[ale] Once again, how about a virus scanner on the mailing list server?
Jim Popovitch
jimpop at yahoo.com
Sat Feb 19 22:04:25 EST 2005
Ahhh, one of the "CFowler" viruses. Chris, there is a special place in
hell for the fscker that is ruining your good name. ;-)
James Summers, the bounce-check email is a feature of Mailman, it was
sent to you because Mailman experienced several problems delivering
email to you. It basically is a last step before automatic removal.
Now, there are 100 reasons why Mailman could have trouble delivering
email to you, 33% of them are under your control, 33% of them are under
ALE control, and 34% of them are under hosting/ISP/backbone provider
control. You will live longer if you just accept the fact that every
now and then "things" will occur that prevent email from always reaching
you. ;-)
As for the long list of QMail failed delivery attempts, it looks like
you sent an email to ALE and Qmail tried to notify you that it had lots
of trouble delivering your ALE email to many ALE members due to the
email containing a virus.
Now, what I want to know is this: Why does it appear, based on the
email that you just sent, that you are distributing the CFowler viruses?
-Jim P.
On Sat, 2005-02-19 at 20:16 -0500, James Sumners wrote:
> I tried to send the email to this thread earlier today but it was so
> big it is sitting in the moderation queue. So, I am sending it again
> with the "text" of the attachment missing.
>
> The email did contain the correct password for my ale.org account so
> it is not spam.
>
> -- Begin "bounce check" email ---
> This is a probe message. You can ignore this message.
>
> The Ale mailing list has received a number of bounces from you,
> indicating that there may be a problem delivering messages to
> james.sumners at gmail.com. A bounce sample is attached below. Please
> examine this message to make sure there are no problems with your
> email address. You may want to check with your mail administrator for
> more help.
>
> If you are reading this, you don't need to do anything to remain an
> enabled member of the mailing list. If this message had bounced, you
> would not be reading it, and your membership would have been disabled.
> Normally when you are disabled, you receive occasional messages asking
> you to re-enable your subscription.
>
> You can also visit your membership page at
>
> http://www.ale.org/mailman/options/ale/james.sumners%40gmail.com
>
> On your membership page, you can change various delivery options such
> as your email address and whether you get digests or not. As a
> reminder, your membership password is
>
> moinex
>
> If you have any questions or problems, you can contact the list owner
> at
>
> ale-owner at ale.org
>
>
>
> ---------- Forwarded message ----------
> From: MAILER-DAEMON at mail.room17.com
> To: ale-bounces at ale.org
> Date: 19 Feb 2005 07:44:15 -0000
> Subject: failure notice
> Hi. This is the qmail-send program at mail.room17.com.
> I'm afraid I wasn't able to deliver your message to the following addresses.
> This is a permanent error; I've given up. Sorry it didn't work out.
>
> <ritchied at ix.netcom.com>:
> 207.217.125.18 does not like recipient.
> Remote host said: 550 ritchied at ix.netcom.com...User unknown
> Giving up on 207.217.125.18.
>
> <jenelle.chapman at gmail.com>:
> 64.233.185.27 failed after I sent the message.
> Remote host said: 552 5.7.0 Illegal Attachment
>
> <imadhasan at gmail.com>:
> 64.233.185.27 failed after I sent the message.
> Remote host said: 552 5.7.0 Illegal Attachment
>
> <stillwaxin at gmail.com>:
> 64.233.171.27 failed after I sent the message.
> Remote host said: 552 5.7.0 Illegal Attachment
>
> <pwd at mdtsoft.com>:
> 209.101.192.2 failed after I sent the message.
> Remote host said: 554 5.7.1 Known virus detected in message -
> Trojan.Downloader.Small-165
>
> <neomonkey at gmail.com>:
> 64.233.185.27 failed after I sent the message.
> Remote host said: 552 5.7.0 Illegal Attachment
>
> <christopher at bergeron.com>:
> 205.158.62.207 failed after I sent the message.
> Remote host said: 550 Error: Email with potential executable/virus
> ".exe" mi0 not allowed
>
> <michaelhirsch at attbi.com>:
> Sorry, I couldn't find any host named attbi.com. (#5.1.2)
>
> <audilover at atlantabroadband.com>:
> 69.13.51.5 failed after I sent the message.
