We're having a very strange problem with Courier IMAP and POP3 services.
Firstly, this server has been running in production for six months with no
issues and no recent configuration problems.
Firstly, our configuration is:
Vanilla RedHat 7.2 Kernel 2.4.7
Postfix-->Maildrop-->Procmail-->Amavis-->McAffee-->/Maildir/
Where mail is picked up by:
Courier imapd
Courier pop3d
Squirrell Mail
Most clients use Outlook or Outlook Express, some use Pegasus or NetScape
Messenger. All authentication is working fine. Again, mail has been flowing
through this system for months with no problems.
For the last week or so, we've begun to have strange problems with users not
being able to download mail. The certain problem e-mail is correctly
delivered to /maildir/, but can only be retreived via webmail.
Here's the problem:
Certain e-mail messages with attachements, varying in size from about 140K
to a few megabytes, cause Courier to time-out the tcp connection on the way
to the client at the beginning of the message transfer. This happens with
both IMAP and POP3. We've done packet captures on the client side and see
that in every case, the mail message begins to transfer, but within six or
seven TCP packets, the connection times out on the client side. Outlook will
send a "ZZZZ LOGOUT" back to the IMAP server and then crash. The server then
responds with a TCP RST packet.
Now, if a user's maildir contains one of these magic e-mails, their POP3
download will fail. However, they can go into the maildir using SquirrelMail
(webmail), read the message, and download the attachment. When they delete
the messages using SquirrelMail, their mail will flow again.
In IMAP, the client can enumerate messages and read non-problem messages.
However, attempting to open a problem message causes Outlook to hang for
about a minute and then crash. Pegasus just sits on the download screen at
1% or 2%.
The problem messages are consistent. If an e-mail that is problematic is
copied into their maildir, the problem will happen to the receiver. If we
delete a message, and the original sender sends the same attachement again,
the problem will reoccur.
maillog shows the IMAP session as a successful LOGIN and then DISCONNECTED.
This problem is currently affecting about ten out of 200 users.
There are no apparent hardware problems, and otherwise the server continues
to function normally. When these problem e-mails are deleted, behavior
returns to normal.
If anyone has seen anything like this, please help!
Here's a reconstructed TCP session of the failure:
[client]
========
001C UID FETCH 18 (UID FLAGS BODY.PEEK[] INTERNALDATE)
[SERVER]
========
* 1 FETCH (UID 18 FLAGS () BODY[] {1887113}
Return-Path: <xxx.xxx>
Delivered-To: [EMAIL PROTECTED]
Received: from localhost (xxx.xxx [127.0.0.1])
.by xxx.xxx (Postfix) with ESMTP
.id 44C0CA00CE; Tue, 9 Jul 2002 13:13:44 -0700 (PDT)
Received: from fmejia0 (host-148-244-194-146.block.alestra.net.mx
[148.244.194.146])
.by xxx.xxx (Postfix) with ESMTP
.id 641B7A00D0; Tue, 9 Jul 2002 13:13:11 -0700 (PDT)
From: "Ivan Lopez" <xxx.xxx>
To: <xxx.xxx>
Cc: <xxx.xxx>
Subject: RV: PROGRAMA
Date: Tue, 9 Jul 2002 15:16:16 -0500
Message-ID: <PDEOLHKEHNBOODEDJHNGGENCCEAA.xxx.xxx>
MIME-Version: 1.0
Content-Type: multipart/mixed;
.boundary="----=_NextPart_000_013D_01C2275B.92306EB0"
X-Priority: 3 (Normal)
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook IMO, Build 9.0.2416 (9.0.2910.0)
Importance: Normal
X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2919.6700
X-Virus-Scanned: by AMaViS! (snapshot-20020300) w/ VirusScan for UNIX
This is a multi-part message in MIME format.
------=_NextPart_000_013D_01C2275B.92306EB0
Content-Type: multipart/alternative;
.boundary="----=_NextPart_001_013E_01C2275B.92306EB0"
------=_NextPart_001_013E_01C2275B.92306EB0
Content-Type: text/plain;
.charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
Ivan, esta es una prueba, por eso te reenvio este mensaje.
Abel H.G.
Departamento de Sistemas
-----Mensaje original-----
De: Ivan Lopez [mailto:xxx.xxx]
Enviado el: Lunes, 08 de Julio de 2002 04:57 p.m.
