Someone with full mailbox, bouncing messages..

From: Mike A. Harris (mharris@meteng.on.ca)
Date: Thu Jul 06 2000 - 01:30:55 EST


I've been receiving messages lately from someone's mailer daemon
stating that a particular user has a full mailbox, so the
delivery couldn't be made.

The email address is: srao@globalnoise.com

Since I've never to my knowledge posted anything to this person,
it MUST be bouncing from a mailing list that I am on, and to
which I post to. I've CC'd this message to several lists, so
that with any luck, the list maintainer will spare us all a bunch
of junkmail full mailbox notices and remove this user from
subscription lists.

In looking through the headers, I see that globalnoise.com is
using Sendmail 8.8.7. If I remember correctly, this version of
sendmail has vulnerabilities allowing SPAMMERS to send out
SPAM. Perhaps even root shell vulnerabilities. Could someone
either this person from the lists, or break in to their system
via sendmail and delete their full mailbox so that we can stop
getting these notices?

Is anyone else getting these?

The contents of the bounceback message is:
---------------------------------------------------------------
Return-Path: <MAILER-DAEMON@globalnoise.com>
Received: from localhost (localhost [127.0.0.1])
        by asdf.capslock.lan (8.9.3/8.9.3) with ESMTP id CAA12961
        for <mharris@localhost>; Thu, 6 Jul 2000 02:18:37 -0400
From: MAILER-DAEMON@globalnoise.com
Received: from meteng.on.ca
        by localhost with POP3 (fetchmail-5.1.0)
        for mharris@localhost (single-drop); Thu, 06 Jul 2000
02:18:37 -0400 (EDT)
Received: from ganga.globalnoise.com (137.114.trusted.net
[216.235.137.114] (may be forged))
        by meteng.on.ca (8.9.3/8.9.3) with ESMTP id CAA05045
        for <mharris@meteng.on.ca>; Thu, 6 Jul 2000 02:40:03
-0400
Received: (from guser@localhost)
        by ganga.globalnoise.com (8.8.7/8.8.7) id CAA16195;
        Thu, 6 Jul 2000 02:22:43 -0400
Date: Thu, 6 Jul 2000 02:22:43 -0400
Message-Id: <200007060622.CAA16195@ganga.globalnoise.com>
X-Authentication-Warning: ganga.globalnoise.com: guser set sender
to MAILER-DAEMON@globalnoise.com using -f
X-Loop: majordomo@vger.rutgers.edu
To: mharris@meteng.on.ca
References: <Pine.LNX.4.21.0007060208500.12856-100000@asdf.capslock.lan>
In-Reply-To: <Pine.LNX.4.21.0007060208500.12856-100000@asdf.capslock.lan>
X-Loop: srao@globalnoise.com
Subject: Mail delivery failure-MailBox Full

Your mail cannot be delivered to srao@globalnoise.com.
Reason: User's mailbox full.

-- 
Mike A. Harris                                     Linux advocate     
Computer Consultant                                  GNU advocate  
Capslock Consulting                          Open Source advocate

I've overclocked my keyboard interface. It's quite messy dipping my hands into the mineral oil, but *MAN* is my keyboard ever fast now! - Anonymous Coward

- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.rutgers.edu Please read the FAQ at http://www.tux.org/lkml/



This archive was generated by hypermail 2b29 : Fri Jul 07 2000 - 21:00:18 EST