hMailServer forum

tunis

I have got spam for face masks.

tunis

Couldn't you just add reply-to: sender in the email. Then when you hit reply it send to sender and not to member.

tunis

Maybe the SPF record has more then 10 lookups?
RMSPF.cpp#L137

https://sendgrid.com/.../spf-limitations/

tunis

OK I indexed both ipaddress and timestamp, here's a typical query: SELECT DISTINCT(ipaddress), COUNT(ipaddress) AS countip, timestamp FROM hm_fwban_rh WHERE timestamp LIKE '2020-02%' GROUP BY ipaddress And results: (1550 total, Query took 0.3457 seconds.) <-- from phpmyadmin However, the reality is...

tunis

You don´t need to add unique index.

ALTER TABLE tbl_name ADD INDEX index_name (column_list) − This adds an ordinary index in which any value may appear more than once.

tunis

All columns you use in query you should have index on.
If you use "select x where timestamp > 'y' order by id" timestamp and id should have index on them to speed up query.

tunis

First, I'm not related to Greta.

I use nginx and php on my hMailserver and I had only uncomment this "com.allow_dcom = true" in php.ini.
Copy required files to your www catalog.

There is instruction in config.inc.dist in all plugins I made.

tunis

It literally takes the mail (source!) and tries to lookup url entries in it line by line, this could be in the headers, plain text part, html part (incl style blocks) Maybe you should try what i described above, eg: take the mail source and paste it into https://regex101.com/ and/or https://regexr....

tunis

@RvdH I updated hmailServer almost the same email came again without ")". "DEBUG" 1116 "2020-01-30 13:22:53.636" "SURBL: Execute" "DEBUG" 1116 "2020-01-30 13:22:53.636" "SURBL: Found URL: webbdagarna.se" "DEBUG" 1116 "2020-01-30 13:22:53.636" "SURBL: Found URL: trippus.se" "DEBUG" 1116 "2020-01-30 1...

tunis

I tried to resend that email and then it's only find the URL I found. "DEBUG" 2684 "2020-01-29 11:23:04.817" "SURBL: Execute" "DEBUG" 2684 "2020-01-29 11:23:04.833" "SURBL: Found URL: idg.se" "DEBUG" 2684 "2020-01-29 11:23:04.833" "SURBL: Found URL: ugglamassage.se" "DEBUG" 2684 "2020-01-29 11:23:04...

tunis

I checked the email and all links are like this one. href="https://dmd.idg.se/x/c/?LU.RbsMgDPyVvtCnqQ0hbMokq2q3L1gf9jgRQAldDJEDivb1DLLJtnQn_3w6DbLNCB3vmz7PILnseSbgont_EXmCKcZlfT2ft207kR3srLwZHJmTDnhJEb90WmNAJm.bwuT7v.BJtsd9qXBRbvTwaYfBqFGRV6xt7jHo7ynMWHAtVlvcH6kA.1Mv1vhgb4JdO.KBCndlFgojKUQb999rSKQt...

tunis

I checked the email and all links are like this one. href="https://dmd.idg.se/x/c/?LU.RbsMgDPyVvtCnqQ0hbMokq2q3L1gf9jgRQAldDJEDivb1DLLJtnQn_3w6DbLNCB3vmz7PILnseSbgont_EXmCKcZlfT2ft207kR3srLwZHJmTDnhJEb90WmNAJm.bwuT7v.BJtsd9qXBRbvTwaYfBqFGRV6xt7jHo7ynMWHAtVlvcH6kA.1Mv1vhgb4JdO.KBCndlFgojKUQb999rSKQtW...

tunis

Hello, I saw that the URL for SURBL lookup sometimes is faulty. Here is an example from my log. "DEBUG" 3168 "2020-01-23 08:09:03.919" "SURBL: Execute" "DEBUG" 3168 "2020-01-23 08:09:03.919" "SURBL: Found URL: webbdagarna.se" "DEBUG" 3168 "2020-01-23 08:09:03.919" "SURBL: Found URL: trippus.se" "DEB...

tunis

I has also got false hits with multi.surbl.org.
But no false hit with dbl.spamhaus.org.

tunis

Pop-up is still exist after reverting it back to 0. Are call it with cscript? If you use wscript you get popups. Unfortunately no script. I just normally called it thru windows scheduler. I have no idea how to use cscript. Can you please help me how? Thank you You call it like this in windows sched...

tunis

ashtec014 wrote: ↑
2019-12-12 14:43
palinka wrote: ↑
2019-12-12 13:47
ashtec014 wrote: ↑
2019-12-12 09:16

Hi Palinka, I changed this to
Code: Select all
Const Verbose         = 1
but still I am getting the pop after running the task scheduler.
Should be 0 for no popup.
Pop-up is still exist after reverting it back to 0.

Are call it with cscript?

If you use wscript you get popups.

tunis

Your IP is on a blacklist.
You can check it here: https://mxtoolbox.com/blacklists.aspx

tunis

Hi, telnet testsmtp.com 25 ehlo testsmtp.com mail from:shanker@test.com rcpt to:test@testsmtp.com data this test msg to test mail. . quit You are not sending to, from or subject telnet testsmtp.com 25 ehlo testsmtp.com mail from:shanker@test.com rcpt to:test@testsmtp.com data To: test@testsmtp.com ...

tunis

I use php with local geoip. https://github.com/maxmind/GeoIP2-php How is performance? Are you using a database or it reads a the flat file every time you connect? Preformence approx 10-15ms/request. (in firefox) I have a centos machine with my webmail and GeoIP installed. As you see in examples on ...

tunis

I use php with local geoip. https://github.com/maxmind/GeoIP2-php Use this vbs code ' ### ' ### hMailServer GeoAutoban Code ' ### Function GeoAutoban(oClient) Dim oGeoip Dim sPort : sPort = Trim(Mid("SMTP IMAP SMTPSSUBM IMAPS", InStr("25 143 465 587 993 ", oClient.Port), 5)) On Error Resume Next Wit...

tunis

You can disconnect client after too many invalid commands in Settings->Protocols->SMTP->RFC compliance.
Set "Maximum number of invalid commands" to 3 for example.

550 Unknown user is a invalid command and client will be disconnected after 3 tries.

tunis

qneo wrote: ↑
2019-09-06 11:03
name: mail.almighty.se
data: "v=spf1 a:mailout.telia.com -all"

still goes to junk

spf name must be the same as after @ in email address (almighty.se) not mail.almighty.se.

tunis

qneo wrote: ↑
2019-09-06 10:45
Like this ?

name:mail.almighty.se, type:TXT, data: "v=spf1 include:mailout.telia.com -all", prio: 0, ttl: 120

mail.telia.com has no spf, so there is nothing to include.

Use a:mailout.telia.com instead of include:mailout.telia.com.

tunis

What are your "SMTPC" says in the log?
They are your server's outgoing logs.

tunis

I think the auth format is wrong.
You sending "login+login+password".

PS. You should change password now when it has been posted here.

tunis

It look like you have 2048 dkim and that was not working for me.
I use 1024 dkim now and that works.

tunis

Check if you allow empty senders (Settings->Protocol->SMTP->RFC compatibility).
Bounce mail often has empty sender.

You can test with bounce mail services like this.
https://www.socketlabs.com/blog/bounce- ... addresses/

tunis

I have test with this script. Set objMsg = CreateObject("CDO.Message") objMsg.Subject = "CDO TEST MESSAGE" & vbTab & Now() objMsg.Sender = "test@test.local" objMsg.To = "test1@test.local; test2@test.local: test3@test.local; test4@test.local;" objMsg.From = "admin@tech.samobler.se" objMsg.TextBody = ...

tunis

I don't use distribution list but you might use global rule.

I have setup a route based on sender.

