Problem messages

Fri Apr 17 17:28:55 UTC 2015

Here is the email stored in quarantine...

X-Greylist: delayed 1201 by SQLgrey-1.7.6
Received: from tare.mybusinesshomes.com (tare.mybusinesshomes.com
[104.144.53.49])
by retail.ptera.net (Postfix) with ESMTP id 28BAE2040EB
for <f.trowridge at guitarfranks.com>; Thu, 16 Apr 2015 12:27:13 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=k1; d=
mybusinesshomes.com;
 h=Mime-Version:Content-Type:Date:From:Reply-To:Subject:To:Message-ID; i=
daniel at mybusinesshomes.com;
 bh=/am6s325r80MQDk6xsWt9dEHqrg=;
 b=PMjZDO6+Zm6vJz788hTYMkK9EPIuDp3sXTPp1YYqNH0FmhTtkOX/SqH7emY8heUF654AUQnxveta

 x+2EdF5Wa82LJQ05cy2n4nqkUy81mf1Xm9YdVy2vOPET/WBxKNIDvuNyyWGS1YV0DwCA2ZiQ1LVA
   KmngKzRIXFarQNozFfw=
DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=k1; d=mybusinesshomes.com
;
 b=SX+3xvmjQ4MTcOKjSbGwna3RXUaHdFjJmmgda2U6fQFFpDVW1sH46JR94WEqLWnRZ2yhPikkpeNK

 43cHooE9YjdoCGb3SbD5l2v8HacY22xl4TTPnpQTusyHqHV3sKQJ4ySxbkJ+jMUmXjoq30BqRrB6
   6vmwgCeFBW4t+Wh0oto=;
Mime-Version: 1.0
Content-Type: multipart/alternative;
boundary="93f11594500d3e5668274acd930562807dac1e17"
Date: Thu, 16 Apr 2015 15:52:57 -0400
From: "Harp Approvals" <daniel at mybusinesshomes.com>
Reply-To: "Harp Approvals" <henry at mybusinesshomes.com>
Subject: New Mortgage Lows
To: <f.trowridge at guitarfranks.com>
Message-ID: <gy15vmwah04b82b7-a4la2zwk4j8dnurg-57f97ef at mybusinesshomes.com>

--93f11594500d3e5668274acd930562807dac1e17
Content-Type: text/plain;
Content-Transfer-Encoding: 8bit

Your email client does not support HTML, this email must be viewed in HTML
mode.
--93f11594500d3e5668274acd930562807dac1e17
Content-Type: text/html;
Content-Transfer-Encoding: 8bit

<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
<title></title>
<br />
<br />
  <a href="
http://mybusinesshomes.com/5TFIvBHpdDHiVWPczjIktG26KzwBss2Sa2NwOQ"><img
height="1" src="
http://mybusinesshomes.com/mYqfMikQu2dpAs-yzCTOZcJxelED3egN9yQIaA"
width="1" /></a>
<table align="center" border="0" width="600">
<tbody>
<tr>
<td>
<center>If you cannot see the images below, <a href="
http://mybusinesshomes.com/0fD11p4O8zk4MPnuI9hNNW6PtjMAgVDaHoPc2A"
target="_NEW">click here</a>.</center>
<br />
<a href="http://mybusinesshomes.com/0fD11p4O8zk4MPnuI9hNNW6PtjMAgVDaHoPc2A"
target="_NEW"><img src="http://mybusinesshomes.com/901814e58819967760.jpg"
style="border-width: 0px; border-style: solid;" /></a></td>
</tr>
<tr>
<td style="padding: 5px; text-align: center; font-family: Arial, Helvetica,
sans-serif; font-size: 10px;">If you would no longer like to receive
communication from us, <a href="
http://mybusinesshomes.com/piWWl3BoI0L0AmQe5NlHLDKVWPm7l18mExgg5A"
target="_NEW">click here</a>.<br />
<br />
PO Box 483 - Woodstock GA, 30188</td>
</tr>
</tbody>
</table>
click <a href="
http://mybusinesshomes.com/HZlyw67Ubaw__QojEKwcFK7LCUAg7nA54DvZlg">here</a>
to unsubscribe
--93f11594500d3e5668274acd930562807dac1e17--

Log file entry..

Apr 16 12:31:55 retail MailScanner[20404]: Making attempt 2 at processing
message 28BAE2040EB.A5D2F
Apr 16 12:31:59 retail MailScanner[20404]: SpamAssassin cache hit for
message 28BAE2040EB.A5D2F
Apr 16 12:37:23 retail MailScanner[20517]: Making attempt 3 at processing
message 28BAE2040EB.A5D2F
Apr 16 12:37:26 retail MailScanner[20517]: SpamAssassin cache hit for
message 28BAE2040EB.A5D2F
Apr 16 12:42:54 retail MailScanner[19879]: Making attempt 4 at processing
message 28BAE2040EB.A5D2F
Apr 16 12:42:57 retail MailScanner[19879]: SpamAssassin cache hit for
message 28BAE2040EB.A5D2F
Apr 16 12:46:19 retail MailScanner[19930]: Making attempt 5 at processing
message 28BAE2040EB.A5D2F
Apr 16 12:46:22 retail MailScanner[19930]: SpamAssassin cache hit for
message 28BAE2040EB.A5D2F
Apr 16 12:48:43 retail MailScanner[19663]: Making attempt 6 at processing
message 28BAE2040EB.A5D2F
Apr 16 12:48:47 retail MailScanner[19663]: SpamAssassin cache hit for
message 28BAE2040EB.A5D2F
Apr 16 12:48:49 retail MailScanner[18370]: Warning: skipping message
28BAE2040EB.A5D2F as it has been attempted too many times
Apr 16 12:48:49 retail MailScanner[18370]: Quarantined message
28BAE2040EB.A5D2F as it caused MailScanner to crash several times
Apr 16 12:48:49 retail MailScanner[18370]: Saved entire message to
/var/spool/MailScanner/quarantine/20150416/28BAE2040EB.A5D2F

Here is the email sent to me...

