LSTOWN-L Archives

LISTSERV List Owners' Forum

LSTOWN-L

Options: Use Monospaced Font
Show Text Part by Default
Show All Mail Headers

Topic: [<< First] [< Prev] [Next >] [Last >>]

Print Reply
Arthur Hatch <[log in to unmask]>
Tue, 16 Dec 2003 01:20:01 +0000
text/plain (105 lines)
     Listmembers,

                                                List related ID, and E-mail
addresses have been altered below.
Looking for reasonable explaination regarding  "Daily Monitoring Error
Report" issued at 00:00:03, Dec. 15/03.

Err First Last  Address
--- ----- ----- -------
  1 12/14 12/14 [log in to unmask]
                Last error: 550 Host 'EMAIL2ME.COMMAIL.COM' Unknown

My List is running on Listserv TCP/IP VM ver. 1.8D under CMC
(CMSprog=X'16').

There were absolutely "NO" List postings between 12/12/03 at 16:34, and

12/15/03 at 05:20.

"NO" subscriber from "COMMAIL.COM" domain has ever been a List member.
"NO" 5LUVVFUJ@*.* has ever been a List member.
The "COMMAIL.COM" domain has been blacklisted in several databases.

List Header:

PUT XXXXXX LIST PW=XXXXXXXXXX
* NNNNN  MMMMMMM OOOOO
* .HH ON
* Owner= [log in to unmask]
* Owner= quiet: [log in to unmask] (BBBBB CCCCCC)
* Owner= [log in to unmask] (XVVVV XDDDD)
* Attachments= No,Filter
* Auto-Delete= Yes,Full-Auto
* Daily-Threshold= 100,8
* Default-Options= Repro,Subjecthdr
* Default-Topics= OTHER
* Digest= Yes,Same,Daily,22
* Editor= [log in to unmask]
* Editor-Header= No
* Errors-To= Owner
* Files= No
* Language= NoHTML
* Mail-Via= Distribute
* Notebook= Yes,n,Weekly,Owner
* Notify= Yes
* Reply-To= List,Respect
* Review= Owner
* Send= (LIST NAME)
* SizeLim= 150
* Stats= Normal,Owner
* Subject-Tag= XXXXX
* Subscription= By Owner
* Topics= ZZZZX,TEST
* Validate= No
* .HH OFF

My concern here is how and why is this error being generated through my host
mail server and Listserv??

This similar "false report" did occour in the first week of November when
valid subscribed userID was switched with other domain levels to make up
invalid E-mail addresses. The userID's were two of my own test accounts on
unrelated domains. The four "doctored", invalid E-mail subscriptions were
reported again in the "Daily Error Monitoring Report" below.  The numbers of
errors reported were not possible from the fact that actual posting numders
were either 1-2. not 6,9, or 16.

16 11/01 11/01 [log in to unmask]
                Last error: SMTP; 550 MAILBOX NOT FOUND

  9 11/01 11/01 ZZZZ@XXX>VVV
                Last error: smtp;550 5.1.1 unknown or illegal alias:
                            ZZZZ@XXX>VVV

  6 11/01 11/01  [log in to unmask]

                Last error: 550 not accept this message.

  1 11/01 11/01 FACH7XIQY@[log in to unmask]
                Last error: 550 FACH7XIQY@AAAAA@NNNNN.XXX...User unknown

   This November incident can be connected with a file that was sent to the
List using the "[log in to unmask]"  listserv address. That file was
also BCc: to an unsubscribed "friend" who had previous E-mail addresses
within their mail client Inbox that contained all of the userID used in the
November false error report information. That "friend' became infected with
the "BugBear", or "BigMM" type virus infection.

  This could explain the "doctored" E-mail addresses using different domain
levels. But, the false entries in the "Daily Error Monitoring Report" for
failed, excessive numbers is not clear as to how the invalid information got
into or through the host Listserv-mail servers.

  The virus only, first discovered on the friday so perhaps the host virus
program was not able to detect the new virus.

  Any similar incidents happening out there, or any insight ... ??

     Thanks,
                   Art

_________________________________________________________________
MSN 8 helps eliminate e-mail viruses. Get 2 months FREE*.
http://join.msn.com/?page=features/virus&pgmarket=en-ca&RU=http%3a%2f%2fjoin.msn.com%2f%3fpage%3dmisc%2fspecialoffers%26pgmarket%3den-ca

ATOM RSS1 RSS2