hMailServer forum

SorenR

DB installation and securityrange.h reveal the following: insert into hm_securityranges ( rangepriorityid, rangelowerip1, rangelowerip2, rangeupperip1, rangeupperip2, rangeoptions, rangename, rangeexpires, rangeexpirestime ) values ( 15, 2130706433, NULL, 2130706433, NULL, 71627, <== Rangeoptions 'M...

SorenR

The user "linda-k@...." was deleted from my server 5 years ago. I modified the OnClientLogon(oClient) trigger to include password; Sub OnClientLogon(oClient, sPassword) Password changes all the time. Many of them I see listed in Bitcoin extorsion mails addressed to other users on my server. Also 80%...

SorenR

If server 1 is "mydomain.tld" and server 2 is "mydomain.tld" and server 1 have a route for "mydomain.tld" to server 2 then the emails for accounts NOT on server 1 is automatically routed to server 2.

ONLY IF NO CATCHALL IS DEFINED (!)

SorenR

I posted this quite early in this thread...

https://www.hmailserver.com/forum/viewt ... =9&t=35285

You should be able to use some of it..

SorenR

Well, if the Coyote fails you could try...

"""POTUS"" <annoying.orange@fanmail.biz>"

SorenR

You could create a rule to capture the email and action = "run function NukeTo" Paste this into your eventhandler.vbs, enable scripting and restart hMailServer. Caling it from a rule is easier to control (and stop in case of bugs). Every time you make changes to the code you should restart the hmail...

SorenR

How in the world will they see a "Bcc:" address from hMailServer ... :?: Just brainstorming ... b = Split(Replace(oMessage.To, ";", ","), ",") EventLog.Write( "Number of recipients...... " & UBound(b)+1 ) For i = LBound(b) To UBound(b) EventLog.Write( "To: " & LTrim(b(i)) ) Next If (UBound(b)+1) > 4...

SorenR

Thanks for the replies guys, appreciated! SorenR: I am not sure if SES was designed and created by monkey or not but I do know that this is the first and only service within AWS where we face "talk to the hand" attitude. Every other service team we talk to we can work with and lift limits if needed...

SorenR

I would argue that hMailServer is behaving as intended delivering X number of mails at a time - as specified in "Maximum number of recipients in batch" - and that Amazon SES is buggy. What most people forget is that an email is like a regular letter distributed by a regular mailman. The mailman only...

SorenR

I know this was a long time ago but I found it useful but also had the secondary issue that the original post mentioned: rules I create in my script could not be edited when clicked on in the admin interface. The solution was very simple: close the admin tool down and open it again (you probably le...

SorenR

ianMacey wrote: ↑
2020-09-24 21:32

SorenR wrote: ↑
2020-09-24 17:10
test.png
Thanks SorenR. This works exactly as I wanted.

Regards Ian

You are welcome, it was just a graphical representation of what katip posted

SorenR

Splitting a domain on two servers require some thought. 1: Create route from a to b and from b to a. NB use actual domain (cloudtech.biz). Yes, you will be creating a circular reference and that is why some degree of scripting is involved. 2: Script a "loopcounter" header so you know when an email h...

SorenR

SorenR

As someone who lived and worked in Singapore I can only say ... 那个 ... Wa lao eh !

SorenR

https://www.hmailserver.com/documentati ... nce_mirror

SorenR

WTF... If I, while at work, send an email to 20 friends and use my private address in the "To:" header and everyone else in the "Bcc:" header, why should that be an issue? My friends know my private and work addresses so no secrets here. So you are saying that I violated GDPR by revealing my private...

SorenR

Well, it's not my words.

https://www.natgeokids.com/uk/discover/ ... ry-humans/

SorenR

johang wrote: ↑
2020-09-23 18:31

SorenR wrote: ↑
2020-09-23 15:06

you still around ? i thought you got shot 10 posts ago

Naa ... Bulletproof u know

SorenR

palinka wrote: ↑
2020-09-23 15:01

SorenR wrote: ↑
2020-09-23 14:55
Unicorns (Elasmotherium sibiricum) died out 350,000 years ago.
Not the tiny ones used for electricity generation.

This one?

SorenR

You could also argue that the webserver should be a diskless server with a 128 gb R/O flashcard containing an image for the RAM disk that it runs on and that the RAM disk is re-built from image every hour... ... powered by tiny unicorns perpetually running on a hamster wheel generator. :mrgreen: Pe...

SorenR

The ONLY place a "Bcc:" header would exist is in your SENT MAIL folder. It NEVER leaves your workstation! This may depend on client setup, whether or not to disclose Bcc. Lotus Notes had it and set off by default. Pegaus also (see image). i suspect Gmail discloses it too and has no other option. of...

SorenR

There seems to be a flaw in your statement about sending List email. You sate you address your email to 1 Recipient in the 'To:' header and include everyone else as Bcc. I believe this works only as intended if the 'To:' Header is the same as the the Email Address in the 'From: Header and then incl...

