Re: [PHP] Fwd: Mail delivery failed: returning message to sender

2010-11-02 Thread Nathan Rixham

Ben Brentlinger wrote:

it could be that you tried a cheap hosting account with a company that
have a bulk mailing script meant for sending spam. I can imagine a spammer
hijacking your site to send malware from it, one of the more likely
possibilities especially if you have a hosting account with cpanel.
Cheap webhosting companies are more likely breading grounds for those
kinds of shady charachters. I'd recommend changing webhosts immediately,
and I'd recommend hostgator 
http://secure.hostgator.com/%7Eaffiliat/cgi-bin/affiliates/clickthru.cgi?id=BenBrent.  

They're not 11 or Godaddy, but there one of the biggest 
webhosting companies that use cpanel. I would recommend any 
webhosting company that use cpanel because its either harder

to use, not as secure or both.


Did you really say all of that and then drop an affiliate link in? Awesome.

Yours, Snippily,

Nathan

--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php



Re: [PHP] Fwd: Mail delivery failed: returning message to sender

2010-11-02 Thread Steve Staples
On Tue, 2010-11-02 at 11:10 +, Nathan Rixham wrote:
 Ben Brentlinger wrote:
  it could be that you tried a cheap hosting account with a company that
  have a bulk mailing script meant for sending spam. I can imagine a spammer
  hijacking your site to send malware from it, one of the more likely
  possibilities especially if you have a hosting account with cpanel.
  Cheap webhosting companies are more likely breading grounds for those
  kinds of shady charachters. I'd recommend changing webhosts immediately,
  and I'd recommend hostgator 
  http://secure.hostgator.com/%7Eaffiliat/cgi-bin/affiliates/clickthru.cgi?id=BenBrent.

  
  They're not 11 or Godaddy, but there one of the biggest 
  webhosting companies that use cpanel. I would recommend any 
  webhosting company that use cpanel because its either harder
  to use, not as secure or both.
 
 Did you really say all of that and then drop an affiliate link in? Awesome.
 
 Yours, Snippily,
 
 Nathan
 

Yeah, I think he did...

now, since you all have crap hosting, let me recommend my hosting
provider...

http://mind.yourownbusiness.com :)

I love how he plugs them, says they are not as BIG as 1and1 or
GoDaddy... BUT THEY USE CPANEL   then go on to say use cpanel
because it's harder to use, less secure, or both?   makes me want to
jump right on that...

brb... switching hosting providers... LOL!




-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php



Re: [PHP] Fwd: Mail delivery failed: returning message to sender

2010-11-01 Thread Ashley Sheridan
On Sun, 2010-10-31 at 20:06 -0500, Tamara Temple wrote:

 Is this something I need to worry about?? Is my mail sending some  
 malware??
 
 Begin forwarded message:
 
  From: Mail Delivery Subsystem mailer-dae...@immosky.ch
  Date: October 31, 2010 7:37:54 PM CDT
  To: Tamara Temple tamouse.li...@gmail.com
  Subject: Mail delivery failed: returning message to sender
 
  This message was created automatically by mail delivery software.
 
  A message sent by
 
   php-general-return-309188-sascha.braun=immosky...@lists.php.net
 
  could not be delivered to all of its recipients.
  The following address(es) failed:
 
   sascha.br...@immosky.ch
 
  The following text was generated during the delivery attempt(s):
 
  sascha.br...@immosky.ch
 (reason: 550 This message contains malware  
  (winnow.malware.wa.webinjection.1450.UNOFFICIAL))
 
  -- This is a copy of the message, including all the headers.
 
  Received: from [192.168.1.110] (helo=mailin01.ims-firmen.de)
  by mail01.ims-firmen.de with esmtp (Exim 4.69)
  (envelope-from 
  php-general-return-309188-sascha.braun=immosky...@lists.php.net 
  )
  id 1PCiPJ-0001i7-R8
  for sascha.br...@immosky.ch; Mon, 01 Nov 2010 01:37:53 +0100
  Received: from pb1.pair.com ([76.75.200.58] helo=lists.php.net)
  by mailin01.ims-firmen.de with esmtp (Exim 4.72)
  (envelope-from 
  php-general-return-309188-sascha.braun=immosky...@lists.php.net 
  )
  id 1PCiPs-00047o-Sb
  for sascha.br...@immosky.ch; Mon, 01 Nov 2010 01:38:29 +0100
  Authentication-Results: pb1.pair.com header.from=tamouse.li...@gmail.com 
  ; domainkeys=bad
  DomainKey-Status: bad
  X-DomainKeys: Ecelerity dk_validate implementing draft-delany- 
  domainkeys-base-01
  X-Host-Fingerprint: 76.75.200.58 pb1.pair.com
  Received: from [76.75.200.58] ([76.75.200.58:2084] helo=lists.php.net)
  by pb1.pair.com (ecelerity 2.1.1.9-wez r(12769M)) with ESMTP
  id EF/73-24094-FDB0ECC4 for sascha.br...@immosky.ch; Sun, 31 Oct  
  2010 19:37:51 -0500
  Received: (qmail 51732 invoked by uid 1010); 1 Nov 2010 00:37:02 -
  Mailing-List: contact php-general-h...@lists.php.net; run by ezmlm
  Precedence: bulk
  list-help: mailto:php-general-h...@lists.php.net
  list-unsubscribe: mailto:php-general-unsubscr...@lists.php.net
  list-post: mailto:php-general@lists.php.net
  List-Id: php-general.lists.php.net
  Delivered-To: mailing list php-general@lists.php.net
  Received: (qmail 51725 invoked from network); 1 Nov 2010 00:37:02  
  -
  Authentication-Results: pb1.pair.com header.from=tamouse.li...@gmail.com 
  ; sender-id=pass; domainkeys=bad
  Authentication-Results: pb1.pair.com  
  smtp.mail=tamouse.li...@gmail.com; spf=pass; sender-id=pass
  Received-SPF: pass (pb1.pair.com: domain gmail.com designates  
  209.85.214.170 as permitted sender)
  X-DomainKeys: Ecelerity dk_validate implementing draft-delany- 
  domainkeys-base-01
  X-PHP-List-Original-Sender: tamouse.li...@gmail.com
  X-Host-Fingerprint: 209.85.214.170 mail-iw0-f170.google.com
  DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
 d=gmail.com; s=gamma;
 h=domainkey-signature:received:received:message-id:from:to
  :in-reply-to:content-type:content-transfer-encoding:mime- 
  version
  :subject:x-priority:date:references:x-mailer;
 bh=1SBvdJiJMqFW3oAPgBXlRPveD1uwTXHSzA8U6+E93g0=;
  
