[Dshield] Re: Delivery Status Notification (Failure)

Mike Trahar newatthis at rcn.com
Thu Mar 3 02:36:02 GMT 2005


postmaster at statefarm.com wrote:
> This is an automatically generated Delivery Status Notification.
> 
> Delivery to the following recipients failed.
> 
>        anu.nayar.j8nl at statefarm.com
> 
> 
> 
> 
> 
> ------------------------------------------------------------------------
> 
> Original-Envelope-Id: 4222AD55.6010105 at rcn.com
> Reporting-MTA: dns;WPSBJZXT.OPR.STATEFARM.ORG
> Received-From-MTA: dns;ms00net1.opr.statefarm.org
> Arrival-Date: Mon, 28 Feb 2005 04:38:12 -0600
> Content-Type: text/plain; charset=us-ascii
> 
> Final-Recipient: rfc822;anu.nayar.j8nl at statefarm.com
> Action: failed
> Status: 5.1.1
> 
> 
> ------------------------------------------------------------------------
> 
> Subject:
> Re: [Dshield] New web server
> From:
> newatthis at rcn.com
> Date:
> Mon, 28 Feb 2005 00:34:13 -0500
> To:
> list at lists.dshield.org
> 
> To:
> list at lists.dshield.org
> 
> Received:
> from ms00net1.opr.statefarm.org ([10.36.215.80]) by 
> WPSBJZXT.OPR.STATEFARM.ORG with Microsoft SMTPSVC(5.0.2195.6713); Mon, 
> 28 Feb 2005 04:38:12 -0600
> Received:
> from localhost (root at localhost) by ms00net1.opr.statefarm.org (8.9.3 
> (PHNE_29774)/8.9.3) with ESMTP id EAA25864 for 
> <anu.nayar.j8nl at statefarm.com>; Mon, 28 Feb 2005 04:38:12 -0600 (CST)
> Received:
> from WPSCHQPJ.OPR.STATEFARM.ORG (wpschqpj.opr.statefarm.org 
> [10.34.78.37]) by ms00net1.opr.statefarm.org (8.9.3 (PHNE_29774)/8.9.3) 
> with ESMTP id EAA25859 for <anu.nayar.j8nl at statefarm.com>; Mon, 28 Feb 
> 2005 04:38:11 -0600 (CST)
> Received:
> (from uucp at localhost)by fw00mal2.opr.statefarm.org (8.11.1 - (Revision 
> 1.4+JAGae91741+JAGae92668)/8.11.0) id j1SAcBK00913for 
> <anu.nayar.j8nl at statefarm.com>; Mon, 28 Feb 2005 04:38:11 -0600 (CST)
> Received:
> from www.dshield.org(65.173.218.97) by fw00mal2.opr.statefarm.org via 
> csmap (V6.0)id srcAAAa00906; Mon, 28 Feb 05 04:38:11 -0600
> Received:
> from maverick12a.giac.net (maverick12a.giac.net [127.0.0.1])by 
> maverick12a.giac.net (8.12.11/8.12.11) with ESMTP id j1SA0kK3022879;Mon, 
> 28 Feb 2005 10:01:10 GMT
> Received:
> from iceman12-int.giac.net (iceman12-ext.giac.net [65.173.218.113])by 
> maverick12a.giac.net (8.12.11/8.12.11) with ESMTP idj1S5Y9Rl005941for 
> <list at lists.dshield.org>; Mon, 28 Feb 2005 05:34:09 GMT
> Received:
> (qmail 12208 invoked from network); 28 Feb 2005 05:15:14 -0000
> Received:
> from unknown (HELO iceman12-ext.giac.net) (65.173.218.115)by 
> iceman12-int.giac.net with SMTP; 28 Feb 2005 05:15:14 -0000
> Received:
> (qmail 12203 invoked from network); 28 Feb 2005 05:15:14 -0000
> Received:
> from unknown (HELO smtp06.mrf.mail.rcn.net) (207.172.4.65)by 
> iceman12-ext.giac.net with SMTP; 28 Feb 2005 05:15:14 -0000
> Received:
> from 65-78-22-194.c3-0.frm-ubr4.sbo-frm.ma.cable.rcn.com([65.78.22.194] 
> helo=[192.168.1.100])by smtp06.mrf.mail.rcn.net with esmtp (Exim 3.35 
> #7)id 1D5dXc-0005xc-00for list at lists.dshield.org; Mon, 28 Feb 2005 
> 00:34:00 -0500
> Received:
> from 127.0.0.1 (AVG SMTP 7.0.300 [266.5.1]);Mon, 28 Feb 2005 00:34:13 -0500
> User-Agent:
> Mozilla Thunderbird 1.0 (Windows/20041206)
> X-Accept-Language:
> en-us, en
> X-Mailman-Approved-At:
> Mon, 28 Feb 2005 09:55:31 +0000
> X-BeenThere:
> list at lists.dshield.org
> X-Mailman-Version:
> 2.1.5
> List-Id:
> General DShield Discussion List <list.lists.dshield.org>
