Prev: SBS 2003 - 554 Relay access denied problem on receiving end
Next: Companyweb and intranet issues
From: BobS on 6 May 2010 18:07
I have one or two users at a client location that get a peculiar email a few
times a day. The message is as follows:

From: System Administrator
Sent: Thursday, May 06, 2010 12:53 PM
To: Lori Rosendahl
Subject: Undeliverable: Delivery Status Notification (Failure)
Your message did not reach some or all of the intended recipients.
Subject:
Sent: 5/6/2010 12:53 PM
The following recipient(s) could not be reached:
System Attendant on 5/6/2010 12:53 PM
A configuration error in the recipient's e-mail system prevented
delivery of this message. Two recipients are configured with the same
e-mail address. Contact your administrator.
<mail.gjha.org #5.1.4>

It is from Postmaster(a)gjha.org. What is the meaning of this message and
where does it come from? There are probably 20+ users on this server, but
only 2 ever get these, and when they do it is a few times a day. In
"Message Tracking" I can't find the referenced email for the failure and I
know that the user never sends anything (knowingly) to the System Attendant.

Help Please,
Bob Showalter


From: Larry Struckmeyer[SBS-MVP] on 6 May 2010 18:36
My guess is that a spammer is mailing randomly to that mail server using
your clients email address (spoofing) and the mail is being returned as undeliverable
to your client, an innocent victim.

The site is legit, and the mail server is legit.

The message about two identical names is weird though.


-
Larry
Please post the resolution to your
issue so others may benefit
-
Get Your SBS Health Check at
www.sbsbpa.com


> I have one or two users at a client location that get a peculiar email
> a few times a day. The message is as follows:
>
> From: System Administrator
> Sent: Thursday, May 06, 2010 12:53 PM
> To: Lori Rosendahl
> Subject: Undeliverable: Delivery Status Notification (Failure)
> Your message did not reach some or all of the intended recipients.
> Subject:
> Sent: 5/6/2010 12:53 PM
> The following recipient(s) could not be reached:
> System Attendant on 5/6/2010 12:53 PM
> A configuration error in the recipient's e-mail system
> prevented
> delivery of this message. Two recipients are configured with the same
> e-mail address. Contact your administrator.
> < #5.1.4>
> It is from Postmaster(a)gjha.org. What is the meaning of this message
> and where does it come from? There are probably 20+ users on this
> server, but only 2 ever get these, and when they do it is a few times
> a day. In "Message Tracking" I can't find the referenced email for
> the failure and I know that the user never sends anything (knowingly)
> to the System Attendant.
>
> Help Please,
> Bob Showalter


From: BobS on 6 May 2010 18:59
Thanks for the reply Larry. I suspected something like that since the
particular user is on a log of boards and news groups.

"Larry Struckmeyer[SBS-MVP]" <lstruckmeyer(a)mis-wizards.com> wrote in message
news:4e683515f5d88ccbb623dcc46bd(a)news.microsoft.com...
> My guess is that a spammer is mailing randomly to that mail server using
> your clients email address (spoofing) and the mail is being returned as
> undeliverable to your client, an innocent victim.
> The site is legit, and the mail server is legit.
>
> The message about two identical names is weird though.
>
>
> -
> Larry
> Please post the resolution to your
> issue so others may benefit
> -
> Get Your SBS Health Check at
> www.sbsbpa.com
>
>
>> I have one or two users at a client location that get a peculiar email
>> a few times a day. The message is as follows:
>>
>> From: System Administrator
>> Sent: Thursday, May 06, 2010 12:53 PM
>> To: Lori Rosendahl
>> Subject: Undeliverable: Delivery Status Notification (Failure)
>> Your message did not reach some or all of the intended recipients.
>> Subject:
>> Sent: 5/6/2010 12:53 PM
>> The following recipient(s) could not be reached:
>> System Attendant on 5/6/2010 12:53 PM
>> A configuration error in the recipient's e-mail system
>> prevented
>> delivery of this message. Two recipients are configured with the same
>> e-mail address. Contact your administrator.
>> < #5.1.4>
>> It is from Postmaster(a)gjha.org. What is the meaning of this message
>> and where does it come from? There are probably 20+ users on this
>> server, but only 2 ever get these, and when they do it is a few times
>> a day. In "Message Tracking" I can't find the referenced email for
>> the failure and I know that the user never sends anything (knowingly)
>> to the System Attendant.
>>
>> Help Please,
>> Bob Showalter
>
>
>


