Re: [PHP] Fwd: Mail delivery failed: returning message to sender
Ben Brentlinger wrote: it could be that you tried a cheap hosting account with a company that have a bulk mailing script meant for sending spam. I can imagine a spammer hijacking your site to send malware from it, one of the more likely possibilities especially if you have a hosting account with cpanel. Cheap webhosting companies are more likely breading grounds for those kinds of shady charachters. I'd recommend changing webhosts immediately, and I'd recommend hostgator http://secure.hostgator.com/%7Eaffiliat/cgi-bin/affiliates/clickthru.cgi?id=BenBrent. They're not 11 or Godaddy, but there one of the biggest webhosting companies that use cpanel. I would recommend any webhosting company that use cpanel because its either harder to use, not as secure or both. Did you really say all of that and then drop an affiliate link in? Awesome. Yours, Snippily, Nathan -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php
Re: [PHP] Fwd: Mail delivery failed: returning message to sender
On Tue, 2010-11-02 at 11:10 +, Nathan Rixham wrote: Ben Brentlinger wrote: it could be that you tried a cheap hosting account with a company that have a bulk mailing script meant for sending spam. I can imagine a spammer hijacking your site to send malware from it, one of the more likely possibilities especially if you have a hosting account with cpanel. Cheap webhosting companies are more likely breading grounds for those kinds of shady charachters. I'd recommend changing webhosts immediately, and I'd recommend hostgator http://secure.hostgator.com/%7Eaffiliat/cgi-bin/affiliates/clickthru.cgi?id=BenBrent. They're not 11 or Godaddy, but there one of the biggest webhosting companies that use cpanel. I would recommend any webhosting company that use cpanel because its either harder to use, not as secure or both. Did you really say all of that and then drop an affiliate link in? Awesome. Yours, Snippily, Nathan Yeah, I think he did... now, since you all have crap hosting, let me recommend my hosting provider... http://mind.yourownbusiness.com :) I love how he plugs them, says they are not as BIG as 1and1 or GoDaddy... BUT THEY USE CPANEL then go on to say use cpanel because it's harder to use, less secure, or both? makes me want to jump right on that... brb... switching hosting providers... LOL! -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php
Re: [PHP] Fwd: Mail delivery failed: returning message to sender
On Sun, 2010-10-31 at 20:06 -0500, Tamara Temple wrote: Is this something I need to worry about?? Is my mail sending some malware?? Begin forwarded message: From: Mail Delivery Subsystem mailer-dae...@immosky.ch Date: October 31, 2010 7:37:54 PM CDT To: Tamara Temple tamouse.li...@gmail.com Subject: Mail delivery failed: returning message to sender This message was created automatically by mail delivery software. A message sent by php-general-return-309188-sascha.braun=immosky...@lists.php.net could not be delivered to all of its recipients. The following address(es) failed: sascha.br...@immosky.ch The following text was generated during the delivery attempt(s): sascha.br...@immosky.ch (reason: 550 This message contains malware (winnow.malware.wa.webinjection.1450.UNOFFICIAL)) -- This is a copy of the message, including all the headers. Received: from [192.168.1.110] (helo=mailin01.ims-firmen.de) by mail01.ims-firmen.de with esmtp (Exim 4.69) (envelope-from php-general-return-309188-sascha.braun=immosky...@lists.php.net ) id 1PCiPJ-0001i7-R8 for sascha.br...@immosky.ch; Mon, 01 Nov 2010 01:37:53 +0100 Received: from pb1.pair.com ([76.75.200.58] helo=lists.php.net) by mailin01.ims-firmen.de with esmtp (Exim 4.72) (envelope-from php-general-return-309188-sascha.braun=immosky...@lists.php.net ) id 1PCiPs-00047o-Sb for sascha.br...@immosky.ch; Mon, 01 Nov 2010 01:38:29 +0100 Authentication-Results: pb1.pair.com header.from=tamouse.li...@gmail.com ; domainkeys=bad DomainKey-Status: bad X-DomainKeys: Ecelerity dk_validate implementing draft-delany- domainkeys-base-01 X-Host-Fingerprint: 76.75.200.58 pb1.pair.com Received: from [76.75.200.58] ([76.75.200.58:2084] helo=lists.php.net) by pb1.pair.com (ecelerity 2.1.1.9-wez r(12769M)) with ESMTP id EF/73-24094-FDB0ECC4 for sascha.br...