Re: [xmail] BUG : XMAIL 1.27 with SSL
Now I am using original XMAIL-1.27.tar.gz source without simultaneous POP3
logins, no STUNNEL, use NATIVE XMAIL SSL. The problem still exists, K9-MAIL
will report IllegalFormatConversonException when I receive more then 100-200
emails. So It should be XMAIL SSL problem. Because When I reuse STUNNEL to do a
POP3 tunnel again, the problem will fix.
Original Message
From: Bart Mortelmans b...@bim.be
To: t...@os.st, XMail Users Mailing List xmail@xmailserver.org
Sent: Tue, May 26, 2015, 3:13 PM
Subject: Re: [xmail] BUG : XMAIL 1.27 with SSL
Is there any way for you to test if the problem exists if you don't
allow simultaneous POP3 logins?
Oversea Site via xmail schreef op 26/05/15 om 08:14:
POP3Utils.cpp - ADD POP3 Concurrent Login. I used this function over 5
years.. I don't know C++ programming. Sorry :)
}
if (pPOPMD-ulFlags POPF_MSG_DELETED) {
UPopSendErrorResponse(hBSock, ERR_MSG_DELETED,
pPOPSD-iTimeout);
ErrSetErrorCode(ERR_MSG_DELETED);
return ERR_MSG_DELETED;
}
UsrGetMailboxPath(pPOPSD-pUI, szMsgFilePath,
sizeof(szMsgFilePath), 1);
StrNCat(szMsgFilePath, pPOPMD-szMsgName, sizeof(szMsgFilePath));
/*
* ADDED CODE START
*/
FILE *pMsgFile = fopen(szMsgFilePath, rb);
if (pMsgFile == NULL) {
UPopSendErrorResponse(hBSock, ERR_FILE_OPEN, pPOPSD-iTimeout);
ErrSetErrorCode(ERR_FILE_OPEN);
return ERR_FILE_OPEN;
}
fclose(pMsgFile);
/*
* ADDED CODE END
*/
SysSNPrintf(szResponse, sizeof(szResponse) - 1,
+OK SYS_OFFT_FMT bytes, pPOPMD-llMsgSize);
if (BSckSendString(hBSock, szResponse, pPOPSD-iTimeout) 0)
return ErrGetErrorCode();
if (pPOPMD-llMsgSize 0
Original Message
From: Oversea Site via xmail xmail@xmailserver.org
To: XMail Users Mailing List xmail@xmailserver.org
Sent: Tue, May 26, 2015, 1:56 PM
Subject: Re: [xmail] BUG : XMAIL 1.27 with SSL
FEDORA 4 X86_64 GLIBC 2.3.6-3 (I can't upgrade it to the lastest version..
Because I have a chiliasp 3.6.2 32-bit run ASP VBSCRIPT on APACHE 1.3
32-bit software, it need GLIBC 2.3.x and Kernel 2.6)
KERNEL 3.3 MOD FROM FC15 (It will display KERNEL 2.6.43 Number). Kernel is
not a main problem. Because I have been test 2.6.32 or other. same problem
was found.
REAL HARDWARE - INTEL B85M i3-4150 16G RAM SATA3 RAID 1 LINUX SOFTRAID1
MDADM
Corp. Email System is not heavily use when I test it in HK TIME midnight..
Anyway I will test this issue in other linux distribution in VM, such as
CentOS. (You can give me any linux distribution, let's build the same
platform in VM. I use virtualbox.
