INDC Journal

« Rumble Frisch | Main | Quick Links »

July 11, 2006
102 Pages

Posted by Bill

For some reason, when I woke up this morning, I found 102 pages of "Mail delivery failed: returning message to sender" e-mails in my inbox. In fact, there are scores of variations on that same message, in various languages, apparently written to what seem like real e-mail networks (yahoo, .edu addresses, etc.) Two things:

1. If you sent me an e-mail in the past 20 hours or so, I won't see it. Beyond being buried within the pile, my account isn't receiving until I reduce its size.

2. What the ...

Posted by Bill at July 11, 2006 05:52 AM | TrackBack (8)

Trackback Pings

TrackBack URL for this entry:
http://www.indcjournal.com/cgi-bin/mt/dafrules/tapaz.cgi/2649

Comments

If you signed up for Blue Frog, welcome to my nightmare. I've been getting those for a couple of months now. That, or some other low-life spoofed your address.

Posted by: w3 at July 11, 2006 08:19 AM

2. What the ...

That's what I said (I just blew back into town after a trip far from the internets.) Cheez Louise, any word who's reponsible for the Denial of Service attacks?

Hey, you're a victim!

Posted by: SarahW at July 11, 2006 10:01 AM

Is that a symptom of a DOS attack? I don't think it is. And the site's been fine.

Posted by: Bill from INDC at July 11, 2006 10:36 AM

Yeah, you're being mailbombed. Someone forges a mail message that will fail for some reason, and that has you as the apparent sender. (All too easy to do, SMTP wasn't meant for a network with malicious senders.) They then send it many times. Boom, your mailbox fills up, but it's not AS EASILY traceable.

HOWEVER, the headers should have clues; save a few of the mails, and contact abuse@ addresses at the mail services.

Posted by: Charlie (Colorado) at July 11, 2006 10:50 AM

mailbombed to what, annoy me?

It's not taking the site down.

Posted by: Bill from INDC at July 11, 2006 11:32 AM

We're having something similar going on as well. Goldstein's site is down again today--I guess the bunny boilers are yukking it up.

Posted by: Steve the LLamabutcher at July 11, 2006 11:37 AM

I agree with the above. It sounds like a reverse spam attack. Basically, they spam but put you as the return address. The purpose is to inconvenience you.

IIRC ISPs will typically terminate the offender for such action, if they can be traced. If you can prove damages and care that much, I would imagine you could probably seek a civil remedy.

Posted by: TallDave at July 11, 2006 02:41 PM

Bill,

If you are indeed being used as described above, it can seriously impact your ability to communicate via e-mail. More and more hosts are subscribing to anti-spam services. They blacklist IP addresses based on incidences of spamming. Innocent parties get caught up in this, too. I spent the better part of a week straightening out my business communications because of spam blacklisting.

If you ever want to check whether your IP is blacklisted, use the Spam Database Lookup here.

Posted by: Dave in W-S at July 11, 2006 03:48 PM

Specifically, you've been hit by a "Joe Job". Google the phrase for more info.

Posted by: Jeff Boulier at July 11, 2006 06:19 PM

it is easy to find out where the email came from.

just right click on the email in outlook and select options.

you will see a text box with the heading Internet Headers. this is how the email traveled through the internet. here is an example:

Microsoft Mail Internet Headers Version 2.0
Received: from myemailserver.com ([209.87.220.71]) by myemailserver.com with Microsoft SMTPSVC(5.0.2195.6713);
Tue, 18 Jul 2006 08:19:20 -0700
Received: from myemailserver.com ([208.185.174.181]) by myemailserver.com with Microsoft SMTPSVC(5.0.2195.6713);
Tue, 18 Jul 2006 08:19:20 -0700
Received: from en077.en25.com (en077.en25.com [129.33.172.77])
by myemailserver.com (8.12.11/8.12.10/ZL1.2) with ESMTP id k6IFJIqG032218
for ; Tue, 18 Jul 2006 08:19:18 -0700
X-Mailer: SMTP
X-SiteID: 360
Thread-Topic: IDZone July 2006 -- Security chiefs see changes in identity theft
thread-index: AcaqfbgvSZTXH2zKS0GG9bardQU3oQ==
Reply-To: "Trusted Network Technologies"
From: "Trusted Network Technologies"
To:
Cc:
Subject: IDZone July 2006 -- Security chiefs see changes in identity theft
Date: Tue, 18 Jul 2006 11:20:39 -0400
Message-ID:
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_3E81_01C6AA5C.313A3810"
Content-Class: urn:content-classes:message
Importance: normal
Priority: normal
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.2663
Return-Path: TrustedNetworkTechnologies@en25.com
X-OriginalArrivalTime: 18 Jul 2006 15:19:20.0817 (UTC) FILETIME=[8B1C7610:01C6AA7D]

