Protecting Against Ransomware – An MDaemon Admin’s Guide

Unless you’ve somehow managed to avoid both the news headlines and the barrage of content from IT security vendors that followed, you’ll no doubt be aware that a couple of weeks ago, there was a particularly severe ransomware attack that affected over 100,000 businesses around the globe, including the NHS.

The latest evidence indicates that the recent ‘WannaCry’ attack originated via an exploit tool created by the NSA, however it’s more common they originate via ‘phishing’ emails, the technique of tricking recipients into clicking a malicious link or opening an attachment, often appearing to be from a colleague or relative.

So with this in mind, now seems like a great time to give you a refresher on the features at your disposal as an MDaemon administrator to help prevent the type of phishing attack that can lead to a ransomware infection, along with some additional tips on best practice.

(Almost all of the security tools for MDaemon are in the SecurityPlus add-on so for the purpose of this post, I’ll be assuming you’ve got that installed.)

Continue reading

MDaemon v17.0 – Includes Dropbox Integration for Webmail Users and Let’s Encrypt Support

MDaemon 17

MDaemon has long been a favourite for small businesses who demand the security and control only a dedicated email server can offer.

In this latest major release, Texas-based developer Alt-N Technologies add yet more features to boost security, plus a raft of enhancements for users of their webmail service, a desktop replacement and genuine alternative to Outlook.

Here are my highlights – don’t forget, you can find the full exhaustive list of goodies in the MDaemon Release Notes.

Continue reading

How to Analyse MDaemon Logs Using Microsoft Excel

blog-md-excel-700x353

A popular feature of MDaemon is its ability to let administrators quickly pinpoint message activity and session information using detailed logs. Sometimes, however, what’s required is more an overview of server usage such as how load is being shared across users or mailboxes for example.

In this post I take a look at how you can use Microsoft Excel to query data you may not even be aware is available in MDaemon!

Continue reading

MDaemon v16.5 – New antispam feature, auto-updating, webmail category support and lots more…

MDaemon 16.5

It’s inconvenient, it undoubtedly costs your business money and it has the potential to cause you headaches of epic proportions.

Perhaps that’s not the greatest sales strap line you’ve ever read?

Well, that’s because I’m not referring to MDaemon, in this case, I’m talking about your friend and mine, spam email.

You know, that particularly enjoyable type where seemingly innocuous messages from colleagues/ suppliers/ customers, turn out to be from one of those aspiring Mr. Robot types hell-bent on crypto’ing the life out of your data.

In 16.5 there’s less chance of that happening as one of the new features of interest is the simple, but effective ‘From Header Protection/ Modification’.

That’s not all – there’s auto-updating, centralised Outlook Connector settings, an XMPP server (yes, I had to Google it too) and some improvements to Worldclient you’ve been asking for.

Here are my highlights – as usual, you can find the exhaustive version available in the MDaemon Release Notes.

Continue reading

How to check if somebody knows your password. Have you been ‘pwned’?

If you read my post on ‘spear phishing’  you’ll be aware that the hijacking of email accounts is on the rise. These attacks generally revolve around the attacker already knowing the login details for the account somehow.

When I speak to customers they often wonder how the attacker knew their seemingly complex password. Did they simply guess it?

The simple answer is no, in my opinion, that’s very unlikely.

It’s much more likely that the email address and password were used on another site/ service which has led to them being compromised or ‘pwned’.

Continue reading

Outlook Connector v3.6.0 – Multiple Account Support, Automatic Updates and Improved Attachment Handling

SecurityGateway v4.0Would you find it useful to be able to see the entries in a colleague’s calendar? Perhaps a few of you share a meeting room and you’d like the ability to manage bookings? Maybe you just need an out-of-office responder you can set from Outlook?

Today sees a new point release of Outlook Connector, a highly recommended add-on for MDaemon Messaging Server. It’s the part that provides all of the above, plus lots more ‘Exchange-like’ functionality to help you work more efficiently by collaborating better with your colleagues.

Here are the highlights of this minor update – as always, you can find a more detailed list in the official release notes.

Continue reading

Gmail blocking servers that don’t have a Valid IPv6 PTR Record


Gmail-block-ipv6I wanted to share an issue we’ve seen multiple reports of this week, where MDaemon customers have started receiving bouncebacks from Google mail servers.

Valid email is being refused due to PTR record failures, and it’s happening for all Gmail domains including customer registered domains that are used with Google services.
Continue reading