Re: [qmailtoaster] Bounce back even I am not sent mail

2013-11-12 Thread Sebastian Grewe
Some Spammer uses your mail as the FROM address for Spam. Not sure if you can 
do anything against that but I doubt it.

Cheers,
Sebastian

On Nov 12, 2013, at 11:05 AM, Linux li...@ikf.co.in wrote:

 Team,
 I am not sending the mails on mail.ru, but I received the daily failure 
 notice as the following, please guide someone how this happening and how to 
 stop it.
  
  
 From: mailer-dae...@email.mydomain.com 
 [mailto:mailer-dae...@email.mydomain.com]
 Sent: Tuesday, November 12, 2013 2:58 PM
 To: u...@mydomain.com
 Subject: failure notice
  
 Hi. This is the qmail-send program at email.cqra.com.
 I'm afraid I wasn't able to deliver your message to the following addresses.
 This is a permanent error; I've given up. Sorry it didn't work out.
  
 crew...@mail.ru:
 User and password not set, continuing without authentication.
 crew...@mail.ru 94.100.176.20 failed after I sent the message.
 Remote host said: 550 spam message rejected. Please visit 
 http://help.mail.ru/notspam-support/id?c=THgN9kw_8BCFD-q-SgAmAldgUqSIBUhpSiD
 XWzSOyHRVDNJwsXVattOecD39RrDxaDQi3_anVQ8JbVsAALX30yc~ or  report details 
 to ab...@corp.mail.ru. Error code:
 F60D784C10F03F4CBEEA0F850226004AA4526057694805885BD7204A74C88E3470D20C55B65A
 75B13D709ED3F1B046FDDF2234680F55A7F6. ID: 00095B6D27D3F7B5.
  
 --- Below this line is a copy of the message.
  
 Return-Path: u...@mydomain.com
 Received: (qmail 20154 invoked by uid 89); 12 Nov 2013 09:01:27 -
 Received: by simscan 1.4.0 ppid: 20137, pid: 20147, t: 0.4466s
  scanners: attach: 1.4.0 clamav: 0.97.3/m:55/d:18031
 Received: from unknown (HELO mail.promhzoj.com)
 (u...@mydomain.com@188.187.138.103)
   by email.cqra.com with ESMTPA; 12 Nov 2013 09:01:27 -
 Received: from [464.19.514.13] (port=76243 helo=[89.835.936.577])
 by smtp82.i.mail.ru with esmtps (envelope-from
 u...@mydomain.com)
 id 1Gucxu-0002zc-aV
 for crew...@mail.ru; Tue, 12 Nov 2013 12:01:20 +0300
 Message-ID: DSxBTlNKQYRwUSFDahOmOEwoynUXIESyiCbZXPzRpcvFswigaz@mbnruokx
 Date: Tue, 12 Nov 2013 12:01:20 +0300
 Reply-To: =?utf-8?B?0JDRhNCz0L7QvSDQpdCw0LvQuNC90LrQvtCy0YHQutCw?=
   =?utf-8?B?0Y8=?= u...@mydomain.com
 From: =?utf-8?B?0JDRhNCz0L7QvSDQpdCw0LvQuNC90LrQvtCy0YHQutCw?=
   =?utf-8?B?0Y8=?= u...@mydomain.com
 To: crew571 crew...@mail.ru
 Subject: =?utf-8?B?0Jgg0LPQvtC70L7RgSDQstC10YnQtdCz0L4g0JHQsNGP?=
   =?utf-8?B?0L3QsCw=?=
 MIME-Version: 1.0
 Content-Type: text/plain;
   charset=utf-8;
 Content-Transfer-Encoding: quoted-printable
  
  
  crew571!
  
