Help deciphering this email

Now let me preface this by saying that I am relatively new to the networking/admin area, so please bear with me here....anyhow, one of my users here has received three emails stating the follow (IP addresses have been changed of course and hopefully all other info)

The XXXXXX's are not from the same domain my user is sending email to

-----Original Message-----
From: MAILER-DAEMON@xxxxxxxx.net
[mailto:MAILER-DAEMON@xxxxxxxx.net]
Sent: Friday, May 21, 2004 1:38 PM
To: xxxxxxxx (NOTE:This was my user)
Subject: failure notice


Hi. This is the qmail-send program at xxxxxxxx.net.
I'm afraid I wasn't able to deliver your message to the following addresses.
This is a permanent error; I've given up. Sorry it didn't work out.

<original_person_this_was_to@xxxxxxxx.com>:
vdeliver: Delivery failed due to system quota violation

--- Below this line is a copy of the message.

Return-Path: <my_user@mydomain.com>
Received: (qmail 2400 invoked from network); 21 May 2004 17:37:57 -0000
Received: from unknown (HELO my_exchange_Server@mydomain.com) (my ip here)
by xxxxxxxxx.net with SMTP; 21 May 2004 17:37:57 -0000
X-MimeOLE: Produced By Microsoft Exchange V6.0.6249.0
content-class: urn:content-classes:message
MIME-Version: 1.0
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Subject: Subject was here
Date: Fri, 21 May 2004 13:37:58 -0400
Message-ID: <D2A11B2AC67D4549A9ED7BA90C8ED130807537@myexchangeserver>
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
Thread-Topic: ORIGINAL SUBJECT LINE WAS HERE
Thread-Index: AcQ/WlrzAT2SlYagR6CviTi+mOPSWA==
From: "my_user" <my_user@mydomain.com>
To: <orginalRecipient@hisdomain.com>
Cc: "my_user" <myusername@mydomain.com>
--------------------------------------------------------------------------------------------------------

I'm sure its a dumb question, but I don't know the answer...so is this something legit that the receiver's email server actually returned or is it crap ? And if its crap, what exactly does it mean is ocurring ?

Any and all help is appreciated....

Thank you,
Murph

***
original_person_this_was_to@xxxxxxxx.com>:
vdeliver: Delivery failed due to system quota violation
***

When you see "quota violation" you can almost always view that as the recipients mailbox was too full and can no longer accept messages until more space is made..

Hope that helps.

SGS

there's nothing to decipher....its just the email heading...Its used to pretty much see who sent u the email and to whom it was sent to...The rest is just protocol information and other junk...nothing of interest.

More so cos you blanked out the ip's and the servers lol
And yes,the mail got returned cos the reciever's inbox was full

Ok, fair enough. I just wanted to make sure it was somewhat valid...thanks for the assistance!

-murph

To complete the answer......

It doesn't matter whether your user is sending mail to these domains..... They aren't. It's virus activity. Your user is in a newly infected computer's address book and, lucky them, they got selected as the forged "From:" address. Out go all those nice viruses and the faked sender gets lots of NDR's and "Virus Found" messages from the recipient's email systems......

It's just more of the white noise of the internet these days.