Expodential issues
My boss had a nice wake up call this morning when he got an e-mail notifying hin that one of the domains we host was over their bandwith by 800% and it's only the 4th of the month.
One of our clients was having problems with their Outlook. It would take them about half an hour to one hour for it to start. They needed to get their e-mail because their whole company relies on some of the mail that comes into that account. We set her up with the web mail and off she went. After using the web main for a day, somehow it exploded their bandwith.
After looking at the raw IIS logs, we determined that it was not any sort of web based DOS attack. We then trained our eyes on the MainEnable logs and were floored to see a POP log of 39MB. The logs showed that this one account would login, then it would say OK a few times, then Goodbye, then they would login again, then it would say NOOP where it used to say OK and Goodbye, then it would say Retry. It had a nice little counter after the retry. When it got to about 2570 retries, then it says that they finally Quit and the process started over again. All of that happens over a period of 30 seconds.
Any advice???
This only seems to happen when they use the webmain. This is the only account we have that uses the webmail so we don't know if this is a client issue or a webmail issue. in the POP log, the only IP it shows for this client on the webmain is 127.0.0.1, which makes sense seeing as they are checking their mail through the web on that server.
HELP!!!
Facebook
Twitter
