Mailing List Archive

Error Emails
I'm running MediaWiki v1.34.2 on Linux Mint v20.1.

Three or four days ago I began getting emails like below.
(ImmigrantJohnLakeOfGravesend is my MediaWiki page.) I've received maybe
40-50 such messages. The error type is sometimes different. And
occasionally a message seems to be delivered because I receive a "real
looking" response.

Can someone tell me what's going on, and what I can do about it?




Date: Thu, 14 Jan 2021 05:36:39 -0800 (PST)
From: Mail Delivery Subsystem <mailer-daemon@googlemail.com>
To: MarshallELake@gmail.com
Subject: Delivery Status Notification (Failure)
Parts/Attachments:
1.1.1 OK 10 lines Text
1.1.2 Shown 38 lines Text
1.2 OK 2.2 KB Image
2 Shown 553 bytes Message, "Delivery Status"
3 Shown 3.3 KB Message, "ImmigrantJohnLakeOfGravesend email address confirmation"
3.1 Shown 15 lines Text
----------------------------------------

Error Icon

RECIPIENT INBOX FULL

Your message couldn't be delivered to
mikenealey23@from.crossandgarlic.com. Their inbox is full, or it's getting
too much mail right now.
The response from the remote server was:

550 Mailbox is full / Blocks limit exceeded / Inode limit exceeded

[ Part 1.2, Image/PNG (Name: "icon.png") 2.2 KB. ]
[. Not Shown. Use the "V" command to view or save this part. ]


[ Part 2: "Delivery Status" ]

Reporting-MTA: dns; googlemail.com
Received-From-MTA: dns; marshallelake@gmail.com
Arrival-Date: Thu, 14 Jan 2021 05:35:57 -0800 (PST)
X-Original-Message-ID:
<JohnLakeOfGravesend.600048bc47dc49.98376540@www.mlake.net>

Final-Recipient: rfc822; mikenealey23@from.crossandgarlic.com
Action: failed
Status: 5.0.0
Remote-MTA: dns; from.crossandgarlic.com (62.210.104.20, the server for
the domain.)
Diagnostic-Code: smtp; 550 Mailbox is full / Blocks limit exceeded / Inode
limit exceeded
Last-Attempt-Date: Thu, 14 Jan 2021 05:36:39 -0800 (PST)



[ Part 3: "Included Message" ]

Date: Thu, 14 Jan 2021 06:35:56 -0700
From: ImmigrantJohnLakeOfGravesend <marshallelake@gmail.com>
To: MikeNealey17 <mikenealey23@from.crossandgarlic.com>
Subject: ImmigrantJohnLakeOfGravesend email address confirmation

Someone, probably you, from IP address 104.160.17.148,
has registered an account "MikeNealey17" with this email address on
ImmigrantJohnLakeOfGravesend.

To confirm that this account really does belong to you and activate
email features on ImmigrantJohnLakeOfGravesend, open this link in your
browser:

http://www.mlake.net/wiki/index.php/Special:ConfirmEmail/89052005a33f772785e70c851f0f9032

If you did *not* register the account, follow this link
to cancel the email address confirmation:

http://www.mlake.net/wiki/index.php/Special:InvalidateEmail/89052005a33f772785e70c851f0f9032

This confirmation code will expire at 06:35, 21 January 2021.


--
Marshall Lake -- marshallelake@gmail.com -- http://www.mlake.net

_______________________________________________
MediaWiki-l mailing list
To unsubscribe, go to:
https://lists.wikimedia.org/mailman/listinfo/mediawiki-l
Re: Error Emails [ In reply to ]
Hi,

On Thu, 2021-01-14 at 07:43 -0700, Marshall Lake wrote:
>
> I'm running MediaWiki v1.34.2 on Linux Mint v20.1.

For your info, 1.34.2 is an unsupported, outdated, insecure version.
You may want to upgrade for your own safety and the safety of all your
users: https://www.mediawiki.org/wiki/Manual:Upgrading

> Three or four days ago I began getting emails like below.
> (ImmigrantJohnLakeOfGravesend is my MediaWiki page.)  I've received
> maybe
> 40-50 such messages.  The error type is sometimes different.  And
> occasionally a message seems to be delivered because I receive a
> "real
> looking" response.
>
> Can someone tell me what's going on, and what I can do about it?

Someone registered an account on your MediaWiki installation and they
entered an email address when registering that account. 
The mailbox of that email address is full, hence the mail server of
that MediaWiki installation cannot deliver the message, so it reports
"550 Mailbox is full". The mail server does not give up after one
attempt to deliver the message so it regularly tries (and fails) again.

(I don't know what "real looking" is supposed to mean.)

HTH,
andre

--
Andre Klapper (he/him) | Bugwrangler / Developer Advocate
https://blogs.gnome.org/aklapper/


_______________________________________________
MediaWiki-l mailing list
To unsubscribe, go to:
https://lists.wikimedia.org/mailman/listinfo/mediawiki-l
Re: Error Emails [ In reply to ]
I didn't explain myself very well. I was running out the door as I wrote
my original message. Not a good idea.

>> I'm running MediaWiki v1.34.2 on Linux Mint v20.1.

> For your info, 1.34.2 is an unsupported, outdated, insecure version.
> You may want to upgrade for your own safety and the safety of all your
> users: https://www.mediawiki.org/wiki/Manual:Upgrading

>> Three or four days ago I began getting emails like below.
>> (ImmigrantJohnLakeOfGravesend is my MediaWiki page.)  I've received
>> maybe 40-50 such messages.  The error type is sometimes different.  And
>> occasionally a message seems to be delivered because I receive a "real
>> looking" response.

>> Can someone tell me what's going on, and what I can do about it?

> Someone registered an account on your MediaWiki installation and they
> entered an email address when registering that account. 
> The mailbox of that email address is full, hence the mail server of
> that MediaWiki installation cannot deliver the message, so it reports
> "550 Mailbox is full". The mail server does not give up after one
> attempt to deliver the message so it regularly tries (and fails) again.
>
> (I don't know what "real looking" is supposed to mean.)

By "real looking" I mean the outgoing activation confirmation message
actually got delivered and I received a real (albeit seemingly automated)
response rather than an error email.

My MediaWiki page (ImmigrantJohnLakeOfGravesend) has a small finite
audience. On the same day (seemingly) my page received 532 new
registration requests, all from email addresses I do not recognize (I
would most likely recognize an email address in my small, finite
community).

To me, this seems like spam or an attack of some sort. What can I do
about it? Will upgrading to 1.35.x resolve this issue?

--
Marshall Lake -- marshallelake@gmail.com -- http://www.mlake.net
_______________________________________________
MediaWiki-l mailing list
To unsubscribe, go to:
https://lists.wikimedia.org/mailman/listinfo/mediawiki-l
Re: Error Emails [ In reply to ]
Hi,

On Sat, 2021-01-16 at 10:34 -0700, Marshall Lake wrote:
> My MediaWiki page (ImmigrantJohnLakeOfGravesend) has a small finite
> audience.  On the same day (seemingly) my page received 532 new
> registration requests, all from email addresses I do not recognize (I
> would most likely recognize an email address in my small, finite
> community).
>
> To me, this seems like spam or an attack of some sort.  What can I do
> about it?

See https://www.mediawiki.org/wiki/Manual:Combating_spam

> Will upgrading to 1.35.x resolve this issue?

Upgrading reduces the attack vector via known vulnerabilities. It won't
change the fact that your website allows people to register accounts.

Cheers,
andre
--
Andre Klapper (he/him) | Bugwrangler / Developer Advocate
https://blogs.gnome.org/aklapper/


_______________________________________________
MediaWiki-l mailing list
To unsubscribe, go to:
https://lists.wikimedia.org/mailman/listinfo/mediawiki-l