Help - Search - Members - Calendar
Full Version: Problem with webmail, &nbsp <<
The Planet Forums > Control Panels > Plesk
kriscad
I keep getting one or two emails a day that have " " located in the subject line, and the emails are blank. Im sure its some type of spam mail.

Problem is this...

If I get one of those sent to a pop3 account, it times out and wont allow you to download the rest of your email.

The only way to fix the problem is by logging into webmail and deleting it.


Anyone else having the same problem?
Gravity
I am getting the same thing all across all of our servers. It is knocking out clients email every single day and we get at least 15 calls a day about it.
The only way to get rid of them is to kill the file from their qmail mailbox, or webmail allows you to login and delete that bad message.
I figured it was some kind of attack or something just to cause an inconvenience. It won't harm anything and doesn't stop email from going to the mailbox, but as stated it does stop the user from getting mail with their mail client.
If someone has a way to fix this, god that would be so much appreciated.
This has been going on for Months now.


kriscad, your not alone!
Squire
I read something about this one the other day again.

Check with your clients to see if they're using Symantec's Norton Anti-Virus product on their local machine. If they do, supposedly they can disable Email Scanning momentarily those blank emails will be downloaded as normal mail would.

Not a good solution, but better than having to log into webmail if it works. The problem, in my mind, is that the potential is there that an email with a virus attachment could be downloaded during this time without being quarentined. But the Real Time protection should still catch it if someone tries to open such an attachment.
x007
same here..

This plague plesk since V6 :-)
Not sure if this came from outlook (problem look like to apear whit outlook) or plesk but this started in V6.


not sure on 7.02 .. i havent see this problem as now

Someone have try whit another email client ?
kriscad
QUOTE
Originally posted by Squire
I read something about this one the other day again.

Check with your clients to see if they're using Symantec's Norton Anti-Virus product on their local machine.  If they do, supposedly they can disable Email Scanning momentarily those blank emails will be downloaded as normal mail would.

Not a good solution, but better than having to log into webmail if it works.  The problem, in my mind, is that the potential is there that an email with a virus attachment could be downloaded during this time without being quarentined.  But the Real Time protection should still catch it if someone tries to open such an attachment.


maybe thats why... i run Symantec's Norton Anti-Virus, and its happened to my own accounts on there.
Redah
Hello,

This has nothing to do with Norton AntiVirus (well, not the blanking, just the message blocking). It's Plesk's AntiSpam function acting up.

Either you removed the spamassasin package from your server, or something got misconfigured. Plesk tries to parse the e-mails to a scanner it can't find (or something along those lines) and gets blanked e-mails in return.

After submitting this to tech support, I received the following response:


------------------------
Dear Customer,
I was able to resolve this problem for user@domain.com by removing the first line from /var/qmail/mailnames/domain.com/user/.qmail.

Where it used to read:

| if [ -z "$SA" ]; then export SA=1; /usr/local/psa/bin/psa-spamc -f -u
user@domain.com -U /tmp/spamd_full.sock > spamcheck$$; /var/qmail/bin/qmail-local "$USER" "$HOME" "$LOCAL" "" "" "$HOST"
"$SENDER" "$DEFAULT" < spamcheck$$; retval=$?; rm -f spamch eck$$; [ $retval = 0 ] && exit 99; exit $?; fi
| true
/Maildir/

It now reads:

| true
/Maildir/


I've noticed several changes have been made to the spam filtering programs. At this point we won't be able to help you resolve its setup, but the above method should ensure that the SPAM programs are no longer in the E-Mail loop.

Thank you
------------------------


So, in short, either delete the top-most line, or, re-setup the e-mail account in Plesk (but I assume this could take a while on many e-mail accounts).
Gravity
I have checked the .qmail file on emails that this is happening to and they read.

-------
| true
./Maildir/
-------
The error still persists.

On all of our plesk servers plesk's spam would have been removed when upgraded to 7.02 from 7.0. But it is not supported by the license key.
Anyways I thought I should let you know this problem persists on mail folders with the above setting and does not seem to be going through any spam filters (only from seeing the .qmail file configuration).

I do know for a fact that many of the clients that are having these problems are running norton internet security as this has become pretty mainstream now. I will defiantly put that to the test right away, thanks for the advice.

If anyone else runs into this problem and know any other fixes please let us know.
Redah
Yes, Norton AntiVirus is what causes Outlook not to receive the e-mails. It has nothing to do with blanking them, though. (If you leave outlook out of it, only webmail/telnet and send yourself mail, you'll see they still get blanked).

Try re-creating the e-mail account and see if the problem persists.
Redah
4PSA's SpamGuardian application now has a feature that drops 'broken' e-mails. Just in case you're interested icon_smile.gif
Gravity
I have recreated the email accounts and the problem still continues to persist. I also asked a few people to shut down their Norton AV and Internet Security (which of course they were VERY unhappy and reluctant about doing), and I was told that was not the problem.
However I would like to check and verify this for myself as many of the people that call, leave me baffled as to how they figured out to turn their computer on in the first place.