[root@bravo logs]# uname -a
Linux bravo 2.6.43-gcc402 #3 SMP Sun May 17 23:10:29 HKT 2015 x86_64 x86_64
x86_64 GNU/Linux
[root@bravo logs]#
[root@bravo logs]# ldd /var/MailRoot/bin/XMail127v3
linux-vdso.so.1 = (0x77f0e000)
libssl.so.0.9.8 = /usr/local/ssl/lib/libssl.so.0.9.8
(0x7f43b00bc000)
libcrypto.so.0.9.8 = /usr/local/ssl/lib/libcrypto.so.0.9.8
(0x7f43afd35000)
libdl.so.2 = /lib64/libdl.so.2 (0x003e1820)
libpthread.so.0 = /lib64/libpthread.so.0 (0x003e1860)
libstdc++.so.6 = /usr/lib64/libstdc++.so.6 (0x7f43afa37000)
libm.so.6 = /lib64/libm.so.6 (0x003e1800)
libgcc_s.so.1 = /lib64/libgcc_s.so.1 (0x003e1940)
libc.so.6 = /lib64/libc.so.6 (0x003e17d0)
/lib64/ld-linux-x86-64.so.2 (0x003e17b0)
***
/var/MailRoot/bin/XMail127v3 -Md -Ms /var/MailRoot -Sl -Pl -Cl \
-SI 0.0.0.0:8025 -SI 0.0.0.0:25 \
-PI 0.0.0.0:8110 -PI 0.0.0.0:110 \
-BI 0.0.0.0:995 \
-XI 0.0.0.0:465 \
-Ql -Ln 256 -Pt 60 -St 150 -F- -SX 2048 -Mx 64 \
-Qn 64 -PX 2048 -Qr 1 -Qt 1 -QT 150 -Qg -CX 256
***
Original Message
From: U.Mutlu um4...@mutluit.com
To: t...@os.st, XMail Users Mailing List xmail@xmailserver.org
Sent: Tue, May 26, 2015, 1:06 PM
Subject: Re: [xmail] BUG : XMAIL 1.27 with SSL
Oversea Site via xmail wrote on 05/26/2015 05:14 AM:
No Log Error. No Fatal Error log. No Core Dump
It's not RAM or HW problem. It's XMAIL internal issue, because when I
switch to stunnel, all problems solved. And then when I test K9-MAIL with
XMAIL+STUNNEL, K9 Client will not have any JAVA somethings Exception Error
Two tests
1. Very Important Thing in Xmail 1.27 Native SSL
If the emailbox has many emails such as 1, Microsoft Outlook with SSL
or NON-SSL download them, it WILL NOT have this issue.
Some Tencent Foxmail for Windows, after finish ssl session, it will take
the server be FIN_WAIT2 (some version, not all
Re: [xmail] BUG : XMAIL 1.27 with SSL
It might be difficult to determine if the problem is with XMail or with
the client. And even if for example Tencent actually closes the
connection incorrectly, it should be better if XMail would be able to
handle such an improperly closed connection.
But I'm not sure if you'll find somebody in this forum that will be able
to fix this problem. Maybe you could try to get K9 developers involved
in this? That seems to be managed much more actively than XMail. With a
bit of luck, they can at least find out what they are doing differently
compared to for example Outlook and that could cause this problem.
Oversea Site via xmail schreef op 26/05/15 om 15:09:
Now I am using original XMAIL-1.27.tar.gz source without simultaneous POP3
logins, no STUNNEL, use NATIVE XMAIL SSL. The problem still exists, K9-MAIL
will report IllegalFormatConversonException when I receive more then 100-200
emails. So It should be XMAIL SSL problem. Because When I reuse STUNNEL to do a
POP3 tunnel again, the problem will fix.
Original Message
From: Bart Mortelmans b...@bim.be
To: t...@os.st, XMail Users Mailing List xmail@xmailserver.org
Sent: Tue, May 26, 2015, 3:13 PM
Subject: Re: [xmail] BUG : XMAIL 1.27 with SSL
Is there any way for you to test if the problem exists if you don't
allow simultaneous POP3 logins?
Oversea Site via xmail schreef op 26/05/15 om 08:14:
POP3Utils.cpp - ADD POP3 Concurrent Login. I used this function over 5 years..
I don't know C++ programming. Sorry :)
}
if (pPOPMD-ulFlags POPF_MSG_DELETED) {
UPopSendErrorResponse(hBSock, ERR_MSG_DELETED,
pPOPSD-iTimeout);
ErrSetErrorCode(ERR_MSG_DELETED);
return ERR_MSG_DELETED;
}
UsrGetMailboxPath(pPOPSD-pUI, szMsgFilePath, sizeof(szMsgFilePath),
1);
StrNCat(szMsgFilePath, pPOPMD-szMsgName, sizeof(szMsgFilePath));
/*
* ADDED CODE START
*/
FILE *pMsgFile = fopen(szMsgFilePath, rb);
if (pMsgFile == NULL) {
UPopSendErrorResponse(hBSock, ERR_FILE_OPEN, pPOPSD-iTimeout);
ErrSetErrorCode(ERR_FILE_OPEN);
return ERR_FILE_OPEN;
}
fclose(pMsgFile);
/*
* ADDED CODE END
*/
SysSNPrintf(szResponse, sizeof(szResponse) - 1,
+OK SYS_OFFT_FMT bytes, pPOPMD-llMsgSize);
if (BSckSendString(hBSock, szResponse, pPOPSD-iTimeout) 0)
return ErrGetErrorCode();
if (pPOPMD-llMsgSize 0
Original Message
From: Oversea Site via xmail xmail@xmailserver.org
To: XMail Users Mailing List xmail@xmailserver.org
Sent: Tue, May 26, 2015, 1:56 PM
Subject: Re: [xmail] BUG : XMAIL 1.27 with SSL
FEDORA 4 X86_64 GLIBC 2.3.6-3 (I can't upgrade it to the lastest version..
