I'm running MediaWiki v1.34.2 on Linux Mint v20.1.
Three or four days ago I began getting emails like below. (ImmigrantJohnLakeOfGravesend is my MediaWiki page.) I've received maybe 40-50 such messages. The error type is sometimes different. And occasionally a message seems to be delivered because I receive a "real looking" response.
Can someone tell me what's going on, and what I can do about it?
Date: Thu, 14 Jan 2021 05:36:39 -0800 (PST) From: Mail Delivery Subsystem mailer-daemon@googlemail.com To: MarshallELake@gmail.com Subject: Delivery Status Notification (Failure) Parts/Attachments: 1.1.1 OK 10 lines Text 1.1.2 Shown 38 lines Text 1.2 OK 2.2 KB Image 2 Shown 553 bytes Message, "Delivery Status" 3 Shown 3.3 KB Message, "ImmigrantJohnLakeOfGravesend email address confirmation" 3.1 Shown 15 lines Text ----------------------------------------
Error Icon
RECIPIENT INBOX FULL
Your message couldn't be delivered to mikenealey23@from.crossandgarlic.com. Their inbox is full, or it's getting too much mail right now. The response from the remote server was:
550 Mailbox is full / Blocks limit exceeded / Inode limit exceeded
[ Part 1.2, Image/PNG (Name: "icon.png") 2.2 KB. ] [ Not Shown. Use the "V" command to view or save this part. ]
[ Part 2: "Delivery Status" ]
Reporting-MTA: dns; googlemail.com Received-From-MTA: dns; marshallelake@gmail.com Arrival-Date: Thu, 14 Jan 2021 05:35:57 -0800 (PST) X-Original-Message-ID: JohnLakeOfGravesend.600048bc47dc49.98376540@www.mlake.net
Final-Recipient: rfc822; mikenealey23@from.crossandgarlic.com Action: failed Status: 5.0.0 Remote-MTA: dns; from.crossandgarlic.com (62.210.104.20, the server for the domain.) Diagnostic-Code: smtp; 550 Mailbox is full / Blocks limit exceeded / Inode limit exceeded Last-Attempt-Date: Thu, 14 Jan 2021 05:36:39 -0800 (PST)
[ Part 3: "Included Message" ]
Date: Thu, 14 Jan 2021 06:35:56 -0700 From: ImmigrantJohnLakeOfGravesend marshallelake@gmail.com To: MikeNealey17 mikenealey23@from.crossandgarlic.com Subject: ImmigrantJohnLakeOfGravesend email address confirmation
Someone, probably you, from IP address 104.160.17.148, has registered an account "MikeNealey17" with this email address on ImmigrantJohnLakeOfGravesend.
To confirm that this account really does belong to you and activate email features on ImmigrantJohnLakeOfGravesend, open this link in your browser:
http://www.mlake.net/wiki/index.php/Special:ConfirmEmail/89052005a33f772785e...
If you did *not* register the account, follow this link to cancel the email address confirmation:
http://www.mlake.net/wiki/index.php/Special:InvalidateEmail/89052005a33f7727...
This confirmation code will expire at 06:35, 21 January 2021.
Hi,
On Thu, 2021-01-14 at 07:43 -0700, Marshall Lake wrote:
I'm running MediaWiki v1.34.2 on Linux Mint v20.1.
For your info, 1.34.2 is an unsupported, outdated, insecure version. You may want to upgrade for your own safety and the safety of all your users: https://www.mediawiki.org/wiki/Manual:Upgrading
Three or four days ago I began getting emails like below. (ImmigrantJohnLakeOfGravesend is my MediaWiki page.) I've received maybe 40-50 such messages. The error type is sometimes different. And occasionally a message seems to be delivered because I receive a "real looking" response.
Can someone tell me what's going on, and what I can do about it?
Someone registered an account on your MediaWiki installation and they entered an email address when registering that account. The mailbox of that email address is full, hence the mail server of that MediaWiki installation cannot deliver the message, so it reports "550 Mailbox is full". The mail server does not give up after one attempt to deliver the message so it regularly tries (and fails) again.
(I don't know what "real looking" is supposed to mean.)
HTH, andre
I didn't explain myself very well. I was running out the door as I wrote my original message. Not a good idea.
I'm running MediaWiki v1.34.2 on Linux Mint v20.1.
For your info, 1.34.2 is an unsupported, outdated, insecure version. You may want to upgrade for your own safety and the safety of all your users: https://www.mediawiki.org/wiki/Manual:Upgrading
Three or four days ago I began getting emails like below. (ImmigrantJohnLakeOfGravesend is my MediaWiki page.) I've received maybe 40-50 such messages. The error type is sometimes different. And occasionally a message seems to be delivered because I receive a "real looking" response.
Can someone tell me what's going on, and what I can do about it?
Someone registered an account on your MediaWiki installation and they entered an email address when registering that account. The mailbox of that email address is full, hence the mail server of that MediaWiki installation cannot deliver the message, so it reports "550 Mailbox is full". The mail server does not give up after one attempt to deliver the message so it regularly tries (and fails) again.
(I don't know what "real looking" is supposed to mean.)
By "real looking" I mean the outgoing activation confirmation message actually got delivered and I received a real (albeit seemingly automated) response rather than an error email.
My MediaWiki page (ImmigrantJohnLakeOfGravesend) has a small finite audience. On the same day (seemingly) my page received 532 new registration requests, all from email addresses I do not recognize (I would most likely recognize an email address in my small, finite community).
To me, this seems like spam or an attack of some sort. What can I do about it? Will upgrading to 1.35.x resolve this issue?
Hi,
On Sat, 2021-01-16 at 10:34 -0700, Marshall Lake wrote:
My MediaWiki page (ImmigrantJohnLakeOfGravesend) has a small finite audience. On the same day (seemingly) my page received 532 new registration requests, all from email addresses I do not recognize (I would most likely recognize an email address in my small, finite community).
To me, this seems like spam or an attack of some sort. What can I do about it?
See https://www.mediawiki.org/wiki/Manual:Combating_spam
Will upgrading to 1.35.x resolve this issue?
Upgrading reduces the attack vector via known vulnerabilities. It won't change the fact that your website allows people to register accounts.
Cheers, andre
mediawiki-l@lists.wikimedia.org