hMailServer forum

tochi

Thanks for the info. But the SpamAssassin was unresponsive so I assume there's no relevant log entry. I will try to find the hmailserver log to verify.

tochi

Or get all users to authenticate. If mail is authenticated then AntiSPAM is bypassed But it's not true in my case. Our users are authenticated but the sending process still took long (with Thunderbird sending window). The issue was gone after SpamAssassin was restarted. And many of our users are no...

tochi

One day our users experienced slow sending emails issue. It's caused by unresponsive SpamAssassin. I was surprised that anti-spam took place even for out bound emails.
How do I have it scan for inbound emails only?

tochi

Soren Let me be sure I got this right. With AUTH off on port 25 (the nastiest one) the email is treated as from external domains. IOW, login is bypassed (not required). OK, the only concern I have is we may have "devices" that send an email (logs, info, etc). These are usually from 3rd parties and ...

tochi

The following 3 logs are enabled.
Application
SMTP
POP3

There's only one domain, 100 accounts. Daily mail count is 10,000.
The log size is about 1.1 GB. If POP3 was not logged, the size would be about 460 MB. But sometimes I need POP3 log.

tochi

That request is to split log files by categories. I want all logs in 1 file but split file every xxx MB.

tochi

Some of my log files are larger than 1GB. Opening large files takes long time. Some editors can't simply open large files.

I hope there will be an option to split log file every XXX MBytes.

tochi

You should be able to see this if everything is correct.

tochi

input your valid email address in 'type email address here' text box and click try it. You will get a comprehensive report.

tochi

Have you run a test at checktls.com ?

tochi

verify if your certificate can be verified at checktls.com
If it's accepted, probably some servers don't like wildcard certificate.

tochi

Common reasons.
1. certificate is self signed
2. certificate was not chained properly.
Usually there are multiple -----BEGIN CERTIFICATE----- and -----END CERTIFICATE----- blocks in .crt certificate file.

tochi

Mine stopped updating too. But I don't care because Clam AV defs can't detect any threat anyway. It's SaneSecurity that actually works.

tochi

Please give symptoms in details.

tochi

go to http://checktls.com/

input your email address in 'type email address here' textbox and click [Try It]

post results here

By the way, the image you posted is for 'My computer'. Please post the image for 'Internet'

tochi

Thank you. I just want to confirm this, if i use my ISP's relayer, it should be good to send mails to external servers(Gmail,yahoo,etc)? is there any possibility that i can create my own relayer? Using ISP's relay to send emails is fine and usually your emails won't be considered spam. Most ISPs bl...

tochi

tochi wrote:In WireShark, log only SMTP traffic from that client to your hmailserver only.

I meant, "log only SMTP traffic to and from that client to your hmailserver only"

tochi

Let's start with SMTP logs. Just enable SMTP log in hmailserver. Choose a client which has least traffic with hmailserver. In WireShark, log only SMTP traffic from that client to your hmailserver only. For diagnostic purpose, it's best to install wireshark on hmailserver. If you have doubt, install ...

tochi

Can you use Wireshark to capture network packets and compare with hmailserver logs to see where the commands were delayed?

tochi

I still can't understand. If you disable POP3 A. there's no performance issue because total session count can't reach 300 B. when SMTP+IMAP session count is 300 (0 for POP3, disabled), all email operations are slowed down The answer is A or B or something else? @assorti, can you give an answer to t...

tochi

I still can't understand. If you disable POP3 A. there's no performance issue because total session count can't reach 300 B. when SMTP+IMAP session count is 300 (0 for POP3, disabled), all email operations are slowed down The answer is A or B or something else? @assorti, can you give an answer to t...

tochi

This also means your are operating very hard on the physical limit. I dont know. I if put all the peaces together from the last weeks investigation i think this is something you can work with. All the other approaches we tested had little to zero effect. *Your CPU usage is generally slow *Your RAM ...

tochi

@tochi But anyhow, it looks like a general Netwotk bandwich problem. The best thing IMHO assorti can do is upgrading he POP3-Clients to hMailServer connection to Gigaethernet. Or rewrite the whole Reportingprogram to a non SMTP/POP3 depended Client/Server software in c/c++ or python. If it's networ...

tochi

@tochi I think its not a simple thing in assortis case to setup a sane wireshark packet tracing environment. Keep in mind he has 450 internal LAN connected POP3-Clients which reacts (per macro i guess) i a special Email reaches the inbox generates an report and sends back to hMailServer. I think it...

tochi

Bandwich on peaks You say your LAN is connected with 100 MBit's to your hMailServer which is equally to 12,5 MBytes per second. I think this could also be an bottleneck if 450 POP3 Clients connecting simultanously and fetching the same EMail+Attachements. Maybe you can change your 450 Thunderbird c...

tochi

@assorti As you can see, you are allready on the 11 MBits cab which is nearly the maximum (12,5 MBits) for Fastethernet 100. I bet you will get a dramatically boost if you use a Gigabit Ethernet Networkcard and migrate your entire LAN to Gigabit Ethernet as well. Maybe you LAN is allready GB Ethern...

tochi

@assorti Just for clarification: How do you test the 300 connection slow down symptoms? Do you have a special kind of software which stresstest your hMailServer? How can you distinct between the SMTP, POP3 or IMAP interferrence? As far as i know your SMTP port 25 performance is excellent but your I...

tochi

@assorti Just for clarification: How do you test the 300 connection slow down symptoms? Do you have a special kind of software which stresstest your hMailServer? How can you distinct between the SMTP, POP3 or IMAP interferrence? As far as i know your SMTP port 25 performance is excellent but your I...

tochi

Can you show me how your typical POP3 client is configured? I still can't understand. If you disable POP3 A. there's no performance issue because total session count can't reach 300 B. when SMTP+IMAP session count is 300 (0 for POP3, disabled), all email operations are slowed down The answer is A or...

tochi

When you encounter slowness issue, enable SMTP log and send a test mail. Make that email unique with either unique sender or unique receiver so log entries for it can be easily found. Post log entries for sending it here. I want to see exact which command is delayed. The POP3 session count is alway...

tochi

@Tochi All you asked was allready checked before. And its not an Problem to Internet connection speed because the slowness occurs in its internal company network. Windows Client Computers accessing this hMailServer on a 100 MBit's LAN logging in into the Server with Thunderbird, Webmail or Outlook ...

tochi

When you encounter slowness issue, enable SMTP log and send a test mail. Make that email unique with either unique sender or unique receiver so log entries for it can be easily found. Post log entries for sending it here. I want to see exact which command is delayed. The POP3 session count is alway...

tochi

When you encounter slowness issue, enable SMTP log and send a test mail. Make that email unique with either unique sender or unique receiver so log entries for it can be easily found. Post log entries for sending it here. I want to see exact which command is delayed. The POP3 session count is always...

tochi

https://www.hmailserver.com/documentation/latest/?page=internals_commandhandlers 'I/O Completion Ports' (IOCP) are used starting from ver 4.3. Any single thread here can process requests from multiple connections. According to Microsoft, The best overall maximum value to pick for the concurrency va...

tochi

I've collected these spamming domains.
viewtopic.php?f=22&t=29184&p=182719&hilit=top#p182719

tochi

Your 'Max number of command threads' value is ridiculous high. With E5-2620 (6C12T), the value should be 12 or less.

tochi

Many companies have their mail servers hosted by Office 365 mail. Any single SMTP server there may serve for many domains. We may send emails to 3 of our clients who all have their mail hosted. If we send 7 emails to each domain, we are creating 21 concurrent connection to 1 server and cause the 421...

tochi

There's no more error after 14:30 local time when we were still sending lots of emails. All new and retrying emails went through miraculously. The delivery thread count was still 1000.
It made me believe that someone in Office 365 mail team made a stupid mistake which was fixed 8 hours later.

tochi

ok. I thought I can set limit by domain now.
Since the popular Exchange has the limit, I really think hmailserver should have the setting for sending too.

tochi

jimimaseye wrote:I would think the idea of a domain specific limit would be a non-starter.

