Could you please explain what is going on in this log?

Use this forum if you have installed hMailServer and want to ask a question related to a production release of hMailServer. Before posting, please read the troubleshooting guide. A large part of all reported issues are already described in detail here.
Post Reply
DrmCa
Normal user
Normal user
Posts: 116
Joined: 2011-02-14 21:30

Could you please explain what is going on in this log?

Post by DrmCa » 2020-12-14 02:43

What is the IP 193.*.*.114 doing? I see that their connection keeps being dropped, but I do not understand for what reason.
What does "The read operation failed. Bytes transferred: 0" mean?

Code: Select all

"TCPIP"	6916	"2020-12-12 02:45:50.762"	"TCP - 193.*.*.114 connected to 192.*.*.31:995."
"DEBUG"	6916	"2020-12-12 02:45:50.778"	"TCP connection started for session 64628"
"DEBUG"	6916	"2020-12-12 02:45:50.778"	"Performing SSL/TLS handshake for session 64628. Verify certificate: False"
"TCPIP"	6916	"2020-12-12 02:45:55.426"	"TCPConnection - TLS/SSL handshake completed. Session Id: 64628, Remote IP: 193.*.*.114, Version: TLSv1.2, Cipher: ECDHE-RSA-AES256-GCM-SHA384, Bits: 256"
"POP3D"	6916	64628	"2020-12-12 02:45:55.426"	"193.*.*.114"	"SENT: +OK POP3"
"POP3D"	6864	64628	"2020-12-12 02:45:55.707"	"193.*.*.114"	"RECEIVED: CAPA"
"POP3D"	6864	64628	"2020-12-12 02:45:55.707"	"193.*.*.114"	"SENT: +OK CAPA list follows[nl]USER[nl]UIDL[nl]TOP[nl]."
"DEBUG"	6916	"2020-12-12 02:45:56.253"	"Creating session 64644"
"TCPIP"	6916	"2020-12-12 02:45:56.269"	"TCP - 193.*.*.114 connected to 192.*.*.31:995."
"DEBUG"	6916	"2020-12-12 02:45:56.269"	"TCP connection started for session 64643"
"DEBUG"	6916	"2020-12-12 02:45:56.269"	"Performing SSL/TLS handshake for session 64643. Verify certificate: False"
"TCPIP"	6916	"2020-12-12 02:45:56.440"	"TCPConnection - TLS/SSL handshake completed. Session Id: 64643, Remote IP: 193.*.*.114, Version: TLSv1.2, Cipher: ECDHE-RSA-AES128-GCM-SHA256, Bits: 128"
"POP3D"	6916	64643	"2020-12-12 02:45:56.440"	"193.*.*.114"	"SENT: +OK POP3"
"DEBUG"	6844	"2020-12-12 02:45:59.560"	"The read operation failed. Bytes transferred: 0 Remote IP: 193.*.*.114, Session: 64643, Code: 2, Message: End of file"
"DEBUG"	6844	"2020-12-12 02:45:59.560"	"Ending session 64643"
"DEBUG"	6916	"2020-12-12 02:45:59.732"	"Creating session 64645"
"TCPIP"	6916	"2020-12-12 02:45:59.732"	"TCP - 193.*.*.114 connected to 192.*.*.31:995."
"DEBUG"	6916	"2020-12-12 02:45:59.732"	"TCP connection started for session 64644"
"DEBUG"	6916	"2020-12-12 02:45:59.732"	"Performing SSL/TLS handshake for session 64644. Verify certificate: False"
"TCPIP"	6916	"2020-12-12 02:46:00.044"	"TCPConnection - TLS/SSL handshake completed. Session Id: 64644, Remote IP: 193.*.*.114, Version: TLSv1.2, Cipher: ECDHE-RSA-AES256-GCM-SHA384, Bits: 256"
"POP3D"	6916	64644	"2020-12-12 02:46:00.044"	"193.*.*.114"	"SENT: +OK POP3"
