Search found 682 matches

by palinka
2019-06-16 20:38
Forum: Scripting
Topic: Firewall Ban
Replies: 3
Views: 93

Re: Firewall Ban

Web version 0.003 with geoip lookup links on IP addresses. :mrgreen:
by palinka
2019-06-16 17:02
Forum: Scripting
Topic: Firewall Ban
Replies: 3
Views: 93

Re: Firewall Ban

Fixed up the website part, which is attached. Can sort and search.
by palinka
2019-06-16 02:41
Forum: General discussions
Topic: SPAM - SCAM - PSHING - HMAIL SERVER !!!NEED HELP!
Replies: 8
Views: 170

Re: SPAM - SCAM - PSHING - HMAIL SERVER !!!NEED HELP!

mattg wrote:
2019-06-16 01:22
(Lets be honest, if you have an account called test, the password is also going to be test)
NO!!!!! It's "password". :mrgreen:
by palinka
2019-06-15 21:41
Forum: Scripting
Topic: Firewall Ban
Replies: 3
Views: 93

Re: Firewall Ban

Its working nicely so far. I made a couple of improvements. Also, I knew I was missing something from Eventhandlers.vbs in the post above. Like I said, I pieced together some of Soren's stuff which I had in my Eventhandlers.vbs but due to my inexperience, overlooked a couple of important things that...
by palinka
2019-06-14 18:22
Forum: Scripting
Topic: Firewall Ban
Replies: 3
Views: 93

Firewall Ban

I'm giving a run at a simple firewall ban script. 1) create table on hmailserver: hm_fwban 2) trigger records IP and reason to db 3) powershell script run by task scheduler 1) checks new IPs on db and adds each IP as a rule to windows firewall, and 2) checks db for IP entries older than __ days and ...
by palinka
2019-06-13 13:21
Forum: General discussions
Topic: my ip is getting auto ban several times in a day
Replies: 15
Views: 207

Re: my ip is getting auto ban several times in a day

Did you check your logs for outside IPs?
by palinka
2019-06-13 13:08
Forum: General discussions
Topic: my ip is getting auto ban several times in a day
Replies: 15
Views: 207

Re: my ip is getting auto ban several times in a day

Looks good. But seeing the wan ip there is very strange. Can you look in your logs to see if ANY outside IP has ever contacted you? Or is it strictly your WAN IP and localhost? Are you in a DMZ?
by palinka
2019-06-13 12:14
Forum: General discussions
Topic: my ip is getting auto ban several times in a day
Replies: 15
Views: 207

Re: my ip is getting auto ban several times in a day

My WAN IP get banned Users get banned. Create an IP range for your wan ip and set it to 25 (higher than autoban 20). The next time someone starts trying to guess user/pass, that user - nonexistent or otherwise - will get banned without affecting any other operations. Also, as Matt said, change your...
by palinka
2019-06-13 02:57
Forum: General discussions
Topic: my ip is getting auto ban several times in a day
Replies: 15
Views: 207

Re: my ip is getting auto ban several times in a day

You said earlier 'and for the past days my ip address is getting auto -ban each day' That doesn't appear to be the case when your screen shot was taken. There are no autobans then. When you get an autoban, what IP address is it for? is it YOUR ip address What is the IP address getting banned? WAN I...
by palinka
2019-06-13 01:05
Forum: Scripting
Topic: How to debug scripts?
Replies: 21
Views: 298

Re: How to debug scripts?

Glad it worked for you :-) I've been off-line all day due to a ligntening storm this morning. My DSL box got fried and aparently also the port it was connected to in my Cisco switch. Went to the ISP to get a new but they were fresh out so had to accept a later model second-hand box. Turns out probl...
by palinka
2019-06-12 18:34
Forum: Development & alpha discussions
Topic: HMailserver HIDDEN settings
Replies: 6
Views: 2961

