Windows OS
 
Forums: » Register « |  User CP |  Games |  Calendar |  Members |  FAQs |  Sitemap |  Support | 
 
 
User Name:
Password:
Remember me
Go Back   ASP Free ForumsSystem AdministrationWindows OS

Reply
Add This Thread To:
  Del.icio.us   Digg   Google   Spurl   Blink   Furl   Simpy   Y! MyWeb 
Thread Tools Search this Thread Rate Thread Display Modes
 
Unread ASP Free Forums Sponsor:
  #1  
Old December 9th, 2004, 04:28 PM
norml318 norml318 is offline
Contributing User
ASP Free Newbie (0 - 499 posts)
 
Join Date: May 2004
Location: Melbourne Australia
Posts: 49 norml318 User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: 18 h 54 m 8 sec
Reputation Power: 5
Exclamation Email Problem

Cannot work out why a person at my work is receiving email not directly addressed

to him. He is receiving over 100 per day.
He is receiving emails addressed to,
eg
user-account@ourdomainname.com.au
mail-boxes@ourdomainname.com.au
all-users@ourdomainname.com.au
Plus other titles recipient, user_info.
He should only receive email addressed as hisname@oudomainname.com.au
No one else in the Company has this problem.

If I send one of the above it is immediately returned to me.

For security I have changed the domain name to ourdomainname.
Any help would be appreciated.

Examples
This mail was generated automatically.
More info about --HOTMAIL-- under: http://www.hotmail.com

-------

Occured_Errors:

63.2.251.53_does_not_like_recipient.

% 375: Giving_up_on_63.2.251.53.

% 394: mailbox_unavailable

% 485: Remote_host_said:_Requested_action_not_taken

% 310: This_account_has_been_disabled_[#300].

End

-------

The corrected mail is attached. (The attachement is usually a virus.)

Auto_Mail.System: [hotmail]

user-account@ourdomainname.com.au
Microsoft Mail Internet Headers Version 2.0
Received: from fehsva.com ([138.130.73.167]) by servername.ourdomainname.local with Microsoft SMTPSVC(6.0.3790.0);
Wed, 1 Dec 2004 09:49:14 +1100
From: Error_Mail@hotmail.com
To: user-account@ourdomainname.com.au
Date: Tue, 30 Nov 2004 22:23:22 GMT
Subject: Mail delivery_failed <SMTP:3771>
Importance: Normal
X-Priority: 3 (Normal)
X-MSMail-Priority: Normal
Message-ID: <e4eede56fbad8978@hotmail.com>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="====7645248.063622c74ed1ff97"
Content-Transfer-Encoding: 7bit
Return-Path: Error_Mail@hotmail.com
X-OriginalArrivalTime: 30 Nov 2004 22:49:15.0109 (UTC) FILETIME=[D12D4950:01C4D72E]
--====7645248.063622c74ed1ff97
--====7645248.063622c74ed1ff97
Content-Type: application/octet-stream; name=hotmail_8808.zip
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="hotmail_8808.zip"

--====7645248.063622c74ed1ff97--
-------------------------------------------------------------
Another header example
--------------------------------------------------------
Microsoft Mail Internet Headers Version 2.0
Received: from swiftel.com.au ([202.154.92.30]) by servername.ourdomainname.local with Microsoft SMTPSVC(6.0.3790.0);
Wed, 1 Dec 2004 14:37:02 +1100
Received: (qmail 18578 invoked from network); 1 Dec 2004 03:29:23 -0000
Received: from unknown (HELO yommlohd.com) (138.130.73.167)
by babbage.swiftel.com.au with SMTP; 1 Dec 2004 03:29:23 -0000
From: user_info@hotmail.com
To: All_Users@ourdomainname.com.au
Date: Wed, 01 Dec 2004 01:46:51 GMT
Subject: FwD: Your mail password
Importance: Normal
X-Mailer: E-SMTP V9.74
X-Priority: 3 (Normal)
X-MSMail-Priority: Normal
Message-ID: <83abaa23fd9bd10ce9d0@hotmail.com>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="9efebd59e515.030"
Content-Transfer-Encoding: 7bit
Return-Path: user_info@hotmail.com
X-OriginalArrivalTime: 01 Dec 2004 03:37:02.0843 (UTC) FILETIME=[058C64B0:01C4D757]
--9efebd59e515.030
--9efebd59e515.030
Content-Type: application/octet-stream; name=hotmail_992.zip
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="hotmail_992.zip"

