I've contacted RoadRunner's customer care regarding returned messages that I
am getting from, what I assume, is them everyday. If someone more learned
than I can help I would appreciate it. It looks to me that one of their
clients has a virus and somewhere in the loop it is getting repaired and
returned to a non-existent user on my domain. Anyone have any ideas? These
messages are really annoying me.
Here are the headers of the message:
Received: from SMTP32-FWD by mail.prudentialrand.com
(SMTP32) id A045C178E; Fri, 8 Jul 2005 17:52:08 -0400
Received: from ms-smtp-02.rdc-nyc.rr.com [24.29.109.6] by
mail.prudentialrand.com with ESMTP
(SMTPD32-8.05) id A585A5A00A6; Fri, 08 Jul 2005 17:52:05 -0400
Received: from localhost (localhost)
by ms-smtp-02.rdc-nyc.rr.com (8.12.10/8.12.7) id j68LmfId002241;
Fri, 8 Jul 2005 17:48:41 -0400 (EDT)
Date: Fri, 8 Jul 2005 17:48:41 -0400 (EDT)
From: Mail Delivery Subsystem <[EMAIL PROTECTED]>
Message-Id: <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
MIME-Version: 1.0
Content-Type: multipart/report; report-type=delivery-status;
boundary="j68LmfId002241.1120859321/ms-smtp-02.rdc-nyc.rr.com"
Subject: Returned mail: see transcript for details
Auto-Submitted: auto-generated (failure)
X-IMAIL-SPAM-VALFROM: (173670566)
X-RBL-Warning: ANTI-AV: Message failed ANTI-AV test (line 167, weight 7)
X-RBL-Warning: GIBBERISH: Message failed GIBBERISH test (line 153, weight 4)
X-RBL-Warning: ANTI-GIBBERISH: Message failed ANTI-GIBBERISH test (line 127,
weight -4)
X-RBL-Warning: Y!DIRECTED: Message failed Y!DIRECTED test (line 229, weight
11)
X-RBL-Warning: ANTI-Y!DIRECTED: Message failed ANTI-Y!DIRECTED test (line
60, weight -11)
X-Declude-Sender: <> [24.29.109.6]
X-Declude-Spoolname: Df5850a5a00a6198c.SMD
X-Note: This E-mail was scanned by Declude JunkMail (www.declude.com) for
spam.
X-Spam-Tests-Failed: IPNOTINMX, ANTI-AV, GIBBERISH, ANTI-GIBBERISH,
Y!DIRECTED, ANTI-Y!DIRECTED, CATCHALLMAILS [7]
X-Country-Chain:
X-Note: This E-mail was sent from ms-smtp-02-smtplb.rdc-nyc.rr.com
([24.29.109.6]).
X-RCPT-TO: [EMAIL PROTECTED]>
Status: U
X-UIDL: 410406537
Here is the message that I am getting and it has two attachments:
The original message was received at Fri, 8 Jul 2005 17:48:38 -0400 (EDT)
from rrcs-24-97-203-24.nys.biz.rr.com [24.97.203.24]
----- The following addresses had permanent fatal errors -----
<[EMAIL PROTECTED]>
(reason: 550 unknown user <[EMAIL PROTECTED]>)
----- Transcript of session follows -----
... while talking to mail.prudentialrand.com.:
>>> RCPT To:<[EMAIL PROTECTED]>
<<< 550 unknown user <[EMAIL PROTECTED]>
550 5.1.1 <[EMAIL PROTECTED]>... User unknown
Attachment1 called details.txt:
Reporting-MTA: dns; ms-smtp-02.rdc-nyc.rr.com
Received-From-MTA: DNS; rrcs-24-97-203-24.nys.biz.rr.com
Arrival-Date: Fri, 8 Jul 2005 17:48:38 -0400 (EDT)
Final-Recipient: RFC822; [EMAIL PROTECTED]
Action: failed
Status: 5.1.1
Remote-MTA: DNS; mail.prudentialrand.com
Diagnostic-Code: SMTP; 550 unknown user <[EMAIL PROTECTED]>
Last-Attempt-Date: Fri, 8 Jul 2005 17:48:41 -0400 (EDT)
Attachment2 called ATT0006.txt:
Received: from prudentialrand.com (rrcs-24-97-203-24.nys.biz.rr.com
[24.97.203.24])
by ms-smtp-02.rdc-nyc.rr.com (8.12.10/8.12.7) with ESMTP id
j68LmbId002217
for <[EMAIL PROTECTED]>; Fri, 8 Jul 2005 17:48:38 -0400 (EDT)
Message-Id: <[EMAIL PROTECTED]>
From: [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Subject: You have successfully updated your password
Date: Fri, 8 Jul 2005 17:48:39 -0400
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----=_NextPart_000_0013_A45E3A39.04F33EA8"
X-Priority: 3
X-MSMail-Priority: Normal
X-Virus-Scanned: Symantec AntiVirus Scan Engine
X-Virus-Scan-Result: Repaired 15810 [EMAIL PROTECTED]
Marc Catuogno
MIS Director
Prudential Rand Realty
Office: 845-770-1279
Cell: 914-906-1126
---
[This E-mail scanned for viruses by Declude Virus]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