@immosky.ch; Sun, 31 Oct 2010 19:37:51 -0500 Received: (qmail 51732 invoked by uid 1010); 1 Nov 2010 00:37:02 - Mailing-List: contact php-general-h...@lists.php.net; run by ezmlm Precedence: bulk list-help: mailto:php-general-h...@lists.php.net list-unsubscribe: mailto:php-general-unsubscr...@lists.php.net list-post: mailto:php-general@lists.php.net List-Id: php-general.lists.php.net Delivered-To: mailing list php-general@lists.php.net Received: (qmail 51725 invoked from network); 1 Nov 2010 00:37:02 - Authentication-Results: pb1.pair.com header.from=tamouse.li...@gmail.com ; sender-id=pass; domainkeys=bad Authentication-Results: pb1.pair.com smtp.mail=tamouse.li...@gmail.com; spf=pass; sender-id=pass Received-SPF: pass (pb1.pair.com: domain gmail.com designates 209.85.214.170 as permitted sender) X-DomainKeys: Ecelerity dk_validate implementing draft-delany- domainkeys-base-01 X-PHP-List-Original-Sender: tamouse.li...@gmail.com X-Host-Fingerprint: 209.85.214.170 mail-iw0-f170.google.com DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:message-id:from:to :in-reply-to:content-type:content-transfer-encoding:mime- version :subject:x-priority:date:references:x-mailer; bh=1SBvdJiJMqFW3oAPgBXlRPveD1uwTXHSzA8U6+E93g0=; b=XHIyqG6ZzyCKVSLzyPdNuLXtAIWM1ny0zKFupfTsZgMElSrlCA1aJ9FpDUGvgHMQof 0ygppTTq2fo3499HwTzbRYXQSJ4Z2NiEZfYHmwwoTmuenC9XjYbPk+ZUE3p +6S4Okbsm sSzu18qFOWAGGhJ8dG8LfcDSfhKhRj3R57Yh4= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=message-id:from:to:in-reply-to:content-type :content-transfer-encoding:mime-version:subject:x- priority:date :references:x-mailer; b=CnWjshGm9zyFaRv0eUKJml94xT5U1Lb +kEBb503a7VlYtSAWaZm4nK38otH7iJ+Bit wr77nJ0SSxoXmaQ/ljQ16IoSGhhXJ9Ew6lOaBE7ntbjibfYnnz7Yzi+sfGt +8STXjHZx LP7Z8lk+uMvIH4gNDGw6CcqWawTHJ3Ll7PX7o= Message-Id: 30708a14-2818-4b28-87f9-11db56c40...@gmail.com From: Tamara Temple tamouse.li...@gmail.com To: PHP General php-general@lists.php.net In-Reply-To: dc.91.40062.3516d...@pb1.pair.com Content-Type: text/plain; charset=US-ASCII; format=flowed; delsp=yes Content-Transfer-Encoding: 7bit Mime-Version: 1.0 (Apple Message framework v936) X-Priority: 3 Date: Sun, 31 Oct 2010 19:36:53 -0500 References: 15.34.06635.e1b1b...@pb1.pair.com p06240800c8f1d19b9...@[192.168.1.2] ce.b0.10139.73c2c...@pb1.pair.com 94df613c-6b40-4897-b101-21cf7d83a...@gmail.com dc.91.40062.3516d...@pb1.pair.com X-Mailer: Apple Mail (2.936) Subject: Re: [PHP] Watermark with GD X-Envelope-To: sascha.br...@immosky.ch X-Envelope-From: php-general-return-309188-sascha.braun=immosky...@lists.php.net X-IMS-IP: 76.75.200.58 X-AV-scan: yes On Oct 31, 2010, at 7:29 AM, Gary wrote: Thanks for the reply, here is a link
Re: [PHP] Fwd: Mail delivery failed: returning message to sender
it could be that the person whom you tried email has reached the quota on their inbox. It's also possible that the person you tried emailing gave you a fake email address and it's also possible that your domain might be hosted on a cheap hosting account with a company that has been known for other people using their service to host websites that have a bulk mailing script meant for sending spam. The possibility to what could be going on are endless, but out of all the possibilities I can think of, I can't imagine a spammer hijacking your site to send malware from it being one of the more likely possibilities especially if you have a hosting account with cpanel, which is harder to gain unauthorized access to a cpanel hosting account than it is to gain access to a web server's FTP, especially if you allow public FTP uploads to the site, that can be a breading ground for hackers to upload a password sniffing script onto your site via FTP that would track back to their server, which would allow them to hack into your website. Cheap, no name webhosting companies are more likely breading grounds for those kinds of shady charachters. If you have an account with one of those no name companies, I'd recommend changing webhosts immediately, otherwise, you should be ok. If you do, though, and you're not sure who to switch to, I'd recommend hostgator http://secure.hostgator.com/%7Eaffiliat/cgi-bin/affiliates/clickthru.cgi?id=BenBrent. They're not as big as 11 or Godaddy, but there one of the biggest webhosting companies that use cpanel. I wouldn't recommend any webhosting company that doesn't use cpanel because anything else is either harder to use, not as secure or both. On 11/1/2010 3:56, Ashley Sheridan wrote: On Sun, 2010-10-31 at 20:06 -0500, Tamara Temple wrote: Is this something I need to worry about?? Is my mail sending some malware?? Begin forwarded message: From: Mail Delivery Subsystemmailer-dae...