Para: Ivan Serrato
Asunto: RE: PROGRAMA
------=_NextPart_001_013E_01C2275B.92306EB0
Content-Type: text/html;
.charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML xmlns=3D"http://www.w3.org/TR/REC-html40" xmlns:o =3D=20
"urn:schemas-microsoft-com:office:office" xmlns:w =3D=20
"urn:schemas-microsoft-com:office:word"><HEAD>
<META content=3D"text/html; charset=3Diso-8859-1" =
http-equiv=3DContent-Type>
<META content=3DWord.Document name=3DProgId>
<META content=3D"MSHTML 5.00.2920.0" name=3DGENERATOR>
<META content=3D"Microsoft Word 9" name=3DOriginator><LINK=20
href=3D"cid:[EMAIL PROTECTED]" rel=3DFile-List><!--[if gte =
mso 9]><xml>
<o:OfficeDocumentSettings>
<o:DoNotRelyOnCSS/>
</o:OfficeDocumentSettings>
</xml><![endif]--><!--[if gte mso 9]><xml>
<w:WordDocument>
<w:View>Normal</w:View>
<w:Zoom>0</w:Zoom>
<w:DocumentKind>DocumentEmail</w:DocumentKind>
<w:EnvelopeVis/>
=
<w:DisplayHorizontalDrawingGridEvery>0</w:DisplayHorizontalDrawingGridEve=
ry>
=
<w:DisplayVerticalDrawingGridEvery>0</w:DisplayVerticalDrawingGridEvery>
<w:UseMarginsForDrawingGridOrigin/>
<w:Compatibility>
<w:FootnoteLayoutLikeWW8/>
<w:ShapeLayoutLikeWW8/>
<w:AlignTablesRowByRow/>
<w:ForgetLastTabAlignment/>
<w:DoNotUseHTMLParagraphAutoSpacing/>
<w:LayoutRawTableWidth/>
<w:LayoutTableRowsApart/>
</w:Compatibility>
</w:WordDocument>
</xml><![endif]-->
<STYLE>P.MsoNormal {
.FONT-FAMILY: "Times New Roman"; FONT-SIZE: 10pt; MARGIN: 0cm 0cm 0pt; =
mso-ansi-language: EN-US; mso-style-parent: ""; mso-pagination: =
widow-orphan; mso-fareast-font-family: "Times New Roman"
}
LI.MsoNormal {
.FONT-FAMILY: "Times New Roman"; FONT-SIZE: 10pt; MARGIN: 0cm 0cm 0pt; =
mso-ansi-language: EN-US; mso-style-parent: ""; mso-pagination: =
widow-orphan; mso-fareast-font-family: "Times New Roman"
}
DIV.MsoNormal {
.FONT-FAMILY: "Times New Roman"; FONT-SIZE: 10pt; MARGIN: 0cm 0cm 0pt; =
mso-ansi-language: EN-US; mso-style-parent: ""; mso-pagination: =
widow-orphan; mso-fareast-font-family: "Times New Roman"
}
P.MsoAutoSig {
.FONT-FAMILY: "Times New Roman"; FONT-SIZE: 10pt; MARGIN: 0cm 0cm 0pt; =
mso-ansi-language: EN-US; mso-pagination: widow-orphan; =
mso-fareast-font-family: "Times New Roman"
}
LI.MsoAutoSig {
.FONT-FAMILY: "Times New Roman"; FONT-SIZE: 10pt; MARGIN: 0cm 0cm 0pt; =
mso-ansi-language: EN-US; mso-pagination: widow-orphan; =
mso-fareast-font-family: "Times New Roman"
}
DIV.MsoAutoSig {
.FONT-FAMILY: "Times New Roman"; FONT-SIZE: 10pt; MARGIN: 0cm 0cm 0pt; =
mso-ansi-language: EN-US; mso-pagination: widow-orphan; =
mso-fareast-font-family: "Times New Roman"
}
SPAN.EstiloCorreo15 {
.COLOR: black; mso-style-type: personal-compose; mso-ansi-font-size: =
10.0pt; mso-ascii-font-family: Arial; mso-hansi-font-family: Arial; =
mso-bidi-font-family: Arial
}
DIV.Section1 {
.page: Section1
}
</STYLE>
</HEAD>
<BODY lang=3DES style=3D"tab-interval: 36.0pt">
<DIV><FONT color=3D#0000ff face=3DArial size=3D2><SPAN =
class=3D587390820-09072002>Ivan,=20
esta es una prueba, por eso te reenvio este mensaje.</SPAN></FONT></DIV>
<DIV><FONT color=3D#0000ff face=3DArial size=3D2><SPAN=20
class=3D587390820-09072002></SPAN></FONT> </DIV>
<DIV><EM><FONT color=3D#0000ff face=3DArial size=3D2><SPAN=20
class=3D587390820-09072002>Abel H.G.</SPAN></FONT></EM></DIV>
<DIV><FONT color=3D#0000ff face=3DArial size=3D2><SPAN=20
class=3D587390820-09072002><EM>Departamento de =
Sistemas</EM></SPAN></FONT></DIV>
<DIV align=3Dleft class=3DOutlookMessageHeader dir=3Dltr><FONT =
face=3DTahoma=20
size=3D2>-----Mensaje original-----<BR><B>De:</B> Ivan Lopez=20
[mailto:xxx.xxx]<BR><B>Enviado el:</B> Lunes, 08 de Julio =
de 2002=20
04:57 p.m.<BR><B>Para:</B> Ivan Serrato<BR><B>Asunto:</B> RE:=20
PROGRAMA<BR><BR></FONT></DIV>
<DIV> </DIV></BODY></HTML>
------=_NextPart_001_013E_01C2275B.92306EB0--
------=_NextPart_000_013D_01C2275B.92306EB0
Content-Type: application/vnd.ms-excel;
.name="SUPRESSORES #1.xls"
Content-Transfer-Encoding: base64
Content-Disposition: attachment;
.filename="SUPRESSORES #1.xls"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[client]
========
ZZZZ LOGOUT
(This occurs after a sixty second timeout waiting for the server)
-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Stuff, things, and much much more.
http://thinkgeek.com/sf
_______________________________________________
courier-users mailing list
[EMAIL PROTECTED]
Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users