Because I have a chiliasp 3.6.2 32-bit run ASP VBSCRIPT on APACHE 1.3 32-bit
software, it need GLIBC 2.3.x and Kernel 2.6)
KERNEL 3.3 MOD FROM FC15 (It will display KERNEL 2.6.43 Number). Kernel is not
a main problem. Because I have been test 2.6.32 or other. same problem was
found.
REAL HARDWARE - INTEL B85M i3-4150 16G RAM SATA3 RAID 1 LINUX SOFTRAID1 MDADM
Corp. Email System is not heavily use when I test it in HK TIME midnight..
Anyway I will test this issue in other linux distribution in VM, such as
CentOS. (You can give me any linux distribution, let's build the same platform
in VM. I use virtualbox.
[root@bravo logs]# uname -a
Linux bravo 2.6.43-gcc402 #3 SMP Sun May 17 23:10:29 HKT 2015 x86_64 x86_64
x86_64 GNU/Linux
[root@bravo logs]#
[root@bravo logs]# ldd /var/MailRoot/bin/XMail127v3
linux-vdso.so.1 = (0x77f0e000)
libssl.so.0.9.8 = /usr/local/ssl/lib/libssl.so.0.9.8
(0x7f43b00bc000)
libcrypto.so.0.9.8 = /usr/local/ssl/lib/libcrypto.so.0.9.8
(0x7f43afd35000)
libdl.so.2 = /lib64/libdl.so.2 (0x003e1820)
libpthread.so.0 = /lib64/libpthread.so.0 (0x003e1860)
libstdc++.so.6 = /usr/lib64/libstdc++.so.6 (0x7f43afa37000)
libm.so.6 = /lib64/libm.so.6 (0x003e1800)
libgcc_s.so.1 = /lib64/libgcc_s.so.1 (0x003e1940)
libc.so.6 = /lib64/libc.so.6 (0x003e17d0)
/lib64/ld-linux-x86-64.so.2 (0x003e17b0)
***
/var/MailRoot/bin/XMail127v3 -Md -Ms /var/MailRoot -Sl -Pl -Cl \
-SI 0.0.0.0:8025 -SI 0.0.0.0:25 \
-PI 0.0.0.0:8110 -PI 0.0.0.0:110 \
-BI 0.0.0.0:995 \
-XI 0.0.0.0:465 \
-Ql -Ln 256 -Pt 60 -St 150 -F- -SX 2048 -Mx 64 \
-Qn 64 -PX 2048 -Qr 1 -Qt 1 -QT 150 -Qg -CX 256
***
Original Message
From: U.Mutlu um4...@mutluit.com
To: t...@os.st, XMail Users Mailing List xmail@xmailserver.org
Sent: Tue, May 26, 2015, 1:06 PM
Subject: Re: [xmail] BUG : XMAIL 1.27 with SSL
Oversea Site via xmail wrote
Re: [xmail] BUG : XMAIL 1.27 with SSL
Bart Mortelmans via xmail wrote on 05/26/2015 03:55 PM: It might be difficult to determine if the problem is with XMail or with the client. And even if for example Tencent actually closes the connection incorrectly, it should be better if XMail would be able to handle such an improperly closed connection. But I'm not sure if you'll find somebody in this forum that will be able to fix this problem. Maybe you could try to get K9 developers involved in this? That seems to be managed much more actively than XMail. With a bit of luck, they can at least find out what they are doing differently compared to for example Outlook and that could cause this problem. Regarding FIN_WAIT2: I suspect it is caused by a firewall issue where some FIN's or ACK's are blocked or wrongly filtered out, or the client side doesn't properly close the socket, or some of the sockets it allocates. One really cannot trust any interpreted scripting language many mobiles do use. Using iptables one can diagnose this by logging the FIN's, ACK's. cu Uenal Oversea Site via xmail schreef op 26/05/15 om 15:09: Now I am using original XMAIL-1.27.tar.gz source without simultaneous POP3 logins, no STUNNEL, use NATIVE XMAIL SSL. The problem still exists, K9-MAIL will report IllegalFormatConversonException when I receive more then 100-200 emails. So It should be XMAIL SSL problem. Because When I reuse STUNNEL to do a POP3 tunnel again, the problem will fix. ___ xmail mailing list xmail@xmailserver.org http://xmailserver.org/mailman/listinfo/xmail
Re: [xmail] BUG : XMAIL 1.27 with SSL
Oversea Site via xmail wrote on 05/26/2015 03:09 PM:
Now I am using original XMAIL-1.27.tar.gz source without simultaneous POP3
logins, no STUNNEL, use NATIVE XMAIL SSL. The problem still exists, K9-MAIL
will report IllegalFormatConversonException when I receive more then
100-200 emails. So It should be XMAIL SSL problem. Because When I reuse
STUNNEL to do a POP3 tunnel again, the problem will fix.