How do I configure this in hmailserver settings?

tochi

Then we need per-source limit setting in future release and I think it's very important. When all available delivery threads were used for sending emails to Microsoft servers, all other emails have to wait, both sending and receiving. And somehow those threads were simply occupied by Microsoft for l...

tochi

I've increased the delivery threads from 10 to 30 because our connection speed was upgraded. But I noticed the email delivery through put is decreasing instead of increasing during peak hours. I reviewed the log and found there are many error messages. RECEIVED: 421 4.3.2 The maximum number of concu...

tochi

You can setup Microsoft server cluster to address the single machine failure issue. Though hmailserver doesn't support cluster directly, the generic cluster function is good enough. Mail server is not a computing resource intensive application. Server load won't be an issue unless its load is extrem...

tochi

I don't think scaling out is a good idea when you can scale up. I believe hmailserver in one machine is capable of handling usual load if the server is not processing millions of emails per day. I like hmailserver because it's free, simple and efficient! I don't want to it to become too complex like...

tochi

I have no idea what's going wrong. But the internal MX test is no longer relevant because senders from outside can successfully resolve the domain to correct host and ip.

tochi

When running diagnostic, choose your correct domain.

tochi

looking up MX hosts on domain "burkechristiantours.com" webserver.burkechristiantours.com[24.240.169.250] If 24.240.169.250 is the public IP of your mail server, your DNS settings are correct. Have you created your domain burkechristiantours.com under Domains node? Are there other domain under Domai...

tochi

How will your hmailserver be used?

If it's for sending emails only, just ignore MX stuff.

If it's for sending and receiving, what's your domain? service.local doesn't look like a valid domain.

tochi

I never used hms as a production mailserver, but if a Windows program (like hms) calls an external program as child process, it can harm the parent process in many ways. So your observation makes sense and you need an Avast update or configure Avast as Service. I believe he's talking about this pos...

tochi

Yes. You can add whatever signatures you want. Just remember don't set update interval shorter than 1 hour.
In my experience, Clam AV can hardly detect any virus with its own database. But it has never had false positive either. It doesn't hurt to keep updating its signatures.

tochi

Maybe you can write a simple batch file wrapper to work around this.

tochi

I use Clam AV (not Clam Win) and installed it as a service with no issue at all. Though I forgot how I installed it as a service. Probably I did it with NSSM. Have you enabled foxhole_all.cdb? According to SaneSecurity descriptions, it should be able to detect .bat and .cmd. Make sure your ClamSup.i...

tochi

viewtopic.php?t=23279

tochi

Maybe you don't have to block all zip files. With Clam AV and SaneSecurity def. you can choose different protection levels. For example, you may want to allow zip files which contain no dangerous file types (.exe, .scr....). Please see the link. https://www.hmailserver.com/forum/viewtopic.php?f=7&t=...

tochi

Add
DisableAUTHList=25 in [Settings] section in your hmailserver.ini in C:\Program Files (x86)\hMailServer\Bin folder.
If there's no [Settings] section, create one.

Code: Select all

[Settings]
DisableAUTHList=25

Restart hmailserver after making the change.

It greatly reduces the ban list in my case.

tochi

There's a topic for that.
https://www.hmailserver.com/documentati ... d_for_spam
'abuse' is the account which was hacked if you need quick answer.

tochi

It looks like that your certificate was not properly configured. The extension of the Certificate file is usually .crt. The content of Certificate file should look like -----BEGIN CERTIFICATE----- MIIFRoooooooooooooRANDOMtextxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx ... oooooooooooooRANDOMtextxxxxxxxxxxx...

tochi

It's possible that antivirus intercepts network traffic and causes the issue. To make sure it's not the case, please run the following commands. C:\>tasklist | find "hMailServer.exe" hMailServer.exe 2196 0 181,108 K 2196 is the process ID of hMailServer.exe (case sensitive) Replace 2196 with the val...

tochi

I can visit the page by the link. No, I didn't log on to Godaddy. But you may use google to search the following text. The desired link should be at the top of the results.

Why aren't my email messages being sent on my VPS or Dedicated Server?

tochi

https://www.godaddy.com/help/why-arent- ... erver-1167

Search found 278 matches