SorenR

I looked in the source code, there is no processing of the "To:" header. A totally different matter; listing all recipients in the "To:" header usually gets you banned from not only my server but most servers I know. It's a SPAM thing. "To:" > 25 or "Cc:" > 25 and you are toast! When creating listm...

SorenR

I looked in the source code, there is no processing of the "To:" header. A totally different matter; listing all recipients in the "To:" header usually gets you banned from not only my server but most servers I know. It's a SPAM thing. "To:" > 25 or "Cc:" > 25 and you are toast! When creating listma...

SorenR

Given what you say you have in your IP Range, don't you just need one IP Range that covers all the IP Addresses since all the Ranges you indicate have the same Authentication Requirement or am I missing something. Different ranges with different priorities. "Internet" range is lower than autoban pr...

SorenR

Besides SMTP and IMAP ports my server is not accessible from The Internet. My webmail is RoundCube on Apache/Linux with special mods (by Tunis) to proxy COM commands to IIS on the hMailServer. Server is reachable by SMB only if you have proper credentials. In reality I should have the webserver in m...

SorenR

Hi there I am using 5.6.8 B2501 I did try to restart but the logs show me tht the value I set is implemented, it is showing send messages per the batch size. Somehow I think that the fact that the "To" value with over 50 recipients is the issue. I was expecting the "To" line to contain no more then...

SorenR

shoot Søren ??? :shock: :shock: :shock: ( first you take his advice and then you shoot him .. man thats harsh.. ) Damn johang! You beat me to the punch. I was getting ready to post something similar and saw you beat me to it. :lol: :lol: :lol: I have never had my security breached based on a few ru...

SorenR

Ah, OK, so this isn't about the best possible security, but about making it more convenient to remember? Funny, I thought you said "best practice will ALWAYS be 'do security' over 'convenience'" ! I guess security is different around the globe... In Denmark we ALWAYS lock our doors ... and cars ......

SorenR

Yes, no-one's disputing the need for decent firewall security and suchlike - that was exactly my point when I said I was taking all reasonable precautions. But requiring authentication for mail from localhost is a bit like putting your jewellery in a safe in the bedroom. It's only ever a second lin...

SorenR

Could somebody please update the original script by Po-in to the new AbuseIPdb API v2? Thanks! Well... Not an update of Po-in's script but just to show how it works. The v2 API is quite different both in web calling and how to interpret the JSON data. Also, it won't work pre Windows Server 2008 due...

SorenR

Good luck!

SorenR

Thanks for your reply and suggestion - checking the "To" header seems to work OK. But I disagree conceptually with your reply! As far as the sender is concerned, info@x.com is a valid address and is the intended recipient. The fact that I choose to set it up to be forwarded to another mailbox is ju...

SorenR

I'm just circling back to Soren's statement: "From:" syntax is "name <user@domain.tld>" Here the string ends with both > and " I don't even know if that happens in real life. :D Okay... I was quoting a string... Real life examples that I check for (script wise) are: <taz@acme.inc> Devil <taz@acme.i...

SorenR

The GUI accept the extensions so I presume it should work as intended.

SorenR

Can one of the 5.6.8 release's be indicated as Production / Not Beta? Well, SorenR said that this 5.6.8 version is a custom version. So this is even less reliable than some official beta. I really want to use this software at my company, but there is a policy around not using "BETA's" in production...

SorenR

Unless the email is spoofed, the general rule is that "Return-Path" = "oMessage.FromAddress" (AKA X-Envelope-From). The header "Return-Path" is the very last thing added to the email before it is dropped into the INBOX. That is why it is the first line in the .eml file when you open it with a text e...

SorenR

katip wrote: ↑
2020-09-17 15:11
have you tried custom header field From?
or try custom header X-Envelope-From

"From:" syntax is "name <user@domain.tld>"

"From:" can be faked using any mail client

"X-Envelope-From:" an identified user on the sending server sending the email. Need modified MTA to fake.

SorenR

Mozilla switched off SSL/TLS 1.0 and 1.1 in version 78+ ...

https://help.blacknight.com/hc/en-us/ar ... erbird-78-

https://support.cdn.mozilla.net/de/questions/1300068

SorenR

Windows version ?

What did you change wrt. SSL/TLS settings in hMailServer?

I was playing with Win XP a while back and managed to kill connectivity to hMailServer by narrowing down SSL/TLS ciphers and disabling TLS 1.0 ... Just an observation

SorenR

Camb you give an example please to better understand the purpose ? I would love to see this built into hMailServer. Use case: We use hMailServer for outbound email from our web applications, hence have to configure the domain we're sending email from in hMailServer. There is a requirement for hMail...

SorenR

OK. I just changed my record from @ TXT 900 v=DMARC1; p=reject; rua=mailto:postmaster@123.com to _dmarc.123.com TXT 900 v=DMARC1; p=reject; rua=mailto:postmaster@123.com and now it says no dmarc record found. I left that as is and added the original @ record and it still says no dmarc record found....

