You have to be careful with the lords of Microsoft. It can be a false positive in, FQDN as HELO. AM5EUR02FT035.mail.protection.outlook.com EUR04-DB3-obe.outbound.protection.outlook.com EUR03-VE1-obe.outbound.protection.outlook.com I discovered that yesterday too. I added outbound.protection.outlook...

palinka wrote: ↑

2019-11-24 00:52

I think I figured out why marking SAFE didn't remove the firewall rule. I changed the order of operation so processing SAFE comes first. I'm going to experiment a little and see if it works, then I'll update GitHub.

Thank you!

I wouldn't worry about it. If it happens again look in MySQL my.ini and see if you have "max_allowed_packet". If not, add this and reboot: max_allowed_packet = 1M Or 16MB, which is supposedly the default. 1GB is the max. My current my.ini has no entry for that so default will be used ... Now i have...

Here is the entirety of the firewall parsing. Is it possible that you introduced a space by accident? # Get firewall logs - https://github.com/zarabelin/Get-WindowsFirewallLogs/blob/master/Get-WindowsFirewallLog.ps1 $LSRegex = "($LANSubnet\.\d{1,3})|(158\.201\.243\.\d{1,3})" $MinuteSpan = 5 # Shoul...

I noticed there's a space at the beginning: VALUES (' 2019-11-23 08:29:31', The script reads the date and time from the firewall log. So the formatting problem could be coming from the firewall log and not necessarily from powershell. What are the date and time formats in the firewall log (localize...

Mhh - it must have something to do with "duplicate ips". The IP has triggered IDS, i have marked it for release and it have been removed from firewall. I have made no screenshot but the ip (its a 5 minute check from uptimerobot.com) after some time was shown 2 times under duplicate ip's. 1 time with...

Could it have something to do with this: 19.11.23 08:30:02.62 : ERROR : Unable to run query : INSERT INTO hm_fwban_rh (timestamp, ipaddress) VALUES (' 2019-11-23 08:29:31', '45.95.35.35') Ausnahme beim Aufrufen von "Fill" mit 2 Argument(en): "Incorrect datetime value: '' for column 'timestamp' at ro...

Its me again :-) I am still on my "old" version which is working so far as expected. Before i start from scratch: there must be a problem with releasing / unban IPs via webif. The following ip is released / marked as safe. https://www.bilder-upload.eu/bild-0ecb03-1574463709.png.html Afair marking as...

Removed the "countrycode" - thing from search-php (2 times) and now the webif is working again ...
When you updated GitHub with all the latest corrections i will start from scratch again to test
Thx

palinka wrote: ↑

2019-11-22 20:35

Jeez, the answer was in my post. The query DOES contain countrycode, which I completely overlooked.

When I get home I'll go through every page and make sure it's removed completely. I'll let you know when the changes are uploaded.

thx!

If it still doesn't work, run these queries in phpmyadmin and report any errors: These queries are exactly as presented to mysql after the variables are filled in by php. I only left off "LIMIT ".$offset.", ".$no_of_records_per_page;" because its unnecessary to see if the query is working. If you g...

i try to visualize what i mean:

Dravion wrote: ↑

2019-11-11 12:07

Ok, will look into it if i have time

Do you had time to take a look?

And: it seems that the above changes have broken the webinterface. Stats are working, but details for a specitic stat returns a "no result". No results for search term "Russi", no No results for search term "2019-11-22" and so on.

This is due to MySQL table hm_fwban : column "countrycode" REQUIRING a default value. Countrycode is basically an orphan left over from the very beginning, but abandoned later. I was lazy in not removing it. To permanently get rid of this error, you need to do a couple of things. First, you need to...

Ok. Awesome. I will update the instructions. Thanks for the heads up. Hiho - its me again :-) hmsFirewallBan.ps1 produces errors like this (in the DBError.log): 19.11.22 00:30:01.80 : ERROR : Unable to run query : INSERT INTO hm_fwban (timestamp,ipaddress,ban_reason,country,flag) VALUES (NOW(),'139...

So, it seems that i have found the problem: the mysql-connector-net must be installed. Which wasn't on my setup.
I think you should ad this to the instructions on GitHub @palinka ...

Going to check out again a fresh copy from GitHub and set it up again from scratch

palinka wrote: ↑

2019-11-19 16:25

The type [MySql.Data.MySqlClient.MySqlConnection] can not be found.

