Mails problem

[kkbbzzaa]

Lately I’ve been receiving emails like this:

-----------
Symantec Email Proxy deleted the following email message:

From: Mail Delivery System <Mailer-Daemon@argon.nocdirect.com>
To: mailer-daemon@skatoramps.com
Subject: Mail delivery failed: returning message to sender
-----------

I have no idea why, but I get around 30 every day.

The header is
-------------
From: Symantec Email Proxy
Subject: Symantec Email Proxy Deleted Message
-------------

Norton detects that the mails have a virus in them and deletes them.

I set up form my CP a spam filter to delete mails that contain "Symantec Email Proxy Deleted Message" on their subject. Now I get around 10 every day.

Anyone have any idea why a I receiving this mails and what can i do about it?

Thanks for your help!

Mateo

[Vin DSL]

Taken at face value, it sounds like ppl are sending you viruses or something Norton is suspecting of being viruses. Sometimes mails contain an attachment that will download backdoor software from a web location, et cetera. That would be my guess. I suppose you could disable Norton and find out...

[Ron]

A couple of thoughts --

1) Maybe your machine is infected with a virus that is sending emails out through Outlool, and Norton is catching them on the way out,

2) Maybe someone is using your email account to send spam/viruses )Knowingly or unknowinlgy),

3) Do you have another machine that is not virus protected that accesses your skatoramp account?


Ok then, it was 3 thoughts.

Good luck!

[lookout]

Those are definite possibilities.

On point 2, someone might be using your account merely as a reply address. Infected mail that someone else (like a spammer) sent out that was undeliverable would then get bounced back to you. Bear in mind that this might happen via your catchall account, rather than one of the regular email accounts that you've set up for yourself.

[Connie]

I don't know what kind of site you have but I will give you another
possibility that ties in with what Ron & Lookout have said.

This can happen if you have a e-commerce site and send out receipts
to customers. The customer picks up a virus. The virus finds your
e-mail address in the address book and starts sending the virus to
you. If this is the case the infected e-mail may end up in your
catch all account, or the account you use as a return address for
you e-mail receipts.

Because many viruses can fake headers, they may send the e-mail as
a rejected address from PostMaster. Or they could send it direct
to the return address on your receipt. I know this happens because
several months ago we went through a period where we were getting
several e-mails per day from PostMaster that had a virus. We also
got several per day in our support account. The e-mail to the support
account all had faked subjects. It was easy to pick them out. However
with both of the scenarios I don't think we ever received more than 4 or
5 per day.

Based on the number you are receiving each day, you may be the victim of
a spammer who has been infected and who used your e-mail address as the
return address.

[kkbbzzaa]

Thanks for your answers!

I know my computer isn't sending out this mails cause i always check my mails before turning it off, and next mornig i have about 10 of this messages. So my computer can't be sending them while it's turned off. I am the only one using this skatoramps account.

If someone is usind my account to spam i can't do nothing about it. please correct me if i'm wrong.

Why am i still recieving this mails if i have a spam filter to delete messages with the subject "Symantec Email Proxy Deleted Message".

Thanks for your help!

Mateo

[kkbbzzaa]

I do have a e-commerce site. maybe it's this what is happening.

Is there any way to block this mails?

Thanks

Mateo

[Connie]

Since you have a e-commerce site I think that is your problem.
I have been able to filter some viruses, but some of the viruses
keep changing header info, so they are difficult to filter.

On the other hand I have never understood the rules for filters,
so anything I successfully filtered was a matter of luck. I apply
the same rules to all e-mail that I want to filter. The Filter
works with some and does not work with others.

I use a program "MailWasher" to check all e-mail. It will tell you
99.9% of the time if the e-mail is a virus. I delete those
automatically. After I preview e-mail with "MailWasher" I delete
all junk mail, Then down load the e-mail I need.

Most of this gets beyond any understanding that I will ever have.
Ron or LookOut can give a lot more info on how this works. I
can't. I can only tell you my experience.

Hope this helps, and hope someone with more knowledge
will get involved.

[jason]

Do you have a firewall set up on your machine? If so, those messages may be generated on your computer as your mail passes through to your mail client, AFTER the server has filtered them.

--Jason

[lookout]

It would help to know whether they are arriving at a specific mail address or via the catchall account. If it's the catchall, you might look into deleting or bouncing the mail as it comes in on the server. This thread might help.

If they are being delivered to one of the email accounts that you set up yourself, that's much tougher to filter out unless the headers are consistent. That's usually not the case, but sometimes one gets lucky. If so, filtering them out via the "spam filters" in cpanel would probably be the way to go.

Reading up on "regular expressions" is helpful when setting up spam filters via cpanel. Unfortunately, cpanel's implementation of these is a bit quirky, so they can be a challenge to set up properly. I've never seen any cpanel specific documentation on them, but maybe someone else here has and can direct you accordingly.