Kevin,

I'm the one that found this one:
When all dictionary attack fields are set to "0" Imail still somehow
mysteriously adds entries to the CAL.
==KG> Will need more details on this one...
I scan and forward E-mail for his system.  One day they deleted several addresses from their system, and before our scripted address export caught up to the changes, we had delivered several messages to the then defunct accounts.  I had already set their server to all zeros for the dictionary attack prevention settings a month earlier after they had an issue with a branch office getting blocked when one user triggered it on a mailing with old addresses, and since they are behind us, they have no need for this.

I was alerted that they weren't receiving any E-mail and sure enough while their server was up, I was spooling all of their messages on my gateway.  When I went into their server to check it out, I found our gateway's IP in the ACL list along with two others (don't know where they came from).  After I removed the IP and restarted SMTP it took all of the messages.  Thankfully IMail was blocking things silently so that we weren't bouncing when rejected.

Mark reported this to your technical support and the support rep indicated that they essentially didn't believe that this happened when everything was set to zero.  Subsequently, we have found other IP's in the ACL list.  To work around this issue, I set the tolerance for bad addresses to a very high number and the period to 1 minute figuring that this would never be hit and that it would be safer than the zero settings which had caused issues.

If this wasn't the dictionary attack prevention, it could have been another mechanism that uses the ACL list (if there is one).  I believe that he had the auto-deny hack attempts turned on also, and if this throws addresses into the ACL, that might have caused the issue instead of the dictionary attack prevention.  I have turned this off now on his server too, but whatever hit his server also went through my own 8.22 which also had auto-deny hack attempts turned on.

Another FYI concerning this.  His server is configured to only answer the outside world with SMTP AUTH forced since we have port 587 turned on with AUTH, and port 25 is redirected to port 587 at the firewall.  Our gateway however does speak to their standard SMTP port.

Essentially, it appears that unless it was an issue with auto-deny hack attempts, the zero settings were not in fact disabling the dictionary attack prevention.  I would guess that this would be easy to test on your end, and I'm sure that Marc would be happy to allow you to test his server for verification.

Matt




Kevin Gillis wrote:
Hi Marc,

Good observations. 

Comments below...2006.2 is coming in Q1, but Technical Preview Program build
will be available later this month.

Bye for now,

kg 

-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of Marc Catuogno
Sent: Monday, November 13, 2006 21:40
To: [email protected]
Subject: [IMail Forum] 2006.1 Continuing issues - patch date?

Dear Ipswitch,

Where is the patch? WHEN is the patch?:

Attachments forwarded from webmail clients show up as .txt attachments that
can't be opened.
==KG> Should be addressed in 2006.2.

Links sent in plain text Emails aren't able to be clicked
==KG> Should be addressed in 2006.2.

The ability to have a signature attached to replies and forwards would be
nice.
==KG> Should be addressed in 2006.2.

Code the page so that the auto-refresh of the main page doesn't steal focus
from composing an Email.  At least make the auto-refresh update the message
list!
==KG> Should be addressed in 2006.2.

Since the upgrade, my Korean agents can't send or receive Email with Korean
characters.
==KG> Can you send more details?  What IMail Web Messaging are they using
and what encoding are they using? Ja and Chinese encoding support is coming
in 2006.2, may require that we add Korean as well...

When all dictionary attack fields are set to "0" Imail still somehow
mysteriously adds entries to the CAL.
==KG> Will need more details on this one...

Contacts added from clicking the link from a received Email, there is no way
to add both the first and last name so the address sorts alphabetically. It
just adds the whole Email address as the first name.
==KG> Good point.  Sounds like a good request that I'll look into.

When contacts were edited to add a first and last name it seems to add
duplicate entries instead of editing the original contacts.
==KG> This sounds like a possible defect. Can you send me or TS steps to
reproduce ([EMAIL PROTECTED])?

Please make it possible to submit the username and password through a
different front end website so my users don't have to enter their username
and password twice.  This was possible in 2006.04 and earlier and isn't now
in 2006.1.
==KG>Yes, this changed in 2006.1.  Here is a KB link to it.
http://support.ipswitch.com/kb/IM-20051206-DM06.htm


THANK YOU -

Oh, and Safari support -
==KG> Addressed in 2006.2.


To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/

To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/


  

Reply via email to