Am 13.04.2015 um 02:03 schrieb Angus McIntyre:
I received one of those a few days ago.
I did some digging and figured out what was happening.
1. Someone posted to the qmailtoaster list from a host that is currently
listed in an RBL.
I dont't think it's a blocked IP but a blocked attachement. The last line said:
Remote host said: 554 Your email was rejected because it contains the
Sanesecurity.Malware.24814.UpatreHeur.UNOFFICIAL virus
Johannes
2. Spamdyke on my server checked their IP against the RBL and rejected the
message(s).
3. The qmailtoaster ezmlm server received the bounce(s) and noted that my
server was bouncing mail.
4. After a set number of bounces, it sent me the same warning that you've
all received.
Basically, if you get one, it means that (a) your qmailtoaster setup is
behaving as it should, and (b) the qmailtoaster ezmlm software is behaving as
it should. But the end result is these warning messages.
What I can't now remember was whose IP was blacklisted. It might have been
Fabian's (74.125.129.26), but that IP seems to be clear now, so it was probably
a transient issue.
Angus
On 2015-04-12 18:46, Eric Broch wrote:
I wonder why we would be receiving these? Does anyone know?
And, who's running the qmailtoaster mail server?
On 4/12/2015 4:42 PM, Fabian Santiago wrote:
I received this:
Hi! This is the ezmlm program. I'm managing the
[email protected] mailing list.
I'm working for my owner, who can be reached
at [email protected].
Messages to you from the qmailtoaster-list mailing list seem to
have been bouncing. I've attached a copy of the first bounce
message I received.
If this message bounces too, I will send you a probe. If the probe
bounces,
I will remove your address from the qmailtoaster-list mailing list,
without further notice.
I've kept a list of which messages from the qmailtoaster-list
mailing list have
bounced from your address.
Copies of these messages may be in the archive.
To retrieve a set of messages 123-145 (a maximum of 100 per
request),
send an empty message to:
<[email protected]>
To receive a subject and author list for the last 100 or so
messages,
send an empty message to:
<[email protected]>
Here are the message numbers:
17822
--- Enclosed is a copy of the bounce message I received.
Return-Path: <>
Received: (qmail 5440 invoked for bounce); 1 Apr 2015 01:04:06
-0000
Date: 1 Apr 2015 01:04:06 -0000
From: [email protected]
To: [email protected]
Subject: failure notice
Hi. This is the qmail-send program at mail.qmailtoaster.com [4].
I'm afraid I wasn't able to deliver your message to the following
addresses.
This is a permanent error; I've given up. Sorry it didn't work out.
<[email protected]>:
User and password not set, continuing without authentication.
<[email protected]> 74.125.129.26 failed after I sent the
message.
Remote host said: 552-5.7.0 This message was blocked because its
content presents a potential
552-5.7.0 security issue. Please visit
552-5.7.0 http://support.google.com/mail/bin/answer.py?answer=6590
[5] to review our
552 5.7.0 message content and attachment content guidelines.
k6si19967000pdm.248 - gsmtp
Sincerely,
Fabian Santiago
Sent from my iPhone
On Apr 12, 2015, at 6:39 PM, Eric Broch <[email protected]>
wrote:
Has anyone on the list received one of these?
-------- Forwarded Message --------
RETURN-PATH:
<qmailtoaster-list-return-warn-1428877952.nbpofmengabfjhfjnpna-ebroch=whitehorsetc....@qmailtoaster.com>
DELIVERED-TO:
[email protected]
RECEIVED:
(qmail 15878 invoked by uid 89); 12 Apr 2015 22:33:10 -0000
RECEIVED:
by simscan 1.4.0 ppid: 15859, pid: 15862, t: 2.5894s scanners:
attach: 1.4.0 clamav: 0.98.6/m:55/d:20315 spam: 3.4.0
X-SPAM-CHECKER-VERSION:
SpamAssassin 3.4.0 (2014-02-07) on pet110II.whitehorsetc.com
[2]
X-SPAM-LEVEL:
*
X-SPAM-STATUS:
No, score=1.8 required=5.0 tests=AWL,BAYES_60,RDNS_NONE
autolearn=no autolearn_force=no version=3.4.0
RECEIVED:
from unknown (HELO mail.qmailtoaster.com [1]) (162.213.42.64)
by pet110II.whitehorsetc.com [2] with SMTP; 12 Apr 2015 22:33:08
-0000
RECEIVED-SPF:
pass (pet110II.whitehorsetc.com [2]: SPF record at
qmailtoaster.com [3] designates 162.213.42.64 as permitted sender)
RECEIVED:
(qmail 27565 invoked by uid 89); 12 Apr 2015 22:32:56 -0000
MAILING-LIST:
contact [email protected]; run by ezmlm
DATE:
12 Apr 2015 22:32:56 -0000
MESSAGE-ID:
<[email protected]>
FROM:
[email protected]
TO:
[email protected]
CONTENT-TYPE:
text/plain; charset=us-ascii
SUBJECT:
ezmlm warning
X-DSPAM-RESULT:
Innocent
X-DSPAM-PROCESSED:
Sun Apr 12 16:33:16 2015
X-DSPAM-CONFIDENCE:
0.9989
X-DSPAM-IMPROBABILITY:
1 in 90997 chance of being spam
X-DSPAM-PROBABILITY:
0.0000
X-DSPAM-SIGNATURE:
1,552af2ac36691819825128
Hi! This is the ezmlm program. I'm managing the
[email protected] mailing list.
I'm working for my owner, who can be reached
at [email protected].
Messages to you from the qmailtoaster-list mailing list seem to
have been bouncing. I've attached a copy of the first bounce
message I received.
If this message bounces too, I will send you a probe. If the probe
bounces,
I will remove your address from the qmailtoaster-list mailing
list,
without further notice.
I've kept a list of which messages from the qmailtoaster-list
mailing list have
bounced from your address.
Copies of these messages may be in the archive.
To retrieve a set of messages 123-145 (a maximum of 100 per
request),
send an empty message to:
<[email protected]>
To receive a subject and author list for the last 100 or so
messages,
send an empty message to:
<[email protected]>
Here are the message numbers:
17822
--- Enclosed is a copy of the bounce message I received.
Return-Path: <>
Received: (qmail 5440 invoked for bounce); 1 Apr 2015 01:04:06
-0000
Date: 1 Apr 2015 01:04:06 -0000
From: [email protected]
To: [email protected]
Subject: failure notice
Hi. This is the qmail-send program at mail.qmailtoaster.com [1].
I'm afraid I wasn't able to deliver your message to the following
addresses.
This is a permanent error; I've given up. Sorry it didn't work
out.
<[email protected]>:
User and password not set, continuing without authentication.
<[email protected]> 69.144.11.118 failed after I sent the
message.
Remote host said: 554 Your email was rejected because it contains
the Sanesecurity.Malware.24814.UpatreHeur.UNOFFICIAL virus
Links:
------
[1] http://mail.qmailtoaster.com
[2] http://pet110II.whitehorsetc.com
[3] http://qmailtoaster.com
[4] http://mail.qmailtoaster.com/
[5] http://support.google.com/mail/bin/answer.py?answer=6590
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
--
Johannes Weberhofer
Weberhofer GmbH, Austria, Vienna
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
