1. Computer problem? Tech Support Guy is completely free -- paid for by advertisers and donations. Click here to join today! If you're new to Tech Support Guy, we highly recommend that you visit our Guide for New Members.

Yahoo mail getting labeled spam

Discussion in 'Web & Email' started by Falkor, May 31, 2011.

Thread Status:
Not open for further replies.
Advertisement
  1. Falkor

    Falkor Thread Starter

    Joined:
    May 10, 2011
    Messages:
    20
    I've got a network that I support and a few people use Yahoo.com for email. Currently if I log on to Yahoo and send an email I get a kick back stating it is spam (I'll post the failure notice below). This happens from each workstation I've tried on this network. When I use the same account but from a different location off that network it works just fine. Really odd, never seen this before.

    Code:
    Sorry, we were unable to deliver your message to the following address.
    
    <[IMG]chrome://litmus-ff/skin/small/lvl2.png[/IMG][URL="http://us.mc1302.mail.yahoo.com/mc/compose?to=vvvvvvvvv"]vvvvvvvv[/URL]>:
    Remote host said: 550 [IMG]chrome://litmus-ff/skin/small/lvl2.png[/IMG][URL]http://www.spamblocked.net/blocked.html[/URL] [RCPT_TO]
    
    --- Below this line is a copy of the message.
    
    Received: from [xxxxxx] by nm10.bullet.mail.bf1.yahoo.com with NNFMP; 31 May 2011 20:36:05 -0000
    Received: from [xxxxxx] by tm10.bullet.mail.bf1.yahoo.com with NNFMP; 31 May 2011 20:36:05 -0000
    Received: from [127.0.0.1] by omp1056.mail.bf1.yahoo.com with NNFMP; 31 May 2011 20:36:05 -0000
    X-Yahoo-Newman-Property: ymail-3
    X-Yahoo-Newman-Id: [IMG]chrome://litmus-ff/skin/small/lvl2.png[/IMG][URL="http://us.mc1302.mail.yahoo.com/mc/compose?to=[email protected]"][email protected][/URL]
    Received: (qmail 43603 invoked by uid 60001); 31 May 2011 20:36:05 -0000
    DKIM-Signature:  v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024;  t=1306874164; bh=47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU=;  h=Message-ID:X-YMail-OSG:Received:X-Mailer:Date:From:Subject:To:MIME-Version:Content-Type;   b=0R9yI466IlRlOiaWmPUepnszvyetoP3Vk4XxMQNYRwhYz+M5iVeEzj4fmNYZzBWgvciNo1DBf0dkahDiZIhIFyU5JEEFvM4rxq9AtrK6HQ4vscJrbBWwFJk3dhoNxB0KZfLpRSA1x17pEM9p5H9YJXqHm6g/drRbNw6nvgBeUKo=
    DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
      s=s1024; d=yahoo.com;
      h=Message-ID:X-YMail-OSG:Received:X-Mailer:Date:From:Subject:To:MIME-Version:Content-Type;
        b=urRTcsxgsjuW++sCS7Me0pgVDvgJ2o2Kvf36YB+JBFgkHirrlmGcMZztgWgNkuVnwP07bFYWdzRqJL/s5d48yRo5cUKor8LEeOgLPWLsEHHDtHornReX6HuMU3m/o6OR9ld0IumbkSZet6PDVvKc1XDCJIaxQGcYrTAXT7CSpSE=;
    Message-ID: <[IMG]chrome://litmus-ff/skin/small/lvl2.png[/IMG][URL="http://us.mc1302.mail.yahoo.com/mc/compose?to=[email protected]"][email protected][/URL]>
    X-YMail-OSG: 64IvKVcVM1kIslgdgu7tnV4Gp_G9iUhqnEkjcs5od8sPdee
     Dww9QVYqjy9hdjcIikSbzI91vWohKcomsSr3lRGuvIwkEConYkVOwwDjVd35
     E922frBhBRiRjE4nHngl2aZfPPFtY2ferYlFy15wibdh5p2OJ20m7ZKm0SKR
     61k.sreR45e63fJSKzeZ9_rSpbSsxF3NwLNuIPCeyOjNBju7zIW_BxqDX5g8
     g_Y8sX5EaWcQ_TgWHf2nsIPFVVk6lXIUICcKctsAXIdo.6n50iAW9.D7zQ0B
     CsYh2mTob9bNpbtsJ3DJZQucasO7Sgmq4bNnR9.8BK8zBr.X_2eFHO8lCTw6
     ilLIuRwe6aEwv_4y4HzEj2OPGQZO.uZOQq4GQ93wcm6U-
    Received: from [xxxxx] by web130210.mail.mud.yahoo.com via HTTP; Tue, 31 May 2011 13:36:04 PDT
    X-Mailer: YahooMailClassic/14.0.1 YahooMailWebService/0.8.111.304355
    Date: Tue, 31 May 2011 13:36:04 -0700 (PDT)
    From: xxxxx <[IMG]chrome://litmus-ff/skin/small/lvl2.png[/IMG][URL="http://us.mc1302.mail.yahoo.com/mc/compose?to=xxxxx"]xxxxxx[/URL]>
    Subject: test
    To: [IMG]chrome://litmus-ff/skin/small/lvl2.png[/IMG][URL="http://us.mc1302.mail.yahoo.com/mc/compose?to=vvvvvv"]vvvvvvv[/URL]
    MIME-Version: 1.0
    Content-Type: text/plain; charset=us-ascii
     