@immosky.ch Date: October 31, 2010 7:37:54 PM CDT To: Tamara Templetamouse.li...@gmail.com Subject: Mail delivery failed: returning message to sender This message was created automatically by mail delivery software. A message sent by php-general-return-309188-sascha.braun=immosky...@lists.php.net could not be delivered to all of its recipients. The following address(es) failed: sascha.br...@immosky.ch The following text was generated during the delivery attempt(s): sascha.br...@immosky.ch (reason: 550 This message contains malware (winnow.malware.wa.webinjection.1450.UNOFFICIAL)) -- This is a copy of the message, including all the headers. Received: from [192.168.1.110] (helo=mailin01.ims-firmen.de) by mail01.ims-firmen.de with esmtp (Exim 4.69) (envelope-fromphp-general-return-309188-sascha.braun=immosky...@lists.php.net ) id 1PCiPJ-0001i7-R8 for sascha.br...@immosky.ch; Mon, 01 Nov 2010 01:37:53 +0100 Received: from pb1.pair.com ([76.75.200.58] helo=lists.php.net) by mailin01.ims-firmen.de with esmtp (Exim 4.72) (envelope-fromphp-general-return-309188-sascha.braun=immosky...@lists.php.net ) id 1PCiPs-00047o-Sb for sascha.br...@immosky.ch; Mon, 01 Nov 2010 01:38:29 +0100 Authentication-Results: pb1.pair.com header.from=tamouse.li...@gmail.com ; domainkeys=bad DomainKey-Status: bad X-DomainKeys: Ecelerity dk_validate implementing draft-delany- domainkeys-base-01 X-Host-Fingerprint: 76.75.200.58 pb1.pair.com Received: from [76.75.200.58] ([76.75.200.58:2084] helo=lists.php.net) by pb1.pair.com (ecelerity 2.1.1.9-wez r(12769M)) with ESMTP id EF/73-24094-FDB0ECC4 forsascha.br...@immosky.ch; Sun, 31 Oct 2010 19:37:51 -0500 Received: (qmail 51732 invoked by uid 1010); 1 Nov 2010 00:37:02 - Mailing-List: contact php-general-h...@lists.php.net; run by ezmlm Precedence: bulk list-help:mailto:php-general-h...@lists.php.net list-unsubscribe:mailto:php-general-unsubscr...@lists.php.net list-post:mailto:php-general@lists.php.net List-Id: php-general.lists.php.net Delivered-To: mailing list php-general@lists.php.net Received: (qmail 51725 invoked from network); 1 Nov 2010 00:37:02 - Authentication-Results: pb1.pair.com header.from=tamouse.li...@gmail.com ; sender-id=pass; domainkeys=bad Authentication-Results: pb1.pair.com smtp.mail=tamouse.li...@gmail.com; spf=pass; sender-id=pass Received-SPF: pass (pb1.pair.com: domain gmail.com designates 209.85.214.170 as permitted sender) X-DomainKeys: Ecelerity dk_validate implementing draft-delany- domainkeys-base-01 X-PHP-List-Original-Sender: tamouse.li...@gmail.com X-Host-Fingerprint: 209.85.214.170 mail-iw0-f170.google.com DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:message-id:from:to :in-reply-to:content-type:content-transfer-encoding:mime- version :subject:x-priority:date:references:x-mailer;
Re: [PHP] Fwd: Mail delivery failed: returning message to sender
It's not to do with hosting, its an auto reply when you email sascha.braun which gave the same aware reply to me, and I'm on a Linux box at home! Thanks, Ash http://www.ashleysheridan.co.uk - Reply message - From: Ben Brentlinger b...@benbrent.com Date: Mon, Nov 1, 2010 08:29 Subject: [PHP] Fwd: Mail delivery failed: returning message to sender To: php-general@lists.php.net it could be that the person whom you tried email has reached the quota on their inbox. It's also possible that the person you tried emailing gave you a fake email address and it's also possible that your domain might be hosted on a cheap hosting account with a company that has been known for other people using their service to host websites that have a bulk mailing script meant for sending spam. The possibility to what could be going on are endless, but out of all the possibilities I can think of, I can't imagine a spammer hijacking your site to send malware from it being one of the more likely possibilities especially if you have a hosting account with cpanel, which is harder to gain unauthorized access to a cpanel hosting