Failure try

Use this forum if you have installed hMailServer and want to ask a question related to a production release of hMailServer. Before posting, please read the troubleshooting guide. A large part of all reported issues are already described in detail here.
Post Reply
PeterChan
Normal user
Normal user
Posts: 87
Joined: 2018-06-23 15:45

Failure try

Post by PeterChan » 2020-04-18 17:33

Hi,
To log details below, does it mean it is one failure try?
"SMTPD" 3896 1150 "2020-04-18 19:00:14.109" "45.143.223.100" "RECEIVED: RCPT to:<spameri@tiscali.it>"
"SMTPD" 3896 1150 "2020-04-18 19:00:14.113" "45.143.223.100" "SENT: 530 SMTP authentication is required."

User avatar
jimimaseye
Moderator
Moderator
Posts: 8903
Joined: 2011-09-08 17:48

Re: Failure try

Post by jimimaseye » 2020-04-18 18:26

Yes. It is standard spam. You will see that exact entry many times in your logs over time.

Ignore it.

[Entered by mobile. Excuse my spelling.]
5.7 on test.
SpamassassinForWindows 3.4.0 spamd service
AV: Clamwin + Clamd service + sanesecurity defs : https://www.hmailserver.com/forum/viewtopic.php?f=21&t=26829

PeterChan
Normal user
Normal user
Posts: 87
Joined: 2018-06-23 15:45

Re: Failure try

Post by PeterChan » 2020-04-19 15:35

Thanks. Do you mean no harm to the try in above?

How to reject the following try, through any Firewall Inbound/Outbound rule? Is it good idea to filter out specific IP (like the one below, which is 69.175.97.170) through any Firewall Inbound/Outbound rule?
"DEBUG" 3876 "2020-04-19 18:28:28.066" "TCP connection started for session 1210"
"SMTPD" 3876 1210 "2020-04-19 18:28:28.067" "69.175.97.170" "SENT: 220 WIN-APIUFD1NJEU ESMTP"
"SMTPD" 3856 1210 "2020-04-19 18:28:28.242" "69.175.97.170" "RECEIVED: EHLO sh-chi-us-gp1-wk102.internet-census.org"
"SMTPD" 3856 1210 "2020-04-19 18:28:28.244" "69.175.97.170" "SENT: 250-WIN-APIUFD1NJEU[nl]250-SIZE 20480000[nl]250-STARTTLS[nl]250-AUTH LOGIN[nl]250 HELP"
"SMTPD" 3880 1210 "2020-04-19 18:28:28.419" "69.175.97.170" "RECEIVED: STARTTLS"
"SMTPD" 3880 1210 "2020-04-19 18:28:28.420" "69.175.97.170" "SENT: 220 Ready to start TLS"
"DEBUG" 3856 "2020-04-19 18:28:28.423" "Performing SSL/TLS handshake for session 1210. Verify certificate: False"
"TCPIP" 3892 "2020-04-19 18:28:28.596" "TCPConnection - TLS/SSL handshake failed. Session Id: 1210, Remote IP: 69.175.97.170, Error code: 336027900, Message: unknown protocol"
"DEBUG" 3892 "2020-04-19 18:28:28.597" "Ending session 1210"

User avatar
mattg
Moderator
Moderator
Posts: 21257
Joined: 2007-06-14 05:12
Location: 'The Outback' Australia

Re: Failure try

Post by mattg » 2020-04-19 17:58

That one failed too

TLS/SSL handshake failed
Just 'cause I link to a page and say little else doesn't mean I am not being nice.
https://www.hmailserver.com/documentation

PeterChan
Normal user
Normal user
Posts: 87
Joined: 2018-06-23 15:45

Re: Failure try

Post by PeterChan » 2020-04-20 08:26

mattg wrote:
2020-04-19 17:58
That one failed too

TLS/SSL handshake failed
Is it having no harm to my machine? Any way to avoid it from happening?

User avatar
mattg
Moderator
Moderator
Posts: 21257
Joined: 2007-06-14 05:12
Location: 'The Outback' Australia

Re: Failure try

Post by mattg » 2020-04-20 15:23

PeterChan wrote:
2020-04-20 08:26
Is it having no harm to my machine?
no
PeterChan wrote:
2020-04-20 08:26
Any way to avoid it from happening?
Not while you are connected to the internet -
there will always be someone who wants to test your system
Just 'cause I link to a page and say little else doesn't mean I am not being nice.
https://www.hmailserver.com/documentation

Post Reply