Results 1 to 4 of 4

Thread: Receiving failure delivery messages.

  1. #1
    pradip is offline Intermediate Member
    Join Date
    Aug 2011
    Posts
    15
    Rep Power
    4

    Post Receiving failure delivery messages.

    Hi,

    From today morning many users receiving a "Delivery Status Notification (Failure)" messages even through they have not sent any email to those ids. User also receiving a messages of " Mail delivery failed: returning message to sender " & "Delivery Status Notification (Failure) "

    I don't what happen suddenly, could somebody help me out about how to debug the issue.

    I have checked on forum but nothing found related to this, as per forum i only checked relay part which i am not using external relay.

    I have attached some emails received to users.

    Details


    Return-Path: nilesh.dand@marathonrealty.com
    Received: from mail.marathonrealty.com (LHLO mail.marathonrealty.com)
    (192.168.0.1) by mail.marathonrealty.com with LMTP; Sat, 10 Dec 2011
    11:03:11 +0530 (IST)
    Received: from localhost (localhost [127.0.0.1])
    by mail.marathonrealty.com (Postfix) with ESMTP id 894331323895
    for <pradip.thite@marathonrealty.com>; Sat, 10 Dec 2011 11:03:11 +0530 (IST)
    X-Virus-Scanned: amavisd-new at marathonrealty.com
    X-Spam-Flag: NO
    X-Spam-Score: -2.909
    X-Spam-Level:
    X-Spam-Status: No, score=-2.909 tagged_above=-10 required=6.6
    tests=[ALL_TRUSTED=-1, BAYES_00=-1.9, HTML_MESSAGE=0.001,
    T_RP_MATCHES_RCVD=-0.01] autolearn=ham
    Received: from mail.marathonrealty.com ([127.0.0.1])
    by localhost (mail.marathonrealty.com [127.0.0.1]) (amavisd-new, port 10024)
    with ESMTP id 0P0KPp0nV48E for <pradip.thite@marathonrealty.com>;
    Sat, 10 Dec 2011 11:03:10 +0530 (IST)
    Received: from mail.marathonrealty.com (mail.marathonrealty.com [192.168.0.1])
    by mail.marathonrealty.com (Postfix) with ESMTP id C98C41322D67
    for <pradip.thite@marathonrealty.com>; Sat, 10 Dec 2011 11:03:10 +0530 (IST)
    Date: Sat, 10 Dec 2011 11:03:10 +0530 (IST)
    From: Nilesh Dand <nilesh.dand@marathonrealty.com>
    To: Pradip Thite <pradip.thite@marathonrealty.com>
    Subject: Fwd: Delivery Status Notification (Failure)
    Message-ID: <60ff4229-758f-4878-b7d7-812a634c6561@mail.marathonrealty.com>
    In-Reply-To: <lLgz65xME00000d75@as39ucsex01.as39.navy.mil>
    Content-Type: multipart/alternative;
    boundary="=_09b6048e-406c-4ac8-aaee-206099edd9b4"
    MIME-Version: 1.0
    X-Originating-IP: [192.168.2.152]
    X-Mailer: Zimbra 7.1.2_GA_3268 (ZimbraWebClient - FF3.0 (Win)/7.1.2_GA_3268)

    --=_09b6048e-406c-4ac8-aaee-206099edd9b4
    Content-Type: text/plain; charset=utf-8
    Content-Transfer-Encoding: 7bit



    ----- Forwarded Message -----

    From: postmaster@as39.navy.mil
    To: finance@marathonrealty.com
    Sent: Saturday, December 10, 2011 11:02:41 AM
    Subject: Delivery Status Notification (Failure)

    This is an automatically generated Delivery Status Notification.

    Delivery to the following recipients failed.

    debrown@as39.navy.mil





    --=_09b6048e-406c-4ac8-aaee-206099edd9b4
    Content-Type: text/html; charset=utf-8
    Content-Transfer-Encoding: 7bit

    <html><head><style type='text/css'>p { margin: 0; }</style></head><body><div style='font-family: Times New Roman; font-size: 12pt; color: #000000'><br><br><hr id="zwchr"><div style="color:#000;font-weight:normal;font-style:normal;text-decoration:none;font-family:Helvetica,Arial,sans-serif;font-size:12pt;"><b>From: </b>postmaster@as39.navy.mil<br><b>To: </b>finance@marathonrealty.com<br><b>Sent: </b>Saturday, December 10, 2011 11:02:41 AM<br><b>Subject: </b>Delivery Status Notification (Failure)<br><br>This is an automatically generated Delivery Status Notification.<br><br>Delivery to the following recipients failed.<br><br>&nbsp;&nbsp; &nbsp; &nbsp; debrown@as39.navy.mil<br><br><br><br></div><br></div></body></html>
    --=_09b6048e-406c-4ac8-aaee-206099edd9b4--
    Attached Files Attached Files

  2. #2
    phoenix is online now Zimbra Consultant & Moderator
    Join Date
    Sep 2005
    Location
    Vannes, France
    Posts
    23,586
    Rep Power
    57

    Default

    It's called NDR spam, do some research on what it is and search the forums (and the wiki for some improvements you can make to the anti-spam system) for details on what you can do to reduce it.
    Regards


    Bill


    Acompli: A new adventure for Co-Founder KevinH.

  3. #3
    pradip is offline Intermediate Member
    Join Date
    Aug 2011
    Posts
    15
    Rep Power
    4

    Default

    If it is NDR then is this required to disable or correct the account which is compromised. Could you please explain what exactly is NDR and how & for what it really works?

  4. #4
    phoenix is online now Zimbra Consultant & Moderator
    Join Date
    Sep 2005
    Location
    Vannes, France
    Posts
    23,586
    Rep Power
    57

    Default

    Quote Originally Posted by pradip View Post
    If it is NDR then is this required to disable or correct the account which is compromised.
    Who said it's a compromised account? If you've determined that it's a compromised account you need to take remedial steps.

    Quote Originally Posted by pradip View Post
    Could you please explain what exactly is NDR and how & for what it really works?
    I've already given you a link to explain what it is and there are article in the forums and wiki on how to stop NDR spam and how to improve the ant-spam system, search for them and read what you need to do.
    Regards


    Bill


    Acompli: A new adventure for Co-Founder KevinH.

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Similar Threads

  1. [SOLVED] Re-creating the spam training e-mail account
    By richard-hdd in forum Administrators
    Replies: 21
    Last Post: 03-20-2012, 07:34 AM
  2. Replies: 0
    Last Post: 07-26-2011, 04:24 AM
  3. Users receiving email messages 'late'
    By tenpagyatso in forum Administrators
    Replies: 0
    Last Post: 11-09-2010, 08:31 AM
  4. Temporary message delivery failure
    By arkade in forum Administrators
    Replies: 21
    Last Post: 04-01-2008, 12:17 PM
  5. Temporary message delivery failure
    By goetzi in forum Administrators
    Replies: 40
    Last Post: 06-25-2007, 10:41 AM

Tags for this Thread

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •