The bounce messages are identified as being From:
"Mail Delivery Subsystem" <[email protected]>
Also, beside the original message (the one claimed to be bounced), there is the
following additional text attachments in the one I received:
Reporting-MTA: dns; mx1.incubator.apache.org
Received-From-MTA: DNS; [68.1.16.123]
Arrival-Date: Thu, 22 Mar 2012 21:46:34 -0700
Final-Recipient: RFC822; [email protected]
X-Actual-Recipient: RFC822; [email protected]
Action: failed
Status: 5.1.1
Last-Attempt-Date: Thu, 22 Mar 2012 21:46:34 -0700
68.1.16.123 is eastrmimpi05.cox.net
I forgot that those little goodies might have interesting information in them.
Thank you for your helpfulness, Rob.
-----Original Message-----
From: Rob Weir [mailto:[email protected]]
Sent: Friday, March 23, 2012 10:36
To: [email protected]
Subject: Re: [LIST MAIL] False Bounces from ooo-users
To paraphrase. Some users are getting bounce errors. You don't know
why. But it is not coming from us.
The PPMC has zero control of this. If you think Infra needs to be
involved, they have a list for that, and JIRA.
-Rob
On Fri, Mar 23, 2012 at 12:42 PM, Dennis E. Hamilton
<[email protected]> wrote:
> Posters to ooo-users@ i.a.o are receiving false bounce notices. Their posts
> are actually appearing on the list. However, bounce notices are being
> received. Users should ignore these bounce notices. They can confirm that
> their message has actually been received by inspecting the list archives.
>
> NOTE: If posters are reading the list via a secondary service, and their
> posts are not being shown there, that is likely where the bounce is actually
> from. This message could be an indication that ooo-users@ i.a.o is not a
> recognized list somewhere.
>
> - Dennis
>
> ANALYSIS FOR OOO-DEV ANALYSIS AND INFRASTRUCTURE TROUBLESHOOTING:
>
> These bounce notices have simple text and include the bounced message as an
> attachment.
>
> I have been receiving these in my Spam folder and I finally noticed. (Most
> of my received bounce messages *are* spam or the result of some spammer
> misusing my e-mail addresss so I rarely look at them, especially if any of my
> messages have been reaching the lists I am subscribed to.)
>
> I have provided the full headers of one of the bounce messages back to me.
> This attachment was my message of Thursday night (-0700) with subject
> "Implications for security vulnerability (CVE-2012-0037). It can be seen
> successfully posted to the list at
>
> <http://mail-archives.apache.org/mod_mbox/incubator-ooo-users/201203.mbox/%[email protected]%3e>
>
> (I see a discrepancy in the time-stamps also. The list shows date
> 2012-03-23T04:46:07Z, My copy from the list is dated as sent on
> 2012-03-22T21:46-0700 (agreeing with 2012-03-23T04:46Z), yet cox.net
> received the bounce notice from Lanny PC (!?) at 2012-03-23-02:28:25-0400,
> corresponding to 2012-03-23T06:28:25Z). This, and the nature of the message,
> has me suspect that these peculiar bounce messages are post-list-arrival and
> from a downstream special-protocol recipient.
>
> - - - - - - - These are the headers on the bounce message I received - - - -
> -
>
> Return-path:
> <SRS0+6f165d3367e37ed5=B6=incubator.apache.org=mailer-dae...@srs.acm.org>
> [ .... ] Final path irrelevant
> Received: from psmtp.com ([74.125.149.93])
> by acm26-4.acm.org (ACM Email Forwarding Service) with SMTP id HJA88133
> for <[email protected]>; Fri, 23 Mar 2012 02:29:33 -0400
> Received: from fed1rmfepo203.cox.net ([68.230.241.148]) by
> na3sys009amx167.postini.com ([74.125.148.10]) with SMTP;
> Fri, 23 Mar 2012 06:29:32 GMT
> Received: from fed1rmimpo306.cox.net ([68.230.241.174])
> by fed1rmfepo203.cox.net
> (InterMail vM.8.01.04.00 201-2260-137-20101110) with ESMTP
> id
> <20120323062932.xryi24333.fed1rmfepo203.cox....@fed1rmimpo306.cox.net>
> for <[email protected]>; Fri, 23 Mar 2012 02:29:32 -0400
> Received: from Lanny-PC ([70.170.110.212])
> by fed1rmimpo306.cox.net with bizsmtp
> id ouUP1i0034b06CN03uUQtt; Fri, 23 Mar 2012 02:28:25 -0400
> X-CT-Class: Clean
> X-CT-Score: 0.00
> X-CT-RefID: str=0001.0A020201.4F6C184B.00A8,ss=1,re=0.000,fgs=256
> X-CT-Spam: 0
> X-Authority-Analysis: v=1.1 cv=/z6nVqgKJubJSJFLDUxhpnTtIgTQeP8W3J+4y8l5h/4=
> c=1 sm=1 a=SJIS0OigG-AA:10 a=jksSu5QgSbTtBvHH52dhDQ==:17 a=mV9VRH-2AAAA:8
> a=knQjgZu5OroMix5nMfYA:9 a=YCs5jFZFAnHFUSHzdFsA:9 a=_4BPYxVLAAAA:8
> a=-hyCGDrDAAAA:8 a=B6ByjeiWjoBosR4FfqUA:9 a=DpDQOH3bnqWrVRIQN1UA:7
> a=QEXdDO2ut3YA:10 a=93i8w3xbaaYA:10 a=Er2gK3W4G3kA:10
> a=jksSu5QgSbTtBvHH52dhDQ==:117
> X-CM-Score: 0.00
> Authentication-Results: cox.net; none
> From: "Mail Delivery Subsystem" <[email protected]>
> To: Dennis E. Hamilton <[email protected]>
> Subject: Returned mail: User unknown
> Auto-submitted: auto-generated (failure)
> MIME-Version: 1.0
> Content-type: multipart/report;
> report-type=delivery-status;
> boundary="XGC23002.1275609600/mx1.incubator.apache.org"
> Message-ID: <CHILKAT-MID-5664642a-6e2d-e0ab-cf8d-c488c2f0a436@Lanny-PC>
> Date: Fri, 23 Mar 2012 02:29:32 -0400
> X-pstn-neptune: 0/0/0.00/0
> X-pstn-levels: (S:66.88766/99.90000 CV:99.9000 FC:95.5390 LC:95.5390
> R:95.9108 P:95.9108 M:97.0282 C:98.6951 )
> X-pstn-dkim: 0 skipped:not-enabled
> X-pstn-settings: 3 (1.0000:1.0000) s cv gt3 gt2 gt1
> X-pstn-addresses: from <[email protected]> [271/12]
> The original message was received at Thu, 22 Mar 2012 21:46:34 -0700
> from [68.1.16.123]
>
> - - - - - - - The Bounce Message I received - - - - - - - -
>
> ----- The following addresses had permanent fatal errors -----
> [email protected]
> (expanded from: [email protected])
>
> ----- Transcript of session follows -----
> mail.local: unknown name: ooo-users
> 550 [email protected]... User unknown
>
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
