New User? Need help? Click here to register for free! Registering removes the advertisements.

Computer Cops
image image image image image image image image
Donations
If you found this site helpful, please donate to help keep it online
Don't want to use PayPal? Try our physical address
image
Prime Choice
· Head Lines
· Advisories (All)
· Dnld of the Week!
· CCSP News Ltrs
· Find a Cure!

· Ian T's (AR 23)
· Marcia's (CO8)
· Bill G's (CO11)
· Paul's (AR 5)
· Robin's (AR 2)

· Ian T's Archive
· Marcia's Archive
· Bill G's Archive
· Paul's Archive
· Robin's Archive
image
Security Central
· Home
· Wireless
· Bookmarks
· CLSID
· Columbia
· Community
· Downloads
· Encyclopedia
· Feedback (send)
· Forums
· Gallery
· Giveaways
· HijackThis
· Journal
· Members List
· My Downloads
· PremChat
· Premium
· Private Messages
· Proxomitron
· Quizz
· RegChat
· Reviews
· Google Search
· Sections
· Software
· Statistics
· Stories Archive
· Submit News
· Surveys
· Top
· Topics
· Web Links
· Your Account
image
CCSP Toolkit
· Email Virus Scan
· UDP Port Scanner
· TCP Port Scanner
· Trojan TCP Scan
· Reveal Your IP
· Algorithms
· Whois
· nmap port scanner
· IPs Banned [?]
image
Survey
How much can you give to keep Computer Cops online?

$10 up to $25 per year?
$25 up to $50 per year?
$10 up to $25 per month?
$25 up to $50 per month?
More than $50 per year?
More than $50 per month?
One time only?
Other (please comment)



Results
Polls

Votes: 945
Comments: 19
image
Translate
English German French
Italian Portuguese Spanish
Chinese Greek Russian
image
 Forum FAQForum FAQ   SearchSearch   UsergroupsUsergroups   ProfileProfile   Login to check your private messagesLogin to check your private messages   LoginLogin 

MWP 4.0 Still Broken - Connection Intentionally Closed
Goto page 1, 2, 3, 4, 5, 6  Next
 
Post new topic   Reply to topic       Computer Cops Forum Index -> Mailwasher - Troubleshooting / General
View previous topic :: View next topic  
Author Message
bill_bright

Lieutenant
Lieutenant



Joined: Jan 16, 2004
Posts: 177
Location: USA

PostPosted: Wed Mar 24, 2004 9:28 am    Post subject: MWP 4.0 Still Broken - Connection Intentionally Closed
Reply with quote

Crying or Very sad I was hoping 4.0 would address the TOP issues (if that is the problem) but alas, it appears not. Today I have another email stuck on the server that causes MWP to choke - thus preventing the download of the other email sitting there. This is not good!

See thread titled "Cconnection intentionally closed by server" (the "Cc" typo in the original thread) - and a couple other threads - for background.

Today's message has:

?????????? ? ????????? ?? ?. ?...

as the subject - similar to before.

Once again, this IS a MWP problem because I can access the server and download the email just fine using my email client - it is only MWP that chokes.

My ISP has no intention at this time to enable the TOP POP options as suggested before when the vast majority of their customers are not having problems - and I can't really blame them.

Please address this issue ASAP.

_________________
Bill of BrightWorks Systems
P4-HT 3.06GHz
1Gb 1066 RDRAM
XPProSP1
Samsung 171P FP
ATI Radeon 9600XT,
Logitec THX Z-560s
M-AudioRev7.1
Cable Modem - Dial-up? Never!


Last edited by bill_bright on Thu Mar 25, 2004 5:48 pm, edited 1 time in total
Back to top
View users profile Send private message
rusticdog

Site Moderator
Site Moderator
Premium Member
Premium Member


Joined: Aug 12, 2002
Posts: 2535
Location: New_Zealand

PostPosted: Wed Mar 24, 2004 8:39 pm    Post subject:
Reply with quote

OK sure, can you email me a debug file to mw-beta @ firetrust.com (without the spaces)

To create this
MailWasher Pro >> Help >> About >> tick " Enable Extended Error Logging" >> restart MailWasher Pro.

Use Mailwasher Pro till you generate the error >> restart MailWasher Pro again >> click on Help >> About >> click blue link to data files >> there will be a file here called MailwasherPro_debug.txt.

