MDaemon Analysis: 553 mi:sum

Recently, a user in the domain received a letter of withdrawal, the specific withdrawal is as follows:

From: "MDaemon at Cxxxt.net" <MDaemon@cxxxt.net>

To: <saxxxy@cxxxt.net>

Sent:thursday, June 9:01 AM

Subject: Permanent delivery failed

>---------------------------------

> MDaemon Delivery Status Notification-HTTP://WWW.ALTN.COM/DSN

>---------------------------------

> The attached message has a "permanent" fatal delivery error.

> After one or more failed delivery attempts, the attached message

> Remove from the MDaemon message queue on this server. Number and frequency of attempts to post

> is determined by local configuration.

>----------------------------------------

> Your message was not delivered to one or more recipients.

>----------------------------------------

> Failed address:hxxxg@jxxxtd.net

>---session transcript---

> Thu 2011-06-30 09:00:49:parsing message <xxxxxxxxxxxxxxxxxx\pd35000117944.msg>

> Thu 2011-06-30 09:00:49: * from:saxxxy@cxxxt.net

> Thu 2011-06-30 09:00:49: * to:hxxxg@jxxxtd.net

> Thu 2011-06-30 09:00:49: * Subject:Re:Outstanding Items List

> Thu 2011-06-30 09:00:49: * Message-id: <8D82EBEE85444EADA2C4064608669BF4@zheng>

> Thu 2011-06-30 09:00:49:attempting SMTP connection to [jxxxtd.net]

> Thu 2011-06-30 09:00:49:resolving MX records for [Jxxxtd.net] (DNS server:218.85.152.99) ...

> Thu 2011-06-30 09:00:49: * p=000 s=000 d=jxxxtd.net (ttl=) mx=[mail.jxxxtd.net]

> Thu 2011-06-30 09:00:49:attempting SMTP connection to [mail.jxxxtd.net:25]

> Thu 2011-06-30 09:00:49:resolving A for [mail.jxxxtd.net] (DNS server:218.85.152.99) ...

> Thu 2011-06-30 09:00:49: * d=mail.jxxxtd.net ttl= () a=[81.174.163.246]

> Thu 2011-06-30 09:00:49:attempting SMTP connection to [x.x.x.x:25]

> Thu 2011-06-30 09:00:49:waiting for socket connection ...

> Thu 2011-06-30 09:00:50: * Connection established (192.168.8.90:2055->)

> Thu 2011-06-30 09:00:50:waiting for protocol to start ...

> Thu 2011-06-30 09:01:11:socket Connection closed by the other side (how rude!)

> Thu 2011-06-30 09:01:11: * Winsock Error 10053 connection terminated abnormally.

> Thu 2011-06-30 09:01:11: Connection closed

> Thu 2011-06-30 09:01:11:attempting to send message to smart host

> Thu 2011-06-30 09:01:11:attempting SMTP connection to [x.x.x.x:25]

> Thu 2011-06-30 09:01:11:waiting for socket connection ...

> Thu 2011-06-30 09:01:11: * Connection established (192.168.8.90:2056->)

> Thu 2011-06-30 09:01:11:waiting for protocol to start ...

> Thu 2011-06-30 09:01:11: <---mxh26.hichina.com ESMTP server ....

> Thu 2011-06-30 09:01:11:--> EHLO cxxxt.net

> Thu 2011-06-30 09:01:11: <--250-mxh26.hichina.com Hello cxxxt.net

> Thu 2011-06-30 09:01:11: <--250-size 52428800

> Thu 2011-06-30 09:01:11: <--250-8bitmime

> Thu 2011-06-30 09:01:11: <--250-pipelining

> Thu 2011-06-30 09:01:11: <--250-auth=login

> Thu 2011-06-30 09:01:11: <--250-auth LOGIN

> Thu 2011-06-30 09:01:11: <--250-starttls

> Thu 2011-06-30 09:01:11: <--

> Thu 2011-06-30 09:01:11:--> STARTTLS

> Thu 2011-06-30 09:01:11: <--Ready to start TLS

> Thu 2011-06-30 09:01:11:SSL Negotiation Successful

> Thu 2011-06-30 09:01:11:--> EHLO cxxxt.net

> Thu 2011-06-30 09:01:11: <--250-mxh26.hichina.com Hello cxxxt.net

> Thu 2011-06-30 09:01:11: <--250-size 52428800

> Thu 2011-06-30 09:01:11: <--250-8bitmime

> Thu 2011-06-30 09:01:11: <--250-pipelining

> Thu 2011-06-30 09:01:11: <--250-auth=login

> Thu 2011-06-30 09:01:11: <--250-auth LOGIN

> Thu 2011-06-30 09:01:11: <--

> Thu 2011-06-30 09:01:11:--> AUTH LOGIN

> Thu 2011-06-30 09:01:11: <--334 zxxx ...

> Thu 2011-06-30 09:01:11:--> zxxxxx ...

> Thu 2011-06-30 09:01:11: <--334 zxxx ...

> Thu 2011-06-30 09:01:11:--> zxxxxx ...

> Thu 2011-06-30 09:01:12: <--235 authentication.

> Thu 2011-06-30 09:01:12:--> MAIL from:<saxxxy@cxxxt.net> size=75872

> Thu 2011-06-30 09:01:12: <--553 mi:sum http://www.net.cn/service/faq/youx/mailsy/200905/3781.html

>---End transcript---

>: Mail contains [1] file attachments