Thank you for the additional details that you uploaded.
Do we still have a copy of the original .msg file that were accessible by the user? Did they forward them as an attachment, for example? Or are they in the users Deleted Items folder? I believe the answer to this is no, but I wanted to double check because the original messages could be very helpful. The forwarded copies that you provided help, but we lose all the original message headers which can have very helpful information.
No the files are gone when I restart MDaemon and they as far as I can tell are not really in that folder since they are not visible trough worldclient.
Does the user share their inbox with anyone on the server?
The users that this has happened to no
I’m not sure we are going to be able to find sufficient information to determine what happened but can you send me all of your MDaemon logs for May 8,9,10, and 11. I’ll go through them and see what I can find.
I can upload them but they are pretty large as I log everything, or you can pull them from ftp: mail.tomas.to User: arron Password: MDaemon20
In case this occurs again, lease enable debug logging for Activesync, make sure that MDaemon is configured to log detailed mail sessions, and that we are logging as much data as we can.
You can change the ActiveSync log level to debug by going to Setup / Mobile Device Management / Diagnostics, in the log level drop down select Debug, then click OK.
I have done this on the 2 servers now
Then go to Setup / Server Settings / Logging / Log Mode, make sure the radio button for log detailed mail sessions is enabled. On the Settings dialog make sure you are Logging all activity.
That I have been doing for a while now
If this happens again, please have the user login to webmail to see if they can see the messages from webmail.
They couldnt see messages in webmail.
Then go to the user’s mailbox and collect the actual .msg files for the messages that they can see that they should not be able to see. Also include the user’s email address that should not be able to see the messages and if possible an estimate of when they first saw the messages in their mailbox, and all of MDaemon’s logs for that day. If the user is not sure, zip the logs for the day the messages were originally received by MDaemon and every day since then. At a minimum I would like logs for the day the messages were originally received by MDaemon and for the day the wrong user was able to view the messages in their mailbox.
I will see if I can copy it in Outlook over to another folder.
Lastly, please capture hang dumps for MDaemon.exe and WorldClient.exe while the issue is occurring. If you are running webmail via IIS, then we will need a dump of the w3wp.exe process associated with the correct application pool.
I have both, on running IIS (seequre.it) and the other one using your server.
Zip up the messages along with all of the logs and dump files and send them to me.
--
From: md-support@mdaemon.com [mailto:md-support@mdaemon.com]
Sent: Monday, May 11, 2020 2:58 PM
To: md-support@mdaemon.com
Subject: [md-support] Messages randomly accessible to random users
OK, This sounds like a different issue than what the thread was originally created for.
Just to make sure I’m understanding correctly, a user is seeing messages that are not in his mailbox, correct?
Yes, I have had 2 users that have reported seing email not ment to them in their inboxes
Is the user seeing the messages via IMAP, webmail, and ActiveSync, or just ActiveSync?
I restarted the server before I could check that, but the common thread here would be activesync in Outlook and AS on Iphone.
What folder is the user seeing the messages in?
In their inbox/root
Can you send me the routing logs that include the time period when the message was originally delivery to the mailbox along with ActiveSync logs for the time period when the message showed up in the wrong mailbox?
Also, please send me the email address of the user that is seeing the messages that should not be in their mailbox as well as the details for the message, such as subject, from and to?
Info in the Users Affected.txt file in the armand users.rar file I am uploading now
And to confirm, restarted MDaemon fixed the issue?
Seems to have done it now for the last user. For the first user, they where gone the next morning..
Can you also include ActiveSync logs for the time period when MDameon was restarted?
Also, we will need to try to figure out if the messages are actually stored on disk in the wrong user’s mailbox or if something else is happening. The next time this occurs, please check to see if the message actually exists in the user’s mailbox. You can check this by logging into webmail and also looking at the user’s mailbox on disk.
If it gets reported again, I will look log in and check.
We will also take a look at the dump files that you uploaded to see if there are any clues that might help us.
Sorry it was my dyslexic kicking in. I did not see the not.
I have had 2 users that have been able to see emails that should not not be in their mailboxes.
Users are not even from the same domain..
And I dont see any LCK files now. I saved the dmp file and then I restarted MDaemon, which seems to have fixed
it for the second time this happened.
