Am 13.04.2015 um 02:03 schrieb Angus McIntyre:
I received one of those a few days ago.
I did some digging and figured out what was happening.
1. Someone posted to the qmailtoaster list from a host that is currently
listed in an RBL.
I dont't think it's a blocked IP but a blocked attachement. The last line said:
Remote host said: 554 Your email was rejected because it contains the
Sanesecurity.Malware.24814.UpatreHeur.UNOFFICIAL virus
Johannes
2. Spamdyke on my server checked their IP against the RBL and rejected the
message(s).
3. The qmailtoaster ezmlm server received the bounce(s) and noted that my
server was bouncing mail.
4. After a set number of bounces, it sent me the same warning that you've
all received.
Basically, if you get one, it means that (a) your qmailtoaster setup is
behaving as it should, and (b) the qmailtoaster ezmlm software is behaving as
it should. But the end result is these warning messages.
What I can't now remember was whose IP was blacklisted. It might have been
Fabian's (74.125.129.26), but that IP seems to be clear now, so it was probably
a transient issue.
Angus
On 2015-04-12 18:46, Eric Broch wrote:
I wonder why we would be receiving these? Does anyone know?
And, who's running the qmailtoaster mail server?
On 4/12/2015 4:42 PM, Fabian Santiago wrote:
I received this:
Hi! This is the ezmlm program. I'm managing the
qmailtoaster-list@qmailtoaster.com mailing list.
I'm working for my owner, who can be reached
at qmailtoaster-list-ow...@qmailtoaster.com.
Messages to you from the qmailtoaster-list mailing list seem to
have been bouncing. I've attached a copy of the first bounce
message I received.
If this message bounces too, I will send you a probe. If the probe
bounces,
I will remove your address from the qmailtoaster-list mailing list,
without further notice.
I've kept a list of which messages from the qmailtoaster-list
mailing list have
bounced from your address.
Copies of these messages may be in the archive.
To retrieve a set of messages 123-145 (a maximum of 100 per
request),
send an empty message to:
<qmailtoaster-list-get.123_...@qmailtoaster.com>
To receive a subject and author list for the last 100 or so
messages,
send an empty message to:
<qmailtoaster-list-in...@qmailtoaster.com>
Here are the message numbers:
17822
--- Enclosed is a copy of the bounce message I received.
Return-Path: <>
Received: (qmail 5440 invoked for bounce); 1 Apr 2015 01:04:06
-0000
Date: 1 Apr 2015 01:04:06 -0000
From: mailer-dae...@mail.qmailtoaster.com
To: qmailtoaster-list-return-178...@qmailtoaster.com
Subject: failure notice
Hi. This is the qmail-send program at mail.qmailtoaster.com [4].
I'm afraid I wasn't able to deliver your message to the following
addresses.
This is a permanent error; I've given up. Sorry it didn't work out.
<fsanti...@garden-life.org>:
User and password not set, continuing without authentication.
<fsanti...@garden-life.org> 74.125.129.26 failed after I sent the
message.
Remote host said: 552-5.7.0 This message was blocked because its
content presents a potential
552-5.7.0 security issue. Please visit
552-5.7.0 http://support.google.com/mail/bin/answer.py?answer=6590
[5] to review our
552 5.7.0 message content and attachment content guidelines.
k6si19967000pdm.248 - gsmtp
Sincerely,
Fabian Santiago
Sent from my iPhone
On Apr 12, 2015, at 6:39 PM, Eric Broch <ebr...@whitehorsetc.com>
wrote:
Has anyone on the list received one of these?
