How can I archive my inbox and sent emails?
↧
IPSWITCH EMAIL ARCHIVING
↧
Spam header translation
This is not really Imail related just wondering if someone more knowledgeable that I can translate this header. What's happening is a customer of ours router IP of 66.198.224.22 is blacklisted on several RBL's. What is happening it appears is that a PC on their network is infected and sending out the spam through it's own SMTP engine not via the mail server. Since this router IP also appears before the network identity of the users PC in legitimate email sent via their mail server good email is being blocked. Can't quite translate what the header is indicating especially with the 205.137.240.178 IP which when I do a look up says doesn't exist. Appreciate any help.
Bob
From shvilyronits@destatis.de Fri Feb 01 07:10:34 2013
Delivery-date: Fri, 01 Feb 2013 07:10:34 -0500
Received: from [66.198.224.22] (helo=66.198.224.22)
by mail.victim.example with smtp (Exim 4.63)
(envelope-from)
id 1U1FRy-0000Zh-MN
for victim@smtp.example; Fri, 01 Feb 2013 07:10:34 -0500
Received: from unknown (HELO 3j83ue) ([205.137.240.178])
by 66.198.224.22 with ESMTP; Fri, 1 Feb 2013 07:10:56 -0500
From: "Hope Higgins"
To:
Subject: Huge new alert
Date: Fri, 1 Feb 2013 07:06:04 -0500
MIME-Version: 1.0
format=flowed;
charset="windows-1250";
reply-type=original
Bob
From shvilyronits@destatis.de Fri Feb 01 07:10:34 2013
Delivery-date: Fri, 01 Feb 2013 07:10:34 -0500
Received: from [66.198.224.22] (helo=66.198.224.22)
by mail.victim.example with smtp (Exim 4.63)
(envelope-from
id 1U1FRy-0000Zh-MN
for victim@smtp.example; Fri, 01 Feb 2013 07:10:34 -0500
Received: from unknown (HELO 3j83ue) ([205.137.240.178])
by 66.198.224.22 with ESMTP; Fri, 1 Feb 2013 07:10:56 -0500
From: "Hope Higgins"
To:
Subject: Huge new alert
Date: Fri, 1 Feb 2013 07:06:04 -0500
MIME-Version: 1.0
format=flowed;
charset="windows-1250";
reply-type=original
↧
↧
Minor issues about sent-messages in webclient (version 12.2sp1)
Hi,
I believe this is a feature not a bug, but still a bit confusing to some users. Or maybe there's a setting for these, but haven't found them.
So, first issue...In webclient, if user has Sent-panel open and he/she sends a message, that message won't automatically show up in Sent-box. And then some users are confused, if the message has been sent or not. Of course, if user presses the refresh-button, message will show up. And after a period of time it shows when sent-box is automatically refreshed time to time. Is it possible to auto-refresh sent-panel after the message has been sent?
Another closely related thing is that after user press the send-button there isn't any confirmation that message has been sent. Would be nice if some kind of "Your message has been sent" -popup message would show up automatically. Older versions (v11) had something like this, if i remember right?!
I believe this is a feature not a bug, but still a bit confusing to some users. Or maybe there's a setting for these, but haven't found them.
So, first issue...In webclient, if user has Sent-panel open and he/she sends a message, that message won't automatically show up in Sent-box. And then some users are confused, if the message has been sent or not. Of course, if user presses the refresh-button, message will show up. And after a period of time it shows when sent-box is automatically refreshed time to time. Is it possible to auto-refresh sent-panel after the message has been sent?
Another closely related thing is that after user press the send-button there isn't any confirmation that message has been sent. Would be nice if some kind of "Your message has been sent" -popup message would show up automatically. Older versions (v11) had something like this, if i remember right?!
↧
Right Click Copy..Paste not working Imail Version 12 SP1
Right click copy and paste functions don't work (ctrl C and ctrl V do, however). Using IE 8 on Windows XP stations.
↧
DNS Priority When a Domain Leaves an iMail Server
We recently moved our email from one service provider to another.
The old provider was using iMail 7.x on a server that hosted several other domains. We have business relationships with many of those other domains and quite a bit of email goes back and forth. In other words, there was a lot of email traffic back and forth from one domain to another on the same iMail server.
After we moved to the new provider and updated our DNS records, most email began flowing to us correctly.
However, we subsequently discovered that the businesses that were still getting service from our former provider using the old iMail server were sending us email which was being routed to our old domain *still* active on the old iMail server. The iMail server was ignoring public DNS and channeling the email internally.
When we figured out what was happening, we pointed the problem out to the iMail administrator. They responded that since our old domain was a virtual server, the only way for the email to properly route out to our new service was to delete the old domain.
I was a bit shocked by this since I have always thought authoritative DNS had the final say in routing email. If merely having a domain on the iMail server caused email to be intercepted, then it seems like some bad things could happen.
Was I right to give the old ISP a hard time about this? Should the iMail server have continued to intercept emails from other domains it hosted even after DNS was changed?
The old provider was using iMail 7.x on a server that hosted several other domains. We have business relationships with many of those other domains and quite a bit of email goes back and forth. In other words, there was a lot of email traffic back and forth from one domain to another on the same iMail server.
After we moved to the new provider and updated our DNS records, most email began flowing to us correctly.
