hMailServer forum

^DooM^

Logs are only normally used for troubleshooting purposes.

There are AWStats logs for statistical purposes and mailservers are not normally restarted that often. As Matt says, if you let us know what you are trying to achieve we can perhaps help you better.

^DooM^

Probably better to setup a test server on a pc/laptop and import the data, then connect to both servers with an imap client and drag/drop the emails from one server to another.

That's the way i moved data from an old server over to hmail many moons ago.

^DooM^

Sweet

^DooM^

mattg wrote:Are you accepting donations again?

A good question. Martin are you going to monetize hMail? In the past you have always stayed away due to tax issues etc.

^DooM^

http://www.hmailserver.com/forum/viewto ... 20&t=25092

^DooM^

For #5 you could setup a route to your VPS (See docs on routes) Then setup a global rule that states Message size > 0 Forward to route (Select the route you setup earlier) Stop rule processing This should forward the email to your VPS and allow the email to hit the current mailbox on your old server...

^DooM^

Set th epriority up on that internal range to 25 and let us know how you get on.

^DooM^

Not beein in the DB for a long time so working from emory here. So from what perspective? From a POP3 perspective sent emails would not have a hm_message row as the email would no longer reside on the server. If you are looking at imap sent then it would be stored along with the hm_accountid (or som...

^DooM^

Are you logging into a single pop3 account with multiple applications?

Have you set the connecting IP range for your internal ip's up to have a priority over 20?

^DooM^

Not at this time but what you can do is limit who can send to the distribution list to stop people abusing it. Another option is to just to have email to allstaff@ goto one email address (an admin) then have the admin send it on to a new distribution list of all users that is limited to a few sender...

^DooM^

If you are looping through recipients, the rule loop count is increased by one each time

^DooM^

If you have thousands of emails in there, you may be an open relay and be sending out spam. If so check your settings. If you only have a few in there, then that's normal. If they are old emails (check modified date for older than a few weeks) you can normally delete them but take a backup first jus...

^DooM^

VM's are cheap these days, just spool up another and run two instances of hMail.

^DooM^

most likely reason, all email is coming from 127.0.0.1 (sophos appliance) which does not have SPAM filtering enabled for on ip range

^DooM^

I used ghostfiles V3.1 here http://www.lowrieweb.com/products.htm

It's not free but it's dirt cheap. Runs as a service and does full mirroring both ways and is very fast, has web interface too.

^DooM^

Not sure what you are trying to achieve. Rules are ran in a linear fashion, so if you have your send via route before other rules everything will go there first and the other rules will probably never run.

^DooM^

If you are doing a backup MX option then you don't need real time replication.
I was doing realtime replication on my setup as i had users accessing both servers at the same time.

^DooM^

I have never had much luck with wildcard support in hMail. To select all emails I have used

If Messagesize > 0
send via route

That catches everything and is reliable.

^DooM^

I have ran single DB, Multiple hMail setups in the past and replicated the data directory. This worked well for me but there is still a single point of failure at the DB.

^DooM^

I ONLY want to get email from these 30 email addresses and reject all other email. Is there an easy way to do this? you can use a rule: criteria: from NOT contains address1@ OR from NOT contains address2@ OR from NOT contains addressX@ action : DELETE email That will also restrict users emailing ea...

^DooM^

That is why you see that email address in the first log. hMail is a threaded application whech means it can be doing many things at the same time and it will put that information into the log as soon as it's done that task. it's not a linear log in the fact that it will log one thread first before a...

^DooM^

Ask brighthouse to re-classify the ip as static else give you a refund.

^DooM^

We all have to endure these kinds of attacks now and again. Logs are good, no entry as of yet hmail is working correctly. Ban ip's at the firewall if you want them to stop, that's a firewall's job. If you are any good at scripting, you can have hmail add ip's to the firewall but that can also be ver...

^DooM^

Check the logs a little earlier, is there a mail from basaltcsnet@lycos.com in there?

^DooM^

Good idea, make it work the same way as AD

^DooM^

comp1mp wrote:BTW, installed hMailServer over 2 years ago, configured it and have not had to touch it since. You guys rock!

Probably needs an update then

^DooM^

http://www.hmailserver.com/forum/viewto ... 117#p68117

^DooM^

Matt is correct, the server accepted the email. After that it's no longer a hmail issue.

^DooM^

One of these scripts might help. Most spammers do not send as the authenticated user, they send as random from addresses. These scripts stop spammers send that manage to authenticate. It's not a fix but it's an additional tool to help.

http://www.hmailserver.com/forum/viewto ... 117#p68117

^DooM^

in that case, sweet, have at

I should read my own rules sometime (Assumption is the mother of all fuckups)

^DooM^

Matt that depends on how he is rejecting the emails. if he is just sending a 554 rejected on their email than great. But from the conversation it seemed like he would be actively generating emails to send back to them, that is backscatter, that wastes resources and is pointless.