  b=XHIyqG6ZzyCKVSLzyPdNuLXtAIWM1ny0zKFupfTsZgMElSrlCA1aJ9FpDUGvgHMQof
  0ygppTTq2fo3499HwTzbRYXQSJ4Z2NiEZfYHmwwoTmuenC9XjYbPk+ZUE3p 
  +6S4Okbsm
  sSzu18qFOWAGGhJ8dG8LfcDSfhKhRj3R57Yh4=
  DomainKey-Signature: a=rsa-sha1; c=nofws;
 d=gmail.com; s=gamma;
 h=message-id:from:to:in-reply-to:content-type
  :content-transfer-encoding:mime-version:subject:x- 
  priority:date
  :references:x-mailer;
 b=CnWjshGm9zyFaRv0eUKJml94xT5U1Lb 
  +kEBb503a7VlYtSAWaZm4nK38otH7iJ+Bit
  wr77nJ0SSxoXmaQ/ljQ16IoSGhhXJ9Ew6lOaBE7ntbjibfYnnz7Yzi+sfGt 
  +8STXjHZx
  LP7Z8lk+uMvIH4gNDGw6CcqWawTHJ3Ll7PX7o=
  Message-Id: 30708a14-2818-4b28-87f9-11db56c40...@gmail.com
  From: Tamara Temple tamouse.li...@gmail.com
  To: PHP General php-general@lists.php.net
  In-Reply-To: dc.91.40062.3516d...@pb1.pair.com
  Content-Type: text/plain; charset=US-ASCII; format=flowed; delsp=yes
  Content-Transfer-Encoding: 7bit
  Mime-Version: 1.0 (Apple Message framework v936)
  X-Priority: 3
  Date: Sun, 31 Oct 2010 19:36:53 -0500
  References: 15.34.06635.e1b1b...@pb1.pair.com  
  p06240800c8f1d19b9...@[192.168.1.2] ce.b0.10139.73c2c...@pb1.pair.com 
   94df613c-6b40-4897-b101-21cf7d83a...@gmail.com 
   dc.91.40062.3516d...@pb1.pair.com 
  
  X-Mailer: Apple Mail (2.936)
  Subject: Re: [PHP] Watermark with GD
  X-Envelope-To: sascha.br...@immosky.ch
  X-Envelope-From: 
  php-general-return-309188-sascha.braun=immosky...@lists.php.net
  X-IMS-IP: 76.75.200.58
  X-AV-scan: yes
 
 
  On Oct 31, 2010, at 7:29 AM, Gary wrote:
  Thanks for the reply, here is a link 

Re: [PHP] Fwd: Mail delivery failed: returning message to sender

2010-11-01 Thread Ben Brentlinger
it could be that the person whom you tried email has reached the quota 
on their inbox.  It's also possible that the person you tried emailing 
gave you a fake email address and it's also possible that your domain 
might be hosted on a cheap hosting account with a company that has been 
known for other people using their service to host websites that have a 
bulk mailing script meant for sending spam.  The possibility to what 
could be going on are endless, but out of all the possibilities I can 
think of, I can't imagine a spammer hijacking your site to send malware 
from it being one of the more likely possibilities especially if you 
have a hosting account with cpanel, which is harder to gain unauthorized 
access to a cpanel hosting account than it is to gain access to a web 
server's FTP, especially if you allow public FTP uploads to the site, 
that can be a breading ground for hackers to upload a password sniffing 
script onto your site via FTP that would track back to their server, 
which would allow them to hack into your website.  Cheap, no name 
webhosting companies are more likely breading grounds for those kinds of 
shady charachters.  If you have an account with one of those no name 
companies, I'd recommend changing webhosts immediately, otherwise, you 
should be ok.  If you do, though, and you're not sure who to switch to, 
I'd recommend hostgator 
http://secure.hostgator.com/%7Eaffiliat/cgi-bin/affiliates/clickthru.cgi?id=BenBrent. 



