So interesting. I'm all for increasing security and getting rid of insecure methods but man is it difficult to keep up with.

Of course I can't imagine how stressful it is for web and mail server developers. I don't envy themm.

Thanks for the link.

After hearing back from ME tech support they recommended setting this registry key to 1:

HKLM\System\CurrentControlSet\Control\Lsa\FIPSAlgorithmPolicy\Enabled

After rebooting we are now able to receive email via TLS from appriver.com.

I am starting a new thread as I feel this is now a different issue than a TLS/SSL version problem. My installation of ME does not appear to be receiving inbound emails via TLS, though it is sending via TLS. When I run a test on my server through this site it passes and shows TLS 1.2 being used: http...

This is good info. I appreciate all the help you have been. I agree, it is pretty crazy that they are using something that can't talk to a Windows server. I know we're not the majority but there are plenty of us out there. The appriver user that is trying to email us has already been told by apprive...

Unfortunately this did not make a difference. As far as I can see I have everything configured correctly yet appriver.com and a few other mail servers are not able to send us email. I also ran a test from this site: https://www.wormly.com/test-smtp-server And get the same error: 454 TLS not availabl...

Thanks for the info. I will give that tool a try as soon as I get the chance.

A colleague of mine that also runs Mailenable received this info from tech support: It is not new TLS/SSL protocols then, just that older ones are being discontinued and will not be compliant. You can configure your server already to do this by disabling TLS 1.0 and SSL 3.0 in Windows. See: https://...

Here is a bit more info from appriver.com. This is what their mail server is returning in the logs: 16:15:46.390 4 SMTP-324216(mydomain.com) cmd: EHLO server109.appriver.com 16:15:46.468 4 SMTP-324216(mydomain.com) rsp: 250 STARTTLS 16:15:46.468 4 SMTP-324216(mydomain.com) Connected. SIZE TLS AUTH 1...

For a while now I've been getting this on my incoming smtp server on perhaps 5% of our incoming mail: 04/24/18 14:15:09 SMTP-IN DC5CCA8708F0448EBA63BA089A1FFA1D.MAI 1500 8.31.233.152 220 smtp.mydomain.com - YO YO YO 0 0 04/24/18 14:15:09 SMTP-IN DC5CCA8708F0448EBA63BA089A1FFA1D.MAI 1500 8.31.233.152...

I have a filter configured to forward any email from "user1@outsidedomain.com" to "user1@mydomain.com" and "user2@mydomain.com". This in itself works great. If "user1@outsidedomain.com" sends and email to "user3@mydomain.com" (or any other userXXXXX@mydomain.com) a copy is forwarded to "user1@mydoma...

Here is the solution I came up with. This triggers on any score of 10 or higher. I just don't have the time to experiment with trying to use other vb code for now. Our barracuda tags anything with a score of 2 or higher, but there are still a few false positives below 10 so i'm not comfortable block...

This is old but was never answered. Looking to do something exactly like this. Hoping someone can help?

Thanks

Although this is now an ancient thread, there is a way to block e-mail from entire countries. It's a DNS blacklist by http://spameatingmonkey.com/geobl/index.html Replying to bump this up for others to take advantage of and to say thanks for the info! Even if it not used to block countries the pie ...

I'm in the midst of my second attempt at getting the bayesian filter working as our spam filter. I used to just tell customers to install their own spam filter locally but lately more and more want it at the server level, or they're webmail only users. My previous attempt at training the bayesian fi...

Passwords are already stored unencrypted in the auth.tab file. at least mine are. And i'm fine with that as it makes it 1000x easier to fixed silly problems like this when a user just can't get themselves to type in the correct password. I keep the server secure. If someone manages to break in I hav...