I just looked in that directory and there was a couple of 100 of megs of
files.  These all appeared to be attachments to emails.  Jpegs, pdfs, doc,
xls, etc.  Is this where web mail temporarily stores uploaded docs or are
people losing their attachments?

Chuck Schick
Warp 8, Inc.
(303)-421-5140
www.warp8.com 

-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Simon Dodd
Sent: Friday, August 08, 2008 4:26 PM
To: [email protected]
Subject: RE: [IMail Forum] Webmail stopped working - eek!


We have the issue resolved; after four hours of Ipswitch looking at it, our
VP for Technology figured it out. 

For the record, here's what the problem was. Older versions of Imail appear
to write large numbers of files to [volume]:\imail\spool\web but has no
provision for deleting those files once they're created. We found a huge
number of files in that directory, and once we deleted them, webmail came
back to life. So that was the underlying cause, although we're not certain
about precisely how it links up to the symptom.

I don't know if we should be a little disturbed that Ipswitch tech support
looked at this issue - with full remote access to the server - for four
hours and this possibility at no point occurred to the experts.

-Simon



-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Simon Dodd
Sent: Friday, August 08, 2008 12:27 PM
To: [email protected]
Subject: RE: [IMail Forum] Webmail stopped working - eek!

I'm still searching other fields, but both columns you mention are clean; if
that was the problem, though, wouldn't that cause authentication to fail
across the board, not just in webmail?

-Simon


-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Kevin Rogers
Sent: Friday, August 08, 2008 11:29 AM
To: [email protected]
Subject: Re: [IMail Forum] Webmail stopped working - eek!

You might have been hit by a SQL injector attack.  I was hit again last
night and have spent the morning cleaning up the mess.  Look for <script>
tags inside your Imail database.  The injector changes the userdir and
mailaddr fields in my Imail database, so my users were getting the same
authentication error you describe.  If you have a web site that is
accessible to the world, look through the rest of the database to make sure
it hasn't been injected as well.

Kevin



Simon Dodd wrote:
> We're having an issue with webmail in Imail 8.15. All services except
> webmail are working, and there have been no recent updates or changes
on
> the server. Sometime last night, however, webmail ceased to be
> accessible.
>
> The service indicates that it is started, and visitors to the webmail
> page (http://63.134.128.131:8383) using Firefox can get the login
> screen, but visitors using IE or Safari get a blank page if it doesn't
> just hang interminably on loading. This holds on the local machine,
too,
> where http://127.0.0.1:8383 gets the same symptoms. That rules out a
> firewall issue, and its accessibility in Firefox seems to rule out the
> service outright failing to start.
>
> Even for Firefox users, though, bringing up the page does them no
good,
> because even having loaded the page, known good usernames and
passwords
> are rejected with an authentication error. Connecting to the server on
> POP3, I can log in with the same credentials, which rules out a
problem
> with the database server or the connection thereto. I'm assuming,
> dubitante, that these are simply different facets of the same problem.
>
> Restarting the service doesn't help. Restarting the server itself -
> twice - doesn't help. Changing the port number doesn't help. Neither
the
> list archive or Ipswitch's knowledge base seem to have any useful
> guidance. If anyone has a solution - or any guidance or thoughts to
> offer - I'd appreciate it.
>
> Regards,
>
> Simon Dodd,
> Hostmaster,
> Joink Internet
>
> E: [EMAIL PROTECTED]
> T: +1 (812) 234 5100 x116
> F: +1 (812) 234 5144
>
> ------------------------
> "In Critical and baffling situations, it is always best to return to
> first principle and simple action" - Sir Winston Churchill
>
>
> To Unsubscribe: http://imailserver.com/support/discussion_list/
> List Archive:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
> Knowledge Base/FAQ: http://imailserver.com/support/kb.html
>
>
>   

To Unsubscribe: http://imailserver.com/support/discussion_list/
List Archive:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://imailserver.com/support/kb.html

No virus found in this incoming message.
Checked by AVG. 
Version: 8.0.100 / Virus Database: 270.5.12/1595 - Release Date:
8/6/2008 8:23 AM

To Unsubscribe: http://imailserver.com/support/discussion_list/
List Archive:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://imailserver.com/support/kb.html

No virus found in this incoming message.
Checked by AVG. 
Version: 8.0.100 / Virus Database: 270.5.12/1595 - Release Date:
8/6/2008 8:23 AM

To Unsubscribe: http://imailserver.com/support/discussion_list/
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://imailserver.com/support/kb.html



To Unsubscribe: http://imailserver.com/support/discussion_list/
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://imailserver.com/support/kb.html

Reply via email to