However, we subsequently discovered that the businesses that were still getting service from our former provider using the old iMail server were sending us email which was being routed to our old domain *still* active on the old iMail server. The iMail server was ignoring public DNS and channeling the email internally.
When we figured out what was happening, we pointed the problem out to the iMail administrator. They responded that since our old domain was a virtual server, the only way for the email to properly route out to our new service was to delete the old domain.
I was a bit shocked by this since I have always thought authoritative DNS had the final say in routing email. If merely having a domain on the iMail server caused email to be intercepted, then it seems like some bad things could happen.
Was I right to give the old ISP a hard time about this? Should the iMail server have continued to intercept emails from other domains it hosted even after DNS was changed?
↧
↧
strange API-messages
Hi, recently we've been getting a lot of these kind of messages in apixxxx.txt -files.
CreateListImailMessageFromAPIMessage(230f1fe2-0000-0000-0000-000000000000) - The specified string is not in the form required for a subject.
What causes this? And should we worry about those?
CreateListImailMessageFromAPIMessage(230f1fe2-0000-0000-0000-000000000000) - The specified string is not in the form required for a subject.
What causes this? And should we worry about those?
↧
ActiveSync
We came across this [url=http://www.zdnet.com/ios-6-1-banned-from-corporate-servers-due-to-exchange-snafu-updated-7000011064/]article from zdnet.com[/url] concerning iOS 6.1 and Exchange Server ActiveSync. Will this effect our users that use iMail and activesync for their ipads, iphones, ipod touches?
↧
WorkgroupShare and Office 2013
Is there an updated version of WorkgroupShare that works with Office 2013. Installed what I had on hand and I see it in the Add-On's but the initial setup doesn't occur nor is there anywhere to access Share. Saw something from Softalk on the internet dated last November that WorkgroupShare didn't work with beta Office 2013.
↧
Imail 11.03 - Getting BLACKLIST: failed to connect to service Errors
Running Imail 11.03.409 on W2K3 for several years without any issues. A few days ago we started seeing a large increase in Spam to inboxes. Checking the spam log files showed that the Real Time Blacklists were timing out and thus causing more spam to the inbox.
This seemed to have started at random (no software updates or right after any server security updates or changes). Here is an example from the log:
02:27 23:55 (7eb00000096cfed5) [00002412] BLACKLIST: failed to connect to service (xbl-spamhaus:*:zen.spamhaus.org)
02:27 23:55 (7eb00000096cfed5) [00002412] BLACKLIST: failed to connect to service (SpamCop:*:bl.spamcop.net)
02:27 23:55 (7df000000970feda) [00002416] BLACKLIST: failed to connect to service (xbl-spamhaus:*:zen.spamhaus.org)
02:27 23:55 (36ae00000972fedd) [00002418] BLACKLIST: failed to connect to service (xbl-spamhaus:*:zen.spamhaus.org)
02:27 23:55 (36ae00000972fedd) [00002418] BLACKLIST: failed to connect to service (xbl-spamhaus:*:zen.spamhaus.org)
02:27 23:55 (36ae00000972fedd) [00002418] BLACKLIST: failed to connect to service (xbl-spamhaus:*:zen.spamhaus.org)
02:27 23:55 (cc3400000974fee2) [00002420] BLACKLIST: failed to connect to service (xbl-spamhaus:*:zen.spamhaus.org)
02:27 23:55 (cc3400000974fee2) [00002420] BLACKLIST: failed to connect to service (SpamCop:*:bl.spamcop.net)
02:27 23:55 (b60200000977fee6) [00002423] BLACKLIST: failed to connect to service (xbl-spamhaus:*:zen.spamhaus.org)
02:27 23:56 (2e300000097cfeec) [00002428] BLACKLIST: failed to connect to service (xbl-spamhaus:*:zen.spamhaus.org)
02:27 23:56 (2e300000097cfeec) [00002428] BLACKLIST: failed to connect to service (SpamCop:*:bl.spamcop.net)
02:27 23:56 (2e300000097cfeec) [00002428] BLACKLIST: failed to connect to service (xbl-spamhaus:*:zen.spamhaus.org)
Other times it works fine
02:27 15:53 (20ee000002a405fe) [00000676] BLACKLIST: 24.25.252.236 was found on list (xbl-spamhaus:*:zen.spamhaus.org) -> http://www.spamhaus.org/query/bl?ip=24.25.252.236
02:27 15:55 (6c74000002a80605) [00000680] BLACKLIST: 58.215.81.185 was found on list (SpamCop:*:bl.spamcop.net) -> Blocked - see http://www.spamcop.net/bl.shtml?58.215.81.185
02:27 15:56 (65c6000002a90607) [00000681] BLACKLIST: 200.58.193.39 was found on list (SpamCop:*:bl.spamcop.net) -> Blocked - see http://www.spamcop.net/bl.shtml?200.58.193.39
It seems like it times out after 4 minutes after which the inbound message gets delivered. So inbound email is delayed by 4 minutes. It does not seem to have affected outbound SMTP (which I understand uses TCP instead of UDP for domain resolution). Restarted all imail services along with server reboots to no avail. I then went ahead and did repeated NSLOOKUPS from the imail server machine to the RBL's and it seems to be fine.
What's interesting is we seem to get the Blacklist: failed to connect message when there is more outbound mail (i.e. when sending out a newsleter and items are in the spool file). The outbound mail does not seem to have any issues with domain lookups (we are whitelisting our IP's from the connection checks). I'm guessing Imail uses SMPT service for the RBL lookup. Our IP does NOT seem to be listed on any blacklists.
I then went ahead and reduced the connection checks from 2 RBL's to 1. Still having the same problem but the threshold in outbound SMTP volume seems to be higher before the problem occurs (i.e. sending 10 mails a minute to 20 mails a minute before the problem occurs).
I was initially thinking connectivity issue but since the NSLOOKUP seems to work (does it use port 53), I am wondering if it's related to Imail. I would think for connection checks Imail would cache the DNS results especially since the domains don't change - why take any performance hit.
I see there is a setting in Realtime Blacklists to use TCP first but heard that was to be discouraged as it's bandwidth intensive to the RBL's. I'm guessing that would solve the issue.
Any thoughts or ideas?
Thanks for your help.
Adam
This seemed to have started at random (no software updates or right after any server security updates or changes). Here is an example from the log:
02:27 23:55 (7eb00000096cfed5) [00002412]
02:27 23:55 (7eb00000096cfed5) [00002412]
02:27 23:55 (7df000000970feda) [00002416]
02:27 23:55 (36ae00000972fedd) [00002418]
02:27 23:55 (36ae00000972fedd) [00002418]
02:27 23:55 (36ae00000972fedd) [00002418]
02:27 23:55 (cc3400000974fee2) [00002420]
02:27 23:55 (cc3400000974fee2) [00002420]
02:27 23:55 (b60200000977fee6) [00002423]
02:27 23:56 (2e300000097cfeec) [00002428]
02:27 23:56 (2e300000097cfeec) [00002428]
02:27 23:56 (2e300000097cfeec) [00002428]
Other times it works fine
02:27 15:53 (20ee000002a405fe) [00000676]
02:27 15:55 (6c74000002a80605) [00000680]
02:27 15:56 (65c6000002a90607) [00000681]
It seems like it times out after 4 minutes after which the inbound message gets delivered. So inbound email is delayed by 4 minutes. It does not seem to have affected outbound SMTP (which I understand uses TCP instead of UDP for domain resolution). Restarted all imail services along with server reboots to no avail. I then went ahead and did repeated NSLOOKUPS from the imail server machine to the RBL's and it seems to be fine.
What's interesting is we seem to get the Blacklist: failed to connect message when there is more outbound mail (i.e. when sending out a newsleter and items are in the spool file). The outbound mail does not seem to have any issues with domain lookups (we are whitelisting our IP's from the connection checks). I'm guessing Imail uses SMPT service for the RBL lookup. Our IP does NOT seem to be listed on any blacklists.
I then went ahead and reduced the connection checks from 2 RBL's to 1. Still having the same problem but the threshold in outbound SMTP volume seems to be higher before the problem occurs (i.e. sending 10 mails a minute to 20 mails a minute before the problem occurs).
I was initially thinking connectivity issue but since the NSLOOKUP seems to work (does it use port 53), I am wondering if it's related to Imail. I would think for connection checks Imail would cache the DNS results especially since the domains don't change - why take any performance hit.
I see there is a setting in Realtime Blacklists to use TCP first but heard that was to be discouraged as it's bandwidth intensive to the RBL's. I'm guessing that would solve the issue.
Any thoughts or ideas?
Thanks for your help.
Adam
↧
↧
Harvesting Prevention does not check SMTP White list?
Hi
My Imail server is in DMZ so it "see" my LAN computers behind a NAT (as a one IP aaddress).
Account Harvesting Prevention works like a charm but when I set my NAT IP in the SMTP white list so system should ignore it, that didn't work. Today my NAT IP was on Control Access list with comment like "Added by Harvesting Prevention...".
Does anybody have this problem?
Is there any way to force Account Harvesting Prevention to ignore IP when it is on SMTP white list?
My Imail server is in DMZ so it "see" my LAN computers behind a NAT (as a one IP aaddress).
Account Harvesting Prevention works like a charm but when I set my NAT IP in the SMTP white list so system should ignore it, that didn't work. Today my NAT IP was on Control Access list with comment like "Added by Harvesting Prevention...".
Does anybody have this problem?
Is there any way to force Account Harvesting Prevention to ignore IP when it is on SMTP white list?
↧
iMail 12.1 IE issue
We just updated from 11.5 to 12.1. Some of our users cannot view in IE, so I had them try "compatibility view" for most this seems to work but not for all. Are there any other browser settings that may need to be configured?
↧
problem seeing emails, small box
I am using Internet Explorer seven on a windows XP machine. When I try to open the e-mail only a small box appears in the window showing two blank lines. I cannot see how to enlarge this box.
If I open my e-mail account in Firefox it displays normally.
Is there something I need to do in Internet Explorer. This only started to occur about two weeks ago. Could it be related to a recent update?↧
imail 12 sp1 external sql db odbc error
Hi,
We have imail 12 sp1 evaluation installed on an existing imail 2006 sql server database. everything is working fine except the web mail.
users can login to the web interface but when they click on inbox they receive error: ERROR [23000] [Microsoft][ODBC Microsoft Access Driver] The changes you requested to the table were not successful because they would create duplicate values in the index, primary key, or relationship. Change the data in the field or fields that contain duplicate data, remove the index, or redefine the index to permit duplicate entries and try again.
on the API log i see the following.
