mail bounce looping in iceman12-int.giac.net

hey got a mail looping bounce on a post I made to intrusions....


Hi. This is the qmail-send program at iceman12-int.giac.net. I'm afraid I
wasn't able to deliver your message to the following addresses. This is a
permanent error; I've given up. Sorry it didn't work out.

someone should check out their smtp routes etc... 

kenneth gf brown 
ceo shadowplay.net




headers as follows... 

Return-Path: <[email protected]>
Received: (qmail 31971 invoked from network); 20 Feb 2005 01:29:08 -0000
Received: from unknown (HELO iceman12-ext.giac.net) (65.173.218.115)
  by iceman12-int.giac.net with SMTP; 20 Feb 2005 01:29:08 -0000
Received: (qmail 31966 invoked from network); 20 Feb 2005 01:29:07 -0000
Received: from unknown (HELO sbs-8.Telegram.NL.local) (80.127.120.210)
  by iceman12-ext.giac.net with SMTP; 20 Feb 2005 01:29:07 -0000
Received: from sbs-8.Telegram.NL.local ([192.168.16.2]) by
sbs-8.Telegram.NL.local with Microsoft SMTPSVC(5.0.2195.6713);
	 Sun, 20 Feb 2005 02:45:45 +0100
Received: by sbs-8.Telegram.NL.local (Microsoft Connector for POP3 Mailboxes
5.00.2195) with SMTP (Global POP3 Download)
	 id [email protected]; Sun, 20 Feb 2005
02:45:30 +0100
Return-path: <[email protected]>
X-Spam-Score: 0
Received: from dshield.com (www.dshield.org [65.173.218.101]) by
mail.interconnect.nl  (Rockliffe SMTPRA 6.1.16) with ESMTP id
<[email protected]> for <[email protected]>;  Sun, 20 Feb
2005 02:32:01 +0100
Received: from maverick12.sans.org (localhost.localdomain [127.0.0.1])
	by dshield.com (8.11.6/8.11.6) with ESMTP id j1K1EGa10114;
	Sun, 20 Feb 2005 01:14:16 GMT
Received: from iceman12-int.giac.net (iceman12-ext.giac.net
[65.173.218.113])
	by dshield.com (8.11.6/8.11.6) with ESMTP id j1JMRQa06536
	for <[email protected]>; Sat, 19 Feb 2005 22:27:26 GMT
Received: (qmail 11254 invoked by alias); 19 Feb 2005 22:10:34 -0000
Delivered-To: [email protected]
Received: (qmail 11248 invoked from network); 19 Feb 2005 22:10:34 -0000
Received: from unknown (HELO iceman12-ext.giac.net) (65.173.218.115)
	by iceman12-int.giac.net with SMTP; 19 Feb 2005 22:10:34 -0000
Received: (qmail 11243 invoked from network); 19 Feb 2005 22:10:33 -0000
Received: from unknown (HELO umbra.shadowplay.net) (205.200.160.250)
	by iceman12-ext.giac.net with SMTP; 19 Feb 2005 22:10:33 -0000
Received: (qmail 20436 invoked from network); 19 Feb 2005 22:27:18 -0000
Received: from 205-200-75-113.static.mts.net (HELO gobo) (205.200.75.113)
	by umbra.shadowplay.net with SMTP; 19 Feb 2005 22:27:18 -0000
From: "kenneth gf brown" <[email protected]>
To: <[email protected]>
Date: Sat, 19 Feb 2005 16:25:34 -0600
Message-ID: <033201c516d1$f0e2f9b0$1a0a0a0a@gobo>
MIME-Version: 1.0
Content-Type: text/plain;
	charset="us-ascii"
X-Priority: 1 (Highest)
X-MSMail-Priority: High
X-Mailer: Microsoft Outlook, Build 10.0.6626
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1441
Importance: High
X-Spam-Checker-Version: SpamAssassin 3.0.2 (2004-11-16) on 
	umbra.shadowplay.net
X-Spam-Level: 
X-Spam-Status: No, score=-2.5 required=5.0 tests=ALL_TRUSTED,
	X_MSMAIL_PRIORITY_HIGH,X_PRIORITY_HIGH autolearn=failed
version=3.0.2
Content-Transfer-Encoding: 8bit
X-MIME-Autoconverted: from quoted-printable to 8bit by dshield.com id
	j1JMRQa06536
X-Mailman-Approved-At: Sun, 20 Feb 2005 01:04:47 +0000
Cc: 
Subject: [Intrusions] LOW SLOW SMTP DOS from our clients.
X-BeenThere: [email protected]
X-Mailman-Version: 2.1.5
Precedence: list
Reply-To: "Intrusions List \(GCIA Practicals\)" <[email protected]>
List-Id: "Intrusions List \(GCIA Practicals\)" <intrusions.lists.sans.org>
List-Unsubscribe: <http://www.dshield.org/mailman/listinfo/intrusions>,
	<mailto:[email protected]?subject=unsubscribe>
List-Archive: <http://www.dshield.org/pipermail/intrusions>
List-Post: <mailto:[email protected]>
List-Help: <mailto:[email protected]?subject=help>
List-Subscribe: <http://www.dshield.org/mailman/listinfo/intrusions>,
	<mailto:[email protected]?subject=subscribe>
Sender: [email protected]
Errors-To: [email protected]
X-OriginalArrivalTime: 20 Feb 2005 01:45:45.0966 (UTC)
FILETIME=[E54790E0:01C516ED]



[email protected]                      http://www.shadowplay.net 
Phone:  204.284.3481                      Toll Free: 866.590.0023
Mobile: 204.470.9158 

FOR CLIENT SUPPORT PLEASE CALL 204.470.9021
or email [email protected]



_______________________________________________
Intrusions mailing list
[email protected]
http://www.dshield.org/mailman/listinfo/intrusions