But since you said that no error happens with normal mail-clients
(Outlook etc.), then the error must lie in the mobile clients you listed.
They seem to not handle properly the closing of the sockets they create.
cu
Uenal
Original Message From: Bart Mortelmans b...@bim.be To:
t...@os.st, XMail Users Mailing List xmail@xmailserver.org Sent: Tue,
May 26, 2015, 3:13 PM Subject: Re: [xmail] BUG : XMAIL 1.27 with SSL
Is there any way for you to test if the problem exists if you don't allow
simultaneous POP3 logins?
Oversea Site via xmail schreef op 26/05/15 om 08:14:
POP3Utils.cpp - ADD POP3 Concurrent Login. I used this function over 5
years.. I don't know C++ programming. Sorry :)
}
if (pPOPMD-ulFlags POPF_MSG_DELETED) { UPopSendErrorResponse(hBSock,
ERR_MSG_DELETED, pPOPSD-iTimeout);
ErrSetErrorCode(ERR_MSG_DELETED); return ERR_MSG_DELETED; }
UsrGetMailboxPath(pPOPSD-pUI, szMsgFilePath, sizeof(szMsgFilePath),
1); StrNCat(szMsgFilePath, pPOPMD-szMsgName, sizeof(szMsgFilePath));
/* * ADDED CODE START */
FILE *pMsgFile = fopen(szMsgFilePath, rb); if (pMsgFile == NULL) {
UPopSendErrorResponse(hBSock, ERR_FILE_OPEN, pPOPSD-iTimeout);
ErrSetErrorCode(ERR_FILE_OPEN); return ERR_FILE_OPEN; }
fclose(pMsgFile);
/* * ADDED CODE END */
SysSNPrintf(szResponse, sizeof(szResponse) - 1, +OK SYS_OFFT_FMT
bytes, pPOPMD-llMsgSize); if (BSckSendString(hBSock, szResponse,
pPOPSD-iTimeout) 0) return ErrGetErrorCode();
if (pPOPMD-llMsgSize 0
Original Message From: Oversea Site via xmail
xmail@xmailserver.org To: XMail Users Mailing List
xmail@xmailserver.org Sent: Tue, May 26, 2015, 1:56 PM Subject: Re:
[xmail] BUG : XMAIL 1.27 with SSL
FEDORA 4 X86_64 GLIBC 2.3.6-3 (I can't upgrade it to the lastest
version.. Because I have a chiliasp 3.6.2 32-bit run ASP VBSCRIPT on
APACHE 1.3 32-bit software, it need GLIBC 2.3.x and Kernel 2.6)
KERNEL 3.3 MOD FROM FC15 (It will display KERNEL 2.6.43 Number).
Kernel is not a main problem. Because I have been test 2.6.32 or
other. same problem was found.
REAL HARDWARE - INTEL B85M i3-4150 16G RAM SATA3 RAID 1 LINUX
SOFTRAID1 MDADM
Corp. Email System is not heavily use when I test it in HK TIME
midnight..
Anyway I will test this issue in other linux distribution in VM, such
as CentOS. (You can give me any linux distribution, let's build the
same platform in VM. I use virtualbox.
[root@bravo logs]# uname -a Linux bravo 2.6.43-gcc402 #3 SMP Sun May
17 23:10:29 HKT 2015 x86_64 x86_64 x86_64 GNU/Linux [root@bravo
logs]# [root@bravo logs]# ldd /var/MailRoot/bin/XMail127v3
linux-vdso.so.1 = (0x77f0e000) libssl.so.0.9.8 =
/usr/local/ssl/lib/libssl.so.0.9.8 (0x7f43b00bc000)
libcrypto.so.0.9.8 = /usr/local/ssl/lib/libcrypto.so.0.9.8
(0x7f43afd35000) libdl.so.2 = /lib64/libdl.so.2
(0x003e1820) libpthread.so.0 = /lib64/libpthread.so.0
(0x003e1860) libstdc++.so.6 = /usr/lib64/libstdc++.so.6
(0x7f43afa37000) libm.so.6 = /lib64/libm.so.6
(0x003e1800) libgcc_s.so.1 = /lib64/libgcc_s.so.1
(0x003e1940) libc.so.6 = /lib64/libc.so.6
(0x003e17d0) /lib64/ld-linux-x86-64.so.2
(0x003e17b0)
***
/var/MailRoot/bin/XMail127v3 -Md -Ms /var/MailRoot -Sl -Pl -Cl \ -SI
0.0.0.0:8025 -SI 0.0.0.0:25 \ -PI 0.0.0.0:8110 -PI 0.0.0.0:110 \ -BI
0.0.0.0:995 \ -XI 0.0.0.0:465 \ -Ql -Ln 256 -Pt 60 -St 150 -F- -SX
2048 -Mx 64 \ -Qn 64 -PX 2048 -Qr 1 -Qt 1 -QT 150 -Qg -CX 256
***
Original Message From: U.Mutlu um4...@mutluit.com To:
t...@os.st, XMail Users Mailing List xmail@xmailserver.org Sent:
Tue, May 26, 2015, 1:06 PM Subject: Re: [xmail] BUG : XMAIL 1.27
with SSL
Oversea Site via xmail wrote on 05/26/2015 05:14 AM:
No Log Error. No Fatal Error log. No Core Dump
It's not RAM or HW problem. It's XMAIL internal issue, because
when I switch to stunnel, all problems solved. And then when I
test K9-MAIL with XMAIL+STUNNEL, K9 Client will not have any JAVA
somethings Exception Error
Two tests
1. Very Important Thing in Xmail 1.27 Native SSL
If the emailbox has many emails such as 1, Microsoft Outlook
with SSL or NON-SSL download them, it WILL NOT have this issue.
Some Tencent Foxmail for Windows, after finish ssl session, it
will take the server be FIN_WAIT2 (some version, not all) But
K9-MAIL for Android, Download first 1000, it will appear the
error
Re: [xmail] BUG : XMAIL 1.27 with SSL
U.Mutlu via xmail wrote on 05/26/2015 04:38 PM: Bart Mortelmans via xmail wrote on 05/26/2015 03:55 PM: It might be difficult to determine if the problem is with XMail or with the client. And even if for example Tencent actually closes the connection incorrectly, it should be better if XMail would be able to handle such an improperly closed connection. But I'm not sure if you'll find somebody in this forum that will be able to fix this problem. Maybe you could try to get K9 developers involved in this? That seems to be managed much more actively than XMail. With a bit of luck, they can at least find out what they are doing differently compared to for example Outlook and that could cause this problem. Regarding FIN_WAIT2: I suspect it is caused by a firewall issue where some FIN's or ACK's are blocked or wrongly filtered out, or the client side doesn't properly close the socket, or some of the sockets it allocates. One really cannot trust any interpreted scripting language many mobiles do use. Using iptables one can diagnose this by logging the FIN's, ACK's. cu Uenal Oversea Site via xmail schreef op 26/05/15 om 15:09: Now I am using original XMAIL-1.27.tar.gz source without simultaneous POP3 logins, no STUNNEL, use NATIVE XMAIL SSL. The problem still exists, K9-MAIL will report IllegalFormatConversonException when I receive more then 100-200 emails. So It should be XMAIL SSL problem. Because When I reuse STUNNEL to do a POP3 tunnel again, the problem will fix. One more thought: If an application throws an exception without catching and handling it, like is the case above, then this means that the application is badly programmed. A good application would catch the exception and do what is necessary in that state of of the program. In this case one can simply say the app or part of it just badly crashed; no app should behave so. Exceptions can and must be handled by the app. cu Uenal ___ xmail mailing list xmail@xmailserver.org http://xmailserver.org/mailman/listinfo/xmail
[xmail] BUG : XMAIL 1.27 with SSL
I found the bug on XMAIL 1.27 with SSL (POP3S is main), SSMTP servicemaybe has asame bugtoo 1. it will have too many FIN_WAIT_2on POP3Swith two many requests, It is becauseof some non-popular WINDOWS CLIENT e.g. tencent foxmail , outlook will not have this issue. 2. If you're using XMAIL'Sinternal SSL POP3S with any openssl lib. (tested 0.9.8za 1.0.0, tested gcc 4.0.2/4.0.4/4.3.6)and the email accountcontain too many emails (1000-2000 emails),the mobile clientPOP3such as Samsung internal Email Client is using SSL, K9-MAIL on any android devicesusing SSL, some iPhone devices (connect with XMAIL SSL port 995), will not download them successfully (Android Error - Java Exception Error) and some iPhonedevicewill stuck with it, it will not download all emails successfully. But if you disable XMAIL'S internal POP3Swith -B-startup option, and switch stunnel5.17 port 995 tunnel toport 110, it will solve this problem and kick outFIN_WAIT_2 * stunnel 5.17 config * [pop3s]accept = 995connect = 110cert = /etc/stunnel/stunnel.pem *** ___ xmail mailing list xmail@xmailserver.org http://xmailserver.org/mailman/listinfo/xmail
Re: [xmail] BUG : XMAIL 1.27 with SSL
Oversea Site via xmail wrote on 05/25/2015 09:23 PM: I found the bug on XMAIL 1.27 with SSL (POP3S is main), SSMTP service maybe has a same bug too 1. it will have too many FIN_WAIT_2 on POP3S with two many requests, It is because of some non-popular WINDOWS CLIENT e.g. tencent foxmail , outlook will not have this issue. 2. If you're using XMAIL'S internal SSL POP3S with any openssl lib. (tested 0.9.8za 1.0.0, tested gcc 4.0.2/4.0.4/4.3.6) and the email account contain too many emails (1000-2000 emails), the mobile client POP3 such as Samsung internal Email Client is using SSL, K9-MAIL on any android devices using SSL, some iPhone devices (connect with XMAIL SSL port 995), will not download them successfully (Android Error - Java Exception Error) and some iPhone device will stuck with it, it will not download all emails successfully. But if you disable XMAIL'S internal POP3S with -B- startup option, and switch stunnel 5.17 port 995 tunnel to port 110, it will solve this problem and kick out FIN_WAIT_2 * stunnel 5.17 config * [pop3s] accept = 995 connect = 110 cert = /etc/stunnel/stunnel.pem *** What do the logs (server, client) say about the errors? I think you need a faster server HW and/or need to optimize the resources, for example the number of threads, and possibly also RAM. An excerpt from the doc: If you have an heavily loaded server remember to setup the best number of XMAIL threads by specifying the '-Qn nthreads' option (you must do some tentatives to find the best value for your needs). Also you can limit the number of SMTP, POP3 and CTRL service threads by specifying the options '-SX maxthreads', '-PX maxthreads' and '-CX maxthreads'. If there are mail filters, you can put them into a ramdisk and set PATH accordingly, or use an absolute path to them. See also XMAIL_TEMP in the doc. In task manager / system monitor you can see how the resource usage is, especially CPU, memory, and network. -- cu Uenal ___ xmail mailing list xmail@xmailserver.org http://xmailserver.org/mailman/listinfo/xmail
Re: [xmail] BUG : XMAIL 1.27 with SSL
U.Mutlu via xmail wrote on 05/26/2015 07:06 AM: Oversea Site via xmail wrote on 05/26/2015 05:14 AM: No Log Error. No Fatal Error log. No Core Dump It's not RAM or HW problem. It's XMAIL internal issue, because when I switch to stunnel, all problems solved. And then when I test K9-MAIL with XMAIL+STUNNEL, K9 Client will not have any JAVA somethings Exception Error Two tests 1. Very Important Thing in Xmail 1.27 Native SSL If the emailbox has many emails such as 1, Microsoft Outlook with SSL or NON-SSL download them, it WILL NOT have this issue. Some Tencent Foxmail for Windows, after finish ssl session, it will take the server be FIN_WAIT2 (some version, not all) But K9-MAIL for Android, Download first 1000, it will appear the error in K9-MAIL randomly. 2. Xmail 1.27 + Stunnel Proxy If the emailbox has many emails such as 1, Microsoft Outlook with SSL or NON-SSL download them, it WILL NOT have this issue. Some Tencent Foxmail for Windows, after finish ssl session, it WILL NOT have any problem. Server WILL NOT TAKE FIN_WAIT_2 K9-MAIL for Android, Download first 1000, it will NOT DISPLAY any error when it finished download emails. I would need full description about the server HW and SW (OS version, xmail start params etc., any xmail patches applied etc.). There is of course also the possibility that the bug lies in the said mobile client program, especially if it goes online via unstable mobile links as it seems to be a link latency problem, or the client does not close the socket cleanly. Take a look at these: https://github.com/Automattic/socket.io/issues/1380 http://stackoverflow.com/questions/5328155/preventing-fin-wait2-when-closing-socket Check this too: # cat /proc/sys/net/ipv4/tcp_fin_timeout 60 The following page is informative too: http://httpd.apache.org/docs/2.0/misc/fin_wait_2.html -- cu Uenal ___ xmail mailing list xmail@xmailserver.org http://xmailserver.org/mailman/listinfo/xmail