Re: HMailserver HIDDEN settings

I think auto forwarding and doesn't work for rule based forwarding. (Might be wrong though). this is true as i also understand. rule based forwarding writes account address where rule is fired as FROM in envelope. thread here : http://www.hmailserver.com/forum/viewtopic.php?f=7&t=34026 RvdH might h...
by palinka
2019-06-12 14:08
Forum: Development & alpha discussions
Topic: HMailserver HIDDEN settings
Replies: 6
Views: 2961

Re: HMailserver HIDDEN settings

RewriteEnvelopeFromWhenForwarding=1 ; Defaults to 0 or disabled. ; This will rewrite the FROM envelope of an email message when forwarding it on to another address. ; The default is to retain the original FROM address (potentially causing SPF checking failures by the forward address server). There ...
by palinka
2019-06-12 10:54
Forum: Scripting
Topic: How to debug scripts?
Replies: 21
Views: 298

Re: How to debug scripts?

fatman45 wrote:
2019-06-11 19:03
Server address and Name on the status page are both blank - not sure why.
Interesting. I just looked at mine.
Server address: localhost
Name: hmailserver

I don't know how those are derived.
by palinka
2019-06-12 10:36
Forum: General discussions
Topic: M$FT Exchange Alternative
Replies: 6
Views: 132

Re: M$FT Exchange Alternative

Hmailserver + horde is a powerful combo. Syncs contacts, calendar, tasks, notes and other things via activesync. It syncs flawlessly with outlook and android. I love it.
by palinka
2019-06-11 18:36
Forum: Scripting
Topic: How to debug scripts?
Replies: 21
Views: 298

Re: How to debug scripts?

There is also an error log (separate from the others). Anything in it?
by palinka
2019-06-11 12:08
Forum: Scripting
Topic: How to debug scripts?
Replies: 21
Views: 298

Re: How to debug scripts?

Neither of those messages shows up in the Event log! "DEBUG" 5336 "2019-06-10 16:52:49.804" "Adding task DeliveryTask to work queue SMTP delivery queue" "DEBUG" 4584 "2019-06-10 16:52:49.820" "Executing task DeliveryTask in work queue SMTP delivery queue" "DEBUG" 4584 "2019-06-10 16:52:49.820" "Del...
by palinka
2019-06-11 11:50
Forum: General discussions
Topic: (RULE) Only registered email addres can send email
Replies: 6
Views: 150

Re: (RULE) Only registered email addres can send email

Trust me, he wouldn't have posted it unless it's working.

You should enforce strong passwords even if you implement one if these scripts.
by palinka
2019-06-11 11:40
Forum: General discussions
Topic: Spamhaus Zen
Replies: 16
Views: 279

Re: Spamhaus Zen

Code: Select all

HMS Server Start Time: 2019-06-09 23:58:27
HMS Daily Spam Reject count: 0
HMS Daily Viruses Removed count: 0
Yeah, baby! :mrgreen:

I don't even remember a day without spam.

Thanks, guys!
by palinka
2019-06-09 00:03
Forum: Off-topic discussions
Topic: New kinda spammers?
Replies: 4
Views: 171

Re: New kinda spammers?

I imagine that's a pretty rare case. :mrgreen:
by palinka
2019-06-09 00:01
Forum: General discussions
Topic: Spamhaus Zen
Replies: 16
Views: 279

Re: Spamhaus Zen

i just reject them (+ Disconnect.exe) I downloaded your disconnect.exe but i don't know how to use it. Is there a thread with an explanation? Looks interesting. Also, i am banning spamhaus rejections. My ban list floats about 2,000 entries (7 day ban). The only performance hit that I've noticed is ...
by palinka
2019-06-08 23:55
Forum: General discussions
Topic: Spamhaus Zen
Replies: 16
Views: 279

Re: Spamhaus Zen

Ok cool. Thanks. I use the default hmailserver settings for spamcop scoring and i noticed that almost ALL of my false positives are from spamcop. I would never reject based on spamcop. That's why i was a little hesitant about adding more blacklists for outright rejection. Looks like lashback is a go...
by palinka
2019-06-08 20:35
Forum: General discussions
Topic: Spamhaus Zen
Replies: 16
Views: 279