> Remote host said: 554 Message flagged as Spam and Deleted (#5.3.2)
>
> <czagrod at juno.com>:
> 64.136.20.83 does not like recipient.
> Remote host said: 554 czagrod at juno.com Mail quota exceeded
> Giving up on 64.136.20.83.
>
> <jcphil at mindspring.com>:
> 207.69.200.31 does not like recipient.
> Remote host said: 550 jcphil at mindspring.com...User unknown
> Giving up on 207.69.200.31.
>
> <anthony_flatt at hotmail.com>:
> 65.54.253.230 does not like recipient.
> Remote host said: 550 Requested action not taken: mailbox unavailable
> Giving up on 65.54.253.230.
>
> <wwhitmar at operamail.com>:
> 205.158.62.137 failed after I sent the message.
> Remote host said: 550 Error: Email with potential executable/virus
> ".exe" mi0 not allowed
>
> <nick.ali at gmail.com>:
> 64.233.185.27 failed after I sent the message.
> Remote host said: 552 5.7.0 Illegal Attachment
>
> <jrickman at gmail.com>:
> 64.233.185.27 failed after I sent the message.
> Remote host said: 552 5.7.0 Illegal Attachment
>
> <greg.freemyer at gmail.com>:
> 64.233.171.27 failed after I sent the message.
> Remote host said: 552 5.7.0 Illegal Attachment
>
> <prlyons at gmail.com>:
> 64.233.185.27 failed after I sent the message.
> Remote host said: 552 5.7.0 Illegal Attachment
>
> <kilpatms at mindspring.com>:
> 207.69.200.133 does not like recipient.
> Remote host said: 550 kilpatms at mindspring.com...User unknown
> Giving up on 207.69.200.133.
>
> <pete.hardie at gmail.com>:
> 64.233.185.27 failed after I sent the message.
> Remote host said: 552 5.7.0 Illegal Attachment
>
> <stl2 at mindspring.com>:
> 207.69.200.93 does not like recipient.
> Remote host said: 550 stl2 at mindspring.com...User unknown
> Giving up on 207.69.200.93.
>
> <liberie at gmail.com>:
> 64.233.185.27 failed after I sent the message.
> Remote host said: 552 5.7.0 Illegal Attachment
>
> <ppolstra at gmail.com>:
> 64.233.171.27 failed after I sent the message.
> Remote host said: 552 5.7.0 Illegal Attachment
>
> <evanwieren at gmail.com>:
> 64.233.171.27 failed after I sent the message.
> Remote host said: 552 5.7.0 Illegal Attachment
>
> <markwalters at gmail.com>:
> 64.233.171.27 failed after I sent the message.
> Remote host said: 552 5.7.0 Illegal Attachment
>
> <wlyell at gmail.com>:
> 64.233.171.27 failed after I sent the message.
> Remote host said: 552 5.7.0 Illegal Attachment
>
> <kevinkarst at gmail.com>:
> 64.233.171.27 failed after I sent the message.
> Remote host said: 552 5.7.0 Illegal Attachment
>
> <danieyll at mailcity.com>:
> 208.36.123.55 does not like recipient.
> Remote host said: 550 <danieyll at mailcity.com>: User unknown
> Giving up on 208.36.123.55.
>
> <robertheaven at attbi.com>:
> Sorry, I couldn't find any host named attbi.com. (#5.1.2)
>
> <tomhawks801 at yahoo.com>:
> 67.28.114.36 failed after I sent the message.
> Remote host said: 554 delivery error: dd Sorry your message to
> tomhawks801 at yahoo.com cannot be delivered. This account has been
> disabled or discontinued [#102]. - mta194.mail.dcn.yahoo.com
>
> <jakes.dad at gmail.com>:
> 64.233.185.27 failed after I sent the message.
> Remote host said: 552 5.7.0 Illegal Attachment
>
> <dustin.peeler at gmail.com>:
> 64.233.171.27 failed after I sent the message.
> Remote host said: 552 5.7.0 Illegal Attachment
>
> <danny at lissomconsulting.com>:
> 66.180.96.56 failed after I sent the message.