They're not as big as 11 or Godaddy, but there one of the biggest 
webhosting companies that use cpanel.  I wouldn't recommend any 
webhosting company that doesn't use cpanel because anything else is 
either harder to use, not as secure or both.


On 11/1/2010 3:56, Ashley Sheridan wrote:

On Sun, 2010-10-31 at 20:06 -0500, Tamara Temple wrote:


Is this something I need to worry about?? Is my mail sending some
malware??

Begin forwarded message:


From: Mail Delivery Subsystemmailer-dae...@immosky.ch
Date: October 31, 2010 7:37:54 PM CDT
To: Tamara Templetamouse.li...@gmail.com
Subject: Mail delivery failed: returning message to sender

This message was created automatically by mail delivery software.

A message sent by

  php-general-return-309188-sascha.braun=immosky...@lists.php.net

could not be delivered to all of its recipients.
The following address(es) failed:

  sascha.br...@immosky.ch

The following text was generated during the delivery attempt(s):

sascha.br...@immosky.ch
(reason: 550 This message contains malware
(winnow.malware.wa.webinjection.1450.UNOFFICIAL))

-- This is a copy of the message, including all the headers.

Received: from [192.168.1.110] (helo=mailin01.ims-firmen.de)
by mail01.ims-firmen.de with esmtp (Exim 4.69)

(envelope-fromphp-general-return-309188-sascha.braun=immosky...@lists.php.net

)

id 1PCiPJ-0001i7-R8
for sascha.br...@immosky.ch; Mon, 01 Nov 2010 01:37:53 +0100
Received: from pb1.pair.com ([76.75.200.58] helo=lists.php.net)
by mailin01.ims-firmen.de with esmtp (Exim 4.72)

(envelope-fromphp-general-return-309188-sascha.braun=immosky...@lists.php.net

)

id 1PCiPs-00047o-Sb
for sascha.br...@immosky.ch; Mon, 01 Nov 2010 01:38:29 +0100
Authentication-Results: pb1.pair.com header.from=tamouse.li...@gmail.com
; domainkeys=bad
DomainKey-Status: bad
X-DomainKeys: Ecelerity dk_validate implementing draft-delany-
domainkeys-base-01
X-Host-Fingerprint: 76.75.200.58 pb1.pair.com
Received: from [76.75.200.58] ([76.75.200.58:2084] helo=lists.php.net)
by pb1.pair.com (ecelerity 2.1.1.9-wez r(12769M)) with ESMTP
id EF/73-24094-FDB0ECC4 forsascha.br...@immosky.ch; Sun, 31 Oct
2010 19:37:51 -0500
Received: (qmail 51732 invoked by uid 1010); 1 Nov 2010 00:37:02 -
Mailing-List: contact php-general-h...@lists.php.net; run by ezmlm
Precedence: bulk
list-help:mailto:php-general-h...@lists.php.net
list-unsubscribe:mailto:php-general-unsubscr...@lists.php.net
list-post:mailto:php-general@lists.php.net
List-Id: php-general.lists.php.net
Delivered-To: mailing list php-general@lists.php.net
Received: (qmail 51725 invoked from network); 1 Nov 2010 00:37:02
-
Authentication-Results: pb1.pair.com header.from=tamouse.li...@gmail.com
; sender-id=pass; domainkeys=bad
Authentication-Results: pb1.pair.com
smtp.mail=tamouse.li...@gmail.com; spf=pass; sender-id=pass
Received-SPF: pass (pb1.pair.com: domain gmail.com designates
209.85.214.170 as permitted sender)
X-DomainKeys: Ecelerity dk_validate implementing draft-delany-
domainkeys-base-01
X-PHP-List-Original-Sender: tamouse.li...@gmail.com
X-Host-Fingerprint: 209.85.214.170 mail-iw0-f170.google.com
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=gamma;
h=domainkey-signature:received:received:message-id:from:to
 :in-reply-to:content-type:content-transfer-encoding:mime-
version
 :subject:x-priority:date:references:x-mailer;

Re: [PHP] Fwd: Mail delivery failed: returning message to sender

2010-11-01 Thread a...@ashleysheridan.co.uk
It's not to do with hosting, its an auto reply when you email sascha.braun 
which gave the same aware reply to me, and I'm on a Linux box at home!

Thanks,
Ash
http://www.ashleysheridan.co.uk

- Reply message -
From: Ben Brentlinger b...@benbrent.com
Date: Mon, Nov 1, 2010 08:29
Subject: [PHP] Fwd: Mail delivery failed: returning message to sender
To: php-general@lists.php.net

it could be that the person whom you tried email has reached the quota 
on their inbox.  It's also possible that the person you tried emailing 
gave you a fake email address and it's also possible that your domain 
might be hosted on a cheap hosting account with a company that has been 
known for other people using their service to host websites that have a 
bulk mailing script meant for sending spam.  The possibility to what 
could be going on are endless, but out of all the possibilities I can 
think of, I can't imagine a spammer hijacking your site to send malware 
from it being one of the more likely possibilities especially if you 
have a hosting account with cpanel, which is harder to gain unauthorized 
access to a cpanel hosting account than it is to gain access to a web 
server's FTP, especially if you allow public FTP uploads to the site, 
that can be a breading ground for hackers to upload a password sniffing 
script onto your site via FTP that would track back to their server, 
which would allow them to hack into your website.  Cheap, no name 
webhosting companies are more likely breading grounds for those kinds of 
shady charachters.  If you have an account with one of those no name 
companies, I'd recommend changing webhosts immediately, otherwise, you 
should be ok.  If you do, though, and you're not sure who to switch to, 
I'd recommend hostgator 
http://secure.hostgator.com/%7Eaffiliat/cgi-bin/affiliates/clickthru.cgi?id=BenBrent.
 


