hMailServer forum

SorenR

Uce-protect hit on a few Amazon ses IPs, which then were rejected. I later found out Amazon ses is perennially blacklisted by uce protect. The are plenty of spammers on Amazon ses, but plenty of non spammers too. Unfortunately i can't know if these were spam or ham since i did not receive the messa...

SorenR

What do you mean "accessible" ?? Can be read when triggered / notified of rule engagement. Not created / deleted / altered. I don't know if such a notification exists. Rule action "Run function" rulexyzfinished Sub rulexyzfinished() Call SMS(palinka,"I've done XYZ") End Sub Keine Hexerei nur Behänd...

SorenR

Palinka, sorry if I misread, but didn't you say that onHelo could not provide rule criteria id because that had not yet been started? If you hacve another method to obtain the criteria (not rule) id when triggered, could you please provide an example? Maybe I'm the one that misunderstood. If you me...

SorenR

What I mean is, I need a unique identifier. oMessage.id is unique https://www.hmailserver.com/documentation/latest/?page=com_object_message Yes but it only exist in oMessage AFTER the message is received. Hmm... Comparing the logs from 5.4.2 (my initial development for ThreadID) and the logs from 5...

SorenR

A2: Threads are reused from email to email but an active thread is 1 (one) email from start to finish. If by session # you mean the second column in the log file then a thread can utilize multiple sessions during one conversation. Datatransfer, virus check, spam check all have different session # w...

SorenR

Q: Is this available to non-custom-compiled hmailserver 5.7.0? A: Nope... It's mine! You are free to use it however. Q: Does ThreadID reset after restart? What I mean is, I need a unique identifier. A: Yes but it is not unique. Q: Is it directly comparable to session #? Does any thread ID overlap an...

SorenR

Today I've seen this: "SMTPD" 4420 119 "2020-01-18 15:39:30.541" "223.71.167.164" "RECEIVED: EHLO []" How would I add an empty EHLO to the regEx String? ^$ Empty regex string. :D Would not pickup "[]". Wrong... The brackets are NOT added by hMailServer. The RFC says brackets are ONLY used with addr...

SorenR

This is the code from my 5.4.2. It should not be difficult to move it forward to 5.6.8 (I did it but have not documentet it) It's available as iThreadID = oApp.Status.ThreadID ... diff -bur hmailserver-5.4.2-B1964/hmailserver/source/Server/COM/InterfaceStatus.cpp hmailserver-5.4.2/hmailserver/source...

SorenR

Jorgo wrote: ↑
2020-01-18 19:12
Today I've seen this:
Code: Select all
"SMTPD"	4420	119	"2020-01-18 15:39:30.541"	"223.71.167.164"	"RECEIVED: EHLO []"
How would I add an empty EHLO to the regEx String?

It's not empty... It's a pair of brackets

"(\[\])"

SorenR

Is it possible to extract the session number for use in a script? Yes... Doing it... :mrgreen: I'll have look this weekend to extract the code changes from my 5.6.8-22 code. And it's "Thread ID" not session... :wink: My custom logfiles use it and have been doing so for a while... First column... Co...

SorenR

As to the DHCP Lease issue. After looking at how one of my Routers Assigned a Manual Fixed IP Address and my other Router assigned a Static Fixed IP Address, apparently when you Fix an IP Address using the DHCP Server of the Router a 'Manual' reservation for the IP Address is created as well as the...

SorenR

Don't know about Seden but isn't most of Europe outside of UK on Metric which doesn't have a 'Billion'. Well, the Certificate Error was an error but as I quickly realized it probably wouldn't have caused the failure to connect and even though I attempted to correct the Certificate Error there still...

SorenR

Now grasping at straws, I wonder if I may have reached the limit to the number of email transactions hMailServer will allow you to run on a lifetime basis of the installation. I forget what this limit is called but there is a built in limit to the number of transactions you may run in hMailServer. ...

SorenR

I have a trial version of Windows Server 2012 R2 (64bit) running RvdH's hMailServer 5.6.8-22 (32bit) as Backup-MX/Relay using "built-in database"... One week and not a foot wrong. Actually it's set up to shield my current 5.4.2 (highly custom build) and to act as TLS-enabler for my current non-TLS c...

