mew writes:
> Hi,
>
> What is the expected behavior of the IP address checkbox? It doesn't appear
> to be working the way I would think it would, or not at all.
>
> Scenario:
> I logged on via sqwebmail with the IP address checkbox checked.
> I pcanywhere to another network and machine and it lets me log on to the
> same sqwebmail account without a problem as well.
> Now if I try and do anything in the first logged in process on the original
> network I get the error message
> "Your request cannot be authenticated. Either your session has timed out, or
> your IP address has changed. If you are dialing in via a modem, this can
> happen if you get disconnected. After reconnecting, you must log in again".
>
> Seems to me the second log in should have been denied until first session
> logged out or timed out.
Nope.
All that checkbox does is deny access to the account even if all the
authentication requirements are met, but the request comes from an IP
address that's not the same as the login IP address.
Dial up, log in, leave the browser logged in, disconnect, dial back in, and
get a different IP address. You won't be able to continue reading mail,
even though you are properly logged in.
Of course, nothing stops you from logging in again, of course...
--
Sam
