Daniel,
Please read the following piece about this fellow that is having a problem
with IMail:
I thought that you might like to see this message. I saw your postings on
the newsgroup as well. I thought you might like to see what IPSwitch's
official standpoint is.
Jeff Johnston
Systems Support
Comcare Health Services
519-963-3651
----- Original Message -----
From: <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Thursday, December 21, 2000 2:20 PM
Subject: Re: Problems with SMTP [T20001221003Y]
> your suspsion seems to be correc, you should enable null senders. Many
> servers user NULL sender for messages from the Postmaster and disabling
this
> is a legacy function of IMail, but makes it not conform to the RFC.
Please
> enablet he null seder and see if the problem is fixed.
> Also, there are serverl patches on our web site that fix problems witht
he
> SMTP service, please see if you have applied them all.
>
> Thank you,
>
> Cary Pennington, MCP
> IMail Product Specialist
> Please see our knowledgebase
> for commonly asked questions.
> http://support.ipswitch.com/kb/
>
>
>
>
> ----- Original Message -----
> From: <[EMAIL PROTECTED]>
> To: <[EMAIL PROTECTED]>
> Sent: Thursday, December 21, 2000 9:25 AM
> Subject: Problems with SMTP [T20001221003YZ489226]
>
>
> > Sender : [EMAIL PROTECTED]
> > Tracking Number : T20001221003YZ489226
> > Pool : IMail Support
> > Sent to : "IPSwitch Support" <[EMAIL PROTECTED]>
> > Date : 12/21/00 9:26 AM
> > ---
> >
> > I am using iMail 6.05 with all the latest patches. On a fairly regular
> bases
> > SMTP32.exe errors out. The service restarts no problem but it is several
> > times a day that this occurs and unless I am sitting here watching the
> > server I may not know for a few hours that anything is wrong. I have
> > attached a sample out of my log files. What I believe is happening is
that
> > OE5 is requesting a return recipt from somone at baronsoftware (Also
using
> > Imail 6.05 with all the latest patches, I know this because I spoke on
the
> > phone with them as I was worried it was an attempted DoS attack)
> > baronsoftware's iMail server is bouncing messages back to my iMail
server
> to
> > try and get the reciept back but I am refusing it because of the blank
> From
> > header. While this may not be what is causing the SMTP errors it is
> > certainly a problem that should be looked at by IPSwitch.
> >
> > Can you please give me some suggestions for how to get my SMTP problems
> > fixed.
> >
> > I have attached all log files from yesterday (When the problem forced me
> to
> > reboot the server 3 times).
> >
> >
> > 12:20 11:22 SMTPD(01B101D4) [10.248.8.15] connect 209.223.197.130 port
> 3344
> > 12:20 11:22 SMTPD(01B101D4) [209.223.197.130] EHLO
mail.baronsoftware.com
> > 12:20 11:22 SMTPD(01B101D4) [209.223.197.130] bogus address in MAIL
> FROM:<>
> > 12:20 11:22 SMTPD(01B201D4) [10.248.8.15] connect 209.223.197.130 port
> 3363
> > 12:20 11:22 SMTPD(01B201D4) [209.223.197.130] EHLO
mail.baronsoftware.com
> > 12:20 11:22 SMTPD(01B201D4) [209.223.197.130] bogus address in MAIL
> FROM:<>
> > 12:20 11:22 SMTPD(01B301D4) [10.248.8.15] connect 209.223.197.130 port
> 3385
> > 12:20 11:22 SMTPD(01B301D4) [209.223.197.130] EHLO
mail.baronsoftware.com
> > 12:20 11:22 SMTPD(01B301D4) [209.223.197.130] bogus address in MAIL
> FROM:<>
> > 12:20 11:22 SMTPD(01B401D4) [10.248.8.15] connect 209.223.197.130 port
> 3409
> > 12:20 11:22 SMTPD(01B401D4) [209.223.197.130] EHLO