Re: Spamhaus Zen

So i take it you guys are ok with rejecting these other lists? You both listed your functions for scoring, but didn't say what you actually did with the messages. Reject or score? If reject, have you come across any false positives (complaints about not receiving mail)? Also thanks for posting these...
by palinka
2019-06-08 14:56
Forum: General discussions
Topic: Spamhaus Zen
Replies: 16
Views: 279

Re: Spamhaus Zen

RvdH wrote:
2019-06-08 14:06
I use them all, although through SpamAssassin :)
Me too, but the goal is to not even receive any spam for SA to process. :mrgreen:

I want to break bayes through neglect. :lol:
by palinka
2019-06-08 14:53
Forum: Off-topic discussions
Topic: New kinda spammers?
Replies: 4
Views: 171

Re: New kinda spammers?

I haven't seen that yet but if it's going around I'm sure I'll see it sooner or later, so i implemented your script already. :D
by palinka
2019-06-08 14:02
Forum: General discussions
Topic: Spamhaus Zen
Replies: 16
Views: 279

Spamhaus Zen

Currently I'm using spamhaus to reject snowshoe spam, which is very effective. I'm considering expanding the rejection to other blacklists. Return Codes Contains 127.0.0.2 Direct UBE sources, spam operations & spam services 127.0.0.3 Direct snowshoe spam sources detected via automation 127.0.0.4-7 C...
by palinka
2019-06-08 01:33
Forum: Feature requests
Topic: HCD - SSL-Simplification with Letsencrypt
Replies: 12
Views: 224

Re: HCD - SSL-Simplification with Letsencrypt

Ok, i checked this mod_md option, but it doesn't work. Without Port forwarding or a public Domain Letsencrypt cant issue a SSL-Certificate, so this Feature for hMailServer can only be used with a public TLD-Domain. Its completely useless for cooperate hMailServers behind a NAT-Router with Dynamic I...
by palinka
2019-06-08 01:06
Forum: General discussions
Topic: Keep getting banned by hmailsever?
Replies: 13
Views: 332

Re: Keep getting banned by hmailsever?

Enable all logging and try again. Something is really messed up but more clues are necessary.
by palinka
2019-06-07 17:58
Forum: User-submitted tutorials
Topic: HOW TO: Ready-To-Go Backup and Cleardown script
Replies: 151
Views: 26409

Re: HOW TO: Ready-To-Go Backup and Cleardown script

Interesting read but I’m wondering if beating the server back into submission has any side effects on data quality or stability. The question is why does the API to stop hang in the first place? I haven't experienced any issues. Likely caused by this: https://www.hmailserver.com/forum/viewtopic.php...
by palinka
2019-06-07 13:36
Forum: General discussions
Topic: Not receiving mail
Replies: 14
Views: 231

Re: Not receiving mail

For my server +2 in the spam score :twisted: Me too. Plus i noticed that a lot of bot spam comes in on residential IPs with FQDN in helo as i showed for mine. They pass reverse DNS check. So i check helo for IP matches within the helo. If there's a match, i reject. "Real" mail servers don't have he...
by palinka
2019-06-07 12:59
Forum: General discussions
Topic: Not receiving mail
Replies: 14
Views: 231

Re: Not receiving mail

SMTP Banner Check Reverse DNS does not match SMTP banner <- Bad HELO Not necessarily. I recently learned that PTR resolves to an FQDN that your ISP has assigned to you. Checking PTR wil tell you for sure. The fix is to ask your ISP to update their DNS to reflect your mx FQDN. For example, I'm on a ...
by palinka
2019-06-07 12:28
Forum: Feature requests
Topic: HCD - SSL-Simplification with Letsencrypt
Replies: 12
Views: 224

Re: HCD - SSL-Simplification with Letsencrypt

Great idea. Validation could be an issue if Apache or iis are working on the same machine. Can letsencrypt validate on alternate ports? Like 81 or 8081?
by palinka
2019-06-07 02:02
Forum: General discussions
Topic: hMailServer hangs on restarting via a script to reload certificate
Replies: 12
Views: 185

Re: hMailServer hangs on restarting via a script to reload certificate

So true to Windows, I did a reboot and for now the batch file seems to be working fine. However the script above is definitely creating an issue and still causing a hang (which then hangs the batch file also). I don't know what's with the script/API but it isn't happy about something which then mes...
by palinka
2019-06-06 17:12
Forum: General discussions
Topic: Keep getting banned by hmailsever?
Replies: 13
Views: 332

Re: Keep getting banned by hmailsever?