3/6/2013 - 5:17 PM : bora@------------.com:AddFolder(,Calendar,Calendar) - ERROR [23000] [Microsoft][ODBC Microsoft Access Driver] The changes you requested to the table were not successful because they would create duplicate values in the index, primary key, or relationship. Change the data in the field or fields that contain duplicate data, remove the index, or redefine the index to permit duplicate entries and try again.
3/6/2013 - 5:17 PM : bora@------------.com:Url: /iclient/Pages/Mailbox.aspx Error: System.Web.HttpUnhandledException (0x80004005): Exception of type 'System.Web.HttpUnhandledException' was thrown. ---> System.Data.Odbc.OdbcException (0x80131937): ERROR [23000] [Microsoft][ODBC Microsoft Access Driver] The changes you requested to the table were not successful because they would create duplicate values in the index, primary key, or relationship. Change the data in the field or fields that contain duplicate data, remove the index, or redefine the index to permit duplicate entries and try again.
What might be the reason?
Thanks,
Bora
We have imail 12 sp1 evaluation installed on an existing imail 2006 sql server database. everything is working fine except the web mail.
users can login to the web interface but when they click on inbox they receive error: ERROR [23000] [Microsoft][ODBC Microsoft Access Driver] The changes you requested to the table were not successful because they would create duplicate values in the index, primary key, or relationship. Change the data in the field or fields that contain duplicate data, remove the index, or redefine the index to permit duplicate entries and try again.
on the API log i see the following.
3/6/2013 - 5:17 PM : bora@------------.com:AddFolder(,Calendar,Calendar) - ERROR [23000] [Microsoft][ODBC Microsoft Access Driver] The changes you requested to the table were not successful because they would create duplicate values in the index, primary key, or relationship. Change the data in the field or fields that contain duplicate data, remove the index, or redefine the index to permit duplicate entries and try again.
3/6/2013 - 5:17 PM : bora@------------.com:Url: /iclient/Pages/Mailbox.aspx Error: System.Web.HttpUnhandledException (0x80004005): Exception of type 'System.Web.HttpUnhandledException' was thrown. ---> System.Data.Odbc.OdbcException (0x80131937): ERROR [23000] [Microsoft][ODBC Microsoft Access Driver] The changes you requested to the table were not successful because they would create duplicate values in the index, primary key, or relationship. Change the data in the field or fields that contain duplicate data, remove the index, or redefine the index to permit duplicate entries and try again.
What might be the reason?
Thanks,
Bora
↧
↧
SMPT hackers
TOPIC UPDATED....SEE AFTER LOG INFO
I had my logs files max out over the weekend with a massive quantity of SMTP messages for bogus SPAM accounts apparently logging in and sending email. Below is an exampl ein my logs of what I am getting... Pretty much every EHLO is stamped from a different host/domain, mostly from .ru addresses. They all have <> in the MAIL FROM portion. It seems to me that they are logging in to the server without issue and sending mail. How would I be able to find out what account they are logging into? I have dozens of email accounts hosted and I worry that someone used a weak password and their account was compromised. I am getting about a dozen per minute showing up as .SMD files in the spool directory but have no idea how to read them or see what is getting sent through the server. (I removed my domain and IP info from the logs examples below)
Any help would be hugely appreciated.
03:11 08:43 SMTPD(5078000000020003) >>> 220 mail.mydomain.com (IMail 11.02 2-1) NT-ESMTP Server X1
03:11 08:43 SMTPD(5078000000020003) [69.15.206.179:125] connect 69.15.206.179 port 4147
03:11 08:43 SMTPD(5078000000020003) <<< EHLO smtp1.filnet.fr
03:11 08:43 SMTPD(5078000000020003) [69.xx.xxx.xxx] EHLO smtp1.filnet.fr
03:11 08:43 SMTPD(5078000000020003) >>> 250-mail.mydomain.com says hello
03:11 08:43 SMTPD(5078000000020003) 250-SIZE 0
03:11 08:43 SMTPD(5078000000020003) 250-8BITMIME
03:11 08:43 SMTPD(5078000000020003) 250-DSN
03:11 08:43 SMTPD(5078000000020003) 250-ETRN
03:11 08:43 SMTPD(5078000000020003) 250-AUTH LOGIN CRAM-MD5
03:11 08:43 SMTPD(5078000000020003) 250-AUTH LOGIN
03:11 08:43 SMTPD(5078000000020003) 250 AUTH=LOGIN
03:11 08:43 SMTPD(5078000000020003) <<< MAIL From:<> SIZE=2719 BODY=8BITMIME
03:11 08:43 SMTPD(5078000000020003) [69.xx.xxx.xxx] MAIL From:<> SIZE=2719 BODY=8BITMIME
03:11 08:43 SMTPD(5078000000020003) >>> 250 ok
03:11 08:47 SMTPD(3c4a000000250020) <<< EHLO smtp.polyplastic.ru
03:11 08:47 SMTPD(3c4a000000250020) [69.xx.xxx.xxx] EHLO smtp.polyplastic.ru
03:11 08:47 SMTPD(3c4a000000250020) >>> 250-mail.mydomain.com says hello
03:11 08:47 SMTPD(3c4a000000250020) 250-SIZE 0
03:11 08:47 SMTPD(3c4a000000250020) 250-8BITMIME
03:11 08:47 SMTPD(3c4a000000250020) 250-DSN
03:11 08:47 SMTPD(3c4a000000250020) 250-ETRN
03:11 08:47 SMTPD(3c4a000000250020) 250-AUTH LOGIN CRAM-MD5
03:11 08:47 SMTPD(3c4a000000250020) 250-AUTH LOGIN
03:11 08:47 SMTPD(3c4a000000250020) 250 AUTH=LOGIN
03:11 08:47 SMTPD(3c4a000000250020) <<< MAIL From:<> SIZE=11450
03:11 08:47 SMTPD(3c4a000000250020) [69.xx.xxx.xxx] MAIL From:<> SIZE=11450
03:11 08:47 SMTPD(3c4a000000250020) >>> 250 ok
After looking into this a bit more it seems that ASSP may be blocking these attempts from actually sending although I still do not know how they could be running through iMail...YOu can also see by the frequency of the blocks by ASSP below that my server is unfortunately getting hammered with these requests. I had to turn off SMTP logging for iMail because the logs were getting well over 1GB in an afternoon...
