Mailing List CGatePro@mail.stalker.com Message #92678
From: Jeff Wark <jwark@tbaytel.net>
Subject: Re: Excessive POP3 sessions.
Date: Thu, 20 Sep 2007 11:18:54 -0400
To: CommuniGate Pro Discussions <CGatePro@mail.stalker.com>
X-Mailer: CommuniGate Pro WebUser v5.0.13
They do always seem to be the same customers, but their numbers are increasing [1 one week, 2 the next, now 3 or more].

We'll keep an eye on it.

On Thu, 20 Sep 2007 14:45:07 +0400
 Technical Support <support@stalker.com> wrote:
Hello,

Jeff Wark wrote:
Has anyone else noticed this sort of behaviour on his/her POP3 Access Monitor page:

118605    [216.26.223.105]        9min    Unauthenticated       119011    [216.26.218.233]        7min    Unauthenticated       119205    [216.26.218.233]        6min    Unauthenticated       119370    [216.26.223.105]        5min    Unauthenticated       119503    [216.211.72.243]        4min    Unauthenticated       119569    [216.26.223.105]        4min    Unauthenticated       119695    [216.26.216.166]        3min    Unauthenticated       119906    [216.26.216.166]        2min    Unauthenticated       119950    [216.26.223.105]        2min    Unauthenticated       In my case, it started a couple weeks ago with one customer making up to the allowed 5 connections from a single IP address and then just sitting there.  By last week, it was up to two customers and now it appears to be 3 or 4.

Is this a new virus or something?

These appear to be dead connections. On some platforms a dropped connection notification may be not delivered to an application (CGPro here) - so it believes there's on, while the client (or client's firewall) has closed it.

I would check if the IP addresses reported for these hanging connections are always the same and then try to debug connectivity to those client hosts.

-- Best regards,
Dmitry Akindinov

=======================================================================
When answering to letters sent to you by the tech.support staff, make
sure the original message you have received is included into your
reply.

#############################################################
This message is sent to you because you are subscribed to
 the mailing list <CGatePro@mail.stalker.com>.
To unsubscribe, E-mail to: <CGatePro-off@mail.stalker.com>
To switch to the DIGEST mode, E-mail to <CGatePro-digest@mail.stalker.com>
To switch to the INDEX mode, E-mail to <CGatePro-index@mail.stalker.com>
Send administrative queries to  <CGatePro-request@mail.stalker.com>

Jeff Wark
TBayTel Internet
Subscribe (FEED) Subscribe (DIGEST) Subscribe (INDEX) Unsubscribe Mail to Listmaster