They're not as big as 11 or Godaddy, but there one of the biggest 
webhosting companies that use cpanel.  I wouldn't recommend any 
webhosting company that doesn't use cpanel because anything else is 
either harder to use, not as secure or both.

On 11/1/2010 3:56, Ashley Sheridan wrote:
 On Sun, 2010-10-31 at 20:06 -0500, Tamara Temple wrote:

 Is this something I need to worry about?? Is my mail sending some
 malware??

 Begin forwarded message:

 From: Mail Delivery Subsystemmailer-dae...@immosky.ch
 Date: October 31, 2010 7:37:54 PM CDT
 To: Tamara Templetamouse.li...@gmail.com
 Subject: Mail delivery failed: returning message to sender

 This message was created automatically by mail delivery software.

 A message sent by

   php-general-return-309188-sascha.braun=immosky...@lists.php.net

 could not be delivered to all of its recipients.
 The following address(es) failed:

   sascha.br...@immosky.ch

 The following text was generated during the delivery attempt(s):

 sascha.br...@immosky.ch
 (reason: 550 This message contains malware
 (winnow.malware.wa.webinjection.1450.UNOFFICIAL))

 -- This is a copy of the message, including all the headers.

 Received: from [192.168.1.110] (helo=mailin01.ims-firmen.de)
 by mail01.ims-firmen.de with esmtp (Exim 4.69)
 
 (envelope-fromphp-general-return-309188-sascha.braun=immosky...@lists.php.net
 )
 id 1PCiPJ-0001i7-R8
 for sascha.br...@immosky.ch; Mon, 01 Nov 2010 01:37:53 +0100
 Received: from pb1.pair.com ([76.75.200.58] helo=lists.php.net)
 by mailin01.ims-firmen.de with esmtp (Exim 4.72)
 
 (envelope-fromphp-general-return-309188-sascha.braun=immosky...@lists.php.net
 )
 id 1PCiPs-00047o-Sb
 for sascha.br...@immosky.ch; Mon, 01 Nov 2010 01:38:29 +0100
 Authentication-Results: pb1.pair.com header.from=tamouse.li...@gmail.com
 ; domainkeys=bad
 DomainKey-Status: bad
 X-DomainKeys: Ecelerity dk_validate implementing draft-delany-
 domainkeys-base-01
 X-Host-Fingerprint: 76.75.200.58 pb1.pair.com
 Received: from [76.75.200.58] ([76.75.200.58:2084] helo=lists.php.net)
 by pb1.pair.com (ecelerity 2.1.1.9-wez r(12769M)) with ESMTP
 id EF/73-24094-FDB0ECC4 forsascha.br...@immosky.ch; Sun, 31 Oct
 2010 19:37:51 -0500
 Received: (qmail 51732 invoked by uid 1010); 1 Nov 2010 00:37:02 -
 Mailing-List: contact php-general-h...@lists.php.net; run by ezmlm
 Precedence: bulk
 list-help:mailto:php-general-h...@lists.php.net
 list-unsubscribe:mailto:php-general-unsubscr...@lists.php.net
 list-post:mailto:php-general@lists.php.net
 List-Id: php-general.lists.php.net
 Delivered-To: mailing list php-general@lists.php.net
 Received: (qmail 51725 invoked from network); 1 Nov 2010 00:37:02
 -
 Authentication-Results: pb1.pair.com header.from=tamouse.li...@gmail.com
 ; sender-id=pass; domainkeys=bad
 Authentication-Results: pb1.pair.com
 smtp.mail=tamouse.li...@gmail.com; spf=pass; sender-id=pass
 Received-SPF: pass (pb1.pair.com: domain gmail.com designates
 209.85.214.170 as permitted sender)
 X-DomainKeys: Ecelerity dk_validate implementing draft-delany-
 domainkeys-base-01
 X-PHP-List-Original

Re: [PHP] Fwd: Mail delivery failed: returning message to sender

2010-11-01 Thread Ben Brentlinger

her inbox is probably full than

On 11/1/2010 5:30, a...@ashleysheridan.co.uk wrote:
It's not to do with hosting, its an auto reply when you email 
sascha.braun which gave the same aware reply to me, and I'm on a Linux 
box at home!


Thanks,
Ash
http://www.ashleysheridan.co.uk

- Reply message -
From: Ben Brentlinger b...@benbrent.com
Date: Mon, Nov 1, 2010 08:29
Subject: [PHP] Fwd: Mail delivery failed: returning message to sender
To: php-general@lists.php.net

it could be that the person whom you tried email has reached the quota
on their inbox.  It's also possible that the person you tried emailing
gave you a fake email address and it's also possible that your domain
might be hosted on a cheap hosting account with a company that has been
known for other people using their service to host websites that have a
bulk mailing script meant for sending spam.  The possibility to what
could be going on are endless, but out of all the possibilities I can
think of, I can't imagine a spammer hijacking your site to send malware
from it being one of the more likely possibilities especially if you
have a hosting account with cpanel, which is harder to gain unauthorized
access to a cpanel hosting account than it is to gain access to a web
server's FTP, especially if you allow public FTP uploads to the site,
that can be a breading ground for hackers to upload a password sniffing
script onto your site via FTP that would track back to their server,
which would allow them to hack into your website.  Cheap, no name
webhosting companies are more likely breading grounds for those kinds of
shady charachters.  If you have an account with one of those no name
companies, I'd recommend changing webhosts immediately, otherwise, you
should be ok.  If you do, though, and you're not sure who to switch to,
I'd recommend hostgator
http://secure.hostgator.com/%7Eaffiliat/cgi-bin/affiliates/clickthru.cgi?id=BenBrent. 




