As seen in a post on Security Basics list:
The Infrastructure Forum of the U.K. has warned that "out of office"
auto-replies are used by thieves to target empty houses. The thieves
purchase lists of e-mail addresses and mass-mail the list, hoping to receive
"out of office" responses. Criminals the
> Specifically, "Chapter 2:
Installation -- Checking Your Primary Host Name" should clarify that
dynamically-assigned (DHCP) IPs are not acceptable -- that a static IP
is required.
No offense, but that kind of seems like a no brainier to me. Any thing that
is going to be providing a service, espec
I will second that.
All new servers I bring up, either production or test or lab, start off with
a dynamic address in a protected zone. Once the OS is loaded and prepared,
(patched, service packs and such,) the network configuration is changed to
reflect what it is going to be set up as. Then, any
> My question is, is there a way to auth the cf server so it will
> relay mail to all mail servers so I can set the relay back to "No
> Relay"?
Covered a zillion times in the archives. The only safe settings are
'Do Not Relay' (AUTH only) and 'Relay for Addresses' (AUTH plus IPs).
If
Hi Doug,
Thank you so much for demystifying this for me. It's nice to know that
I shouldn't see this again when I move the server.
Considering that this is a known issue and that it required a complete
re-install to recover from, I must recommend to IPSwitch that the
documentation be updated to
> My question is, is there a way to auth the cf server so it will relay mail to all
>mail servers so I can set the relay back to "No Relay"?
ColdFusion does not support secure SMTP logins. However, you CAN
'authorize' the CF server. Select "Relay mail for" and specify the IP
address range of yo
I´m looking for a spanish template for Imail server 6.
I was looking in the template page at ipswitch.com, but there are just
demos of then.
Thanks for your help.
To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswi
Hi Len and other IMail Dudes,
Len asked...
>MSN / Imail speak SMTP, not registry. How would this registry value
>be manifested in the SMTP dialog?
Beats me, Len. I was hoping you might know. :) Here's what I think might have
happened, let me know if I'm way off-base.
We have approx 1100 virtua
> recommended, but not necessary). You can have a single DNS server
that is
> authoritative for your domains (responding to anyone in the world who
asks
> about them), and acts as a recursive DNS server for only certain IPs
(so
> the IMail server can ask the MX record for hotmail.com, but I can't)
Adam,
What 'email' topology/setup do you use? The error that you are recieving
looks like it's trying to push two or more statement to the SQL server at
the same time (common SQL issue). Have you double checked your DSN via:
http://support.ipswitch.com/kb/IM-20001219-DM02.htm ? If you are not
h
Hi Len,
The SMTP debugging option is checked on our IMail Server, and has been for as long as
I can remember. I sometimes wondered if that could be costing us a bit of a
performance hit on the mail server - but we've never bothered to turn it off to see
what would happen.
As far as logging go
one final detail on the hotmail issue.
This is what I see in logs when I send my large message and it is
rejected because of size:
-
SMTP (1948) ERR undeliverable 552 Requested action not taken: exceeded size limit
SMTP (1948) SMTP_DELIV_FAILED
SMTP (1948)
Dave,
You should have had static IP's assigned in your test environment. When you
installed Imail with a DHCP address, it created a virtual server as your
main server host name. From our experience, this will cause problems when
changing over to a production server with a static IP.
Set your te
And I am not quite sure how to address the problem. I unchecked the box
that says "do not use recursion." Stopped and restarted the DNS service.
We are a small shop. 1 dns server. I do not think I will be around long
if I allow recursion because I do not have multiple DNS servers to do
the rest
Thursday, December 5, 2002 you wrote:
> If you drop the connection instead of sending a 5xx, the remote
> server will simply put you in the retry queue. If you let it get up
> to 5 MB each time, you are opting for 20 x 5 MB = 100 MB of wasted
> network and disk I/O over the message's lifetime, ins
Anyway, I'm in the process of cracking open our SMTP logs from earlier
this week... approx 30-50 meg a day - so bear with me! I'll try to make
some 'before' and 'after' comparisons and I'll post the results to the
list. Hopefully this will help some of the other IMail Admins who are
having p
Thanks for your response.. I was afraid of that
hey, it used to be worse. Imail earlier would send 5 msgs to one ip, and
then wait !! :)))
Then Ipswitch changed it to no wait.
, but I was also hoping use
a gateway would help with the problems associated with lists.
It will sometimes, b
Over the last few days I have been experiencing
some very heavy load on our Imail server from SMTP. I am running most recent
version of Imail server. I looked in the sys logs today and saw a bunch of
weird entries that i have never seen before, these entries just keep showing up
throughout t
lol...
>What RFC change are you referring to?
I am echoing the verbs of one Eric S., who also said he found entries
that were not an hour for hotmail. -2 for speaking another persons
verbs.
I just checked dnsstuff.com, and you are correct about the time as well.
I was incorrect to forward any ve
Over the last few days I have been experiencing
some very heavy load on our Imail server from SMTP. I am running most recent
version of Imail server. I looked in the sys logs today and saw a bunch of
weird entries that i have never seen before, these entries just keep showing up
throughout t
I have someone that has Cold Fusion sending mail from her web pages using a form. The
cf server is connecting to the mail server. It works great when I have the relay set
to "Relay mail for local users only" but when I set the relay to "No Relay" the cf
server is still connecting to the mail ser
Sandy and Eric,
Thank you for your feedback, is this the KB you are referring to:
IM-19980116-DM02 How to delete the old IP address of my IMail server
Thanks again, Keith
-Original Message-
From: Eric Shanbrom [mailto:[EMAIL PROTECTED]]
Hi,
Nope, we ruled out message size and the possibility that our customer's msn.com
mailboxes were over their limit. It wasn't just a few msn.com email addresses either
- it blew up on us on a huge scale. Every piece of mail our mail server tried to send
to msn.com for several days (including
I did make that change on my mail server ( Imail 6.06 ) from 204.x.x.x to
10.0.x.x and didn't have any problems.
Edison
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Sanford
Whiteman
Sent: Thursday, December 05, 2002 3:23 PM
To: Keith Johnson
Subject: R
Len,
Thanks for your response.. I was afraid of that, but I was also hoping use
a gateway would help with the problems associated with lists. Just trying to
put a band-aid on the List problem until I can implement a better list
service.
What do you think about setting the SMTP processes above 10
I was looking at the wrong thing... it was the SOA Expiration. DOH
Eric S
- Original Message -
From: "Len Conrad" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Thursday, December 05, 2002 5:26 PM
Subject: RE: [IMail Forum] hotmail rejection???
>
> >Yes, I admit there is much to l
Went from UPD to TCP/UDP march of either this or last year can't remember
through the fog...must be beer time
Eric S
- Original Message -
From: "Len Conrad" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Thursday, December 05, 2002 5:26 PM
Subject: RE: [IMail Forum] hotmail rejection??
> not really. If the msg size limit is 5 MB, it serves no protective
> purpose to accept a 20 Mb msg fully and THEN reject it.
If you drop the connection instead of sending a 5xx, the remote server
will simply put you in the retry queue. If you let it get up to 5 MB
each time, you are opting f
Absolutely no issues if it is done correctly...See the KB
Eric S
- Original Message -
From: "Sanford Whiteman" <[EMAIL PROTECTED]>
To: "Keith Johnson" <[EMAIL PROTECTED]>
Sent: Thursday, December 05, 2002 6:22 PM
Subject: Re: [IMail Forum] Switching IP's after installation
> > Does anyo
> I cleared the entry mail.domain.com from the (Default) key and
> *poof* like magic! MSN.com started accepting our mail immediately
> (no reboot required).
I have some doubts about this having any effect on your message
transmission.