> Remote host said: 550 This message contains an attachment of a type we
> do not accept (.exe)
>
> <brian.stanaland at gmail.com>:
> 64.233.171.27 failed after I sent the message.
> Remote host said: 552 5.7.0 Illegal Attachment
>
> <jerome.dennany at roche.com>:
> 196.3.51.112 does not like recipient.
> Remote host said: 550 <jerome.dennany at roche.com>... No such mailbox
> Giving up on 196.3.51.112.
>
> <nwilliams at interland.com>:
> 66.223.63.19 does not like recipient.
> Remote host said: 550 <nwilliams at interland.com>: User unknown in relay
> recipient table
> Giving up on 66.223.63.19.
>
> <protocoljunkie at gmail.com>:
> 64.233.171.27 failed after I sent the message.
> Remote host said: 552 5.7.0 Illegal Attachment
>
> <kpirkle at gmail.com>:
> 64.233.171.27 failed after I sent the message.
> Remote host said: 552 5.7.0 Illegal Attachment
>
> <gentooga at attbi.com>:
> Sorry, I couldn't find any host named attbi.com. (#5.1.2)
>
> <thawk80 at mindspring.com>:
> 207.69.200.159 does not like recipient.
> Remote host said: 550 thawk80 at mindspring.com...User unknown
> Giving up on 207.69.200.159.
>
> <charriglists at joimail.com>:
> 65.38.234.43 does not like recipient.
> Remote host said: 550 Gateway: 550 No such user (charriglists) -ERR
> charriglists at joimail.com not present or password incorrect
> Giving up on 65.38.234.43.
>
> <matt.macumber at gmail.com>:
> 64.233.171.27 failed after I sent the message.
> Remote host said: 552 5.7.0 Illegal Attachment
>
> <wormfishin at gmail.com>:
> 64.233.185.27 failed after I sent the message.
> Remote host said: 552 5.7.0 Illegal Attachment
>
> <mark at primefactor.com>:
> 65.104.206.80 failed after I sent the message.
> Remote host said: 554 5.7.1 virus Trojan.Downloader.Small-165 detected
> by ClamAV - http://www.clamav.net
>
> <ccthomas at joimail.com>:
> 65.38.234.43 failed after I sent the message.
> Remote host said: 554 Failure Virus detected - Win32:Beagle-AW [Wrm]
>
> <esperantisto at gmail.com>:
> 64.233.185.27 failed after I sent the message.
> Remote host said: 552 5.7.0 Illegal Attachment
>
> <asifem at gmail.com>:
> 64.233.171.27 failed after I sent the message.
> Remote host said: 552 5.7.0 Illegal Attachment
>
> <ttharpe at broadriver.com>:
> 216.24.175.8 does not like recipient.
> Remote host said: 550 unknown user <ttharpe at broadriver.com>
> Giving up on 216.24.175.8.
>
> <eugtk01 at gmail.com>:
> 64.233.185.27 failed after I sent the message.
> Remote host said: 552 5.7.0 Illegal Attachment
>
> <kevinkarst at yahoo.com>:
> 64.156.215.6 failed after I sent the message.
> Remote host said: 554 delivery error: dd Sorry your message to
> kevinkarst at yahoo.com cannot be delivered. This account has been
> disabled or discontinued [#102]. - mta206.mail.scd.yahoo.com
>
> <burntmedia at gmail.com>:
> 64.233.171.27 failed after I sent the message.
> Remote host said: 552 5.7.0 Illegal Attachment
>
> <pmazer at gmail.com>:
> 64.233.185.27 failed after I sent the message.
> Remote host said: 552 5.7.0 Illegal Attachment
>
> <tyler.kiley at gmail.com>:
> 64.233.171.27 failed after I sent the message.
> Remote host said: 552 5.7.0 Illegal Attachment
>
> <volcimaster at gmail.com>:
> 64.233.171.27 failed after I sent the message.
> Remote host said: 552 5.7.0 Illegal Attachment
>
> <dpinili at eudoramail.com>:
> 208.36.123.11 does not like recipient.
> Remote host said: 550 <dpinili at eudoramail.com>: User unknown
> Giving up on 208.36.123.11.
>
> <james.sumners at gmail.com>:
> 64.233.171.27 failed after I sent the message.
> Remote host said: 552 5.7.0 Illegal Attachment
>
> <dfitzhenry at gmail.com>:
> 64.233.171.27 failed after I sent the message.
> Remote host said: 552 5.7.0 Illegal Attachment
>
> <joh6nn at hotpop.com>:
> 38.113.3.72 failed after I sent the message.
> Remote host said: 550 Error: Message body contains possible virus ".exe" file.
>
> <linuxnews at wormfishin.com>:
> 217.160.230.12 does not like recipient.
> Remote host said: 550 <linuxnews at wormfishin.com>: invalid address
> Giving up on 217.160.230.12.
>
> <unixdude at gmail.com>:
> 64.233.185.27 failed after I sent the message.
> Remote host said: 552 5.7.0 Illegal Attachment
>
> <lexuscars at gmail.com>:
> 64.233.185.27 failed after I sent the message.
> Remote host said: 552 5.7.0 Illegal Attachment
>
> <mdhirsch at gmail.com>:
> 64.233.185.27 failed after I sent the message.
> Remote host said: 552 5.7.0 Illegal Attachment
>
> <worldsecurity at mailcity.com>:
> 208.36.123.55 does not like recipient.
> Remote host said: 550 <worldsecurity at mailcity.com>: User unknown
> Giving up on 208.36.123.55.
>
> <nbornstein at gmail.com>:
> 64.233.171.27 failed after I sent the message.
> Remote host said: 552 5.7.0 Illegal Attachment
>
> <bruce at perens.com>:
> 69.93.232.228 failed after I sent the message.
> Remote host said: 550 5.7.1 Message content rejected, id=26881-05 -
> VIRUS: Trojan.Downloader.Small-165
>
> <ale at politicalpurpose.com>:
> Sorry, I couldn't find a mail exchanger or IP address. (#5.4.4)
>
> <b1gh34d at yahoo.com>:
> 64.156.215.7 failed after I sent the message.
> Remote host said: 554 delivery error: dd Sorry your message to
> b1gh34d at yahoo.com cannot be delivered. This account has been disabled
> or discontinued [#102]. - mta259.mail.scd.yahoo.com
>
> <jean at linedge.com>:
> 66.117.40.14 failed after I sent the message.
> Remote host said: 550-Potentially executable content. If you meant to
> send this file then please
> 550 package it up as a zip file and resend it.
>
> <groupmail at madhorizons.com>:
> 216.239.128.25 does not like recipient.
> Remote host said: 550 <groupmail at madhorizons.com>: User unknown in
> virtual mailbox table
> Giving up on 216.239.128.25.
>
> <brianb_ale at yahoo.com>:
> 67.28.113.10 failed after I sent the message.
> Remote host said: 554 delivery error: dd Sorry your message to
> brianb_ale at yahoo.com cannot be delivered. This account has been
> disabled or discontinued [#102]. - mta125.mail.re2.yahoo.com
>
> <maverick67 at gmail.com>:
> 64.233.171.27 failed after I sent the message.
> Remote host said: 552 5.7.0 Illegal Attachment
>
> <amelios at gmail.com>:
> 64.233.171.27 failed after I sent the message.
> Remote host said: 552 5.7.0 Illegal Attachment
>
> <daquarious at hushmail.com>:
> 65.39.178.141 does not like recipient.
> Remote host said: 554 <daquarious at hushmail.com>: Recipient address
> rejected: Account expired
> Giving up on 65.39.178.141.
>
> <jeffreydbrown at gmail.com>:
> 64.233.171.27 failed after I sent the message.
> Remote host said: 552 5.7.0 Illegal Attachment
>
> <meson3902 at gmail.com>:
> 64.233.185.27 failed after I sent the message.
> Remote host said: 552 5.7.0 Illegal Attachment
>
> <s.lastinger at computernetdesign.com>:
> 64.202.166.12 failed after I sent the message.
> Remote host said: 554 mail server permanently rejected message (#5.3.0)
>
> <kenn at pcintelligent.com>:
> 66.36.233.230 does not like recipient.
