Facebook
Twitter
B
baravalle
Guest
Hi,
I have a problem with a user using blackberry.
Apparently blackberry cannot connect any more to the server - and this happened without any change being done in the server in the few days before.
This are the relevant lines in the imap log:
Dec 19 06:25:21 baravalle imapd-ssl: IMAP connect from @ [216.9.253.217]INFO: LOGIN, user=myuser, ip=[216.9.253.217], protocol=IMAP
Dec 19 06:25:22 baravalle imapd-ssl: 1198041922.295801 LOGOUT, user=myuser, ip=[216.9.253.217], headers=0, body=0, rcvd=30, sent=331, maildir=/var/qmail/mailnames/mydomain.it/myuser/Maildir
Dec 19 06:27:34 baravalle imapd: IMAP connect from @ [216.9.253.213]INFO: LOGIN, user=myuser, ip=[216.9.253.213], protocol=IMAP
Dec 19 06:27:34 baravalle imapd: 1198042054.768960 LOGOUT, user=myuser, ip=[216.9.253.213], headers=0, body=0, rcvd=30, sent=332, maildir=/var/qmail/mailnames/europe-link.com/myuser/Maildir
Dec 19 06:27:34 baravalle imapd-ssl: IMAP connect from @ [216.9.253.213]INFO: LOGIN, user=myuser, ip=[216.9.253.213], protocol=IMAP
Dec 19 06:27:35 baravalle imapd-ssl: 1198042055.272601 LOGOUT, user=myuser, ip=[216.9.253.213], headers=0, body=0, rcvd=30, sent=331, maildir=/var/qmail/mailnames/europe-link.com/myuser/Maildir
Dec 19 07:32:18 baravalle imapd-ssl: IMAP connect from @ [216.9.253.173]INFO: LOGIN, user=myuser, ip=[216.9.253.173], protocol=IMAP
Dec 19 07:32:19 baravalle imapd-ssl: 1198045939.362199 DISCONNECTED, user=myuser, ip=[216.9.253.173], headers=0, body=0, rcvd=70, sent=10268, maildir=/var/qmail/mailnames/europe-link.com/myuser/Maildir
Looks like the blackberry is not connecting any more - while it used to connect every 5-6 minutes if I check the old logs.
I have fail2ban installed, checking snort logs too - but even stopping fail2ban and iptables does not change anything. blackberry's ip doesn't connect at all to my server after the first registration (if the user deletes the accound on his blackberry and creates it again).
Any suggestions?
Andres
I have a problem with a user using blackberry.
Apparently blackberry cannot connect any more to the server - and this happened without any change being done in the server in the few days before.
This are the relevant lines in the imap log:
Dec 19 06:25:21 baravalle imapd-ssl: IMAP connect from @ [216.9.253.217]INFO: LOGIN, user=myuser, ip=[216.9.253.217], protocol=IMAP
Dec 19 06:25:22 baravalle imapd-ssl: 1198041922.295801 LOGOUT, user=myuser, ip=[216.9.253.217], headers=0, body=0, rcvd=30, sent=331, maildir=/var/qmail/mailnames/mydomain.it/myuser/Maildir
Dec 19 06:27:34 baravalle imapd: IMAP connect from @ [216.9.253.213]INFO: LOGIN, user=myuser, ip=[216.9.253.213], protocol=IMAP
Dec 19 06:27:34 baravalle imapd: 1198042054.768960 LOGOUT, user=myuser, ip=[216.9.253.213], headers=0, body=0, rcvd=30, sent=332, maildir=/var/qmail/mailnames/europe-link.com/myuser/Maildir
Dec 19 06:27:34 baravalle imapd-ssl: IMAP connect from @ [216.9.253.213]INFO: LOGIN, user=myuser, ip=[216.9.253.213], protocol=IMAP
Dec 19 06:27:35 baravalle imapd-ssl: 1198042055.272601 LOGOUT, user=myuser, ip=[216.9.253.213], headers=0, body=0, rcvd=30, sent=331, maildir=/var/qmail/mailnames/europe-link.com/myuser/Maildir
Dec 19 07:32:18 baravalle imapd-ssl: IMAP connect from @ [216.9.253.173]INFO: LOGIN, user=myuser, ip=[216.9.253.173], protocol=IMAP
Dec 19 07:32:19 baravalle imapd-ssl: 1198045939.362199 DISCONNECTED, user=myuser, ip=[216.9.253.173], headers=0, body=0, rcvd=70, sent=10268, maildir=/var/qmail/mailnames/europe-link.com/myuser/Maildir
Looks like the blackberry is not connecting any more - while it used to connect every 5-6 minutes if I check the old logs.
I have fail2ban installed, checking snort logs too - but even stopping fail2ban and iptables does not change anything. blackberry's ip doesn't connect at all to my server after the first registration (if the user deletes the accound on his blackberry and creates it again).
Any suggestions?
Andres
