many thanks. I really do appreciate the help.
I have completely disabled this account for tonight. Will monitor the server and see how it goes.

have a nice evening

Hi,

Many thanks. Will do and watch the situation. Yes, it is a NAS device. In the worst case I might even stop it from accessing the mail server at this point.
May I ask how did you specify exactly which account might be causing the issue ?

regards

sorry, changing the font color didn't work. below are examples of the fake accounts from the posted log:

leivisonviana@talia.systems
lelek1978@talia.systems
esi2001@talia.systems

We don't have any of those accounts within our talia.systems domain.

Here is some log samples, fake e-mail addresses highlighted: "SMTPD" 2080 52721398 "2020-05-07 00:10:46.804" "171.35.169.187" "SENT: 220 Welcome to talia.systems." "SMTPD" 2084 52721398 "2020-05-07 00:10:47.429" "171.35.169.187" "RECEIVED: EHLO mail.talia.systems" "SMTPD" 2084 52721398 "2020-05-07 0...

Hey, I'm just trying to figure out how to solve the issue we are having, and I really don't have experience with hmailserver or its scripts/logs, and I have not been offensive so i'm not sure why are you taking it personally.
I do genuinely need help with the issue.

thanks anyway

Here is what I have in EventHandlers: ' Sub OnClientConnect(oClient) ' End Sub ' Sub OnSMTPData(oClient, oMessage) ' End Sub ' Sub OnAcceptMessage(oClient, oMessage) ' End Sub ' Sub OnDeliveryStart(oMessage) ' End Sub ' Sub OnDeliverMessage(oMessage) ' End Sub ' Sub OnBackupFailed(sReason) ' End Sub...

Hi, Thank you very much for the quick response. Our hmailserver is version 5.6.4-B2283, running on Windows Server 2012r2. - Was the spammer using the authenticated accounts (From) e-mailadres? Or just random (non-existing) names? I see a lot of ramodon-names@our.domain. So the domain looks correct, ...

Hi Guys, I really need some help on this. We have an hmail server that we use for our OTRS ticketing system, and for our devices (routers, switches, servers, scanners, ... etc) to send notifications. The problem I see is that there are many unknown users (no account on the server) using this mail se...

Hi Guys,

Could you please post the latest update of the script with support for APIv2.

Also (a beginner's question) this is to be saved as .vbs file along with the other Hmail scripts, correct ?

Thanks