On Fri, Feb 03, 2006 at 08:16:23AM +0000, mike wilson wrote:
>
> >
> > From: John Francis <[EMAIL PROTECTED]>
> > Date: 2006/02/03 Fri AM 05:55:44 GMT
> > To: [email protected]
> > Subject: Re: Delivery Failure Messages
> >
> >
> > It's somebody subscribed to the list from an account
> > that incorrectly reports delivery failures to the
> > original submitter, not to the 'envelope from' address.
> >
> > This is a failure commonly found in poorly written mail systems.
>
> Not someone who is infected with a virus that spoofs addresses?
No. The symptoms aren't right.
In this case what you get is what definitely appears to be a genuine
delivery failure message (including quoting your original post).
All the headers appear correct, and consistent with the address the
message claims to come from. There's no additional payload.
A virus masquerading as a delivery failure would:
o Not quote a genuine message in the body.
o Contain additional payload (the virus)
o Have spoofed addresses that don't match the headers
(and which would vary from message to message)
o Be generated spontaneously, not only in response to
a posting.
