Search found 19760 matches

by mattg
2019-06-26 01:01
Forum: Off-topic discussions
Topic: How to block SMTP attacks for sending multiple mails...
Replies: 8
Views: 96

Re: How to block SMTP attacks for sending multiple mails...

ves wrote:
2019-06-25 12:31
What do you will recommend as value ? I'm thinking that 5 should be ok ?
I run with 5 on my production machines
by mattg
2019-06-26 00:59
Forum: Development & alpha discussions
Topic: Unix style "tail -f" written in VBS.
Replies: 10
Views: 101

Re: Unix style "tail -f" written in VBS.

I think that is where it is headed...

I can't wait to get some time to play, could possibly read the log in real time from eventhandlers.vbs, and then create some AutoBans. Currently I parse the log every five minutes with a scheduled task...
by mattg
2019-06-26 00:56
Forum: General discussions
Topic: Potential Security Threat - Unique Names in IP Ranges
Replies: 5
Views: 54

Re: Potential Security Threat - Unique Names in IP Ranges

NetChain wrote:
2019-06-25 21:31
I didn't realized it until I tried to update the database directly...
You understand that direct manipulation of the database is NOT supported, right?
by mattg
2019-06-26 00:52
Forum: General discussions
Topic: Migrate database from SQLCE3.5 to SQLCE4.0
Replies: 1
Views: 41

Re: Migrate database from SQLCE3.5 to SQLCE4.0

MS SQL CE is rubbish Use a real database >> MS SQL Express or higher - Express is free to use to 4GB of database size, MySQL, MariaDB or PostGreSQL Backup hMailserver using built in tools and ALL options selected including compression set up new database by running ./bin/dbsetup.exe Restore backup t...
by mattg
2019-06-25 16:04
Forum: General discussions
Topic: SPAM - SCAM - PSHING - HMAIL SERVER !!!NEED HELP!
Replies: 30
Views: 732

Re: SPAM - SCAM - PSHING - HMAIL SERVER !!!NEED HELP!

I ban for 7 days and typically have over 400 entries

Welcome to the world of being an email admin
by mattg
2019-06-25 11:23
Forum: Off-topic discussions
Topic: How to block SMTP attacks for sending multiple mails...
Replies: 8
Views: 96

Re: How to block SMTP attacks for sending multiple mails...

In Protocols >> SMTP >> RFC compliance

what do you have for 'Maximum number of invalid commands'?
by mattg
2019-06-24 23:47
Forum: General discussions
Topic: thunderbird client-hmailserver
Replies: 15
Views: 180

Re: thunderbird client-hmailserver

To be honest, I'm not sure that you meet the technical requirements to run a mailserver shown at the bottom of this page https://www.hmailserver.com/documentation/latest/?page=system_requirements It's not in the greater interest to have someone running a mail server from a VPS that they can turn on ...
by mattg
2019-06-24 15:41
Forum: Off-topic discussions
Topic: Mozilla has trashed firefox again
Replies: 11
Views: 495

Re: Mozilla has trashed firefox again

Waterfox has
TabmixPlus, FireFTP, NoScript, Roomy Bookmarks Toolbar + many more

Tried Pale Moon, moved on to Waterfox

Pretty happy with it
by mattg
2019-06-24 11:22
Forum: General discussions
Topic: Massive Attack from Brazil
Replies: 8
Views: 102

Re: Massive Attack from Brazil

Not affecting me (yet)

Is this only port 25, or are they trying other ports too?
by mattg
2019-06-24 11:17
Forum: General discussions
Topic: "Virus found" and completely disformatted Mails from Amazon & Paypal
Replies: 12
Views: 136

Re: "Virus found" and completely disformatted Mails from Amazon & Paypal

Sanesecurity has particularly signature sets for Paypal and Amazon (and Ebay) in their phish.ndb this may cause FPs and removal attempt by ClamAV if called directly by HMS, hence garbled body. ClamAV integrated in SA keeps the message as it is, but scores it and adds an informative header. a better...
by mattg
2019-06-24 06:47
Forum: General discussions
Topic: "Virus found" and completely disformatted Mails from Amazon & Paypal
Replies: 12
Views: 136

Re: "Virus found" and completely disformatted Mails from Amazon & Paypal

The words 'Virus Found' is probably prepended to the subject line by hMailserver.

