Returned mail: see transcript for details

Mail Delivery Subsystem MAILER-DAEMON at smtp2.namesystems.net
Thu Apr 1 05:23:03 UTC 2004


The original message was received at Wed, 31 Mar 2004 21:22:59 -0800
from [213.59.102.6]
   ----- The following addresses had permanent fatal errors -----
<python at kepnet.com>
    (reason: 550 5.1.1 <python at kepnet.com> is not a valid mailbox)

   ----- Transcript of session follows -----
... while talking to server8.kepnet.com.:
>>> RCPT To:<python at kepnet.com>
<<< 550 5.1.1 <python at kepnet.com> is not a valid mailbox
550 5.1.1 <python at kepnet.com>... User unknown


-- Attached file included as plaintext by Ecartis --

Reporting-MTA: dns; smtp2.namesystems.net
Arrival-Date: Wed, 31 Mar 2004 21:22:59 -0800

Final-Recipient: RFC822; python at kepnet.com
Action: failed
Status: 5.1.1
Remote-MTA: DNS; server8.kepnet.com
Diagnostic-Code: SMTP; 550 5.1.1 <python at kepnet.com> is not a valid mailbox
Last-Attempt-Date: Wed, 31 Mar 2004 21:23:03 -0800


-- Attached file included as plaintext by Ecartis --

Return-Path: <inn-bugs at isc.org>
Received: from kepnet.com ([213.59.102.6])
	by smtp2.namesystems.net (8.12.5/8.11.6) with ESMTP id i315Mwia006421
	for <python at kepnet.com>; Wed, 31 Mar 2004 21:22:59 -0800
Message-Id: <200404010522.i315Mwia006421 at smtp2.namesystems.net>
From: inn-bugs at isc.org
To: python at kepnet.com
Subject: [**Virus**] Mail Delivery (failure python at kepnet.com)
Date: Thu, 1 Apr 2004 10:03:38 +0400
MIME-Version: 1.0
Content-type: multipart/mixed; boundary="----=_NextPart_000_001B_01C0CA80.6B015D10"; type="multipart/alternative"
X-Priority: 3
X-MSMail-Priority: Normal
X-NameSystems-MailScanner-Information: Please contact noc at namesystems.net for more information
X-NameSystems-MailScanner: Found to be infected
X-NameSystems-MailScanner-SpamCheck: 

This is a multi-part message in MIME format.

------=_NextPart_000_001B_01C0CA80.6B015D10
Content-type: multipart/mixed; boundary="----=_NextPart_001_001C_01C0CA80.6B015D10"

------=_NextPart_001_001C_01C0CA80.6B015D10
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

Warning: This message has had one or more attachments removed
Warning: (msg-5009-47.html, message.scr).
Warning: Please read the "VirusWarning.txt" attachment(s) for more informat=
ion.



------=_NextPart_001_001C_01C0CA80.6B015D10
Content-Type: text/plain; charset="us-ascii"; name="VirusWarning.txt"
Content-Disposition: inline; filename="VirusWarning.txt"
Content-Transfer-Encoding: quoted-printable

This is a message from the MailScanner E-Mail Virus Protection Service
----------------------------------------------------------------------
The original e-mail message contained potentially dangerous content,
which has been removed for your safety.

The content is dangerous as it is often used to spread viruses or to gain
personal or confidential information from you, such as passwords or credit
card numbers.

Due to limitations placed on us by the Regulation of Investigatory Powers
Act 2000, we were unable to keep a copy of the original attachment.

The content filters found this:
   MailScanner: Found dangerous IFrame tag in HTML message

--=20
NameSystems.net Postmaster

This service provided by NameSystems.net

------=_NextPart_001_001C_01C0CA80.6B015D10--

------=_NextPart_000_001B_01C0CA80.6B015D10
Content-Type: text/plain; charset="us-ascii"; name="VirusWarning.txt"
Content-Disposition: inline; filename="VirusWarning.txt"
Content-Transfer-Encoding: quoted-printable

This is a message from the NameSystems.net MailScanner E-Mail Service
----------------------------------------------------------------------
The original e-mail attachment "message.scr"
was believed to be infected by a virus and has been replaced by this warning
message.

Due to limitations placed on us by the Regulation of Investigatory Powers
Act 2000, we were unable to keep a copy of the infected attachment. Please
ask the sender of the message to disinfect their original version and send
you a clean copy.

At Wed Mar 31 21:23:03 2004 the virus scanner said:
   ClamAV: message.scr contains Worm.SomeFool.P=20
   MailScanner: Windows Screensavers are often used to hide viruses (messag=
e.scr)
   MailScanner: :  No programs allowed (message.scr)


--=20
NameSystems.net Postmaster


------=_NextPart_000_001B_01C0CA80.6B015D10--






More information about the inn-bugs mailing list