 =D0=9F=D1=80=D0=B8=D1=8F=D0=B2 =D1=81=D1=83=D0=BF=D1=80=D1=83=D0=B6=D0=B5=
 =D1=81=D0=BA=D0=B8=D0=B9 =D0=B2=D0=B5=D0=BD=D0=B5=D1=86
 =D0=A3=D0=B6=D0=B5 =D0=BA=D0=BE=D0=BB=D0=B4=D1=83=D0=BD =D0=BF=D0=BE=D0=B4=  
 =D0=BE=D0=B1=D0=BB=D0=B0=D0=BA=D0=B0=D0=BC=D0=B8;
 Into a curious-hill'd and curious-valley'd Vast, 
 =D0=A1=D0=B1=D1=8B=D0=BB=D0=B8=D1=81=D1=8C =D0=B4=D0=B0=D0=B2=D0=BD=D0=B8=
 =D1=88=D0=BD=D0=B8=D0=B5 =D0=BC=D0=B5=D1=87=D1=82=D1=8B,
 http://mountainregionallibrary.org/awstats-icon/foto/crew571
 Swiftly responsive to the cry of ill:
 =D0=A9=D0=B8=D1=82=D1=8B =D1=82=D1=80=D0=B5=D1=89=D0=B0=D1=82, =D0=B2 =D0=
 =BA=D1=83=D1=81=D0=BA=D0=B8 =D1=80=D0=B0=D0=B7=D0=B1=D0=B8=D1=82=D1=8B...
 =D0=A3=D0=BD=D1=8B=D0=BB=D1=8B, =D0=B3=D1=80=D1=83=D0=B1=D1=8B =D0=BD=D0=B0=
 =D1=81=D0=BB=D0=B0=D0=B6=D0=B4=D0=B5=D0=BD=D1=8C=D1=8F:
 What ails thee at thy vows?
 13
  
 =D0=A1=D1=83=D1=80=D0=B5=D0=BD=D0=B4=D1=80=D0=B0 =D0=9B=D0=B0=D0=B1=D1=83=
 =D0=BD=D0=B5=D0=B9



Re: [qmailtoaster] Bounce back even I am not sent mail

2013-11-12 Thread Dan McAllister
Sebastian is mostly right - what you're getting is backscatter see 
*_http://en.wikipedia.org/wiki/Backscatter_(email)_*


But there IS something you can do about it -- especially with 
*/mail.ru/*: and that is to properly configure your SPF and/or 
DomainKeys (the /former /is far easier).
If you have a properly configured SPF entry for your domain (it goes in 
your DNS server, not necessarily your mail server), /*mail.ru*/ (which 
is actually one of the worlds largest ESPs (E-mail service providers)) 
will *reject *the message long _before _it gets to SPAM detection.


How do I know this? Because I subscribe to *DMARC *-- a method where the 
major ESPs send me a daily report of messages received and passed, as 
well as messaged rejected from my domains. (see 
_*http://en.wikipedia.org/wiki/DMARC*_**) I see reports from time to 
time from mail.ru showing rejected messages, but I never see the 
backscatter!


I hope this helps...

Dan
IT4SOHO

PS: I'm writing an article for the Wiki about DMARC -- I'll provide a 
link to the list when I'm done.


On 11/12/2013 7:45 AM, Sebastian Grewe wrote:
Some Spammer uses your mail as the FROM address for Spam. Not sure if 
you can do anything against that but I doubt it.


Cheers,
Sebastian

On Nov 12, 2013, at 11:05 AM, Linux li...@ikf.co.in 
mailto:li...@ikf.co.in wrote:



Team,
I am not sending the mails onmail.ru http://mail.ru/, but I 
received the daily failure notice as the following, please guide 
someone how this happening and how to stop it.
From:mailer-dae...@email.mydomain.com 
mailto:mailer-dae...@email.mydomain.com[mailto:mailer-dae...@email.mydomain.com]

Sent: Tuesday, November 12, 2013 2:58 PM
To:u...@mydomain.com mailto:u...@mydomain.com
Subject: failure notice
Hi. This is the qmail-send program atemail.cqra.com 
http://email.cqra.com/.
I'm afraid I wasn't able to deliver your message to the following 
addresses.

This is a permanent error; I've given up. Sorry it didn't work out.
crew...@mail.ru mailto:crew...@mail.ru:
User and password not set, continuing without authentication.
crew...@mail.ru mailto:crew...@mail.ru 94.100.176.20 failed after 
I sent the message.
Remote host said: 550 spam message rejected. Please 
visithttp://help.mail.ru/notspam-support/id?c=THgN9kw_8BCFD-q-SgAmAldgUqSIBUhpSiD
XWzSOyHRVDNJwsXVattOecD39RrDxaDQi3_anVQ8JbVsAALX30yc~ or  report 
details toab...@corp.mail.ru mailto:ab...@corp.mail.ru. Error code:

F60D784C10F03F4CBEEA0F850226004AA4526057694805885BD7204A74C88E3470D20C55B65A
75B13D709ED3F1B046FDDF2234680F55A7F6. ID: 00095B6D27D3F7B5.
--- Below this line is a copy of the message.
Return-Path: u...@mydomain.com mailto:vishwa...@durocrete.com
Received: (qmail 20154 invoked by uid 89); 12 Nov 2013 09:01:27 -
Received: by simscan 1.4.0 ppid: 20137, pid: 20147, t: 0.4466s
 scanners: attach: 1.4.0 clamav: 0.97.3/m:55/d:18031
Received: from unknown (HELOmail.promhzoj.com 
http://mail.promhzoj.com/)
(u...@mydomain.com@188.187.138.103 
mailto:vishwa...@durocrete.com@188.187.138.103)
  byemail.cqra.com http://email.cqra.com/with ESMTPA; 12 Nov 2013 
09:01:27 -

Received: from [464.19.514.13] (port=76243 helo=[89.835.936.577])
bysmtp82.i.mail.ru http://smtp82.i.mail.ru/with esmtps 
(envelope-from

u...@mydomain.com mailto:vishwa...@durocrete.com)
id 1Gucxu-0002zc-aV
forcrew...@mail.ru mailto:crew...@mail.ru; Tue, 12 Nov 2013 
12:01:20 +0300

Message-ID: DSxBTlNKQYRwUSFDahOmOEwoynUXIESyiCbZXPzRpcvFswigaz@mbnruokx
Date: Tue, 12 Nov 2013 12:01:20 +0300
Reply-To: =?utf-8?B?0JDRhNCz0L7QvSDQpdCw0LvQuNC90LrQvtCy0YHQutCw?=
  =?utf-8?B?0Y8=?= u...@mydomain.com 
mailto:vishwa...@durocrete.com

From: =?utf-8?B?0JDRhNCz0L7QvSDQpdCw0LvQuNC90LrQvtCy0YHQutCw?=
  =?utf-8?B?0Y8=?= u...@mydomain.com mailto:u...@mydomain.com
To: crew571 crew...@mail.ru mailto:crew...@mail.ru
Subject: =?utf-8?B?0Jgg0LPQvtC70L7RgSDQstC10YnQtdCz0L4g0JHQsNGP?=
  =?utf-8?B?0L3QsCw=?=
MIME-Version: 1.0
Content-Type: text/plain;
  charset=utf-8;
Content-Transfer-Encoding: quoted-printable
 crew571!
=D0=9F=D1=80=D0=B8=D1=8F=D0=B2 
=D1=81=D1=83=D0=BF=D1=80=D1=83=D0=B6=D0=B5=

=D1=81=D0=BA=D0=B8=D0=B9 =D0=B2=D0=B5=D0=BD=D0=B5=D1=86
=D0=A3=D0=B6=D0=B5 =D0=BA=D0=BE=D0=BB=D0=B4=D1=83=D0=BD 
=D0=BF=D0=BE=D0=B4= =D0=BE=D0=B1=D0=BB=D0=B0=D0=BA=D0=B0=D0=BC=D0=B8;
Into a curious-hill'd and curious-valley'd Vast, 
=D0=A1=D0=B1=D1=8B=D0=BB=D0=B8=D1=81=D1=8C 
=D0=B4=D0=B0=D0=B2=D0=BD=D0=B8=

=D1=88=D0=BD=D0=B8=D0=B5 =D0=BC=D0=B5=D1=87=D1=82=D1=8B,
http://mountainregionallibrary.org/awstats-icon/foto/crew571
Swiftly responsive to the cry of ill:
=D0=A9=D0=B8=D1=82=D1=8B =D1=82=D1=80=D0=B5=D1=89=D0=B0=D1=82, =D0=B2 
=D0=

=BA=D1=83=D1=81=D0=BA=D0=B8 =D1=80=D0=B0=D0=B7=D0=B1=D0=B8=D1=82=D1=8B...
=D0=A3=D0=BD=D1=8B=D0=BB=D1=8B, =D0=B3=D1=80=D1=83=D0=B1=D1=8B 
=D0=BD=D0=B0=

=D1=81=D0=BB=D0=B0=D0=B6=D0=B4=D0=B5=D0=BD=D1=8C=D1=8F:
What ails thee at thy vows?
13
=D0=A1=D1=83=D1=80=D0=B5=D0=BD=D0=B4=D1=80=D0=B0