Windows Server 2012 Standard
SMTP/POP/IMAP server: v20.0.0
Webmail HTTP server: v20.0.0
Webmail DLL: v20.0.0
MDaemon Instant Messenger client: v20.0.0
Content filter server: v20.0.0
Content filter DLL: v20.0.0
Content filter GUI: v20.0.0
Calendar API (MDCalendar.dll): v20.0.0
Mailing list API (MDList.dll): v20.0.0
Original "Flat-File" API (MDUser.dll): v20.0.0
COM/DCOM API (MDUserCOM.dll): v20.0.0
LDAP API (MDUserLDAP.dll): v20.0.0
ODBC/SQL API (MDUserODBC.dll): v20.0.0
Cluster Service (64bit) for MDaemon Messaging Server (ClstrSvc.dll): 20.0.0.14
Dynamic Screening (64bit) for MDaemon Messaging Server (DynScrn.dll): 20.0.0.2
ActiveSync Mgmt Module (64bit) for MDaemon Messaging Server (MDASMgmt.dll): 20.0.0.4
AutoDiscovery Service (64bit) for MDaemon Messaging Server (MDAutoDiscover.dll): 20.0.0.1
Management Web Service (64bit) for MDaemon Messaging Server (MDMgmtWS.dll): 20.0.0.1
MDPGP (mdpgp.dll): 20.0.0a
MDOP (mdop.dll): 1.3.8
ActiveSync (MDAirSync.dll): v20.0.0.6
NT/2K/XP utility API (NTUtil.dll): v20.0.0
DKIM API (LibDKIM.dll): v1.0.21
I’m not sure I’m following, are you saying that user’s were unable to access messages in their own account or that user’s were able to see messages from other users that they should not have been able to see?
What version of MDaemon are you running?
Did you find .LCK files in the MDaemon\LockFiles directory that were not being removed? Did removing the LCK files fix the issue?
I am uploading two dumps, where 2 users have had access to other users email.
Armand and Armand 2
Armand was a user that could see and read a few accounts emails, which he emailed me.
He only checked his phone (activesync user)
Armand 2 one user that could read user from another companies email.
Activesync on Outlook.
If you need more logs.. I can send it.
The next time this occurs, will you capture a dump of the MDaemon.exe process before you fix it?
To do this, close the MDaemon configuration session (If you have one open), then open task manager, right click on the mdaemon.exe process and select Create Dump File. Once the dump file is created, zip it and upload it to our FTP server.
When the problem occurred, had the user accessed the account using something other than the two IMAP clients? Webmail or ActiveSync for example?
I’ve looked through the logs and found where the issue happened, now the developers are investigating to see if they can figure out why. As soon as I have more information I’ll let you know.
Hi Aaron,
I apologize for not responding sooner. I was waiting until this trouble happened again so I could collect the files you need. It hadn't happened in some time but did happen again this morning for one of the users. I'm sending you an email with the lck and log files as a zip attachment.
Hopefully this will have what you need to help track down what may be causing this.
Thanks!
--MD-SUPPORT--------------------------------------------------------------
This list is for questions and discussion about MDAEMON. To unsubscribe
from this mailing list send an email to md-support-unsubscribe@mdaemon.com .
--POWERED BY MDAEMON!-----------------------------------------------------
--------------------------------------------------------------------------
These forums are provided by MDaemon Technologies for user-to-user
support and discussion. MDaemon staff members may participate in the
forums periodically but please recognize that this is not the official
method of receiving technical support. To receive personal technical
support please use the form here:
http://www.mdaemon.com/Support/RequestSupport/
--------------------------------------------------------------------------
--MD-SUPPORT--------------------------------------------------------------
This list is for questions and discussion about MDAEMON. To unsubscribe
from this mailing list send an email to md-support-unsubscribe@mdaemon.com .
--POWERED BY MDAEMON!-----------------------------------------------------
--------------------------------------------------------------------------
These forums are provided by MDaemon Technologies for user-to-user
support and discussion. MDaemon staff members may participate in the
forums periodically but please recognize that this is not the official
method of receiving technical support. To receive personal technical
support please use the form here:
http://www.mdaemon.com/Support/RequestSupport/
--------------------------------------------------------------------------
--MD-SUPPORT--------------------------------------------------------------
This list is for questions and discussion about MDAEMON. To unsubscribe
from this mailing list send an email to md-support-unsubscribe@mdaemon.com .
