[Dshield] Re: Delivery Status Notification (Failure)

Mike Trahar newatthis at rcn.com
Wed Mar 9 15:42:21 GMT 2005


Abuse wrote:
> ** Reply to message from Mike Trahar <newatthis at rcn.com> on Wed, 02 Mar 2005
> 21:36:02 -0500
> 
> 
>>1. This is a bounce of a post i made to the Dshield list.
>>2. I never e-mailed this domain directly until just a few minutes ago.
>>anybody else getting this??
> 
> 
> Yes.
> 
> 
> 
>>can anybody explain it for me??
> 
> 
> My guess is that someone was subscribed to this mailing list and has since left
> State Farm and their email address was removed.
> 
> 
> 
>>after
>>getting two of these I sent an e-mail to the postmaster at statefarm but
>>anything I send there asking for an explanation bounces for one reason
>>or another. is this some kind of spam or virus? google didn't help me.
> 
> 
> I have sent email to State Farm at ivan.brandow.acik at statefarm.com (absolutely
> no response) which was an email address that spamcop.net was using as a
> reporting address.  Today there is no reporting address for State Farm.
> 
> State Farm appears to be completely clueless.  There is not an abuse address
> that works.  They are receiving email and later bouncing it to the address in
> the "From" field instead of rejecting it with a 5xx return code while the SMTP
> transaction is in progress.
> -------------- Sponsor Message ------------------------------------
> SANS Intrusion Immersion Training: Orlando, FL, February 3-9th
> http://www.sans.org/orlando05
> 
> _______________________________________________
> send all posts to list at lists.dshield.org
> To change your subscription options (or unsubscribe), see: http://www.dshield.org/mailman/listinfo/list
> 
> 
Thanks for the replies. When I get the energy I'm going to track these 
twits down and try to phone them.

Mike



-- 
No virus found in this outgoing message.
Checked by AVG Anti-Virus.
Version: 7.0.308 / Virus Database: 266.6.4 - Release Date: 3/7/2005




More information about the list mailing list