Search found 41 matches

by ashtec014
2019-12-14 09:03
Forum: User contributed hMailServer 5 scripts
Topic: SpamAssassin Bootcamp (sa-learn) train BAYES
Replies: 142
Views: 62149

Re: SpamAssassin Bootcamp (sa-learn) train BAYES

You call it like this in windows scheduler: "cscript.exe" C:\path\sa-learn.vbs schtasks /create /ru "SYSTEM" /tn "SA learn" /tr "\"cscript.exe\" C:\path\sa-learn.vbs" /sc DAILY /mo 1 This one works for me. I ran it via command prompt then attempted to run using windows scheduler and got the logs. T...
by ashtec014
2019-12-12 16:17
Forum: User contributed hMailServer 5 scripts
Topic: SpamAssassin Bootcamp (sa-learn) train BAYES
Replies: 142
Views: 62149

Re: SpamAssassin Bootcamp (sa-learn) train BAYES

Should be 0 for no popup. Pop-up is still exist after reverting it back to 0. Are call it with cscript? If you use wscript you get popups. Unfortunately no script. I just normally called it thru windows scheduler. I have no idea how to use cscript. Can you please help me how? Thank you
by ashtec014
2019-12-12 14:45
Forum: User contributed hMailServer 5 scripts
Topic: SpamAssassin Bootcamp (sa-learn) train BAYES
Replies: 142
Views: 62149

Re: SpamAssassin Bootcamp (sa-learn) train BAYES

Also.... https://spamassassin.apache.org/full/3.0.x/dist/doc/Mail_SpamAssassin_Conf.html You can change the minimum if you need to, but I think it will work better with the default minimum of 200. I trust these guys to know what's best. :mrgreen: Regarding this one: bayes_min_ham_num (Default: 200)...
by ashtec014
2019-12-12 14:43
Forum: User contributed hMailServer 5 scripts
Topic: SpamAssassin Bootcamp (sa-learn) train BAYES
Replies: 142
Views: 62149

Re: SpamAssassin Bootcamp (sa-learn) train BAYES

palinka wrote:
2019-12-12 13:47
ashtec014 wrote:
2019-12-12 09:16
palinka wrote:
2019-12-11 19:18
Re the popup:

Code: Select all

Const Verbose         = 0
You have it set to 1, I believe.
Hi Palinka, I changed this to

Code: Select all

Const Verbose         = 1
but still I am getting the pop after running the task scheduler.
Should be 0 for no popup.
Pop-up is still exist after reverting it back to 0.
by ashtec014
2019-12-12 09:18
Forum: User contributed hMailServer 5 scripts
Topic: SpamAssassin Bootcamp (sa-learn) train BAYES
Replies: 142
Views: 62149

Re: SpamAssassin Bootcamp (sa-learn) train BAYES

Also.... https://spamassassin.apache.org/full/3.0.x/dist/doc/Mail_SpamAssassin_Conf.html bayes_min_ham_num (Default: 200) bayes_min_spam_num (Default: 200) To be accurate, the Bayes system does not activate until a certain number of ham (non-spam) and spam have been learned. The default is 200 of e...
by ashtec014
2019-12-12 09:16
Forum: User contributed hMailServer 5 scripts
Topic: SpamAssassin Bootcamp (sa-learn) train BAYES
Replies: 142
Views: 62149

Re: SpamAssassin Bootcamp (sa-learn) train BAYES

palinka wrote:
2019-12-11 19:18
Re the popup:

Code: Select all

Const Verbose         = 0
You have it set to 1, I believe.
Hi Palinka, I changed this to

Code: Select all

Const Verbose         = 1
but still I am getting the pop after running the task scheduler.
by ashtec014
2019-12-11 18:31
Forum: General discussions
Topic: Some spam email not mark as spam
Replies: 11
Views: 1532

Re: Some spam email not mark as spam

palinka wrote:
2019-12-11 17:23
I think there is a later version with more options.
Yeah, there's a new version 0.6.1 and I was able to implement it however I got no logs when trying to run, here is my post maybe someone can help me.
by ashtec014
2019-12-11 18:24
Forum: User contributed hMailServer 5 scripts
Topic: SpamAssassin Bootcamp (sa-learn) train BAYES
Replies: 142
Views: 62149