The original message was received at Thu, 16 Apr 2015 12:48:49 -0700
from postfix at localhost
with id t3GJmn2a020753

   ----- The following addresses had permanent fatal errors -----
160-92248047-23-f.trowridge=guitarfranks.com at mail.mybusinesshomes.com
    (reason: 554 5.7.1 <160-92248047-23-f.trowridge=
guitarfranks.com at mail.mybusinesshomes.com>: Relay access denied)
    (expanded from: 160-92248047-23-f.trowridge=
guitarfranks.com at mail.mybusinesshomes.com)

   ----- Transcript of session follows -----
... while talking to [127.0.0.1]:
>>> DATA
<<< 554 5.7.1 <160-92248047-23-f.trowridge=
guitarfranks.com at mail.mybusinesshomes.com>: Relay access denied
554 5.0.0 Service unavailable
<<< 554 5.5.1 Error: no valid recipients

Final-Recipient: RFC822; 160-92248047-23-f.trowridge=
guitarfranks.com at mail.mybusinesshomes.com
Action: failed
Status: 5.7.1
Remote-MTA: DNS; [127.0.0.1]
Diagnostic-Code: SMTP; 554 5.7.1 <160-92248047-23-f.trowridge=
guitarfranks.com at mail.mybusinesshomes.com>: Relay access denied
Last-Attempt-Date: Thu, 16 Apr 2015 12:48:49 -0700

---------- Forwarded message ----------
From: MailScanner <postmaster>
To: 160-92248047-23-f.trowridge=guitarfranks.com at mail.mybusinesshomes.com
Cc:
Date: Thu, 16 Apr 2015 12:48:49 -0700
Subject: Warning: E-mail error detected
Our virus detector failed to completely analyse a message you sent:-
  To: f.trowridge at guitarfranks.com
  Subject: New Mortgage Lows
  Date: Thu Apr 16 12:48:49 2015
Any parts of the message that could not be analysed will not have been
delivered.

If you are using Microsoft Outlook, we strongly recommend you change your
outgoing message format from "Rich Text" to "HTML" or "Plain Text".

1) Click on the "Tools" menu and choose "Options..."
2) Go to the "Mail Format" tab
3) For message format, select "HTML" or "Plain text"
4) Click OK

The virus detector said this about the message:
Report: Report: MailScanner: Message attempted to kill MailScanner

--
MailScanner
Email Virus Scanner
Ptera Wireless Internet Inc.
www.ptera.net

For all your IT requirements visit: http://www.transtec.co.uk

On Fri, Apr 17, 2015 at 9:49 AM, Jerry Benton <jerry.benton at mailborder.com>
wrote:

> Art,
>
> Are these mailer daemon emails? (Backscatter) They look like one of the
> following:
>
> - Regular emails with permission problems
> - TNEF errors causing MS to crash
>
> -
> Jerry Benton
> www.mailborder.com
>
>
>
> On Apr 17, 2015, at 12:44 PM, Art Stephens <astephens at ptera.com> wrote:
>
> OK well that answer did not help me.
>
> I may be wrong but last I checked I can send emails to non-existing user
> accounts and it is the mail server that decides whether or not they exist
> and whether or not to put the email in their mail box.
>
> On Thu, Apr 16, 2015 at 7:36 PM, Jeremy McSpadden <jeremy at fluxlabs.net>
> wrote:
>
>>  Why are you accepting messages to a non-existent user ?
>>     --
>> Jeremy McSpadden
>> Flux Labs, Inc | http://www.fluxlabs.net | Endless Solutions
>> *Office* : 850-250-5590 x 501 | *Cell* : 850-890-2543 | *Fax* :
>> 850-254-2955
>>
>>  On Apr 16, 2015, at 4:03 PM, Art Stephens <astephens at ptera.com> wrote:
>>
>> I have followed instructions on how to remove these but they keep
>> occurring every time we receive an email addressed to a non existent user.
>>
>>
>>
>>
>>
>> --
>> MailScanner mailing list
>> mailscanner at lists.mailscanner.info
>> http://lists.mailscanner.info/listinfo/mailscanner
>>
>>
>>
>
>
> --
> Arthur Stephens
> Senior Networking Technician
> Ptera Inc.
> PO Box 135
> 24001 E Mission Suite 50
> Liberty Lake, WA 99019
> 509-927-7837
> ptera.com
> facebook.com/PteraInc | twitter.com/Ptera
>
>  -----------------------------------------------------------------------------
> "This message may contain confidential and/or propriety information, and
> is intended for the person/entity to whom it was originally addressed.
> Any use by others is strictly prohibited. Please note that any views or
> opinions presented in this email are solely those of the author and are not
> intended to represent those of the company."
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/listinfo/mailscanner
>
>
>
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/listinfo/mailscanner
>
>
>

-- 
Arthur Stephens
Senior Networking Technician
Ptera Inc.
PO Box 135
24001 E Mission Suite 50
Liberty Lake, WA 99019
509-927-7837
ptera.com
facebook.com/PteraInc | twitter.com/Ptera
 -----------------------------------------------------------------------------
"This message may contain confidential and/or propriety information, and is
intended for the person/entity to whom it was originally addressed.
Any use by others is strictly prohibited. Please note that any views or
opinions presented in this email are solely those of the author and are not
intended to represent those of the company."
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20150417/9284cb65/attachment-0001.html>