account than it is to gain access to a web server's FTP, especially if you allow public FTP uploads to the site, that can be a breading ground for hackers to upload a password sniffing script onto your site via FTP that would track back to their server, which would allow them to hack into your website. Cheap, no name webhosting companies are more likely breading grounds for those kinds of shady charachters. If you have an account with one of those no name companies, I'd recommend changing webhosts immediately, otherwise, you should be ok. If you do, though, and you're not sure who to switch to, I'd recommend hostgator http://secure.hostgator.com/%7Eaffiliat/cgi-bin/affiliates/clickthru.cgi?id=BenBrent. They're not as big as 11 or Godaddy, but there one of the biggest webhosting companies that use cpanel. I wouldn't recommend any webhosting company that doesn't use cpanel because anything else is either harder to use, not as secure or both. On 11/1/2010 3:56, Ashley Sheridan wrote: On Sun, 2010-10-31 at 20:06 -0500, Tamara Temple wrote: Is this something I need to worry about?? Is my mail sending some malware?? Begin forwarded message: From: Mail Delivery Subsystemmailer-dae...@immosky.ch Date: October 31, 2010 7:37:54 PM CDT To: Tamara Templetamouse.li...@gmail.com Subject: Mail delivery failed: returning message to sender This message was created automatically by mail delivery software. A message sent by php-general-return-309188-sascha.braun=immosky...@lists.php.net could not be delivered to all of its recipients. The following address(es) failed: sascha.br...@immosky.ch The following text was generated during the delivery attempt(s): sascha.br...@immosky.ch (reason: 550 This message contains malware (winnow.malware.wa.webinjection.1450.UNOFFICIAL)) -- This is a copy of the message, including all the headers. Received: from [192.168.1.110] (helo=mailin01.ims-firmen.de) by mail01.ims-firmen.de with esmtp (Exim 4.69) (envelope-fromphp-general-return-309188-sascha.braun=immosky...@lists.php.net ) id 1PCiPJ-0001i7-R8 for sascha.br...@immosky.ch; Mon, 01 Nov 2010 01:37:53 +0100 Received: from pb1.pair.com ([76.75.200.58] helo=lists.php.net) by mailin01.ims-firmen.de with esmtp (Exim 4.72) (envelope-fromphp-general-return-309188-sascha.braun=immosky...@lists.php.net ) id 1PCiPs-00047o-Sb for sascha.br...@immosky.ch; Mon, 01 Nov 2010 01:38:29 +0100 Authentication-Results: pb1.pair.com header.from=tamouse.li...@gmail.com ; domainkeys=bad DomainKey-Status: bad X-DomainKeys: Ecelerity dk_validate implementing draft-delany- domainkeys-base-01 X-Host-Fingerprint: 76.75.200.58 pb1.pair.com Received: from [76.75.200.58] ([76.75.200.58:2084] helo=lists.php.net) by pb1.pair.com (ecelerity 2.1.1.9-wez r(12769M)) with ESMTP id EF/73-24094-FDB0ECC4 forsascha.br...@immosky.ch; Sun, 31 Oct 2010 19:37:51 -0500 Received: (qmail 51732 invoked by uid 1010); 1 Nov 2010 00:37:02 - Mailing-List: contact php-general-h...@lists.php.net; run by ezmlm Precedence: bulk list-help:mailto:php-general-h...@lists.php.net list-unsubscribe:mailto:php-general-unsubscr...@lists.php.net list-post:mailto:php-general@lists.php.net List-Id: php-general.lists.php.net Delivered-To: mailing list php-general@lists.php.net Received: (qmail 51725 invoked from network); 1 Nov 2010 00:37:02 - Authentication-Results: pb1.pair.com header.from=tamouse.li...@gmail.com ; sender-id=pass; domainkeys=bad Authentication-Results: pb1.pair.com smtp.mail=tamouse.li...@gmail.com; spf=pass; sender-id=pass Received-SPF: pass (pb1.pair.com: domain gmail.com designates 209.85.214.170 as permitted sender) X-DomainKeys: Ecelerity dk_validate implementing draft-delany- domainkeys-base-01 X-PHP-List-Original
Re: [PHP] Fwd: Mail delivery failed: returning message to sender