Re: SpamAssassin Bootcamp (sa-learn) train BAYES

Ok... Two steps forward and one step back... I suspect there continues to be an issue with curly brackets. Version 0.6.1 is back to creating HAM.CMD and SPAM.CMD that will copy mails to c:\spamassassin\temp\ham and c:\spamassassin\temp\spam. SA-LEARN.CMD does the actual learning. DO NOT forget to d...
by ashtec014
2019-12-11 17:20
Forum: General discussions
Topic: Some spam email not mark as spam
Replies: 11
Views: 1532

Re: Some spam email not mark as spam

I will try to setup this but not sure if the code provided by Soren is still working. He quoted here that the code in the very first post will probably not even work anymore after 5 years of Microsoft Updates. I will appreciate if you have the latest one to provide so I can copy and paste it on my ...
by ashtec014
2019-12-11 10:33
Forum: General discussions
Topic: Some spam email not mark as spam
Replies: 11
Views: 1532

Re: Some spam email not mark as spam

The spamassassin required sore is different from hms required score. And in the examples given spamassassin has performed as expected and not in question. Your setup is fine. The issue (if there is one) is the surbl and it's marking of Microsoft. Palinka days his lookup doesn't mark them. Maybe it'...
by ashtec014
2019-12-11 09:42
Forum: General discussions
Topic: Some spam email not mark as spam
Replies: 11
Views: 1532

Re: Some spam email not mark as spam

I noticed you rely on hmailserver's built-in surbl and dns tests. The default scores for these are sort of a leftover from the days before spamassassin came into wide use. Its easy to build up a high score over false positives. Spamcop, for example, is notorious for false positives. If I were you, ...
by ashtec014
2019-12-11 09:21
Forum: General discussions
Topic: Some spam email not mark as spam
Replies: 11
Views: 1532

Re: Some spam email not mark as spam

Using your example : Your firewall or forwarding device is showing smtp connection from 200.0.0.103 and is being considered as the connecting device: "SMTPD" 13756 841 "2019-12-10 14:32:06.197" "200.0.0.103" "SENT: 250-mail.mydomain.com[nl]250-SIZE 20480000[nl]250 HELP" "SMTPD" 8296 841 "2019-12-10...
by ashtec014
2019-12-10 18:55
Forum: General discussions
Topic: Some e-mail not being sent to spamassassin for scoring
Replies: 6
Views: 1033

Re: Some e-mail not being sent to spamassassin for scoring

just wanted to confirm the lower IP and Upper IP is the same as the IP of my internal router which is 200.0.0.103, right? Yes In addition, my internal router has a built-in Antivirus, Intrusion Protection and Web/DNS Filter, etc. I don't know if this has something to do with it. I'm pretty sure tha...
by ashtec014
2019-12-10 17:31
Forum: General discussions
Topic: Some spam email not mark as spam
Replies: 11
Views: 1532

Some spam email not mark as spam

Hi all, I've been monitoring my new hmailserver for more than a month now and I've seen that some spam emails are not being marked as spam by hmailserver or not classified as spam. Also, some legit emails are being marked as spam. I had the following setup from Jimi: 1. HOW TO run Clamwin and have a...
by ashtec014
2019-12-08 09:43
Forum: General discussions
Topic: Some e-mail not being sent to spamassassin for scoring
Replies: 6
Views: 1033

Re: Some e-mail not being sent to spamassassin for scoring

Something is happening with your internal router 200.0.0.103 I suspect that it is somehow intercepting traffic and monitoring it, and perhaps changing packets In addition, my internal router has a built-in Antivirus, Intrusion Protection and Web/DNS Filter, etc. I don't know if this has something t...
by ashtec014
2019-12-08 09:31
Forum: General discussions
Topic: Some e-mail not being sent to spamassassin for scoring
Replies: 6
Views: 1033

Re: Some e-mail not being sent to spamassassin for scoring

Something is happening with your internal router 200.0.0.103 I suspect that it is somehow intercepting traffic and monitoring it, and perhaps changing packets Try adding that ip address to your 'Incoming relays' and see what difference that makes if any. Hi Matt, thank you for your response. Intern...
by ashtec014
2019-12-02 16:14
Forum: General discussions
Topic: Some e-mail not being sent to spamassassin for scoring
Replies: 6
Views: 1033

