I have a couple of users that are getting bombarded with non-delivery
receipts and block messages - literally 1000s a day. In trying to track
this down the common denominator has been the messages are all coming from
what appears to be people using Barracuda Firewalls. The strange thing is
the headers on the blocked messages do no show our clients as the reply to
address so I am wondering why it would be bouncing them to our clients. An
example of the headers I am talking about are below. We do not host that
domain so I don't know why it is coming to our servers. Has anyone seen
this type of occurance before?
I am not familar with Barracuda's appliances but could they have some munged
rule where they bounce to a particular address instead of the reply to
address.
Anyone have any insight?
Chuck Schick
Warp 8, Inc.
(303)-421-5140
www.warp8.com
------------=_1182488792-13283-257
Content-Type: message/delivery-status
Content-Disposition: inline
Content-Transfer-Encoding: 7bit
Content-Description: Delivery error report
Reporting-MTA: dns; barracuda.arialink.com
Received-From-MTA: smtp; barracuda.arialink.com ([127.0.0.1])
Arrival-Date: Fri, 22 Jun 2007 01:06:32 -0400 (EDT)
Final-Recipient: rfc822; [EMAIL PROTECTED]
Action: failed
Status: 5.7.1
Diagnostic-Code: smtp; 550 5.7.1 Message content rejected, UBE,
id=13283-01-163
Last-Attempt-Date: Fri, 22 Jun 2007 01:06:32 -0400 (EDT)
------------=_1182488792-13283-257
Content-Type: text/rfc822-headers
Content-Disposition: inline
Content-Transfer-Encoding: 7bit
Content-Description: Undelivered-message headers
[EMAIL PROTECTED],[EMAIL PROTECTED],[EMAIL PROTECTED],a.murray.dick
[EMAIL PROTECTED],
[EMAIL PROTECTED],[EMAIL PROTECTED],[EMAIL PROTECTED],[EMAIL PROTECTED]
rewal.com,
[EMAIL PROTECTED],[EMAIL PROTECTED],[EMAIL PROTECTED],[EMAIL PROTECTED]
wal.com,
[EMAIL PROTECTED],[EMAIL PROTECTED],[EMAIL PROTECTED],[EMAIL PROTECTED]
com,
[EMAIL PROTECTED]
Received: from 216.157.205.123 (unknown [122.10.14.87])
by barracuda.arialink.com (Spam Firewall) with SMTP
id 7807617C63A; Fri, 22 Jun 2007 01:05:38 -0400 (EDT)
X-Originating-IP: 51.111.140.220 by smtp.122.10.14.87; Fri, 22 Jun 2007
01:05:36 -0500
Message-ID: <[EMAIL PROTECTED]>
From: "Marguerite Harden" <[EMAIL PROTECTED]>
Reply-To: "Marguerite Harden" <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Subject: Qualitative Bre1tling w4tches at Prest1ge Repl1cas
Date: Fri, 22 Jun 2007 01:05:36 -0500
Content-Type: text/plain;
Content-Transfer-Encoding: 7Bit
------------=_1182488792-13283-257--
Chuck Schick
Warp 8, Inc.
(303)-421-5140
www.warp8.com
To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