Mar-11-13 08:34:04 36301-22702 [RelayAttempt] 83.149.240.249 relay attempt blocked for: harlampij.muhortov@mindtheplanet.com;
Mar-11-13 08:34:05 36301-22703 [RelayAttempt] 77.238.226.209 relay attempt blocked for: vilor.sedov@mindtheplanet.com;
Mar-11-13 08:34:05 36301-22704 [RelayAttempt] 82.198.189.153 relay attempt blocked for: leontij.snetkov@mindtheplanet.com;
Mar-11-13 08:34:14 36301-22705 213.243.68.12 info: found message size announcement: 1.79 kByte;
Mar-11-13 08:34:15 36301-22705 [RelayAttempt] 213.243.68.12 relay attempt blocked for: timur.lagutov@mindtheplanet.com;
Mar-11-13 08:34:15 36301-22707 213.243.68.12 info: found message size announcement: 1.87 kByte;
Mar-11-13 08:34:15 36301-22707 [RelayAttempt] 213.243.68.12 relay attempt blocked for: nefjod.kapica@mindtheplanet.com;
Mar-11-13 08:34:16 36301-22709 213.243.68.12 info: found message size announcement: 1.85 kByte;
Mar-11-13 08:34:16 36301-22709 [RelayAttempt] 213.243.68.12 relay attempt blocked for: adrian.terebov@mindtheplanet.com;
Mar-11-13 08:34:16 36301-22711 213.243.68.12 info: found message size announcement: 1.85 kByte;
Mar-11-13 08:34:16 36301-22711 [RelayAttempt] 213.243.68.12 relay attempt blocked for: narkis.kuznecov@mindtheplanet.com;
Mar-11-13 08:34:22 36301-22712 87.255.4.195 info: found message size announcement: 16.30 kByte;
Mar-11-13 08:34:22 36301-22712 [RelayAttempt] 87.255.4.195 relay attempt blocked for: kirill.shulga@mindtheplanet.com;
I had my logs files max out over the weekend with a massive quantity of SMTP messages for bogus SPAM accounts apparently logging in and sending email. Below is an exampl ein my logs of what I am getting... Pretty much every EHLO is stamped from a different host/domain, mostly from .ru addresses. They all have <> in the MAIL FROM portion. It seems to me that they are logging in to the server without issue and sending mail. How would I be able to find out what account they are logging into? I have dozens of email accounts hosted and I worry that someone used a weak password and their account was compromised. I am getting about a dozen per minute showing up as .SMD files in the spool directory but have no idea how to read them or see what is getting sent through the server. (I removed my domain and IP info from the logs examples below)
Any help would be hugely appreciated.