  2. centauricw

    centauricw

    Joined:
    Jun 26, 2010
    Messages:
    444
    The issue isn't with Yahoo, it's with the mail server for filterrecycling.com. The spam blocker is bouncing the message that Yahoo is trying to deliver. It may very well be that it sees it's own Internet address in the Received: chain and it believes the mail is being spoofed.

    I couldn't tell you any more without knowing some of details of your mail server.
     
  3. Falkor

    Falkor Thread Starter

    Joined:
    May 10, 2011
    Messages:
    20
    Yeah, with a little more testing I came to the same conclusion. Thanks for the follow up.
     
  4. sepala

    sepala

    Joined:
    May 20, 2010
    Messages:
    4,038
    Anyway your code gives confidential information including IP addresses. I guess Enough info to break in if some one wants. Please contact a moderator and ask him to edit the code if there is a threat.
     
  5. centauricw

    centauricw

    Joined:
    Jun 26, 2010
    Messages:
    444
    Huh? These are email headers, not code.
     
  6. Falkor

    Falkor Thread Starter

    Joined:
    May 10, 2011
    Messages:
    20
    And you're a senior member? Makes me question this as any kind of source to be honest.

    I do have a post up with an IP address and yes, someone could spend their time breaking in if they like. But this is not that post nor does this post contain anything confidential.
     
  7. sepala

    sepala

    Joined:
    May 20, 2010
    Messages:
    4,038
    LOL. I know that. But it is QUOTED with CODE tag. Thats why I mentioned that as a code. There are lots of stuffs we can do using email headers :).
     
  8. sepala

    sepala

    Joined:
    May 20, 2010
    Messages:
    4,038
    No problem then :) (y)
     
  9. Falkor

    Falkor Thread Starter

    Joined:
    May 10, 2011
    Messages:
    20
    Well don't let me just shut ya down. Show me the errors in my thinking. I half expected a nice informative reply illustrating how I have no clue what I'm talking about and how you've been around for a while and know what's what.

    At any rate, I didn't mean to come off like an (filtered) if ya know what I mean.
     
  10. Cookiegal

    Cookiegal Administrator Malware Specialist Coordinator

    Joined:
    Aug 27, 2003
    Messages:
    101,662
    I've edited out the IP addresses, a name and e-mail addresses as spambots harvest those from web sites.

    sepala,

    If you're concerned about something, please report it and do NOT post your own comments in the thread.

    Falkor,

    Please do not make deliberate arttempts to get aroud the board censors.

    Let's all get back to the subject at hand please.
     
  11. Falkor

    Falkor Thread Starter

    Joined:
    May 10, 2011
    Messages:
    20
    Or, we could just delete this thread. It's already served its purpose. Unless of course we just want to leave it for others to see.
     
  12. Sponsor

As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 733,556 other people just like you!

Loading...
Thread Status:
Not open for further replies.

Short URL to this thread: https://techguy.org/999881