Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 8 replies
  • Subscribers 1 subscriber
  • Views 3048 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

POP3 interruptions in Utm 9.101-12

ChristianKüppers
Hi Gents,
i remember a similar problem in the Beta-Forum and as resolved, but it seems to rehappen in 9.1:
Everytime i fetch my popmails using mozilla Thinderbird I get errormessages. M wife faces the same issue. Pop3 is working but it´s downloadings in chunks.
In the logs I see this line[:P]op3proxy[6518]: Fatal: read failed: Connection reset by peer.
With 9.0 and the same provider this didn´t happen, so I think it´s related to 9.1.
It it happens again, I´ll post the clientmessages.


This thread was automatically locked due to age.
  • 0
    We have Firmware 9.101-12 and we have these bugs too, there is no pattern which mails are caused.
  • 0
    Hi, Uwe, and welcome to the User BB!

    Christian, when you post again here, please show all of the lines from the POP3 Proxy related to a "Fatal" transaction.  Hopefully, there will be nothing unusual in the client messages.

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
  • 0 in reply to BAlfson
    This is the only thing i found in the POP3-Protocol

    2013:06:26-07:09:48 domain pop3proxy[759]: email@domain.de logged in (account 23)
    2013:06:26-07:09:48 domain pop3proxy[759]: id="1100" severity="info" sys="SecureMail" sub="pop3" name="email passed" from="email@service.eventim.de" to="email@domain.de" subject="..." size="63362" srcip="91.229.178.94" dstip="***.***.***.***" uid="***"
    2013:06:26-07:09:48 domain pop3proxy[762]: Accepted client connection from ***.***.***.*** for ***.***.***.*** (1&1 POP3 Mailserver server_id 1)
    2013:06:26-07:09:48 domain pop3proxy[759]: Fatal: write error: Connection reset by peer

    OR instead of write it comes with the follwing error:
    2013:06:26-15:19:44 domain pop3proxy[12717]: Fatal: read failed: Connection reset by peer
  • 0 in reply to Uwe Rüdiger
    Bob, you are right:
    here is a full log from today:
    --------------
    2013:06:30-13:09:36 UTM9 pop3proxy[9037]: Accepted client connection from 192.168.10.22 for 46.30.211.93 (pop3.christiansberge.info Servers server_id 2)
    2013:06:30-13:09:37 UTM9 pop3proxy[9037]: christian@christiansberge.info logged in (account 1)
    2013:06:30-13:09:39 UTM9 pop3proxy[9037]: id="1100" severity="info" sys="SecureMail" sub="pop3" name="email passed" from="mobile-computing@newsletter.pcwelt.de" to="Christian.kueppers@web.de" subject="PC-WELT-Mobile-Computing" size="35414" srcip="217.115.153.214" dstip="46.30.211.93" uid="UID8796-1337440434"
    2013:06:30-13:09:40 UTM9 pop3proxy[9037]: id="1100" severity="info" sys="SecureMail" sub="pop3" name="email passed" from="best-of@newsletter.pcwelt.de" to="Christian.kueppers@web.de" subject="Playbook bekommt kein BlackBerry-10-Update * PlayStation 4 sollte ursprünglich auch 499 Dollar kosten * Vollversion des Tages: Start Menu X 4.87" size="35605" srcip="217.115.132.184" dstip="46.30.211.93" uid="UID8797-1337440434"
    2013:06:30-13:09:41 UTM9 pop3proxy[9037]: id="1100" severity="info" sys="SecureMail" sub="pop3" name="email passed" from="hello@touchnote.com" to="christian@christiansberge.info" subject="Sunshine, summer and great photos – send a postcard and make those memories last" size="26948" srcip="205.166.177.75" dstip="46.30.211.93" uid="UID8798-1337440434"
    2013:06:30-13:09:42 UTM9 pop3proxy[9037]: id="1100" severity="info" sys="SecureMail" sub="pop3" name="email passed" from="Sony@email.sonyentertainmentnetwork.com" to="kueppers.christian@googlemail.com" subject="Danke für Ihren Einkauf" size="37585" srcip="8.30.201.167" dstip="46.30.211.93" uid="UID8799-1337440434"
    2013:06:30-13:09:44 UTM9 pop3proxy[9037]: Fatal: read failed: Connection reset by peer
    2013:06:30-13:09:55 UTM9 pop3proxy[9045]: Accepted client connection from 192.168.10.22 for 46.30.211.93 (pop3.christiansberge.info Servers server_id 2)
    2013:06:30-13:09:55 UTM9 pop3proxy[9045]: christian@christiansberge.info logged in (account 1)
    ------------
    errors occur on the clientside like in the pictures.
    meanwhile I upgraded to the last vesion and it still occurs.
  • 0 in reply to ChristianKüppers
    Another messages are like this:

