Thomas Jacob writes:

Hello list,

We've encountered a very strange event on one of
our courier-imap/authlib installations. Basically it appears
that the content of one user mailbox (account2)
was being retrieved by a pop3 session of a different user (account1).
Both users were using pop3 exclusively, account2 using a
"leave on server" optiont, account1 didn't, so account1 downloaded
all the emails in account2's maildir at that time, emptying account2's
maildir afterwards.

The log file entries we suspect for the actual downloads.

13:19:26 pop3d: LOGIN, user=account1, <other requests by different accounts> 13:19:26 pop3d: LOGIN, user=account2, <other requests by different accounts>
13:19:26 pop3d: LOGOUT, user=account2, top=0, retr=0, rcvd=18,
sent=1174, time=0
<other requests by different accounts>
13:20:12 pop3d: LOGOUT, user=account1, top=0, retr=27144647, rcvd=1254,
          sent=27505785, time=46

Why exactly do you suspect account1, instead of any one of the "other requests by different accounts"?

In any case this cannot happen for the very simple reason of how POP3 works. In POP3, message files are physically deleted just before the session logs out. Here, account1's messages would end up being deleted at 13:20:11, at the earliest, so when account2 logged on, all the messages would've still been in the account, if your theory that account1 and account2 somehow opened the same maildir was really what happened.




Attachment: pgpT52eMh0Yon.pgp
Description: PGP signature

-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >>  http://get.splunk.com/
_______________________________________________
courier-users mailing list
[email protected]
Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users

Reply via email to