The (default) value should not have been fil
I'm running Imail 6.06 on a box that never goes higher that 30% cpu
utilization. Today it's hitting 100% I have rebooted but it's still slow.
The first thing to do is go to Task Manager, go to the Processes tab, and
click the "CPU" button to sort the processes by CPU time. That will show
the
Imail 7.13, the server is set to gateway all mail to an external SMTP
box. One list in particular is set to 50 recipients per message. Every
time this list is sent it kills SMTP, meaning SMTP will not accept any
more connections. Simply resetting the service fixes the problem. When
digging throug
I had a very serious problem.
After several successful test installations on production servers, we
performed a final "clean" installation in our lab. For security
reasons, the lab is on a private, non-routable subnet, with DHCP
providing temporary IPs, etc. Installation went as expected, throug
I don't know if this is happening, but this was Terry's suggestion.
It's a ridiculous implementation, if you ask me.
not really. If the msg size limit is 5 MB, it serves no protective
purpose to accept a 20 Mb msg fully and THEN reject it.
For an operation the size of Hotfail, it's essen
After our mail server failed (at the OS level), I manually copied user directories etc
to a backup
device where IMail was already installed. It kept us going while I repaired the main
server.
However, my boss has asked if there is some way we can set up software that will
automatically keep
file
> Does anyone know of any issues of changing the IP address (NAT
> address) of your Imail server (running 7.13) after it has been
> installed.
A FAQ - search the Ipswitch KB for directions.
-Sandy
To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http:
Yes, I admit there is much to learn. I have much to learn about DNS.
Just when you think you've got it, an RFC change (in March) throws
everyone, and expecially me for a loop.
What RFC change are you referring to?
I just got off the phone with Eric S and he was kind enough to let me
point Ima
I'm running Imail 6.06 on a box that never goes higher that 30% cpu
utilization. Today it's hitting 100% I have rebooted but it's still slow.
The maillog log seem normal in size. However netstat -na shows almost 500
open connnections for Local Address 0.0.0.0 with port other that 110, 143,
80. A sn
Yes, I admit there is much to learn. I have much to learn about DNS.
Just when you think you've got it, an RFC change (in March) throws
everyone, and expecially me for a loop.
hmm, DNS operation on Internet has not really changed in years.
I just got off the phone with Eric S and he was kind
I don't know if this is happening, but this was Terry's suggestion.
It's a ridiculous implementation, if you ask me.
not really. If the msg size limit is 5 MB, it serves no protective purpose
to accept a 20 Mb msg fully and THEN reject it.
For an operation the size of Hotfail, it's essen
until tommorrow. Here is a
successful email as reported in the syslog:
20021205 135425 127.0.0.1 SMTP (1856) Connect hotmail.com
[65.54.254.151:25] (1)
20021205 135425 127.0.0.1 SMTP (1856) 220
mc4-f27.law16.hotmail.com Microsoft ESMTP MAIL Service, Version:
5.0.2195.5600 ready at Thu, 5 Dec
Len,
Thursday, December 5, 2002 you wrote:
LC> you mean SMTP, now ready to send, goes to read the .mbx and croaks?
Sorry, didn't explain that very well.
Our client sends a large message to a user at msn and/or hotmail. Or
a message is sent to our client who has a mail forwarding to a
msn/hotmai
> you mean SMTP, now ready to send, goes to read the .mbx and croaks?
Terry's saying that the Hotmail servers read the total size of the
message while the data is still being streamed and drop the connection
outright if quotas are exceeded.
I don't know if this is happening, but this was T
Title: Switching IP's after installation
Does anyone know of any issues of changing the IP address (NAT address) of your Imail server (running 7.13) after it has been installed. We need to go from a server ip address of 192.168.100.x to an ip address of 10.10.50.x. Thanks for any aid...
__
(Default) = mail.domain.com
Aliases = domain.com (in hex, if I remember right)
Official = mail.domain.com
I cleared the entry mail.domain.com from the (Default) key and *poof* like
magic! MSN.com started accepting our mail immediately (no reboot required).
