This looks like it is almost certainly backscatter. http://en.wikipedia.org/wiki/Backscatter_(e-mail)
On Mon, Jun 27, 2011 at 9:34 AM, Kelsey, John <jckel...@drmc.org> wrote: > Exchange 2003 patched up running Vipre 3.1.14903.**** > > ** ** > > Just this morning I’ve been getting flooded with NDR’s (over 33,000). They > all say they were sent by postmas...@drmc.org and they couldn’t be > delivered. Here is one of the headers. Is my server really trying to > deliver these messages? If so…WHY?? And why doesn’t Vipre put the kibosh on > them?**** > > ** ** > > Thanks all!**** > > ** ** > > ** ** > > ** ** > > Microsoft Mail Internet Headers Version 2.0**** > > From: postmas...@drmc.org**** > > To: jco...@yahoo.com.tw**** > > Date: Mon, 27 Jun 2011 09:30:41 -0400**** > > MIME-Version: 1.0**** > > Content-Type: multipart/report; report-type=delivery-status;**** > > boundary="9B095B5ADSN=_ > 01CC34CD6EC491AA000019DBex03.drmc.org<http://01cc34cd6ec491aa000019dbex03.drmc.org/> > "**** > > X-DSNContext: 7ce717b1 - 1194 - 00000002 - 00000000**** > > Message-ID: <fsrauwiqj00010...@ex03.drmc.org>**** > > Subject: Delivery Status Notification (Failure)**** > > ** ** > > --9B095B5ADSN=_01CC34CD6EC491AA000019DBex03.drmc.org<http://01cc34cd6ec491aa000019dbex03.drmc.org/> > **** > > Content-Type: text/plain; charset=unicode-1-1-utf-7**** > > ** ** > > --9B095B5ADSN=_01CC34CD6EC491AA000019DBex03.drmc.org<http://01cc34cd6ec491aa000019dbex03.drmc.org/> > **** > > Content-Type: message/delivery-status**** > > ** ** > > --9B095B5ADSN=_01CC34CD6EC491AA000019DBex03.drmc.org<http://01cc34cd6ec491aa000019dbex03.drmc.org/> > **** > > Content-Type: message/rfc822**** > > ** ** > > Received: from xruhby.com ([120.146.192.108]) by ex03.drmc.org with > Microsoft SMTPSVC(6.0.3790.4675);**** > > Mon, 27 Jun 2011 09:30:33 -0400**** > > Message-ID: > <a7747dd5338a49a399d7f5451bc3a2ac@ef3b62ee724c43bbb322d9abf8265f3a>**** > > Date: Mon, 27 Jun 2011 13:30:28 GMT**** > > Mime-Version: 1.0**** > > X-mailer: Foxmail 6, 5, 190, 94 [[RNDMI]]**** > > X-Priority: 3**** > > From: " Hailey wbwqqfk" <jco...@yahoo.com.tw>**** > > To: xzi_...@yahoo.com.tw**** > > Subject: =?BIG5?B?v/u63ru2qWYoqcmnZymleKVfr7irZaRqwXjZVKXefmVkZ3NxdQ==?=** > ** > > X-MSMail-Priority: Highest**** > > X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106**** > > Content-Type: text/html;**** > > charset="BIG5"**** > > Content-Transfer-Encoding: quoted-printable**** > > Return-Path: jco...@yahoo.com.tw**** > > X-OriginalArrivalTime: 27 Jun 2011 13:30:34.0298 (UTC) > FILETIME=[649F71A0:01CC34CE]**** > > ** ** > > ** ** > > --9B095B5ADSN=_01CC34CD6EC491AA000019DBex03.drmc.org--**** > > ** ** > > ************************************* > *John C. Kelsey, MCSE, CCNA > *Network Architect > DuBois Regional Medical Center > (: 814.375.3073 > 2 : 814.375.4005 > *: jckel...@drmc.org > ***************************************** > > ** ** > > --- > To manage subscriptions click here: > http://lyris.sunbelt-software.com/read/my_forums/ > or send an email to listmana...@lyris.sunbeltsoftware.com > with the body: unsubscribe exchangelist > --- <BR> To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ <BR> or send an email to listmana...@lyris.sunbeltsoftware.com <BR> with the body: unsubscribe exchangelist