They're not as big as 11 or Godaddy, but there one of the biggest
webhosting companies that use cpanel.  I wouldn't recommend any
webhosting company that doesn't use cpanel because anything else is
either harder to use, not as secure or both.

On 11/1/2010 3:56, Ashley Sheridan wrote:
 On Sun, 2010-10-31 at 20:06 -0500, Tamara Temple wrote:

 Is this something I need to worry about?? Is my mail sending some
 malware??

 Begin forwarded message:

 From: Mail Delivery Subsystemmailer-dae...@immosky.ch
 Date: October 31, 2010 7:37:54 PM CDT
 To: Tamara Templetamouse.li...@gmail.com
 Subject: Mail delivery failed: returning message to sender

 This message was created automatically by mail delivery software.

 A message sent by

 php-general-return-309188-sascha.braun=immosky...@lists.php.net

 could not be delivered to all of its recipients.
 The following address(es) failed:

 sascha.br...@immosky.ch

 The following text was generated during the delivery attempt(s):

 sascha.br...@immosky.ch
 (reason: 550 This message contains malware
 (winnow.malware.wa.webinjection.1450.UNOFFICIAL))

 -- This is a copy of the message, including all the headers.

 Received: from [192.168.1.110] (helo=mailin01.ims-firmen.de)
 by mail01.ims-firmen.de with esmtp (Exim 4.69)
 
(envelope-fromphp-general-return-309188-sascha.braun=immosky...@lists.php.net

 )
 id 1PCiPJ-0001i7-R8
 for sascha.br...@immosky.ch; Mon, 01 Nov 2010 01:37:53 +0100
 Received: from pb1.pair.com ([76.75.200.58] helo=lists.php.net)
 by mailin01.ims-firmen.de with esmtp (Exim 4.72)
 
(envelope-fromphp-general-return-309188-sascha.braun=immosky...@lists.php.net

 )
 id 1PCiPs-00047o-Sb
 for sascha.br...@immosky.ch; Mon, 01 Nov 2010 01:38:29 +0100
 Authentication-Results: pb1.pair.com 
header.from=tamouse.li...@gmail.com

 ; domainkeys=bad
 DomainKey-Status: bad
 X-DomainKeys: Ecelerity dk_validate implementing draft-delany-
 domainkeys-base-01
 X-Host-Fingerprint: 76.75.200.58 pb1.pair.com
 Received: from [76.75.200.58] ([76.75.200.58:2084] helo=lists.php.net)
 by pb1.pair.com (ecelerity 2.1.1.9-wez r(12769M)) with ESMTP
 id EF/73-24094-FDB0ECC4 forsascha.br...@immosky.ch; Sun, 31 Oct
 2010 19:37:51 -0500
 Received: (qmail 51732 invoked by uid 1010); 1 Nov 2010 00:37:02 -
 Mailing-List: contact php-general-h...@lists.php.net; run by ezmlm
 Precedence: bulk
 list-help:mailto:php-general-h...@lists.php.net
 list-unsubscribe:mailto:php-general-unsubscr...@lists.php.net
 list-post:mailto:php-general@lists.php.net
 List-Id: php-general.lists.php.net
 Delivered-To: mailing list php-general@lists.php.net
 Received: (qmail 51725 invoked from network); 1 Nov 2010 00:37:02
 -
 Authentication-Results: pb1.pair.com 
header.from=tamouse.li...@gmail.com

 ; sender-id=pass; domainkeys=bad
 Authentication-Results: pb1.pair.com
 smtp.mail=tamouse.li...@gmail.com; spf=pass; sender-id=pass
 Received-SPF: pass (pb1.pair.com: domain gmail.com designates
 209.85.214.170 as permitted sender)
 X-DomainKeys: Ecelerity dk_validate implementing draft-delany-
 domainkeys

Re: [PHP] Fwd: Mail delivery failed: returning message to sender

2010-11-01 Thread TR Shaw
It looks like someone is using a very old copy of the winnow unofficial clamav 
files.  There was a pastie that contained a zeus injection some time ago but it 
has been removed and the former signature was removed from our database at that 
time.

Tom

Begin forwarded message:

 From: Tamara Temple tamouse.li...@gmail.com
 Date: October 31, 2010 9:06:01 PM EDT
 To: PHP General php-general@lists.php.net
 Subject: [PHP] Fwd: Mail delivery failed: returning message to sender
 
 Is this something I need to worry about?? Is my mail sending some malware??
 
 Begin forwarded message:
 
 From: Mail Delivery Subsystem mailer-dae...@immosky.ch
 Date: October 31, 2010 7:37:54 PM CDT
 To: Tamara Temple tamouse.li...@gmail.com
 Subject: Mail delivery failed: returning message to sender
 
 This message was created automatically by mail delivery software.
 