03:11 08:43 SMTPD(5078000000020003) >>> 220 mail.mydomain.com (IMail 11.02 2-1) NT-ESMTP Server X1
03:11 08:43 SMTPD(5078000000020003) [69.15.206.179:125] connect 69.15.206.179 port 4147
03:11 08:43 SMTPD(5078000000020003) <<< EHLO smtp1.filnet.fr
03:11 08:43 SMTPD(5078000000020003) [69.xx.xxx.xxx] EHLO smtp1.filnet.fr
03:11 08:43 SMTPD(5078000000020003) >>> 250-mail.mydomain.com says hello
03:11 08:43 SMTPD(5078000000020003) 250-SIZE 0
03:11 08:43 SMTPD(5078000000020003) 250-8BITMIME
03:11 08:43 SMTPD(5078000000020003) 250-DSN
03:11 08:43 SMTPD(5078000000020003) 250-ETRN
03:11 08:43 SMTPD(5078000000020003) 250-AUTH LOGIN CRAM-MD5
03:11 08:43 SMTPD(5078000000020003) 250-AUTH LOGIN
03:11 08:43 SMTPD(5078000000020003) 250 AUTH=LOGIN
03:11 08:43 SMTPD(5078000000020003) <<< MAIL From:<> SIZE=2719 BODY=8BITMIME
03:11 08:43 SMTPD(5078000000020003) [69.xx.xxx.xxx] MAIL From:<> SIZE=2719 BODY=8BITMIME
03:11 08:43 SMTPD(5078000000020003) >>> 250 ok
03:11 08:47 SMTPD(3c4a000000250020) <<< EHLO smtp.polyplastic.ru
03:11 08:47 SMTPD(3c4a000000250020) [69.xx.xxx.xxx] EHLO smtp.polyplastic.ru
03:11 08:47 SMTPD(3c4a000000250020) >>> 250-mail.mydomain.com says hello
03:11 08:47 SMTPD(3c4a000000250020) 250-SIZE 0
03:11 08:47 SMTPD(3c4a000000250020) 250-8BITMIME
03:11 08:47 SMTPD(3c4a000000250020) 250-DSN
03:11 08:47 SMTPD(3c4a000000250020) 250-ETRN
03:11 08:47 SMTPD(3c4a000000250020) 250-AUTH LOGIN CRAM-MD5
03:11 08:47 SMTPD(3c4a000000250020) 250-AUTH LOGIN
03:11 08:47 SMTPD(3c4a000000250020) 250 AUTH=LOGIN
03:11 08:47 SMTPD(3c4a000000250020) <<< MAIL From:<> SIZE=11450
03:11 08:47 SMTPD(3c4a000000250020) [69.xx.xxx.xxx] MAIL From:<> SIZE=11450
03:11 08:47 SMTPD(3c4a000000250020) >>> 250 ok
After looking into this a bit more it seems that ASSP may be blocking these attempts from actually sending although I still do not know how they could be running through iMail...YOu can also see by the frequency of the blocks by ASSP below that my server is unfortunately getting hammered with these requests. I had to turn off SMTP logging for iMail because the logs were getting well over 1GB in an afternoon...
Mar-11-13 08:34:04 36301-22702 [RelayAttempt] 83.149.240.249 relay attempt blocked for: harlampij.muhortov@mindtheplanet.com;
Mar-11-13 08:34:05 36301-22703 [RelayAttempt] 77.238.226.209 relay attempt blocked for: vilor.sedov@mindtheplanet.com;
Mar-11-13 08:34:05 36301-22704 [RelayAttempt] 82.198.189.153 relay attempt blocked for: leontij.snetkov@mindtheplanet.com;
Mar-11-13 08:34:14 36301-22705 213.243.68.12 info: found message size announcement: 1.79 kByte;
Mar-11-13 08:34:15 36301-22705 [RelayAttempt] 213.243.68.12 relay attempt blocked for: timur.lagutov@mindtheplanet.com;
Mar-11-13 08:34:15 36301-22707 213.243.68.12 info: found message size announcement: 1.87 kByte;
Mar-11-13 08:34:15 36301-22707 [RelayAttempt] 213.243.68.12 relay attempt blocked for: nefjod.kapica@mindtheplanet.com;
Mar-11-13 08:34:16 36301-22709 213.243.68.12 info: found message size announcement: 1.85 kByte;
Mar-11-13 08:34:16 36301-22709 [RelayAttempt] 213.243.68.12 relay attempt blocked for: adrian.terebov@mindtheplanet.com;
Mar-11-13 08:34:16 36301-22711 213.243.68.12 info: found message size announcement: 1.85 kByte;
Mar-11-13 08:34:16 36301-22711 [RelayAttempt] 213.243.68.12 relay attempt blocked for: narkis.kuznecov@mindtheplanet.com;
Mar-11-13 08:34:22 36301-22712 87.255.4.195 info: found message size announcement: 16.30 kByte;
Mar-11-13 08:34:22 36301-22712 [RelayAttempt] 87.255.4.195 relay attempt blocked for: kirill.shulga@mindtheplanet.com;
↧
Windows 8 Mail App
Has anyone seen issues when connecting Windows 8 Mail App to an iMail server. I have tried multiple way and cannot get it to work. I have verified settings by using Email app on cells phones and Thunder Bird. When sending it times out after 3-4 minutes and says the account is unavailable.
↧
IE10 and Web Client
Any one else try using IE10 with the web client?
The INBOX area only draws a small square in the window on the right, making it impossible to use.
Putting the browser into Compatibility Mode does not help, unless I use the Lite Web Client.
The INBOX area only draws a small square in the window on the right, making it impossible to use.
Putting the browser into Compatibility Mode does not help, unless I use the Lite Web Client.
I'm using version Imail Server 12.1.0.270.
↧
Shared Inboxes
Hi all
Just a quick question I have two users that deal with different clients, so need access to each others inbox when either one of them is on holiday.
I thought using the collaboration settings and client will do this, however it seems that this only works providing that user A synchronises so user B can then see the mail in user A's inbox.
We are using Outlook POP accounts, is this working correctly or am I missing something. As I would of thought preferred functionality would be to allow access when that user is on holiday.
If so is there any other way to allow access to a users inbox when that user is away, without sharing passwords ??
Thanks
John
Just a quick question I have two users that deal with different clients, so need access to each others inbox when either one of them is on holiday.
I thought using the collaboration settings and client will do this, however it seems that this only works providing that user A synchronises so user B can then see the mail in user A's inbox.
We are using Outlook POP accounts, is this working correctly or am I missing something. As I would of thought preferred functionality would be to allow access when that user is on holiday.
If so is there any other way to allow access to a users inbox when that user is away, without sharing passwords ??
Thanks
John
↧
↧
Added by Harvesting Prevention
I'm running imail server version 12.2.0.201. It's been on this update since it was first released. I haven't made any changes to the settings that I'm aware of.
