Connection history of POP3 Server reports the following info:

"... 

User admin, (2) 0 messages, 0 bytes

..." 

What means the number "2" in the brackets?
 Anybody an idea? Thanks.

Hartmut

Hi!

Is mercury able to accept ssl imap and smtp connections directly without having a tool like stunnel in between? Of course, stunnel is an option but using this kind of tools, mercury must be configured to accept plain text connections as well and I do not want this option to be active! Most of my users use TLS but some of them want to use Outlook and Outlook does not support TLS. Therefore I need SSL as secure connection. Now, using stunnel, I must enable the plaintext logins and so the users can connect via Port 143 in plain text because this port must be open in my firewall for the TLS connections...
 

Thanks,

Konrad 

Yes we use a CA antivirus product and I find we actually have to turn the real time off completely because even with the drive the email is on exempted from real time checking it still seems to Detect viruses in files on those drives, mainly when our archive Pegasus account which runs on the same server is filtering emails.   I have just changed the settings so that it never starts that way I should not have to remember to turn it off.

 I tried to get ClamAV working a week or so back I really ought to get back onto that.   I noted a thread where someone else was having similar problems the other day so I'd better read it!
 

Hello Thomas,

 

Many thanks for your help.

 

ineuw 

Oooops - in my excitement after noticing this new feature I missed the html file....

 Thanks, Gordon

Cheers Thomas. [:)]

Hi, yep thats it, sorry typo from my end.  So not needed on Windows then.

You have not turned off relaying since the first two items are not checked.  I would recommend checking the first three items to turn off relaying and allowing authorized users to relay. You can then set the two internal IP addresses  in the allow section to be allowed to bypass the relaying.

 

It can be an advantage to have a 'Swiss Army Knife' rather than a drawer full of knives & forks [:D]

try 'telnet localhost 25' [:)]

 

Hello all

This was also reported tonight on SANS's weekly Consensus Security Vulnerability Alert (Vol. 6 No. 39) and rated Moderate:

(7) MODERATE: Pegasus Mercury/32 IMAP Server SEARCH Command Buffer
Overflow
Affected;
Pegasus Mercury/32 version 4.52 and prior

Description: Pegasus Mercury/32 IMAP is a popular IMAP server for
Microsoft Windows. The server fails to properly handle overlong IMAP
SEARCH commands. A specially crafted IMAP SEARCH command could trigger
a buffer overflow and allow an authenticated user to execute arbitrary
code with the privileges of the vulnerable process (often SYSTEM). A
proof-of-concept for this vulnerability is publicly available. Note that
an attacker would need valid login credentials to exploit this
vulnerability.

Status: Vendor has not confirmed, no updates available.

References:
Proof-of-Concept
http://downloads.securityfocus.com/vulnerabilities/exploits/25733.pl
Wikipedia Article on IMAP
http://en.wikipedia.org/wiki/IMAP
Vendor Home Page
http://www.pmail.com/
SecurityFocus BID
http://www.securityfocus.com/bid/25733

Note that it is listed upfront in the newsletter as MErcury is considered a widely deployed software (a bit of vanity doesn't hurt [;)] ) As you can see, there seem to be a proff of concept out there. I cannot verify myself as I currently have no working installation of Mercury.

The SANS institue can be contacted from their website at www.sans.org.

Cheers!

[quote user="ldsandon"]

What about the other vulnerability Secunia lists since March? 

[/quote]

Secunia's data is out of date, this more serious vunerability was fixed very quickly and anyone running 4.01c or 4.52 isn't vunerable.

David

 

[quote user="CobraA1"]

Thanks. I now have a direct to my PC email with a fall back to my domain name provider.

I do have a question, though: When sending email, is it possible to set it up so that it is direct, but falls back to a relay if direct doesn't work?
 

[/quote]

 

No but if you run your own DNS system you can set the IP address for the AOL (or any other host that blocks your connection) MX host to your relay hosts IP address so MercuryE will deliver the AOL mail to the relay host.