Redah, could you please be more specific on how to duplicate this error.

Ps. I am still puzzled as to why I have never received one of these messages and had it happen my own email accounts (and I do run Norton IS and AV).
Redah
The way the error occured to me was enabling spam-parsing in PSA, and then removing the spamassassin rpm packages.

PSA tried to parse stuff through something that wasn't there, and all the e-mails got blanked.
Gravity
I think you have misunderstood.
Not ALL messages are being blanked, only a very select few. All regular email is going to all of these accounts with no problem, except for when one of these messages comes along and locks up that account. Even when one of these messages is in the account it still receives email fine, the user just can not access (download) their email until the problem message is zapped from the server.
Gravity
Does anyone have some kind of fix for this? I have tried everything and it is absolutely killing us.
Seibertron
QUOTE
Originally posted by Gravity
Does anyone have some kind of fix for this? I have tried everything and it is absolutely killing us.


I am also having this exact problem and I will attest to the fact that it has NOTHING to do with Outlook or NAV. The emails we are receiving that the guys are talking about above are blank emails with a non-breaking space

CODE
 


as the sender, which Outlook crashes on (meaning it won't download the emails from the server). So, like everyone mentioned above, we have to go into our webmail and manually delete these messages. It makes checking email an extreme annoyance.

I have no idea how to prevent this but now that I have finally found this thread I think it would be very useful if we could all compare further notes. Gravity, might you have an instant messenger or something that we might be able to compare some notes? If not, we can keep plugging away at this problem here.

FYI - I have Plesk 6 and Spamassassin.
Seibertron
I just sent this message to EV1's staff. Hopefully someone from there can help us figure out the problem. Let's cross our fingers.

QUOTE
Status: Open  6/10/04 - 11:10:58 PM  
Resolved: No  
Category: Email  
Problem Description: 6/10/04 11:10:58 PM
There are a group of us who use Plesk that are having problems with our email accounts. It seems that we are all receiving messages with a non-breaking space ( ) as the sender.

I originally posted a message about this back on Feb 24th but the response I received was of little help to me since I am using QMail / Spamassassin. I have had this problem since before I installed Spamassassin so it is a QMail / Plesk problem. This problem has plagued my server since last June when I originally got this server but the problem didn't happen as frequently as it does now.

http://forum.ev1servers.net/showthread.php...&threadid=41952

Then I decided to do some further investigation and stumbled into the same problem that other users also experiencing:

http://forum.ev1servers.net/showthread.php...&threadid=45564

Can someone from Ev1's staff please help us figure this out? It is really annoying to have to check our email through webmail first before being able to download through our email clients such as Outlook.

The second URL explains our situation(s) in greater detail. Thank you for your help.

Sincerely,
Ryan
Seibertron
And the non-encouraging email from our friends at EV1Servers.net.

QUOTE
The Trouble Ticket you entered into the Members Section of EV1Servers.net
has been modified.  The following notes have been made to your ticket.
------------------------
Dear Customer,

I have created two test accounts for domains phpfast.com & seibertron.com
with following details:

test@phpfast.com : qazplm
test@seibertron.com : qazplm1

Since your mail relay is closed instead enabled with authentication, I
could test emails among the domains hosted on the server.

I have send /received the test mail using horde and couldn't reproduce the
error. Please confirm the mails in horde.

Thank you
Ev1Servers Support.
------------------------

You may log into the Members Section and view the Status of the Ticket.

Thank you for Choosing EV1Servers.net
support@ev1servers.net



Any suggestions with what I can tell them other than my message below?

QUOTE
It is a random problem and does not happen all of the time. I usually only receive 2 or 3 of these non-breaking space emails per day. It's not an error you will be able to reproduce, I don't know what the pattern is.

Please do not close this trouble ticket until this problem has been resolved. This is most likely not a problem that is going to be resolved right off the bat, but there is a pattern here. Thank you.  
Seibertron
And their latest message which doesn't help us at all ...

QUOTE
Dear Customer,

It appears that this is the work of a spammer.  Though most of the messages in this box appear to be spam, there appears to be one spammer that does not know how to form his email.  Careful examination of the header shows that the header is incorrectly specified, causing the header to be off.

from this message (incorrectly formattted):
From: mrcylcykwib@aol.com (Barbra )

from a normail message (correctly formatted):
From: "Viola Leon"

I don't think this has anything to do with your mail server.  The regularity of this has to do with a spammer repeatedly sending mails who through negligence or sly misdirection, is misformatting his email to appear this way.

Hope this helps,

EV1Servers Support Team


How would I prevent this from happening? I can't control what kind of crap these frikking spammers send. What a load of @#!@#!@#!@#!.
Gravity
I have the rpm of spamassassin installed, however it is not enabled. Plus none of our keys support spamassassin.

There is almost no options, and what I really can’t believe is only a few people are having this problem. However this IS happening on almost every plesk system we have (the only ones it is not happening to are a few we have dedicated to some busy sites).