The past few days however I've been unable to send emails. When I poke around I find in the SMTP service, under the Control Access tab that there's a listing for my IP as a block with the comment "Added by Harvesting Prevention", a date and a time. If I remove this block I'm OK to send email until the next day when it appears again.
While I haven't made any changes to imail server, I HAVE installed a new program on the workstation that's being blocked. I don't know if the two are related or not but given that they showed up at the same time I'm suspicious.
The other program is called. "WE Server Manager" http://www.workexaminer.com/ It's software that allows me to monitor employee's computer activities to make sure they're working instead of surfing the web all day.
Are you aware of any conflicts between these two programs? Should I be concerned that there's some hidden object in the Work Examiner program that might be trying to do something malicious?
If you think it's all fine and good, how do I stop I mail from blocking me every morning?
The past few days however I've been unable to send emails. When I poke around I find in the SMTP service, under the Control Access tab that there's a listing for my IP as a block with the comment "Added by Harvesting Prevention", a date and a time. If I remove this block I'm OK to send email until the next day when it appears again.
While I haven't made any changes to imail server, I HAVE installed a new program on the workstation that's being blocked. I don't know if the two are related or not but given that they showed up at the same time I'm suspicious.
The other program is called. "WE Server Manager" http://www.workexaminer.com/ It's software that allows me to monitor employee's computer activities to make sure they're working instead of surfing the web all day.
Are you aware of any conflicts between these two programs? Should I be concerned that there's some hidden object in the Work Examiner program that might be trying to do something malicious?
If you think it's all fine and good, how do I stop I mail from blocking me every morning?
↧
Web Admin Error
Yup.
Source File: c:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Temporary ASP.NET Files\iadmin\5e36fecb\c10c53af\App_Web_login.aspx.cdcab7d2.x6k5k3oz.0.cs Line: 104
Web admin \IAdmin\ page yields the following:
Description: An error occurred during the compilation of a resource required to service this request. Please review the following specific error details and modify your source code appropriately.
Compiler Error Message: CS0433: The type 'login' exists in both 'c:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Temporary ASP.NET Files\iadmin\5e36fecb\c10c53af\assembly\dl3\9cfddca4\002d37cf_a577cb01\WebProject.DLL' and 'c:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Temporary ASP.NET Files\iadmin\5e36fecb\c10c53af\assembly\dl3\7eb86170\3bf33a25_7d92cb01\App_Web_t8odgkhf.DLL'
Source Error:
|
Source File: c:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Temporary ASP.NET Files\iadmin\5e36fecb\c10c53af\App_Web_login.aspx.cdcab7d2.x6k5k3oz.0.cs Line: 104
|
Version Information: Microsoft .NET Framework Version:2.0.50727.3615; ASP.NET Version:2.0.50727.3618
Looks like the c:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Temporary ASP.NET Files\iadmin\5e36fecb is an empty directory. IClient is full of stuff.
Should this be so?
Any help is appreciated.
Eric Anderson
↧
IMail Error using ActiveSync with Android Jellybean
Hi
I have just spent a couple of days talking to tech support to get IMail working with ActiveSync. It works fine with the iPhone, however using a Samsung Galaxy Note 2 with Android Jellybean and Touchdown installed, it doesn't work.
Can you guys please direct me here as I am doing some testing for a 100 user client and time is closing in real quick at the moment.
Here's what happens:
1) I can connect fine.
2) When I try a sync, I get the following IMail generated errors. I can see you're using C# and string formatting with paramaters. It's a shame the {0} and {1} fields aren't filled :( Anyhow, I'm sure you guys know what these errors mean :)
[23:40:08:487] : [1a42bab8-6e53-405b-a0b2-759ca6717e48] : INFORMATIONAL : julian@xyz.biz : GetItemEstimate : Loaded SQL Data Provider.
[23:40:08:518] : [1a42bab8-6e53-405b-a0b2-759ca6717e48] : INFORMATIONAL : julian@xyz.biz : GetItemEstimate : Successfully retrieved item estimates for {0} folders.
[23:40:08:518] : [1a42bab8-6e53-405b-a0b2-759ca6717e48] : INFORMATIONAL : julian@xyz.biz : GetItemEstimate : Attempting to retrieve item estimate (SyncKey: 0 Class: Email Id: 5aedf978-5951-4f03-863f-8fac682dcb19 Filter Type: ThreeDaysAgo).
[23:40:08:518] : [1a42bab8-6e53-405b-a0b2-759ca6717e48] : ERROR : julian@xyz.biz : GetItemEstimate : (Command) The synchronization state for the folder (Class: {0} Id: {1}) has not been primed. The Sync command must be preformated first.
[23:40:08:518] : [1a42bab8-6e53-405b-a0b2-759ca6717e48] : ERROR : julian@xyz.biz : GetItemEstimate : (System) Must have at least one collection
Parameter name: instance
[23:40:08:659] : [710a164e-527a-40b7-b99b-c0be3cd67b3c] : INFORMATIONAL : julian@xyz.biz : Sync : Loaded SQL Data Provider.
[23:40:08:690] : [710a164e-527a-40b7-b99b-c0be3cd67b3c] : ERROR : julian@xyz.biz : Sync : (WBXML Exception) WbxmlReader.ReadTag() - Unexpected WBXML tag in stream (Expected: 05 Actual: 00).