Criteria
Use AND
From Contains test@domain.com
To Not contains @domain.com

Actions
Send using route NameOfYourRoute

tunis

Hmm... HM4403 is used in PersistentMessage::LoadHeader and PersistentMessage::LoadBody ... Both are called from DKIM at different times. Wonder if the error goes away if DKIM check is removed? This is tested and error goes away with wait(20) on. But I what it, so I removed wait(20) instead. So on m...

tunis

Dravion wrote: ↑
2019-06-04 15:24
What is a "Mail Contact"?

Maybe only available on exchange.

But what I was meaning was mail users

https://docs.microsoft.com/en-us/exchan ... erver-2019

tunis

Can't you add EBSSystemMail@publicdomin.com as a mail contact and then the mail sent to EBSSystemHmail@internaldomain.com after you also setup send connector for internaldomain.com domain point to hmailserver.

tunis

mattg wrote: ↑
2019-06-03 14:59
HTTPS is a secure web browse connection to a webmail

Exchange server use HTTPS for clients (activesync).
I manage a exchange and only port 443 and 25 open to internet.

tunis

@tunis What do you use to run the VMs? Is this bare metal? Which Hypervisor? This is a server with Hyper-V server 2019 That may well be your problem with taking too long HyperV doesn't pass time very well to the hosted machines. (I've had an error with some older linux drivers for my firewall, and ...

tunis

SorenR wrote: ↑
2019-05-24 16:59
Hmm... HM4403 is used in PersistentMessage::LoadHeader and PersistentMessage::LoadBody ...
Both are called from DKIM at different times.

Wonder if the error goes away if DKIM check is removed?

I will test.

tunis

mattg wrote: ↑
2019-05-24 16:59
@tunis What do you use to run the VMs? Is this bare metal? Which Hypervisor?

This is a server with Hyper-V server 2019

tunis

RvdH wrote: ↑
2019-05-24 15:25
So we can conclude the issue you had was indeed introduced by using the Wait(20) and caused by some incompatibilities with timeout.exe on Server Core?

Time will tell.
Occurred approximately every 100-300 messages.

tunis

SorenR wrote: ↑
2019-05-24 14:28
That should work fine. Sort of. My AMD Athlon(tm) II P340 Dual-Core 2.19 GHz doing absolutely Nothing else spikes to 60% CPU for the duration...

I saw that and have change to powershell. Sleep not working on Server Core 2019.

My VM got slow and CPU load at 100%.

tunis

I made a new function to test.

Code: Select all

Function Wait(tSec)
    Dim dtWait
    dtWait = DateAdd("s", tSec, Now())
    Do Until (Now() > dtWait)
    Loop
End Function

tunis

"DEBUG" 2740 "2019-04-25 14:11:20.142" "Executing event OnSMTPData" "DEBUG" 2740 "2019-04-25 14:12:00.166" "Event completed" that looks more like a 40 sec delay...something else get triggered there? Well observed, I look at this in my logs and see that when an error occur the delay are greater then...

tunis

Only I known is it still working with the error and the error is gone when I remove wait(20). Here is a full log off a message revived and forwarded to exchange with wait(20) and a error after SURBL. "TCPIP" 2740 "2019-04-25 14:10:19.382" "TCP - 198.2.177.17 connected to 10.120.0.30:25." "DEBUG" 274...

tunis

EDIT: !! Hmm... Could this be the temporary file sent to SA that is not supposed to exist yet ?? Weird, investigation needed! Ruud (RvdH) is playing with "Return-Path" before sending mail to SpamAssassin and that is at that exact place where your HM4403 error occurs. You might want to give him a pi...

tunis

I have solved it. It stops generate this error when I removed "If (oClient.Port = 25) Then Wait(20)" from OnSMTPData. I tried down to just 5 sec but still get error but less. My code I copied from SorenR. Sub OnSMTPData(oClient, oMessage) ' ' Exclude Backup-MX & local LAN from test ' If (Left(oClien...