SorenR

but you didn't try to AUTH what are the SSL and TCP-IP settings for port 587 @palinka no wonder it doesn't work :lol: You have to send the AUTH LOGIN command to login like mattg said :lol: :oops: Well, I just tried using powershell - a working script that I intentionally fudged the logon address an...

SorenR

These are my DNS entries. la-la.land. 3600 IN TXT "v=spf1 a mx -all" _domainkey.la-la.land. 3600 IN TXT "t=y;o=~;r=postmaster@la-la.land" key1._domainkey.la-la.land. 3600 IN TXT "k=rsa; p=***VERYLONGSTRING***" _dmarc.la-la.land. 3600 IN TXT "v=DMARC1; p=quarantine; sp=none; rf=afrf; pct=100; ri=8640...

SorenR

Thank you. That didn't really answer the question though. Let me explain it better. My first domain is xyz.com. It has dns records at my name server that point to 10.10.10.2. My next domain is 123.com and it's dns records also point to 10.10.10.2 for the mx A record and the mail A record. The domai...

SorenR

I looked in my custom db log for all failed logins NOT with my domains and there are only 14 hits in the past year and all of them are on IMAP ports. Its been working the entire time, its just that these logins are extremely rare. That's not the case for SMTP, however. There are tons of those every...

SorenR

I only log invalid logins, both port and ip address are logged correctly, and in my logs i really do see some non-existent usernames from time to time Example code snippet: Sub OnClientLogon(oClient) If Not oClient.Authenticated then EventLog.Write("WARN: Failed login for " & oClient.Username & " f...

SorenR

I occationally get a Brute-Force bot (no AUTH on port 25 and IMAP is SSL only) but most of the time it's my users having a blond moment ;-) If oClient.Authenticated Then Exit Sub Else EventLog.Write( LPad("AUTH FAIL", 15, " ") & vbTab & LPad(oClient.IPAddress, 16, " ") & vbTab & LPad(" ", 3, " ") & ...

SorenR

.. i think HMS isn't able to handle the config I have to drive. HMS can't be MX and Relay for an 2nd HMS at the same time [/i][/b]. So is there a way to install two independent HMS instances on the same machine? It's enough to use different folder and change the servicename by hand before installin...

SorenR

I would suspect this should do the trick... https://support.google.com/mail/answer/22370?hl=en 1: GMail - Create an alias on GMail using the above e.g. "wile.e.coyote@acme.inc" 2: hMailServer - Create a route for every sender, e.g. "coyote" and authenticate as "wile.e.coyote@acme.inc" 3: hMailServer...

SorenR

jimimaseye wrote: ↑
2020-08-25 18:57
Yes. Run the script and include rules and pay the results here.

C/pay/paste/1

SorenR

SorenR

We are strangely receiving emails that are addressed to a user/account not registered in our system. To be more specific, we are receiving emails into our info@ account, but a lot of spam is being sent to d.longo@ (same domain). d.longo is not an account in our system, and these spam emails are alw...

SorenR

Thanks for your improvements :-) (The bold tags "[ b ]" are not in my real script, can not explain how they ended up in the copy here) So, I'll still claim the issue exist, that one or more of multiple/simultaneous connections are not being handled by the Event, right. (I awaits the next slip-throu...

SorenR

Most difficult last 6 months. Things are getting better in Paris but still i would recommend others to stay safe and must use mask. I am watching many people are looking relaxed and that is just not the demand of this time. We must prove that we are responsible citizens Most of them I presume are "...

SorenR

I just changed the hostname as suggested in the second post above since ILO.@paw.local was not a valid mail address. Not sure if you understood what I meant... ILO.@paw.local is not a valid email ILO@paw.local is a valid email <- please note the missing dot (.) before the at-sign (@)! As long as yo...

SorenR

nbcentr wrote: ↑
2020-08-21 11:10
Thrid world countries .... What else should i say ?
It is behind NAT , and mail ports are only published.
5.6.7 works perfect!

Hmm I use 2003R2 and live in Denmark... I have SSL and TSL working with no issues. hMail 5.6.8.

SorenR

Oh I read those... my setup is realtime, has no database requirement, fits my existing ban management strategy, standardizes log locations, requires no vbscript or powershell, does not leave stray "TCP" connection log entries in the hMailServer logs, and makes me happy. You're welcome not to use it...

SorenR

If you read thru the forum you soon realise Fail2Ban is childs play compared with some of the stuff Palinka and myself have brewed up... In real-time...

https://www.hmailserver.com/forum/viewt ... 41#p209541

https://www.hmailserver.com/forum/viewt ... 32#p212632

SorenR

You can't. Thats exactly the reason its requested here in "Feature Requests" There was already a thread before and marting suggested it would be released in specific version but it is still not there (even the topic was more complex with binding to different ip's per domain/sender. I really need bo...

Search found 3701 matches