Print

Please login or register.
1 Hour 1 Day 1 Week 1 Month Forever
Login with username, password and session length

[renluop]

We received a phone call to inform us that an email to us had bounced, yet it arrived in our inbox some time later. An edited version of the message source in Thunderbird is here

Code: [Select]

From - Sat Jun 08 10:44:06 2013
X-Account-Key: account3
X-UIDL: UID4453-1215182652
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:                                                                                 
Return-path: <XXXu3amembership@yahoo.co.uk>
Envelope-to: me@user.plus.com
Delivery-date: Sat, 08 Jun 2013 10:41:11 +0100
Received: from [212.159.8.109] (helo=avasin09.plus.net)
  by inmx13.plus.net with esmtp (PlusNet MXCore v2.00) id 1UlFe3-0003aj-45
  for me@user.plus.com; Sat, 08 Jun 2013 10:41:11 +0100
Received: from nm12-vm0.bullet.mail.ird.yahoo.com ([77.238.189.196])                                          77.238.189.196   yahoo europe Eire
by avasin09.plus.net with Plusnet Cloudmark Gateway
id llh81l0094EhPnR01lhATw; Sat, 08 Jun 2013 10:41:11 +0100
X-CM-Score: 0.00
X-CNFS-Analysis: v=2.1 cv=SLd7CofH c=1 sm=1 tr=0
 a=mJuGbkwUFCJFPQaKYTZJmA==:117 a=3vY1Y32J1dHuvLAlKCqrBA==:17 a=CjxXgO3LAAAA:8
 a=0Bzu9jTXAAAA:8 a=PLmm6w-6prgA:10 a=z8WaIvWEgkcA:10 a=zzxzp6Hi2ogA:10
 a=Krkq5yK2NkIA:10 a=BrDiTsk0AAAA:8 a=TvVC0MHT7WAvNbuXZ2wA:9
 a=Fc1fJeChPP_r2lr9:21 a=1lfoOZi97btnLUHN:21 a=wPNLvfGTeEIA:10
 a=EQ3pcH2ENMyxVhXQFSQA:9 a=iGkmNwp-gr4r-6nN:21 a=_W_S_7VecoQA:10
Received: from [77.238.189.233] by nm12.bullet.mail.ird.yahoo.com with NNFMP; 08 Jun 2013 09:41:08 -0000     77.238.189.233 yahoo europe Eire
Received: from [212.82.98.104] by tm14.bullet.mail.ird.yahoo.com with NNFMP; 08 Jun 2013 09:41:08 -0000       212.82.98.104 yahoo europe  UK
Received: from [127.0.0.1] by omp1041.mail.ir2.yahoo.com with NNFMP; 08 Jun 2013 09:41:08 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 842932.5973.bm@omp1041.mail.ir2.yahoo.com
