Yeah, I know what you mean about user reports, lol. I've checked and the two reports are correct. One user had 8 emails in their inbox, they all went. The other user I'm not sure about but it was all of the emails in their inbox as well (they didn't have that many). We could restore 1 Inbox from backups thankfully.
We are running ntp so a clock problem (at our end anyway), is very unlikely, and it would have affected a lot of other users. There is one change we have made to SqWebmail's core, that was to remove the strcmp checking of the session id, this was to enable multiple logins onto the same mailbox. This has been running fine for a few months and I dont think this is the culperate here, since I have logs of when users are logging on and can clearly see that these users have had premature timeouts. Thanks for the suggestions, Andrew On Thu, 2003-11-13 at 12:45, Terry Milnes wrote: > Just a thought.... > > Are you positive its deleting the mail? The reason I ask is I had a > similar situation, kinda... When a user goes over the timeout, they > loose the mail they are composing, however when they report it they > claim "its deleting emails" to them it sounds better to pluralize, then > they find someone else to corroborate...... > > As for the premature timeout, the only thought I have is are the clocks > correct? > > tm. > > Andrew Ingram wrote: > > On Thu, 2003-11-13 at 12:12, Sam Varshavchik wrote: > > > >>Andrew Ingram writes: > >> > >> > >>>I'm having reports from a couple of users of some very strange behaviour > >>>from SqWebmail. > >>> > >>>Users are logging in, then soon after logging in, they get the timeout > >>>screen (and I can verify this by my logs, only 2 minutes before a > >>>timeout in one case, and soft time out is set to 25 minutes). When they > >>>log back in, SqWebmail has deleted some of their emails. This obviously > >>>isn't happening to everyone as I'd have to take the system offline, but > >>>it's happened twice in 2 weeks now and it's a bit worrying. I'm running > >>>SqWebmail v3.5.1 on FreeBSD. Was there a bug in this version which > >>>sometimes caused this? it's very worrying. > >> > >>There is no known bug. Sounds like someone hacked their accounts. > > > > > > I would be very surprised if someone hacked the accounts, it would have > > shown up in some of our logs if someone has tried to get in. Also, the 2 > > occurrences happened on different weeks at different times, by 2 > > unrelated users (on a system with over 100,000 users). It just seems > > very unlikely it was a hack. I'll keep an eye on it but if anyone knows > > anything that could help, please let me know. > > > > Thanks, > > Andrew > > > > > > > > > > > > -- Andrew Ingram Claranet Ltd