Is that what you mean?
Or do you mean the subject line being UTF-8 originally?
by mattg
2019-06-24 04:34
Forum: General discussions
Topic: Rules processing (forward vs copy)
Replies: 8
Views: 186

Re: Rules processing (forward vs copy)

Thanks for the post back
by mattg
2019-06-24 02:47
Forum: General discussions
Topic: "Virus found" and completely disformatted Mails from Amazon & Paypal
Replies: 12
Views: 136

Re: "Virus found" and completely disformatted Mails from Amazon & Paypal

MOST Paypal emails (their regular newsletters and such) are always the same for me, shown as containing a virus that was removed
by mattg
2019-06-24 00:57
Forum: General discussions
Topic: How to migrate postboxes to second domain?
Replies: 5
Views: 100

Re: How to migrate postboxes to second domain?

looks about right
Try it
by mattg
2019-06-24 00:56
Forum: General discussions
Topic: Stop intruder
Replies: 26
Views: 275

Re: Stop intruder

Or ban at the edge of your network with a firewall appliance or in your modem / router
by mattg
2019-06-23 04:24
Forum: General discussions
Topic: hMailServer B2425 Anti-spam Whitelisting Failure
Replies: 23
Views: 252

Re: hMailServer B2425 Anti-spam Whitelisting Failure

All good and thanks for checking
You probably had the page that I've already changed.
by mattg
2019-06-23 02:31
Forum: General discussions
Topic: Stop intruder
Replies: 26
Views: 275

Re: Stop intruder

- ban all high spam score IPs That's an interesting one i hadn't considered before. In an effort to stop some backscatter, I accept all spam, without rejection. If the spamscore is high, I ban the IP and delete the message If the spamscore is medium (in the range where it might be SPAM or might be ...
by mattg
2019-06-23 00:18
Forum: General discussions
Topic: Stop intruder
Replies: 26
Views: 275

Re: Stop intruder

palinka wrote:
2019-06-22 17:53
Ace of spades :mrgreen:
Yep, I'm going with the rock band too
by mattg
2019-06-23 00:14
Forum: General discussions
Topic: hMailServer B2425 Anti-spam Whitelisting Failure
Replies: 23
Views: 252

Re: hMailServer B2425 Anti-spam Whitelisting Failure

Sent a couple of samples via PM

This is due to lack of SRS I think on the list server
by mattg
2019-06-22 11:07
Forum: General discussions
Topic: hMailServer B2425 Anti-spam Whitelisting Failure
Replies: 23
Views: 252

Re: hMailServer B2425 Anti-spam Whitelisting Failure

I checked my logs

Mail coming via incoming relays definitely get spam checked
by mattg
2019-06-22 06:50
Forum: General discussions
Topic: Stop intruder
Replies: 26
Views: 275

Re: Stop intruder

Did you ever succeed in doing this? no I just keep fine tuning my systems It is hard to allow genuine users through, but only block malicious users. Some things that I do - not allow PORT 25 AUTH at all - Force all connections to ONLY use only TLSv1.2 when the connection is secured - Force all conn...
by mattg
2019-06-22 06:29
Forum: General discussions
Topic: hMailServer B2425 Anti-spam Whitelisting Failure
Replies: 23
Views: 252

Re: hMailServer B2425 Anti-spam Whitelisting Failure

I don't consider incoming relays as safe. I have a server in my incoming relays list that is a list server. It doesn't do the forwarding correctly, and unless I include it in my incoming relays list, it triggers my SPF, DKIM & DNSBL antispam settings. By setting it as an incoming relay, hMailserver ...
by mattg
2019-06-22 01:52
Forum: User contributed hMailServer 5 scripts
Topic: Script to block or allow country connections
Replies: 46
Views: 8714

Re: Script to block or allow country connections

I just use zz.countries.nerd.dk as a DNS BL

That works for me
by mattg
2019-06-22 01:43
Forum: General discussions
Topic: Emails being delivered multiple times
Replies: 5
Views: 67

Re: Emails being delivered multiple times

I have this with ONE sender. Their server incorrectly assumes that a 30 second delay in delivering mail means that the connection has dropped and they send it again. My server responding with 'Quit' at the end is just lost to the ether. This is entirely due to a poorly set up server at the other end...
by mattg
2019-06-22 01:35
Forum: General discussions
Topic: hMailServer B2425 Anti-spam Whitelisting Failure
Replies: 23
Views: 252

Re: hMailServer B2425 Anti-spam Whitelisting Failure

Whitelisting an IP Range (or single IP Address) I have not yet had the use for since I control that in my "IP Ranges" settings. If the Whitelist IP Address range only cover the specified email address I have no knowledge of. Someone perhaps could test this. I have a vague recollection that being on...
by mattg
2019-06-22 01:19
Forum: General discussions
Topic: hMailServer B2425 Anti-spam Whitelisting Failure
Replies: 23
Views: 252

