You might have been hit by a SQL injector attack. I was hit again last
night and have spent the morning cleaning up the mess. Look for
<script> tags inside your Imail database. The injector changes the
userdir and mailaddr fields in my Imail database, so my users were
getting the same authentication error you describe. If you have a web
site that is accessible to the world, look through the rest of the
database to make sure it hasn't been injected as well.
Kevin
Simon Dodd wrote:
We're having an issue with webmail in Imail 8.15. All services except
webmail are working, and there have been no recent updates or changes on
the server. Sometime last night, however, webmail ceased to be
accessible.
The service indicates that it is started, and visitors to the webmail
page (http://63.134.128.131:8383) using Firefox can get the login
screen, but visitors using IE or Safari get a blank page if it doesn't
just hang interminably on loading. This holds on the local machine, too,
where http://127.0.0.1:8383 gets the same symptoms. That rules out a
firewall issue, and its accessibility in Firefox seems to rule out the
service outright failing to start.
Even for Firefox users, though, bringing up the page does them no good,
because even having loaded the page, known good usernames and passwords
are rejected with an authentication error. Connecting to the server on
POP3, I can log in with the same credentials, which rules out a problem
with the database server or the connection thereto. I'm assuming,
dubitante, that these are simply different facets of the same problem.
Restarting the service doesn't help. Restarting the server itself -
twice - doesn't help. Changing the port number doesn't help. Neither the
list archive or Ipswitch's knowledge base seem to have any useful
guidance. If anyone has a solution - or any guidance or thoughts to
offer - I'd appreciate it.
Regards,
Simon Dodd,
Hostmaster,
Joink Internet
E: [EMAIL PROTECTED]
T: +1 (812) 234 5100 x116
F: +1 (812) 234 5144
------------------------
"In Critical and baffling situations, it is always best to return to
first principle and simple action" - Sir Winston Churchill
To Unsubscribe: http://imailserver.com/support/discussion_list/
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://imailserver.com/support/kb.html
To Unsubscribe: http://imailserver.com/support/discussion_list/
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://imailserver.com/support/kb.html
