PDA

View Full Version : Monitoring if users can log to webmail



ICEWARP_BRAZIL
10-08-2011, 01:52 PM
I wanted to share something Ive always wanted to do and testing v10.4, Im able to.

Monitor if users are able to login to Webclient (was able to achive with WC basic).

Using PRTG monitoring software, I create an HTTP advanced sensor that connects to:

http://mail.domain.com/webmail/?postlike&language=en&to=basic&_c=auth&_a[login]=1&iw_username=flavio%40domain.com&password=123

It does an HTTP GET and checks for word "really" (without quotes).

- Flávio

vuser01
10-28-2011, 09:18 PM
We have PRTG as well, so this is a sensor check testing to see if the IceWarp webmail is accessible to users correct?

BMurtagh
11-09-2011, 11:34 AM
Horribly insecure to pass the username and password values as plain text and not encrypted.


I wanted to share something Ive always wanted to do and testing v10.4, Im able to.

Monitor if users are able to login to Webclient (was able to achive with WC basic).

Using PRTG monitoring software, I create an HTTP advanced sensor that connects to:

http://mail.domain.com/webmail/?postlike&language=en&to=basic&_c=auth&_a[login]=1&iw_username=flavio%40domain.com&password=123

It does an HTTP GET and checks for word "really" (without quotes).

- Flávio

ICEWARP_BRAZIL
11-12-2011, 01:59 PM
Hi,

Yes, that's it. It's an HTTP advanced sensor and works just on 10.4. Not sure if its so unsafe as account cant have per day limit (send out mail) very low, so not a big risk for the monitoring server to reveal that pwd in plain text. Definately worth it to be sure your webmail is logging in fine :) It saved us other day as somehow WEB was stopped but control.exe running :)

From what I tested its working well, any comments are appreciated.

vuser01 there are so other nice things we do with PRTG such as monitor the inbound/outbound mail queue or monitor if we're listed on DNSBLs.

- Flávio