"DEBUG"	6844	"2020-12-12 02:46:02.758"	"The read operation failed. Bytes transferred: 0 Remote IP: 193.*.*.114, Session: 64644, Code: 10054, Message: An existing connection was forcibly closed by the remote host"
"DEBUG"	6844	"2020-12-12 02:46:02.758"	"Ending session 64644"
"DEBUG"	6916	"2020-12-12 02:46:03.304"	"Creating session 64646"
"TCPIP"	6916	"2020-12-12 02:46:03.304"	"TCP - 193.*.*.114 connected to 192.*.*.31:995."
"DEBUG"	6916	"2020-12-12 02:46:03.304"	"TCP connection started for session 64645"
"DEBUG"	6916	"2020-12-12 02:46:03.304"	"Performing SSL/TLS handshake for session 64645. Verify certificate: False"
"TCPIP"	6916	"2020-12-12 02:46:03.523"	"TCPConnection - TLS/SSL handshake failed. Session Id: 64645, Remote IP: 193.*.*.114, Error code: 335544539, Message: short read"
"DEBUG"	6916	"2020-12-12 02:46:03.523"	"Ending session 64645"
"DEBUG"	6916	"2020-12-12 02:46:04.646"	"Creating session 64647"
"TCPIP"	6916	"2020-12-12 02:46:04.646"	"TCP - 193.*.*.114 connected to 192.*.*.31:995."
"DEBUG"	6916	"2020-12-12 02:46:04.646"	"TCP connection started for session 64646"
"DEBUG"	6916	"2020-12-12 02:46:04.646"	"Performing SSL/TLS handshake for session 64646. Verify certificate: False"
"TCPIP"	6916	"2020-12-12 02:46:04.771"	"TCPConnection - TLS/SSL handshake failed. Session Id: 64646, Remote IP: 193.*.*.114, Error code: 335544539, Message: short read"
"DEBUG"	6916	"2020-12-12 02:46:04.771"	"Ending session 64646"
"DEBUG"	6916	"2020-12-12 02:46:04.896"	"Creating session 64648"
"TCPIP"	6916	"2020-12-12 02:46:04.911"	"TCP - 193.*.*.114 connected to 192.*.*.31:995."
"DEBUG"	6916	"2020-12-12 02:46:04.911"	"TCP connection started for session 64647"
"DEBUG"	6916	"2020-12-12 02:46:04.911"	"Performing SSL/TLS handshake for session 64647. Verify certificate: False"
"TCPIP"	6916	"2020-12-12 02:46:05.130"	"TCPConnection - TLS/SSL handshake failed. Session Id: 64647, Remote IP: 193.*.*.114, Error code: 335544539, Message: short read"
"DEBUG"	6916	"2020-12-12 02:46:05.130"	"Ending session 64647"
"DEBUG"	6916	"2020-12-12 02:46:06.253"	"Creating session 64649"
"TCPIP"	6916	"2020-12-12 02:46:06.253"	"TCP - 193.*.*.114 connected to 192.*.*.31:995."
"DEBUG"	6916	"2020-12-12 02:46:06.253"	"TCP connection started for session 64648"
"DEBUG"	6916	"2020-12-12 02:46:06.268"	"Performing SSL/TLS handshake for session 64648. Verify certificate: False"
"TCPIP"	6916	"2020-12-12 02:46:06.409"	"TCPConnection - TLS/SSL handshake failed. Session Id: 64648, Remote IP: 193.*.*.114, Error code: 335544539, Message: short read"
"DEBUG"	6916	"2020-12-12 02:46:06.409"	"Ending session 64648"
"DEBUG"	6916	"2020-12-12 02:46:06.534"	"Creating session 64650"
"TCPIP"	6916	"2020-12-12 02:46:06.534"	"TCP - 193.*.*.114 connected to 192.*.*.31:995."
"DEBUG"	6916	"2020-12-12 02:46:06.534"	"TCP connection started for session 64649"
"DEBUG"	6916	"2020-12-12 02:46:06.534"	"Performing SSL/TLS handshake for session 64649. Verify certificate: False"
"TCPIP"	6916	"2020-12-12 02:46:06.690"	"TCPConnection - TLS/SSL handshake failed. Session Id: 64649, Remote IP: 193.*.*.114, Error code: 335544539, Message: short read"
"DEBUG"	6916	"2020-12-12 02:46:06.690"	"Ending session 64649"
"DEBUG"	6916	"2020-12-12 02:46:06.814"	"Creating session 64651"
"TCPIP"	6916	"2020-12-12 02:46:06.814"	"TCP - 193.*.*.114 connected to 192.*.*.31:995."
"DEBUG"	6916	"2020-12-12 02:46:06.814"	"TCP connection started for session 64650"
"DEBUG"	6916	"2020-12-12 02:46:06.814"	"Performing SSL/TLS handshake for session 64650. Verify certificate: False"
"TCPIP"	6916	"2020-12-12 02:46:07.064"	"TCPConnection - TLS/SSL handshake failed. Session Id: 64650, Remote IP: 193.*.*.114, Error code: 335544539, Message: short read"
"DEBUG"	6916	"2020-12-12 02:46:07.064"	"Ending session 64650"
"DEBUG"	6916	"2020-12-12 02:46:07.189"	"Creating session 64652"
"TCPIP"	6916	"2020-12-12 02:46:07.189"	"TCP - 193.*.*.114 connected to 192.*.*.31:995."
"DEBUG"	6916	"2020-12-12 02:46:07.189"	"TCP connection started for session 64651"
"DEBUG"	6916	"2020-12-12 02:46:07.189"	"Performing SSL/TLS handshake for session 64651. Verify certificate: False"
"TCPIP"	6916	"2020-12-12 02:46:07.407"	"TCPConnection - TLS/SSL handshake failed. Session Id: 64651, Remote IP: 193.*.*.114, Error code: 335544539, Message: short read"
"DEBUG"	6916	"2020-12-12 02:46:07.407"	"Ending session 64651"
"DEBUG"	6916	"2020-12-12 02:46:07.532"	"Creating session 64653"
"TCPIP"	6916	"2020-12-12 02:46:07.532"	"TCP - 193.*.*.114 connected to 192.*.*.31:995."
"DEBUG"	6916	"2020-12-12 02:46:07.532"	"TCP connection started for session 64652"
"DEBUG"	6916	"2020-12-12 02:46:07.532"	"Performing SSL/TLS handshake for session 64652. Verify certificate: False"
"TCPIP"	6916	"2020-12-12 02:46:07.657"	"TCPConnection - TLS/SSL handshake failed. Session Id: 64652, Remote IP: 193.*.*.114, Error code: 335544539, Message: short read"
"DEBUG"	6916	"2020-12-12 02:46:07.657"	"Ending session 64652"
"DEBUG"	6916	"2020-12-12 02:46:07.797"	"Creating session 64654"
"TCPIP"	6916	"2020-12-12 02:46:07.797"	"TCP - 193.*.*.114 connected to 192.*.*.31:995."
"DEBUG"	6916	"2020-12-12 02:46:07.797"	"TCP connection started for session 64653"
"DEBUG"	6916	"2020-12-12 02:46:07.797"	"Performing SSL/TLS handshake for session 64653. Verify certificate: False"
"TCPIP"	6916	"2020-12-12 02:46:08.016"	"TCPConnection - TLS/SSL handshake failed. Session Id: 64653, Remote IP: 193.*.*.114, Error code: 335544539, Message: short read"
"DEBUG"	6916	"2020-12-12 02:46:08.016"	"Ending session 64653"
"DEBUG"	6916	"2020-12-12 02:46:08.156"	"Creating session 64655"
"TCPIP"	6916	"2020-12-12 02:46:08.156"	"TCP - 193.*.*.114 connected to 192.*.*.31:995."
"DEBUG"	6916	"2020-12-12 02:46:08.156"	"TCP connection started for session 64654"
"DEBUG"	6916	"2020-12-12 02:46:08.156"	"Performing SSL/TLS handshake for session 64654. Verify certificate: False"