[23:40:08:862] : [76d3c6c7-c162-4198-b0e3-90f2e43fd903] : INFORMATIONAL : julian@xyz.biz : Sync : Loaded SQL Data Provider.
[23:40:08:893] : [76d3c6c7-c162-4198-b0e3-90f2e43fd903] : ERROR : julian@xyz.biz : Sync : (WBXML Exception) WbxmlReader.ReadTag() - Unexpected WBXML tag in stream (Expected: 05 Actual: 00).
[23:40:09:081] : [944a5395-5dea-414d-a4be-befcc059abaa] : INFORMATIONAL : julian@xyz.biz : Sync : Loaded SQL Data Provider.
[23:40:09:096] : [944a5395-5dea-414d-a4be-befcc059abaa] : ERROR : julian@xyz.biz : Sync : (WBXML Exception) WbxmlReader.ReadTag() - Unexpected WBXML tag in stream (Expected: 05 Actual: 00).
[23:40:09:268] : [963fd6c7-1b37-4d3d-b890-4071c40ad13c] : INFORMATIONAL : julian@xyz.biz : Sync : Loaded SQL Data Provider.
[23:40:09:284] : [963fd6c7-1b37-4d3d-b890-4071c40ad13c] : ERROR : julian@xyz.biz : Sync : (WBXML Exception) WbxmlReader.ReadTag() - Unexpected WBXML tag in stream (Expected: 05 Actual: 00).
Hope you guys can help :)
Cheers
Erron
I have just spent a couple of days talking to tech support to get IMail working with ActiveSync. It works fine with the iPhone, however using a Samsung Galaxy Note 2 with Android Jellybean and Touchdown installed, it doesn't work.
Can you guys please direct me here as I am doing some testing for a 100 user client and time is closing in real quick at the moment.
Here's what happens:
1) I can connect fine.
2) When I try a sync, I get the following IMail generated errors. I can see you're using C# and string formatting with paramaters. It's a shame the {0} and {1} fields aren't filled :( Anyhow, I'm sure you guys know what these errors mean :)
[23:40:08:487] : [1a42bab8-6e53-405b-a0b2-759ca6717e48] : INFORMATIONAL : julian@xyz.biz : GetItemEstimate : Loaded SQL Data Provider.
[23:40:08:518] : [1a42bab8-6e53-405b-a0b2-759ca6717e48] : INFORMATIONAL : julian@xyz.biz : GetItemEstimate : Successfully retrieved item estimates for {0} folders.
[23:40:08:518] : [1a42bab8-6e53-405b-a0b2-759ca6717e48] : INFORMATIONAL : julian@xyz.biz : GetItemEstimate : Attempting to retrieve item estimate (SyncKey: 0 Class: Email Id: 5aedf978-5951-4f03-863f-8fac682dcb19 Filter Type: ThreeDaysAgo).
[23:40:08:518] : [1a42bab8-6e53-405b-a0b2-759ca6717e48] : ERROR : julian@xyz.biz : GetItemEstimate : (Command) The synchronization state for the folder (Class: {0} Id: {1}) has not been primed. The Sync command must be preformated first.
[23:40:08:518] : [1a42bab8-6e53-405b-a0b2-759ca6717e48] : ERROR : julian@xyz.biz : GetItemEstimate : (System) Must have at least one collection
Parameter name: instance
[23:40:08:659] : [710a164e-527a-40b7-b99b-c0be3cd67b3c] : INFORMATIONAL : julian@xyz.biz : Sync : Loaded SQL Data Provider.
[23:40:08:690] : [710a164e-527a-40b7-b99b-c0be3cd67b3c] : ERROR : julian@xyz.biz : Sync : (WBXML Exception) WbxmlReader.ReadTag() - Unexpected WBXML tag in stream (Expected: 05 Actual: 00).
[23:40:08:862] : [76d3c6c7-c162-4198-b0e3-90f2e43fd903] : INFORMATIONAL : julian@xyz.biz : Sync : Loaded SQL Data Provider.
[23:40:08:893] : [76d3c6c7-c162-4198-b0e3-90f2e43fd903] : ERROR : julian@xyz.biz : Sync : (WBXML Exception) WbxmlReader.ReadTag() - Unexpected WBXML tag in stream (Expected: 05 Actual: 00).
[23:40:09:081] : [944a5395-5dea-414d-a4be-befcc059abaa] : INFORMATIONAL : julian@xyz.biz : Sync : Loaded SQL Data Provider.
[23:40:09:096] : [944a5395-5dea-414d-a4be-befcc059abaa] : ERROR : julian@xyz.biz : Sync : (WBXML Exception) WbxmlReader.ReadTag() - Unexpected WBXML tag in stream (Expected: 05 Actual: 00).
[23:40:09:268] : [963fd6c7-1b37-4d3d-b890-4071c40ad13c] : INFORMATIONAL : julian@xyz.biz : Sync : Loaded SQL Data Provider.
[23:40:09:284] : [963fd6c7-1b37-4d3d-b890-4071c40ad13c] : ERROR : julian@xyz.biz : Sync : (WBXML Exception) WbxmlReader.ReadTag() - Unexpected WBXML tag in stream (Expected: 05 Actual: 00).
Hope you guys can help :)
Cheers
Erron
↧