Your are right, André After the CAPA error line, I have the logon -ERR ( quite normal because I have KILLED the acount ) The problem is that I still get this request every 5 minutes precisely, all day and night So my events log contains dozens of red warning, and so does the pop3s logs
It is frightening that there could be something like a denial of service through pop request. What if hundreds of requests with this CAPA pop your server every minute ? It seems there is nothing likStatus: O e blocking a pop request 'at the door' Benoit ----- Original Message ----- From: "Anders Ränzlöw" <[EMAIL PROTECTED]> To: <[email protected]> Sent: Tuesday, October 21, 2003 5:37 PM Subject: Re: POP3S error with CAPA | Benito, | | I think this happends when customers use some mailclients (guess some | versions of Eudora). | It seems to me like the function not is supported by POP3S and hence the | ERR - normally the next line in the pop3log shows that the customer logs on | (pass), if correct accont and password is entered. | | /Anders | | | ----- Original Message ----- | From: "Benoit Sarton" <[EMAIL PROTECTED]> | To: <[email protected]> | Sent: Tuesday, October 21, 2003 4:07 PM | Subject: POP3S error with CAPA | | | > POP3S started recently to send several red warnings in my events log with | > message : | > | > win32 api routine "logon failure user not known" failed | > the maping beetween acounts and ID sécurity ID could not take place | > | > ( first line is originally in english, 2nd line I've translated) | > | > After checking the POP3 logs, I find that a client sends regular request ( | > every 5 minutes or so ), wich logs as : | > | > from 213.36.xxx.xxx CAPA [date and time] -ERR unknown or invalid command | in | > this state [CAPA] | > | > I supposed that the acount authentication was the cause of the problem, | and | > I have tried to delete, and re-create, and then definitively delete this | > user acount, but I still get this error message, | > both in events log and in pop3 logs | > | > I'm now wondering if this CAPA ( a pop3 request to be told the pop server | > capabilities, as I understand it ) can cause an error. | > | > Did anybody have to deal with this [CAPA] pop3 command ? | > Does IMS POP3S handles it correctly ? | > | > Benoit | > | > | > | > This is the discussion list for the IMS Free email server software. | > To unsubscribe send mailto:[EMAIL PROTECTED] | > | > Delivered by Rockliffe MailSite | > http://www.rockliffe.com/mailsite | > Rock Solid Software (tm) | > | > | > -- | > X-ANTIBANNER: xx. | | This is the discussion list for the IMS Free email server software. | To unsubscribe send mailto:[EMAIL PROTECTED] | | Delivered by Rockliffe MailSite | http://www.rockliffe.com/mailsite | Rock Solid Software (tm) | This is the discussion list for the IMS Free email server software. To unsubscribe send mailto:[EMAIL PROTECTED] Delivered by Rockliffe MailSite http://www.rockliffe.com/mailsite Rock Solid Software (tm)
