concurrent connections limit in avast

[Maxx_original]

Tech: it's a question for lukor, i think... and about the Commodo experiments - i meant the stopping of its service (it should unload all related drivers until next service start hopefully)...

[Lisandro]

Tech: it's a question for lukor, i think... and about the Commodo experiments - i meant the stopping of its service (it should unload all related drivers until next service start hopefully)...

I can't stop it's service. It's not allowed. Maybe a security point...
Disabling the firewall, I get:

Code: [Select]

Conta: 'xxxx@gmail.com', Servidor: '127.0.0.1', Protocolo: POP3, Resposta do servidor: '-ERR concurrent connections limit in avast exceeded(pass:50, processes:?PID4[50]), there is a collision with another program', Porta: 11110, Segura (SSL): Não, Erro do servidor: 0x800CCC90, Nº do erro: 0x800CCC90

[Maxx_original]

Conta: 'xxxx@gmail.com', Servidor: '127.0.0.1', Protocolo: POP3

something is wrong with your settings, i guess... localhost isn't a POP3 server of gmail

[Lisandro]

Conta: 'xxxx@gmail.com', Servidor: '127.0.0.1', Protocolo: POP3

something is wrong with your settings, i guess... localhost isn't a POP3 server of gmail

Hey, the account name was edited. The correct is on my Windows Mail.
To use GMail and avast, due to an avast Internet Mail provider limitation on scanning SSL connections (which does not occur with Outlook provider), I need to use Stunnel/OpenSSL with localhost.

[Maxx_original]

ooh, i can see it now ... so the problem is maybe caused by the collision between Stunnel and OSS (other security software)... let's imagine a situation: STunnel opens a port on localhost for redirected SMTP/POP3 traffic... OSS notifies it and sets own hooks etc on it... Stunnel then tries to close the port, but it fails because of the port usage by OSS... within next attempt to connect somewhere Stunnel opens new port, cause the last one used wasn't closed properly... and this happens until avast detects too many ports open.. what do you think about it?

[Lisandro]

ooh, i can see it now ... so the problem is maybe caused by the collision between Stunnel and OSS (other security software)... let's imagine a situation: STunnel opens a port on localhost for redirected SMTP/POP3 traffic... OSS notifies it and sets own hooks etc on it... Stunnel then tries to close the port, but it fails because of the port usage by OSS... within next attempt to connect somewhere Stunnel opens new port, cause the last one used wasn't closed properly... and this happens until avast detects too many ports open.. what do you think about it?

Perfect, just that in my case, OSS means: avast or Comodo.

[alanrf]

Maxx,

Tech's set up is very simple ...

Email client  make a POP call using localhost port 11110 <---> Stunnel listening @ 11110 <---> GMail @ port 995 (SSL)

avast is told in the IM provider to intercept localhost port 11110 so that the mail may be scanned.

Common setup used by many here.

Tech,

Just as test how about leaving the IM provider running but remove 11110 from the avast redirected ports?

If there is no problem with receiving the mail with port 11110 removed from redirection and there is with it added to redirection then I think the avast team will have some more explaining to do.

[Lisandro]

Maxx, Tech's set up is very simple ... Email client  make a POP call using localhost port 11110 <---> Stunnel listening @ 11110 <---> GMail @ port 995 (SSL) avast is told in the IM provider to intercept localhost port 11110 so that the mail may be scanned. Common setup used by many here.

Thanks Alanrf for putting it in simple words... I wouldn't be able to make it better.

Tech, Just as test how about leaving the IM provider running but remove 11110 from the avast redirected ports?

Wow... This is very *new* for me... I'm not following. I'll try when I turn on my Vista.

[Lisandro]

Testing:

1. Disabling Comodo service, removing startup items (and so, receiving a warning that the firewall is not active for Windows Security Center), Windows Mail get the same error.

2. Disabling IM provider, with Comodo disabled also, same error.

Lukas could be my hero if he could help me...

[Lisandro]

Uninstalling Comodo does not help...  :'(
I've restored my system to a secure point.

[Maxx_original]

Tech: i'll try to ask someone with Vista to replicate your problem... you can confirm (i guess), that it's hard to solve problems which we can't "touch"..

[Lisandro]

Tech: i'll try to ask someone with Vista to replicate your problem... you can confirm (i guess), that it's hard to solve problems which we can't "touch"..

Right now, I'm empty... maybe logging Internet Mail provider... I'll do that until Lukas or Vojtech could help me.

[Lisandro]

This is my [MailScanner] section of avast4.ini file. I've added stunnel.exe to the exclusion list of scanned processes but it does not help.