^DooM^

Personally I think what you are doing is wrong and they wont give a toss and just delete your emails so you are both just wasting bandwidth and they will be more inclined to pass your email address on because of your aggressive approach. Better to ignore them completely and make like you don't exist...

^DooM^

That is unlikely to happen and sending them an email every time they send you one is considered backscatter. If they decide to be even bigger dicks and send you 1000 emails, then you will send 1000 right back at them. If they are sending on common IP's best is to just block them at the firewall, tha...

^DooM^

What hmail version are you using?

^DooM^

If spam assassin is flagging them, create an account rule to delete emails based on spamassassins header.

^DooM^

You should not be struggling with 1000 emails a day, that is not very much. hMail has been reported to handle a hell of a lot more than that in excess of 1 million with some hefty hardware. I would suggest upgrading the server you are hosting hmail on.

^DooM^

The attacker still has many login attempts, and then tries again with a new IP. And therein lies the problem. how DO you stop an attacker that has hundreds of unique ip's to attempt with and how do you distinguish the legitimate failures where people have forgotten their passwords or typo'd to the ...

^DooM^

this has been asked before. You MUST have at least 1 dot in a domain name with hMail.

^DooM^

Punycode to the rescue

^DooM^

I believe that is by design to save bandwidth. There is not much call to create three emails, when one will do with multiple recipients listed.

^DooM^

^DooM^ wrote:Have you taken a look at the router itself?

Login to the web panel and have a nose around.

^DooM^

Does the router have the ability to send out emails, like for events etc? Have you taken a look at the router itself?

^DooM^

http://www.hmailserver.com/devnet/?page=translation

^DooM^

percepts wrote:Transmitted message size is not exactly predictable.

Correct that is why they are sent in octets and not specific sizes.

^DooM^

Check for compromised accounts, there may be more than one. Use my log analyzer to help decode them http://log.damnation.org.uk Also install this script in hmail it will help with what you are seeing with the random usernames as the from address. http://www.hmailserver.com/forum/viewtopic.php?p=6811...

^DooM^

do not use md5 for storing passwords, it's an easy target these days with massive rainbow tables easily available. If you must use your script, use the proper salted sha256 method. I wrote some php code to do just that, help yourself. http://www.hmailserver.com/forum/viewtopic.php?p=128481#p128481 P...

^DooM^

I agree with Matt, opening up a firewall to an EXE is bad form. You should really only open up the ports required. Perhaps give the user the option on what they would like to open up on install would be the best solution.

^DooM^

I believe it has been this way for a long time before program data even existed within windows. I will assume that to preserve backwards compatibility it has never been changed. You are correct though, it should really be split up. This would make using DFS shares easy to manage.

^DooM^

This script should do what you want

http://www.hmailserver.com/forum/viewto ... 20&t=25124

^DooM^

hMail sends 500 code on transmission which is the correct procedure. it's up to the sending server to send the NDR to the user at that point. If hMail did send NDR's every time you were sent a mail to a mailbox that did not exist you could be classed as a spammer. This kind of email is also classed ...

^DooM^

If the email message was received by hMailServer but could not be saved in the database, this error message is sent to the client. To resolve this issue, the hMailServer logs leading up to the error needs to be analyzed. Normally an error message with more details will be logged when this error is r...

^DooM^

As a test, create a new home directory in IIS, extract a fresh web admin from your hmail installation folder and see if you still get the same issues.

^DooM^

you should ALWAYS restore to the same version that you backed up from. Well, I don't think it matters. It appears hMailServer cannot consume its own backup files, even within the same version (or I am not reading the restore error message correctly). Two domains and six years of messages are gone. ...

^DooM^

Check the web.config for any rewrite rules. back it up and remove them if their are any.

^DooM^

do you have url rewrite installed?

^DooM^

hahaha probably not

^DooM^

Watch out for the Scunthorpe Problem

^DooM^

If you are any goot at coding, you can do what I did and push the emails into a mysql database instead of to hMail, then using php (or your language of choice) pull X number of mails from the queue, rebuild the emails and send them to hMail with a scheduled task set to run every minute.

^DooM^

How did you setup the forward? hMail has anti flood protection that stops looping, it could be your setup is causing a loop. Try using an account rule instead.

If message size > 0
Forward email.

^DooM^

Would you like a refund?

Search found 13860 matches