First I DID not send the Offending email. I got two of them and posted to the list.
Yes the number of hops is insane but it ain't my box. On Fri, 2005-06-10 at 08:04 +1000, Damien Gardner wrote: > Oh good, it's not us this time :) > > I'd guess you've got an Obtuse SMTPD somewhere in your network (or something > that works a lot like it).. When there's an insanely large number of > received: lines in your email, sendmail will generally reject it, as the > default sendmail config allows 27 hops. Now Obtuse (and presumably a few > others?) goes to pass such a message to sendmail, gets the 5xx error, and > isntead of canning it, it decides that it might work if it tries again > later, so re-queues it.. > > Which basically ends up with an email back to your mailbox every 5 minutes. > Easiest way to check who is generating it, is to simply look in the headers > of the bounce message, and see what server is generating it - then you can > contact the admin of that server, and get them to remove the offending > message from their queue.. If they're running Obtuse, they'll be aware of > the problem and can fix it very quickly :) > > Cheers, > > DG > > > -----Original Message----- > From: G. Roderick Singleton [mailto:[EMAIL PROTECTED] > Sent: Friday, 10 June 2005 7:49 AM > To: ipfilter list > Subject: bounced with too many hops in my mailbox > Importance: High > > > Is there a problem? All of a sudden I am getting MAILER-DAEMON messages > claiming to many hops, yet this is the first message I have sent in at > least a month. > > Here is a bit of an excerpt so that anyone who is taking care of the > list can start troubleshooting (whole message is available): > > Return-Path: <[EMAIL PROTECTED]> > Received: from anu.edu.au (anumail4.anu.edu.au [150.203.2.44]) > by pathtech.org (8.12.9/8.12.9) with ESMTP id j59KvNto026654 > for <[EMAIL PROTECTED]>; Thu, 9 Jun 2005 16:57:24 -0400 > Received: from smtphost.anu.edu.au (stats.anu.edu.au [150.203.2.50]) > by anu.edu.au (8.13.4/8.13.4) with ESMTP id j59KuVEG026074; > Fri, 10 Jun 2005 06:56:32 +1000 (EST) > Received: from cairo.anu.edu.au (cairo.anu.edu.au [150.203.224.11]) > by smtphost.anu.edu.au (8.13.4/8.13.4) with ESMTP id > j59KuOMa012203; > Fri, 10 Jun 2005 06:56:25 +1000 (EST) > Received: from cairo.anu.edu.au (localhost [127.0.0.1]) > by cairo.anu.edu.au (8.12.9/8.12.0) with ESMTP id > j59KuMS3015265; > Fri, 10 Jun 2005 06:56:22 +1000 (EST) > Received: from localhost ([EMAIL PROTECTED]) > by cairo.anu.edu.au (8.12.9/8.12.0.Beta16) with SMTP id > j59Ku9hP015174; > Fri, 10 Jun 2005 06:56:10 +1000 (EST) > X-Authentication-Warning: cairo.anu.edu.au: majordomo owned process > doing -bs > Received: by cairo.anu.edu.au (bulk_mailer v1.13); Fri, 10 Jun 2005 > 06:54:38 +1000 > Received: from cairo.anu.edu.au (localhost [127.0.0.1]) > by cairo.anu.edu.au (8.12.9/8.12.0) with ESMTP id > j59KsbS3014753; > Fri, 10 Jun 2005 06:54:38 +1000 (EST) > Received: (from [EMAIL PROTECTED]) > by cairo.anu.edu.au (8.12.9/8.12.0.Beta16) id j59KsbMp014752; > Fri, 10 Jun 2005 06:54:37 +1000 (EST) > X-Authentication-Warning: cairo.anu.edu.au: majordomo set sender to > [EMAIL PROTECTED] using -f > Received: from anu.edu.au (anumail2.anu.edu.au [150.203.2.42]) > by cairo.anu.edu.au (8.12.9/8.12.0) with ESMTP id j59KsZS3014745 > for <[email protected]>; Fri, 10 Jun 2005 06:54:36 > +1000 (EST) > Received: from az18nt140.honeywell.com (az18nt140.honeywell.com > [199.64.7.140]) > by anu.edu.au (8.13.4/8.13.4) with ESMTP id j59KsVPG007990 > for <[email protected]>; Fri, 10 Jun 2005 06:54:32 > +1000 (EST) > Received: from AZ18CN851.global.ds.honeywell.com ([131.127.167.139]) by > az18nt140.honeywell.com with InterScan Messaging Security Suite; > Thu, 09 > Jun 2005 13:40:42 -0700 > Received: from az18cn852.global.ds.honeywell.com ([131.127.167.41]) by > AZ18CN851.global.ds.honeywell.com