------=_NextPart_000_3E81_01C6AA5C.313A3810
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

------=_NextPart_000_3E81_01C6AA5C.313A3810
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable


------=_NextPart_000_3E81_01C6AA5C.313A3810--

here is the originating email server line:

Tue, 18 Jul 2006 08:19:20 -0700
Received: from en077.en25.com (en077.en25.com [129.33.172.77])
by myemailserver.com

Posted by: dogbreath at July 18, 2006 12:15 PM

Hi there! Your site is cool! nokia6630

Posted by: hermelinda at July 23, 2006 07:20 AM

This site is a lot of fun very well designed. nokia6630

Posted by: miriam at July 25, 2006 03:38 PM

Hello and congratulations! nokia6630

Posted by: warren at July 27, 2006 01:19 AM

ionolsen16 Great website! Bookmarked! I am impressed at your work!www_4_2
www_4_3
www_4_4
www_4_5
www_4_6
www_4_7
www_4_8
www_4_9
www_4_10
www_4_11

Posted by: topicstarter at October 13, 2006 10:53 AM

ionolsen22 Your site is very cognitive. I think you will have good future.:)

Posted by: topicstarter at October 19, 2006 04:21 AM

ionolsen23 Your home page its great

Posted by: nervotrepka at October 19, 2006 05:45 PM

ionolsen24 Best site I see. Thanks.

Posted by: tester at October 20, 2006 05:53 PM

ionolsen24 I just don not have anything to say right now.

Posted by: tabletka at October 20, 2006 06:07 PM

ionolsen26 Great website! Bookmarked! I am impressed at your work!

Posted by: pipetka at October 23, 2006 02:35 PM

ionolsen27 I like your site

Posted by: medved at October 24, 2006 09:35 AM

ionolsen28 May we exchange links with your site?

Posted by: babnik at October 25, 2006 04:52 AM

ionolsen34 HI! I love this place!

Posted by: tabletka at October 31, 2006 01:31 PM

ionolsen40 I just don not have anything to say right now.

Posted by: volosok at November 5, 2006 07:09 PM

ionolsen41 Very good site. Thanks for author!

Posted by: vrungel at November 6, 2006 04:08 PM

ionolsen45 I just don not have anything to say right now.

Posted by: christian single at November 10, 2006 03:41 PM

568b05cd54a4 May we exchange links with your site?

Posted by: no dental insurance at November 13, 2006 01:54 PM

Posted by: generic viagra at November 14, 2006 07:43 AM

b250b264fe75 Keep up this great resource

Posted by: Tables sp at November 17, 2006 11:01 AM

50a6e38fb4ef Hi

Posted by: female cum squirter at November 24, 2006 03:20 AM

c771f59a235f Great work

Posted by: lesbian at November 25, 2006 10:49 PM

44738b17d240 Nice site

Posted by: soma carisoprodol at November 27, 2006 07:11 AM

5db0581f8bfb My homepage

Posted by: sexy at November 27, 2006 01:28 PM

741a582b6a69 Good work

Posted by: insurance life quote select term at November 27, 2006 02:20 PM

529420d00322 Hello!

Posted by: ass to mouth at November 28, 2006 10:34 AM

182e91b4114c Hi

Posted by: cheap tramadol at November 28, 2006 03:33 PM

fcbde1ab7b2c Nice site

Posted by: health insurance coverage at November 29, 2006 09:16 AM

fcac5b5ea598 Good work

Posted by: shorturl at December 20, 2006 06:14 AM

81e31de21f46 Hi

Posted by: tramadol at January 21, 2007 10:31 PM

dpao stjx zwoigmjp odwuafgm kjfatsonl aoghnwyj zwarbn

Posted by: sdbipqx typzw at February 28, 2007 02:40 AM

William Styron, whose Holocaust novel Sophie's Choice became a film and an opera, has died, aged 81...

Posted by: Darian William at April 17, 2007 03:35 AM

William Styron, whose Holocaust novel Sophie's Choice became a film and an opera, has died, aged 81...

Posted by: Darian William at April 17, 2007 03:36 AM