Re: Some e-mail not being sent to spamassassin for scoring

Here is the sample logs that were successfully scored by spamassassin: "DEBUG" 14184 "2019-12-02 12:45:02.239" "Executing event OnClientConnect" "SMTPD" 11452 741 "2019-12-02 12:45:02.245" "200.0.0.103" "RECEIVED: EHLO STC-MMGW-01.mlsd.gov.sa" "DEBUG" 11452 "2019-12-02 12:45:02.245" "Executing event...
by ashtec014
2019-12-02 16:12
Forum: General discussions
Topic: Some e-mail not being sent to spamassassin for scoring
Replies: 6
Views: 1033

Some e-mail not being sent to spamassassin for scoring

Hello guys, I research for similar problem as mine and found this thread https://www.hmailserver.com/forum/viewtopic.php?t=27062 which is quite similar to my issue. Basically, some of emails are not being sent to spamassassin for scoring and it was saved automatically. Please see sample logs below s...
by ashtec014
2019-11-28 11:55
Forum: User contributed hMailServer 5 scripts
Topic: SpamAssassin Bootcamp (sa-learn) train BAYES
Replies: 142
Views: 62149

Re: SpamAssassin Bootcamp (sa-learn) train BAYES

The success of SpamAssassin relies on a well trained Bayes database. There are many ways to train your Bayes database, this is my shot at doing it. How to obtain SpamAssassin and the installation and configuration of SpamAssassin is NOT described here! Search elsewhere on this forum to obtain this ...
by ashtec014
2019-11-16 08:46
Forum: General discussions
Topic: Act as a MX backup
Replies: 3
Views: 912

Re: Act as a MX backup

For a backup MX you normally don't need anything except port 25. Go into Settings/Advanced/TCP Ports and get rid of everything except 0.0.0.0 / 25 / SMTP. That will stop any activity at all on 587 or 465. In addition, adding the (undocumented) setting DisableAUTHList=25 to the [Settings] section of...
by ashtec014
2019-11-16 07:54
Forum: User-submitted tutorials
Topic: Hardening hMailServer - The ongoing saga!
Replies: 66
Views: 32257

Re: Hardening hMailServer - The ongoing saga!

Only check PTR on port 25. The logic behind that is only "real" mailservers should be connecting on port 25 and all of them should have a valid PTR. If you check the PTR on submission ports or IMAP/POP3 ports, you'll be checking all kinds of legitimate mail clients and nearly none will pass the no/...
by ashtec014
2019-11-11 18:53
Forum: User-submitted tutorials
Topic: Hardening hMailServer - The ongoing saga!
Replies: 66
Views: 32257

Re: Hardening hMailServer - The ongoing saga!

Also, I just looked at my script and see that I did not strip out some of my custom stuff. This: If (oClient.Port = 25) Then If PTR_Record = "No.PTR.Record" Then Result.Value = 2 Result.Message = ". 03 Your access to this mail system has been rejected due to the sending MTA's poor reputation. If yo...
by ashtec014
2019-11-11 18:18
Forum: General discussions
Topic: Act as a MX backup
Replies: 3
Views: 912

Act as a MX backup

Hello Everyone, I hope someone can help me about hmailserver Act as a MX backup. I followed the documentation posted here: https://www.hmailserver.com/documentation/v4.2/?page=howto_act_as_mx_backup but I don't know if I did it right. [code]2019-11-11 Hmailserver: 5.6.7-B2425.16 DOMAINS (No Domains ...
by ashtec014
2019-11-11 17:43
Forum: User-submitted tutorials
Topic: Hardening hMailServer - The ongoing saga!
Replies: 66
Views: 32257

Re: Hardening hMailServer - The ongoing saga!

Fun with PTR. I've been using a variation of the above dynamic looking HELO filter for a while. Today I came up with an idea and I tested it out against banned IPs in my Firewall Ban project. Function PTRLookup(strIP) Dim strLookup, strPTR With CreateObject("DNSLibrary.DNSResolver") strLookup = .PT...
by ashtec014
2019-11-11 11:26
Forum: User-submitted tutorials
Topic: hMSLog2Ban - Logfile ip blocker
Replies: 36
Views: 11248

Re: hMSLog2Ban - Logfile ip blocker

hMSLog2Ban is a utility which detects a running hMailServer.exe and if its 32 or 64-Bit. I will find the correct hMailServer log file (without touching the COM API) and scans for "SENT: 550 Unknown user" pattern. if it finds the pattern, it will lookup the attacker ip address (IPv4 only right now) ...
by ashtec014
2019-11-07 10:45
Forum: General discussions
Topic: URGENT- please help, mail server sending spam
Replies: 86
Views: 15898

Re: URGENT- please help, mail server sending spam

Function LockFile(strPath) Const Append = 8 Const Unicode = -1 With CreateObject("Scripting.FileSystemObject") Dim oFile, i For i = 0 To 30 On Error Resume Next Set oFile = .OpenTextFile(strPath, Append, True, Unicode) If Not (Err.Number = 70) Then Set LockFile = oFile On Error Goto 0 Exit For End ...
by ashtec014
2019-11-04 15:35
Forum: General discussions
Topic: URGENT- please help, mail server sending spam
Replies: 86
Views: 15898

Re: URGENT- please help, mail server sending spam

Also, I got another script error: "ERROR" 4912 "2019-11-04 14:37:45.595" "Script Error: Source: Microsoft VBScript runtime error - Error: 800A01F4 - Description: Variable is undefined: 'LockFile' - Line: 186 Column: 4 - Code: (null)" Trying to include this one as well ' ' sType can be one of the fol...
by ashtec014
2019-11-04 08:50
Forum: General discussions
Topic: URGENT- please help, mail server sending spam
Replies: 86
Views: 15898

Re: URGENT- please help, mail server sending spam

Hi Soren, Thank you so much for your response. I have one more question, strRegEx = "(127\.0\.0\.1|mail\.mydomain\.se|\*\.\*|User|xxx\.xxx\.xxx\.xxx|ylmf-pc|info-api\.ru)" 'my ip xxx.xxx.xxx.xxx - this code states that I need to replace my IP. I don't know if I am doing it right. I replace xxx.xxx.x...
by ashtec014
2019-11-03 18:32
Forum: General discussions
Topic: URGENT- please help, mail server sending spam
Replies: 86
Views: 15898

Re: URGENT- please help, mail server sending spam

Function Lookup(strRegEx, strMatch) : Lookup = False If strRegEx = "" Then Exit Function With CreateObject("VBScript.RegExp") .Pattern = strRegEx .Global = False .MultiLine = True .IgnoreCase = True If .Test(strMatch) Then Lookup = True End With End Function Hi Soren, Where do I need to put this? D...
by ashtec014
2019-11-03 18:23
Forum: General discussions
Topic: URGENT- please help, mail server sending spam
Replies: 86
Views: 15898

Re: URGENT- please help, mail server sending spam

I use OnHELO with one of SorenR scripts. Sub OnHELO(oClient) ' ' Exclude local LAN from test ' If (Left(oClient.IPAddress, 8) = "192.168.") Then Exit Sub If (Left(oClient.IPAddress, 9) = "127.0.0.1") Then Exit Sub strRegEx = "(127\.0\.0\.1|mail\.mydomain\.se|\*\.\*|User|xxx\.xxx\.xxx\.xxx|ylmf-pc|i...
by ashtec014
2019-11-03 17:56
Forum: General discussions
Topic: URGENT- please help, mail server sending spam
Replies: 86
Views: 15898

Re: URGENT- please help, mail server sending spam

You need to use RvdH's custom edition with "Sub OnHELO" ... I believe I have remembered it all. It's pretty much cut'n paste from my live eventhandler. The Wait() function is dependant on your OS, choose the version that works. "Timeout" = 2003 R2 and maybe 7, "sleep" = XP SP3 and "powershell" ... ...
by ashtec014
2019-11-02 11:14
Forum: General discussions
Topic: Configure Server properly - Blacklisted by spamhouse
Replies: 20
Views: 4053

Re: Configure Server properly - Blacklisted by spamhouse

Hi Everyone, I would like to give you an update about my hmailserver issue. After communicating with our network admin who manage our network firewall, we were able to fix the issue. It has something to do with the firewall configurations/policy/routing profiles. Basically, there was a botnet runnin...
by ashtec014
2019-10-17 12:42
Forum: General discussions
Topic: Configure Server properly - Blacklisted by spamhouse
Replies: 20
Views: 4053

