Listowners-L Archives

Archiver > Listowners > 2004-04 > 1082462524


From: "Andrew Billinghurst" <>
Subject: Re: Strange Bounce...
Date: Tue, 20 Apr 2004 22:02:04 +1000
In-Reply-To: <145.2743c427.2db4ad3d@aol.com>


Looks to me to be someone using MailWasher, and it looks to be
someone at Pacbell who may forward mail to applesisp

WHOIS results for 68.123.72.181
Generated by www.DNSstuff.com

Country: UNITED STATES

NOTE: More information appears to be available at NET-68-123-72-0-1.

Pac Bell Internet Services PBI-NET-10 (NET-68-120-0-0-1)
68.120.0.0 - 68.127.255.255
PPPoX Pool - Rback4 RENOCS SBC068123072000031022 (NET-68-123-72-0-1)
68.123.72.0 - 68.123.73.255

Regards, Andrew



On 19 Apr 2004 at 0:19, wrote:

> I received a strange looking bounce tonight that I'm not sure what to make
> of. The headers of the bounce show that this came to RootsWeb from
> appleisp.net. I have no PAYORK subscribers at this ISP and it is the only ISP named in
> the bounce other than RootsWeb. I'm think that a virus or forged spam using the
> list address has to be at the root of this but the bounce is still strange in
> that it appears to be RootsWeb that is doing the bouncing and saying that the
> address is an unknown address. There is also a clue
> that mailwasher may be involved somehow--note that the bounce says "mail local"
> which we know is the tip-off that mailwasher is involved and rejecting the
> email--but who is using mailwasher here? RootsWeb? It appears that RootsWeb is
> doing the rejecting.
>
> Any ideas?
>
> Joan
>
> Return-Path: <>
> Received: from rly-yj03.mx.aol.com (rly-yj03.mail.aol.com [172.18.180.163])
> by air-yj03.mail.aol.com (v98.19) with ESMTP id MAILINYJ32-80740834e6c3aa;
> Sun, 18 Apr 2004 23:58:47 -0400
> Received: from lists2.rootsweb.com (lists2.rootsweb.com [66.43.18.39]) by
> rly-yj03.mx.aol.com (v98.5) with ESMTP id MAILRELAYINYJ37-80740834e6c3aa; Sun,
> 18 Apr 2004 23:58:36 -0500
> Received: (from )
> by lists2.rootsweb.com (8.12.8/8.12.8) id i3J3wLMw019684
> for ; Sun, 18 Apr 2004 21:58:21 -0600
> Date: Sun, 18 Apr 2004 21:58:21 -0600
> X-From_: Sun Apr 18 21:58:21 2004
> Received: from mail.rootsweb.com (mail.rootsweb.com [192.168.16.34])
> by lists2.rootsweb.com (8.12.8/8.12.8) with ESMTP id i3J3wLLC019642
> for <>; Sun, 18 Apr 2004 21:58:21 -0600
> Received: from appleisp.net ( [63.120.72.50])
> by mail.rootsweb.com (8.12.10/8.12.10) with ESMTP id i3J3wKiw018448
> for <>; Sun, 18 Apr 2004 21:58:21 -0600
> Received: from [68.123.72.181] (HELO rootsweb.com)
> by appleisp.net (CommuniGate Pro SMTP 3.5.9)
> with SMTP id 3294874 for ; Sun, 18 Apr 2004
> 20:55:34 -0700
> Message-ID: <>
> From: "Mail Delivery Subsystem" <>
> To:
> Subject: Returned mail: User unknown
> Old-Date: Sun, 18 Apr 2004 20:58:37 -0700
> MIME-Version: 1.0
> Content-type: text/plain; charset=US-ASCII
> X-Scanned-By: MIMEDefang 2.38
> X-Diagnostic: Mail coming from a daemon, ignored
> X-Envelope-To: PAYORK-L-request
> X-AOL-IP: 66.43.18.39
> X-AOL-SCOLL-SCORE: 0:XXX:XX
> X-AOL-SCOLL-URL_COUNT: 0
>
> The original message was received at 4/18/2004 8:58:37 PM -0100
> lists2.rootsweb.com
> ----- The following addresses had permanent fatal errors -----
> <>
> (expanded from: <>)
>
> ----- Transcript of session follows -----
> mail.local: unknown Name: payork-l
> 550 <>... User unknown
>
>
> Reporting-MTA: dns; mx1.rootsweb.com
> Received-From-MTA: DNS; lists2.rootsweb.com
> Arrival-Date: Thu, 30 May 2002 01:14:32 -0600
>
> Final-Recipient: RFC822; <>
> X-Actual-Recipient: RFC822;
> Action: failed
> Status: 5.1.1
> Last-Attempt-Date: 4/18/2004 8:58:37 PM -0100
>
> ______________________________

--
Andrew Billinghurst <>
Adopt-a-mailing list -> http://resources.rootsweb.com/adopt/
Ancestry.com--Your #1 Source for Family History Online
http://www.ancestry.com/rd/redir.asp?targetid=4930&sourceid=1237

This thread: