Connect. Communicate. Collaborate. Securely.

Home » Kerio User Forums » Kerio Connect » Where increase simultaneous IMAP Connections?
  •  
brianz

Messages: 2
Karma: 0
Send a private message to this user
Where can I increase the number of simultaneous IMAP Connections?
I?m geting the Error Message: [02/Mar/2006 17:05:03] IMAP connection from IP address xxxxxx rejected: too many simultaneous connections (101 connections, limit 100)


Mac OSX 10.4.5 - Kerio MailServer 6.1.3
  •  
j.turley

Messages: 136
Karma: 1
Send a private message to this user
Admin console -> Services -> IMAP -> Access

Hope that helps!
  •  
Kerio_ktrumbull

Messages: 597
Karma: 2
Send a private message to this user
The solution that j.turley mentioned is not correct. You are hitting the per-ip limit. The solution j.turley mentioned is the server-wide limit.

To change the per-ip limit, stop the Kerio MailServer, open the mailserver.cfg and find the following section:
<table name="service-imap">
  <variable name="Port">143</variable>
  <variable name="AutoStart">1</variable>
  <variable name="Acl"></variable>
  <variable name="MaxConnections">1000</variable>
  <variable name="RecvTimeout">120</variable>
  <variable name="SendTimeout">120</variable>
  <variable name="MaxConnectionsIP">100</variable>
  <variable name="NoLimitAcl"></variable>
</table>

Change the "MaxConnectionsIP" to something higher than 100. I assume you are on a DMZ or other network configuration where all traffic to your KMS comes from a single IP address. If so then you have to increase the per-ip limit as mentioned.

Kevin Trumbull
Kerio Technical Support Team Leader
http://support.kerio.com
  •  
brianz

Messages: 2
Karma: 0
Send a private message to this user
sorry - but where can I find the mailserver.cfg? Or do I have to "go terminal"?
  •  
chrishenley

Messages: 1
Karma: 0
Send a private message to this user
in Linux /opt/kerio/mailserver/
  •  
Kerio_ktrumbull

Messages: 597
Karma: 2
Send a private message to this user
Wow, talk about resurrecting a thread Smile

The default locations:

Windows: C:\Program Files\Kerio\MailServer\mailserver.cfg
Mac OS X: /usr/local/kerio/mailserver/mailserver.cfg
Linux: /opt/kerio/mailserver/mailserver.cfg

Kevin Trumbull
Kerio Technical Support Team Leader
http://support.kerio.com
  •  
maa1

Messages: 144
Karma: -27
Send a private message to this user
Kerio_ktrumbull
To change the per-ip limit, stop the Kerio MailServer, open the mailserver.cfg and find the following section

Why this settings ("MaxConnectionsIP") is not present in GUI??
  •  
MarkTTU

Messages: 20
Karma: -1
Send a private message to this user
maa1 wrote on Tue, 20 November 2007 06:25
Kerio_ktrumbull
Why this settings ("MaxConnectionsIP") is not present in GUI??

An excellent question! Mad
  •  
Lisa Lyons (Kerio)

Messages: 176
Karma: 8
Send a private message to this user
Hi, Mark

Firstly, please bear in mind that this original thread is from 2007, so things MAY change during such a massive amount of time.

Sadly, this is one item that has not.

However, the reason for this is that this indicates an issue either with an incorrectly configured firewall or problem on the network. Most individual clients should never reach 100 connections, which is why this is not a GUI option.

I see only the following scenarios as reasons why an individual user would reach 100 concurrent connections.

1: A listserv server running in the background on your network. However, this shouldn't really reach 100 connections, as most listservs will be able to handle the load without creating a single connection for every email.

2: A firewall or switch incorrectly configured, masking the client's IP Addresss, which makes it very difficult to configure security settings on the server.

For those rare cases where this does occur (and we have only seen a handful in the last five years!) it has usually been a misconfigured network causing an obfuscation of the users' IP and therefore causing the issue you see.

If you need to work around this issue, you may use the fix above, but it is not going to be entered into the GUI, as it is a setting that in most cases will never need to be used.

