"Mail delivery failed: returning message to sender" spam flooding!
Thread poster: Clarisa Moraña

Clarisa Moraña  Identity Verified
Argentina
Local time: 23:31
Member (2002)
English to Spanish
+ ...
May 21, 2014

I have five emails accounts with the domain idea-translations I registered via proz. One of those accounts suddenly is flooded with a sort of spam messages apparently sent by me, which are returning to me. An example of one of the spam emails I'm receiving is as follows (i changed my domain and email account name!) is as follows:

Mail delivery failed: returning message to sender

A message that you sent could not be delivered to one or more of its
recipients. Thi
... See more
I have five emails accounts with the domain idea-translations I registered via proz. One of those accounts suddenly is flooded with a sort of spam messages apparently sent by me, which are returning to me. An example of one of the spam emails I'm receiving is as follows (i changed my domain and email account name!) is as follows:

Mail delivery failed: returning message to sender

A message that you sent could not be delivered to one or more of its
recipients. This is a permanent error. The following address(es) failed:

david@corsa.co.id
SMTP error from remote mail server after RCPT TO::
host corsa.co.id [103.31.225.131]: 550 No such person at this address"
dave6873@yahoo.co.uk
SMTP error from remote mail server after end of data:
host mx-eu.mail.am0.yahoodns.net [188.125.69.79]:
554 delivery error: dd Sorry your message to dave6873@yahoo.co.uk cannot be delivered. This account has been disabled or discontinued [#102]. - mta1137.mail.ir2.yahoo.com
darknesschills@hotmail.com
SMTP error from remote mail server after RCPT TO::
host mx3.hotmail.com [65.54.188.110]: 550 Requested action not taken:
mailbox unavailable
datdude@myspace.com
The mail server could not deliver mail to datdude@myspace.com. The account or domain may not exist, they may be blacklisted, or missing the proper dns entries.

------ This is a copy of the message, including all the headers. ------

Return-path:
Received: from [85.9.120.254] (port=1677 helo=WIN-QR1R9GS1KDE)
by melo.host.proz.com with esmtpsa (TLSv1:DHE-RSA-AES256-SHA:256)
(Exim 4.80)
(envelope-from )
id 1Wn8cn-0003N9-Ec; Wed, 21 May 2014 15:40:14 +0000
X-Mailer: idea-translations.com
Message-ID: 2ECEDF2EB7D6EC9537361846CC427AE2@idea-translations.com
Subject: Fwd:
From:


The spam emails are still coming, even if the email software is not been used. I've already deleted my email account from my hosting provider at Proz.com. As that account was linked to gmail, I deleted the link to gmail. I have AVG security. An additional Kasperky analysis showed no issues at all.

What else can I check to stop receiving the spam emails? Or, where can I check if I'm sending spam to unknown people?

Regards

Clarisa
Collapse


 

Luca Tutino  Identity Verified
Italy
Local time: 03:31
Member (2002)
English to Italian
+ ...
Write to ProZ Support May 21, 2014

Dear Clarisa,

This can be really annoying, I am sorry for you. I believe that there is a good chance that your email server is not physically involved in the sending of the messages. However you should probably ask support at proz.com about this. In the mean time you might be able to set up some filter to alleviate the disturbance.

I hope that your problem will be solved quickly, and I will appreciate receiving your further information about the future developments.
... See more
Dear Clarisa,

This can be really annoying, I am sorry for you. I believe that there is a good chance that your email server is not physically involved in the sending of the messages. However you should probably ask support at proz.com about this. In the mean time you might be able to set up some filter to alleviate the disturbance.

I hope that your problem will be solved quickly, and I will appreciate receiving your further information about the future developments.

Luca
Collapse


 

Clarisa Moraña  Identity Verified
Argentina
Local time: 23:31
Member (2002)
English to Spanish
+ ...
TOPIC STARTER
it was my email May 22, 2014

Dear Luca

At the same time I noticed the spam, the technical staff at proz.com detected that my email account was sending spams (not even from my computer, but I guess from some remote hosting), and changed my password. It was an almost simuntaneous operation. They were very supportive.

I decided, nevertheless to delete temporarily that email account and recover it in a couple of days. I also modified the password of the remaining accounts.

Regards
... See more
Dear Luca

At the same time I noticed the spam, the technical staff at proz.com detected that my email account was sending spams (not even from my computer, but I guess from some remote hosting), and changed my password. It was an almost simuntaneous operation. They were very supportive.

I decided, nevertheless to delete temporarily that email account and recover it in a couple of days. I also modified the password of the remaining accounts.

Regards

Clarisa
Collapse


 

Anton Konashenok  Identity Verified
Czech Republic
Local time: 03:31
English to Russian
+ ...
This is not an intrusion May 22, 2014

Clarisa, the incident most likely has nothing to do with stolen passwords or your account security being compromised in any other way. What you encounter is a so-called 'backscatter': spammers are simply impersonating you, putting your e-mail address in the "From:" line of their mailings, and when spam is rejected by the recipient, it comes back to you because the "From:" line says so. To suppress it, you can establish a so-called SPF (sender policy framework) record in your domain's DNS records... See more
Clarisa, the incident most likely has nothing to do with stolen passwords or your account security being compromised in any other way. What you encounter is a so-called 'backscatter': spammers are simply impersonating you, putting your e-mail address in the "From:" line of their mailings, and when spam is rejected by the recipient, it comes back to you because the "From:" line says so. To suppress it, you can establish a so-called SPF (sender policy framework) record in your domain's DNS records. It may not eliminate the backscatter entirely, but it would reduce it very substantially. Judging by your question, this is probably beyond your IT skill level, but may be able to ask the tech support staff administering your domain to do so.Collapse


 

Lori Cirefice  Identity Verified
France
Local time: 03:31
French to English
Backscatter May 23, 2014

I agree with Anton that this sounds like "backscatter". It has happened to me before too, and I have dealt with it by using filters and "white list" email solutions such as Delosmail (I really love Delosmail by the way - great company, very supportive).

Thanks for mentioning SPF Anton, I had never heard of that, will keep it in mind in the future.


 


To report site rules violations or get help, contact a site moderator:


You can also contact site staff by submitting a support request »

"Mail delivery failed: returning message to sender" spam flooding!

Advanced search






SDL MultiTerm 2019
Guarantee a unified, consistent and high-quality translation with terminology software by the industry leaders.

SDL MultiTerm 2019 allows translators to create one central location to store and manage multilingual terminology, and with SDL MultiTerm Extract 2019 you can automatically create term lists from your existing documentation to save time.

More info »
Wordfast Pro
Translation Memory Software for Any Platform

Exclusive discount for ProZ.com users! Save over 13% when purchasing Wordfast Pro through ProZ.com. Wordfast is the world's #1 provider of platform-independent Translation Memory software. Consistently ranked the most user-friendly and highest value

More info »



Forums
  • All of ProZ.com
  • Term search
  • Jobs
  • Forums
  • Multiple search