--POWERED BY MDAEMON!-----------------------------------------------------
--------------------------------------------------------------------------
These forums are provided by MDaemon Technologies for user-to-user
support and discussion. MDaemon staff members may participate in the
forums periodically but please recognize that this is not the official
method of receiving technical support. To receive personal technical
support please use the form here:
http://www.mdaemon.com/Support/RequestSupport/
--------------------------------------------------------------------------
--MD-SUPPORT--------------------------------------------------------------
This list is for questions and discussion about MDAEMON. To unsubscribe
from this mailing list send an email to md-support-unsubscribe@mdaemon.com .
--POWERED BY MDAEMON!-----------------------------------------------------
--------------------------------------------------------------------------
These forums are provided by MDaemon Technologies for user-to-user
support and discussion. MDaemon staff members may participate in the
forums periodically but please recognize that this is not the official
method of receiving technical support. To receive personal technical
support please use the form here:
http://www.mdaemon.com/Support/RequestSupport/
--------------------------------------------------------------------------
--MD-SUPPORT--------------------------------------------------------------
This list is for questions and discussion about MDAEMON. To unsubscribe
from this mailing list send an email to md-support-unsubscribe@mdaemon.com .
--POWERED BY MDAEMON!-----------------------------------------------------
--------------------------------------------------------------------------
These forums are provided by MDaemon Technologies for user-to-user
support and discussion. MDaemon staff members may participate in the
forums periodically but please recognize that this is not the official
method of receiving technical support. To receive personal technical
support please use the form here:
http://www.mdaemon.com/Support/RequestSupport/
--------------------------------------------------------------------------
--MD-SUPPORT--------------------------------------------------------------
This list is for questions and discussion about MDAEMON. To unsubscribe
from this mailing list send an email to md-support-unsubscribe@mdaemon.com .
--POWERED BY MDAEMON!-----------------------------------------------------
--------------------------------------------------------------------------
These forums are provided by MDaemon Technologies for user-to-user
support and discussion. MDaemon staff members may participate in the
forums periodically but please recognize that this is not the official
method of receiving technical support. To receive personal technical
support please use the form here:
http://www.mdaemon.com/Support/RequestSupport/
--------------------------------------------------------------------------
--MD-SUPPORT--------------------------------------------------------------
This list is for questions and discussion about MDAEMON. To unsubscribe
from this mailing list send an email to md-support-unsubscribe@mdaemon.com .
--POWERED BY MDAEMON!-----------------------------------------------------
--------------------------------------------------------------------------
These forums are provided by MDaemon Technologies for user-to-user
support and discussion. MDaemon staff members may participate in the
forums periodically but please recognize that this is not the official
method of receiving technical support. To receive personal technical
support please use the form here:
http://www.mdaemon.com/Support/RequestSupport/
--------------------------------------------------------------------------
--MD-SUPPORT--------------------------------------------------------------
This list is for questions and discussion about MDAEMON. To unsubscribe
from this mailing list send an email to md-support-unsubscribe@mdaemon.com .
--POWERED BY MDAEMON!-----------------------------------------------------
--------------------------------------------------------------------------
These forums are provided by MDaemon Technologies for user-to-user
support and discussion. MDaemon staff members may participate in the
forums periodically but please recognize that this is not the official
method of receiving technical support. To receive personal technical
support please use the form here:
http://www.mdaemon.com/Support/RequestSupport/
--------------------------------------------------------------------------
--MD-SUPPORT--------------------------------------------------------------
This list is for questions and discussion about MDAEMON. To unsubscribe
from this mailing list send an email to md-support-unsubscribe@mdaemon.com .
--POWERED BY MDAEMON!-----------------------------------------------------
--------------------------------------------------------------------------
These forums are provided by MDaemon Technologies for user-to-user
support and discussion. MDaemon staff members may participate in the
forums periodically but please recognize that this is not the official
method of receiving technical support. To receive personal technical
support please use the form here:
http://www.mdaemon.com/Support/RequestSupport/
--------------------------------------------------------------------------