Interestingly, the previous email I sent to the toaster group in
response to this thread produced one of the bogus bounce messages. Here
is that message as it was without any changes to names or addresses.
Hi. This is the qmail-send program at mail.gbco.us.
I'm afraid I wasn't able to deliver your message to the following addresses.
This is a permanent error; I've given up. Sorry it didn't work out.
<[EMAIL PROTECTED]>:
80.67.18.126 does not like recipient.
Remote host said: 554 Sorry, no mailbox here by that name. (#5.1.1)
Giving up on 80.67.18.126.
--- Below this line is a copy of the message.
Return-Path: <[EMAIL PROTECTED]>
Received: (qmail 4866 invoked by uid 89); 30 Jan 2008 11:44:34 -0000
Received: by simscan 1.3.1 ppid: 4860, pid: 4862, t: 0.2157s
scanners: attach: 1.3.1 clamav: 0.92/m:
Received: from unknown (HELO ?10.0.0.103?) ([EMAIL PROTECTED]@69.153.196.90)
by 0 with ESMTPA; 30 Jan 2008 11:44:34 -0000
Message-ID: <[EMAIL PROTECTED]>
Date: Wed, 30 Jan 2008 05:44:34 -0600
From: Gary Bowling <[EMAIL PROTECTED]>
Reply-To: [EMAIL PROTECTED]
Organization: GBCO.US
User-Agent: Thunderbird 2.0.0.9 (Windows/20071031)
MIME-Version: 1.0
To: toaster@shupp.org
Subject: Re: [toaster] Bounced email question
References: <[EMAIL PROTECTED]> <[EMAIL PROTECTED]>
In-Reply-To: <[EMAIL PROTECTED]>
Content-Type: multipart/alternative;
boundary="------------040800050900060008040002"
This is a multi-part message in MIME format.
--------------040800050900060008040002
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
In the example give, [EMAIL PROTECTED] doesn't exist on my system. That's
the "bogus" address....... ~SNIP
Tom Collins wrote:
Gary Bowling said:
--- Below this line is a copy of the message.
Return-Path: <[EMAIL PROTECTED]
Received: (qmail 14943 invoked by uid 89); 28 Jan 2008 12:30:14 -0000
Received: by simscan 1.3.1 ppid: 14938, pid: 14940, t: 0.0752s
scanners: attach: 1.3.1 clamav: 0.91.2/m:
Received: from unknown (HELO ?10.0.0.103?) ([EMAIL PROTECTED]@xx.xxx.xxx.xx)
by 0 with ESMTPA; 28 Jan 2008 12:30:14 -0000
Message-ID: <[EMAIL PROTECTED]>
Date: Mon, 28 Jan 2008 06:30:13 -0600
From: User Name <[EMAIL PROTECTED]>
Reply-To: [EMAIL PROTECTED]
Organization: company
User-Agent: Thunderbird 2.0.0.9 (Windows/20071031)
MIME-Version: 1.0
To: To User <[EMAIL PROTECTED]>
CC: CC User <[EMAIL PROTECTED]>
Subject: SUBJETC Line
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
YADA YADA note here.
--
____________________
Gary Bowling
GBCO.US
[EMAIL PROTECTED]
____________________
Does the message look like something you sent to some other address, or a
mailing list? If so, you could be getting the non-delivery notice because
the message was forwarded to a bad address.
If you look at the bottom Received line, it would appear that
[EMAIL PROTECTED] connected from IP xx.xxx.xxx.xx with SMTP authentication
in order to send the email.
Does [EMAIL PROTECTED] have a simple password? Where is the IP address that
made the connection? Could a spammer be relaying mail through your server
by guessing the account password?