Received: (qmail 85317 invoked by uid 60001); 8 Jun 2013 09:41:08 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.co.uk; s=s1024; t=1370684468; bh=hYcfk3413WV8huEEH9vX4AXz5nLjknSI5Kz1IaisYJ0=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:To:MIME-Version:Content-Type; b=1HlXtoavMmok/Bb0Z5+l1lT8yBtevwDl1evZVChRTMsZ/OfS60aVHlGHQ91Mom9OpAFrh0ZskhHkrfQ0soUKscjg8UT4OwXhtoi9lxKNxiX8SbU4nyv5b28+2Xc2mlmsiGNj8MfedtkQpAUA6tUEeAeMQnT4+T16ASZ5ViV4358=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
  s=s1024; d=yahoo.co.uk;
  h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:To:MIME-Version:Content-Type;
  b=Qe58G+sm2m0mw4P+o4XplXX5YDDIw1+g5ZBgPhiruzPwTohl3y/kUkPjZwtRRTFs+0JbyuAc5SVI9AZAXhqp39Ht/u3R4kNniHSCVYzRMQkmzMQ542hztXv6F4N9SkfKkY4xyY/BDVkXhSlUiV3sV9i4PBFUmCwfY0sB3ZtYjYY=;
X-YMail-OSG: wA64uGIVM1kjW9UBoNvde6DWj95vNjJXc6V703ZwcIxT8NO
 fk_tHY0SLfsEPLKqMAIAOxn7NaQuaI2p93XO91YD1ceR2rcbiMdVgnweBUbz
 OvNYQHL6S8hKgyY7yEoxmIzcD6I0U1wAmA3AZuq15kVkIkOJiBovZioJbjiP
 gNIvSn77_xDxnwnt1an9iZyrmHWsq5RVb8CdMnkpHLi7TX2t7zhbQ8bJ8AcL
 mGrgqov9ytzhEkDH.pyN8MTVre9nht7KvO8WYmePVnXMFRP8llIDdsTO4xlF
 Ea7Vy8OiCj1nxHNocK1Q..y_6Kfme2S5Lt0TstAgnoZZHIotRQJJsY25Z_vu
 B_.LzCYtZiww339qUbyT_LnLaQcCy72IHgpbdyTkveMlaGO..W.mT7Nwl23c
 GVp9iqGQdN1Ovo5zU89JBjrLsaTkJAZWc_b6_el_ofQqFovMfZvBwo.Sw_7p
 ft2xp_KnCyxhKaGna377GurKC9DYH6DIKH50-
Received: from [2.216.22.3] by web172104.mail.ir2.yahoo.com via HTTP; Sat, 08 Jun 2013 10:41:08 BST              2.216.22.3 Sky
X-Rocket-MIMEInfo: 002.001,R29vZCBNb3JuaW5nIE1lbWJlcnMKCkl0IGhhcyBjb21lIHRvIG91ciBhdHRlbnRpb24gdGhhdCB0aGVyZSBpcyBhIG1hbGljaW91cyBlbWFpbCBiZWluZyBjaXJjdWxhdGVkIHRvIG91ciBtZW1iZXJzIHRoYXQgYXBwZWFycyB0byBiZSBmcm9tIG91ciB3ZWJzaXRlLCBhbHRob3VnaCBpdHMgYWRkcmVzcyBpcyBSaW5nd29vZCAiVVRocmVlQSIgwqBJdCBhcnJpdmVzIGluIHlvdXIgSW5ib3ggd2l0aCBhIHZhcmlldHkgb2YgwqBzdWJqZWN0IGhlYWRpbmdzLiDCoFRoaXMgZW1haWwgbGlua3MgeW91IHRvIGEgc2kBMAEBAQE-
X-Mailer: YahooMailWebService/0.8.145.547
Message-ID: <1370684468.83780.YahooMailNeo@web172104.mail.ir2.yahoo.com>
Date: Sat, 8 Jun 2013 10:41:08 +0100 (BST)
From: XXX UThreeA <XXXu3amembership@yahoo.co.uk>
Reply-To: XXX UThreeA <XXXu3amembership@yahoo.co.uk>
To: numerous addresses
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="-1019788788-1885157061-1370684468=:83780"
X-PN-Virus-Filtered: by PlusNet MXCore (v5.00)
X-PN-Spam-Filtered: by PlusNet MXCore (v5.00)
Subject:

---1019788788-1885157061-1370684468=:83780
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable

Good Morning Members=0A=0AIt has come to our attention that there is a mali=
cious email being circulated to our members that appears to be from our web=
site, although its address is XXX "UThreeA" =A0It arrives in your Inbo=
x with a variety of =A0subject headings. =A0This email links you to a site =
ending with ". php". =A0There have been several similar emails with differe=
nt details. This would appear to be an unfortunate scam that seems to be pr=
evalent at the moment.=0A=0AWe would strongly advise you not to open this e=
mail as it is trying to hack into your online address contacts. =A0Delete i=
t immediately to keep yourself safe.=0A=0AThe Committee=0AXXX U3A=0A
---1019788788-1885157061-1370684468=:83780
Content-Type: text/html; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable




Is there anything there to suggest why what happened did?

Also in the last week a confirmation of a tour booking also did not get through and having phoned the company about it they sent it to my gmail
 address. The two events are of concern.

[guest]

That looks like the Sky Yahoo mail service? If so its been borked with various issues since they swapped over from google, and frankly Yahoo gets a very high "spam score" in most email filters these days due to their incompetence at securing their services (on multiple occasions). There are literally thousands of posts about how crap Yahoo is over on the Sky forums and missing/rejected mail is a high proportion of those posts.

Edit - these are the relevant header lines showing someone sending the mail from a Sky IP address to Yahoo using webmail :

Received: from [2.216.22.3] by web172104.mail.ir2.yahoo.com via HTTP; Sat, 08 Jun 2013 10:41:08 BST              2.216.22.3 Sky
X-Rocket-MIMEInfo: 002.001,R29vZCBNb3JuaW5nIE1lbWJlcnMKCkl0IGhhcyBjb21lIHRvIG91ciBhdHRlbnRpb24gdGhhdCB0aGVyZSBpcyBhIG1hbGljaW91cyBlbWFpbCBiZWluZyBjaXJjdWxhdGVkIHRvIG91ciBtZW1iZXJzIHRoYXQgYXBwZWFycyB0byBiZSBmcm9tIG91ciB3ZWJzaXRlLCBhbHRob3VnaCBpdHMgYWRkcmVzcyBpcyBSaW5nd29vZCAiVVRocmVlQSIgwqBJdCBhcnJpdmVzIGluIHlvdXIgSW5ib3ggd2l0aCBhIHZhcmlldHkgb2YgwqBzdWJqZWN0IGhlYWRpbmdzLiDCoFRoaXMgZW1haWwgbGlua3MgeW91IHRvIGEgc2kBMAEBAQE-
X-Mailer: YahooMailWebService/0.8.145.547

[renluop]

Thanks for that!  At least it doesn't seem to be anything at my end. However saying that, I wonder what the cause of that other email to my same inbox might have been.

[guest]

I would expect that Plusnet bounced it as spam or something but I have no idea how the Plusnet email service works and what settings can be made by end-users.

The previous message (the u3a one) probably got bounced because the Sky Yahoo email server has a maximum limit on CC/BCC - 50 I think but again I don't know as I don't use the service. I do know that it does have some bulk-email limits which is fair enough really as its only a domestic email service - anyone using it for anything else (like a business) is breaching the T&Cs.

[kitz]

The Plusnet one could have had something to do with this

Service: Email
Posted: Fri, Jun 07 2013 at 12:56:55
Subject: Planned Webmail Platform Maintenance - Monday 10th June 6.00am-6.30am

When's this work happening?
Early Monday morning, 10th June.

What does it affect?
Access to our Webmail platform.

How long will it take?
Up to thirty minutes.

What does the work involve?
We're updating the certificates on the servers that host our Webmail service.

Am I likely to notice the work?
There will be periods during the maintenance window when attempts to access our Webmail service may intermittently time out.

If a mail server is down then the sending server will keep attempting to send the mail for a certain period of time - this can be up to say 2 days - (depends on how that server is set up).  However during the attempt period, the sender will be advised that there is a problem trying to send mail... but the server will continue attempting to send for the say up to 2 days.

If its the PN one, then it could explain why the sender thought the mail was rejected, but you later received it.



------------
Edited to add

Ooops maybe not..  that relates to tonight..  I'd just seen a copy of the above in my own e-mail and had only spotted the 7th June date.

The bit about the keep attempting to send mail whilst sending a failure notice back to the sender still stands though.

[renluop]

I was a bit vague about the one from the tour company.
The booking was made 25 May but I became worried when no confirmation, electronic or hard copy was received by middle of last week. An email had been sent but had not reached me.