Re: Configure Server properly - Blacklisted by spamhouse

(This is not normal. Figure out why your gateway isn't simply forwarding port 25 smtp requests). This is often because the router is 'inspecting' smtp mail with an Antivirus or as an edge device... I'm guessing that because you keep getting blacklisted that you have a bot on your network that is us...
by ashtec014
2019-10-17 10:59
Forum: General discussions
Topic: Configure Server properly - Blacklisted by spamhouse
Replies: 20
Views: 4053

Re: Configure Server properly - Blacklisted by spamhouse

They are spam bots. Everyone has them. The problem here is that you cannot ban them to stop them because all incoming connections are being registered as your gateway address. (This is not normal. Figure out why your gateway isn't simply forwarding port 25 smtp requests). [Entered by mobile. Excuse...
by ashtec014
2019-10-17 10:41
Forum: General discussions
Topic: Configure Server properly - Blacklisted by spamhouse
Replies: 20
Views: 4053

Re: Configure Server properly - Blacklisted by spamhouse

Lower and Upper ip address needs to be the same 200..... [Entered by mobile. Excuse my spelling.] Thank you Jim. I changed it and this is now my current configurations: [code]2019-10-17 Hmailserver: 5.6.7-B2425 DOMAINS "Domain1.com" - arxxxxxx.com Enabled: True SIGNATURE LIMITS DKIM ADVANCED Enable...
by ashtec014
2019-10-17 10:36
Forum: General discussions
Topic: Configure Server properly - Blacklisted by spamhouse
Replies: 20
Views: 4053

Re: Configure Server properly - Blacklisted by spamhouse

Lower and Upper ip address needs to be the same 200..... [Entered by mobile. Excuse my spelling.] Thank you Jim. I changed it and this is now my current configurations: [code]2019-10-17 Hmailserver: 5.6.7-B2425 DOMAINS "Domain1.com" - arxxxxxx.com Enabled: True SIGNATURE LIMITS DKIM ADVANCED Enable...
by ashtec014
2019-10-17 10:27
Forum: General discussions
Topic: Configure Server properly - Blacklisted by spamhouse
Replies: 20
Views: 4053

Re: Configure Server properly - Blacklisted by spamhouse

Create a third ip range from / to 200.0.0.103 and set the priority as 25. Use the same values as the 127.0.0.1 range. Given that all incoming connections are registering add this same address then external Autoban will not happen. [Entered by mobile. Excuse my spelling.] Hi Jim, thank you. Am I doi...
by ashtec014
2019-10-17 10:16
Forum: General discussions
Topic: Configure Server properly - Blacklisted by spamhouse
Replies: 20
Views: 4053

Re: Configure Server properly - Blacklisted by spamhouse

0.0.0.0 / 25 / SMTP - StartTLS Required !! External Email Blocked !! 1, Do you see this warning? Change it to starttls optional. 2, From the logs above: presumably 200.0.0.103 is not known to you. In this case don't worry about it. It's standard. Just someone trying to connect that is not authorise...
by ashtec014
2019-10-17 08:57
Forum: General discussions
Topic: Configure Server properly - Blacklisted by spamhouse
Replies: 20
Views: 4053

Re: Configure Server properly - Blacklisted by spamhouse

I temporarily change the Internet Range to 25 and My Computer to 30 and it is now working, however my problem is, getting a lot of these things and thats where my IP block by spamhouse. As for the question of Jimmi about our IP, Yes it is static IP and have reverse DNS thru our ISP provider: "SMTPD"...
by ashtec014
2019-10-17 08:38
Forum: General discussions
Topic: Configure Server properly - Blacklisted by spamhouse
Replies: 20
Views: 4053

Re: Configure Server properly - Blacklisted by spamhouse

Hello Guys, Thank you for your prompt response. I followed all your recommendation and changed it as of this writing. However, when I change the IP range of Internet to 15, I got this error: https://snipboard.io/zGXFnD.jpg I tried to do the testing again as of this posting but I got an error: "Timeo...
by ashtec014
2019-10-16 18:56
Forum: General discussions
Topic: Configure Server properly - Blacklisted by spamhouse
Replies: 20
Views: 4053

Configure Server properly - Blacklisted by spamhouse

Hello, I am hoping that someone can help me. I spent many days to browse related issue as mine. I followed settings recommended here but no luck. I am having trouble with my server and can't figure out what's going on. Our IP address is always blacklisted by spam-house, I knew that my configuration ...