Ernest Ho Diary

Today, I found a lot of following files in my C drive.

C:\sqmdata00.sqm
C:\sqmdata01.sqm
C:\sqmdata02.sqm
C:\sqmdata03.sqm
C:\sqmdata04.sqm
C:\sqmdata05.sqm
C:\sqmdata06.sqm
C:\sqmdata07.sqm
C:\sqmdata08.sqm
C:\sqmdata09.sqm
C:\sqmdata10.sqm
C:\sqmdata11.sqm
C:\sqmdata12.sqm
C:\sqmdata13.sqm
C:\sqmdata14.sqm
C:\sqmdata15.sqm
C:\sqmdata16.sqm
C:\sqmdata17.sqm
C:\sqmdata18.sqm
C:\sqmdata19.sqm
C:\sqmnoopt00.sqm
C:\sqmnoopt01.sqm
C:\sqmnoopt02.sqm
C:\sqmnoopt03.sqm
C:\sqmnoopt04.sqm
C:\sqmnoopt05.sqm
C:\sqmnoopt06.sqm
C:\sqmnoopt07.sqm
C:\sqmnoopt08.sqm
C:\sqmnoopt09.sqm
C:\sqmnoopt10.sqm
C:\sqmnoopt11.sqm
C:\sqmnoopt12.sqm
C:\sqmnoopt13.sqm
C:\sqmnoopt14.sqm
C:\sqmnoopt15.sqm
C:\sqmnoopt16.sqm
C:\sqmnoopt17.sqm
C:\sqmnoopt18.sqm
C:\sqmnoopt19.sqm

So strange!! Finally, I found that is generated when I open a Live messenger with the Flash Game. But I do not really this !!

Postini is well-know email filtering company.

MOUNTAIN VIEW, Calif. - July 9, 2007 – Google Inc. (NASDAQ: GOOG) announced today that it has signed a definitive agreement to acquire Postini, a global leader in on-demand communications security and compliance solutions serving more than 35,000 businesses and 10 million users worldwide. Postini's services -- which include message security, archiving, encryption, and policy enforcement -- can be used to protect a company's email, instant messaging, and other web-based communications. Under the terms of the agreement, Google will acquire Postini for $625 million in cash, subject to working capital and other adjustments, and Postini will become a wholly-owned subsidiary of Google. The agreement is subject to customary closing conditions and is expected to close by the end of the third quarter 2007.

Very strange.

Just picking up a new customer, the company mail server was made by the last IT consulting company. The server is SME Server (previously called e-smith server). Today, one user cannot access his pop3 account using Microsoft Outlook while other users does not have any problem. The most strange happening is that he can access his web mail without problem.

I try to telnet the mail server IP with port 110:

telnet the.mail.server.ip 110
USER username
PASS userpassword

The error comes out as follows:

ERR unable to scan $HOME/Maildir

After searching, all the reasons are the permission problem. I have checked all the permission, they are correct. I even reset the user right on the Maildir. There was no luck at all !!

I checked that the user has a lot of email (over 1.5GB). Luckily, I have some experience on qmail server. I begin to doubt that qmail needs some more memory to handle email. So, I changed the softlimit of the pop3d. The path is

pop3:
/var/qmail/supervise/pop3d/run
or
pop3s:
/var/qmail/supervise/pop3ds/run

After restarting the qmail, the problem fixed !!!!

Generating and Installing an SSL Client Certificate to a Windows Mobile Device (Pocket PC/Smartphone)

To Use a Client Cert from a Exchange OWA server that is not trusted by your Mobile device follow the following directions.

1. Go to the OWA website: ie. https://mail.consoto.com

1. In the lower Right hand corner (IE 6) you will see a lock symbol indicating that the site is SSL secured. Double click on it.
2. In IE 7 you will see the Lock on the Address bar in the upper right hand corner.

You may also get the following prompt

2. Click on View Certificate

3. Click on Details

4. Click on Copy to file

5. Click Next

6. Choose DER encoded binary x.509 (.cer)
7. Click Next

8. Type a file name ie. C:\cllientcert.cer

9. Click Finish

You now have a .cer file located at C:\cllientcert.cer

To install the file on the device

1. Copy the file to a SD card or Copy the file via Activesync to the device.
2. Use the on device file viewer to find the cllientcert.cer
3. double tap the .cer file on the device to install

Advanced issues you might run into when trying to add your own SSL certificates to the device for browsing or Exchange ActiveSync:

Some servers do not send down the entire certificate chain at the beginning of the SSL session. This is a configuration option on the server. Windows Mobile 5.0 devices do not have the ability to dynamically get the intermediate certificates. (big Windows can do this) A symptom of this is that you have added the root certificate for your site, but the browser on the device still isn't recognizing the certificate. To make this scenario work, you need to grab the intermediate certs and add them to the device using the XML method previously discussed.

The browser and the sync client use the same underlying APIs for SSL connections, so if the browser can make a secure connection to your site without prompting that the SSL connection is bad, then SSL is not the problem. It's easiest to use this method to isolate any SSL problems.