SorenR

Not sure how good your scripting skills are and I have no idea if this breaks digital sign but it is something I have played with as part of some code to deliver email with illegal attachments to "Postmaster" before hMailServer actually remove the attachment(s) and deliver to account... Just in case...

SorenR

Hi, it would be useful for me (and for others tough) to have the rule "copy to IMAP folder" in addition to "move to IMAP folder" I need to distribute the same email (digitally signed) to multple address... the rule forward breaks the digital sign; move to IMAP folder is ok, but it can only be used ...

SorenR

Okay, I see, you don't have to make fun of me. not making fun of you, making fun of your customers. LOL. I realized. But I have a little annoying too. Well, I'm Danish... We do stuff, get things done and tell people off if they dont like. Self irony is also part of our DNA so most of the time we co...

SorenR

shmuel wrote: ↑
2020-01-12 08:35
Okay, I see, you don't have to make fun of me.

not making fun of you, making fun of your customers.

SorenR

If your customers cannot wait 1 minute ... Problem is that they think they are "important", well - they are not, they are selfish. Email was NEVER intended to be INSTANT - nor was SMS (mobile phone texting) :roll: SMS was created to use surplus capacity in the network and the SMS was sent only when ...

SorenR

Did they fix the bug in Security Essentials that if it failed to run it would return the code for virus? I guess this is Microsoft saying "better safe than sorry" :twisted: https://www.hmailserver.com/forum/viewtopic.php?t=27968 Return code is 0 if no malware is found or malware is successfully reme...

SorenR

FYI i think the --dbpath param directive is needed otherwise it creates a new /.spamassassin/bayes in: %UserProfile% [10-Jan-2020 08:10:36 +0100]: <cdptf4pi> C:/Tools/sa/sa-learn.exe -D --spam "C:\Inetpub\wwwroot\temp\rcm1F6C.tmp" --dbpath C:/Windows/System32/config/systemprofile/.spamassassin/baye...

SorenR

Dravion wrote: ↑
2020-01-10 04:46
You can't get out the MS-DOS Devil of Windows, even if you are Bill G.

I have actually installed http://getgnuwin32.sourceforge.net/ on all my machines... Sometimes unix commands just fit my fingers better... Like "ls -l"

SorenR

1: Create a symbolic link... mklink /D "C:\Program Files\JAM Software\SpamAssassin for Windows" "C:\SpamAssassin" 2: Edit the config.php $config['markasjunk_spam_cmd'] = 'C:\SpamAssassin\sa-learn.exe --spam %f -D 2>&1'; $config['markasjunk_ham_cmd'] = 'C:\SpamAssassin\sa-learn.exe --ham %f -D 2>&1';...

SorenR

The old markasjunk2 plugin is now part off the new Roundcube 1.4.x distribution (named markasjunk) I was trying to get this plugin working, with sa-learn (using cmd_learn driver) $config['markasjunk_learning_driver'] = 'cmd_learn'; $config['markasjunk_debug'] = true; (this makes a \logs\markasjunk....

SorenR

oops

SorenR

Hmm... FetchMail for Windows was a hoax, it appears. GetMail is a similar beast and it's written in Python so I presume it can be run on a Windows platform. http://pyropus.ca/software/getmail/documentation.html#requirements Oh and by the way... Found this (probably not very GDPR compliant) site toda...

SorenR

Err... no. It's a mail server. It has to offer a way of allowing clients to collect the email it has received. As do all mail servers. No point receiving email if No one can get to read it. Servers deliver and receive (smtp). Clients view/collect to read (imap, pop). [Entered by mobile. Excuse my s...

SorenR

Your setup is not much worse than mine! How do you manage your reverse proxy without passing the internal IPs through? Reverse proxy ? Hairpinning is the work of the devil ! I have split DNS, one inside and one outside and all outside FQDN's are matched to inside IP addresses. ISP Internet thingy <...

SorenR

It worked thank you. When i try to build Boost v1.72.0, i got below message. *************************************************** C:\Dev\hMailLibs\boost_1_72_0>bootstrap.bat vc12 Building Boost.Build engine The system cannot find the batch label specified - Config_VC12 Failed to build Boost.Build en...