You said you re-downloaded the powershell file. Did you forget to change the database variables st the top?

Nope, MySQL and Fireall-Rules are changed to fit my setup ...

and from the now created DBError.log (in parts): Der Typ [MySql.Data.MySqlClient.MySqlConnection] kann nicht gefunden werden. Stellen Sie sicher, dass die Assembly, die diesen Typ enthält, geladen wird. Es ist nicht möglich, eine Methode für einen Ausdruck aufzurufen, der den NULL hat. Der Typ [MySq...

Arrrrggg! In the mysqlquery function, put the $ in front of DBError.log Missing the $.... you'd be up and running if it weren't for my typos. :lol: However, there must be a database error still, so when you get that sorted out, let me know what's actually in the error log. Edit No! Quotes are missi...

And let me know when its working. :D Checked out GitHub so i am on the bleeding edge now :-) - now i got this error: In D:\hMailServer\Addons\HMSFirewallBan\hmsFirewallBan.ps1:47 Characters:31 + $DBErrorLog = $PSScriptRoot\DBError.log + ~~~~~~~~~~~~ Unexpected token "\DBError.log" in expression or ...

Jeez... That's embarrasing. Field 'ID' should be autoincrement. I just looked at the GitHub readme and it does not list autoincrement as a property. Actually I've been thinking of adding "if not exist create table" to the powershell file. Anyway, run this sql in phpmyadmin: ALTER TABLE hm_fwban MOD...

Ah, sorry. Looks like diverging too far from my own setup is causing me to leave things out. I'll fix this on GitHub. In the meantime, the issue is "wrong number of arguments". The call is sending 3: (oClient.IPAddress, "GeoIP", oClient.HELO). The function is asking for 2: (sIPAddress, sReason). Si...

And: thank you for your patience!

Can you post a little more of the script surrounding it? Where is it? When is it being called? Do you have a version of hmailserver that has OnHELO? Or an official version before 5.7.0? I'm using RvdH's custom build v5.6.8-B2489.22 as you suggested a few postings before. I am using the latest Event...

I may have added this after you downloaded it. I made several changes today. It should go at the top of EventHandlers.vbs (below "option explicit", of course). ' COM authentication Private Const ADMIN = "Administrator" Private Const PASSWORD = "supersecretpassword" Private Const EVENTDIR = "C:\Prog...

Hi, thx for your efforts. I deleted everything and started all over again with the latest version from github. Now another error is occuring: "ERROR" 3516 "Script Error: Source: Runtime error in Microsoft VBScript - Error: 800A01A8 - Description: Object required: 'LockFile(...)' - Line: 142 Column: ...

Line 261: Call FWBan(oClient.IPAddress, "HELO-Inv", oClient.HELO) Hmm - but "helo" is used in this function: Function idsAddIP(sIPAddress, sCountry, sHELO) Dim strSQL, oDB : Set oDB = GetDatabaseObject strSQL = "INSERT INTO hm_ids (timestamp,ipaddress,hits,country,helo) VALUES (NOW(),'" & sIPAddress...

I still post my experience in setting this up - i hope you don't mind :-) There is another line (114) which is using "idsTable". Changed it to hm_ids because in your project its not defined as variable. Another thing is that on the example for adding the three MSSQL tables on the hm_ids - table the ...

hi palinka, currently i'm running into another problem, error message: "ERROR" 2556 "2019-11-16 12:07:16.696" "Script Error: Source: Runtime error in Microsoft VBScript - Error: 800A01F4 - Description: Variable is not defined: 'idsTable' - Line: 107 Column: 4 - Code: (null)" referencing to (my) line...

Hello palinka! trying to get things sorted with my hmailserver - installation so i downloades .48 from your GitHub Is it possible that in EventHandlers.vbs at line 180 a ' is missing? ("Exclude Backup-MX & local LAN from test" -> " ' Exclude Backup-MX & local LAN from test" at line 302 a ) is missin...

Hello palinka,

this would also work with version 5.6.8 of hMailserver?
because according to GitHub version 5.7.0 of hMailserver is required.

Thx!

Hi!

Just to be sure: i can simply update my 5.6.8 installation - i'm using it with mysql x86 - with 5.7?
Thx!