> List-Unsubscribe:
> <http://www.dshield.org/mailman/listinfo/list>,<mailto:lis 
> t-request at lists.dshield.org?subject=unsubscribe>
> List-Archive:
> <http://lists.sans.org/pipermail/list>
> List-Post:
> <mailto:list at lists.dshield.org>
> List-Help:
> <mailto:list-request at lists.dshield.org?subject=help>
> List-Subscribe:
> <http://www.dshield.org/mailman/listinfo/list>,<mailto:list- 
> request at lists.dshield.org?subject=subscribe>
> Errors-To:
> list-bounces at lists.dshield.org
> X-imss-version:
> 2.7
> X-imss-result:
> Passed
> X-imss-scores:
> Clean:99.90000 C:22 M:0 S:5 R:5
> X-imss-settings:
> Baseline:2 C:3 M:1 S:2 R:1 (0.1500 0.4500)
> X-OpenMail-Hops:
> 1
> Message-ID:
> <4222AD55.6010105 at rcn.com>
> References:
> <422253C9.5080105 at euclidian.com>
> In-Reply-To:
> <422253C9.5080105 at euclidian.com>
> Reply-To:
> list at lists.dshield.org
> MIME-Version:
> 1.0
> Sender:
> newatthis at rcn.com
> Content-Disposition:
> inline
> Return-Path:
> newatthis at rcn.com
> X-OriginalArrivalTime:
> 28 Feb 2005 10:38:12.0956 (UTC) FILETIME=[9A7961C0:01C51D81]
> Content-Type:
> text/plain; charset=ISO-8859-1; format=flowed
> Content-Transfer-Encoding:
> quoted-printable
> 
> 
> Johannes B. Ullrich wrote:
> 
>>
>> I switched www.dshield.org and isc.sans.org to a new web server this 
>> morning. So far things look stable. Aside from a hardware upgrade, I
>> made quite a few software/configuration changes (the old system started
>> out as a RedHat 7.3 system and it was hard to keep it patched these day).
>>
>> The old server will stick around at the old IP for a couple more days 
>> just in case.
>>
>>
>> ------------------------------------------------------------------------
>>
>> -------------- Sponsor Message ------------------------------------
>> SANS Intrusion Immersion Training: Orlando, FL, February 3-9th
>> http://www.sans.org/orlando05
>>
>> _______________________________________________
>> send all posts to list at lists.dshield.org
>> To change your subscription options (or unsubscribe), see: 
>> http://www.dshield.org/mailman/listinfo/list
>>
>>
>> ------------------------------------------------------------------------
>>
>> No virus found in this incoming message.
>> Checked by AVG Anti-Virus.
>> Version: 7.0.300 / Virus Database: 266.5.1 - Release Date: 2/27/2005
> 
> This is MUCH better than the old system. It's MUCH faster and everything 
> seems to work incredibly well. I haven't been to the site too much for a 
> long while because everything was so slow and messed up but this is 
> fantastic.
> 
> Great work Johannes.
> 
> 
> 
> ------------------------------------------------------------------------
> 
> No virus found in this incoming message.
> Checked by AVG Anti-Virus.
> Version: 7.0.300 / Virus Database: 266.5.2 - Release Date: 2/28/2005
1. This is a bounce of a post i made to the Dshield list.
2. I never e-mailed this domain directly until just a few minutes ago.
anybody else getting this?? can anybody explain it for me?? after
getting two of these I sent an e-mail to the postmaster at statefarm but
anything I send there asking for an explanation bounces for one reason
or another. is this some kind of spam or virus? google didn't help me.

Thanks,

Mike



-- 
No virus found in this outgoing message.
Checked by AVG Anti-Virus.
Version: 7.0.300 / Virus Database: 266.5.7 - Release Date: 3/1/2005



More information about the list mailing list