Yeah, so not a Bright House Networks email administrator but I am affiliated with Bright House Networks. I have forwarded the thread to our email administration team. Cheers! Ed

On 8/2/15, 3:53 PM, "NANOG on behalf of Jay Ashworth" <nanog-bounces@nanog.org on behalf of jra@baylink.com> wrote:

...

I think the body text of the message should identify it as coming from the Bright House email system? I think it should be written in standard USAdian English, which that is decidedly not.

Or perhaps the problem is that that subject line was supposed to be parameterized, and the number of bytes is missing for some reason. But in any event that is a common message to spoof, and the more bits of identity that are in it the harder it is to do so. That message format has almost zero bit of provider-identifiable data.

""" Your Bright House Networks IMAP email storage for user@domain.com is at 490MB, approaching your quota of 500MB.

IMAP email permits you to access all your mail folders by storing them on the mail server, but because of this, all mail in your folders contributes to your storage limit.

You can delete messages to reduce your storage, or move them to your PC. If you delete them, or have already deleted them, you usually must 'compact' each folder to reclaim the extra space.

Alternatively, you can contact Customer Care to see about having your quota increased. """

Cheers, -- jra

On August 2, 2015 3:44:35 PM EDT, Frank Bulk <frnkblk@iname.com> wrote:

...

What do you think their message should say? We struggled over this, too, and settled on some soft language, included information on how to purchase more storage, and also provided our email address and phone numbers.

Frank

-----Original Message----- From: NANOG [mailto:nanog-bounces@nanog.org] On Behalf Of Jay Ashworth Sent: Sunday, August 02, 2015 1:55 PM To: nanog@nanog.org Subject: Bright House IMAP highwater warning real?

Any brighthouse email admins on the list? My sister got the following high water warning message, with the included headers which, since they appear to include no Received: headers, look like they actually came from brighthouse's email cluster.

If this is a real Bright House warning message, somebody should be flogged. Teaching people which messages is to believe is hard enough...

Cheers, -- jra

-------- Original Message -------- Subject: Re: Fwd: ATTENTION: High Water Mark Notification, bytes in the mailbox!

I lied. The header to yours - which I finally found - is nice and long. the header on this one is

Return-Path: <> From: admin Subject: ATTENTION: High Water Mark Notification, bytes in the mailbox! Date: Sun, 2 Aug 2015 06:22:44 +0000 Message-ID: e31468ce-38de-11e5-b0a6-17507733086b

...

...

-----Original Message----- From: admin Sent: Sun, 02 Aug 2015 2:22 AM Subject: ATTENTION: High Water Mark Notification, bytes in the mailbox!

Your mailbox is over the high water mark. Please delete some messages from your mailbox. -- Sent from my Android phone with K-9 Mail. Please excuse my brevity.

-- Sent from my Android phone with K-9 Mail. Please excuse my brevity.