First, run this and post the results: https://www.hmailserver.com/forum/viewt ... 20&t=30914

Enable logging in settings > logging.
by palinka
2019-06-06 11:56
Forum: General discussions
Topic: Keep getting banned by hmailsever?
Replies: 13
Views: 332

Re: Keep getting banned by hmailsever?

Are you saying that hmailserver is crashing or there is a configuration problem that returning to default settings fixes?

Gmail and hotmail give reasons for rejecting mail. Have you enabled logging? Did you receive a bounced message?
by palinka
2019-06-06 02:42
Forum: Scripting
Topic: Sub Unsubscribe
Replies: 13
Views: 363

Re: Sub Unsubscribe

Spammers doing spam checks on people unsubscribing their spam mails ... who would have thought :roll: RFC6068 specify the layout of the MailTo: command and if they do not include "body=" or "subject=" then either they made provisions to receive the mail without triggering their SPAM system ... OR ....
by palinka
2019-06-05 23:01
Forum: General discussions
Topic: Mail blocked by Spamhaus
Replies: 18
Views: 416

Re: Mail blocked by Spamhaus

hmmm... never looked at this before. I just ran ptr against my host name and since I'm on a dynamic residential IP, it returned some gibberish my ISP gives as my FQDN. I'm using a relay so a ptr check against them must work fine since I don't get bounced messages. Still so much to learn, apparently....
by palinka
2019-06-05 22:47
Forum: Scripting
Topic: Sub Unsubscribe
Replies: 13
Views: 363

Re: Sub Unsubscribe

And don't forget this: If Not IsEmpty(sSubject) Then .Subject = sSubject Else .Subject = "Unsubscribe Me" End If If Not IsEmpty(sBody) Then .Body = sBody Else .Body = "This is an automated message generated by our unsubscriber algorithym. Please do not respond to this email as it will be ignored." E...
by palinka
2019-06-05 22:19
Forum: Scripting
Topic: Sub Unsubscribe
Replies: 13
Views: 363

Re: Sub Unsubscribe

Maybe a dumb question, buuutttt…..

Code: Select all

'        '   ==> This is the orginal inbound message ! <==
'        '   oMessage.Recipients(j).OriginalAddress may contain more that one address, process all of them.
Is there any chance that ANY original recipient could be from an outside domain?
by palinka
2019-06-05 11:56
Forum: General discussions
Topic: Mail blocked by Spamhaus
Replies: 18
Views: 416

Re: Mail blocked by Spamhaus

The only thing left is "If you are the administrator of the IP block of your mail server, simply change the DNS zone records in such a way that the rDNS query responds properly." Just make sure hmailserver settings > protocols > smtp > welcome message matches your mx record - mail.yourdomain.com or...
by palinka
2019-06-04 13:33
Forum: General discussions
Topic: Mail blocked by Spamhaus
Replies: 18
Views: 416

Re: Mail blocked by Spamhaus

SorenR wrote:
2019-06-04 13:12
You can ask Spamhaus to remove you from the PBL if you subscribe to "fixed IP" with your provider. I did ... and I'm gone :mrgreen:
I would, but I'm too cheap. The relay is less expensive than a static IP. Plus, they get to deal with reputational issues instead of me. :mrgreen:
by palinka
2019-06-04 11:12
Forum: General discussions
Topic: Mail blocked by Spamhaus
Replies: 18
Views: 416