If this is a form of spam we really have no way to block it as sibertron stated.

Again if anyone has any information it is GREATLY appreciated. We have been plagued with this error for much too long.
Seibertron
QUOTE
Originally posted by Gravity
I have the rpm of spamassassin installed, however it is not enabled. Plus none of our keys support spamassassin.

There is almost no options, and what I really can’t believe is only a few people are having this problem. However this IS happening on almost every plesk system we have (the only ones it is not happening to are a few we have dedicated to some busy sites).

If this is a form of spam we really have no way to block it as sibertron stated.

Again if anyone has any information it is GREATLY appreciated. We have been plagued with this error for much too long.


Are you guys contacting EV1? Please submit trouble tickets ... They are saying that there is nothing that can be done.
Seibertron
Their latest response ...

QUOTE
6/11/04 2:32:22 PM
WebTech
Dear Customer,

This is not a resolvable issue in the way you want it to be. This problem is created when the sending user does not format his email address properly and the header is misinterpreted by your email client. You will notice that different email clients may interpret this differently. For instance outlook does not put nbsp; in the FROM address, but instead, a blank space. This has nothing to do with your server. It is not resolvable, as the problem is with the sender. We have no control over how the sender formats the message sent to you. The fact that you started to see this symptom occur with a new server is purely coincidental. As I diagnose, all recipients of this email will have the same problem, as the sender has not formatted the message properly. The good part about this is that any legitimate mail server will format mail properly. This is a product of a poorly written bulk email software package. Thus, you can disregard any such messages as spam. I am closing this ticket because this is not solvable. We do appreciate your business, and apologize for any inconvenience this may cause you.

Regards,

EV1Servers Support Team


And my response to them about this, after they closed yet another trouble ticket of mine.

QUOTE
Status: Open  6/15/04 - 8:44:37 AM  
Resolved: No  
Category: Email  
Problem Description: 6/15/04 8:44:37 AM
The answer of "this problem can't be solved" is unacceptable. If I need to speak to a manager to get this issue resolved, I will. Please refer to my previous trouble ticket to find out what is my problem.

Don't you think it is just a bit too much of a coincidence that is only EV1 clients with Plesk servers that are having this problem? If the problem truly is what you say it is, why aren't your customers that have non-Plesk machines having this problem?  

Like I said before, it wasn't until I moved onto a Plesk machine last June that I started having this problem. There has to be a way to block these messages from my server.  
roguemind
Ev1 is 100% correct, this is issue cant be fixed by them because its a plesk problem. To make things worse it only seams to effect redhat/plesk servers, my suse/plesk boxes dont have this problem.
Seibertron
QUOTE
Originally posted by roguemind
Ev1 is 100% correct, this is issue cant be fixed by them because its a plesk problem. To make things worse it only seams to effect redhat/plesk servers, my suse/plesk boxes dont have this problem.


Then they still need to resolve it because it is a product they are providing to paying customers. Which brings me to my next statement ...

EV1 just sent me a message stating that they send this problem to Plesk. This is the kind of approach to this problem for which I have been hoping. Keep your fingers crossed everyone!
roguemind
Grab a book as plesk has know about this issue for some time now with no fix in sight. icon_sad.gif
Gravity
Guys, don't hold your breath but I might have stumbled upon a fix just out of dumb luck.
I was running top the other day and I seen spamd pop into the process list, I figured that was funny so I looked into it further.
Now I don't know about you guys, but I would like to confirm this with others having this problem. When we installed plesk we were kind of hasty in the fact that we just went ahead and “rpm –Uhv *” everything including the ops and third party directories.
Now our thinking on this was simply upgradeability. If we needed any of these extra features in the future all we needed to do was update the plesk key and we would be able to enable these services.

Now with that said on all of our systems we have a basic plesk key that does not support Spam Assassin. To my surprise when spam assassin was installed it ads itself to startup, also another surprise and I can’t believe that I overlooked this on all of our plesk servers, if I go into services management I can enable Spam Assassin! In fact I was looking more to the fact to disable it because it is running.

So far so good, just wanted to let others know about this and see if it helps them out. My streak could simply be just pure luck that I have not had any “new” emails of this sort come to the plesk servers. I can of course easily duplicate the problem if I just drop a file into my maildir but I think it was spam assassin that was blanking these messages somehow.

Anyways guys keep me in the loop and give me some feedback, this could just be some small flaw I discovered and may not fix the problem at all.
Seibertron
I discovered that if I disabled Norton Anti-Virus's scan email feature when downloading emails it would download all of the messages in Outlook. While this is NOT ideal, I still have Norton running in the background for everyday operations, just not scanning email. I don't use the preview feature in Outlook and I send all emails with attachments to a SPAM folder so I should be good to go.

Man, what has become of email???
Seibertron
Well guys ... I hate to say it ... but I solved this problem by turning off Norton's scan of incoming emails. No problems now ...
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.
Invision Power Board © 2001-2009 Invision Power Services, Inc.