 A message sent by
 
 php-general-return-309188-sascha.braun=immosky...@lists.php.net
 
 could not be delivered to all of its recipients.
 The following address(es) failed:
 
 sascha.br...@immosky.ch
 
 The following text was generated during the delivery attempt(s):
 
 sascha.br...@immosky.ch
   (reason: 550 This message contains malware 
 (winnow.malware.wa.webinjection.1450.UNOFFICIAL))
 
 -- This is a copy of the message, including all the headers.
 
 Received: from [192.168.1.110] (helo=mailin01.ims-firmen.de)
  by mail01.ims-firmen.de with esmtp (Exim 4.69)
  (envelope-from 
 php-general-return-309188-sascha.braun=immosky...@lists.php.net)
  id 1PCiPJ-0001i7-R8
  for sascha.br...@immosky.ch; Mon, 01 Nov 2010 01:37:53 +0100
 Received: from pb1.pair.com ([76.75.200.58] helo=lists.php.net)
  by mailin01.ims-firmen.de with esmtp (Exim 4.72)
  (envelope-from 
 php-general-return-309188-sascha.braun=immosky...@lists.php.net)
  id 1PCiPs-00047o-Sb
  for sascha.br...@immosky.ch; Mon, 01 Nov 2010 01:38:29 +0100
 Authentication-Results: pb1.pair.com header.from=tamouse.li...@gmail.com; 
 domainkeys=bad
 DomainKey-Status: bad
 X-DomainKeys: Ecelerity dk_validate implementing 
 draft-delany-domainkeys-base-01
 X-Host-Fingerprint: 76.75.200.58 pb1.pair.com
 Received: from [76.75.200.58] ([76.75.200.58:2084] helo=lists.php.net)
  by pb1.pair.com (ecelerity 2.1.1.9-wez r(12769M)) with ESMTP
  id EF/73-24094-FDB0ECC4 for sascha.br...@immosky.ch; Sun, 31 Oct 2010 
 19:37:51 -0500
 Received: (qmail 51732 invoked by uid 1010); 1 Nov 2010 00:37:02 -
 Mailing-List: contact php-general-h...@lists.php.net; run by ezmlm
 Precedence: bulk
 list-help: mailto:php-general-h...@lists.php.net
 list-unsubscribe: mailto:php-general-unsubscr...@lists.php.net
 list-post: mailto:php-general@lists.php.net
 List-Id: php-general.lists.php.net
 Delivered-To: mailing list php-general@lists.php.net
 Received: (qmail 51725 invoked from network); 1 Nov 2010 00:37:02 -
 Authentication-Results: pb1.pair.com header.from=tamouse.li...@gmail.com; 
 sender-id=pass; domainkeys=bad
 Authentication-Results: pb1.pair.com smtp.mail=tamouse.li...@gmail.com; 
 spf=pass; sender-id=pass
 Received-SPF: pass (pb1.pair.com: domain gmail.com designates 209.85.214.170 
 as permitted sender)
 X-DomainKeys: Ecelerity dk_validate implementing 
 draft-delany-domainkeys-base-01
 X-PHP-List-Original-Sender: tamouse.li...@gmail.com
 X-Host-Fingerprint: 209.85.214.170 mail-iw0-f170.google.com
 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
   d=gmail.com; s=gamma;
   h=domainkey-signature:received:received:message-id:from:to
:in-reply-to:content-type:content-transfer-encoding:mime-version
:subject:x-priority:date:references:x-mailer;
   bh=1SBvdJiJMqFW3oAPgBXlRPveD1uwTXHSzA8U6+E93g0=;
   b=XHIyqG6ZzyCKVSLzyPdNuLXtAIWM1ny0zKFupfTsZgMElSrlCA1aJ9FpDUGvgHMQof
0ygppTTq2fo3499HwTzbRYXQSJ4Z2NiEZfYHmwwoTmuenC9XjYbPk+ZUE3p+6S4Okbsm
sSzu18qFOWAGGhJ8dG8LfcDSfhKhRj3R57Yh4=
 DomainKey-Signature: a=rsa-sha1; c=nofws;
   d=gmail.com; s=gamma;
   h=message-id:from:to:in-reply-to:content-type
:content-transfer-encoding:mime-version:subject:x-priority:date
:references:x-mailer;
   b=CnWjshGm9zyFaRv0eUKJml94xT5U1Lb+kEBb503a7VlYtSAWaZm4nK38otH7iJ+Bit
wr77nJ0SSxoXmaQ/ljQ16IoSGhhXJ9Ew6lOaBE7ntbjibfYnnz7Yzi+sfGt+8STXjHZx
LP7Z8lk+uMvIH4gNDGw6CcqWawTHJ3Ll7PX7o=
 Message-Id: 30708a14-2818-4b28-87f9-11db56c40...@gmail.com
 From: Tamara Temple tamouse.li...@gmail.com
 To: PHP General php-general@lists.php.net
 In-Reply-To: dc.91.40062.3516d...@pb1.pair.com
 Content-Type: text/plain; charset=US-ASCII; format=flowed; delsp=yes
 Content-Transfer-Encoding: 7bit
 Mime-Version: 1.0 (Apple Message framework v936)
 X-Priority: 3
 Date: Sun, 31 Oct 2010 19:36:53 -0500
 References: 15.34.06635.e1b1b...@pb1.pair.com 
 p06240800c8f1d19b9...@[192.168.1.2] ce.b0.10139.73c2c...@pb1.pair.com 
 94df613c-6b40-4897-b101-21cf7d83a...@gmail.com 
 dc.91.40062.3516d...@pb1.pair.com
 X-Mailer: Apple Mail (2.936)
 Subject: Re: [PHP

