On 11/22/2006 17:42, Steve Howie wrote:
>
> A list owner has contacted us asking why he is receiving error
> monitoring reports for users who are not subscribed to his list.
>
Many of these are the result of delivery error messages for "you are not
authorized to post" or "your message has been forwarded to the moderator"
messages by your server in response to spam and/or virus messages which
were sent to the list address.
In the past few weeks, we have seen a significant increase in the volume
of spam targetted at our lists, with bogus sender addresses on the list
host. Appended below is the DEMR for a list which I own. Four of the seven
addresses listed on the report match this pattern, and the other three are
obviously bogus sender addresses undoubtedly used on spam or virus messages,
as well. Given the fact that all three addresses were constructed from the
same pattern, it is almost certain that they came from the same source.
Err First Last Address
--- ----- ----- -------
2 11/19 11/19 [log in to unmask]
Last error: 5.1.1 550 5.1.1 <[log in to unmask]>... User unknown
2 11/20 11/20 [log in to unmask]
Last error: 5.1.1 550 5.1.1 <[log in to unmask]>... User unknown
2 11/21 11/21 [log in to unmask]
Last error: 5.1.1 550 5.1.1 <[log in to unmask]>... User
unknown
1 11/20 11/20 [log in to unmask]
Last error: 5.1.1 550 5.1.1 <[log in to unmask]>... User
unknown
1 11/19 11/19 [log in to unmask]
Last error: 5.1.1 550 5.1.1
<[log in to unmask]>: Recipient
address rejected: User unknown in relay recipient
table
1 11/20 11/20 [log in to unmask]
Last error: 5.1.1 550 Requested action not taken: 550 5.1.1
User unknown
1 11/19 11/19 [log in to unmask]
Last error: 5.1.1 550 Unrouteable address
--
Paul Russell, Senior Systems Administrator
OIT Messaging Services Team
University of Notre Dame
[log in to unmask]