Re: Mail blocked by Spamhaus

Only when i send email to HOTMAIL How do i disable spamhaus? I never even enabled it. :roll: If you sent mail to me you would be blocked AND receive a more generic message that wouldn't explain why you were blocked. Hotmail really did you a favor by telling you the exact reason why. You can't "disa...
by palinka
2019-06-03 17:45
Forum: General discussions
Topic: net_io_connectionclosed!
Replies: 2
Views: 109

Re: net_io_connectionclosed!

wayi wrote:
2019-06-03 12:10
127.0.0.1 localhost.com
localhost.com IS NOT localhost!
by palinka
2019-06-02 03:52
Forum: User-submitted tutorials
Topic: Hardening hMailServer - The ongoing saga!
Replies: 48
Views: 2441

Re: Hardening hMailServer - The ongoing saga!

This is pretty slick. I'm going to give it a shot. Thanks!
by palinka
2019-06-01 22:22
Forum: SpamAssassin implementation discussions
Topic: Spam Mail not detected by SpamAssassin
Replies: 7
Views: 263

Re: Spam Mail not detected by SpamAssassin

I get spoofed messages all the time.

"My Real Name" <randomuser@somespamdomain.com>

As Jimi said, we need all the headers.
by palinka
2019-06-01 22:11
Forum: User-submitted tutorials
Topic: Hardening hMailServer - The ongoing saga!
Replies: 48
Views: 2441

Re: Hardening hMailServer - The ongoing saga!

That also matches: IPAddress = "193.126.23.235" HELO = "[193.126.23.235]" Which is allowed, see RFC2821 4.1.3 But i think this will do to filter out ip4 and ip6 adresses between brackets strRegEx="^(?!(?:\[)(?:(?:ipv6.+)|(?:[0-9]{1,3}[.-]){3}[0-9]{1,3})(?:\])$)" &_ "((" & a(0) & "|" & a(1) & "|" & ...
by palinka
2019-06-01 00:05
Forum: SpamAssassin implementation discussions
Topic: Spam Mail not detected by SpamAssassin
Replies: 7
Views: 263

Re: Spam Mail not detected by SpamAssassin

When everything else is good (spf pass in this case), there's not much else to score. If it came from an actual spammer, the likely would be other rule hits, like helo not matching, relay in blacklist, etc. There was a recent discussion on the spamassassin mail list about the possibility of OCR'ing ...
by palinka
2019-05-31 12:15
Forum: General discussions
Topic: New hMailServer installation on Azure VM cannot connect to mail.hmailserver.com
Replies: 3
Views: 141

Re: New hMailServer installation on Azure VM cannot connect to mail.hmailserver.com

You can set smtp to any port you want but unless you can get it to port 25 somehow, nobody will ever receive your messages.

Search for port 25 outbound redirect service. There are a couple of free ones that might meet your needs if your volume is low enough to fit within their limitations.
by palinka
2019-05-31 03:51
Forum: General discussions
Topic: Lots of Random Users getting auto-banned
Replies: 21
Views: 375

Re: Lots of Random Users getting auto-banned

The higher the priority, the more precedence is taken. Therefore if a spammer from that ip uses another ip range with a higher priority, they'll get through. Your "internet" range is higher than 0 AND overlaps the ranges you set to 0, so they will get through on the internet range. Anyway, I'd just ...
by palinka
2019-05-31 00:48
Forum: General discussions
Topic: Blocking Spam Efficiently
Replies: 12
Views: 370

Re: Blocking Spam Efficiently

That was the link i meant to suggest. Good luck with everything. There's lots to learn here.
by palinka
2019-05-31 00:13
Forum: General discussions
Topic: Blocking Spam Efficiently
Replies: 12
Views: 370

Re: Blocking Spam Efficiently

Somewhere here there is a tutorial on installing spam assassin and running it as a service. I'd look for it but i have a kid concert to go to. Im sure you can find it easily enough.
by palinka
2019-05-30 23:48
Forum: General discussions
Topic: Blocking Spam Efficiently
Replies: 12
Views: 370

Re: Blocking Spam Efficiently

Looks like you're not running spamassassin. It will definitely flag those messages.

