Some days ago our webmail service was not more accessible. Because only a few customers are using the webmail frontend, this service usually runs very stable and hasn't created any trouble in the last months.
Checking the logfiles I've seen that in this case a user has logged on regulary and clicked on a binary attachment. It looks like the user has installaed on his client a download-manager (http://www.stardownloader.com/) and this software has made numerous requests to the webmail service so that it was not more accessible. I don't know if the error is on Star Downloader's or Imail's side, but if any SW connecting from an single IP is able to crash the webmail service we have a problem. I've attached a log snipped. Usually our webmail-logfiles has 0.1 to 0.5 MB per day. This day the logfile has had 10 MB caused by the numerous "malicious connection type" error lines. We've in use Win2k, latest SP, Imail 7.15. Markus Gufler
20030806 081248 Info - ip.ad.dr.es Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) http://www.comput.info/index.asp POST /login.cgi HTTP/1.1. 20030806 081249 Info - ip.ad.dr.es Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) http://www.comput.info/index.asp GET /X4aeec998c9c99b9a9394a0cdff/menu.cgi HTTP/1.1. 20030806 081253 Info - ip.ad.dr.es Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) http://mail.comput.info/X4aeec998c9c99b9a9394a0cdff/menu.cgi GET /X4aeec998c9c99b9a9394a0cdff/imailc.gif HTTP/1.1. 20030806 081253 Info - ip.ad.dr.es Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) http://mail.comput.info/X4aeec998c9c99b9a9394a0cdff/menu.cgi GET /X4aeec998c9c99b9a9394a0cdff/custom_images/spacer.gif HTTP/1.1. 20030806 081254 Info - ip.ad.dr.es Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) http://mail.comput.info/X4aeec998c9c99b9a9394a0cdff/menu.cgi GET /X4aeec998c9c99b9a9394a0cdff/custom_images/menu_angle_DDEEFF.gif HTTP/1.1. 20030806 081254 Info - ip.ad.dr.es Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) http://mail.comput.info/X4aeec998c9c99b9a9394a0cdff/menu.cgi GET /X4aeec998c9c99b9a9394a0cdff/custom_images/menu_egg_DDEEFF.gif HTTP/1.1. 20030806 081307 Info - ip.ad.dr.es Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) http://mail.comput.info/X4aeec998c9c99b9a9394a0cdff/menu.cgi GET /X4aeec998c9c99b9a9394a0cdff/readmail.49917.cgi?uid=info&mbx=Main HTTP/1.1. 20030806 081312 Info - ip.ad.dr.es Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) http://mail.comput.info/X4aeec998c9c99b9a9394a0cdff/readmail.49917.cgi?uid=info&mbx=Main GET /X4aeec998c9c99b9a9394a0cdff/descend.gif HTTP/1.1. 20030806 081313 Info - ip.ad.dr.es Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) http://mail.comput.info/X4aeec998c9c99b9a9394a0cdff/readmail.49917.cgi?uid=info&mbx=Main GET /X4aeec998c9c99b9a9394a0cdff/del.gif HTTP/1.1. 20030806 081313 Info - ip.ad.dr.es Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) http://mail.comput.info/X4aeec998c9c99b9a9394a0cdff/readmail.49917.cgi?uid=info&mbx=Main GET /X4aeec998c9c99b9a9394a0cdff/top.gif HTTP/1.1. 20030806 081313 Info - ip.ad.dr.es Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) http://mail.comput.info/X4aeec998c9c99b9a9394a0cdff/readmail.49917.cgi?uid=info&mbx=Main GET /X4aeec998c9c99b9a9394a0cdff/mail_new.gif HTTP/1.1. 20030806 081313 Info - ip.ad.dr.es Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) http://mail.comput.info/X4aeec998c9c99b9a9394a0cdff/readmail.49917.cgi?uid=info&mbx=Main GET /X4aeec998c9c99b9a9394a0cdff/urgent.gif HTTP/1.1. 20030806 081314 Info - ip.ad.dr.es Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) http://mail.comput.info/X4aeec998c9c99b9a9394a0cdff/readmail.49917.cgi?uid=info&mbx=Main GET /X4aeec998c9c99b9a9394a0cdff/att_new.gif HTTP/1.1. 20030806 081314 Info - ip.ad.dr.es Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) http://mail.comput.info/X4aeec998c9c99b9a9394a0cdff/readmail.49917.cgi?uid=info&mbx=Main GET /X4aeec998c9c99b9a9394a0cdff/bottom.gif HTTP/1.1. 20030806 081320 Info - ip.ad.dr.es Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) http://mail.comput.info/X4aeec998c9c99b9a9394a0cdff/readmail.49917.cgi?uid=info&mbx=Main GET /X4aeec998c9c99b9a9394a0cdff/rmail.2272.cgi?&mbx=Main&msg=9&msgsort=3&mbxdate=37376 HTTP/1.1. 20030806 081427 Info - ip.ad.dr.es Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) http://mail.comput.info/X4aeec998c9c99b9a9394a0cdff/menu.cgi GET /X4aeec998c9c99b9a9394a0cdff/readmail.49917.cgi?uid=info&mbx=Main HTTP/1.1. 20030806 081433 Info - ip.ad.dr.es Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) http://mail.comput.info/X4aeec998c9c99b9a9394a0cdff/readmail.49917.cgi?uid=info&mbx=Main GET /X4aeec998c9c99b9a9394a0cdff/mail.gif HTTP/1.1. 