fall-back for weak clients, isn't it?
by prisma
2014-10-03 21:03
Forum: Development & alpha discussions
Topic: Certificate issue when sending and receiving email on 5.5
Replies: 29
Views: 12282

Re: Certificate issue when sending and receiving email on 5.

Good idea. But your problem sounds like Martin should do some research. I think you'd better send him the cert or url to your server and let him check the problem. It's important to get 5.5 stable.
by prisma
2014-10-02 21:32
Forum: Development & alpha discussions
Topic: Certificate issue when sending and receiving email on 5.5
Replies: 29
Views: 12282

Re: Certificate issue when sending and receiving email on 5.

As Martin said. Copy the certificate part of the output of openssl s_client to a .cer file and double click it. Or just double click the certificate on the primary server. Within the certificate details you should be able to find the info...
by prisma
2014-10-02 10:29
Forum: Development & alpha discussions
Topic: Certificate issue when sending and receiving email on 5.5
Replies: 29
Views: 12282

Re: Certificate issue when sending and receiving email on 5.

Now the hostname seems to fit, but CRL check was not possible. Please inspect the CRL distribution points and OCSP responder listed within the cert. Are they accessible? Doesn't look like that... (I know I'm getting on everybody's nerves. But I'll say it anyway: Pinning of certs along with allowed e...
by prisma
2014-10-01 20:18
Forum: Development & alpha discussions
Topic: Certificate issue when sending and receiving email on 5.5
Replies: 29
Views: 12282

Re: Certificate issue when sending and receiving email on 5.

.... And.... As Long as you don't access your primary Server by a hostname listet within the cert, possibly you want to access your server locally not via internet, you'll never get it working without further tricks.

In this case we use to manipulate DNS resolution by DNS Server or hosts file.
by prisma
2014-10-01 11:01
Forum: Development & alpha discussions
Topic: Certificate issue when sending and receiving email on 5.5
Replies: 29
Views: 12282

Re: Certificate issue when sending and receiving email on 5.

If you inspect the certificate of the primary server on the secondary server, does Windows handle this certificate as valid? Background of my question is: certificate validation is switched on for routes and relayer. In this case you set a server manually and it's expectable to get a valid certifica...
by prisma
2014-09-29 11:01
Forum: Development & alpha discussions
Topic: Certificate issue when sending and receiving email on 5.5
Replies: 29
Views: 12282

Re: Certificate issue when sending and receiving email on 5.

I checked the certificate of this server. Certificate is valid and hostname fits. Can't see a reason for an error. Seems to be a bug. The server is resolved by a CNAME. You are far better off using an unsecured connection, than using a secured connection to an invalid certificate. Sorry, but no. Thi...
by prisma
2014-09-23 16:40
Forum: Development & alpha discussions
Topic: Version 5.5 temporarily moved to 'Beta' state.
Replies: 15
Views: 5195

Re: Version 5.5 temporarily moved to 'Beta' state.

I must confess our production server is still on Bills 5.4-B2014042101. In the past I switched from release 5.4 to experimental 5.4 because of Bills STARTTLS implementation. The official 5.5 betas are running on our testserver with a low priority domain. After you started work on STARTTLS there was ...
by prisma
2014-09-23 10:31
Forum: Development & alpha discussions
Topic: Version 5.5 temporarily moved to 'Beta' state.
Replies: 15
Views: 5195

Re: Version 5.5 temporarily moved to 'Beta' state.

- POP3 fetching stops. I've configured my own server to fetch more frequently and will see if I can reproduce it. Before you search this bug in conjunction with 5.5 changes, let me tell you this: We have this problem since years. We fetch mails minutely. I posted this problem and the only response ...
by prisma
2014-09-16 15:45
Forum: Development & alpha discussions
Topic: hMailServer release
Replies: 8
Views: 3666

Re: hMailServer release

The only open question I can remember was, you haven't been sure if behaviour is OK regarding alternative host names within certificates.
But if behaviour is OK: Go!

Generally: You have very good automated tests. Feel free to speed up the release cycle.
by prisma
2014-09-09 16:47
Forum: Development & alpha discussions
Topic: STARTTLS feedback?
Replies: 157
Views: 55284

Re: STARTTLS feedback?

THX for cross check, martin.
by prisma
2014-09-09 16:00
Forum: Development & alpha discussions
Topic: STARTTLS feedback?
Replies: 157
Views: 55284

Re: STARTTLS feedback?

Sent you the logs. Looks like the ISPs mailserver is writing wrong info into the header, isn't it?
by prisma
2014-09-09 15:40
Forum: Development & alpha discussions
Topic: STARTTLS feedback?
Replies: 157
Views: 55284

Re: STARTTLS feedback?

You've selected "Connection security: STARTTLS (Required)" under Settings -> SMTP -> Delivery of email, right? Yes. Because we have some external accounts hosted by the ISP directly we need also a route to this external business accounts. Within this route STARTTLS is also required. Proofed it twic...
by prisma
2014-09-09 14:43
Forum: Development & alpha discussions
Topic: STARTTLS feedback?
Replies: 157
Views: 55284

Re: STARTTLS feedback?

I figured out a possible problem: I send a test mail from my business account to my private account using B2074. hmailserver seems to do not use encryption to deliver the message to our ISP relayer although STARTTLS is required: Received: from mi008.mc1.hosteurope.de ([80.237.138.247]) by yyy.webpac...
by prisma
2014-09-09 12:52
Forum: General discussions
Topic: Failover switch
Replies: 10
Views: 2678

Re: Failover switch

Did I understand right? You want to setup Hyper-V within a EC2 instance? Hmmm, if this works, this only could work on HVM instances, couldn't it? I think it's not possible to put a hypervisor on top of a PV machine. Even not sure if it's possible to put a hypervisor on top of a HVM instance... Do yo...
by prisma
2014-09-07 00:33
Forum: General discussions
Topic: Failover switch
Replies: 10
Views: 2678

Re: Failover switch

Since 2012 R2 the fileserver role is supported as scale-out fileserver on a CSV. I manged to mix the fileserver role with generic clusterservice. The result was hmailserver and postgres runnig as clusterservice on a shared storage. super cool. But I wasn't completly sure this scenario is supported b...
by prisma
2014-09-04 15:39
Forum: General discussions
Topic: Failover switch
Replies: 10
Views: 2678

Re: Failover switch

Setup hmailserver within a Hyper-V-VM and replicate the VM to another server. It's all build-in in Server2012. No extra license for the VM is needed, one virtualization per host is covered by the standard server license. No active directory needed, no special hardware needed. We use replication sinc...