Re: hMailServer B2425 Anti-spam Whitelisting Failure

katip wrote:
2019-06-21 13:44
mattg wrote:
2019-06-21 11:07
Let me know which page you saw 'forwarding relay', and I will change it.
https://www.hmailserver.com/documentati ... itelisting
older versions too..
I can only change 'latest' page, but done.
Thanks for the link
by mattg
2019-06-22 01:13
Forum: General discussions
Topic: Stop intruder
Replies: 26
Views: 275

Re: Stop intruder

That's just what SPAMmers do. Not quite as bad as those who actively try to hack systems, or bring down systems by over abuse (DOS attacks and DDOS attacks), but yes certainly still a huge waste of resources. I reckon that I spend far more time fighting spam and blocking attacks than anything else a...
by mattg
2019-06-21 11:07
Forum: General discussions
Topic: hMailServer B2425 Anti-spam Whitelisting Failure
Replies: 23
Views: 252

Re: hMailServer B2425 Anti-spam Whitelisting Failure

'Incoming relays' is used in the GUI


Let me know which page you saw 'forwarding relay', and I will change it.
It sounds like what 'incoming relay' does...
by mattg
2019-06-21 11:03
Forum: General discussions
Topic: Stop intruder
Replies: 26
Views: 275

Re: Stop intruder

yes

autoban, with a maximum number of bad commands being set would block those

run this and post the results >> viewtopic.php?f=20&t=30914
by mattg
2019-06-21 11:01
Forum: General discussions
Topic: thunderbird client-hmailserver
Replies: 15
Views: 180

Re: thunderbird client-hmailserver

Your mx record points to

hillbilly.com. 3600 MX 10 park-mx.above.com.

I don't think that is your hMailserver?
Looking at the greeting in your internal diagnostics, that isn't a hMailserver greeting.
looks like a GoLang server response

Your incoming mail will ALWAYS be sent to the MX record
by mattg
2019-06-21 08:07
Forum: General discussions
Topic: Stop intruder
Replies: 26
Views: 275

Re: Stop intruder

Sure Your SMTP Daemon (incoming SMTP connection) @ time '2019-06-21 11:42:57.870' received a instruction from IP '185.222.211.13' The instruction as received was 'RCPT TO:<offers@a.co>' This is saying that we would like to send our email to 'offers@a.co" You server responds with SENT at the next lin...
by mattg
2019-06-21 07:45
Forum: General discussions
Topic: hMailServer B2425 Anti-spam Whitelisting Failure
Replies: 23
Views: 252

Re: hMailServer B2425 Anti-spam Whitelisting Failure

The spam whitelist was probably missed because the SMTP envelope from didn't include the FROM address

It doesn't matter what the message headers say.

Was this a SPAM email or a Ham
by mattg
2019-06-21 06:09
Forum: General discussions
Topic: thunderbird client-hmailserver
Replies: 15
Views: 180

Re: thunderbird client-hmailserver

Can you enable all logging, try and send to your gmail/hotmail/yahoo etc account, wait 90 seconds and then post all logs created.

I suspect that the SMTP relayer doesn't work without username and password details
by mattg
2019-06-21 06:04
Forum: General discussions
Topic: Stop intruder
Replies: 26
Views: 275

Re: Stop intruder

yes all 550 are rejections

SMTP + debug is OK to troubleshoot later
by mattg
2019-06-21 01:25
Forum: General discussions
Topic: thunderbird client-hmailserver
Replies: 15
Views: 180

Re: thunderbird client-hmailserver

What do you have in the SMTP relayer fields?
can you please show a screenshot
by mattg
2019-06-21 01:20
Forum: General discussions
Topic: How to migrate postboxes to second domain?
Replies: 5
Views: 100

Re: How to migrate postboxes to second domain?

you could ALTERNATIVELY just set a route to that domain in SMTP routes I'd also expect that currently, unless you are using SMTP Relayer to send all mail, that most mail from you would be seen as SPAM by another recipient on the internet as your hMailserver will not meet the SPF or DKIM records of t...
by mattg
2019-06-20 16:53
Forum: General discussions
Topic: How to upgrade to TLS protocol
Replies: 6
Views: 156

Re: How to upgrade to TLS protocol

I can absolutely guarantee to you that high level security with a certificate doesn't stop spammers from abusing your hmailserver if you have a weak password . They just connect securely first then send their garbage. Other than sniffing logon transmissions (which would be secured with a certificate...
by mattg
2019-06-20 16:02
Forum: General discussions
Topic: Stop intruder
Replies: 26
Views: 275

