I have had some NON-AOL users experience a similar problem, and they were behind a
proxy.
I think the problem is not only from a shifting IP address proxy, it is because web
messaging uses the 8383 port and most proxies only force the client to go through port
80. So what ends up happening is the web messaging server starts to see two ip
addresses: the user's ip, and the proxy's ip at other times especially if you have
banner ads on your page. So it gets confused and just forces the user off.
I think that is what is happening because the users that were experiencing the problem
on my site were behind a static IP address proxy.
My question is, by checking this option, how unsecure web messaging has become? Did we
let down all the defenses or does it still have some security enforcement mechanism?
---------------------
http://www.jeeran.com - free hosting for Arabs and Muslims
---------- Original Message ----------------------------------
From: <[EMAIL PROTECTED]>
Reply-To: [EMAIL PROTECTED]
Date: Fri, 6 Apr 2001 12:45:00 -0500
>> > What was the trick for making Webmail viewable by AOL customers?
>>
>> Check the "Ignore Source Address in Security Check" option in the IMail
>> Admin Console | localhost | Web Messaging screen
>
>> Will this change open up iMail to be taken over by spammers?
>
>Brent,
>
>Not in the least... it only pertains to web messaging security, not SMTP
>server security. The label on that option should really read "Allow webmail
>access by AOL users"... that's how important it is. AOL dialup users are
>behind a shifting-IP proxy, so their IP number changes like crazy, sometimes
>on every new http request. IMail's default session control method for
>webmail checks the user's IP, and makes sure it matches against the IP
>entered when the user first logged in. As you can see, this will in effect
>kick out AOL users at random, usually on their first or second page load
>after logging in.
>
>-ron
>
>
>
>
>
>______________________________________________________________________
>The HKSI-IMail Admin List is hosted by........ Humankind Systems, Inc.
>Questions, Comments or Glowing Praise...... mailto:[EMAIL PROTECTED]
>Searchable List Archive.... http://www.mail-archive.com/[email protected]
>To Manage your Subscription......... http://humankindsystems.com/lists
>
______________________________________________________________________
The HKSI-IMail Admin List is hosted by........ Humankind Systems, Inc.
Questions, Comments or Glowing Praise...... mailto:[EMAIL PROTECTED]
Searchable List Archive.... http://www.mail-archive.com/[email protected]
To Manage your Subscription......... http://humankindsystems.com/lists