mail.baronsoftware.com
> > 12:20 11:22 SMTPD(01B401D4) [209.223.197.130] bogus address in MAIL
> FROM:<>
> > 12:20 11:22 SMTPD(01B501D4) [10.248.8.15] connect 209.223.197.130 port
> 3428
> > 12:20 11:22 SMTPD(01B501D4) [209.223.197.130] EHLO
mail.baronsoftware.com
> > 12:20 11:22 SMTPD(01B501D4) [209.223.197.130] bogus address in MAIL
> FROM:<>
> > 12:20 11:22 SMTPD(01B601D4) [10.248.8.15] connect 209.223.197.130 port
> 3449
> > 12:20 11:22 SMTPD(01B601D4) [209.223.197.130] EHLO
mail.baronsoftware.com
> > 12:20 11:22 SMTPD(01B601D4) [209.223.197.130] bogus address in MAIL
> FROM:<>
> > 12:20 11:22 SMTPD(01B701D4) [10.248.8.15] connect 209.223.197.130 port
> 3468
> > 12:20 11:22 SMTPD(01B701D4) [209.223.197.130] EHLO
mail.baronsoftware.com
> > 12:20 11:22 SMTPD(01B701D4) [209.223.197.130] bogus address in MAIL
> FROM:<>
> > 12:20 11:22 SMTPD(01B801D4) [10.248.8.15] connect 209.223.197.130 port
> 3487
> > 12:20 11:22 SMTPD(01B801D4) [209.223.197.130] EHLO
mail.baronsoftware.com
> > 12:20 11:22 SMTPD(01B801D4) [209.223.197.130] bogus address in MAIL
> FROM:<>
> > 12:20 11:22 SMTPD(01B901D4) [10.248.8.15] connect 209.223.197.130 port
> 3506
> > 12:20 11:22 SMTPD(01B901D4) [209.223.197.130] EHLO
mail.baronsoftware.com
> > 12:20 11:22 SMTPD(01B901D4) [209.223.197.130] bogus address in MAIL
> FROM:<>
> > 12:20 11:22 SMTPD(01BA01D4) [10.248.8.15] connect 209.223.197.130 port
> 3525
> > 12:20 11:22 SMTPD(01BA01D4) [209.223.197.130] EHLO
mail.baronsoftware.com
> > 12:20 11:22 SMTPD(01BA01D4) [209.223.197.130] bogus address in MAIL
> FROM:<>
> > 12:20 11:22 SMTPD(01BB01D4) [10.248.8.15] connect 209.223.197.130 port
> 3544
> > 12:20 11:22 SMTPD(01BB01D4) [209.223.197.130] EHLO
mail.baronsoftware.com
> > 12:20 11:22 SMTPD(01BB01D4) [209.223.197.130] bogus address in MAIL
> FROM:<>
> > 12:20 11:22 SMTPD(01BC01D4) [10.248.8.15] connect 209.223.197.130 port
> 3563
> > 12:20 11:22 SMTPD(01BC01D4) [209.223.197.130] EHLO
mail.baronsoftware.com
> > 12:20 11:22 SMTPD(01BC01D4) [209.223.197.130] bogus address in MAIL
> FROM:<>
> > 12:20 11:22 SMTPD(01BD01D4) [10.248.8.15] connect 209.223.197.130 port
> 3582
> > 12:20 11:22 SMTPD(01BD01D4) [209.223.197.130] EHLO
mail.baronsoftware.com
> > 12:20 11:22 SMTPD(01BD01D4) [209.223.197.130] bogus address in MAIL
> FROM:<>
> > 12:20 11:22 SMTPD(01BE01D4) [10.248.8.15] connect 209.223.197.130 port
> 3601
> > 12:20 11:22 SMTPD(01BE01D4) [209.223.197.130] EHLO
mail.baronsoftware.com
> > 12:20 11:22 SMTPD(01BE01D4) [209.223.197.130] bogus address in MAIL
> FROM:<>
> > 12:20 11:22 SMTPD(01BF01D4) [10.248.8.15] connect 209.223.197.130 port
> 3620
> > 12:20 11:22 SMTPD(01BF01D4) [209.223.197.130] EHLO
mail.baronsoftware.com
> > 12:20 11:22 SMTPD(01BF01D4) [209.223.197.130] bogus address in MAIL
> FROM:<>
> > 12:20 11:22 SMTPD(01C001D4) [10.248.8.15] connect 209.223.197.130 port
> 3640
> > 12:20 11:22 SMTPD(01C001D4) [209.223.197.130] EHLO
mail.baronsoftware.com
> > 12:20 11:22 SMTPD(01C001D4) [209.223.197.130] bogus address in MAIL
> FROM:<>
> > 12:20 11:22 SMTPD(01C101D4) [10.248.8.15] connect 209.223.197.130 port
> 3659
> > 12:20 11:22 SMTPD(01C101D4) [209.223.197.130] EHLO
mail.baronsoftware.com
> > 12:20 11:22 SMTPD(01C101D4) [209.223.197.130] bogus address in MAIL
> FROM:<>
> > 12:20 11:22 SMTPD(01C201D4) [10.248.8.15] connect 209.223.197.130 port
> 3678
> > 12:20 11:22 SMTPD(01C201D4) [209.223.197.130] EHLO
mail.baronsoftware.com
> > 12:20 11:22 SMTPD(01C201D4) [209.223.197.130] bogus address in MAIL
> FROM:<>
> > 12:20 11:22 SMTPD(01C301D4) [10.248.8.15] connect 209.223.197.130 port
> 3697
> > 12:20 11:22 SMTPD(01C301D4) [209.223.197.130] EHLO
mail.baronsoftware.com
> > 12:20 11:22 SMTPD(01C301D4) [209.223.197.130] bogus address in MAIL
> FROM:<>
> > 12:20 11:22 SMTPD(01C401D4) [10.248.8.15] connect 209.223.197.130 port
> 3716
> > 12:20 11:22 SMTPD(01C401D4) [209.223.197.130] EHLO
mail.baronsoftware.com
> > 12:20 11:22 SMTPD(01C401D4) [209.223.197.130] bogus address in MAIL
> FROM:<>
> > 12:20 11:22 SMTPD(01C501D4) [10.248.8.15] connect 209.223.197.130 port
> 3735
> > 12:20 11:22 SMTPD(01C501D4) [209.223.197.130] EHLO
mail.baronsoftware.com
> > 12:20 11:22 SMTPD(01C501D4) [209.223.197.130] bogus address in MAIL
> FROM:<>
> > 12:20 11:22 SMTPD(01C601D4) [10.248.8.15] connect 209.223.197.130 port
> 3754
> > 12:20 11:22 SMTPD(01C601D4) [209.223.197.130] EHLO
mail.baronsoftware.com
> > 12:20 11:22 SMTPD(01C601D4) [209.223.197.130] bogus address in MAIL
> FROM:<>
> > 12:20 11:22 SMTPD(01C701D4) [10.248.8.15] connect 209.223.197.130 port
> 3773
> > 12:20 11:22 SMTPD(01C701D4) [209.223.197.130] EHLO
mail.baronsoftware.com
> > 12:20 11:22 SMTPD(01C701D4) [209.223.197.130] bogus address in MAIL
> FROM:<>
> > 12:20 11:22 SMTPD(01C801D4) [10.248.8.15] connect 209.223.197.130 port
> 3792
> > 12:20 11:22 SMTPD(01C801D4) [209.223.197.130] EHLO
mail.baronsoftware.com
> > 12:20 11:22 SMTPD(01C801D4) [209.223.197.130] bogus address in MAIL
> FROM:<>
> > 12:20 11:22 SMTPD(01C901D4) [10.248.8.15] connect 209.223.197.130 port
> 3811
> > 12:20 11:22 SMTPD(01C901D4) [209.223.197.130] EHLO
mail.baronsoftware.com
> > 12:20 11:22 SMTPD(01C901D4) [209.223.197.130] bogus address in MAIL
> FROM:<>
> > 12:20 11:22 SMTPD(01CA01D4) [10.248.8.15] connect 209.223.197.130 port
> 3830
> > 12:20 11:22 SMTPD(01CA01D4) [209.223.197.130] EHLO
mail.baronsoftware.com
> > 12:20 11:22 SMTPD(01CA01D4) [209.223.197.130] bogus address in MAIL
> FROM:<>
> > 12:20 11:22 SMTPD(01CB01D4) [10.248.8.15] connect 209.223.197.130 port
> 3849
> > 12:20 11:22 SMTPD(01CB01D4) [209.223.197.130] EHLO
mail.baronsoftware.com
> > 12:20 11:22 SMTPD(01CB01D4) [209.223.197.130] bogus address in MAIL
> FROM:<>
> > 12:20 11:22 SMTPD(01CC01D4) [10.248.8.15] connect 209.223.197.130 port
> 3868
> > 12:20 11:22 SMTPD(01CC01D4) [209.223.197.130] EHLO
mail.baronsoftware.com
> > 12:20 11:22 SMTPD(01CC01D4) [209.223.197.130] bogus address in MAIL
> FROM:<>
> > 12:20 11:22 SMTPD(01CD01D4) [10.248.8.15] connect 209.223.197.130 port
> 3887
> > 12:20 11:22 SMTPD(01CD01D4) [209.223.197.130] EHLO
mail.baronsoftware.com
> > 12:20 11:22 SMTPD(01CD01D4) [209.223.197.130] bogus address in MAIL
> FROM:<>
> > 12:20 11:22 SMTPD(01CE01D4) [10.248.8.15] connect 209.223.197.130 port
> 3906
> > 12:20 11:22 SMTPD(01CE01D4) [209.223.197.130] EHLO
mail.baronsoftware.com
> > 12:20 11:22 SMTPD(01CE01D4) [209.223.197.130] bogus address in MAIL
> FROM:<>
> > 12:20 11:22 SMTPD(01CF01D4) [10.248.8.15] connect 209.223.197.130 port
> 3925
> >
> >
> >
> > Jeff Johnston
> > Systems Support
> > Comcare Health Services
> > 519-963-3651
> >
>
>
>
>
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Daniel Donnelly
Sent: Thursday, December 21, 2000 11:36 AM
To: [EMAIL PROTECTED]
Subject: Re: [IMail Forum] Spike in log files
Richard,
I'm afraid I really don't understand what you are saying. What is a 'blank
request to SMTP'? Do you mean a Null sender? Or a Null RCPT To:? Or an empty
body?