> Remote host said: 550-"The recipient cannot be verified. Please check
> all recipients of this
> 550 message to verify they are valid."
> Giving up on 66.36.233.230.
>
> <ups at stups.com>:
> 205.158.62.200 failed after I sent the message.
> Remote host said: 550 Error: Email with potential executable/virus
> ".exe" mi0 not allowed
>
> <jkfreeman at gmail.com>:
> 64.233.171.27 failed after I sent the message.
> Remote host said: 552 5.7.0 Illegal Attachment
>
> <jbwellsiv at gmail.com>:
> 64.233.185.27 failed after I sent the message.
> Remote host said: 552 5.7.0 Illegal Attachment
>
> <jimmyoliver at gmail.com>:
> 64.233.185.27 failed after I sent the message.
> Remote host said: 552 5.7.0 Illegal Attachment
>
> <joe.sechman at gmail.com>:
> 64.233.185.27 failed after I sent the message.
> Remote host said: 552 5.7.0 Illegal Attachment
>
> <inp_content at inetprofit.com>:
> 209.10.110.64 failed after I sent the message.
> Remote host said: 554 mail server permanently rejected message (#5.3.0)
>
> <dlavalley at novient.com>:
> Sorry, I wasn't able to establish an SMTP connection. (#4.4.1)
> I'm not going to try again; this message has been in the queue too long.
>
> <prodgers at englemartin.com>:
> Connected to 66.179.26.136 but connection died. (#4.4.2)
> I'm not going to try again; this message has been in the queue too long.
>
> <mwalters at linuxsafe.com>:
> Sorry, I wasn't able to establish an SMTP connection. (#4.4.1)
> I'm not going to try again; this message has been in the queue too long.
>
> --- Below this line is a copy of the message.
>
> Return-Path: <ale-bounces at ale.org>
> Received: (qmail 7070 invoked from network); 12 Feb 2005 07:07:31 -0000
> Received: from unknown (HELO ike.room17.com) (127.0.0.1)
> by localhost with SMTP; 12 Feb 2005 07:07:31 -0000
> Received: (qmail 5912 invoked from network); 12 Feb 2005 07:04:07 -0000
> Received: from unknown (HELO hemant.com) (202.9.146.122)
> by mail.room17.com with SMTP; 12 Feb 2005 07:04:07 -0000
> Date: Sat, 12 Feb 2005 12:38:03 +0530
> To: "Ale" <ale at ale.org>
> From: "Cfowler" <cfowler at outpostsentinel.com>
> Message-ID: <gucrjchhoieferleygk at ale.org>
> MIME-Version: 1.0
> Content-Type: multipart/mixed; boundary="--------rxoxxzhibxzwhqwdylci"
> Subject: [ale] Delivery by mail
> X-BeenThere: ale at ale.org
> X-Mailman-Version: 2.1.5
> Precedence: list
> Reply-To: Atlanta Linux Enthusiasts <ale at ale.org>
> List-Id: Atlanta Linux Enthusiasts <ale.ale.org>
> List-Unsubscribe: <http://www.ale.org/mailman/listinfo/ale>,
> <mailto:ale-request at ale.org?subject=unsubscribe>
> List-Archive: <http://ike.room17.com/pipermail/ale>
> List-Post: <mailto:ale at ale.org>
> List-Help: <mailto:ale-request at ale.org?subject=help>
> List-Subscribe: <http://www.ale.org/mailman/listinfo/ale>,
> <mailto:ale-request at ale.org?subject=subscribe>
> Sender: ale-bounces at ale.org
> Errors-To: ale-bounces at ale.org
>
> ----------rxoxxzhibxzwhqwdylci
> Content-Type: text/html; charset="us-ascii"
> Content-Transfer-Encoding: 7bit
>
> <html><body>
> Before use read the help
>
> <br>
> </body></html>
>
> ----------rxoxxzhibxzwhqwdylci
> Content-Type: application/octet-stream; name="siupd02.exe"
> Content-Transfer-Encoding: base64
> Content-Disposition: attachment; filename="siupd02.exe"
> _______________________________________________
> Ale mailing list
> Ale at ale.org
> http://www.ale.org/mailman/listinfo/ale
More information about the Ale
mailing list