SorenR

hMailAdmin -> Settings -> Protocols -> SMTP [Delivery of email]

Enter a valid FQDN in "local host name"

SorenR

I just found out that blocking 127.0.0.1 in HELO is not a good idea, since my own smartphone software (K9-Mail) uses this greeting... Perhaps you should spend some time figuring out WHY your phone identifies itself as 127.0.0.1 as this is clearly VERY wrong! RFC says "EHLO" SP ( Domain / address-li...

SorenR

forum allow the use of http and then you won't have any issues

SorenR

Hmm... Just checked... It's "Everyone", not "Everybody"... Sorry...

It's a group covering any thinkable user/guest account on a windows system. Sort of a wildcard account.

SorenR

But this insn't irrelevant. User Everyone isbt the sme in terms of DCOM as a specific User.Dont use Every one. If your User is "sr" on client and server Machine, add the Usr sr to DCOM Security TAB Lauch AND Access permissions and make sure you sdet the checkboxes below as well. I have been using "...

SorenR

//update win10 system restored back to 20.12.2019 and all is working fine again. now the question is, what has happened with my win10? but as a pathetic WIN10 user, i better don't go deeper into this question - just for the sake of my mental health :lol: thank you all again. Have a look in the Even...

SorenR

tried everything on DCOM config. no avail... there must be something on my 10's. connections from any win7 are ok as it's ever been. and it's weird that till 2 days ago win10's were connecting fine too. i'll see elswhere for a solution. obviously this isn't related to HMS particularly. so, thank yo...

SorenR

Wooop wooop ... fixed it...

COM Security I already had Access Permissions for "Everyone" enabled... Launch and Activation Permission was missing "Remote Launch" and "Remote Activation" for "Everyone"...

Problem solved

Security F'd up

SorenR

hMailServer 5.4.2 on Windows 2012 R2 Server. - Can access from from my Windows XP dev platform, no problem. Hmm... This is weird... XP SP3 logged on user SR, workstation name "SR". User SR is member of group Administrators. Windows 10 logged on user SR, workstation name "SR-ACER". User SR is also Ad...

SorenR

I guess there was one thing I had not tested... hMailServer 5.4.2 on Windows 2003 R2 Server. - Can access from from my Windows 10 dev platform, no problem. hMailServer 5.4.2 on Windows 2012 R2 Server. - Can NOT access from from my Windows 10 dev platform... WTF! Just tried to go into dcomncfg and as...

SorenR

Oh and I can remotely manage our hMailServer (production-Win2K3R2 and development-Win10Home-1909 and test-Win2012R2-trial) from any workstation on our LAN. Soren, is there a win10 workstation among them from where you remotely admin a HMS? if no (and there is a win10 workstation), could you pls mak...

SorenR

I suspect that this is related to the SMB version https://support.microsoft.com/en-us/help/2696547/detect-enable-disable-smbv1-smbv2-smbv3-in-windows-and-windows-server Windows 10 doesn't support anything less than SMBv3 Created a bit of havoc with linux NAS devices, because for many of them the on...

SorenR

My front firewall was supplied by my ISP and can't do much more than port forwarding. It's really lame. :mrgreen: This is a hobby for me and I don't have a lot invested in it other than time. It's like a never ending puzzle - battling spammers, among other things. Nice setup you have there. Thanks ...

SorenR

Sure and something like this will magically disappear with your method as well.. Error 2 error C1083: Cannot open include file: 'boost/interprocess/windows_shared_memory.hpp': No such file or directory No but it would fix 150 of 152 errors. No. StdAfx.h and Stdafx.cpp are in correct position and do...

SorenR

Dravion wrote: ↑
2019-12-31 03:23
Sure and something like this will magically disappear
with your method as well..

Error 2 error C1083: Cannot open include file: 'boost/interprocess/windows_shared_memory.hpp': No such file or directory

No but it would fix 150 of 152 errors.

SorenR

You can fix this problem by adding "$(ProjectDir)" (or wherever the stdafx.h is) to list of directories under Project->Properties->Configuration Properties->C/C++->General->Additional Include Directories.

SorenR

@SorenR Could the code you posted be changed to ban the whole subnet of a presumed spammer/attacker? Right now it only bans the specific IP adress but I've seen some instances where the same thing repeats from another adress in the same /24 subnet. Expanding the ban to the whole /24 subnet as a pre...

