rfrassetti Posted September 24, 2005 Share Posted September 24, 2005 Hi, Please bare with me as I am not very knowledgeable concerning spam and email problems, Over the last week I have had 4 instances of returned mail from accounts I do not have. Below is an example of one of the emails I received: _______________________________________________________________________ From : <MAILER-DAEMON@su9189250.aspadmin.net> Sent : Saturday, September 24, 2005 1:17 AM To : clamwj@frassettirealtors.com Subject : failure notice | | | Inbox Received: from server24.totalchoicehosting.com ([207.44.242.2]) by mc5-f2.hotmail.com with Microsoft SMTPSVC(6.0.3790.211); Fri, 23 Sep 2005 23:19:28 -0700 Received: from [216.98.145.11] (helo=su9189250.aspadmin.net)by server24.totalchoicehosting.com with esmtps (TLSv1:AES256-SHA:256)(Exim 4.52)id 1EJ3NZ-0007nr-47for clamwj@frassettirealtors.com; Sat, 24 Sep 2005 02:19:21 -0400 Received: (qmail 8079 invoked for bounce); 24 Sep 2005 06:17:51 -0000 X-Message-Info: 6sSXyD95QpXOEB6SlXwKqVgMBX8+Why6LuxiL9ctGtE= X-AntiAbuse: This header was added to track abuse, please include it with any abuse report X-AntiAbuse: Primary Hostname - server24.totalchoicehosting.com X-AntiAbuse: Original Domain - frassettirealtors.com X-AntiAbuse: Originator/Caller UID/GID - [0 0] / [47 12] X-AntiAbuse: Sender Address Domain - X-Source: X-Source-Args: X-Source-Dir: Return-Path: <> X-OriginalArrivalTime: 24 Sep 2005 06:19:29.0118 (UTC) FILETIME=[EB77AFE0:01C5C0CF] -------------------------------------------------------------------------------- View E-mail Message Source Content-Type: multipart/mixed Content-Type: text/plain Hi. This is the qmail-send program at su9189250.aspadmin.net. I'm afraid I wasn't able to deliver your message to the following addresses. This is a permanent error; I've given up. Sorry it didn't work out. <newman@coronafirm.com>: This address no longer accepts mail. --- Below this line is a copy of the message. Content-Type: message/rfc822 From: Claude Lam <clamwj@frassettirealtors.com> Subject: we want you Sent: Saturday, September 24, 2005 1:16 AM Received: (qmail 8065 invoked from network); 24 Sep 2005 06:17:46 -0000 Received: from adsl-mum-203.94.209.88.mtnl.net.in (HELO ch.mmm.com) (203.94.209.88) by su9114511.aspadmin.net with SMTP; 24 Sep 2005 06:17:46 -0000 Return-Path: <clamwj@frassettirealtors.com> X-MimeOLE: Produced By Microsoft Exchange V6.0.6726.0 Content-Type: text/html; charset=us-ascii Content-Transfer-Encoding: 8bit Hey I am Farrah I have been modeling for over 2 years now, and so have all my friends. We have been told to post our profile on the below site. Go to below site and check me and my friends out.. anulfriendly.com Please check us out, and give us some comments. You will also find millions of other great singles on the site, its one of the largest dating sites right now on the world wide web. You will find large communites from your area. Give it a try and give us a shout thru the website. Thank You very much _______________________________________________________________________________ What does this mean? Is someone using my account to send spam? If so what can I do to stop it? As I said, I'm not very knowledgeable about things like this so any advise will be greatly appreciated. Thanks for your help. Bob Following is another example of what I received. The other 2 have been deleted. Hope this helps in the "diagnosis". Thanks again, Bob _________________________________________ From : Mail Delivery System <Mailer-Daemon@mail.jodapro.com> Sent : Saturday, September 24, 2005 6:23 AM To : g_wagnerte@frassettirealtors.com Subject : Mail delivery failed: returning message to sender | | | Inbox Received: from server24.totalchoicehosting.com ([207.44.242.2]) by mc4-f8.hotmail.com with Microsoft SMTPSVC(6.0.3790.211); Sat, 