Can someone help me understand what happens here? I get bounced messages
some times
from users (including myself some times) where the bounced message says
that the
user address is unknown.
However, the user address listed is not an address that any mail was
sent to. I have
done virus scans, spyware scans, etc. and find nothing.
I have searched the qmail logs and never find a message that was sent to
the listed
user. I have searched the qmail logs for the Message-ID and only find it
in the mail
that is correctly addressed to the real people the original message was
sent to (not the
listed person in the bounce)
I assume something really is sending a message to this bogus user? How
can I track this down and
correct it? I'm concerned that somehow my server or my clients are truly
sending email to
unknown places due to some type of virus, spyware, or other error and
would like to know how
to track these down.
Is it maybe something on the receiving end pc?
I've been using the toaster for several years and really like it, thanks
Bill for all the good
work!!
Here is an example of the type of bounce referred to. There is no
evidence that my client or my server ever sent
anything to "[EMAIL PROTECTED]" (real addresses changed to protect the
innocent or the guilty as the case may be) or the
ip address listed for this user.
----------------------------------------------------------------
Hi. This is the qmail-send program at mail.company.
I'm afraid I wasn't able to deliver your message to the following addresses.
This is a permanent error; I've given up. Sorry it didn't work out.
<[EMAIL PROTECTED]>:
xxx.xxx.xxx.xx does not like recipient.
Remote host said: 550 5.1.1 <[EMAIL PROTECTED]>... User unknown
Giving up on xxx.xxx.xxx.xx.
--- Below this line is a copy of the message.
Return-Path: <[EMAIL PROTECTED]
Received: (qmail 14943 invoked by uid 89); 28 Jan 2008 12:30:14 -0000
Received: by simscan 1.3.1 ppid: 14938, pid: 14940, t: 0.0752s
scanners: attach: 1.3.1 clamav: 0.91.2/m:
Received: from unknown (HELO ?10.0.0.103?) ([EMAIL PROTECTED]@xx.xxx.xxx.xx)
by 0 with ESMTPA; 28 Jan 2008 12:30:14 -0000
Message-ID: <[EMAIL PROTECTED]>
Date: Mon, 28 Jan 2008 06:30:13 -0600
From: User Name <[EMAIL PROTECTED]>
Reply-To: [EMAIL PROTECTED]
Organization: company
User-Agent: Thunderbird 2.0.0.9 (Windows/20071031)
MIME-Version: 1.0
To: To User <[EMAIL PROTECTED]>
CC: CC User <[EMAIL PROTECTED]>
Subject: SUBJETC Line
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
YADA YADA note here.
--
____________________
Gary Bowling
GBCO.US
[EMAIL PROTECTED]
____________________