From: BobS on 6 May 2010 19:21
Just for clarification Larry,

Why does the System Attendant account on the server need to have an email
address. Just like all normal users, it has addresses for
SystemAttendant(a)domain.org and SystemAttendant(a)domain.local.

Again, thanks

"Larry Struckmeyer[SBS-MVP]" <lstruckmeyer(a)mis-wizards.com> wrote in message
news:4e683515f5d88ccbb623dcc46bd(a)news.microsoft.com...
> My guess is that a spammer is mailing randomly to that mail server using
> your clients email address (spoofing) and the mail is being returned as
> undeliverable to your client, an innocent victim.
> The site is legit, and the mail server is legit.
>
> The message about two identical names is weird though.
>
>
> -
> Larry
> Please post the resolution to your
> issue so others may benefit
> -
> Get Your SBS Health Check at
> www.sbsbpa.com
>
>
>> I have one or two users at a client location that get a peculiar email
>> a few times a day. The message is as follows:
>>
>> From: System Administrator
>> Sent: Thursday, May 06, 2010 12:53 PM
>> To: Lori Rosendahl
>> Subject: Undeliverable: Delivery Status Notification (Failure)
>> Your message did not reach some or all of the intended recipients.
>> Subject:
>> Sent: 5/6/2010 12:53 PM
>> The following recipient(s) could not be reached:
>> System Attendant on 5/6/2010 12:53 PM
>> A configuration error in the recipient's e-mail system
>> prevented
>> delivery of this message. Two recipients are configured with the same
>> e-mail address. Contact your administrator.
>> < #5.1.4>
>> It is from Postmaster(a)gjha.org. What is the meaning of this message
>> and where does it come from? There are probably 20+ users on this
>> server, but only 2 ever get these, and when they do it is a few times
>> a day. In "Message Tracking" I can't find the referenced email for
>> the failure and I know that the user never sends anything (knowingly)
>> to the System Attendant.
>>
>> Help Please,
>> Bob Showalter
>
>
>


From: Ace Fekay [MVP - Directory Services, MCT] on 8 May 2010 12:31
On Thu, 6 May 2010 17:21:14 -0600, "BobS" <PackerIntl(a)gmail.com>
wrote:

>Just for clarification Larry,
>
>Why does the System Attendant account on the server need to have an email
>address. Just like all normal users, it has addresses for
>SystemAttendant(a)domain.org and SystemAttendant(a)domain.local.
>
>Again, thanks
>

All communications within Exchange components are basically messages.
That's part of the reason why the SA has an email address. Simply put,
it's a System mailbox. If you notice, there are other objects with
SMTP address, too.

Here's a good read on it:

Exchange Special Mailboxes Part 2 - System Attendant mailbox
http://blogs.technet.com/evand/archive/2004/12/21/329172.aspx


Ace

This posting is provided "AS-IS" with no warranties or guarantees and confers no rights.

Please reply back to the newsgroup or forum for collaboration benefit among responding engineers, and to help others benefit from your resolution.

Ace Fekay, MVP, MCT, MCITP EA, MCTS Windows 2008 & Exchange 2007, MCSE & MCSA 2003/2000, MCSA Messaging 2003
Microsoft Certified Trainer
Microsoft MVP - Directory Services

If you feel this is an urgent issue and require immediate assistance, please contact Microsoft PSS directly. Please check http://support.microsoft.com for regional support phone numbers.
 |  Next  |  Last
Pages: 1 2
Prev: SBS 2003 - 554 Relay access denied problem on receiving end
Next: Companyweb and intranet issues