[Updated on: Tue, 16 July 2013 16:26]


Kerio Technical Support
Log Support Incidents here: http://www.kerio.com/support
Also, please use our KB: http://kb.kerio.com
  •  
MarkTTU

Messages: 20
Karma: -1
Send a private message to this user
Hi Lisa,

I appreciate the comment and thought. In my case I have one mail server that hosts multiple domains for multiple customers (mostly small businesses), the largest of them has about 30 mailboxes. It was that largest customer who had issues and frankly they make perfect sense. Single IP from a single office with around 30 people with a computer, iPhone, and many with an iPad as well all with IMAP connections that are kept open all the time. Pretty small group can run into 100+ IMAP connections pretty quickly.

I'm taking the time to explain this situation as I believe your being a bit short sighted and that this will become more of an issue in the future. Also, I wanted to point out there is at least one way this can come up when nothing is misconfigured and people are using things exactly as intended.

I have worked around the issue using the above fix so its no longer an issue for me, but this seems like something that is maybe rare, but not so rare as to not be in the GUI. My bet is that my situation is more common than most realize and that most simply never put the error message together with client devices apparently randomly disconnecting. I bet the client devices or network get blamed and the problem never gets fixed in most cases.
  •  
Lisa Lyons (Kerio)

Messages: 176
Karma: 8
Send a private message to this user
Hi, Mark

Thanks for your frank comments. Our developers are aware of the situation as you see it.

It's comments like this that help when evaluating changes, so please don't hold back. Smile

Kerio Technical Support
Log Support Incidents here: http://www.kerio.com/support
Also, please use our KB: http://kb.kerio.com
  •  
macinfosys

Messages: 100
Karma: 1
Send a private message to this user
I had to make the change TODAY since we started running into this situation. Our client hosts 11 different domains, they have approx 18 users with each user using iPad's, iPhone's, Laptop and a desktop almost always at the same time. To top it all off, most users actively have anywhere from 3-11 different email accounts active and polling the server on all of the devices listed above at the same time.

I also think this situation will become something of a norm where more users will have multiple devices polling for mail actively creating an issue with a limit of 100 being no longer a high number.
  •  
Machete

Messages: 262
Karma: 5
Send a private message to this user
In my opinion, this is probably going to continue to grow as a problem for hosted providers as Kerio continues to encourage the use of IMAP over ActiveSync...based on past comments from Kerio suggesting using open source platforms and now charging extra for active sync...
  •  
blswjames

Messages: 77
Karma: 0
Send a private message to this user
Regardless of how old this thread is, I thought I'd toss this in since it's relevant.

We started getting this message a LOT after deploying Kerio Operator. Operator appears to open an IMAP connection for every user when you have the voicemail integration feature enabled.

For us, it was the global IMAP setting in the GUI we changed (not the per IP in the cfg file).
  •  
Agador

Messages: 40
Karma: 3
Send a private message to this user
We are having this IMAP > 100 IPs issue due to remote sites needing to access multiple accounts.

10 members behind a NAT device with one WAN IP. Those members have multiple devices, (phone, ipad, desktop and laptop) and are using multiple accounts (3 to 20 different accounts). This problem of having to edit the mailserver configuration manually is NOT USER friendly and needs to be added to the GUI.

Configuring a WAN IP for each USER is neither practical nor even recommended "best practice".

Please add this option to the GUI.

Jim
Previous Topic: Integration link
Next Topic: How to creat kerio connect logserver
Goto Forum:
  


Disclaimer:
Kerio discussion forums are intended for open communication between forum members and may contain information and material posted by members which may be useful in learning about Kerio products. The discussion forums are not intended to provide technical support for any specific product. Any information implied or expressed in the discussion forums is that of the posting member. Kerio is in no way responsible for the information posted in the forums, or its accuracy. Kerio employees may participate in the discussions, but their postings do not represent an offical position of the company on any issues raised or discussed. Kerio reserves the right to monitor and maintain the forums to promote free and accurate exchange of information.

Current Time: Sun Mar 26 22:50:33 CEST 2017

Total time taken to generate the page: 0.01158 seconds
.:: Contact :: Home ::.
Powered by: FUDforum 3.0.4.