Re: [xmail] BUG : XMAIL 1.27 with SSL
FEDORA 4 X86_64 GLIBC 2.3.6-3 (I can't upgrade it to the lastest version. Because I have a chiliasp 3.6.2 32-bit run ASP VBSCRIPT on APACHE 1.3 32-bit software, it need GLIBC 2.3.x and Kernel 2.6) KERNEL 3.3 MOD FROM FC15 (It will display KERNEL 2.6.43 Number). Kernel is not a main problem. Because I have been test 2.6.32 or other. same problem was found. REAL HARDWARE - INTEL B85M i3-4150 16G RAM SATA3 RAID 1 LINUX SOFTRAID1 MDADM Corp. Email System is not heavily use when I test it in HK TIME midnight. Anyway I will test this issue in other linux distribution in VM, such as CentOS. (You can give me any linux distribution, let's build the same platform in VM. I use virtualbox. [root@bravo logs]# uname -a Linux bravo 2.6.43-gcc402 #3 SMP Sun May 17 23:10:29 HKT 2015 x86_64 x86_64 x86_64 GNU/Linux [root@bravo logs]# [root@bravo logs]# ldd /var/MailRoot/bin/XMail127v3 linux-vdso.so.1 = (0x77f0e000) libssl.so.0.9.8 = /usr/local/ssl/lib/libssl.so.0.9.8 (0x7f43b00bc000) libcrypto.so.0.9.8 = /usr/local/ssl/lib/libcrypto.so.0.9.8 (0x7f43afd35000) libdl.so.2 = /lib64/libdl.so.2 (0x003e1820) libpthread.so.0 = /lib64/libpthread.so.0 (0x003e1860) libstdc++.so.6 = /usr/lib64/libstdc++.so.6 (0x7f43afa37000) libm.so.6 = /lib64/libm.so.6 (0x003e1800) libgcc_s.so.1 = /lib64/libgcc_s.so.1 (0x003e1940) libc.so.6 = /lib64/libc.so.6 (0x003e17d0) /lib64/ld-linux-x86-64.so.2 (0x003e17b0) *** /var/MailRoot/bin/XMail127v3 -Md -Ms /var/MailRoot -Sl -Pl -Cl \ -SI 0.0.0.0:8025 -SI 0.0.0.0:25 \ -PI 0.0.0.0:8110 -PI 0.0.0.0:110 \ -BI 0.0.0.0:995 \ -XI 0.0.0.0:465 \ -Ql -Ln 256 -Pt 60 -St 150 -F- -SX 2048 -Mx 64 \ -Qn 64 -PX 2048 -Qr 1 -Qt 1 -QT 150 -Qg -CX 256 *** Original Message From: U.Mutlu um4...@mutluit.com To: t...@os.st, XMail Users Mailing List xmail@xmailserver.org Sent: Tue, May 26, 2015, 1:06 PM Subject: Re: [xmail] BUG : XMAIL 1.27 with SSL Oversea Site via xmail wrote on 05/26/2015 05:14 AM: No Log Error. No Fatal Error log. No Core Dump It's not RAM or HW problem. It's XMAIL internal issue, because when I switch to stunnel, all problems solved. And then when I test K9-MAIL with XMAIL+STUNNEL, K9 Client will not have any JAVA somethings Exception Error Two tests 1. Very Important Thing in Xmail 1.27 Native SSL If the emailbox has many emails such as 1, Microsoft Outlook with SSL or NON-SSL download them, it WILL NOT have this issue. Some Tencent Foxmail for Windows, after finish ssl session, it will take the server be FIN_WAIT2 (some version, not all) But K9-MAIL for Android, Download first 1000, it will appear the error in K9-MAIL randomly. 2. Xmail 1.27 + Stunnel Proxy If the emailbox has many emails such as 1, Microsoft Outlook with SSL or NON-SSL download them, it WILL NOT have this issue. Some Tencent Foxmail for Windows, after finish ssl session, it WILL NOT have any problem. Server WILL NOT TAKE FIN_WAIT_2 K9-MAIL for Android, Download first 1000, it will NOT DISPLAY any error when it finished download emails. I would need full description about the server HW and SW (OS version, xmail start params etc., any xmail patches applied etc.). There is of course also the possibility that the bug lies in the said mobile client program, especially if it goes online via unstable mobile links as it seems to be a link latency problem, or the client does not close the socket cleanly. Take a look at these: https://github.com/Automattic/socket.io/issues/1380 http://stackoverflow.com/questions/5328155/preventing-fin-wait2-when-closing-socket cu Uenal Original Message From: U.Mutlu um4...@mutluit.com To: t...