20030806 081440 Info - ip.ad.dr.es Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) http://mail.comput.info/X4aeec998c9c99b9a9394a0cdff/readmail.49917.cgi?uid=info&mbx=Main GET /X4aeec998c9c99b9a9394a0cdff/rmail.17189.cgi?&mbx=Main&msg=11&msgsort=1&mbxdate=37376 HTTP/1.1. 20030806 081454 Info - ip.ad.dr.es Star Downloader GET /X4aeec998c9c99b9a9394a0cdff/attach/Main/11/1/1060150480/KG-50L5803.zip HTTP/1.0. 20030806 081454 Socket Error - ip.ad.dr.es Error while writing sockect due to error 10053 or malicious connection type. 20030806 081454 Socket Error - ip.ad.dr.es Error while writing sockect due to error 10053 or malicious connection type. 20030806 081454 Socket Error - ip.ad.dr.es Error while writing sockect due to error 10053 or malicious connection type. 20030806 081454 Socket Error - ip.ad.dr.es Error while writing sockect due to error 10053 or malicious connection type. 20030806 081454 Socket Error - ip.ad.dr.es Error while writing sockect due to error 10053 or malicious connection type. 20030806 081454 Socket Error - ip.ad.dr.es Error while writing sockect due to error 10053 or malicious connection type. 20030806 081454 Socket Error - ip.ad.dr.es Error while writing sockect due to error 10053 or malicious connection type. 20030806 081454 Socket Error - ip.ad.dr.es Error while writing sockect due to error 10053 or malicious connection type. 20030806 081454 Socket Error - ip.ad.dr.es Error while writing sockect due to error 10053 or malicious connection type. 20030806 081454 Socket Error - ip.ad.dr.es Error while writing sockect due to error 10053 or malicious connection type. 20030806 081454 Socket Error - ip.ad.dr.es Error while writing sockect due to error 10053 or malicious connection type. 20030806 081454 Socket Error - ip.ad.dr.es Error while writing sockect due to error 10053 or malicious connection type. 20030806 081454 Socket Error - ip.ad.dr.es Error while writing sockect due to error 10053 or malicious connection type. 20030806 081454 Socket Error - ip.ad.dr.es Error while writing sockect due to error 10053 or malicious connection type. 20030806 081454 Socket Error - ip.ad.dr.es Error while writing sockect due to error 10053 or malicious connection type. 20030806 081454 Socket Error - ip.ad.dr.es Error while writing sockect due to error 10053 or malicious connection type. 20030806 081454 Socket Error - ip.ad.dr.es Error while writing sockect due to error 10053 or malicious connection type. 20030806 081454 Socket Error - ip.ad.dr.es Error while writing sockect due to error 10053 or malicious connection type. 20030806 081454 Socket Error - ip.ad.dr.es Error while writing sockect due to error 10053 or malicious connection type. 20030806 081454 Socket Error - ip.ad.dr.es Error while writing sockect due to error 10053 or malicious connection type. 20030806 081454 Socket Error - ip.ad.dr.es Error while writing sockect due to error 10053 or malicious connection type. 20030806 081454 Socket Error - ip.ad.dr.es Error while writing sockect due to error 10053 or malicious connection type. 20030806 081454 Socket Error - ip.ad.dr.es Error while writing sockect due to error 10053 or malicious connection type. 20030806 081455 Info - ip.ad.dr.es Star Downloader GET /X4aeec998c9c99b9a9394a0cdff/attach/Main/11/1/1060150481/KG-50L5803.zip HTTP/1.0. 20030806 081456 Socket Error - ip.ad.dr.es Error while writing sockect due to error 10053 or malicious connection type. 20030806 081456 Socket Error - ip.ad.dr.es Error while writing sockect due to error 10053 or malicious connection type. 20030806 081456 Socket Error - ip.ad.dr.es Error while writing sockect due to error 10053 or malicious connection type. 20030806 081456 Socket Error - ip.ad.dr.es Error while writing sockect due to error 10053 or malicious connection type. 20030806 081456 Socket Error - ip.ad.dr.es Error while writing sockect due to error 10053 or malicious connection type. 20030806 081456 Socket Error - ip.ad.dr.es Error while writing sockect due to error 10053 or malicious connection type. 20030806 081456 Socket Error - ip.ad.dr.es Error while writing sockect due to error 10053 or malicious connection type. 20030806 081456 Socket Error - ip.ad.dr.es Error while writing sockect due to error 10053 or malicious connection type. 20030806 081456 Socket Error - ip.ad.dr.es Error while writing sockect due to error 10053 or malicious connection type. 20030806 081456 Socket Error - ip.ad.dr.es Error while writing sockect due to error 10053 or malicious connection type. 20030806 081456 Socket Error - ip.ad.dr.es Error while writing sockect due to error 10053 or malicious connection type. 20030806 081456 Socket Error - ip.ad.dr.es Error while writing sockect due to error 10053 or malicious connection type. ....