24 Sep 2005 04:23:14 -0700 Received: from [216.170.113.130] (helo=mail.jodapro.com)by server24.totalchoicehosting.com with esmtps (TLSv1:DES-CBC3-SHA:168)(Exim 4.52)id 1EJ87c-0007lr-FJfor g_wagnerte@frassettirealtors.com; Sat, 24 Sep 2005 07:23:12 -0400 Received: from smmsp by mail.jodapro.com with local (Exim 4.22)id INBJN5-000G00-5Nfor g_wagnerte@frassettirealtors.com; Sat, 24 Sep 2005 04:23:29 -0700 X-Message-Info: JGTYoYF78jGoNcABN5ATiaLm4OfbXVdKzbOmTuiStag= X-Failed-Recipients: root@mail.jodapro.com Auto-Submitted: auto-generated X-AntiAbuse: This header was added to track abuse, please include it with any abuse report X-AntiAbuse: Primary Hostname - server24.totalchoicehosting.com X-AntiAbuse: Original Domain - frassettirealtors.com X-AntiAbuse: Originator/Caller UID/GID - [0 0] / [47 12] X-AntiAbuse: Sender Address Domain - X-Source: X-Source-Args: X-Source-Dir: Return-Path: <> X-OriginalArrivalTime: 24 Sep 2005 11:23:14.0768 (UTC) FILETIME=[5ACD2D00:01C5C0FA] -------------------------------------------------------------------------------- View E-mail Message Source Content-Type: text/plain This message was created automatically by mail delivery software. A message that you sent could not be delivered to one or more of its recipients. This is a permanent error. The following address(es) failed: root@mail.jodapro.com (generated from webmaster@sfmds.com) Operation timed out: retry timeout exceeded Quote Link to comment Share on other sites More sharing options...
TCH-Don Posted September 24, 2005 Share Posted September 24, 2005 Most likely this is spoofing to send spam and make it look like it came from your domain. I get the same all the time and not much we can do about it. Quote Link to comment Share on other sites More sharing options...
rfrassetti Posted September 24, 2005 Author Share Posted September 24, 2005 Appreciate the info, I was worried it was worse. Thanks, Bob Quote Link to comment Share on other sites More sharing options...
dhilke Posted October 1, 2005 Share Posted October 1, 2005 (edited) I just came to search the forum to see if I'm the only one having this problem, and I see that I am not! It's a lot more than 4 instances for me though... over just the last few days I've had HUNDREDS of messages flood my account, all returned mail from different places, coming back as undeliverable, as though they were sent from my domain. This started suddenly, just a few days ago. It's as though someone is sending out SPAM from my domain, using random.names@myacount.com and all the undeliverables are coming back to my default mail account. I saw the reply that this was probably just a tricky way to get a message into my inbox, but it sure seems like more than that. These are coming from so many different places... and it just started over night. Does anyone have any ideas?? Edited October 1, 2005 by dhilke Quote Link to comment Share on other sites More sharing options...
Madmanmcp Posted October 1, 2005 Share Posted October 1, 2005 What you are seeing is the fallout from one or more of the current Virus/trojans that are infecting thousands of computers out there. These programs search the net or the infected persons email addresses and use the domains it finds and assigns random names or letter to them and sends out Spam. There is not much you can do but weather the storm or set you default mail to ::fail::. Quote Link to comment Share on other sites More sharing options...
stevevan Posted October 1, 2005 Share Posted October 1, 2005 What Bob says is very true. Although nothing, I'm afraid, will stop spam completely, it will help cut down on the amount. I'm getting spam email sent to my "test" domain...and I don't even have any email accounts set up there! Such is life on the Internet! Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.