IceWarp Software - intercepting my email? how to eliminate?!

Posted on 2004-09-10
Medium Priority
Last Modified: 2008-03-04
Hi, i recently have been getting a message every time i try to send an email from my private address (using mozilla thunderbird). It tells me:

"you have attempted to establish a connection with "smtp.myaddress.com" however the security certificate presented belongs to IceWarp Software. it is possible, tho unlikely, that someone maybe trying to intercept ur communication with this website"

it then proceeds to tell me to contact my site administrator. i did, and they know nothing of it and told me its not from their side. i've also scanned my comp for viruses, and used spybot and adaware and have found nothing. i don't know exactly how i got this on my email, but i have suspicions that may be from a mass email a friend sent to me. i forwarded it to some other friends (around 7 people), and that was the first time this warning message came up, at the time i clicked yes - to go ahead and send, and i believe i sent one other email from that account after that point, and a day or so later my administrator contacted me to warn me that i'd been spamming people from my account!!!

i have not been using this account since that point, have not found a way to resolve this and get rid of this icewarp certificate, i would highly highly appreciate any suggestions anyone can give me on how to resolve!

thanks in advance!
Question by:MMsabry
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 3
LVL 34

Accepted Solution

PsiCop earned 2000 total points
ID: 12038672
IceWarp is a Certificate Authority (CA), or "trusted 3rd party" certificate issuer (see their website at --> http://www.icewarp.com/). However, because they aren't one of the "big boys" CAs (liek VeriCrooks, Thawte, et. al.), ThunderBird did not intrinsically recognize them as a CA. Consequently, you had to confirm their certificate as acceptable by Thunderbird. Once you did that (assuming you did instruct it to accept it permanently), it was added to Thunderbird's CA listing and Thunderbird won't prompt you again.

I don't think it had anything to do with the alleged spam.

Note I say "alleged". A "feature" of modern SPAM/viruses are that they often forges headers so some other poor slob gets the blame, because everyone knows that computers can't lie, and if the TO: line says it came from bob@somepoorschmuck.com, well, Bob musta sent it, right?

Ask to see this alleged SPAM - and ask to see the full headers. Did it realy originate from your network, or are the headers forged to make it look that way. If your site's administrator can't produce it or can't figger it out, well, then perhaps s/he should consider a career elsewhere. This is Internet E-Mail 101.

Author Comment

ID: 12048495
well... i did accept it as permanent...that message i quoted above actually came to me AFTER i accepted the certificate. but still keeps prompting me each time i send an email! any ideas why?


LVL 34

Expert Comment

ID: 12048648
Either the certificate itself is defective or the server admin did not set it up correctly. Dunno.

Modern healthcare requires a modern cloud. View this brief video to understand how the Concerto Cloud for Healthcare can help your organization.


Author Comment

ID: 12049906
thanks for your advice.i'm still at not quite sure how to resolve this...can i get rid of this certificate somehow? i tried deleting, but again when i try to send email it gives me the message to accept/not accept it. I was sending emails fine before the other week without this certificate message coming up...so im still not exactly sure how i got this... (as you can tell i'm very newbie with all this...i had to look up what is a certificate authority...) ;-p

thanks again
LVL 34

Expert Comment

ID: 12053871
Well, you did get rid of it when you deleted it from Thunderbird's certificate database. Trouble is, since the E-Mail server to which you are connecting is using it, Thunderbird keeps wanting to add it back.

The issue lies with the mail server to which you are connecting. The admin is the only one who can explain exactly what is going on and why.

Author Comment

ID: 12055100
Thanks!, i will interrogate them again!
LVL 34

Expert Comment

ID: 12055174
Remember to keep the pliers hidden unless they are uncooperative. :-)

Featured Post

Free Tool: Subnet Calculator

The subnet calculator helps you design networks by taking an IP address and network mask and returning information such as network, broadcast address, and host range.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

The biggest nightmare for any Exchange Server Administrator is to keep the server running without any issue. But the problems often come and they need to be resolved efficiently and timely. Here are important troubleshooting points: Define the Pr…
Preparing an email is something we should all take special care with – especially when the email is for somebody you may not know very well. The pressures of everyday working life stacked with a hectic office environment can make this a real challen…
The purpose of this video is to demonstrate how to set up a Mailchimp campaign. This will include styling and adding elements to a newsletter/email. This will be demonstrated using a Windows 8 PC. Mailchimp will be used. Log into your Mailchim…
The purpose of this video is to demonstrate how to set up a Mailchimp Template which will let the user create a uniform look for all of their campaigns. This will be demonstrated using a Windows 8 PC. Mailchimp will be used. Log into your Mail…
Suggested Courses

718 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question