 

That was what I was doing.  The remainder of the template works correctly, but the "From:" header in the template is being replaced by the mailbox name.  What I was trying to do was to send "change of address" notices for a pop account by delivering them to a pass-through account, forward them to the intended recipient, but send an address change notification to that fraction of the intended recipient's mail that went through the pop account...but to avoid having the address change make any reference to the intermediate account.

 

I have since upgraded to 4.52, and not yet tested to see whether the problem still occurs. 

OK Thanks.
I'll filter when the email has arrived.
 

Nope.  Sadly, I'm paying for this honor.  That does make sense though.

 

We have run Mercury 4.01b on Windows 98SE and Windows XP Pro and now run 4.52 on XP Pro. We have used POPFileD v1.22.4 with POPFile v0.22.4 on both Mercury 4.01b and 4.52 with both Windows 98SE and Windows XP. In every case POPFile's use of SQLite results in lots of 0k locked files that do not go away until POPFile is shutdown. These files are in "C:\Windows\Temp" for Windows 98SE and are in "C:\Documents and Settings\MercuryAccount\Local Settings\Temp" for Windows XP. It appears like a file is created and locked for every email that passes through POPFile. Each file is named something like "sqlite_nwkhQ5SvfzHf0Wa" and has a size of 0k. The file cannot be opened by Notepad or even merely copied to some other location because it is locked. Several hundred or even several thousand of these files may accumulate over a period of several days and then no more accumulate and the ones that are there just stay there indefinitely until POPFile is shut down. For example, I last started POPFile (and Mercury) on Sept 8. There are over 800 of these locked files with dates from Sept 8-13 and then no more. If POPFile were shutdown all these locked files immediately go away.

Has anyone else noticed this phenomenon? Is it a POPFile, POPFileD, or SQLite bug? Or is it something else? And does anyone have a solution to suggest? I get the impression that the system seems slower when there are many of these files sitting there.

FWIW Pegasus & Thunderbird (custom version from portableapps.com) can be installed on a USB thumbdrive so you can have your mail client in your pocket [:D]

Will work from any PC you plug it into without installing. (Local firewall & USB security policy may be an issue in some cases though.) 

[quote user="Marschall"]

why has the queue handling been changed fom FIFO to LIFO since V4.5 ?

[/quote]

It hasn't!  In fact, there has never been a firmly-defined processing order in Mercury. If you were getting a FIFO effect before, then it was purely a curiosity of the way the files were organized on your system. MercuryE does a certain amount of queue sorting to ensure that old, slow mail doesn't unnecessarily delay mail recently injected into the queue, but it's fairly slight and if I recall correctly, was done in v4.0 anyway.

The order of jobs in the queue is pretty much determined by the order in which they are returned by the operating system.

Cheers!

-- David --

[quote user="aka_bigred"]

I'm trying to figure out how to configure M32 to use the same name, say admin but for different users on different domains.  I want to have 3 users named "admin" - each one a unique user/mailbox on each domain.  Here's my example:

    admin@mydomain1.com --> Tom Jone's Mailbox

    admin@myotherdomain.com --> John Smith's Mailbox

    admin@onelastdomain.com --> Jane Smith's Mailbox 

If I understand the documentation correctly, M32 is setup so that all users are automatically setup with same account across all domains.  When I setup the local user "admin", I get:

    admin@mydomain1.com --> Tom Jone's Mailbox

    admin@myotherdomain.com --> Tom Jone's Mailbox

    admin@onelastdomain.com --> Tom Jone's Mailbox

 

How can I setup M32 for the first scenario with the same external username across multiple domains but different users. ? 

[/quote]

 

You need to use aliases.  Create three users admin, admin2, and admin3.  You then alias admin@myother domain.com to admin2@myotherdomain.com and admin@mylastdomain.com to admin3@myotherdomain,com

 You can also make these usernames something like admin_dom1 is you wish to make them more specific to the domain.