RE: Mail loop mitigation

Khaled Omar <eng.khaled.omar@outlook.com> Wed, 11 November 2020 18:21 UTC

Return-Path: <eng.khaled.omar@outlook.com>
X-Original-To: ietf@ietfa.amsl.com
Delivered-To: ietf@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 28ECD3A07DE for <ietf@ietfa.amsl.com>; Wed, 11 Nov 2020 10:21:10 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.099
X-Spam-Level:
X-Spam-Status: No, score=-2.099 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=outlook.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id OwDHLRI_646D for <ietf@ietfa.amsl.com>; Wed, 11 Nov 2020 10:21:08 -0800 (PST)
Received: from EUR04-HE1-obe.outbound.protection.outlook.com (mail-oln040092073018.outbound.protection.outlook.com [40.92.73.18]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C6ACA3A07DB for <ietf@ietf.org>; Wed, 11 Nov 2020 10:21:07 -0800 (PST)
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=hDaXuxv9HVCw8LVW6WfP4GBqz7uSmTUDagAYaM4Yu5L8l6cXBi//WIvdlaGeYL8aAoLQzxVvwLA+Mz30LO9bVHbzBvRYeSHk1W7D+IA7Qv36Cd/6v2ZIEnRhpwreiiVHgnAlaJqQhqcHwlz9y/zeQL58TF6N+YLVQcoMtpt9//DeXntXDazo972V8sDNKl/01I9jdyHzLzYYT4VOzMp0NGUH8dw9AHsuhivVoxgEDBaIh43pKudyWoc80SM+idYNDXgLqP1HMi1Ah2usTzIYmJ7FM9QarE7jAtW2/5jR7o721yLCUhRozZvdxk0d12/hIDO5lTB8p8cZ4SgOQeA7JQ==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=eMpWEoCTq2IZW/COwHso9F4q7nMPxXKQnGYx3I1cWIY=; b=nvJpQfGWqLk0nWFyHOcIQ8ot0N7I/zQBgNrmiONjjfwnndJSwpdbhmi2nywY+Xoo07pdP/Fm1zwJm3OD95RKyeBD2BwzLpXqSBusLhH8SOjBFcq/+s/3zHh9Kvoz6Ilt4pu00DEM+GziNAkIBIBpZVDjQ06N6bgInvvC1+fhRmgT+WEZ4OtrQn/idnrWgM8LYNozzZ9/5Mohm+yVcerGEnqUEJ11eF5wCXcDUYk2w20ckWOCm/zySAsUk0BxkNPm/88MhU32BY8GpqZYhvEM2+XGh7RBnzGf3e4CpRL+snIkp/DPwbL0BsckUZfit6oOESdS8w9kC57lc5gzAIOaGg==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none; dkim=none; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=eMpWEoCTq2IZW/COwHso9F4q7nMPxXKQnGYx3I1cWIY=; b=qVxxEJGZkUkB0at0TE4AxQHEKB95o/iU5G4xnASEcCA37sxBSMFupQ8QzvR8bWG+jmfqQdelzIroYkS3gfTSUs+3jYPbVfpX9uHuUbuhr2Ch5iVA7ck1rPjjznf3odb0PjBh+/C2otXE+rPG5uglHhzoZ1/Y6ISY99NeTdhL0E0tt102HesNbd1sNmFbpcDZSreVEzObh7nYyd9ImLXRIJNb77109g0Z4PSGZJXvzUx9c/sDacCnYU5VZnKqTPb1Q2FqCLBSVC6P7eptHOtFY/wxs7G9yTePamob95k67Q5LqwsY5NNQfKhS0ldxqKGuzwt073cd/O9pOqN+tLVYtw==
Received: from VI1EUR04FT030.eop-eur04.prod.protection.outlook.com (2a01:111:e400:7e0e::45) by VI1EUR04HT141.eop-eur04.prod.protection.outlook.com (2a01:111:e400:7e0e::450) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3541.17; Wed, 11 Nov 2020 18:21:02 +0000
Received: from VI1P194MB0285.EURP194.PROD.OUTLOOK.COM (2a01:111:e400:7e0e::42) by VI1EUR04FT030.mail.protection.outlook.com (2a01:111:e400:7e0e::366) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3564.22 via Frontend Transport; Wed, 11 Nov 2020 18:21:02 +0000
Received: from VI1P194MB0285.EURP194.PROD.OUTLOOK.COM ([fe80::644c:b477:1465:7360]) by VI1P194MB0285.EURP194.PROD.OUTLOOK.COM ([fe80::644c:b477:1465:7360%6]) with mapi id 15.20.3541.025; Wed, 11 Nov 2020 18:21:02 +0000
From: Khaled Omar <eng.khaled.omar@outlook.com>
To: Glen <glen@amsl.com>, "ietf@ietf.org" <ietf@ietf.org>
Subject: RE: Mail loop mitigation
Thread-Topic: Mail loop mitigation
Thread-Index: AQHWuFagCKss+xUA1EiYgCuvq91Mt6nDPefQ
Date: Wed, 11 Nov 2020 18:21:02 +0000
Message-ID: <VI1P194MB028585069390C010A66C9799AEE80@VI1P194MB0285.EURP194.PROD.OUTLOOK.COM>
References: <2c94ioi8mpqhlsfh6p1666re.1605118121517@email.android.com>
