Hello Anthony. We were aware of the problem of SMTP Auth causing the SMTP
server to crash using Eudora 4.3, so we had the problem tested. What we
came up with is the following:
1. IMail Server should be on a machine that is part of a domain, not a
workgroup, or have a valid host name and domain name in the DNS settings.
2. After adding a virtual host you must stop and restart both pop and smtp
in IMail Administrator.
3. You must use the full virtual host name for the login name o
f a user on a virtual host: user%virtualhost.com
4. When relaying mail for addresses, have "Allow remote mail to local
groups", "Allow remote view of local groups", "Refuse NULL <> senders",
"Check valid sender", and "Auto deny possible hack attempts" checked in the
SMTP Securities tab.
These four steps fixed a problem for a customer who was relaying mail for
addresses using Eudora 4.3 and IMail 6.03. Try these steps and see if they
work for you, too. Thanks!
Tanya M. DeScott
Technical Support Engineer
Ipswitch, Inc.
----- Original Message -----
From: Anthony Santen <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Friday, March 31, 2000 8:40 PM
Subject: Re: [IMail Forum] SMTP security in Imail 5.x
> No, 1 ONE only a SINGLE customer !!!!! can bring down your WHOLE ENTIRE
> COMPLETE email system by trying Eudora 4.3
>
> Use Eudora 4.3 1x and your mail server is HUNG for ALL your customers
>
> Imail promised a fix for today.
> The day isn't over yet, but they have many angry customers
>
> Anthony Santen
> ----- Original Message -----
> From: "Sales" <[EMAIL PROTECTED]>
> To: <[EMAIL PROTECTED]>
> Sent: Friday, March 31, 2000 1:50 PM
> Subject: Re: [IMail Forum] SMTP security in Imail 5.x
>
>
> > what i find wierd is that it just started.
> > we have been running 5.09 for some time now.
> > what cuold have gone wrong on allour systems at the same time to have it
> > start ???
> >
> >
> > At 01:08 PM 03/23/00 -0500, you wrote:
> > >version 6+ makes it WORSE. The most stable version is 5.07, but there
is
> a
> > >Y2K bug in that.
> > >
> > >mark
> > >----- Original Message -----
> > >From: "Kelly Britt" <[EMAIL PROTECTED]>
> > >To: <[EMAIL PROTECTED]>
> > >Sent: Thursday, March 23, 2000 11:16 AM
> > >Subject: RE: [IMail Forum] SMTP security in Imail 5.x
> > >
> > >
> > >> Does 6.03 fix this? Has Ipswitch issued *any* response?
> > >>
> > >>
> > >> Thanks,
> > >> Kelly Britt
> > >>
> > >> "Need A Dot Com?"
> > >> ____________________________________________________
> > >> [EMAIL PROTECTED] http://www.needa.com 770-663-1535
> > >>
> > >>
> > >> > -----Original Message-----
> > >> > From: [EMAIL PROTECTED]
> > >> > [mailto:[EMAIL PROTECTED]]On Behalf Of Anthony
> Santen
> > >> > Sent: Tuesday, March 21, 2000 6:15 PM
> > >> > To: [EMAIL PROTECTED]
> > >> > Subject: Re: [IMail Forum] SMTP security in Imail 5.x
> > >> >
> > >> >
> > >> > Scot,
> > >> > We're collecting customers who have this problem, as IPSWITCH
claims
> > >it's
> > >> > NOT them, but everyone else.
> > >> >
> > >> > We have conclusively tested and proved that the problem 'goes away'
> if
> > >you
> > >> > use another software for SMTP AUTH.
> > >> >
> > >> > The problem lies in one of the following problems (or a
combination)
> > >> >
> > >> > - File locking of IMAILSEC.DLL
> > >> > - Thread contingency within IMAILSEC.DLL
> > >> > - Timing issues regarding username - password table lookup
> > >> > - Resource locking during another operation
> > >> >
> > >> > We have now finally had to give up and use Sendmail for outgoing
> > >> > mail relay.
> > >> > Not pretty, but highly efficient.
> > >> >
> > >> > Anthony Santen
> > >> >
> > >> >
> > >> > ----- Original Message -----
> > >> > From: "Scot Desort" <[EMAIL PROTECTED]>
> > >> > To: <[EMAIL PROTECTED]>
> > >> > Sent: Tuesday, March 21, 2000 5:05 PM
> > >> > Subject: [IMail Forum] SMTP security in Imail 5.x
> > >> >
> > >> >
> > >> > > We are running Imail 5.x. We have all along had SMTP relay
> > >> > security set to
> > >> > > relay for our IP blocks, and AUTH enabled for hosting customers
who
> > >are
> > >> > > off-net.
> > >> > >
> > >> > > Suddenly, we had a rush of Netscape Messenger/Mail clients who
> suddenl
> > >y
> > >> > > where being asked to enter their password to send mail out. Going
> to
> > >the
> > >> > > Ipswitch KB, this is a known issue. The fix is to disable AUTH.
> This
> > >> > creates
> > >> > > a problem for our off-net hosting customers.
> > >> > >
> > >> > > I started to play around with the "relay mail for local users"
> choice.
> > >> > > Instead of restricting access by IP block, this would allow
off-net
> > >> > hosting
> > >> > > customers to use our SMTP server, yet still prevent that AUTH
error
> > >with
> > >> > > netscape.
> > >> > >
> > >> > > This is not an ideal solution, though. It still opens us up by
> > >allowing
> > >> > > someone to relay mail through us by simply specifying a valid
user
> > >name.
> > >> > >
> > >> > > Has any else run across this situation? Is there a better way
> > >> > of handling
> > >> > > this? A new problem with this fix has cropped up. We outsource
> > >> > some of our
> > >> > > DSL. These customer often have their own mail servers. We now
have
> to
> > >> > enter
> > >> > > those mail hosts and IP addresses into the accept.txt file. And
> > >> > since the
> > >> > > file does not take wildcards, well, you can see the problem
> > >> > becoming quite
> > >> > > cumbersome.
> > >> > >
> > >> > > Any thoughts??
> > >> > >
> > >> > > --
> > >> > > Scot
> > >> > >
> > >> > >
> > >> > > Please visit http://www.ipswitch.com/support/mailing-lists.html
> > >> > > to be removed from this list.
> > >> > >
> > >> >
> > >> > Please visit http://www.ipswitch.com/support/mailing-lists.html
> > >> > to be removed from this list.
> > >> >
> > >>
> > >> Please visit http://www.ipswitch.com/support/mailing-lists.html
> > >> to be removed from this list.
> > >>
> > >
> > >Please visit http://www.ipswitch.com/support/mailing-lists.html
> > >to be removed from this list.
> >
> > Please visit http://www.ipswitch.com/support/mailing-lists.html
> > to be removed from this list.
> >
>
> Please visit http://www.ipswitch.com/support/mailing-lists.html
> to be removed from this list.
>
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
