Multiple POP3 Logins / cppop failing

elenlace

Well-Known Member
Sep 10, 2002
101
0
166
US
I have a server were POP3 is constantly failing, reviewing /var/log/maillog, I was surprised to see multiple logins per account at the same time:

Sep 20 02:44:45 linux pop3d: LOGIN, [email protected], ip=[::ffff:X.X.X.X]
Sep 20 02:44:45 linux pop3d: LOGIN, [email protected], ip=[::ffff:X.X.X.X]
Sep 20 02:44:45 linux pop3d: LOGIN, [email protected], ip=[::ffff:X.X.X.X]
Sep 20 02:44:45 linux pop3d: LOGIN, [email protected], ip=[::ffff:Y.Y.Y.Y]
Sep 20 02:44:45 linux pop3d: LOGIN, [email protected], ip=[::ffff:Y.Y.Y.Y]
Sep 20 02:44:45 linux pop3d: LOGIN, [email protected], ip=[::ffff:Y.Y.Y.Y]

I went to check my other servers and I see a single entry per user, could this be causing POP3 to overload and fail? What is the cause for this behaviour?

Any help is appreciated.

Warmest Regards.
 

chirpy

Well-Known Member
Verifed Vendor
Jun 15, 2002
13,465
30
473
Go on, have a guess
Yes, it would cause it to fail. I'd educate the user involved and tell them to stop it. You would also likely get a more robust system by upgrading to maildir (search the forums) and using courier-imap (-pop3d) instead.
 

chirpy

Well-Known Member
Verifed Vendor
Jun 15, 2002
13,465
30
473
Go on, have a guess
Then you need to educate your users to not pop their accounts so often. You could also look into my firewal security app (csf) that does limit access to POP3 (among other things) to prevent exactly this type of abuse of the POP3 service.
 

elenlace

Well-Known Member
Sep 10, 2002
101
0
166
US
Thanks chirpy I have upgraded it (to maildir) and the problem is still there...

Any other suggestions?