with Microsoft SMTPSVC > (6.0.3790.211); > Thu, 9 Jun 2005 13:41:07 -0700 > Received: from mail pickup service by az18cn852.global.ds.honeywell.com > with > Microsoft SMTPSVC; Thu, 9 Jun 2005 13:41:06 -0700 > Received: from AZ18CN850.global.ds.honeywell.com ([131.127.167.138]) by > az18cn852.global.ds.honeywell.com with Microsoft SMTPSVC > (6.0.3790.211); > Thu, 9 Jun 2005 04:25:12 -0700 > Received: from az18nt143.honeywell.com ([199.64.7.143]) by > AZ18CN850.global.ds.honeywell.com with Microsoft SMTPSVC > (6.0.3790.211); > Thu, 9 Jun 2005 04:25:12 -0700 > Received: from anu.edu.au ([150.203.2.41]) by az18nt143.honeywell.com > with > InterScan Messaging Security Suite; Thu, 09 Jun 2005 04:25:20 > -0700 > Received: from smtphost.anu.edu.au (stats.anu.edu.au [150.203.2.50])by > anu.edu.au (8.13.4/8.13.4) with ESMTP id j59BM7oF012282;Thu, 9 > Jun 2005 > 21:22:07 +1000 (EST) > Received: from cairo.anu.edu.au (cairo.anu.edu.au [150.203.224.11])by > smtphost.anu.edu.au (8.13.4/8.13.4) with ESMTP id > j59BLjrR024669;Thu, 9 Jun > 2005 21:21:45 +1000 (EST) > Received: from cairo.anu.edu.au (localhost [127.0.0.1])by > cairo.anu.edu.au > (8.12.9/8.12.0) with ESMTP id j59BLfS3010403;Thu, 9 Jun 2005 > 21:21:41 +1000 > (EST) > Received: from localhost ([EMAIL PROTECTED])by cairo.anu.edu.au > (8.12.9/8.12.0.Beta16) with SMTP id j59BLb3d010277;Thu, 9 Jun > 2005 21:21:37 > +1000 (EST) > X-Authentication-Warning: cairo.anu.edu.au: majordomo owned process > doing > -bs > Received: by cairo.anu.edu.au (bulk_mailer v1.13); Thu, 9 Jun 2005 > 21:15:14 > +1000 > Received: from cairo.anu.edu.au (localhost [127.0.0.1])by > cairo.anu.edu.au > (8.12.9/8.12.0) with ESMTP id j59BFES3008124;Thu, 9 Jun 2005 > 21:15:14 +1000 > (EST) > Received: (from [EMAIL PROTECTED])by cairo.anu.edu.au > (8.12.9/8.12.0.Beta16) id j59BFEcm008120;Thu, 9 Jun 2005 > 21:15:14 +1000 > (EST) > X-Authentication-Warning: cairo.anu.edu.au: majordomo set sender to > [EMAIL PROTECTED] using -f > Received: from anu.edu.au (anumail4.anu.edu.au [150.203.2.44])by > cairo.anu.edu.au (8.12.9/8.12.0) with ESMTP id > j59BFCS3008104for > <[email protected]>; Thu, 9 Jun 2005 21:15:12 +1000 > (EST) > Received: from firewall.reed.wattle.id.au > (dsl-202-45-110-141.VIC.netspace.net.au [202.45.110.141])by > anu.edu.au > (8.13.4/8.13.4) with ESMTP id j59BF5Zg026152for > <[email protected]>; Thu, 9 Jun 2005 21:15:06 +1000 > (EST) > Received: (from [EMAIL PROTECTED])by firewall.reed.wattle.id.au > (8.12.11/8.11.0) id j59BEaB9008946;Thu, 9 Jun 2005 21:14:36 > +1000 (EST) > From: Darren Reed <[EMAIL PROTECTED]> > Message-Id: <[EMAIL PROTECTED]> > Subject: Re: SSH port open despite ipf rules > In-Reply-To: <[EMAIL PROTECTED]> > To: Fernando Gleiser <[EMAIL PROTECTED]> > Date: Thu, 9 Jun 2005 21:14:25 +1000 (EST) > CC: John Doe <[EMAIL PROTECTED]>, [email protected] > X-Mailer: ELM [version 2.4ME+ PL107a (25)] > MIME-Version: 1.0 > Content-Transfer-Encoding: 7bit > Content-Type: text/plain; > charset=US-ASCII > X-PMX-Version: 4.7.1.128075, Antispam-Engine: 2.0.3.2, Antispam-Data: > 2005.6.9.26 internal > X-PMX-Version: 4.7.1.128075, Antispam-Engine: 2.0.3.2, Antispam-Data: > 2005.6.9.24 external > X-PMX-Version: 4.7.1.128075, Antispam-Engine: 2.0.3.2, Antispam-Data: > 2005.6.9.6 internal > X-PMX-Version: 4.7.1.128075, Antispam-Engine: 2.0.3.2, Antispam-Data: > 2005.6.9.6 external > X-PerlMx-Spam: Gauge=IIIIIII, Probability=7%, Report='__CT 0, __CTE 0, > __CT_TEXT_PLAIN 0, __HAS_MSGID 0, __HAS_X_MAILER 0, __MIME_VERSION 0, > __SANE_MSGID 0' > X-imss-version: 2.025 > X-imss-result: Passed > X-imss-scores: Clean:99.90000 C:2 M:3 S:5 R:5 > X-imss-settings: Baseline:2 C:2 M:2 S:3 R:3 (0.1500 0.1500) > X-OriginalArrivalTime: 09 Jun 2005 11:25:12.0035 (UTC) > FILETIME=[E67F7330:01C56CE5] > Sender: [EMAIL PROTECTED] -- G. Roderick Singleton <[EMAIL PROTECTED]> PATH tech