In-Reply-To: <2c94ioi8mpqhlsfh6p1666re.1605118121517@email.android.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-incomingtopheadermarker: OriginalChecksum:D6DA1EE6C41142A4FDF2B74B9DCCEB17035A21603259E143C7C673B343B5B54C; UpperCasedChecksum:2F7D7BB13F0A77F6360EDE313CE77F9F151CF58260AA7ABBD2A1813225EE2B6E; SizeAsReceived:6756; Count:43
x-tmn: [gz4YbKdpAHesVpUu78rac9YSSCIyfRaM]
x-ms-publictraffictype: Email
x-incomingheadercount: 43
x-eopattributedmessage: 0
x-ms-office365-filtering-correlation-id: b0c9e760-db1b-4b1d-6556-08d8866e8c28
x-ms-traffictypediagnostic: VI1EUR04HT141:
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info: Vunr/v6JQ4k6qwftJN5++igapKIYcyH6Rx2MGuWhofpQFG/GH3WKwFdVwXMKEy1n1FMZdepTlzJdU8+23n0zREd/JT2JmvPkCkRkO5zLGNrG+/g6YJVS+E4iX4VXWaSgiKxZkcP3HvAchSb3yfTNR4MtDxGXNJEmv2x1AaE+8nGOcRh4tDHpAuimMY2M/jr9sSQdouTQTtqBHGH4H+R/nQ==
x-ms-exchange-antispam-messagedata: EICOxPHNPK/o+OvTjiLTgheffR04pmKRaKmKo3I3RU48B2GxxF3+htzZC20BiFRqizN6IMjQ+3xf/UtufqcouPeA+vWGJxDfWOuyadd4F5eF6RgbVGfIpvhZ4IfawLTlM5SHnOJqqX0NIJ+kkBFN+w==
x-ms-exchange-transport-forked: True
Content-Type: multipart/alternative; boundary="_000_VI1P194MB028585069390C010A66C9799AEE80VI1P194MB0285EURP_"
MIME-Version: 1.0
X-OriginatorOrg: outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Anonymous
X-MS-Exchange-CrossTenant-AuthSource: VI1EUR04FT030.eop-eur04.prod.protection.outlook.com
X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000
X-MS-Exchange-CrossTenant-Network-Message-Id: b0c9e760-db1b-4b1d-6556-08d8866e8c28
X-MS-Exchange-CrossTenant-originalarrivaltime: 11 Nov 2020 18:21:02.7927 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Internet
X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa
X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000
X-MS-Exchange-Transport-CrossTenantHeadersStamped: VI1EUR04HT141
Archived-At: <https://mailarchive.ietf.org/arch/msg/ietf/8VmaY0hp278TeXvFYotp3LHCl80>
X-BeenThere: ietf@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: IETF-Discussion <ietf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ietf>, <mailto:ietf-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ietf/>
List-Post: <mailto:ietf@ietf.org>
List-Help: <mailto:ietf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ietf>, <mailto:ietf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 11 Nov 2020 18:21:10 -0000

I thought it is the end of days ☺

Khaled Omar

From: ietf <ietf-bounces@ietf.org> On Behalf Of Glen
Sent: Wednesday, November 11, 2020 8:09 PM
To: ietf@ietf.org
Subject: Mail loop mitigation

Dear IETF list participants :

Our internal monitoring systems alerted us just now to an extremely high number of messages in the server mail queue.

Upon investigation, we discovered what you no doubt know by now, that a mail loop was going on with a particular user, and messages sent to the list were somehow being resent to the list by this subscriber.

We have blocked the subscriber at the gateway, in an attempt to stop the mail looping, and it appears to have worked.

Unfortunately, there were approximately 12,000 messages pending for this list, and we had no choice but to dump them all, to prevent delivery of additional looped messages.

This means that if you have sent a message to this list, and it has not come through, and has not shown up in the mail archive, then please resend your message to make sure everyone gets it.

Of course, just resend it one time please :-)

Thank you for your patience.

Glen
--
Glen Barney
IT Director
AMS (IETF secretariat)