On Fri, 07 Nov 2003 00:01:00 EST, Nelly Yusupova <[log in to unmask]>  said:
> Hmmm...this is the header for one of the messages.  Why are there so many
> Received lines?  Can someone explain how this header could be the reason the
> newsletter went out multiple times?

> Received: from mailout03.sul.t-online.com (mailout03.sul.t-online.com
>           [194.25.134.81]) by echo.cgim.com (8.11.6/8.11.6) with ESMTP id
>           hA6A0Jh06799 for <[log in to unmask]>; Thu, 6 Nov 2003
>           05:00:19 -0500 (EST)
> Received: from fwd07.aul.t-online.de by mailout03.sul.t-online.com with smtp
> id
>           1AHheJ-00065k-0M; Thu, 06 Nov 2003 11:45:59 +0100
> Received: from target01.target-soft.com
> (JT5fvBZ6gekbuVfexZx3ZJSpLV7mpWdRvK7BdqXZhnL4+O+Uvo9nYq@[80.131.155.14]) by
> fmrl07.sul.t-online.com with
>           esmtp id 1AHheA-2Bomgq0; Thu, 6 Nov 2003 11:45:50 +0100

It's looping.  Do you have the loop detector disabled, it SHOULD usually
catch these.

> Delivered-To: [log in to unmask]
> Received: (qmail 15588 invoked by uid 110); 6 Nov 2003 10:35:49 -0000
> Delivered-To: [log in to unmask]
> Received: (qmail 15584 invoked from network); 6 Nov 2003 10:35:49 -0000

Apparently, somebody at target-soft.com is doing something evil/stupid with the mail
and reposting it.  But wait....


> Received: from mailout04.sul.t-online.com (mailout04.sul.t-online.com
>           [194.25.134.18]) by echo.cgim.com (8.11.6/8.11.6) with ESMTP id
>           hA63gvh18595 for <[log in to unmask]>; Wed, 5 Nov 2003
>           22:42:57 -0500 (EST)
> Received: from fwd09.aul.t-online.de by mailout04.sul.t-online.com with smtp
> id
>           1AHbl5-0001Cw-00; Thu, 06 Nov 2003 05:28:35 +0100
> Received: from gerstl1.gerstl-haustechnik.de
>
> (E2I-F6ZGgeAd9qt9MMdlm51uz7kEjPKSszL5PCAPVXFBBJAarKg96M@[217.228.219.48]) by
> fmrl09.sul.t-online.com with
>           esmtp id 1AHbl3-1L32n20; Thu, 6 Nov 2003 05:28:33 +0100
> thread-index: AcOkHm9XTGi2FHQ1QI61LfeHht3O0g==
> Received: from mail pickup service by gerstl1.gerstl-haustechnik.de with
>           Microsoft SMTPSVC; Thu, 6 Nov 2003 05:28:31 +0100

Here's another loop - but THIS one was a gerstl-haustechnik.de recipient, but
it ended up at a fwd*.auk.t-online.de machine again...

If I didn't know better, I'd say you have 2 subscribers who are forwarding
their mail, and t-online.de is intercepting the forwarding and then botching
it.  The odd part is that in that failure mode, it *should* have gone
into Sorceror's Apprentice mode (both subscriber's forwarding should have
been trapped and sent back, causing 2 reposts, then both of those should have
generated 2 more, an those 4 should have....).   I'm really confused
why t-online.de did it 2 different times for 2 different subscribers.

This is just too bizarre for me to decypher at 2:30AM (and that's saying
a lot.. ;)