    2013:06:29-14:25:29 UTM9 pop3proxy[7440]: christian@christiansberge.info logged in (account 1)
    2013:06:29-14:25:31 UTM9 pop3proxy[7440]: id="1100" severity="info" sys="SecureMail" sub="pop3" name="email passed" from="community@experts-exchange.com" to="kueppers.christian@googlemail.com" subject="New from EE: Expert Website Testing with BugFinder" size="11612" srcip="64.156.132.249" dstip="46.30.211.93" uid="UID8690-1337440434"
    2013:06:29-14:25:32 UTM9 pop3proxy[7440]: id="1100" severity="info" sys="SecureMail" sub="pop3" name="email passed" from="rm@coaching-finance.de" to="rm@coaching-finance.de" subject="Neue Kontaktdaten!" size="20121" srcip="87.179.123.127" dstip="46.30.211.93" uid="UID8691-1337440434"
    2013:06:29-14:25:48 UTM9 pop3proxy[7440]: id="1100" severity="info" sys="SecureMail" sub="pop3" name="email passed" from="rm@coaching-finance.de" to="rm@coaching-finance.de" subject="Außergewöhnliche Anlagemöglichkeit!" size="4828976" srcip="87.179.123.127" dstip="46.30.211.93" uid="UID8692-1337440434"
    2013:06:29-14:25:52 UTM9 pop3proxy[7440]: id="1100" severity="info" sys="SecureMail" sub="pop3" name="email passed" from="info@jobagent.stepstone.de" to="kueppers.christian@googlemail.com" subject="15 neue Stellenangebote bei StepStone" size="25321" srcip="81.246.126.148" dstip="46.30.211.93" uid="UID8693-1337440434"
    2013:06:29-14:25:52 UTM9 pop3proxy[7440]: Fatal: sendfile error: Broken pipe
    2013:06:29-14:25:56 UTM9 pop3proxy[7451]: Accepted client connection from 192.168.10.22 for 46.30.211.93 (pop3.christiansberge.info Servers server_id 2)
    2013:06:29-14:25:57 UTM9 pop3proxy[7451]: christian@christiansberge.info logged in (account 1)
    2013:06:29-14:25:59 UTM9 pop3proxy[7451]: id="1100" severity="info" sys="SecureMail" sub="pop3" name="email passed" from="info@jobagent.stepstone.de" to="kueppers.christian@googlemail.com" subject="15 neue Stellenangebote bei StepStone" size="25321" srcip="81.246.126.148" dstip="46.30.211.93" uid="UID8693-1337440434"
    2013:06:29-14:26:00 UTM9 pop3proxy[7451]: id="1100" severity="info" sys="SecureMail" sub="pop3" name="email passed" from="vfe-campaign-response@amazon.de" to="christian@christiansberge.info" subject="Sharkoon 16GB Flexi-Drive Extreme..." size="132290" srcip="87.238.84.24" dstip="46.30.211.93" uid="UID8694-1337440434"
    2013:06:29-14:26:01 UTM9 pop3proxy[7451]: id="1100" severity="info" sys="SecureMail" sub="pop3" name="email passed" from="best-of@newsletter.pcwelt.de" to="Christian.kueppers@web.de" subject="Sony Xperia Z Ultra im Hands-on - Lutz Herkners Video-Blog * Anonym surfen: Google unerkannt nutzen * Amazon Autorip in Deutschland gestartet" size="64483" srcip="217.115.132.178" dstip="46.30.211.93" uid="UID8695-1337440434"
    2013:06:29-14:26:38 UTM9 pop3proxy[7451]: Fatal: read failed: Connection reset by peer
    2013:06:29-14:26:41 UTM9 pop3proxy[7464]: Accepted client connection from 192.168.10.22 for 46.30.211.93 (pop3.christiansberge.info Servers server_id 2)
    2013:06:29-14:26:41 UTM9 pop3proxy[7464]: christian@christiansberge.info logged in (account 1)
    2013:06:29-14:26:43 UTM9 pop3proxy[7464]: id="1100" severity="info" sys="SecureMail" sub="pop3" name="email passed" from="best-of@newsletter.pcwelt.de" to="Christian.kueppers@web.de" subject="Sony Xperia Z Ultra im Hands-on - Lutz Herkners Video-Blog * Anonym surfen: Google unerkannt nutzen * Amazon Autorip in Deutschland gestartet" size="64483" srcip="217.115.132.178" dstip="46.30.211.93" uid="UID8695-1337440434"
    2013:06:29-14:26:44 UTM9 pop3proxy[7464]: id="1100" severity="info" sys="SecureMail" sub="pop3" name="email passed" from="news@aktuell.conrad.de" to="christian@christiansberge.info" subject="Highspeed USB 3.0 Festplatten schon ab 49,95 Euro VERSANDKOSTENFREI!" size="24599" srcip="87.119.210.184" dstip="46.30.211.93" uid="UID8696-1337440434"