Re: [PHP] Fwd: Mail delivery failed: returning message to sender

2010-11-01 Thread David McGlone
On Mon, 2010-11-01 at 04:29 -0400, Ben Brentlinger wrote:
 it could be that the person whom you tried email has reached the quota 
 on their inbox.  It's also possible that the person you tried emailing 
 gave you a fake email address and it's also possible that your domain 
 might be hosted on a cheap hosting account with a company that has been 
 known for other people using their service to host websites that have a 
 bulk mailing script meant for sending spam.  The possibility to what 
 could be going on are endless, but out of all the possibilities I can 
 think of, I can't imagine a spammer hijacking your site to send malware 
 from it being one of the more likely possibilities especially if you 
 have a hosting account with cpanel, which is harder to gain unauthorized 
 access to a cpanel hosting account than it is to gain access to a web 
 server's FTP, especially if you allow public FTP uploads to the site, 
 that can be a breading ground for hackers to upload a password sniffing 
 script onto your site via FTP that would track back to their server, 
 which would allow them to hack into your website.  Cheap, no name 
 webhosting companies are more likely breading grounds for those kinds of 
 shady charachters.

You must be one of them, because using scare tactics and lies to sell
hosting plans is shady dude and thats exactly what your doing.



   If you have an account with one of those no name 
 companies, I'd recommend changing webhosts immediately, otherwise, you 
 should be ok.  If you do, though, and you're not sure who to switch to, 
 I'd recommend hostgator 
 http://secure.hostgator.com/%7Eaffiliat/cgi-bin/affiliates/clickthru.cgi?id=BenBrent.
  
 
 
 They're not as big as 11 or Godaddy, but there one of the biggest 
 webhosting companies that use cpanel.  I wouldn't recommend any 
 webhosting company that doesn't use cpanel because anything else is 
 either harder to use, not as secure or both.


-- 
Blessings
David M.


-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php



Re: [PHP] Fwd: Mail delivery failed: returning message to sender

2010-11-01 Thread Daniel P. Brown
On Sun, Oct 31, 2010 at 21:06, Tamara Temple tamouse.li...@gmail.com wrote:
 Is this something I need to worry about?? Is my mail sending some malware??

No, you're safe in this case.

 sascha.br...@immosky.ch
   (reason: 550 This message contains malware
 (winnow.malware.wa.webinjection.1450.UNOFFICIAL))

Sascha's server's scanner (say that three times fast) is having a
fit over this:

 this. (See your code at http://pastie.org/1262989).

A version of ClamAV released during the spring of this year
erroneously catches all URLs from pastie.org as malware.

-- 
/Daniel P. Brown
Dedicated Servers, Cloud and Cloud Hybrid Solutions, VPS, Hosting
(866-) 725-4321
http://www.parasane.net/

--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php



Re: [PHP] Fwd: Mail delivery failed: returning message to sender

2010-11-01 Thread Daniel P. Brown
On Mon, Nov 1, 2010 at 04:29, Ben Brentlinger b...@benbrent.com wrote:

 should be ok.  If you do, though, and you're not sure who to switch to, I'd
 recommend hostgator
 http://secure.hostgator.com/%7Eaffiliat/cgi-bin/affiliates/clickthru.cgi?id=?php
  echo base64_decode('V2F5IHRvIFNQQU0gZXZlcnlvbmUsIGxvc2VyLg=='); ?.

You just shot any chance of credibility you could ever hope to
have in this community.  Give yourself a round of applause.

-- 
/Daniel P. Brown
Dedicated Servers, Cloud and Cloud Hybrid Solutions, VPS, Hosting
(866-) 725-4321
http://www.parasane.net/

--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php



[PHP] Fwd: Mail delivery failed: returning message to sender

2010-10-31 Thread Tamara Temple
Is this something I need to worry about?? Is my mail sending some  
malware??


Begin forwarded message:


From: Mail Delivery Subsystem mailer-dae...@immosky.ch
Date: October 31, 2010 7:37:54 PM CDT
To: Tamara Temple tamouse.li...@gmail.com
Subject: Mail delivery failed: returning message to sender

This message was created automatically by mail delivery software.

A message sent by

 php-general-return-309188-sascha.braun=immosky...@lists.php.net

could not be delivered to all of its recipients.
The following address(es) failed:

 sascha.br...@immosky.ch

The following text was generated during the delivery attempt(s):

sascha.br...@immosky.ch
   (reason: 550 This message contains malware  
(winnow.malware.wa.webinjection.1450.UNOFFICIAL))


-- This is a copy of the message, including all the headers.