"TCPIP"	6916	"2020-12-12 02:46:08.328"	"TCPConnection - TLS/SSL handshake failed. Session Id: 64654, Remote IP: 193.*.*.114, Error code: 335544539, Message: short read"
"DEBUG"	6916	"2020-12-12 02:46:08.328"	"Ending session 64654"
"DEBUG"	6916	"2020-12-12 02:46:08.452"	"Creating session 64656"
"TCPIP"	6916	"2020-12-12 02:46:08.452"	"TCP - 193.*.*.114 connected to 192.*.*.31:995."
"DEBUG"	6916	"2020-12-12 02:46:08.468"	"TCP connection started for session 64655"
"DEBUG"	6916	"2020-12-12 02:46:08.468"	"Performing SSL/TLS handshake for session 64655. Verify certificate: False"
"TCPIP"	6844	"2020-12-12 02:46:08.624"	"TCPConnection - TLS/SSL handshake completed. Session Id: 64655, Remote IP: 193.*.*.114, Version: TLSv1, Cipher: ECDHE-RSA-AES256-SHA, Bits: 256"
"POP3D"	6844	64655	"2020-12-12 02:46:08.624"	"193.*.*.114"	"SENT: +OK POP3"
"DEBUG"	6864	"2020-12-12 02:46:08.749"	"The read operation failed. Bytes transferred: 0 Remote IP: 193.*.*.114, Session: 64655, Code: 2, Message: End of file"
"DEBUG"	6864	"2020-12-12 02:46:08.749"	"Ending session 64655"
"DEBUG"	6916	"2020-12-12 02:47:12.085"	"Creating session 64657"
"TCPIP"	6916	"2020-12-12 02:47:12.085"	"TCP - 193.*.*.114 connected to 192.*.*.31:995."
"DEBUG"	6916	"2020-12-12 02:47:12.085"	"TCP connection started for session 64656"
"DEBUG"	6916	"2020-12-12 02:47:12.085"	"Performing SSL/TLS handshake for session 64656. Verify certificate: False"
"TCPIP"	6864	"2020-12-12 02:47:12.085"	"TCPConnection - TLS/SSL handshake failed. Session Id: 64656, Remote IP: 193.*.*.114, Error code: 336027900, Message: unknown protocol"
"DEBUG"	6864	"2020-12-12 02:47:12.085"	"Ending session 64656"
"DEBUG"	6864	"2020-12-12 02:47:12.210"	"The read operation failed. Bytes transferred: 0 Remote IP: 193.*.*.114, Session: 64628, Code: 335544539, Message: short read"
"DEBUG"	6864	"2020-12-12 02:47:12.210"	"Ending session 64628"
"DEBUG"	6856	"2020-12-12 02:57:47.334"	"Creating session 64658"
"TCPIP"	6856	"2020-12-12 02:57:47.349"	"TCP - 162.243.128.114 connected to 192.*.*.31:110."
"DEBUG"	6856	"2020-12-12 02:57:47.349"	"TCP connection started for session 64640"
"POP3D"	6856	64640	"2020-12-12 02:57:47.349"	"162.243.128.114"	"SENT: +OK POP3"
"DEBUG"	6916	"2020-12-12 02:57:57.255"	"The read operation failed. Bytes transferred: 0 Remote IP: 162.243.128.114, Session: 64640, Code: 2, Message: End of file"
"DEBUG"	6916	"2020-12-12 02:57:57.255"	"Ending session 64640"
"DEBUG"	6844	"2020-12-12 02:58:59.484"	"Creating session 64659"
"TCPIP"	6844	"2020-12-12 02:58:59.484"	"TCP - 45.150.206.114 connected to 192.*.*.31:25."
"DEBUG"	6844	"2020-12-12 02:58:59.484"	"Client connection from 45.150.206.114 was not accepted. Blocked either by IP range or by connection limit."
"DEBUG"	6844	"2020-12-12 02:58:59.484"	"Ending session 64642"
"DEBUG"	6844	"2020-12-12 03:42:23.425"	"Creating session 64660"