--9efebd59e515.030--

Reply With Quote
  #2  
Old December 9th, 2004, 04:53 PM
Memnoch's Avatar
Memnoch Memnoch is offline
Unholy Moderator
ASP Free God 14th Plane (11500 - 11999 posts)
 
Join Date: Oct 2003
Location: In hell, where did you think?
Posts: 11,770 Memnoch User rank is Lieutenant Colonel (40000 - 50000 Reputation Level)Memnoch User rank is Lieutenant Colonel (40000 - 50000 Reputation Level)Memnoch User rank is Lieutenant Colonel (40000 - 50000 Reputation Level)Memnoch User rank is Lieutenant Colonel (40000 - 50000 Reputation Level)Memnoch User rank is Lieutenant Colonel (40000 - 50000 Reputation Level)Memnoch User rank is Lieutenant Colonel (40000 - 50000 Reputation Level)Memnoch User rank is Lieutenant Colonel (40000 - 50000 Reputation Level)Memnoch User rank is Lieutenant Colonel (40000 - 50000 Reputation Level)Memnoch User rank is Lieutenant Colonel (40000 - 50000 Reputation Level)Memnoch User rank is Lieutenant Colonel (40000 - 50000 Reputation Level)Memnoch User rank is Lieutenant Colonel (40000 - 50000 Reputation Level) 
Time spent in forums: 3 Weeks 5 Days 7 h 8 m
Reputation Power: 469
Has an alias been setup on the mail server, that redirects or forwards all mail to his account?

Reply With Quote
  #3  
Old December 9th, 2004, 05:49 PM
norml318 norml318 is offline
Contributing User
ASP Free Newbie (0 - 499 posts)
 
Join Date: May 2004
Location: Melbourne Australia
Posts: 49 norml318 User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: 18 h 54 m 8 sec
Reputation Power: 5
No I cannot find any alias for this account. My best guess at this stage

is a virus being sent from another location.

Reply With Quote
  #4  
Old December 19th, 2004, 03:09 AM
Dea Dea is offline
Registered User
ASP Free Newbie (0 - 499 posts)
 
Join Date: Dec 2004
Posts: 1 Dea User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: < 1 sec
Reputation Power: 0
Not sure if this will help or not. But, a letter was recieved to my family from earthlink. Let me quote what they said:


MESSAGE QUARANTINED

Virus Detected:
W32.Sober.I@mm!enc

Message Details:
From:
Error_Mail@hotmail.com
To: some.name.we.do.not.know@earthlink.net
Subject: Re: illegal signs in your mail
Date: Sat, 18 Dec 2004 22:05:59 GMT


EarthLink Virus Blocker has quarantined a message sent to
you because it contains a virus that cannot be removed or
disabled.

Quarantined messages are automatically deleted three days
after they are received.


Wasn't sent to our address. It was stopped by earthlnk before it was sent to our e-mail. Seems that the name is not to our account.
We also do not know of an account with this name. Notice the "Virus Dectected" I did a search and it seems to be some sort of worm.

Hope this helps.

Reply With Quote
Reply

Viewing: ASP Free ForumsSystem AdministrationWindows OS > Email Problem


Thread Tools  Search this Thread 
Search this Thread:

Advanced Search
Display Modes  Rate This Thread 
Rate This Thread:


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
View Your Warnings | New Posts | Latest News | Latest Threads | Shoutbox
Forum Jump


Forums: » Register « |  User CP |  Games |  Calendar |  Members |  FAQs |  Sitemap |  Support | 
  
 





© 2003-2008 by Developer Shed. All rights reserved. DS Cluster 1 hosted by Hostway
Stay green...Green IT