-------- Forwarded Message --------
RETURN-PATH:
<qmailtoaster-list-return-warn-1428877952.nbpofmengabfjhfjnpna-ebroch=whitehorsetc....@qmailtoaster.com>
DELIVERED-TO:
whitehorsetc.com-ebr...@whitehorsetc.com
RECEIVED:
(qmail 15878 invoked by uid 89); 12 Apr 2015 22:33:10 -0000
RECEIVED:
by simscan 1.4.0 ppid: 15859, pid: 15862, t: 2.5894s scanners:
attach: 1.4.0 clamav: 0.98.6/m:55/d:20315 spam: 3.4.0
X-SPAM-CHECKER-VERSION:
SpamAssassin 3.4.0 (2014-02-07) on pet110II.whitehorsetc.com
[2]
X-SPAM-LEVEL:
*
X-SPAM-STATUS:
No, score=1.8 required=5.0 tests=AWL,BAYES_60,RDNS_NONE
autolearn=no autolearn_force=no version=3.4.0
RECEIVED:
from unknown (HELO mail.qmailtoaster.com [1]) (162.213.42.64)
by pet110II.whitehorsetc.com [2] with SMTP; 12 Apr 2015 22:33:08
-0000
RECEIVED-SPF:
pass (pet110II.whitehorsetc.com [2]: SPF record at
qmailtoaster.com [3] designates 162.213.42.64 as permitted sender)
RECEIVED:
(qmail 27565 invoked by uid 89); 12 Apr 2015 22:32:56 -0000
MAILING-LIST:
contact qmailtoaster-list-h...@qmailtoaster.com; run by ezmlm
DATE:
12 Apr 2015 22:32:56 -0000
MESSAGE-ID:
<1428877976.27265.ezmlm-w...@qmailtoaster.com>
FROM:
qmailtoaster-list-h...@qmailtoaster.com
TO:
ebr...@whitehorsetc.com
CONTENT-TYPE:
text/plain; charset=us-ascii
SUBJECT:
ezmlm warning
X-DSPAM-RESULT:
Innocent
X-DSPAM-PROCESSED:
Sun Apr 12 16:33:16 2015
X-DSPAM-CONFIDENCE:
0.9989
X-DSPAM-IMPROBABILITY:
1 in 90997 chance of being spam
X-DSPAM-PROBABILITY:
0.0000
X-DSPAM-SIGNATURE:
1,552af2ac36691819825128
Hi! This is the ezmlm program. I'm managing the
qmailtoaster-list@qmailtoaster.com mailing list.
I'm working for my owner, who can be reached
at qmailtoaster-list-ow...@qmailtoaster.com.
Messages to you from the qmailtoaster-list mailing list seem to
have been bouncing. I've attached a copy of the first bounce
message I received.
If this message bounces too, I will send you a probe. If the probe
bounces,
I will remove your address from the qmailtoaster-list mailing
list,
without further notice.
I've kept a list of which messages from the qmailtoaster-list
mailing list have
bounced from your address.
Copies of these messages may be in the archive.
To retrieve a set of messages 123-145 (a maximum of 100 per
request),
send an empty message to:
<qmailtoaster-list-get.123_...@qmailtoaster.com>
To receive a subject and author list for the last 100 or so
messages,
send an empty message to:
<qmailtoaster-list-in...@qmailtoaster.com>
Here are the message numbers:
17822
--- Enclosed is a copy of the bounce message I received.
Return-Path: <>
Received: (qmail 5440 invoked for bounce); 1 Apr 2015 01:04:06
-0000
Date: 1 Apr 2015 01:04:06 -0000
From: mailer-dae...@mail.qmailtoaster.com
To: qmailtoaster-list-return-178...@qmailtoaster.com
Subject: failure notice
Hi. This is the qmail-send program at mail.qmailtoaster.com [1].
I'm afraid I wasn't able to deliver your message to the following
addresses.
This is a permanent error; I've given up. Sorry it didn't work
out.
<ebr...@whitehorsetc.com>:
User and password not set, continuing without authentication.
<ebr...@whitehorsetc.com> 69.144.11.118 failed after I sent the
message.
Remote host said: 554 Your email was rejected because it contains
the Sanesecurity.Malware.24814.UpatreHeur.UNOFFICIAL virus
Links:
------
[1] http://mail.qmailtoaster.com
[2] http://pet110II.whitehorsetc.com
[3] http://qmailtoaster.com
[4] http://mail.qmailtoaster.com/
[5] http://support.google.com/mail/bin/answer.py?answer=6590
---------------------------------------------------------------------
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
--
Johannes Weberhofer
Weberhofer GmbH, Austria, Vienna
---------------------------------------------------------------------
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