@os.st, XMail Users Mailing List xmail@xmailserver.org Sent: Tue, May 26, 2015, 10:11 AM Subject: Re: [xmail] BUG : XMAIL 1.27 with SSL Oversea Site via xmail wrote on 05/25/2015 09:23 PM: I found the bug on XMAIL 1.27 with SSL (POP3S is main), SSMTP service maybe has a same bug too 1. it will have too many FIN_WAIT_2 on POP3S with two many requests, It is because of some non-popular WINDOWS CLIENT e.g. tencent foxmail , outlook will not have this issue. 2. If you're using XMAIL'S internal SSL POP3S with any openssl lib. (tested 0.9.8za 1.0.0, tested gcc 4.0.2/4.0.4/4.3.6) and the email account contain too many emails (1000-2000 emails), the mobile client POP3 such as Samsung internal Email Client is using SSL, K9-MAIL on any android devices using SSL, some iPhone devices (connect with XMAIL SSL port 995), will not download them successfully (Android Error - Java Exception Error) and some iPhone device will stuck with it, it will not download all emails successfully. But if you disable XMAIL'S internal POP3S with -B- startup option
Re: [xmail] BUG : XMAIL 1.27 with SSL
No Log Error. No Fatal Error log. No Core Dump It's not RAM or HW problem. It's XMAIL internal issue, because when I switch to stunnel, all problems solved. And then when I test K9-MAIL with XMAIL+STUNNEL, K9 Client will not have any JAVA somethings Exception Error Two tests 1. Very Important Thing in Xmail 1.27 Native SSL If the emailbox has many emails such as 1, Microsoft Outlook with SSL or NON-SSL download them, it WILL NOT have this issue. Some Tencent Foxmail for Windows, after finish ssl session, it will take the server be FIN_WAIT2 (some version, not all) But K9-MAIL for Android, Download first 1000, it will appear the error in K9-MAIL randomly. 2. Xmail 1.27 + Stunnel Proxy If the emailbox has many emails such as 1, Microsoft Outlook with SSL or NON-SSL download them, it WILL NOT have this issue. Some Tencent Foxmail for Windows, after finish ssl session, it WILL NOT have any problem. Server WILL NOT TAKE FIN_WAIT_2 K9-MAIL for Android, Download first 1000, it will NOT DISPLAY any error when it finished download emails. Original Message From: U.Mutlu um4...@mutluit.com To: t...@os.st, XMail Users Mailing List xmail@xmailserver.org Sent: Tue, May 26, 2015, 10:11 AM Subject: Re: [xmail] BUG : XMAIL 1.27 with SSL Oversea Site via xmail wrote on 05/25/2015 09:23 PM: I found the bug on XMAIL 1.27 with SSL (POP3S is main), SSMTP service maybe has a same bug too 1. it will have too many FIN_WAIT_2 on POP3S with two many requests, It is because of some non-popular WINDOWS CLIENT e.g. tencent foxmail , outlook will not have this issue. 2. If you're using XMAIL'S internal SSL POP3S with any openssl lib. (tested 0.9.8za 1.0.0, tested gcc 4.0.2/4.0.4/4.3.6) and the email account contain too many emails (1000-2000 emails), the mobile client POP3 such as Samsung internal Email Client is using SSL, K9-MAIL on any android devices using SSL, some iPhone devices (connect with XMAIL SSL port 995), will not download them successfully (Android Error - Java Exception Error) and some iPhone device will stuck with it, it will not download all emails successfully. But if you disable XMAIL'S internal POP3S with -B- startup option, and switch stunnel 5.17 port 995 tunnel to port 110, it will solve this problem and kick out FIN_WAIT_2 * stunnel 5.17 config * [pop3s] accept = 995 connect = 110 cert = /etc/stunnel/stunnel.pem *** What do the logs (server, client) say about the errors? I think you need a faster server HW and/or need to optimize the resources, for example the number of threads, and possibly also RAM. An excerpt from the doc: If you have an heavily loaded server remember to setup the best number of XMAIL threads by specifying the '-Qn nthreads' option (you must do some tentatives to find the best value for your needs). Also you can limit the number of SMTP, POP3 and CTRL service threads by specifying the options '-SX maxthreads', '-PX maxthreads' and '-CX maxthreads'. If there are mail filters, you can put them into a ramdisk and set PATH accordingly, or use an absolute path to them. See also XMAIL_TEMP in the doc. In task manager / system monitor you can see how the resource usage is, especially CPU, memory, and network. -- cu Uenal ___ xmail mailing list xmail@xmailserver.org http://xmailserver.org/mailman/listinfo/xmail
