E-mail I sent was rejected...but I didn't send it...huh?

By joining our community you will have the ability to post topics and access other forums reserved for members. Registration is quick, simple and absolutely free. Join our community today by clicking here.

Posted: Wed Aug 22, 2007 10:45 pm

I received one of the MAILER-DAEMON notices about the e-mail I sent being undeliverable. Trouble is, I never sent it...at least to the e-mail address that shows on the following notice:

Quote:

Hi. This is the qmail-send program at mailin02.albacom.net.
I'm afraid I wasn't able to deliver your message to the following addresses.
This is a permanent error; I've given up. Sorry it didn't work out.

[email protected]
192.168.30.51 does not like recipient.
Remote host said: 550 RCPT TO: [email protected] Mailbox disk quota exceeded
Giving up on 192.168.30.51.

Can anybody decipher this for me? I mean, I understand the obvious stuff, but did I perhaps send a bait e-mail to a lad's e-address, and it was re-directed to a closed mailbox? And is that an IP I see there?

Just wondering...I'm still learning (and fast thanks to many of you.) Smile

Posted: Thu Aug 23, 2007 12:01 am

can we see the whole email?

That Ip address is used in local routers, doesn't tell us anything.

*** BANNED *** Joined: 10 Jan 2004 Posts: 3779

Possible scenario:

1. The address is your bait address and you have used it against mugus.
2. One of the mugus used a computer that was infected with a cute little worm.
3. This worm collected all addresses it could find, including your bait address.
4. The worm sent out spams and used the collected addresses as sender and receiver.
5. You get the bounce from the mailserver because this time your address was used as the sender.

Can you post the bounced message? Usually it is included as an attachment. But be careful, something there is a viral payload!

Master Baiter Joined: 04 Aug 2007 Posts: 103

Acccckkkk...I just had to reformat becuase of viri...I have put Norton Anti Virus on since, will it catch these worms?

Posted: Thu Aug 23, 2007 3:34 am

OKAY, NOW YOU ARE SCARING ME... Shocked

@>>>Can I send the whole thing? No, I can't...didn't get too much more than you see. It was snipped, and said "Remainder is truncated." At least I think that was the word used.

UPDATE: I have trashed this thing, then emptied the trash...for what good that will do. With two responses I'd say there is nothing terribly wrong.

For ^^^...thanks!

Posted: Thu Aug 23, 2007 6:47 am

Quote:

I received one of the MAILER-DAEMON notices about the e-mail I sent being undeliverable. Trouble is, I never sent it...

I own several domains and this happens to me all the time. 999,999 out of 1,000,000 spam mails come with a forged or stolen sender address, and when the spam can't be delivered, an error message is 'returned' to the fake sender address. Which in this case happens to be you.

So this really just means that (as the False Italian said) somebody used your address to send a piece of spam or a worm to [email protected].
As for danger, even if the original message contained something nasty, the failure notice most likely will not as it only contains a small part of the original message.

FourFlusher wrote:

I have put Norton Anti Virus on since, will it catch these worms?

If you're lucky. Razz