Welcome to Comcast Help & Support Forums
Find solutions, share knowledge, and get answers from customers and experts

New to the Community? Start here.

5,637,859

members

26

online now

1,815,620

discussions

Back to Top

Mailer Daemon is driving me crazy and won't stop trying to send!

Posted by
Frequent Visitor
  • You have posted 5 replies to the community. Thank you for keeping the conversations going!
  • Thank you contributor for your first reply to the community!
 Posting replies is the best way to get involved.
  • Congrats on Posting your first topic!

Message 1 of 17
17,502 Views

I mistakenly typed the wrong email address for a client and sent it out.  Now I keep getting a "Mailer-Daemon" notification sometimes 2 or 3 times a days that it failed to deliver the message.

 

I don't care.  I want it to stop!  Please someone help.  This has been going on for 2 weeks!  Here's what it says:

 

The original message was received at Sat, 24 Mar 2012 13:49:38 -0700 from relay09 [10.183.136.143]

 

   ----- The following addresses had permanent fatal errors ----- <*********@aol.com>

    (reason: 550 5.1.1 <**********@aol.com>: Recipient address rejected: aol.com)

 

Can someone tell me how to stop these messages.  I have it with another client too.

16 REPLIES
Posted by
Gold Problem Solver

Message 2 of 17
17,414 Views
Posted by
Frequent Visitor
  • You have posted 5 replies to the community. Thank you for keeping the conversations going!
  • Thank you contributor for your first reply to the community!
 Posting replies is the best way to get involved.
  • Congrats on Posting your first topic!

Message 3 of 17
17,487 Views

I know it usually takes just a couple of days. However, this is going on 2 weeks now.  The original incorrect email was sent on March 11th and it is still looping and trying to send it.  It's nuts.  I just got 2 notifications tonight.

Posted by
Frequent Visitor
  • You have posted 5 replies to the community. Thank you for keeping the conversations going!
  • Thank you contributor for your first reply to the community!
 Posting replies is the best way to get involved.
  • Congrats on Posting your first topic!

Message 4 of 17
17,485 Views

Let me correct my last statement...I've actually received 4 notifications today.  Just went back to count.  I don't give a darn if it sends it or not.  I know it's the wrong address.  I got the message 100 times!

Posted by
Gold Problem Solver

Message 5 of 17
17,482 Views

Ok- I will notify the Administrator of your posts.  But- Since it is the weekend, he may not see it until Monday.

 



Need Email Help? Please post the following information in your post.
Do you use XfinityConnect? The Full or Lite version?
Do you use an email client? Which one? (Eg; Windows Live mail, Outlook, a smartphone etc.)
Which browser/version do you use? And- have you cleared your browser cache?
Which operating system? XP, Vista, Windows 7, Mac OS X
Details of the problem you are having.




Posted by
Silver Problem Solver

Message 6 of 17
17,479 Views

Hello,

Just a suggestion can you see if you have a email filter or auto forwarding on and maybe its forwarding email copies to the aol account.

Posted by
Gold Problem Solver

Message 7 of 17
17,465 Views

mailerdaemon wrote: ... This has been going on for 2 weeks! ...

Can you post the raw "View Source" headers of the bounce message? Please edit the email addresses as you did in your first post.

Posted by
Frequent Visitor
  • You have posted 5 replies to the community. Thank you for keeping the conversations going!
  • Thank you contributor for your first reply to the community!
 Posting replies is the best way to get involved.
  • Congrats on Posting your first topic!

Message 8 of 17
17,462 Views

Here are 2 of the 4 from yesterday.  I copied as much as possible and placed "*****"" for the email addresses:

 

1)  Mail Delivery Subsystem [MAILER-DAEMON@mta602.int******.net]

Sat 3/24/2012 4:50 PM

 

The original message was received at Sat, 24 Mar 2012 13:49:38 -0700 from relay09 [10.183.136.143]

 

   ----- The following addresses had permanent fatal errors ----- <*********@aol.com>

    (reason: 550 5.1.1 <f*******@aol.com>: Recipient address rejected: aol.com)

 

   ----- Transcript of session follows ----- ... while talking to mailin-04.mx.aol.com.:

>>> RCPT To:<********@aol.com>

<<< 550 5.1.1 <********@aol.com>: Recipient address rejected: aol.com

550 5.1.1 <********@aol.com>... User unknown

>>> DATA

<<< 554 5.5.1 Error: no valid recipients

 

2) Mail Delivery Subsystem [MAILER-DAEMON@mta01.**********.net]

Sat 3/24/2012 3:44 PM

 

The original message was received at Sat, 24 Mar 2012 12:43:48 -0700 from relay01 [10.183.136.60]

 

   ----- The following addresses had permanent fatal errors ----- <*******@aol.com>

    (reason: 550 5.1.1 <*********@aol.com>: Recipient address rejected: aol.com)

 

   ----- Transcript of session follows ----- ... while talking to mailin-04.mx.aol.com.:

>>> RCPT To:<********@aol.com>

<<< 550 5.1.1 <********@aol.com>: Recipient address rejected: aol.com

550 5.1.1 <********@aol.com>... User unknown

>>> DATA

<<< 554 5.5.1 Error: no valid recipients

 

 

Posted by
Gold Problem Solver

Message 9 of 17
17,458 Views

Thank you, but we need the lines that show who the message is from. It should look something like this:

 

  Return-Path: mailer-daemon@comcast.net
  Received: from omta09.westchester.pa.mail.comcast.net (LHLO
    omta09.westchester.pa.mail.comcast.net) (76.96.62.20) by
    sz0018.wc.mail.comcast.net with LMTP; Sun, 25 Mar 2012 11:55:32 +0000 (UTC)
  Received: from qmta13.westchester.pa.mail.comcast.net ([76.96.59.243])
    by omta09.westchester.pa.mail.comcast.net with comcast
    id pnpT1i00K5EsNzQ3VnvYZh; Sun, 25 Mar 2012 11:55:32 +0000
  Return-Path: <mailer-daemon@comcast.net>
  Date: Sun, 25 Mar 2012 11:55:32 +0000
  From: Mail Delivery System <mailer-daemon@comcast.net>
  To: xxxxxxxxxxx@comcast.net
  Subject: Delivery status notification
  MIME-Version: 1.0
  Content-Type: multipart/report; boundary="------------I305M09060309060P_865813326765320"

 

To view headers in Webmail, right-click the message and select View Source.

Posted by
Frequent Visitor
  • You have posted 5 replies to the community. Thank you for keeping the conversations going!
  • Thank you contributor for your first reply to the community!
 Posting replies is the best way to get involved.
  • Congrats on Posting your first topic!

Message 10 of 17
17,454 Views

I'm sorry I feel dumb.  I have Outlook 2007, where do I find the view source.  I have an attachment title "Details".

Posted by
Frequent Visitor
  • You have posted 5 replies to the community. Thank you for keeping the conversations going!
  • Thank you contributor for your first reply to the community!
 Posting replies is the best way to get involved.
  • Congrats on Posting your first topic!

Message 11 of 17
17,453 Views

Okay, I think I found it.

 

Received: from imta17.westchester.pa.mail.comcast.net (LHLO  imta17.westchester.pa.mail.comcast.net) (76.96.62.78) by  sz0061.wc.mail.comcast.net with LMTP; Sat, 24 Mar 2012 20:49:41 +0000 (UTC) Received: from mta602.interealty.net ([69.87.62.115])  by imta17.westchester.pa.mail.comcast.net with comcast  id pYpg1i00Z2VBDjZ0HYpg9F; Sat, 24 Mar 2012 20:49:40 +0000 X-CAA-SPAM: 00000 X-Authority-Analysis: v=2.0 cv=S+NuNvQP c=1 sm=1  a=7HDLOIfSk8nZdUqNenoLag==:17 a=nS2RiVxO7-MA:10 a=wPDyFdB5xvgA:10  a=3oc9M9_CAAAA:8 a=bBxQ5orekvnhGqY6i2QA:9 a=wAQ6Jb9jwZYA:10 a=U8Ie8EnqySEA:10  a=wIKVkkccY7eVwKRM:21 a=8rgorZ5kmOhv7-3M:21 a=a3Qfm7icAAAA:8  a=TzuhfBisG9eN8CnQExsA:9 a=ogYGULRPAAAA:8 a=C_IRinGWAAAA:8  a=2U8CSgKKTO7F_G2i6SwA:9 a=CQc3CZFNiShnpCOzQyoA:7 a=wPNLvfGTeEIA:10  a=QXtQoN2HcOoA:10 a=ny4KLEFhOeoA:10 a=NsmflhSpon8A:10 a=64XpKPCkDFsA:10  a=si9q_4b84H0A:10 a=N9C0pM3hAmbrWNKhBGkA:9 a=ooARWi2MWlXH1zuDk_8A:7  a=_W_S_7VecoQA:10 a=frz4AuCg-hUA:10 a=7HDLOIfSk8nZdUqNenoLag==:117 Received: from localhost (localhost)  by mta602.interealty.net (8.14.4/8.12.8) id q2OKnd1U029092;  Sat, 24 Mar 2012 13:49:39 -0700 Date: Sat, 24 Mar 2012 13:49:39 -0700 From: Mail Delivery Subsystem <MAILER-DAEMON@mta602.interealty.net> Message-Id: <201203242049.q2OKnd1U029092@mta602.interealty.net> To: <*************@comcast.net> MIME-Version: 1.0 Content-Type: multipart/report; report-type=delivery-status;  boundary="q2OKnd1U029092.1332622179/mta602.interealty.net" Subject: Returned mail: see transcript for details Auto-Submitted: auto-generated (failure) X-Brightmail-Tracker: AAAAAwwg5BMaZstXGmbLIw== X-Brightmail-Tracker: AAAAAA==

 

Posted by
Frequent Visitor
  • You have posted 5 replies to the community. Thank you for keeping the conversations going!
  • Thank you contributor for your first reply to the community!
 Posting replies is the best way to get involved.
  • Congrats on Posting your first topic!

Message 12 of 17
17,450 Views

Here's another in case it's any different:

 

Received: from imta02.emeryville.ca.mail.comcast.net (LHLO  imta02.emeryville.ca.mail.comcast.net) (76.96.30.21) by  sz0061.wc.mail.comcast.net with LMTP; Sat, 24 Mar 2012 14:51:34 +0000 (UTC) Received: from mta02.interealty.net ([69.87.62.172])  by imta02.emeryville.ca.mail.comcast.net with comcast  id pSrY1i00j3iyYyl01SrYmm; Sat, 24 Mar 2012 14:51:32 +0000 X-CAA-SPAM: 00000 X-Authority-Analysis: v=2.0 cv=MZvbTeDf c=1 sm=1  a=2cddSMKcQpsUgSJ7Mi9MMw==:17 a=nS2RiVxO7-MA:10 a=wPDyFdB5xvgA:10  a=3oc9M9_CAAAA:8 a=X5J6-pxX_2nSQNW_ROYA:9 a=wAQ6Jb9jwZYA:10 a=U8Ie8EnqySEA:10  a=1YmbLKftRHmchsnX:21 a=8rgorZ5kmOhv7-3M:21 a=a3Qfm7icAAAA:8  a=8hwPLomRzKrF6sFZH3AA:9 a=ogYGULRPAAAA:8 a=C_IRinGWAAAA:8  a=2U8CSgKKTO7F_G2i6SwA:9 a=oSr5-yL6pilFoIKNj9AA:7 a=wPNLvfGTeEIA:10  a=QXtQoN2HcOoA:10 a=ny4KLEFhOeoA:10 a=NsmflhSpon8A:10 a=64XpKPCkDFsA:10  a=si9q_4b84H0A:10 a=N9C0pM3hAmbrWNKhBGkA:9 a=nvTClu65bUKcwWgDSZAA:7  a=_W_S_7VecoQA:10 a=frz4AuCg-hUA:10 a=2cddSMKcQpsUgSJ7Mi9MMw==:117 Received: from localhost (localhost)  by mta02.interealty.net (8.14.4/8.12.8) id q2OEpWjh028313;  Sat, 24 Mar 2012 07:51:32 -0700 Date: Sat, 24 Mar 2012 07:51:32 -0700 From: Mail Delivery Subsystem <MAILER-DAEMON@mta02.interealty.net> Message-Id: <201203241451.q2OEpWjh028313@mta02.interealty.net> To: <***********@comcast.net> MIME-Version: 1.0 Content-Type: multipart/report; report-type=delivery-status;  boundary="q2OEpWjh028313.1332600692/mta02.interealty.net" Subject: Returned mail: see transcript for details Auto-Submitted: auto-generated (failure) X-Brightmail-Tracker: AAAAAwwg5BMaZstXGmbLIw== X-Brightmail-Tracker: AAAAAA==

 

Posted by
Gold Problem Solver

Message 13 of 17
17,447 Views

OK, very good, thank you. Stripping the headers down to essentials, they look like this:

 

    Received: from imta17.westchester.pa.mail.comcast.net
    Received: from mta602.interealty.net ([69.87.62.115]) by imta17.westchester.pa.mail.comcast.net
    Received: from localhost (localhost) by mta602.interealty.net
    From: Mail Delivery Subsystem <MAILER-DAEMON@mta602.interealty.net>
    Message-Id: <201203242049.q2OKnd1U029092@mta602.interealty.net>

 

So Comcast is receiving those from a server called "mta602.interealty.net". The IP addess 69.87.62.115 is assigned to an organization called "First Advantage Membership Services INC" / "First American CREDCO" / CoreLogic. Contact information for them can be found at: http://whois.arin.net/rest/net/NET-69-87-48-0-1/pft.

 

I don't know if Comcast Customer Security Assurance can help you with this, but you can certainly call them and ask: 1-888-565-4329, 6am-2am Eastern time, http://security.comcast.net/get-help/contact-comcast-security.aspx. Until you can persuade First Advantage to stop sending the reports, the suggestion to set up an email filter is probably your best bet

Posted by
Bronze Problem Solver

Message 14 of 17
17,438 Views

mailerdaemon wrote:

Here's another in case it's any different:

 

 



It looks like someone/something/probably a spammer keeps sending email to that invalid address using your address as the sender. You don't use interealty.net for email, right? The bounces should contain the header of the original email, and posting a couple of them should give us a better idea of exactly what is going on. In general this isn't an unusual situation; spammers use addresses from their lists as the sender addresses. There's nothing you can do about it, but it should subside after a bit. The troublesome part from your point of view is where did the spammer get that invalid AOL address? It would be quite a coincidence if your having sent to that address was unrelated, and it suggests that your computer is compromised and that the spammer obtained that address by harvesting addresses from your computer.

Posted by
Gold Problem Solver

Message 15 of 17
13,746 Views

Your past was removed because you included personal information. ( Email address) See the new post addressed to you.

Posted by
Visitor
  • Thank you contributor for your first reply to the community!
 Posting replies is the best way to get involved.

Message 16 of 17
12,604 Views

This emailer also sends a file attachment called "<text/rfc822-headers> "  which according to http://forums.comcast.com/t5/Security-and-Anti-Virus/mail-returned/td-p/26210 is a virus.

 Message reads:

  This is an automatically generated Delivery Status Notification.      

Delivery to the following recipients was aborted after 0 second(s):

  * --redacted--@hotmail.it

 

Posted by
Official Employee

Message 17 of 17
12,586 Views

indy12323:  

 

Your account appears to be compromised.  Please change your password as soon as possible.

 

DaveL




Community Icon
I am an Offical Comcast Employee.
Official Employees are from multiple teams within Comcast: Product; Support; Leadership.
We ask that you post publicly so people with similar questions may benefit from the conversation.

Was your question answered? Mark it as an accepted solution!solution Icon
Community Icon
I am an Offical Comcast Employee.
Official Employees are from multiple teams within Comcast.
We ask that you post publicly so people with similar questions may benefit.
Was your question answered? Mark it as an accepted solution!solution Icon
Community Icon
I am a Comcast Employee.
Please post so people with similar questions may benefit.
Was your question answered?
Mark it as a solution!solution Icon