Re: Stop intruder

They are all 550 rejections

No mail being sent there

(Do you have other logging options enabled other than AWStats? AWStats logs aren't really good for troubleshooting)
by mattg
2019-06-20 15:52
Forum: General discussions
Topic: thunderbird client-hmailserver
Replies: 15
Views: 180

Re: thunderbird client-hmailserver

Run this and post the results
viewtopic.php?f=20&t=30914

Also, check the internal diagnostics in the GUI and post the results of that too please
by mattg
2019-06-20 02:01
Forum: General discussions
Topic: sql errors for hmailserver after each windows update and restart
Replies: 14
Views: 156

Re: sql errors for hmailserver after each windows update and restart

Is your SQL server on another machine?
Which database do you use?
Please show the contents of your hmailserver.ini file with passwords removed
by mattg
2019-06-20 01:58
Forum: General discussions
Topic: How to upgrade to TLS protocol
Replies: 6
Views: 156

Re: How to upgrade to TLS protocol

Let me also ask SPECIFICALLY what your goal in all of this is.

Many people have expectations that will not be met by doing this
by mattg
2019-06-19 15:42
Forum: General discussions
Topic: Email sent to random person as BCC when invalid TO field specified
Replies: 13
Views: 284

Re: Email sent to random person as BCC when invalid TO field specified

posting here is fine (for de-identified data) or by PM if don't want to post publically

If we can replicate - we will raise an issue on GitHub
by mattg
2019-06-19 10:13
Forum: General discussions
Topic: data
Replies: 3
Views: 114

Re: data

translate.google.com 'Hello! You can tell why after swapping hMailServer and deploying from the backup domain, the messages started to fall not only into the data \ domain \ username folder, but also into the data \ root and they take up memory there and are not deleted automatically even if the cli...
by mattg
2019-06-19 01:28
Forum: General discussions
Topic: SPAM - SCAM - PSHING - HMAIL SERVER !!!NEED HELP!
Replies: 30
Views: 732

Re: SPAM - SCAM - PSHING - HMAIL SERVER !!!NEED HELP!

RyuzDev wrote:
2019-06-18 23:22
if I know my interest in all this is how to avoid it
Have you made the changes we suggested?

If so run the diagnostics again, and post the NEW results
by mattg
2019-06-18 01:02
Forum: General discussions
Topic: SPAM - SCAM - PSHING - HMAIL SERVER !!!NEED HELP!
Replies: 30
Views: 732

Re: SPAM - SCAM - PSHING - HMAIL SERVER !!!NEED HELP!

Your errors show two things #1 the user that that connects to the SQL server compact edition hasn't been able to run a delete query. My guess here is that you are running hmailserver under a restricted permissions user, or that the server was just too busy at the time. #2 That you haven't excluded l...
by mattg
2019-06-18 00:57
Forum: General discussions
Topic: SPAM - SCAM - PSHING - HMAIL SERVER !!!NEED HELP!
Replies: 30
Views: 732

Re: SPAM - SCAM - PSHING - HMAIL SERVER !!!NEED HELP!

Require SMTP AUTH for local to local on the internet IP range
by mattg
2019-06-17 23:13
Forum: General discussions
Topic: Email sent to random person as BCC when invalid TO field specified
Replies: 13
Views: 284

Re: Email sent to random person as BCC when invalid TO field specified

ALSO, can you please include your CDO.message code

I use CDO to send lots of mail (dozens every day for more than 10 years), and have never seen this issue
by mattg
2019-06-17 23:09
Forum: General discussions
Topic: SPAM - SCAM - PSHING - HMAIL SERVER !!!NEED HELP!
Replies: 30
Views: 732

Re: SPAM - SCAM - PSHING - HMAIL SERVER !!!NEED HELP!

I'd also set your LAN IP range to a priority higher than 30, if you use 30 for banned ranges (and crikey, you've permanently banned a heap of the internet there) Set your 192.168.1.xxx range to priority 500 ALSO, you have errors in your error log please post the contents of C:\Program Files (x86)\hM...
by mattg
2019-06-17 22:59
Forum: General discussions
Topic: How to stop scammer faking from email address?
Replies: 14
Views: 260

Re: How to stop scammer faking from email address?

I still do think this should be built in functionality. hMailserver doesn't build stuff in unless the FRCs require it generally, and something that NOT ALL users need, and can be solved with a dozen or so lines of VB is unlikely to be added. The fact that we can script in VB makes hMailserver much ...
by mattg
2019-06-17 16:12
Forum: General discussions
Topic: How to stop scammer faking from email address?
Replies: 14
Views: 260

Re: How to stop scammer faking from email address?