tunis

Hello, I have installed a new hMailServer 5.6.8-B2431 with RvdH's 5.6.8-B2437.17 update on new Windows server 2019 core VM. It act only as a relay server and doing it's jobb. But I get this HM4403 errors sometimes. "DEBUG" 2584 "2019-04-25 14:12:00.353" "Spam test: SpamTestSURBL, Score: 0" "ERROR" 2...

tunis

How do you receive mail? !! No SMTP Port 25 defined. Direct external SMTP inbound not possible !! Have you a front end server that sends the error: 550 5.1.1 <support@domain.com>: Recipient address rejected: User unknown in virtual mailbox table Then the aliases must exist on that server to or it mu...

tunis

Should not the database record always be removed if it's banned or old. While Not oRecord.EOF If Not (DateDiff("n", oRecord("timestamp"), Now()) > idsMins) Then If AutoBan(oRecord("ipaddress"), "IDS", 7, "d") Then EventLog.Write( "AutoBan(" & oRecord("ipaddress") & ", IDS, 7, d)" ) End If End If oCo...

tunis

jimimaseye wrote: ↑
2018-12-20 21:09
You sure its not related to a windows update? viewtopic.php?f=7&t=32893&p=207127#p207127 for some lessons.

I have not updated this server for months and I only install recommended updates. (no "Preview" updates)
And it started already in March.

tunis

Now it stop working again.
It seem like it only the ports that freezes (stop working). I can still login with webadmin to hMailserver!
When I try to restart the service it take a long time to stop, then after starting the service it working again.

tunis

SMTP is another mail server and both use port 25.
Uninstall SMTP or change port. ex 26 or 2525.

tunis

Look at this on github.
It seem he using vs2017 for his built.

https://github.com/mologie/hmailserver/ ... tp-xclient

tunis

tester wrote: ↑
2018-10-16 12:33
what is my username and Password here?

Your admin username and password you login to hMailserver with.

tunis

ERROR: Full paths are stored in the database.

You should fix the path to email in the database.

viewtopic.php?t=28914

tunis

SorenR wrote: ↑
2018-08-31 14:07
\*\.\* ==> No idea

It was a BOT (*.*).
Maybe not relevant now.

tunis

I use OnHELO with one of SorenR scripts. Sub OnHELO(oClient) ' ' Exclude local LAN from test ' If (Left(oClient.IPAddress, 8) = "192.168.") Then Exit Sub If (Left(oClient.IPAddress, 9) = "127.0.0.1") Then Exit Sub strRegEx = "(127\.0\.0\.1|mail\.mydomain\.se|\*\.\*|User|xxx\.xxx\.xxx\.xxx|ylmf-pc|in...

tunis

You could use the API. Add this to vbs file, edit password and cert name and paths. Const sAdminPassword = "PASSWORD" Dim oApp Set oApp = CreateObject("hMailServer.Application") ' Authenticate the client. Call oApp.Authenticate ("Administrator", sAdminPassword) Dim oSSLCertificates Set oSSLCertifica...

tunis

carlpicot wrote: ↑
2018-08-13 01:32
I just get this error Matt

https://www.screencast.com/t/b8vNTdkB

Thanks Carl

What database are you using?

Build in one are not working on Windows server 2012 R2.

tunis

Don't forget that companyA and companyB most add your mail server in there SPF record if they have any.

tunis

Well running a mailserver from a dynamic IP never is a good idea...as this will always be marked as a dynamic sender address and sooner or later will be blocked, eg: spamhaus PBL , Spamrats RATS-Dyna (and RATS-NoPtr in this case) As the first post image shows SMTP relay are in use. Have you double ...

tunis

Every domain has it's own spf record and they all has to allow mail.com to send.

Code: Select all

cutomer1.com IN TXT "v=spf1 mx -all"
cutomer2.com IN TXT "v=spf1 mx -all"

If mx is set to mail.com, else use a:mail.com or ip4:123.123.123.123

tunis

I open ports by program.

netsh advfirewall firewall add rule name="hMailServer" dir=in program="c:\pathtohmailserver\bin\hmailserver.exe" action=allow

Search found 242 matches