> what does this mean ?
> someone trying to hack in ?
>
> 20011002 140620 Auth Error 24.96.2.204 0 - not in the table
> Xafe29e9998989e9a9bceb2caa866.
>
> that ip is not mine.
> but i also see them for our ip's.

That log entry is indicating that web messaging has detected a user's IP
number that it doesn't recognize for any current session, and has kicked
that user back to the login screen.

That IP is on a big chunk of GTE cable's network:

http://geektools.com/cgi-bin/proxy.cgi?query=24.96.2.204&targetnic=auto

... so I doubt if it's a hack. More likely, you've got your "Ignore Source
Address in Security Check" option UNchecked in Imail's web msg options,
and some cable modem user has a shifting-IP. AOL is notorious for dynamic
IPs... they'll change several times per session.

If you don't CHECK that option, all such users will get kicked out of web
messaging on a regular basis, and log entries like the one above will be
very common. Ipswitch should have labeled that option "Allow AOL users
into webmail", and made it checked by default.


Ron Hornbaker
President/CTO
  .  .  .  .  .  .  .  .  .  .  .  .  http://humankindsystems.com
  .  .  .  .  .  .  .  .  .  .  .  .  w e  c o d e.  w e  c a r e.

  .  http://AnswerTrack.com - eCRM email tracking solution
  .  http://KillerWebMail.com - the name says it all
  .  http://hksi.net/products - EZSignUp, You'veGotIMail!, etc...
  .  http://hksi.net/testimonials - 1,966 admins can't be wrong




Please visit http://www.ipswitch.com/support/mailing-lists.html 
to be removed from this list.

An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/

Reply via email to