    2013:06:29-14:26:45 UTM9 pop3proxy[7464]: id="1100" severity="info" sys="SecureMail" sub="pop3" name="email passed" from="jennifer.tautz@das-hoechste.com" to="christian@christiansberge.info" subject="Bergsportbericht" size="29573" srcip="213.182.1.46" dstip="46.30.211.93" uid="UID8697-1337440434"
    2013:06:29-14:26:46 UTM9 pop3proxy[7464]: id="1100" severity="info" sys="SecureMail" sub="pop3" name="email passed" from="IhreBestellung@info.zalando.de" to="kueppers.christian@googlemail.com" subject="Marke der Woche: Skechers || Außerdem: Must-Haves von YOUR TURN entdecken" size="112628" srcip="62.144.109.136" dstip="46.30.211.93" uid="UID8698-1337440434"
    2013:06:29-14:26:48 UTM9 pop3proxy[7464]: id="1100" severity="info" sys="SecureMail" sub="pop3" name="email passed" from="newsletter@news.strato.de" to="kueppers.christian@googlemail.com" subject="Herr Küppers, darf's etwas mehr sein?" size="26322" srcip="91.229.178.91" dstip="46.30.211.93" uid="UID8699-1337440434"
    2013:06:29-14:26:49 UTM9 pop3proxy[7464]: id="1100" severity="info" sys="SecureMail" sub="pop3" name="email passed" from="eBay@reply.ebay.de" to="kueppers.christian@googlemail.com" subject="Noch bis 2. Juli gültig: Ihr 10 %25-Gutschein für Garten und Terrasse, chris0712" size="83116" srcip="91.194.249.199" dstip="46.30.211.93" uid="UID8700-1337440434"
    2013:06:29-14:26:50 UTM9 pop3proxy[7464]: id="1100" severity="info" sys="SecureMail" sub="pop3" name="email passed" from="monster@e0.monster.com" to="christian_kueppers@yahoo.de" subject="Karriere-Journal: Kostenlose Lebenlauf-Vorlagen von monster.de" size="56541" srcip="209.85.160.52" dstip="46.30.211.93" uid="UID8701-1337440434"
    2013:06:29-14:26:51 UTM9 pop3proxy[7464]: id="1100" severity="info" sys="SecureMail" sub="pop3" name="email passed" from="business-it@newsletter.pcwelt.de" to="Christian.kueppers@web.de" subject="Erstes öffentliches Microsoft Center entsteht in Berlin *Microsofts BUILD 2013 startet in San Francisco - wir sind vor Ort *Apple untersucht Wi-Fi-Probleme bei neuen MacBook-Air-Modellen" size="43744" srcip="217.115.132.180" dstip="46.30.211.93" uid="UID8702-1337440434"
    2013:06:29-14:26:52 UTM9 pop3proxy[7464]: id="1100" severity="info" sys="SecureMail" sub="pop3" name="email passed" from="no-reply@cyberport.de" to="kueppers.christian@googlemail.com" subject="Cyberport-Gewinnspiel zum neuen TV-Spot" size="44123" srcip="85.115.21.130" dstip="46.30.211.93" uid="UID8703-1337440434"
    2013:06:29-14:26:54 UTM9 pop3proxy[7464]: id="1100" severity="info" sys="SecureMail" sub="pop3" name="email passed" from="best-of@newsletter.pcwelt.de" to="Christian.kueppers@web.de" subject="PC-WELT Live-Chat zur Passwort-Sicherheit *Firefox 22 steht zum Download bereit *Diese Tools sparen Geld beim Einkaufen *SSD und klassische Festplatte im Vergleich" size="69665" srcip="217.115.132.173" dstip="46.30.211.93" uid="UID8704-1337440434"
    2013:06:29-14:26:55 UTM9 pop3proxy[7464]: id="1100" severity="info" sys="SecureMail" sub="pop3" name="email passed" from="business-it@newsletter.pcwelt.de" to="Christian.kueppers@web.de" subject="Firefox 22 steht zum Download bereit *PC-WELT Live-Chat zur Passwort-Sicherheit *Becker Revo.1 im Test *SSD und klassische Festplatte im Vergleich" size="53183" srcip="217.115.153.200" dstip="46.30.211.93" uid="UID8705-1337440434"
    2013:06:29-14:26:56 UTM9 pop3proxy[7464]: id="1100" severity="info" sys="SecureMail" sub="pop3" name="email passed" from="info@n.filmstarts.de" to="kueppers.christian@googlemail.com" subject="Brad Pitt im ersten Trailer zu The Counselor und Details zur längeren Fassung von Der Hobbit" size="26573" srcip="178.248.184.24" dstip="46.30.211.93" uid="UID8706-1337440434"
  • 0
    If there isn't anything in the Intrusion Prevention or Firewall log, then this must be a bug.

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
  • 0
    No pop3 related IPS alerts or warnings
Unfiltered HTML