her inbox is probably full than On 11/1/2010 5:30, a...@ashleysheridan.co.uk wrote: It's not to do with hosting, its an auto reply when you email sascha.braun which gave the same aware reply to me, and I'm on a Linux box at home! Thanks, Ash http://www.ashleysheridan.co.uk - Reply message - From: Ben Brentlinger b...@benbrent.com Date: Mon, Nov 1, 2010 08:29 Subject: [PHP] Fwd: Mail delivery failed: returning message to sender To: php-general@lists.php.net it could be that the person whom you tried email has reached the quota on their inbox. It's also possible that the person you tried emailing gave you a fake email address and it's also possible that your domain might be hosted on a cheap hosting account with a company that has been known for other people using their service to host websites that have a bulk mailing script meant for sending spam. The possibility to what could be going on are endless, but out of all the possibilities I can think of, I can't imagine a spammer hijacking your site to send malware from it being one of the more likely possibilities especially if you have a hosting account with cpanel, which is harder to gain unauthorized access to a cpanel hosting account than it is to gain access to a web server's FTP, especially if you allow public FTP uploads to the site, that can be a breading ground for hackers to upload a password sniffing script onto your site via FTP that would track back to their server, which would allow them to hack into your website. Cheap, no name webhosting companies are more likely breading grounds for those kinds of shady charachters. If you have an account with one of those no name companies, I'd recommend changing webhosts immediately, otherwise, you should be ok. If you do, though, and you're not sure who to switch to, I'd recommend hostgator http://secure.hostgator.com/%7Eaffiliat/cgi-bin/affiliates/clickthru.cgi?id=BenBrent. They're not as big as 11 or Godaddy, but there one of the biggest webhosting companies that use cpanel. I wouldn't recommend any webhosting company that doesn't use cpanel because anything else is either harder to use, not as secure or both. On 11/1/2010 3:56, Ashley Sheridan wrote: On Sun, 2010-10-31 at 20:06 -0500, Tamara Temple wrote: Is this something I need to worry about?? Is my mail sending some malware?? Begin forwarded message: From: Mail Delivery Subsystemmailer-dae...@immosky.ch Date: October 31, 2010 7:37:54 PM CDT To: Tamara Templetamouse.li...@gmail.com Subject: Mail delivery failed: returning message to sender This message was created automatically by mail delivery software. A message sent by php-general-return-309188-sascha.braun=immosky...@lists.php.net could not be delivered to all of its recipients. The following address(es) failed: sascha.br...@immosky.ch The following text was generated during the delivery attempt(s): sascha.br...@immosky.ch (reason: 550 This message contains malware (winnow.malware.wa.webinjection.1450.UNOFFICIAL)) -- This is a copy of the message, including all the headers. Received: from [192.168.1.110] (helo=mailin01.ims-firmen.de) by mail01.ims-firmen.de with esmtp (Exim 4.69) (envelope-fromphp-general-return-309188-sascha.braun=immosky...@lists.php.net ) id 1PCiPJ-0001i7-R8 for sascha.br...@immosky.ch; Mon, 01 Nov 2010 01:37:53 +0100 Received: from pb1.pair.com ([76.75.200.58] helo=lists.php.net) by mailin01.ims-firmen.de with esmtp (Exim 4.72) (envelope-fromphp-general-return-309188-sascha.braun=immosky...@lists.php.net ) id 1PCiPs-00047o-Sb for sascha.br...@immosky.ch; Mon, 01 Nov 2010 01:38:29 +0100 Authentication-Results: pb1.pair.com header.from=tamouse.li...@gmail.com ; domainkeys=bad DomainKey-Status: bad X-DomainKeys: Ecelerity dk_validate implementing draft-delany- domainkeys-base-01 X-Host-Fingerprint: 76.75.200.58 pb1.pair.com Received: from [76.75.200.58] ([76.75.200.58:2084] helo=lists.php.net) by pb1.pair.com (ecelerity 2.1.1.9-wez r(12769M)) with ESMTP id EF/73-24094-FDB0ECC4 forsascha.br...@immosky.ch; Sun, 31 Oct 2010 19:37:51 -0500 Received: (qmail 51732 invoked by uid 1010); 1 Nov 2010 00:37:02 - Mailing-List: contact php-general-h...@lists.php.net; run by ezmlm Precedence: bulk list-help:mailto:php-general-h...@lists.php.net list-unsubscribe:mailto:php-general-unsubscr...@lists.php.net list-post:mailto:php-general@lists.php.net List-Id: php-general.lists.php.net Delivered-To: mailing list php-general@lists.php.net Received: (qmail 51725 invoked from network); 1 Nov 2010 00:37:02 - Authentication-Results: pb1.pair.com header.from=tamouse.li...@gmail.com ; sender-id=pass; domainkeys=bad Authentication-Results: pb1.pair.com smtp.mail=tamouse.li...@gmail.com; spf=pass; sender-id=pass Received-SPF: pass (pb1.pair.com: domain gmail.com designates 209.85.214.170 as permitted sender) X-DomainKeys: Ecelerity dk_validate implementing draft-delany- domainkeys
