OK for logfile growing big, but what about the application event log recording warnings with event number 32 every 5 minutes ? Does the POP3-CAPA also fill your events logs ? I dont like the color red Benoit
----- Original Message ----- From: "Anders Ränzlöw" <[EMAIL PROTECTED]> To: <[email protected]> Sent: Wednesday, October 22, 2003 1:05 PM Subject: Re: POP3S error with CAPA | Benito, | | this extra "CAPA-line" shall not make a significant problem. | I have customers checking their mail each 5-th second 24 hours around, | logfile grow rather big, | so far this haven't caused me any problem (that I'm aware of...). | Of course I send a polite mail to these customers, asking them to change | their settings.... | | /Anders | | | ----- Original Message ----- | From: "Benoit Sarton" <[EMAIL PROTECTED]> | To: <[email protected]> | Sent: Wednesday, October 22, 2003 8:54 AM | Subject: Re: POP3S error with CAPA | | | > Your are right, André | > | > After the CAPA error line, I have the logon -ERR ( quite normal because I | > have KILLED the acount ) | > The problem is that I still get this request every 5 minutes precisely, | all | > day and night | > So my events log contains dozens of red warning, and so does the pop3s | logs | > | > It is frightening that there could be something like a denial of service | > through pop request. | > What if hundreds of requests with this CAPA pop your server every minute ? | > It seems there is nothing like blocking a pop request 'at the door' | > | > Benoit | > | > ----- Original Message ----- | > From: "Anders Ränzlöw" <[EMAIL PROTECTED]> | > To: <[email protected]> | > Sent: Tuesday, October 21, 2003 5:37 PM | > Subject: Re: POP3S error with CAPA | > | > | > | Benito, | > | | > | I think this happends when customers use some mailclients (guess some | > | versions of Eudora). | > | It seems to me like the function not is supported by POP3S and hence the | > | ERR - normally the next line in the pop3log shows that the customer logs | > on | > | (pass), if correct accont and password is entered. | > | | > | /Anders | > | | > | | > | ----- Original Message ----- | > | From: "Benoit Sarton" <[EMAIL PROTECTED]> | > | To: <[email protected]> | > | Sent: Tuesday, October 21, 2003 4:07 PM | > | Subject: POP3S error with CAPA | > | | > | | > | > POP3S started recently to send several red warnings in my events log | > with | > | > message : | > | > | > | > win32 api routine "logon failure user not known" failed | > | > the maping beetween acounts and ID sécurity ID could not take place | > | > | > | > ( first line is originally in english, 2nd line I've translated) | > | > | > | > After checking the POP3 logs, I find that a client sends regular | request | > ( | > | > every 5 minutes or so ), wich logs as : | > | > | > | > from 213.36.xxx.xxx CAPA [date and time] -ERR unknown or invalid | command | > | in | > | > this state [CAPA] | > | > | > | > I supposed that the acount authentication was the cause of the | problem, | > | and | > | > I have tried to delete, and re-create, and then definitively delete | this | > | > user acount, but I still get this error message, | > | > both in events log and in pop3 logs | > | > | > | > I'm now wondering if this CAPA ( a pop3 request to be told the pop | > server | > | > capabilities, as I understand it ) can cause an error. | > | > | > | > Did anybody have to deal with this [CAPA] pop3 command ? | > | > Does IMS POP3S handles it correctly ? | > | > | > | > Benoit | > | > | > | > | > | > | > | > This is the discussion list for the IMS Free email server software. | > | > To unsubscribe send mailto:[EMAIL PROTECTED] | > | > | > | > Delivered by Rockliffe MailSite | > | > http://www.rockliffe.com/mailsite | > | > Rock Solid Software (tm) | > | > | > | > | > | > -- | > | > X-ANTIBANNER: xx. | > | | > | This is the discussion list for the IMS Free email server software. | > | To unsubscribe send mailto:[EMAIL PROTECTED] | > | | > | Delivered by Rockliffe MailSite | > | http://www.rockliffe.com/mailsite | > | Rock Solid Software (tm) | > | | > | > This is the discussion list for the IMS Free email server software. | > To unsubscribe send mailto:[EMAIL PROTECTED] | > | > Delivered by Rockliffe MailSite | > http://www.rockliffe.com/mailsite | > Rock Solid Software (tm) | > | | This is the discussion list for the IMS Free email server software. | To unsubscribe send mailto:[EMAIL PROTECTED] | | Delivered by Rockliffe MailSite | http://www.rockliffe.com/mailsite | Rock Solid Software (tm) | This is the discussion list for the IMS Free email server software. To unsubscribe send mailto:[EMAIL PROTECTED] Delivered by Rockliffe MailSite http://www.rockliffe.com/mailsite Rock Solid Software (tm)
