Mail Changes on Linux Servers - URGENT

**NexDog** · 03-15-2009, 06:03 AM

With immediate effect we are be disabling the POP-Lock form of authentication on any shared and reseller servers where this was enabled. This option was not available on all servers however. POP-Lock authenticates your account with the server when you first download mail (POP). You can then send mail for 20 minutes without further authenticating. And as people have mail clients set to check when it's open it is possible some of you do not have "My Server Requires Authentication" set in your mailbox properties. We have always told people to set this - in tickets, in the forum, it's even in the Activation email but some will not have this set so please do check this and set it.

POP-Lock was causing two major problems. The first one is that we found Outlook 2007 users could get a message "None of the authentication methods supported by this client are supported by your server". Secondly we found that this type of authenticating in some cases actually stripped SMTP Authenticating altogether. That is a huge security hole and we were lucky it wasn't exploited.

If you have a Linux dedicated server or Linux VPS we advise you do the same by going to Server > Mail and unchecking "POP3 lock time" as a precautionary measure.

middleground · 03-16-2009, 09:02 AM

Quote:

Originally Posted by NexDog

The first one is that we found Outlook 2007 users could get a message "None of the authentication methods supported by this client are supported by your server".

Laurence,
I'm getting one of the Outlook 2007 users who gets that error once enable. Remove to authentication and it works fine...has the change been implemented?

**NexDog** · 03-16-2009, 09:14 AM

Matei is doing something. Says initial assessment might be wrong. Please put in a ticket.

I am also waiting for answers.

middleground · 03-16-2009, 09:21 AM

Thanks, ticket opened...

**NexDog** · 03-16-2009, 09:22 AM

Mike, it shouldn't work if you don't authenticate. Problem was that my solution yesterday was only half the fix. There are two factors that cause this behaviour and only one was addressed. Matei is going through the servers and applying the second part. He is doing Theta now - is that the server with this issue?

middleground · 03-16-2009, 09:23 AM

Thanks Laurence, no this is on my Callisto account. Just checked and if I uncheck auth in Outlook 2003 it goes through fine...

**NexDog** · 03-16-2009, 09:37 AM

Okay, Callisto fixed (I hope). Can you confirm?

middleground · 03-16-2009, 09:56 AM

Yes- looks good now....thanks Laurence

**NexDog** · 03-16-2009, 10:06 AM

Okay, have it fully nailed now.