[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [cobalt-users] POP 3 stopped suddenly
- Subject: Re: [cobalt-users] POP 3 stopped suddenly
- From: "Gilles Dumangin" <gilles_dumangin@xxxxxxxxxxx>
- Date: Mon Feb 19 00:20:02 2001
- List-id: Mailing list for users to share thoughts on Cobalt products. <cobalt-users.list.cobalt.com>
I have been checking a lot of things that have been suggested to me...
Is it possible your colo or someone performed an upgrade for you? The
named user lines are typical for installing the bind security patch...
Nope, I am the only one with access to this machine so nobody could perfom
an upgrade for me
Log in with telnet and poke around the .cobalt hidden directories,
there are install logs that will say who did upgrades, (I think they should
show up in /var/log/https/adm_access or such (varies a bit by machine)
which has web hits for admin GUI, should show you someone accessing GUI ti
install if that happened...
also try 'last |less' which will show most recent telnet/ssh/ftp logins
I have checked and the only connection that I see is a ftp connection around
that time from the machine loop address
Feb 17 13:30:01 raq3 in.proftpd[21234]: connect from 127.0.0.1
Feb 17 13:30:22 raq3 imapd[23604]: connect from 127.0.0.1
Feb 17 13:30:43 raq3 in.telnetd[27180]: connect from 127.0.0.1
the 'last |less' shows nothing connected to the machine up to 20 hours
before and 4 hours after the POP server stopped
Feb 17 13:15:22 raq3 in.qpopper[7038]: Active_Monitor_69@localhost: -
ERR POP EOF received
OK, re pop, the above tells me that pop is at least running, which is
good, however that line is just the internal monitor testing it, you have
to see if you can find some other error (eg No such user, Access denied, or
something...) look also in the 'secure' log , it should show your attempt
to connect to pop, if you don't appear there at all you have something else
weird going on....
that error does not appear after the POP server stopped, I can't see any
connection to qpopper after the server stopped at all in the 'secure' log
if you see 'Can not get connonical name of cluent, you have a nameserver
problem, tho it's possible it's at the other end (eg the machine tryig to
get email has no reverse domain name)
I got that error a few times the days before the POP server stopped but not
anymore (as the POP server is not there - I think)
Is there a way to restart the pop server manually? Is that the way to go?
Everything else is working fine and all the emails are currently stacked on
the server, so they arrive fine to the machine, no use can pick them up,
that'a ll.
Thanbks for your help
_________________________________________________________________________
Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com.