SorenR

jimimaseye wrote: ↑
2019-12-29 22:25
Perhaps matt meant that the EHLO word was received but no domain or ip address following?

[Entered by mobile. Excuse my spelling.]

I got that much, it's still non-compliant regardless of TLS in any way or shape.

SorenR

Well.... S: 220 smtp.server.com Simple Mail Transfer Service Ready C: EHLO client.example.com S: 250-smtp.server.com Hello client.example.com S: 250-SIZE 1000000 S: 250-AUTH LOGIN PLAIN CRAM-MD5 S: 250-STARTTLS S: 250 HELP C: STARTTLS S: 220 TLS go ahead C: EHLO client.example.com S: 250-smtp.server...

SorenR

ALSO, I find that with ONHelo sometimes the sending server has no greeting, when there is no security on the connection (SSL/TLS), but when asked to secure a connection via StartTLS, that the sending server THEN sends a greeting Not good... No greeting with EHLO/HELO is non-compliant behavior and s...

SorenR

I never really expected it would be that hard to understand when I made these functions... You are the first! I come from a completely different discipline than mathematics, I'm much better at interpreting the law than programming code. Here I learn best from examples and I am very grateful for you...

SorenR

I changed that one line to EventLog.Write(oClient.HELO & vbTab & oClient.IPAddress & vbTab & oClient.Port) Still no ban, and no errors are written to the log. The Attacker tries every 6 minutes so I have lots of tries to test :-) So, do I have to insert actual values here .ExpiresTime = DateAdd(sTy...

SorenR

EventLog.Write( HELO & vbTab & oClient.IPAddress & vbTab & oClient.Port) I presume this is supposed to be "oClient.HELO" since there is no variable called "HELO" :roll: Did you remove the "ERROR" lines in the output? You'd better get your reading glasses... sType and iDuration are passed in the cal...

SorenR

Is 5.6.8-B2437.21 still the latest? Is OnHelo in the current main beta yet? (build 2494) 5.6.8-B2489.22 Last extra commit (INI setting) is to overrule 'Host name' set in SMTP settings as domain part of the NDR address, which in real world scenarios would be the PTR DNS records of you IP address. Th...

SorenR

Any reason tho upgrade to BOOST 1.72.0? Something is not working with 1.70.0? You can upgrade BOOST about every two months if you like, newer != better :wink: No particular reason. Just curios... I know BOOST is covering a lot of code so perhaps I should just try to isolate the used functions in ca...

SorenR

And the chinese are notorious for backdoors in hardware they build. :mrgreen: Just remember for every finger you point at anything or anyone there are three fingers pointing your way ... If you are right about the backdoors then they are a lot smarter than the americans - they don't get caught and ...

SorenR

Building the bootstrap in BOOST 1.72.0 did present some issues however. Building Boost.Build engine The system cannot find the batch label specified - Config_VC12 Never found the reason why it would say that but I found a workaround ;-) REM'ing out the 3 last lines solved the problem. No idea why a...

SorenR

Anyone got an idea why BOOST 1.70.0 is preferred over the latest version? hMailServer 5.6.8 does actually compile (x86 32bit) without errors when using BOOST 1.72.0. I have not run it more than 5 minutes yet... I have Windows 10 Home x64 1909 (latest and greatest ;-) ) I use Microsoft Visual Studio ...

SorenR

No. BOOST 1.72 is official Version 1.72.0 December 11th, 2019 18:06 GMT https://www.boost.org/users/history/version_1_72_0.html YOU listed Boost 1.71.0 for hMailServer 5.7. I just wanted to know if that version is OFFICIAL HMAILSERVER. PS. I can bloody well read a webpage like anyone else so I alre...

SorenR

Staying secure is always a run between a Rabbit and a hedgehog. If you fall short with applying patches, you risking your complete hMailServer. Its more likely to get hit by a hack if you run on a unsupported OS than not because the old security holes will never get fixed. You are assuming the serv...

SorenR

Please do not remove X86 XP support as i still use W2K3 x86 (and maybe others). Thank you. 5.6.8 is still available. 5.7 is pre-alpha testing so not expected to be stable anyways. 5.7 Pre-Alpha is not the same Codebase than Codestate: https://github.com/Dravion/hmailserver/commit/62066f6ceaa6c35f00...

Search found 3289 matches