Received: from [192.168.1.110] (helo=mailin01.ims-firmen.de)
by mail01.ims-firmen.de with esmtp (Exim 4.69)
	(envelope-from php-general-return-309188-sascha.braun=immosky...@lists.php.net 
)

id 1PCiPJ-0001i7-R8
for sascha.br...@immosky.ch; Mon, 01 Nov 2010 01:37:53 +0100
Received: from pb1.pair.com ([76.75.200.58] helo=lists.php.net)
by mailin01.ims-firmen.de with esmtp (Exim 4.72)
	(envelope-from php-general-return-309188-sascha.braun=immosky...@lists.php.net 
)

id 1PCiPs-00047o-Sb
for sascha.br...@immosky.ch; Mon, 01 Nov 2010 01:38:29 +0100
Authentication-Results: pb1.pair.com header.from=tamouse.li...@gmail.com 
; domainkeys=bad

DomainKey-Status: bad
X-DomainKeys: Ecelerity dk_validate implementing draft-delany- 
domainkeys-base-01

X-Host-Fingerprint: 76.75.200.58 pb1.pair.com
Received: from [76.75.200.58] ([76.75.200.58:2084] helo=lists.php.net)
by pb1.pair.com (ecelerity 2.1.1.9-wez r(12769M)) with ESMTP
	id EF/73-24094-FDB0ECC4 for sascha.br...@immosky.ch; Sun, 31 Oct  
2010 19:37:51 -0500

Received: (qmail 51732 invoked by uid 1010); 1 Nov 2010 00:37:02 -
Mailing-List: contact php-general-h...@lists.php.net; run by ezmlm
Precedence: bulk
list-help: mailto:php-general-h...@lists.php.net
list-unsubscribe: mailto:php-general-unsubscr...@lists.php.net
list-post: mailto:php-general@lists.php.net
List-Id: php-general.lists.php.net
Delivered-To: mailing list php-general@lists.php.net
Received: (qmail 51725 invoked from network); 1 Nov 2010 00:37:02  
-
Authentication-Results: pb1.pair.com header.from=tamouse.li...@gmail.com 
; sender-id=pass; domainkeys=bad
Authentication-Results: pb1.pair.com  
smtp.mail=tamouse.li...@gmail.com; spf=pass; sender-id=pass
Received-SPF: pass (pb1.pair.com: domain gmail.com designates  
209.85.214.170 as permitted sender)
X-DomainKeys: Ecelerity dk_validate implementing draft-delany- 
domainkeys-base-01

X-PHP-List-Original-Sender: tamouse.li...@gmail.com
X-Host-Fingerprint: 209.85.214.170 mail-iw0-f170.google.com
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
   d=gmail.com; s=gamma;
   h=domainkey-signature:received:received:message-id:from:to
:in-reply-to:content-type:content-transfer-encoding:mime- 
version

:subject:x-priority:date:references:x-mailer;
   bh=1SBvdJiJMqFW3oAPgBXlRPveD1uwTXHSzA8U6+E93g0=;

b=XHIyqG6ZzyCKVSLzyPdNuLXtAIWM1ny0zKFupfTsZgMElSrlCA1aJ9FpDUGvgHMQof
0ygppTTq2fo3499HwTzbRYXQSJ4Z2NiEZfYHmwwoTmuenC9XjYbPk+ZUE3p 
+6S4Okbsm

sSzu18qFOWAGGhJ8dG8LfcDSfhKhRj3R57Yh4=
DomainKey-Signature: a=rsa-sha1; c=nofws;
   d=gmail.com; s=gamma;
   h=message-id:from:to:in-reply-to:content-type
:content-transfer-encoding:mime-version:subject:x- 
priority:date

:references:x-mailer;
   b=CnWjshGm9zyFaRv0eUKJml94xT5U1Lb 
+kEBb503a7VlYtSAWaZm4nK38otH7iJ+Bit
wr77nJ0SSxoXmaQ/ljQ16IoSGhhXJ9Ew6lOaBE7ntbjibfYnnz7Yzi+sfGt 
+8STXjHZx

LP7Z8lk+uMvIH4gNDGw6CcqWawTHJ3Ll7PX7o=
Message-Id: 30708a14-2818-4b28-87f9-11db56c40...@gmail.com
From: Tamara Temple tamouse.li...@gmail.com
To: PHP General php-general@lists.php.net
In-Reply-To: dc.91.40062.3516d...@pb1.pair.com
Content-Type: text/plain; charset=US-ASCII; format=flowed; delsp=yes
Content-Transfer-Encoding: 7bit
Mime-Version: 1.0 (Apple Message framework v936)
X-Priority: 3
Date: Sun, 31 Oct 2010 19:36:53 -0500
References: 15.34.06635.e1b1b...@pb1.pair.com  
p06240800c8f1d19b9...@[192.168.1.2] ce.b0.10139.73c2c...@pb1.pair.com 
 94df613c-6b40-4897-b101-21cf7d83a...@gmail.com dc.91.40062.3516d...@pb1.pair.com 


X-Mailer: Apple Mail (2.936)
Subject: Re: [PHP] Watermark with GD
X-Envelope-To: sascha.br...@immosky.ch
X-Envelope-From: php-general-return-309188-sascha.braun=immosky...@lists.php.net
X-IMS-IP: 76.75.200.58
X-AV-scan: yes


On Oct 31, 2010, at 7:29 AM, Gary wrote:

Thanks for the reply, here is a link to the code of the page.

http://www.paulgdesigns.com/detailcode.php



Ok, that was pretty messy code. But what I could glean from it is
this. (See your code at http://pastie.org/1262989).

Line 238: table border=2 cellpadding=0 width=100% trtd