I would REALLY REALLY like to know ho
That is not really the problem. The problem is an invalid page message,
not that the page refreshes but no files are attached.
Anybody else?
rusty
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of Ron Hornbaker
Sent: Wednesday, December 04, 2002 6:13 PM
Sorry,
The text was pushed together, let me try again.
12:05 10:08 SMTP-(1520) Connect smtp2.crystaltech.com
[216.119.106.211:25] (1)
12:05 10:08 SMTP-(1520) 220 smtp2.crystaltech.com ESMTP
12:05 10:08 SMTP-(1520) >EHLO axx.org
12:05 10:08 SMTP-(1520) 250-smtp2.crystaltech.co
Here is the situation:
Imail 7.13, the server is set to gateway all mail to an external SMTP
box. One list in particular is set to 50 recipients per message. Every
time this list is sent it kills SMTP, meaning SMTP will not accept any
more connections. Simply resetting the service fixes the proble
So, what's up with MSN anyway?
BustedWorthy Computing
Len
To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
The most common reason I see for these from msn and hotmail is
really, really big files.
you mean SMTP, now ready to send, goes to read the .mbx and croaks?
Len
To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40
Thursday, December 5, 2002 you wrote:
JS> 12:01 01:15 SMTP-(0168) Connect msn.com [207.46.181.13:25] (1)
JS> 12:01 01:15 SMTP-(0168)
JS> 12:01 01:15 SMTP-(0168) SMTP_DELIV_FAILED
JS> 12:01 01:15 SMTP-(0168) >QUIT
The most common reason I see for these from msn and hotmail is
Hi Guys,
We had a similar problem earlier this week with MSN.com SMTP server rejecting
connections from our IMail Server (running 7.13 HF1). Another related thread here in
the forum described not being able to send mail to a certain domain. Here's what
happened and how we fixed it...
Problem:
Hi Guys,
We had a similar problem earlier this week with MSN.com SMTP server rejecting
connections from our IMail Server (running 7.13 HF1). Another related thread here in
the forum described not being able to send mail to a certain domain. Here's what
happened and how we fixed it...
Problem:
> I read this in the Imail manual and want to make it work. But it
> doesnotseemtowork...IftheNDRcomes from
> [EMAIL PROTECTED] and says that the intended recipient is
> "unknown user", if I forward the message to the removal_alias,
> wouldn'ttheRepl
Also, can imailsrv be run from command line?
For example if I want to remove an address from a list, can I do this
imailsrv -remove listdomain.com MyList [EMAIL PROTECTED]
-Original Message-
From: Andrey Fyodorov
Sent: Thursday, December 05, 2002 2:05 PM
To: [EMAIL PROTECTED]
Subject: [
I read this in the Imail manual and want to make it work. But it does not seem to work.
-Does anyone know if the -ruhost switch still works?
-What are all the switches available with IMAILSRV?
-If the NDR comes from [EMAIL PROTECTED] and says that the intended
recipient is "unknown user", if I fo
20021205 081019 127.0.0.1 SMTP (2512) MX connect fail "64.4.50.71"
... is not hotmail MX
20021205 081021 127.0.0.1 SMTPD (002301F8) [209.55.118.2] connect
209.55.118.2 port 3502
20021205 081042 127.0.0.1 SMTP (2512) MX connect fail "64.4.50.7"
no
to a recursive
DNS server), and Len's advice (restricting that recursive DNS server so
only your users can use it), you will be able to send mail, and won't have
any DNS-related issues.
Here is the syslog from a test attempt:
20021205 080956 127.0.0.1 SMTP (2512) Trying hotmail.c
> >>With KWM, the initial frameload after log in will definitely be slower
>
> If I rewrite the page with my own custom page without images
> would that make
> a noticeable difference in load time.