Here's a great how-to on training spamassassin. https://hmailserver.com/forum/viewtopic ... 20&t=26866
by palinka
2019-05-30 02:18
Forum: User-submitted tutorials
Topic: Hardening hMailServer - The ongoing saga!
Replies: 48
Views: 2441

Re: Hardening hMailServer - The ongoing saga!

It will be very difficult to target "FirstnameLastname" as you are bound to catch some innocent victims. I've been monitoring this (receiving notifications on a hit, but taking no action) and I'm getting nothing but VictoriasSecret and a couple other hams. No worky. :cry: However, I further tweaked...
by palinka
2019-05-29 17:33
Forum: Scripting
Topic: Sub Unsubscribe
Replies: 13
Views: 363

Re: Sub Unsubscribe

SorenR wrote:
2019-05-29 16:58
I've got something cooking on that matter as we speak ... Progress is however VERY slow as I've received 6 spam mails this month (!) with a "mailto" list thingy... :roll:
LOL me too. Not many spasms getting through since i implemented your rules. And 2 gorillion autobans. :mrgreen:
by palinka
2019-05-29 16:07
Forum: Scripting
Topic: Sub Unsubscribe
Replies: 13
Views: 363

Re: Sub Unsubscribe

The only reason you end up here is because the mail is tagged as SPAM... Do the "green thing" and whitelist in your SPAM handling - save some CPU cycles. :mrgreen: Yep. Sure enough. But fortunately, the unsubscribe that kicked off the thought process was to the spamassassin list, which kindly sent ...
by palinka
2019-05-28 19:19
Forum: Scripting
Topic: Sub Unsubscribe
Replies: 13
Views: 363

Re: Sub Unsubscribe

Just got my first hit. Confirmed working. Original recipient of the message that triggered the rule became the sender of the unsubscribe message. :D
by palinka
2019-05-28 15:07
Forum: Scripting
Topic: Sub Unsubscribe
Replies: 13
Views: 363

Re: Sub Unsubscribe

OK, I'm not very good at this. Finally got some hits. Was getting mismatch errors on Lookup. Also sorted out the recipient as unsubscriber sender. Had the wrong syntax. These things are corrected below. Should be working now. Thanks again to Soren for this awesome and very useful script. All I did w...
by palinka
2019-05-26 14:57
Forum: Scripting
Topic: Sub Unsubscribe
Replies: 13
Views: 363

Re: Sub Unsubscribe

I realized the when I changed the sender address to the original recipient that the postmaster would not be copied, so I added that. Here's the whole thing including rule to call and functions that were not shown. My changes to Soren's excellent and working script are un-tested so far (haven't recei...
by palinka
2019-05-26 07:37
Forum: Scripting
Topic: Sub Unsubscribe
Replies: 13
Views: 363

Re: Sub Unsubscribe

I think this may work. Still not sure if I'm using the correct recipient object. Sub Unsubscribe(oMessage) ' ' RFC6068 The 'mailto' URI Scheme: subject, cc, bcc, in-reply-to, body etc.. ?first &second &third etc... ' Const m_To = "List Administrator" Const m_Sender = "Unsubscriber Daemon" ' Const m_...
by palinka
2019-05-25 15:43
Forum: Scripting
Topic: Sub Unsubscribe
Replies: 13
Views: 363

Sub Unsubscribe

First, this doesn't have its own topic, so now it does (was buried within other topics). Now, I've been using this for a while and it works well. However, I noticed a couple of things. 1) Some unsubscribes require the recipient address. Original script has a set from address (unsubscribe@mydomain.tl...
by palinka
2019-05-24 12:51
Forum: SpamAssassin implementation discussions
Topic: Forward SPAM mails from spam assassin to another account with SAPM HEADER
Replies: 2
Views: 117

Re: Forward SPAM mails from spam assassin to another account with SAPM HEADER

Hi Guys, I have recently implemented spam assassin in my organisation. It seems like working fine so far by tagging all suspicious mails as SPAM HEADER. But my main intention is to forward all SPAM mails to separate account instead before reaching to mailbox of employees, So, our system admin can m...