What is a 'Read reply'? Read is completely different operation than Reply.
What has this to do with log files? Can you show us the part of a log file
(from both ends, if possible!) that illustrates the problem?
Happy Holidays!
Daniel Donnelly
________________________________________________________
----- Original Message -----
From: "Richard Baroniunas" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Wednesday, December 20, 2000 4:51 PM
Subject: RE: [IMail Forum] Spike in log files
> Hi,
>
> This is interesting because we just received a complaint from someone who
> indicated we were sending in blank requests to their SMTP server which
turns
> out that it is a IMail server. Both of us are using IMail 6.05 with the
two
> patches.
>
> The only difference was that it happened with no one else but them and
that
> they are using the Read reply for their emails. The funny thing is that
he
> sent it to the IMail forum which gets sent to thousands of folks!
>
> Any thoughts.
>
> Richard
>
> -----Original Message-----
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]]On Behalf Of Daniel Donnelly
> Sent: Wednesday, December 20, 2000 2:52 PM
> To: [EMAIL PROTECTED]
> Subject: Re: [IMail Forum] Spike in log files
>
>
> Mike,
>
> How 'big' is the spike? How long is it lasting?
> Since your first thought was spam, I wonder if the log file was 20%, 50%,
or
> 100% bigger than usual? And usually when it is spam, logs are affected for
> only for one day (maybe over 2 days worth of logs, if they get you early
in
> the evening and it continues past midnight) and if longer, is usually
pretty
> easy (as you probably know) spotted in the logs.
>
> I cannot say that I have seen a lot more or bigger attachments, but those
> things are certainly possible. But bigger/more attachments, should not
mean
> a bigger log file . More email, could.
>
> Did anything about the log change (a new service set to log, that was not
> before?)? Did you update IMail recently (new info is reported since 6.04,
> and if implemented, does/can make log files bigger)?
>
> Happy Holidays!
>
> Daniel Donnelly
> ________________________________________________________
>
>
> ----- Original Message -----
> From: "Mike Varre" <[EMAIL PROTECTED]>
> To: "Imail User List" <[EMAIL PROTECTED]>
> Sent: Wednesday, December 20, 2000 12:40 PM
> Subject: [IMail Forum] Spike in log files
>
>
> > Has anyone else seen a recent spike in the size of their log files? My
> > first thought was spam, but I dont see any other evidence of that. Now
> i'm
> > thinking maybe its because its christmas time and people are sending
more
> > and more christmas type attachments and such.
> >
> > Any ideas?
> > Michael Varre
> > goChatPlus.com
> > Project Engineer
> > [EMAIL PROTECTED]
> > 315.475.0500
> >
> >
> >
> > Please visit http://www.ipswitch.com/support/mailing-lists.html
> > to be removed from this list.
> >
> > An Archive of this list is available at:
> > http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
> >
>
>
> Please visit http://www.ipswitch.com/support/mailing-lists.html
> to be removed from this list.
>
> An Archive of this list is available at:
> http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
>
>
> Please visit http://www.ipswitch.com/support/mailing-lists.html
> to be removed from this list.
>
> An Archive of this list is available at:
> http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
>
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
