We have the same problem (NT 4.0, SP6, IMail v.6.00, Thawte SSL cert, Linux Firewall).
Our lightly loaded server seems
to experience this about once a week so it sounds like it may be load dependent. I
noticed that if I do a Netstat
command while IMail-SSL is hung that there is always a "CLOSE_WAIT" connection (The
remote end has shut down, waiting
for the socket to close). I believe that this is part of a "ESTABLISHED -> CLOSE_WAIT
-> LAST_ACK -> CLOSED" TCP socket
sequence. So...perhaps the LAST_ACK is never received (maybe a user has disconnected
prematurely) and that is enough to
confuse IMail's SSL handler.
IPSWITCH: it is obvious that this is a common and fairly serious problem so I would
strongly encourage you to
investigate further.
Thanx.
----------------------
Lee Buskey wrote:
>
> We are DEFINITELY having this problem! It is really cramping
> our style. I have not been following the list closely enough obviously,
> as I was beginning to think it was just me. We are VERY disappointed
> with Ipswitch on this one. We reinstalled completely from scratch, no
> help, then waited for three days for a callback from Tech Support, just
> to find out they went on a company vacation! Hmmmm.. Vacations are Ok,
> but they should have returned our call.
> The problem seems to be very intermittent. And for us, the
> service doesn�t actually stop, in NT terms anyway. The SSL port stops
> responding, and you go to restart the service, and it usually times out
> on the stop request, but not always. Then the service starts
> successfully. This sort makes the Windows 2000 service auto-restart
> functions useless, as NT thinks the service is still working. Some days
> it stops 4 or 5 times a day, right now we are on our third day where it
> has not stopped. It is our requirement to force SSL on all sessions in
> order to stay within our admin polices, so this is a show stopper for
> us. I hope everyone else out there with this problem would post, so
> IPSWITCH can get a clear message that this is not a isolated issue, and
> needs to be fixed. Anyone else out there with some ideas as to why this
> might be happening, I'd love to hear them.
> Korey, what is the monitoring program you were referring to that
> you use to watch and restart the service? I would be EXTREMELY
> interested in such an interim solution. You reply off list is welcome
> if you like.
>
> -----Original Message-----
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]] On Behalf Of Kaj
> S�ndergaard Laursen
> Sent: Monday, April 30, 2001 6:46 AM
> To: '[EMAIL PROTECTED]'
> Subject: RE: [IMail Forum] Web (iwebmsg.exe) stops serving SSL pages
>
> >Another option would be to use SSL tunnelling. I've seen this used on
> >a
> low volume IMail
> >server and it worked well, although I can't recall the program that was
> used (it was free, >if I recall correctly).
>
> Maybe it was Stunnel (www.stunnel.org). I use it to make SSL-encrypted
> access to POP3 and IMAP. But I have not yet any experience in how it
> works under heavy load.
>
> Kaj
>
> Please visit http://www.ipswitch.com/support/mailing-lists.html
> to be removed from this list.
>
> An Archive of this list is available at:
> http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
>
> Please visit http://www.ipswitch.com/support/mailing-lists.html
> to be removed from this list.
>
> An Archive of this list is available at:
> http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