PopRedirectPort=110,11110,120
SmtpRedirectPort=25,11025
ImapRedirectPort=143
NntpRedirectPort=119
IgnoreAddress=
IgnoreLocalhost=0
AutoRedirect=1
StartPop=1
StartSmtp=1
StartImap=1
StartNntp=1
ShowTrayIcon=1
DefaultPopServer=pop.gmail.com
DefaultSmtpServer=smtp.gmail.com
DefaultImapServer=
DefaultNntpServer=
UseDefaultSmtp=0
ShowTrayIcon=0
Log=20
MaxConnections=50
PassThrough=0
Trust=127.0.0.1
UseAlternateRtfSyncing=1
StartSmtp=1
StartPop=1
StartImap=1
StartNntp=1
AutoSetProtection=0
TranslateAddress=0
OptinProcess=
IgnoreProcess=mailwasher.exe,ashChest.exe,spamihilator.exe,javaw.exe,utorrent.exe,magic.exe,stunnel.exe
SendInBlockingMode=1

Same error:

Code: [Select]

Conta: 'xxxx@gmail.com', Servidor: '127.0.0.1', Protocolo: POP3, Resposta do servidor: '-ERR concurrent connections limit in avast exceeded(pass:50, processes:?PID4[50]), there is a collision with another program', Porta: 11110, Segura (SSL): Não, Erro do servidor: 0x800CCC90, Nº do erro: 0x800CCC90

[Lisandro]

The log is enormous...

12/09/07 10:29:20 000009BC:   POP accept connection from: 127.0.0.1
12/09/07 10:29:21 000009BC:   Connection handler: 00001B54 (584)
12/09/07 10:29:23 00001B54:   Ignored PIDs: 4088 4012
12/09/07 10:29:23 00001B54:   Ignored Addresses: 72.3.135.203:80 193.243.128.78:80 193.243.128.76:80 62.132.1.234:80 204.58.27.60:80 204.58.27.58:80 204.58.27.57:80 204.58.27.51:80 204.58.27.50:80 204.58.27.49:80 204.58.27.43:80 204.58.27.42:80 204.58.27.41:80 204.58.27.35:80 204.58.27.34:80 204.58.27.33:80 198.200.173.74:80 198.200.173.139:80 127.0.0.1:80 75.126.149.157:119 70.86.176.98:119 212.26.219.158:119
12/09/07 10:29:23 00001B54:   Ignored Processes: stunnel.exe magic.exe javaw.exe spamihilator.ex ashChest.exe mailwasher.exe avgemc.exe forx.exe FXMadeEasy.exe aoltpspd.exe waol.exe tor.exe wcescomm.exe utorrent.exe ypager.exe V3P3AT.EXE bitcomet.exe mpftray.exe ABC.EXE CZDCPlusPlus.ex CRAXY.EXE NETMONSV.EXE SYMPROXYSVC.EXE NAVAPW32.EXE WEBPROXY.EXE EMULE.EXE TMPROXY.EXE isafe.exe SMPROXY.EXE ccLgView.exe ccSetMgr.exe ccPwdSvc.exe ccApp.exe ccProxy.exe ccPxySvc.exe ccEvtMgr.exe winroute.exe avast.setup
12/09/07 10:29:23 00001B54:   --POP command REDIRECT 127.0.0.1:11110 4
12/09/07 10:29:23 00001B54:   OpenProcess error 5
12/09/07 10:29:23 00001B54:   RtlQueryProcessDebugInformation error -1073741790
12/09/07 10:29:23 00001B54:   Connected to POP server 127.0.0.1 11110 (652)

Then it repeats for...

12/09/07 10:29:23 000009BC:   Connection handler: 0000097C (592)
12/09/07 10:29:23 000009BC:   Connection handler: 000019B8 (616)
12/09/07 10:29:23 000009BC:   Connection handler: 00001FF0 (596)

and so on... logs change to a structure like this:

12/09/07 10:29:27 00000E6C:   <-POP -ERR concurrent connections limit in avast exceeded(pass:0, processes:?PID4[50])
12/09/07 10:29:27 00000E6C:   sent 82 (1568)
12/09/07 10:29:27 00000E6C:   connection closed 0 (1580)
12/09/07 10:29:27 00000E6C:   --POP Finishing connection handler
12/09/07 10:29:27 00001374:   received 82 (1560)

and repeat for thousand lines...

12/09/07 10:29:27 00001374:   <-POP -ERR concurrent connections limit in avast exceeded(pass:1, processes:?PID4[50])
12/09/07 10:29:27 00001374:   sent 82 (1548)
12/09/07 10:29:27 00001374:   connection closed 0 (1560)
12/09/07 10:29:27 00001374:   --POP Finishing connection handler
12/09/07 10:29:27 000018E4:   received 82 (1540)

changing just the port numbers...

I can send the full log by email if anybody from Alwil needs them.

[Lisandro]

Any help?  :'( :'(