cancel
Showing results for 
Search instead for 
Did you mean: 

Email broke? (Anti Virus - F9's side)

David_W
Rising Star
Posts: 2,293
Thanks: 29
Registered: 19-07-2007

Email broke? (Anti Virus - F9's side)

Ok, so I was supposed to get emails, which didnt arrive, so I told the person to send them to my gmail and they arrived.

I tried to forward from gmail to f9, it bounced with:

Quote
Delivery to the following recipient failed permanently:

myemail

Technical details of permanent failure:
PERM_FAILURE: SMTP Error (state 12): 550 This message looks like Win32.Sober.y


So i send it to MSN, and it arrived, and i forward it from hotmail and it bounces!

Quote
X-Originating-Email: [my-email]
X-Sender: my-email
Received: from mail pickup service by hotmail.com with Microsoft SMTPSVC; Sun, 1 Jan 2006 18:46:05 -0800
Received: from 64.4.17.200 by by111fd.bay111.hotmail.msn.com with HTTP;Mon, 02 Jan 2006 02:46:05 GMT
X-OriginalArrivalTime: 02 Jan 2006 02:46:05.0552 (UTC) FILETIME=[AD418F00:01C60F46]


Is the header information.

So how many emails have I missed from F9's antivirus firing off false positives and bouncing my mails?

Bear in mind that when I sent it from hotmail, it got scanned by trend antivirus.
7 REPLIES
David_W
Rising Star
Posts: 2,293
Thanks: 29
Registered: 19-07-2007

Email broke? (Anti Virus - F9's side)

Its still bouncing, so its still incorrectly identifying emails as a virus. This is kinda worrying as I'm expecting a few emails soon that I want to arrive, and if F9's mail servers are deciding that it should bounce my mails without informing me and giving me the option of over-riding it, I'll never know if I've recieved these emails. The fact there is no notification makes it worse, people here may be effected by this, but dont know about it at all.
N/A

Email broke? (Anti Virus - F9's side)

There is something in the +Net newsgroup about this, I have seen it elsewhere too , but can't remember where. Someone else reported emails not being received, bounced or anything and received the following:

Quote

I know exactly what is causing this, however I'm not convinced that this
is a problem that warrants an amber light.

At the moment the sober virus is responsible for tens of thousands of
emails to be processed by our servers which are made to look like
delivery failure notices. If nothing is done about this it will cause
huge loads and strains on our mail platform and could cause great
problems to all our customers, so we are blackholing all email that
looks like it contains the sober virus that comes onto our servers.

Unfortunately a side effect of this is that mail delivery failures sent
though our servers seem to be getting caught out by this filtering so
are not arriving at thier intended destination.

I have raised this as a problem (29575) however as it is not directly
customer affecting (no actual valid email is being lost) it will be
assigned a low priority and is unlikely to be fixed now until the new year.
_________________
Regards,

Ben Brown
PlusNet Comms Team


Also:
Quote

We're doing this for all accounts, subscription and free. This is in
line with paragraph 8.1.3 of our acceptible use policy for email.



Is this also your problem?

Regards

Mark
Plusnet Staff
Plusnet Staff
Posts: 12,169
Thanks: 18
Fixes: 1
Registered: 04-04-2007

Email broke? (Anti Virus - F9's side)

Hi,

We have a block in place for certainm viruses like Sober Y on the mailcore. If the message looks like one of these viruses it will get blocked. What was the subject line of the message? If it's the same as one of the subjects used by Sober that will be why it's blocked.
David_W
Rising Star
Posts: 2,293
Thanks: 29
Registered: 19-07-2007

Email broke? (Anti Virus - F9's side)

The subject line was:

Giganews Account Information

Basically it was a welcome to giganews with my username and password.
David_W
Rising Star
Posts: 2,293
Thanks: 29
Registered: 19-07-2007

Email broke? (Anti Virus - F9's side)

Is the weird AV settings still active? My aunt from America just called, an email she sent got returned as "Hostile" or something (hard to tell, she's pretty much a yank), so are emails still being bounced?
Plusnet Staff
Plusnet Staff
Posts: 12,169
Thanks: 18
Fixes: 1
Registered: 04-04-2007

Email broke? (Anti Virus - F9's side)

There's still a block in space for mails that look like Sober or are coming from known spammers. Other than that mails shouldn't be getting bounced. A copy of the bounceback message would be useful if you can get it to found out why it happened. There could be a problem somewhere in the mailcore causing it.
David_W
Rising Star
Posts: 2,293
Thanks: 29
Registered: 19-07-2007

Email broke? (Anti Virus - F9's side)

It would be useful true, but my aunt is in America, and is about as computer literate as G W Bush is intelligent >.< She did say she was sending another, but I havent recieved that either, so dont know if she has done :-/