Web Site
Design Samples:


25 Hart Place, Woburn
Massachusetts 01801-2355

E-mail Us
Phone
781-938-3866
Fax
781-932-5996



WEB SOLUTIONS
- Web Mail

Packages
Business Package
Maintenance Programs

We are now providing multiple webmail clients allowing you to choose
the one that best suits your needs for accessing email with a web browser.
IMP     Full Featured Standard Client
SquirrelMail     A Lighter Weight Client


 

 

System News

  Feb 11, 2006 Changes in forwarding

Today and over the next few weeks we will be introducing some changes that will improve the deliverability of forwarded mail. There are two problems that these changes will solve or at least minimize.

We are seeing more systems that are rejecting mail that violates the sender's published SPF policy. Mail from a domain with published a SPF policy that we forward on behalf of our customer may violate the sender's SPF policy because the sender has no way to know that the recipient is forwarding mail to another system. The recipient that is forwarding the mail has no way to know in advance that the sender does not wish mail from the their domain to be forwarded.

In most all cases the rejected mail is spam with a forged sender address but we have seen a small percentage of legitimate mail rejected. It is this small percentage that we would like to see accepted by the system that the mail is forwarded to.

The SPF forwarding problem is well known and the debate about wether SPF breaks forwarding or forwarding is inherently broken still rages on.

To ensure deliveriablity of mail that is forwarded, SRS will be enabled for all forwarded mail. Currently SRS is enabled for mail forwarded to AOL and a few dozen other systems.

Another problem is that more and more systems are rejecting spam that is forwarded to them. When a system that we are forwarding mail to rejects a message, a Delivery Status Notification must be delivered to the sender. If the rejected message is truly spam, and it almost always is, the sender is most likely forged and the DSN is sent to the innocent forgery victim adding to the bad and growing backscatter problem.

Another issue with forwarding spam is that many systems pay attention to what IP addresses are sending them spam in the same way that this system does. The recipient system does not know or care that the spam is forwarded on behalf of a customer. To the receiving system the message is just spam. Too much spam from an IP address and the IP address is blocked. Blame the spammers, not the mail system operators.

To reduce the backscatter that this system generates and to reduce the possibility of our forwarding servers being blocked and preventing mail from being forwarded, messages with a spam score of 6.0 and higher will no longer be forwarded. This change has been in affect for mail to AOL and its subsidiaries since May 2005 with no customer complaints.

Starting today messages scoring 6.0 and over will not be forwarded to adelphia.net, yausi.com, yahoo.com, hotmail.com and cox.net. SRS envelope sender re-writing is also being applied to mail forwarded to those domains.

Along with this change is a real-time report showing forwarded messages that have been discarded.

To: somebody@aol.com
recipient@domain-hosted-here
1 18.2 chancei@ambienttech.com
1 28.5 charlenehipes@asamoacpa.com
1 20.3 daiangelag@0451.com
1 15.5 fpeters@globalfriends.us
1 12.5 gar@directwest.com
1 18.2 gunnersoe@rednet.com
1 12.5 kph@gfj.bdstnetd.com
1 23.9 meeny.beatrix9hm@gmail.com

Select Account -> Real-Time Reports -> Forwarded Discards to view the reports for your account.

Nov 11, 2005 Fastmail box poll errors

The errors customers are seeing for box polls configured to fetch mail from Fastmail are due to a server failure at Fastmail and not due to problems with this system.
Oct 25, 2005 Office telephone outage

Update Oct 31, 2005: Telephone service was restored this past weekend.

We had dialtone and working lines yesterday but this morning nothing. Problem is most likely due to batteries failing in one of the BellSouth fiber huts. We have no estimate to when telephone service will be restored.

Oct 24, 2005 Desktop client access

Late this afternoon a problem with the IMAP and POP multiplexors caused some connections to timeout. Webmail and SMTP services were not affected. The exact time and duration of this problem is lost in the blur of the day resulting from dealing with hurricane Wilma.

Oct 15, 2005 Real-time reports for rejects, virus discards, and deliveries

Real-time reporting of messages rejected by the MX servers, messages infected with viruses that were discarded, and messages delivered to mailboxes was added to the Account Manager last week in an expanded beta test. Real-time reporting is available for hosted email accounts and for will be for MX relay customers later this month.

The last known bug was fixed today and with that fix the delivery reports now include messages accepted for forwarding to external accounts as well as messages that will be delivered to mailboxes. Fixing this bug required deleting all delivery data prior to 1400 EDT, 1800 UTC, today.

Because of the huge number of unknown address rejections due to backscatter from addresses forged by spammers and viruses, the reject reports include only a count of those messages.
Sep 22, 2005 Another Power Failure

Update: All services were back online by 15:55 EDT (19:55 UTC). The outage was caused when the building electricians accidently tripped the main panel breaker while removing the panel cover for further investigation into why the breaker failed yesterday.

The datacenter has contracted with an engineering firm to determine where the weak points are in their power distribution systems and what they can do to improve the power system.

Staring tomorrow evening we will begin moving servers and routers that provide load sharing and redundant routing into another cage. This work will take several days to complete and service outages are expected to be very brief. This work will be done between 20:00 and 00:00 EDT (00:00 - 04:00) UTC tomorrow evening and between 16:00 and 20:00 (20:00 - 00:00 UTC) Saturday and Sunday with the same schedule the following weekend.

Update on the power failure during hurricane Katrina. Lightning struck one of the generators supplying power to the first floor taking out the fuel pump that feeds fuel from the large ground level storage tanks to the generator day tank. The generator continued to operate untill its day tank was empty. To help prevent failures of this nature in the future, additional monitoring and pumps are being installed.

15:10 EDT (19:10 UTC) Power has been restored and services will be back online shortly.
Sep 21, 2005 Power Failure

Update: Power was restored around 12:10 EST (1610 UTC) and IMAP access via the webmail clients was restored shortly after that. Full access to the IMAP and POP servers followed and finally SMTP access was restored. We are still working to bring up the backup raid systems.

The cause of the failure was an overheated 208V 3-phase circuit breaker in the distribution panel that supplies to our racks. The breaker failure was complete and it had to be replaced.

Our second cage in the same datacenter is powered from a different 208V distribution panel. The redundant servers, routing, and switching, will be moved into that cage starting later this week.

We have lost all power to one of our cages at the datacenter. We will be moving enough servers to our second cage to bring services back online.
Sep 9, 2005 Scheduled Maintenance Saturday, Sep 10

Between 0300 and 0400 EDT, 0700 and 0800 UTC, our colocation provider will be upgrading their core routers to Cisco layer 3 switching technology. There will be a few short periods during this time when some customers may not be able to reach our servers.
Aug 26, 2005 Power Outage

The datacenter where our racks are located lost power to the first floor around 2230 EST (0330 UTC) taking out most carriers in the center. Power was restored to the first floor around 2300 EST (0400 UTC).

An update will be posted when we know more about what caused the power outage and what steps will be taken to prevent future occurances.
Aug 17, 2005 Scheduled Maintenance Thursday, Aug 18

Between 0100 and 0130 EDT, 0500 and 0530 UTC, our colocation provider will be testing failover to backup circuits. There will be a few periods of routing instability during this period. We do apologize for the inconvience this will cause for some customers.
Aug 6, 2005 Scheduled Maintenance Sunday, Aug 7

Between 0100 and 0200 EDT, 0500 and 0600 UTC, our colocation provider will be upgrading line cards in one of the border routers. We do apologize for the inconvience this will cause for some customers.
Jul 21, 2005 Scheduled Maintenance Friday, July 22

Between 0030 and 0045 EDT, 0430 and 0445 UTC, our colocation provider will be upgrading line cards in one of the border routers. There will be two periods of brief routing instability while routing is moved from and back to the router being upgraded.
Jul 2, 2005 Scheduled Maintenance Sunday, July 3

Between 1200 and 1230 EDT, 1600 and 1630 UTC, we will be updating the software on the backend IMAP servers in preparation for supporting near real-time replication of IMAP events to the backup IMAP servers.

This update requires restarting the IMAP servers. IMAP and POP3 access will not be available during the update. This update is expected take between 5 and 15 minutes.
May 21, 2005 Effective May 21, 2005, mail that is forwarded to AOL accounts that scores as spam will be silently discarded. This change is necessary to insure that legitimate non-spam mail can continue to be forwarded to AOL accounts by our customers.

Before you push that AOL 'Report Spam' button, please check the message headers to see if the spam was sent directly to your AOL account or forwarded from your domain. Some threshold of spam reports from our IP addresses will result in AOL blocking all mail from those IP addresses.

Apr 29, 2005 Update 23:10 UTC: 50% packet loss persisted for about 15 minutes due to a flapping router interface. There may be a few brief periods of packet loss during the next hour.

22:30 UTC: We are seeing about 50% packet loss at an upstream router. We are working to resolve this issue.

Mar 17, 2005 The routing issue caused 50% to 80% packet loss for about 20 minutes for some customers. One of the routers causing this has been taken offline and its backup has taken over active routing duty. The problem router will be restarted later tonight EST.

We are currently experiencing an internal routing problem at the data center. We hope to have this issue resolved ASAP.

Feb 23, 2005 We are testing new versions of the Squirrelmail and IMP webmail clients at our beta test site. Both clients have many new features and configuration options. Please try these new clients and contact support if you have any questions or comments about these new clients.

Feb 15, 2005 Update: We are accelerating the process of moving customer mailboxes off of this machine and all mailboxes will be moved tonight.

At 1410 EST, 1910 UTC, the ill mail store machine paniced. We expect to have it back online by 1430 EST, 1930 EST.

Feb 9, 2005 At 2330 EST yesterday, 0430 UTC today, we experienced another authentication server problem that affected some customers for approximately 20 minutes. We have changed the configuration to switch to backup servers rather quickly which will reduce the impact to customers if this occurs again. This change will also allow us to leave the failed server in that state for further diagnosis.

Jan 28, 2005 At 1037 EST, 1537 UTC, the authentication server for the mail storage servers stopped responding to authentication requests. Unable to determine the reason for failure we restarted the server at 1055 EST, 1555 UTC, and it is now functioning properly. We will continue to investigate the cause of this failure.

Update on the Jan 26, 2005 power outage.

Batteries for the failed UPS system arrived by truck from Tampa and were installed late yesterday afternoon. By 1830 EST, 2330 UTC, we were back on UPS power.

Jan 26, 2005 Power Outage Update: January 27 0330 EST, 0830 UTC

At 1505 EST, 2005 UTC, a UPS in the data center failed and our systems were without power for approximately 20 minutes. The engineers at the data center attempted to bring the UPS back online without success and utility power was switched to the circuits fed by the failed UPS. When power was restored one router failed to boot and its HSRP backup failed to announce our routes contributing to the problem.

All servers suffered some file system damage requiring another 10 to 90 minutes to repair before the servers could be brought online. Approximately 80 minutes after the power failure the incoming MX servers, the outbound SMTP servers, the MX relay servers, and two mail storage servers were back in service.

The last mail storage server was back online just before 1800 EST, 2300 UTC. The web sites were brought up shortly after all mailbox servers were up and functioning. The Account Manager followed shortly after that.

The UPS failure was not an inverter failure as reported earlier. When the Powerware engineers arrived on site diagnostics showed that the UPS was healthy but the batteries were not up to the task. Throughout today the facility was experiencing short but serve utility power fluctuations causing all of the UPS systems to switch in and out of battery operation and the batteries were not being fully recharged when returning to utility power. This frequent discharge and inadequate recharge caused the batteries in this UPS to fail resulting in this outage.

The data center is expediting delivery of new batteries for this UPS and the other UPS systems in the data center. The new batteries may arrive as early as tomorrow afternoon, Friday.

We sincerely regret the inconvience to our customers caused by this unfortunate outage.

09/03/04 Due to the impending arrival of hurricane Frances in South Florida, customer service will not be available by phone or email on 09/03, 09/04, and possibly 09/05 if Frances takes a more Westerly direction.

There is no concern that email services will be impacted by hurricane Frances.

08/28/04 Squirrelmail support for composing a message in HTML format was added earlier this month. HTML compose can be enabled on the 'Options -> Display Preferences' page. The selection is near the bottom of the page. HTML compose will work with recent versions of Netscape, Mozilla, Firefox, and Internet Explorer.

A module has been added to Squirrelmail that can manage IMAP folder access lists. IMAP access lists allow you to share one or more of your mailbox folders with others.

08/26/04 Direct acess to Sive scripts is now permitted by connecting to mail.mxes.net port 2000. Mulberry is the only mail client we know of that can manage Sieve scripts.

07/02/04 There were several periods of routing instability during our data center's scheduled maintenance window this morning. The instability occurred between 0245 and 0350 EDT (0645 and 0750 UTC).

06/05/04 Between 1600 and 2000 EDT (2000 and 2400 UTC) we will be testing fail over of all routers, switches, and server interfaces in our network. During this testing period there will be periods of less than 1 minute where some or all servers will not be reachable.

We apologize in advance for any inconvenience caused by this testing.

06/01/04 An unscheduled outage occurred from 1535 EDT to 1645 EDT (1935 - 2045 UTC). A partial failure of a Ethernet line card interrupted connectivity to our primary providers but the failure mode did not cause the backup router to assume routing duties. The line card has been replaced and the exact nature of this failure is being investigated.

We apologize for the inconvenience caused by this outage.

05/31/04 Per mailbox Bayesian classification has been added to all qualifying accounts. The Bayesian classifier is not enabled by default and it must be trained before it will function. The classifier configuration is located under the 'Manage Mailboxes' menu selection.

05/29/04 We experienced an unscheduled outage from 1515 EDT to 1625 EDT 2015 UTC). This outage was due to an OC-12 line card failure in an upstream switch and intermittent connectivity problems via backup routes.

We apologize for the inconvenience caused by this outage.

05/02/04 Later this month per mailbox trainable Bayesian classification will be available. To accommodate this new capability modifications to the Account Manager have been made that allow an 'Access Policy' to be enabled to provide Allow/Deny lists without having to enable spam scoring on that policy. To reflect this change in functionality, what was a 'Spam Scoring Policy' is now called an 'Access Policy'.

This change does not impact any existing 'Spam Scoring Policies' other than a name change and adding a check box to disable spam scoring if desired. When the classifier is available you can choose to use it by itself or in conjunction with the existing spam scoring system to identify spam.

01/03/04 xbl.spamhaus.org has been added as an additional data source for the Open Relays and Proxies MX restriction. The XBL lists a lot of compromised machines that are currently spewing spam but are not detected as open proxies.

01/01/04 The CAN-SPAM act is now law but some spammers seem not to be aware of that fact.

We wish all of our customers a very happy, prosperous, and spam free 2004!

12/31/03 We have enabled SPF checks that enforce the policy of domain owners that have declared which servers are authorized to send email for their domains. SPF checking is enabled globally. Early next week we will add an Account Manager configuration option to disable SPF checking if you wish to accept email with a forged envelope address.

Like other MX restrictions, an Allow list entry can be used to bypass SPF checks for a sender address, sender domain, IP address, or an IP address range in CIDR notation.

12/21/03 During the first part of January we will be adding support for checking incoming email with SPF, a mechanism that if widely adopted will reduce the ability for spammers to forge envelope sender addresses. If case you haven't noticed, most all spam is sent with a sender address that is in no way connected to the spammer or the product being hyped. Spammers forge domain names in spam runs because using their own domain names would be suicide, the domain is blocked in minutes.

SPF is a mechanism that allows domain owners to publish DNS records that declare which servers are authorized to send email with their domain name in the envelope. Mail servers that support SPF can reject email if it was not sent from an authorized server.

We urge all of our customers that own domain names that we handle email for to publish SPF records. An SPF record is a TXT record that declares our servers as being authorized to send mail for the domain.

      IN     TXT     "v=spf1 include:customer-spf.mxes.net -all"

SPF is still in flux but the record above will not change and it will work for 99% of the customers we handle email for. If a domain owner publishes the record above they have to send email through the our servers and not 'forge' the envelope with their domain name and send email through their ISPs mail servers. Its impossible for a mail server that receives email with your domain in the envelope to determine if this is a 'good forgery' by you or a 'bad forgery' by a spammer.

Customers that send email from multiple servers can use this wizard to help you create an SPF record appropriate for your situation.

SPF is not a cure-all for spam but it will help. It will help protect your domain from being forged in a spam run.

12/14/03 The Squirrelmail webmail client added as a webmail client choice.

08/28/03 Auto responder management has been added to the mailbox management functions available directly from the web mail client. Choose Options -> Filters for direct access to the mailbox management menus.

08/25/03 Recent enhancements to the Account Manager.
    Auto responders.
    Transfer statistics per account and per domain.
    Improved spam scoring policy navigation.

08/24/03 There are many Sobig infected machines that are sending thousands of infected emails to the same recipients. These emails were being discarded based on header pattern matches but thousands of 100KB emails add up. We are now blocking known infected IP addresses at the border routers.

08/22/03 Analysis shows that at 1900 UTC, 1500 EDT, the Sobig-F worm will attempt to download and execute code on the compromised machines. The new code could launch another virus or just become an open proxy for spammers to use as some of the other worms in the Sobig series have done.

To guard against what may come from the infected machines, we are rejecting email from all IP addresses that we know are or were infected with the Sobig-F worm.

08/21/03 Reject reports updated to include rejections for header and body patterns matching the Sobig-F worm.

08/20/03 After wading through thousands of bounce messages and notifications from broken virus scanners to sender addresses forged by the Sobig-F worm, we are rejecting email containing the subject and body signatures used by the worm.

08/19/03 Virus notification disabled.

08/16/03 The Allow/Deny list entries now have an option to use the entry at the MX server when email is received. Matching Allow entries bypass all MX restrictions. Matching Deny entries reject the email.

08/02/03 Indications are that the W32/Mimail-A email worm is spreading. Our Sophos virus scanner is detecting the worm and infected email is discarded. The current variant of this worm always arrives with an admin@yourdomain envelope sender address. To eliminate the noisy virus detected messages, an entry has been added to the virus reject list for admin@ each domain that we handle email for. If you are sending email with an admin@ envelope sender address from outside of this system, contact your account administrator to have the entry for your domain(s) removed.

07/19/03 Greylisting is now available as an MX restriction. Greylisting is very effective at blocking spam from compromised Windows machines.

07/15/03 We are now rejecting email from servers that attempt to masquerade as a server in any domain that our servers handle email for. This restriction will become a user selectable option on a per domain basis.

07/14/03 Real Networks domains removed from the global allow list for spamming honeypot addresses in a Chinese character set no less.

 


 

Tech Support/Frequently Asked Questions

© 2007 All Rights Reserved, 1-Stop Design Shop, Inc. SOMBWA, DBE & WBE Certified