Re: [PHP] Fwd: Mail delivery failed: returning message to sender
It looks like someone is using a very old copy of the winnow unofficial clamav files. There was a pastie that contained a zeus injection some time ago but it has been removed and the former signature was removed from our database at that time. Tom Begin forwarded message: From: Tamara Temple tamouse.li...@gmail.com Date: October 31, 2010 9:06:01 PM EDT To: PHP General php-general@lists.php.net Subject: [PHP] Fwd: Mail delivery failed: returning message to sender Is this something I need to worry about?? Is my mail sending some malware?? Begin forwarded message: From: Mail Delivery Subsystem mailer-dae...@immosky.ch Date: October 31, 2010 7:37:54 PM CDT To: Tamara Temple tamouse.li...@gmail.com Subject: Mail delivery failed: returning message to sender This message was created automatically by mail delivery software. A message sent by php-general-return-309188-sascha.braun=immosky...@lists.php.net could not be delivered to all of its recipients. The following address(es) failed: sascha.br...@immosky.ch The following text was generated during the delivery attempt(s): sascha.br...@immosky.ch (reason: 550 This message contains malware (winnow.malware.wa.webinjection.1450.UNOFFICIAL)) -- This is a copy of the message, including all the headers. Received: from [192.168.1.110] (helo=mailin01.ims-firmen.de) by mail01.ims-firmen.de with esmtp (Exim 4.69) (envelope-from php-general-return-309188-sascha.braun=immosky...@lists.php.net) id 1PCiPJ-0001i7-R8 for sascha.br...@immosky.ch; Mon, 01 Nov 2010 01:37:53 +0100 Received: from pb1.pair.com ([76.75.200.58] helo=lists.php.net) by mailin01.ims-firmen.de with esmtp (Exim 4.72) (envelope-from php-general-return-309188-sascha.braun=immosky...@lists.php.net) id 1PCiPs-00047o-Sb for sascha.br...@immosky.ch; Mon, 01 Nov 2010 01:38:29 +0100 Authentication-Results: pb1.pair.com header.from=tamouse.li...@gmail.com; domainkeys=bad DomainKey-Status: bad X-DomainKeys: Ecelerity dk_validate implementing draft-delany-domainkeys-base-01 X-Host-Fingerprint: 76.75.200.58 pb1.pair.com Received: from [76.75.200.58] ([76.75.200.58:2084] helo=lists.php.net) by pb1.pair.com (ecelerity 2.1.1.9-wez r(12769M)) with ESMTP id EF/73-24094-FDB0ECC4 for sascha.br...@immosky.ch; Sun, 31 Oct 2010 19:37:51 -0500 Received: (qmail 51732 invoked by uid 1010); 1 Nov 2010 00:37:02 - Mailing-List: contact php-general-h...@lists.php.net; run by ezmlm Precedence: bulk list-help: mailto:php-general-h...@lists.php.net list-unsubscribe: mailto:php-general-unsubscr...@lists.php.net list-post: mailto:php-general@lists.php.net List-Id: php-general.lists.php.net Delivered-To: mailing list php-general@lists.php.net Received: (qmail 51725 invoked from network); 1 Nov 2010 00:37:02 - Authentication-Results: pb1.pair.com header.from=tamouse.li...@gmail.com; sender-id=pass; domainkeys=bad Authentication-Results: pb1.pair.com smtp.mail=tamouse.li...@gmail.com; spf=pass; sender-id=pass Received-SPF: pass (pb1.pair.com: domain gmail.com designates 209.85.214.170 as permitted sender) X-DomainKeys: Ecelerity dk_validate implementing draft-delany-domainkeys-base-01 X-PHP-List-Original-Sender: tamouse.li...@gmail.com X-Host-Fingerprint: 209.85.214.170 mail-iw0-f170.google.com DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:message-id:from:to :in-reply-to:content-type:content-transfer-encoding:mime-version :subject:x-priority:date:references:x-mailer; bh=1SBvdJiJMqFW3oAPgBXlRPveD1uwTXHSzA8U6+E93g0=; b=XHIyqG6ZzyCKVSLzyPdNuLXtAIWM1ny0zKFupfTsZgMElSrlCA1aJ9FpDUGvgHMQof 0ygppTTq2fo3499HwTzbRYXQSJ4Z2NiEZfYHmwwoTmuenC9XjYbPk+ZUE3p+6S4Okbsm sSzu18qFOWAGGhJ8dG8LfcDSfhKhRj3R57Yh4= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=message-id:from:to:in-reply-to:content-type :content-transfer-encoding:mime-version:subject:x-priority:date :references:x-mailer; b=CnWjshGm9zyFaRv0eUKJml94xT5U1Lb+kEBb503a7VlYtSAWaZm4nK38otH7iJ+Bit wr77nJ0SSxoXmaQ/ljQ16IoSGhhXJ9Ew6lOaBE7ntbjibfYnnz7Yzi+sfGt+8STXjHZx LP7Z8lk+uMvIH4gNDGw6CcqWawTHJ3Ll7PX7o= Message-Id: 30708a14-2818-4b28-87f9-11db56c40...@gmail.com From: Tamara Temple tamouse.li...@gmail.com To: PHP General php-general@lists.php.net In-Reply-To: dc.91.40062.3516d...@pb1.pair.com Content-Type: text/plain; charset=US-ASCII; format=flowed; delsp=yes Content-Transfer-Encoding: 7bit Mime-Version: 1.0 (Apple Message framework v936) X-Priority: 3 Date: Sun, 31 Oct 2010 19:36:53 -0500 References: 15.34.06635.e1b1b...@pb1.pair.com p06240800c8f1d19b9...@[192.168.1.2] ce.b0.10139.73c2c...@pb1.pair.com 94df613c-6b40-4897-b101-21cf7d83a...@gmail.com dc.91.40062.3516d...@pb1.pair.com X-Mailer: Apple Mail (2.936) Subject: Re: [PHP
