Topic: Need help to analyze a failure notice mail.

[_YO_]

Hi all,

I've received this morning 3 failure notice mail. Could someone help me to analyze what goes wrong ?

It's on a uptodate SME 7.2 with fetchmail contrib. SME box name is router.ouvrie.inet.

Mail header :
Return-Path: <#@[]>
Delivered-To: postmaster@router.ouvrie.inet
Received: (qmail 7264 invoked by alias); 29 Dec 2007 08:45:34 -0000
Delivered-To: alias-localdelivery-postmaster@ouvrie.inet
Received: (qmail 7261 invoked for bounce); 29 Dec 2007 08:45:34 -0000
Date: 29 Dec 2007 08:45:34 -0000
From: MAILER-DAEMON@ouvrie.inet
To: postmaster@ouvrie.inet
Subject: failure notice


Mail text :
Hi. This is the qmail-send program at ouvrie.inet.
I tried to deliver a bounce message to this address, but the bounce bounced!

<FETCHMAIL-DAEMON@router.ouvrie.inet>:
Recipient unknown

--- Below this line is the original bounce.

Return-Path: <>
Received: (qmail 7257 invoked for bounce); 29 Dec 2007 08:45:34 -0000
Date: 29 Dec 2007 08:45:34 -0000
From: MAILER-DAEMON@ouvrie.inet
To: FETCHMAIL-DAEMON@router.ouvrie.inet
Subject: failure notice

Hi. This is the qmail-send program at ouvrie.inet.
I'm afraid I wasn't able to deliver your message to the following addresses.
This is a permanent error; I've given up. Sorry it didn't work out.

<haoymj2003@shrinechurch.com>:
Connected to 127.0.0.1 but sender was rejected.
Remote host said: 553 <FETCHMAIL-DAEMON@router.ouvrie.inet>: Sender address rejected: Domain not found

--- Below this line is a copy of the message.

Return-Path: <FETCHMAIL-DAEMON@router.ouvrie.inet>
Received: (qmail 7251 invoked by uid 453); 29 Dec 2007 08:45:34 -0000
X-Virus-Checked: Checked by ClamAV on ouvrie.inet
Received: from localhost (HELO localhost) (127.0.0.1)
    by ouvrie.inet (qpsmtpd/0.40) with SMTP; Sat, 29 Dec 2007 09:45:34 +0100
Return-Path: <>
From: FETCHMAIL-DAEMON@router.ouvrie.inet
To: haoymj2003@shrinechurch.com
MIME-Version: 1.0
Content-Type: multipart/report; report-type=delivery-status;
   boundary="foo-mani-padme-hum-7238-7208-1198917934"

--foo-mani-padme-hum-7238-7208-1198917934
Content-Type: text/plain

This message was too large (SMTP error 552).


--foo-mani-padme-hum-7238-7208-1198917934
Content-Type: message/delivery-status

Reporting-MTA: dns; localhost

Final-Recipient: rfc822; yves@ouvrie.inet
Last-Attempt-Date: Sat, 29 Dec 2007 09:45:34 +0100 (CET)
Action: failed
Status: 5.0.0
Diagnostic-Code: 552 Virus Found: Email.Phishing.RB-2337

--foo-mani-padme-hum-7238-7208-1198917934
Content-Type: text/rfc822-headers

Received: from depmoc (41.221.18.78) by mail.libertysurf.net (7.1.026)
        id 476BDC09009C9895 for yves.ouvrie@freesbee.fr; Sat, 29 Dec 2007 09:41:18 +0100
Received: from dtbw ([181.115.170.128]) by depmoc with Microsoft SMTPSVC(6.0.3790.211); Sat, 29 Dec 2007 09:41:16 +0100
Message-ID: <4776082C.5020206@shrinechurch.com>
Date: Sat, 29 Dec 2007 09:41:16 +0100
From: <haoymj2003@shrinechurch.com>
User-Agent: Thunderbird 2.0.0.6 (Windows/20070728)
MIME-Version: 1.0
To: yves.ouvrie@freesbee.fr
Subject: Happy New Year To yves.ouvrie@freesbee.fr!
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit

--foo-mani-padme-hum-7238-7208-1198917934--

[cactus]

This is a so called double bounce message, here is more on this:

• http://wiki.contribs.org/Email#Double_bounce_messages
• http://wiki.contribs.org/Email_delete_double-bounce_messages

[_YO_]

Thanks Cactus but I would greatly understand how does it comes.

First
From the beginning <haoymj2003@shrinechurch.com> sent mail (spam) to one of my external account yves.ouvrie@freesbee.fr

Why FETCHMAIL-DAEMON@router.ouvrie.inet sends it back to haoymj2003@shrinechurch.com
For this reason : This message was too large (SMTP error 552).
or for this one : Diagnostic-Code: 552 Virus Found: Email.Phishing.RB-2337

Then because of ouvrie.inet in unknown on the WAN (Sender address rejected: Domain not found) my SME tries two time to send.
And that is the doublebounce, no ?

Second
How could i prevent for this double bounce ?
My SME box have a dynamic DNS whith no-ip.
Was the solution to give this name to my server instead of router.ouvrie.inet ?

              .YO.

[CharlieBrady]

How could i prevent for this double bounce ?

Don't use fetchmail.