User avatar
SorenR
Senior user
Senior user
Posts: 4894
Joined: 2006-08-21 15:38
Location: Denmark

Re: Could you please explain what is going on in this log?

Post by SorenR » 2020-12-14 04:08

Version 5.6.8 ... TCPConnection.cpp ... ca. line 493

I usually see it with SMTP when my BOT/IDS handler kills the TCP connection before hMailServer exit the connection.
SørenR.

Engineer (noun)
- I'm Not Arguing, I'm Just Explaining Why I'm Right

DrmCa
Normal user
Normal user
Posts: 116
Joined: 2011-02-14 21:30

Re: Could you please explain what is going on in this log?

Post by DrmCa » 2020-12-18 18:17

Eh, where in the Administrator is the setting that does it?

User avatar
SorenR
Senior user
Senior user
Posts: 4894
Joined: 2006-08-21 15:38
Location: Denmark

Re: Could you please explain what is going on in this log?

Post by SorenR » 2020-12-18 19:00

DrmCa wrote:
2020-12-18 18:17
Eh, where in the Administrator is the setting that does it?
It's not... It's in my script.
SørenR.

Engineer (noun)
- I'm Not Arguing, I'm Just Explaining Why I'm Right

User avatar
mattg
Moderator
Moderator
Posts: 21639
Joined: 2007-06-14 05:12
Location: 'The Outback' Australia

Re: Could you please explain what is going on in this log?

Post by mattg » 2020-12-19 01:22

DrmCa wrote:
2020-12-14 02:43
What is the IP 193.*.*.114 doing?
I suspect that is a hacker trying to guess a username / password combo on port 995, and thus avoiding the autoban (Autoban is only for SMTP connections)
Just 'cause I link to a page and say little else doesn't mean I am not being nice.
https://www.hmailserver.com/documentation

DrmCa
Normal user
Normal user
Posts: 116
Joined: 2011-02-14 21:30

Re: Could you please explain what is going on in this log?

Post by DrmCa » 2020-12-23 02:37

Ah, so the log entry for a bad login/password combination does not say that but ssl error?

User avatar
mattg
Moderator
Moderator
Posts: 21639
Joined: 2007-06-14 05:12
Location: 'The Outback' Australia

Re: Could you please explain what is going on in this log?

Post by mattg » 2020-12-23 02:58

DrmCa wrote:
2020-12-23 02:37
Ah, so the log entry for a bad login/password combination does not say that but ssl error?
Where is the SSL error?

Code: Select all

"DEBUG"	6916	"2020-12-12 02:45:59.732"	"Creating session 64645"
"TCPIP"	6916	"2020-12-12 02:45:59.732"	"TCP - 193.*.*.114 connected to 192.*.*.31:995."
"DEBUG"	6916	"2020-12-12 02:45:59.732"	"TCP connection started for session 64644"
"DEBUG"	6916	"2020-12-12 02:45:59.732"	"Performing SSL/TLS handshake for session 64644. Verify certificate: False"
"TCPIP"	6916	"2020-12-12 02:46:00.044"	"TCPConnection - TLS/SSL handshake completed. Session Id: 64644, Remote IP: 193.*.*.114, Version: TLSv1.2, Cipher: ECDHE-RSA-AES256-GCM-SHA384, Bits: 256"
"POP3D"	6916	64644	"2020-12-12 02:46:00.044"	"193.*.*.114"	"SENT: +OK POP3"
"DEBUG"	6844	"2020-12-12 02:46:02.758"	"The read operation failed. Bytes transferred: 0 Remote IP: 193.*.*.114, Session: 64644, Code: 10054, Message: An existing connection was forcibly closed by the remote host"
"DEBUG"	6844	"2020-12-12 02:46:02.758"	"Ending session 64644"
Verify certificate false - says that hMailserver didn't try to verify the certificate, not that the certificate didn't verify
The next line clearly shows a TLSv1.2 SSL connection, and details which cipher was used for that connection

Your server sent 'OK POP3', asking for the credentials (NOT SHOWN IN THE LOGS) , which were incorrect, hence the remote machine dropped the connection
Just 'cause I link to a page and say little else doesn't mean I am not being nice.
https://www.hmailserver.com/documentation

DrmCa
Normal user
Normal user
Posts: 116
Joined: 2011-02-14 21:30

Re: Could you please explain what is going on in this log?

Post by DrmCa » 2020-12-23 17:14

I thought that "The read operation failed." meant that something was wrong with TLS. Does it mean incorrect credentials instead?

User avatar
mattg
Moderator
Moderator
Posts: 21639
Joined: 2007-06-14 05:12
Location: 'The Outback' Australia

Re: Could you please explain what is going on in this log?

Post by mattg » 2020-12-24 08:29

The read operation failed literally means that your server was unable to read what was next in the I/O stream.
The rest of that message says 'An existing connection was forcibly closed by the remote host'


It means one of a couple of things

#1 that there was no further transmission in the stream (ie the client went lame) and the client end simply dropped the connection (common with spammers trying to guess passwords)
#2 that the stream is blocked by something else, probably anti-virus or a firewall device inspecting packets (ie the stream got broken) as your mailserver is otherwise working normally - I've ruled this out
Just 'cause I link to a page and say little else doesn't mean I am not being nice.
https://www.hmailserver.com/documentation

DrmCa
Normal user
Normal user
Posts: 116
Joined: 2011-02-14 21:30

Re: Could you please explain what is going on in this log?

Post by DrmCa » 2020-12-24 22:25

First of all, as soon as a POP3 connection presents wrong credentials, they have to be logged.
Secondly, what is the reason there is no autobahn on POP3?

User avatar
jimimaseye
Moderator
Moderator
Posts: 9236
Joined: 2011-09-08 17:48

Re: Could you please explain what is going on in this log?

Post by jimimaseye » 2020-12-24 22:29

DrmCa wrote:
2020-12-24 22:25
Secondly, what is the reason there is no autobahn on POP3?
Autoban is there for stopping the mail server being abused to SEND emails (spamming), not to prevent unwanted eyes reading emails.

[Entered by mobile. Excuse my spelling.]
5.7 on test.
SpamassassinForWindows 3.4.0 spamd service
AV: Clamwin + Clamd service + sanesecurity defs : https://www.hmailserver.com/forum/viewtopic.php?f=21&t=26829

User avatar
SorenR
Senior user
Senior user
Posts: 4894
Joined: 2006-08-21 15:38
Location: Denmark

Re: Could you please explain what is going on in this log?

Post by SorenR » 2020-12-25 01:20

DrmCa wrote:
2020-12-24 22:25
First of all, as soon as a POP3 connection presents wrong credentials, they have to be logged.
Secondly, what is the reason there is no autobahn on POP3?
Some of us fix that with scripting and an unofficial version of 5.6.8 B2505... :wink:
SørenR.

Engineer (noun)
- I'm Not Arguing, I'm Just Explaining Why I'm Right

User avatar
tbrg78_hm
Normal user
Normal user
Posts: 55
Joined: 2013-12-17 19:58
Location: Berlin/Germany

Re: Could you please explain what is going on in this log?

Post by tbrg78_hm » 2021-09-27 11:57

I have similar output and activity in the debug log.. is this the same pop3-login attempt thing?
It does not stop and the debug log grows very quickly if enabled.

@SorenR
Can you provide some details on what script you use (is there a solution available somewhere)?
And this unofficial version or feature you mention, is it official in the meantime and how does it help with this?

Thank you! o)

Code: Select all

"DEBUG"	4540	"2021-09-27 11:33:15.388"	"Creating session 729616"
"DEBUG"	4540	"2021-09-27 11:33:15.389"	"TCP connection started for session 729615"
"DEBUG"	4540	"2021-09-27 11:33:15.390"	"Performing SSL/TLS handshake for session 729615. Verify certificate: False"
"DEBUG"	4512	"2021-09-27 11:33:17.285"	"Ending session 729615"
"DEBUG"	4540	"2021-09-27 11:33:18.646"	"Creating session 729617"
"DEBUG"	4540	"2021-09-27 11:33:18.647"	"TCP connection started for session 729616"
"DEBUG"	4540	"2021-09-27 11:33:18.647"	"Performing SSL/TLS handshake for session 729616. Verify certificate: False"
"DEBUG"	4556	"2021-09-27 11:33:20.138"	"Ending session 729616"
"DEBUG"	4540	"2021-09-27 11:33:20.228"	"Creating session 729618"
"DEBUG"	4540	"2021-09-27 11:33:20.229"	"TCP connection started for session 729617"
"DEBUG"	4540	"2021-09-27 11:33:20.229"	"Performing SSL/TLS handshake for session 729617. Verify certificate: False"
"DEBUG"	4552	"2021-09-27 11:33:22.342"	"Ending session 729617"
"DEBUG"	4540	"2021-09-27 11:33:22.382"	"Creating session 729619"
"DEBUG"	4540	"2021-09-27 11:33:22.383"	"TCP connection started for session 729618"
"DEBUG"	4540	"2021-09-27 11:33:22.383"	"Performing SSL/TLS handshake for session 729618. Verify certificate: False"
"DEBUG"	4540	"2021-09-27 11:33:24.225"	"Ending session 729618"
"DEBUG"	4540	"2021-09-27 11:33:24.293"	"Creating session 729620"
"DEBUG"	4540	"2021-09-27 11:33:24.294"	"TCP connection started for session 729619"
"DEBUG"	4540	"2021-09-27 11:33:24.294"	"Performing SSL/TLS handshake for session 729619. Verify certificate: False"
"DEBUG"	4532	"2021-09-27 11:33:25.808"	"Ending session 729619"


User avatar
katip
Senior user
Senior user
Posts: 966
Joined: 2006-12-22 07:58
Location: Istanbul

Re: Could you please explain what is going on in this log?

Post by katip » 2021-09-27 14:06

AFAIK Autoban works for all protocols.
Katip
--
HMS 5.7.0, MariaDB 10.4.10, SA 3.4.4, ClamAV 0.103.2

palinka
Senior user
Senior user
Posts: 2974
Joined: 2017-09-12 17:57

Re: Could you please explain what is going on in this log?

Post by palinka » 2021-09-27 15:23

katip wrote:
2021-09-27 14:06
AFAIK Autoban works for all protocols.
It can be scripted to work that way.

User avatar
katip
Senior user
Senior user
Posts: 966
Joined: 2006-12-22 07:58
Location: Istanbul

Re: Could you please explain what is going on in this log?

Post by katip » 2021-09-27 18:47

palinka wrote:
2021-09-27 15:23
katip wrote:
2021-09-27 14:06
AFAIK Autoban works for all protocols.
It can be scripted to work that way.
no, built in, was ever so.
try and see.
Katip
--
HMS 5.7.0, MariaDB 10.4.10, SA 3.4.4, ClamAV 0.103.2

User avatar
tbrg78_hm
Normal user
Normal user
Posts: 55
Joined: 2013-12-17 19:58
Location: Berlin/Germany

Re: Could you please explain what is going on in this log?

Post by tbrg78_hm » 2021-09-28 09:25

@palinka
Lots of reading.. I now learned about the fork/version/maintenance topic.
I was not aware of that, but this clears some things for me, thank you! o)

Post Reply