|
|
 |
|
 |
 |
|
 |
|
|
ArGoStuff User to User Support Forums
|
 |
|
 |
| Author |
Messages |
|
Oyster
Posts: 4
Online: 
ArGoNuke Recruit
 |
| 09-17-2008 4:00 PM |
|
Hi, I have been using Argosoft mailserver for a short while and twice, in the span of 10 days, it has been hacked by outside sources (many added new/fake users) causing blacklisting of our IP = most mail we send gets 'bounced' by the recipients servers because we are now blacklisted.
After the first time, I checked our server with 3 different antivirus programs and nothing was found. I had our IP cleared by the powers that be - and just 3 days later was hacked again. Our only way out of permanent blacklist is to now change our IP!
What other server or Mailserver or firewall settings are there to prevent this from ever happening again?
Thanks
|
|
|
|
|
mcorrow
Forum Moderator
Posts: 243
Online:
ArGoNuke Lt. JG
|
| 09-17-2008 4:11 PM |
|
| I'm sure that you thought of this, but did you change the server passwords? |
|
Matt |
|
|
Oyster
Posts: 4
Online:
ArGoNuke Recruit
|
| 09-17-2008 5:17 PM |
|
Yes, today I changed the password but have not turned the server on. I want to see if there are more changes offered on this forum before doing so. Thanks!
|
|
|
|
|
mcorrow
Forum Moderator
Posts: 243
Online:
ArGoNuke Lt. JG
|
| 09-17-2008 5:24 PM |
|
| We got hacked once, immediately changed the passwords, and have not been again..(of course that's not to say that it couldn't happen)... |
|
Matt |
|
|
Oyster
Posts: 4
Online:
ArGoNuke Recruit
|
| 09-17-2008 6:03 PM |
|
I was thinking, as an added security feature, that the number of mail accounts could be set to,
say 4, then locked, so that no one could ADD an arbitrary number of spam accounts.
If there IS such a setting or an .ini file parameter, I would like to know.
...something to munch on...
|
|
|
|
|
SteveT
Forum Administrator
Posts: 2594
Online:
ArGoNuke Admiral
|
| 09-17-2008 7:17 PM |
|
| Did you disable the creation of user accounts from the Web interface? Tools -> User & Domains -> Right click & select properties. You will see an options for "Allow Creation of accounts from web interface". Also for Web Administration, you can turn this on/off per domain and be sure to set a good strong password. Also set an Admin Password. If you do not use Web Administration, then you can disable that all together. |
|
 Regards,
Steve Topilnycky
Top Cat Computing
http://www.topcatcomputing.com |
|
|
Oyster
Posts: 4
Online:
ArGoNuke Recruit
|
| 09-17-2008 9:22 PM |
|
Sorry, I should have specified: I have disabled imap and webmail.
Our setup is only for a small number (<5) of local, static employees.
We all use Outlook or OE clients locally
Thanks!
|
|
|
|
|
SteveT
Forum Administrator
Posts: 2594
Online:
ArGoNuke Admiral
|
|
DougD
Posts: 4
Online:
ArGoNuke Recruit
|
| 09-19-2008 11:28 AM |
|
| If you are running the mail server pro you need to go into the web templates and remove the "newuser.htm" or "addnewuser.htm" teplate that should fix the hacking problem. happend to me as well when I was using pro version. |
|
|
|
|
|
| You are not authorized to post a reply. |
|
|
|
ActiveForums 3.7
|
|
|
|
|
|
 |
| Mail Server v1.0.5.9 | |
Mail Server
- Added additonal tracking of connections for SMTP and POP3: if they stay on for over 30 minutes, they are
getting disconnected;
- Fixed a problem with mailbags when they accept mail only when main server is down: in case of timeout
mailbags were still treating the main server as "available" and rejecting mail;
- Changed color coding of logs. Now red denotes only errors, delivery is green, POP3, SMTP, IMAP
connections - blue;
Web Interface
-
Fixed a problem, when session timeouts were causing errors in the windows system logs;
| | 1/2/2009 1:52:01 PM |
|
| Happy Holidays to All!!! | Just wanted to wish everybody Happy Holidays, and wish all the best to all in 2009
Looking forward to work with you next year!
Archie
| | 12/23/2008 10:13:32 PM |
|
| Mail Server Pro v1.8.9.6 |
- Improved Export to .NET function - sometimes email messages were not getting exported, because
the database of email messages was not up to date. Now each folder gets rebuilt before the export
function;
| | 12/2/2008 11:19:02 PM |
|
| Email Address Validator | We have discontinued our email address validation service, and launched new web site:
http://www.emailaddressvalidator.com
It provides the web service interface to validate lists of email addresses. We hope that our service will help to reduce unwanted traffic on Internet, ensuring that mail is sent only to valid and legitimate addresses.
Sign up now, and get 150 free validations!
| | 11/25/2008 10:13:02 AM |
|
| Mail Server v1.0.5.8 | |
Mail Server
- Mailbags now have an option to accept mail only when specified server is down - will help to fight
with spam which attempt to deliver mail bypassing the main server;
- When delivering mail, if main exchanger returns 4xx reply (temporary problem), the server will not
try other exchangers, will retry later the main exchanger;
- Server options moved from registry to a XML file. 64 bit versions of Vista and 2008 server appear
to be having access rights problems to the Windows registry, and the change will make our server more
compatible with 64 bit versions;
- Added an option to specify the number of lines on the log screen, when using the user interface.
Was causing memory problems if left running for long time;
- Fixed couple of problems, which were showing when SQL server was set up to use
case sensitive SQL statements;
- Made changes in the remoting interface to allow logging in using aliases;
Web Interface
- Made changes to allow logging in using aliases;
- When viewing folders, web interface now displays the name of logged in user;
| | 11/12/2008 2:31:31 PM |
|
|
|
|
|
 |
 |
|
 |
|
|
|
|
|
 |
 |
|
 |
|