This is what I do Checks all local domains and domain names (aliases) If oClient.Username <> "" Then If LCase(oClient.Username) <> LCase(oMessage.FromAddress) Then Result.Message = "You are only allowed to send from your own account" Result.Value = 2 Exit Sub End If End If For i = 1 to oApp.domains....
by mattg
2019-06-17 07:41
Forum: Scripting
Topic: send external mail with user credentials
Replies: 4
Views: 174

Re: send external mail with user credentials

Thanks for your advice, but i am don't undestand: how i can make route for all external mail from specific user? which value I have to place in field Routes-Domain? Becouse I don't know domain - user can send mail to different domains, to @google.com, @yndex.ru etc. It doesn't matter who it is TO o...
by mattg
2019-06-17 05:03
Forum: General discussions
Topic: Rules processing (forward vs copy)
Replies: 8
Views: 186

Re: Rules processing (forward vs copy)

Each account on hMailserver has an External accounts tab
https://www.hmailserver.com/documentati ... al_account
by mattg
2019-06-17 01:16
Forum: General discussions
Topic: SPAM - SCAM - PSHING - HMAIL SERVER !!!NEED HELP!
Replies: 30
Views: 732

Re: SPAM - SCAM - PSHING - HMAIL SERVER !!!NEED HELP!

During a recent password audit, it was found that a blonde was using the following password: "MickeyMinniePlutoHueyLouieDeweyDonaldGoofySacramento". When asked why she had such a long password, she said she was told that it had to be at least 8 characters long and include at least one capital. Oh t...
by mattg
2019-06-16 01:22
Forum: General discussions
Topic: SPAM - SCAM - PSHING - HMAIL SERVER !!!NEED HELP!
Replies: 30
Views: 732

Re: SPAM - SCAM - PSHING - HMAIL SERVER !!!NEED HELP!

The interesting lines here are the following section: "<spammers IP address>" "RECEIVED: AUTH LOGIN" "<spammers IP address>" "SENT: 334 VXNlcm5hbWU6" "<spammers IP address>" "RECEIVED: dGVzdEB0ZXN0LmNvbQ ==" "<spammers IP address>" "SENT: 334 UGFzc3dvcmQ6" "<spammers IP address>" "RECEIVED: ***" AL...
by mattg
2019-06-16 01:13
Forum: General discussions
Topic: (help) multi domain
Replies: 2
Views: 114

Re: (help) multi domain

This bit is correct The MX Record of AA.com and the MX Record of BB.com can point to the same hMailServer hostname aa.com >> MX record = mail.example.com bb.com >> MX record = mail.example.com Where mail.example.com has an A record that points to your public IP address This is how Outlook.com and gm...
by mattg
2019-06-16 01:09
Forum: General discussions
Topic: Rules processing (forward vs copy)
Replies: 8
Views: 186

Re: Rules processing (forward vs copy)

I use Thunderbird as the mail client. Two accounts are setup on Thunderbird: 1. Smtp account connected to an external mail provider 2. IMAP account connected to hMailserver (local server running Windows 10) When Smtp account receives an email: Scenario 1 - Message filter is setup to blindly "Copy" ...
by mattg
2019-06-14 08:49
Forum: General discussions
Topic: Order of "Greylisting" "White Listing"
Replies: 9
Views: 277

Re: Order of "Greylisting" "White Listing"

but it seems that nevertheless "Greylisting" will checked before "White Listing". Can someone confirm this? Yes, that is correct The "White Listing" Tab within Greylisting is useless for this case because Office 365 use thousands of IPs and I don't want to whitelist all of them. Correct If my sugge...
by mattg
2019-06-14 06:15
Forum: General discussions
Topic: Is there a way I can mask the sender email ID with a name
Replies: 6
Views: 233

Re: Is there a way I can mask the sender email ID with a name

Get the web app to set this You could do it with scripts in hMailserver if you are really stuck, but seriously this is pretty basic stuff for your web developers to get right. What can you tell us about the app? What language is it written in? is it PHP or ASP or... What library is used to send mail?
by mattg
2019-06-13 13:53
Forum: General discussions
Topic: my ip is getting auto ban several times in a day
Replies: 15
Views: 433

Re: my ip is getting auto ban several times in a day

My guess is that the WAN edge device (firewall / router / modem) is doing mail inspection, and creating this issue inadvertently
by mattg
2019-06-13 13:50
Forum: General discussions
Topic: How to Increase Mail attachment Size
Replies: 1
Views: 100

Re: How to Increase Mail attachment Size

SMTP >> General >> Max message size
(I set mine to 0 for unlimited)

Also for each domain >> Limits >> Max message size (again 0 for unlimited)

Also, make sure that your mail client doesn't set limits