Discussion Locked

returned mail user unknown, I never sent

0 helpful
10 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Hi,
I have recieved several emails similar to the one below. They all are from aol. I never sent these. I ran ad aware and removed anything it found yet I still recieve these. Any Thoughts.

The original message was received at Mon, 22 Sep 2003 22:09:41 -0400 (EDT) from ppp-64-115-79-55.broadviewnet.net [64.115.79.55]

*** ATTENTION ***

Your e-mail is being returned to you because there was a problem with its delivery. The address which was undeliverable is listed in the section
labeled: "----- The following addresses had permanent fatal errors -----".

The reason your mail is being returned to you is listed in the section
labeled: "----- Transcript of Session Follows -----".

The line beginning with "<<<" describes the specific reason your e-mail could not be delivered. The next line contains a second error message which is a general translation for other e-mail servers.

Please direct further questions regarding this message to your e-mail administrator.

--AOL Postmaster

----- The following addresses had permanent fatal errors -----

----- Transcript of session follows -----
... while talking to air-xj04.mail.aol.com.:
>>> RCPT To:
<<< 550 katygiles IS NOT ACCEPTING MAIL FROM THIS SENDER
550 ... User unknown

10 replies

by mufassalion

If you are the mail admin, then it is likely you are getting an NDR for a mail sent from a spammed address on your domain. ie.
Someone used your companies domain name as a valid mail address to send spam. It was rejected and an NDR was sent to what is most likely postmaster@yourdomain.com.
That NDR message looks like it could be an anispam filter...
I could be wrong though...

by casemaker

Thank You, I am not on a domain. It is p2p. I also ran virus scan and do not have virus.

by mufassalion

If you are the mail admin, then it is likely you are getting an NDR for a mail sent from a spammed address on your domain. ie.
Someone used your companies domain name as a valid mail address to send spam. It was rejected and an NDR was sent to what is most likely postmaster@yourdomain.com.
That NDR message looks like it could be an anispam filter...
I could be wrong though...

by casemaker

Thank You, I am not on a domain. It is p2p. I also ran virus scan and do not have virus.

by mufassalion

If you are the mail admin, then it is likely you are getting an NDR for a mail sent from a spammed address on your domain. ie.
Someone used your companies domain name as a valid mail address to send spam. It was rejected and an NDR was sent to what is most likely postmaster@yourdomain.com.
That NDR message looks like it could be an anispam filter...
I could be wrong though...

by casemaker

Thank You, I am not on a domain. It is p2p. I also ran virus scan and do not have virus.

by mufassalion

Also check out Sobig. As far as Im aware, Sobig Spoofs mail address in your addresss book and then sends itself FROM that adress. So, if I had your address is my adress book and contracted Sobig, My machine would send out a mail from YOUR mail address. If the recipient rejected the mail (cause it is a virus) the NDR would be sent to the from adress, namely YOU... So you get the NDR without ever sending the mail...

by casemaker

Thank You, I am not on a domain. It is p2p. I also ran virus scan and do not have virus.

This discussion is closed to new replies.