Re: [PHP] Fwd: Mail delivery failed: returning message to sender
On Mon, 2010-11-01 at 04:29 -0400, Ben Brentlinger wrote: it could be that the person whom you tried email has reached the quota on their inbox. It's also possible that the person you tried emailing gave you a fake email address and it's also possible that your domain might be hosted on a cheap hosting account with a company that has been known for other people using their service to host websites that have a bulk mailing script meant for sending spam. The possibility to what could be going on are endless, but out of all the possibilities I can think of, I can't imagine a spammer hijacking your site to send malware from it being one of the more likely possibilities especially if you have a hosting account with cpanel, which is harder to gain unauthorized access to a cpanel hosting account than it is to gain access to a web server's FTP, especially if you allow public FTP uploads to the site, that can be a breading ground for hackers to upload a password sniffing script onto your site via FTP that would track back to their server, which would allow them to hack into your website. Cheap, no name webhosting companies are more likely breading grounds for those kinds of shady charachters. You must be one of them, because using scare tactics and lies to sell hosting plans is shady dude and thats exactly what your doing. If you have an account with one of those no name companies, I'd recommend changing webhosts immediately, otherwise, you should be ok. If you do, though, and you're not sure who to switch to, I'd recommend hostgator http://secure.hostgator.com/%7Eaffiliat/cgi-bin/affiliates/clickthru.cgi?id=BenBrent. They're not as big as 11 or Godaddy, but there one of the biggest webhosting companies that use cpanel. I wouldn't recommend any webhosting company that doesn't use cpanel because anything else is either harder to use, not as secure or both. -- Blessings David M. -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php
Re: [PHP] Fwd: Mail delivery failed: returning message to sender
On Sun, Oct 31, 2010 at 21:06, Tamara Temple tamouse.li...@gmail.com wrote: Is this something I need to worry about?? Is my mail sending some malware?? No, you're safe in this case. sascha.br...@immosky.ch (reason: 550 This message contains malware (winnow.malware.wa.webinjection.1450.UNOFFICIAL)) Sascha's server's scanner (say that three times fast) is having a fit over this: this. (See your code at http://pastie.org/1262989). A version of ClamAV released during the spring of this year erroneously catches all URLs from pastie.org as malware. -- /Daniel P. Brown Dedicated Servers, Cloud and Cloud Hybrid Solutions, VPS, Hosting (866-) 725-4321 http://www.parasane.net/ -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php
Re: [PHP] Fwd: Mail delivery failed: returning message to sender
On Mon, Nov 1, 2010 at 04:29, Ben Brentlinger b...@benbrent.com wrote: should be ok. If you do, though, and you're not sure who to switch to, I'd recommend hostgator http://secure.hostgator.com/%7Eaffiliat/cgi-bin/affiliates/clickthru.cgi?id=?php echo base64_decode('V2F5IHRvIFNQQU0gZXZlcnlvbmUsIGxvc2VyLg=='); ?. You just shot any chance of credibility you could ever hope to have in this community. Give yourself a round of applause. -- /Daniel P. Brown Dedicated Servers, Cloud and Cloud Hybrid Solutions, VPS, Hosting (866-) 725-4321 http://www.parasane.net/ -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php
[PHP] Fwd: Mail delivery failed: returning message to sender
Is this something I need to worry about?? Is my mail sending some malware?? Begin forwarded message: From: Mail Delivery Subsystem mailer-dae...@immosky.ch Date: October 31, 2010 7:37:54 PM CDT To: Tamara Temple tamouse.li...@gmail.com Subject: Mail delivery failed: returning message to sender This message was created automatically by mail delivery software. A message sent by php-general-return-309188-sascha.braun=immosky...@lists.php.net could not be delivered to all of its recipients. The following address(es) failed: sascha.br...@immosky.ch The following text was generated during the delivery attempt(s): sascha.br...@immosky.ch (reason: 550 This message contains malware (winnow.malware.wa.webinjection.1450.UNOFFICIAL)) -- This is a copy of the message, including all the headers. Received: from [192.168.1.110] (helo=mailin01.ims-firmen.de) by mail01.ims-firmen.de with esmtp (Exim 4.69) (envelope-from php-general-return-309188-sascha.braun=immosky...@lists.php.net ) id 1PCiPJ-0001i7-R8 for sascha.br...@immosky.ch; Mon, 01 Nov 2010 01:37:53 +0100 Received: from pb1.pair.com ([76.75.200.58] helo=lists.php.net) by mailin01.ims-firmen.de with esmtp (Exim 4.72) (envelope-from php-general-return-309188-sascha.braun=immosky...@lists.php.net ) id 1PCiPs-00047o-Sb for sascha.br...@immosky.ch; Mon, 01 Nov 2010 01:38:29 +0100 Authentication-Results: pb1.pair.com header.from=tamouse.li...@gmail.com ; domainkeys=bad DomainKey-Status: bad X-DomainKeys: Ecelerity dk_validate implementing draft-delany- domainkeys-base-01 X-Host-Fingerprint: 76.75.200.58 pb1.pair.com Received: from [76.75.200.58] ([76.75.200.58:2084] helo=lists.php.net) by pb1.pair.com (ecelerity 2.1.1.9-wez r(12769M)) with ESMTP id EF/73-24094-FDB0ECC4 for sascha.br...@immosky.ch; Sun, 31 Oct 2010 19:37:51 -0500 Received: (qmail 51732 invoked by uid 1010); 1 Nov 2010 00:37:02 - Mailing-List: contact php-general-h...@lists.php.net; run by ezmlm Precedence: bulk list-help: mailto:php-general-h...@lists.php.net list-unsubscribe: mailto:php-general-unsubscr...@lists.php.net list-post: mailto:php-general@lists.php.net List-Id: php-general.lists.php.net Delivered-To: mailing list php-general@lists.php.net Received: (qmail 51725 invoked from network); 1 Nov 2010 00:37:02 - Authentication-Results: pb1.pair.com header.from=tamouse.li...@gmail.com ; sender-id=pass; domainkeys=bad Authentication-Results: pb1.pair.com smtp.mail=tamouse.li...@gmail.com; spf=pass; sender-id=pass Received-SPF: pass (pb1.pair.com: domain gmail.com designates 209.85.214.170 as permitted sender) X-DomainKeys: Ecelerity dk_validate implementing draft-delany- domainkeys-base-01 X-PHP-List-Original-Sender: tamouse.li...@gmail.com X-Host-Fingerprint: 209.85.214.170 mail-iw0-f170.google.com DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:message-id:from:to :in-reply-to:content-type:content-transfer-encoding:mime- version :subject:x-priority:date:references:x-mailer; bh=1SBvdJiJMqFW3oAPgBXlRPveD1uwTXHSzA8U6+E93g0=; b=XHIyqG6ZzyCKVSLzyPdNuLXtAIWM1ny0zKFupfTsZgMElSrlCA1aJ9FpDUGvgHMQof 0ygppTTq2fo3499HwTzbRYXQSJ4Z2NiEZfYHmwwoTmuenC9XjYbPk+ZUE3p +6S4Okbsm sSzu18qFOWAGGhJ8dG8LfcDSfhKhRj3R57Yh4= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=message-id:from:to:in-reply-to:content-type :content-transfer-encoding:mime-version:subject:x- priority:date :references:x-mailer; b=CnWjshGm9zyFaRv0eUKJml94xT5U1Lb +kEBb503a7VlYtSAWaZm4nK38otH7iJ+Bit wr77nJ0SSxoXmaQ/ljQ16IoSGhhXJ9Ew6lOaBE7ntbjibfYnnz7Yzi+sfGt +8STXjHZx LP7Z8lk+uMvIH4gNDGw6CcqWawTHJ3Ll7PX7o= Message-Id: 30708a14-2818-4b28-87f9-11db56c40...@gmail.com From: Tamara Temple tamouse.li...@gmail.com To: PHP General php-general@lists.php.net In-Reply-To: dc.91.40062.3516d...@pb1.pair.com Content-Type: text/plain; charset=US-ASCII; format=flowed; delsp=yes Content-Transfer-Encoding: 7bit Mime-Version: 1.0 (Apple Message framework v936) X-Priority: 3 Date: Sun, 31 Oct 2010 19:36:53 -0500 References: 15.34.06635.e1b1b...@pb1.pair.com p06240800c8f1d19b9...@[192.168.1.2] ce.b0.10139.73c2c...@pb1.pair.com 94df613c-6b40-4897-b101-21cf7d83a...@gmail.com dc.91.40062.3516d...@pb1.pair.com X-Mailer: Apple Mail (2.936) Subject: Re: [PHP] Watermark with GD X-Envelope-To: sascha.br...@immosky.ch X-Envelope-From: php-general-return-309188-sascha.braun=immosky...@lists.php.net X-IMS-IP: 76.75.200.58 X-AV-scan: yes On Oct 31, 2010, at 7:29 AM, Gary wrote: Thanks for the reply, here is a link to the code of the page. http://www.paulgdesigns.com/detailcode.php Ok, that was pretty messy code. But what I could glean from it is this. (See your code at http://pastie.org/1262989). Line 238: table border=2 cellpadding=0 width=100% trtd