If you can send us this it would be appreciated, also once sent through disable Extended Error Logging under Help >> About.


Cheers
rd
Back to top
View users profile Send private message Send email Visit posters website MSN Messenger
bill_bright

Lieutenant
Lieutenant



Joined: Jan 16, 2004
Posts: 177
Location: USA

PostPosted: Wed Mar 24, 2004 11:42 pm    Post subject:
Reply with quote

Well RD, it just so happens I got another the same time I got notice of your reply - this email has ???????????? ??????? as the subject (at least that is how it is displayed when I access my account through webmail).

Fortunately, I am able to log into my account through webmail and move the bad email to a temp folder, retrieve the rest of my mail, move it back to the inbox, turn on logging as requested, get the error, then move it back for safe keeping (BTW - I have 3 "captured" now should you wish me to forward them).

Thanks for taking a look - hope it helps.

Bill



MailWasherPro_debug.txt
 Description:
Email names and key changed for privacy - "[email protected]" is the problem account - Bigfoot address is my public address and is a forwarding account that sends all mail to private "MyAccount" address.

Download
 Filename:  MailWasherPro_debug.txt
 Filesize:  33.27 KB
 Downloaded:  38 Time(s)

Back to top
View users profile Send private message
rusticdog

Site Moderator
Site Moderator
Premium Member
Premium Member


Joined: Aug 12, 2002
Posts: 2535
Location: New_Zealand

PostPosted: Thu Mar 25, 2004 1:34 am    Post subject:
Reply with quote

OK this looks like a bug in your ISPs POP server, the server just dropped the connection, there's nothing we can do about that.

You could confirm it by telneting into your POP server and trying to get the message with TOP 1 598. A search on the site for telnet under MailWasher forums will detail more instructions.

The reason the other programs work is they aren't using TOP, it will be using RETR.
TOP is where the bug will be located in the POP server because it's
easy for a significant bug like that to get overlooked there as mail
clients don't use it.

MailWasher uses TOP for many reasons, some servers automatically delete the email when RETR is used, others mark it as read, with RETR you have to download the entire email before getting to look at the next one - even if you're on a modem and the email has a 5meg attachment.

So changing MW to work like other email clients in order to accomodate a bug like this in someone elses software will just make things worse.
Back to top
View users profile Send private message Send email Visit posters website MSN Messenger
rogerw

Major
Major
Premium Member
Premium Member


Joined: May 11, 2003
Posts: 822
Location: USA

PostPosted: Thu Mar 25, 2004 8:40 am    Post subject:
Reply with quote

bill_bright,

I note in the log the following setting:

"Sequential Email Check"="false"


With this setting, MW will open connections to all of your default accounts simutaneously.

Many servers limit the number of open connections to the same IP and will drop connections unceremoniously when the limit is exceeded.

This appears to be what may be happening.

Use Tools>Options>Connections the tick the Sequential Checking radio button to cause MW to open only one connection at a time and I expect the behavior will go away.
Back to top
View users profile Send private message
bill_bright

Lieutenant
Lieutenant



Joined: Jan 16, 2004
Posts: 177
Location: USA

PostPosted: Thu Mar 25, 2004 8:50 am    Post subject:
Reply with quote

Now I am really not a happy camper - you say this is a bug at the ISP - can you give me some specifics that I can provide to Cox to demonstrate exactly what it is or what to look for - so that they can take responsibility?

Before, I was told that TOP was an "Option" in POP - is that not the case?

I get the feeling I'm demanding the local Ford dealer to carry parts for my Toyota when I'm the only Toyota owner in town! Doesn't seem right.

BTW - I have tried the sequential checking option both ways - same result.
Back to top
View users profile Send private message
rogerw

Major
Major
Premium Member
Premium Member


Joined: May 11, 2003
Posts: 822
Location: USA

PostPosted: Thu Mar 25, 2004 11:59 am    Post subject:
Reply with quote

bill_bright wrote:
Before, I was told that TOP was an "Option" in POP - is that not the case?
The RFC says TOP is an optional command. If it isn't implemented, sending a TOP command will result in an -ERR xxx response, which MW will handle (by switching over to the RETR command). However, if it's implemented, it must be implemented correctly. You can find the RCF here: http://www.faqs.org/rfcs/rfc1939.html

bill_bright wrote:
can you give me some specifics that I can provide to Cox to demonstrate exactly what it is or what to look for - so that they can take responsibility?
OK, specifics (refer to the debug log you posted above).

First note that from the Key in the log file, the character ¶ denotes the sequence CR+LF. Now note in the RFC that the end of any multiline response from the server is signified by the sequence:
that is, a single line with a period followed by a carriage return linefeed pair.

The the proper sequence is present in the logs as terminator for the LIST and UIDL commands.

Now look at the debug log response for the TOP 1 598 command. That command tells the server to deliver message 1, but only the first 598 lines (if there are less than 598 lines, then less will be delivered).

The message is a multipart message as denoted by the lines:
Content-Type: multipart/mixed;¶
boundary="----------29A5BE6AD79CB5AC5C9990B0A"¶


Note that each section has that string delimiting it. Note also that at the end of the picture the boundary tag is different:

------------29A5BE6AD79CB5AC5C9990B0A--¶

Note that it as two '-' characters at the end. This is the indication that there are no more parts of the multipart to follow (implying the message is almost at the end).

Now, if the server were compliant, the end of the message would be signalled by the terminator:

This is not the case, however. What is seen in the log next is:
Exception during ReadLine: Connection Closed Gracefully. (EIdConnClosedGracefully)
from which it appears that MW was waiting for the next line, but the server, rather than sending a terminator, just closed the connection.

Last edited by rogerw on Thu Mar 25, 2004 12:45 pm, edited 1 time in total
Back to top
View users profile Send private message
bill_bright

Lieutenant
Lieutenant



Joined: Jan 16, 2004
Posts: 177
Location: USA

PostPosted: Thu Mar 25, 2004 12:30 pm    Post subject:
Reply with quote

Fantastic - Thanks - I'll let you know what Cox (my ISP) says.

-Bill

_________________
Bill of BrightWorks Systems
P4-HT 3.06GHz
1Gb 1066 RDRAM
XPProSP1
Samsung 171P FP
ATI Radeon 9600XT,
Logitec THX Z-560s
M-AudioRev7.1
Cable Modem - Dial-up? Never!
Back to top
View users profile Send private message
rogerw

Major
Major
Premium Member
Premium Member


Joined: May 11, 2003
Posts: 822
Location: USA

PostPosted: Thu Mar 25, 2004 2:41 pm    Post subject:
Reply with quote

Sometimes the source of the abrupt disconnections are virus scanners, which typically insinuate themselves in the POP3 connection so that they can scan data as it is passing over the link.

Just to be sure that this isn't the problem, disable your virus scanner's email scanner when using MW to see if connection problems go away.

Since MW doesn't download entire messages or render them in any way that Outlook might, all the mechanisms that viruses use to get themselves on your system are defeated. There's no potential for infection if you turn email scanning off and only use MW (not your normal email client.)


Last edited by rogerw on Thu Mar 25, 2004 5:56 pm, edited 1 time in total
Back to top
View users profile Send private message
bill_bright

Lieutenant
Lieutenant



Joined: Jan 16, 2004
Posts: 177
Location: USA

PostPosted: Thu Mar 25, 2004 5:49 pm    Post subject:
Reply with quote

No - it's not the Norton AV, sequential checking, ZoneAlarm or any other app running.
Back to top
View users profile Send private message
horseman

Trooper
Trooper
Premium Member
Premium Member


Joined: Apr 15, 2003
Posts: 13
Location: UK

PostPosted: Sun Mar 28, 2004 12:56 pm    Post subject:
Reply with quote

bill_bright wrote:
Fantastic - Thanks - I'll let you know what Cox (my ISP) says.

-Bill


FWIW I appear to have the same scenario on an NTL (UK) ISP email server.
Curiously though from the following snippet:
-----------------------
[ Read ] .¶
[ Wrote ] TOP 16 9999¶
[ Read ] +OK 1970 octets¶
[ Read ] Return-Path: ¶
-----------------------
I appear to be requesting rather more than 500 lines/records and more than the 200 line spam throttle setting in MWP4 ?

Never the less subsequently after reading nearly 2000 octets I still get a similar error:
-----------------------------------
[ Read ] ¶
[ Read ] ----07316905361056192--¶
[ Log ] Exception during ReadLine: Connection Closed Gracefully. (EIdConnClosedGracefully)
-----------------------------------

However unlike Bill I don't anticipate any (sensibly expansive) response from my ISP and I suspect the problem may be a tad more common on ISP servers than we might at first think?

Does this scenario only occur when a malformed/truncated multipart email is received thus exacerbating a poor RFC1939 implementation?

TonyW
Back to top
View users profile Send private message MSN Messenger
bill_bright

Lieutenant
Lieutenant



Joined: Jan 16, 2004
Posts: 177
Location: USA

PostPosted: Sun Mar 28, 2004 1:22 pm    Post subject:
Reply with quote

Horseman - Actually, I don't expect much from my ISP - when I first brought this to their attention, they said it was the originating ISPs problem - that is they wanted the originating ISP clear the stuck email on the destination ISP's mail server!! (I am sure their email admin is not aware they're tech support is saying that).

But, with the added RFC info, I thought I would try again - but, truthfully, I don't expect much.

Who knows, they may surprise us.
Back to top
View users profile Send private message
horseman

Trooper
Trooper
Premium Member
Premium Member


Joined: Apr 15, 2003
Posts: 13
Location: UK

PostPosted: Sun Mar 28, 2004 2:45 pm    Post subject:
Reply with quote

bill_bright wrote:

....
Who knows, they may surprise us.


Bill, and who knows we may not be surprised to learn that two ISP's have technical support staff trained to the same degree of ineptitude! Wink

But I'm also exploring the possibility that it may be AntiVirus/Trojan software running on ISP's server that could potentially cause a malformed/truncated multipart email that exacerbates the problem anyway.

Do you know if Cox run any AV/AT ?

GoodLuck in the meantime - TW
Back to top
View users profile Send private message MSN Messenger
bill_bright

Lieutenant
Lieutenant



Joined: Jan 16, 2004
Posts: 177
Location: USA

PostPosted: Sun Mar 28, 2004 3:02 pm    Post subject:
Reply with quote

AV software running on the mail servers? That's an interesting thought. Their web site says they will implement one in April but does not elaborate as to the vender - they currently have purchase agreements with McAfee so I suspect it will be with them. Hurry up and wait.
Back to top
View users profile Send private message
denn_988

Corporal
Corporal



Joined: Mar 12, 2004
Posts: 51
Location: Gone

PostPosted: Sun Mar 28, 2004 10:31 pm    Post subject:
Reply with quote

Horseman,

MWP will download the entire message from a POP server regardless of the SPAM THROTTLE setting, when the message size reported to MWP by the POP server in response to the LIST command is 4000 octets or less.

That is why the TOP 16 9999 was used for the message download in the example you provided.


As for the failure of the ISP to properly terminate the message download in response to the TOP command you will need to verify what is happening.

The next time you see this type of error occur, you will want to do the following BEFORE you delete the message that causes the problem.

TELNET into your POP server and try downloading the message using various values for number of lines using the TOP command.

Try the following for values:

TOP n 0
TOP n 99
TOP n 999
TOP n 9999


If the POP server fails to terminate the message download properly (a DOT [.] on a line by itself - CRLF DOT CRLF) you have a problem. If the POP server also disconnects you....you have an even bigger problem.

You will probably find that you have no problem when you use RETR n. This is what most mail clients use, unless they are set up to only download a partial message. Outlook can be set up to only download the header only, and should be using TOP n 0 when it does this.

If you need some help using TELNET to do this test, just let me know and I will walk you through it. I am hoping that you won't need to be spoon fed on this as I have posted instructions for this many, many times on this forum and am getting a bit tired of doing it....unless of coarse, I need to. Wink
Back to top
View users profile Send private message
Display posts from previous:   
Post new topic   Reply to topic       Computer Cops Forum Index -> Mailwasher - Troubleshooting / General All times are GMT - 5 Hours
Goto page 1, 2, 3, 4, 5, 6  Next
Page 1 of 6

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You can download files in this forum


Powered by phpBB 2.0.8a © 2001 phpBB Group

Version 2.0.6 of PHP-Nuke Port by Tom Nitzschner © 2002 www.toms-home.com
Version 2.2 by Paul Laudanski © 2003-2004 Computer Cops