No - the load time (only about 2.5 seconds on a fast line) is the result
of 5 frames loading html pa
>>Can you tell me why you switched to KWM?
>Some of the "killer" features; graphic display of mailbox size,
calendar.
The ability to set when the web page will time out, instead of being
fixed at 12 minutes.
Scott
To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archiv
Yes Scott I allowed recursion for a short time, but len conrad reminded
me why we implemented it -DOS attacks. Here is the syslog from a test
attempt:
20021205 080921 127.0.0.1 SMTPD (000601F4) [209.55.118.2] connect
209.55.118.2 port 3477
20021205 080955 127.0.0.1 SMTP (2512)
d
>>Can you tell me why you switched to KWM?
Some of the "killer" features; graphic display of mailbox size, calendar.
Andrew P. Kaplan
A pessimist sees the difficulty in every opportunity; an optimist sees the
opportunity in every difficulty" --Winston Churchill
> -Original Message
Andrew Kaplan wrote:
> I recently upgrade from 6.x to 7.13
> AND upgraded from Classic to KWM.
> A few people have commented that KWM
> is slower.
I'm considering getting either Classic or Killer Webmail templates. Can you
tell me why you switched to KWM? Is it just for the prettier backgrounds,
>>With KWM, the initial frameload after log in will definitely be slower
If I rewrite the page with my own custom page without images would that make
a noticeable difference in load time.
Andrew P. Kaplan
A pessimist sees the difficulty in every opportunity; an optimist sees the
opportunity in
> I recently upgrade from 6.x to 7.13 AND upgraded from Classic
> to KWM. A few
> people have commented that KWM is slower. The box is an Athlon
> with 512 megs
> handling mail for 5,000 users. IMGate does the smtp/mx so the
> box is lightly
> loaded. Is it 7.13, KWM or just a irrational comment.
It was my understanding that if I allow recursion, then I might as well
allow malicious attackers to check my location for domains
unrestricted recursion opens you
1. to DoS attacks where the attacker spoof the UDP source addrsss (can't
trace him) and sends you 1000's of queries per minute fo
It was my understanding that if I allow recursion, then I might as well
allow malicious attackers to check my location for domains, etc. Is this
a correct assessment?
No.
Recursion means that your DNS server will answer any DNS query (both for
domains that it is authoritative for, as well as
It was my understanding that if I allow recursion, then I might as well
allow malicious attackers to check my location for domains, etc. Is this
a correct assessment? The way I understand recursion, it is for
outsiders to check entries, and Not, for our DNS server to check others.
Is this a correct
Thanks... I'll check this out...
Vincent
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of Gerry Massat
Sent: Thursday, December 05, 2002 3:17 AM
To: [EMAIL PROTECTED]
Subject: Re: [IMail Forum] Webmail Times Out
Consider upgrading to Mozilla or Netscap
I recently upgrade from 6.x to 7.13 AND upgraded from Classic to KWM. A few
people have commented that KWM is slower. The box is an Athlon with 512 megs
handling mail for 5,000 users. IMGate does the smtp/mx so the box is lightly
loaded. Is it 7.13, KWM or just a irrational comment.
Andrew P. Kapl
As a rule, we do not alow recursion on our DNS.
That would explain your problem. If your DNS servers do not allow
recursion, they will not give you answers about Hotmail. But, since you
got some answers for Hotmail, that means that whatever DNS server(s) are
hooked up to IMail do allow rec
>Can you have IMail use another recursive DNS?
As a rule, we do not alow recursion on our DNS. I do not know of any,
maybe earthlink, that might allow recursion. I wouldn't know how to tell
imail to use another DNS server that allows recursion anyways. Do you?
>Can you take the list of ip's and f
If it was a DNS problem on our end, what would you guess it might be?
commandline.net has no DNS errors, so Hotmail shouldn't be having any
problem validating you in DNS.
The TTL on our end? Meaning we have updates, albeit old data, still in
our nameserver, which might be the reason that the
73 matches
Mail list logo
