Microsoft 'blacklists' Oxford University in accidental 'spam' overload

By | October 3, 2011, 9:11am PDT

Summary: Oxford University managed to accidentally overflow Windows Live services, triggering Microsoft’s anti-spam technologies, resulting in the university being ‘blacklisted’.

World leading college, the University of Oxford, has suffered an email outage, causing all outbound email sent to Windows Live accounts to bounce back.

The university’s service update pages points the problem to Microsoft triggering a series of counter-spam measures, after a university department ‘misconfigured’ a mailing list last week. Over a million messages destined for Microsoft’s services, including Windows Live and Hotmail, pushed Microsoft to enact automatic preventative measures to prevent its own systems from crumbling.

The side effects were felt, as describes the Oxford OUCS support pages:

“This meant that mail sent to any domains for which the Hotmail servers handle mail was being rejected. It also caused a worse side-effect (manifesting itself as a mail loop, in some cases rapidly filling the Nexus mailbox) for anyone who had set their Nexus [internal student email] account to forward their email to such addresses.”

As a result, the university mitigated damage by trapping any email destined for a hotmail.com, hotmail.co.uk, live.com, and msn.com email addresses in their servers, creating a massive backlog of emails waiting to be sent.

The trap does not affect regional Windows Live domains, however, allowing students and staff to send email to other countries associated with Windows Live.

By this point, Microsoft had automatically ‘blacklisted’ Oxford’s domain names, in measures normally enacted by spam-producing domains, only days after the initial email error. Oxford has been working with Microsoft to unblock the domain from email servers, to restore normal functioning email sending to Windows Live domains.

Oxford believes that the blacklist has now been removed, which should allow emails to be released from the university’s servers — but in batches as to not overflow the system again and trigger repeat anti-spam countermeasures. Leading nearly into a week since the disruption, email should now begin to be delivered.

Oxford University is to conduct a “full investigation” to determine how a department “caused such disruption” at a critical time of year, just as the new academic session was starting.

Kick off your day with ZDNet's daily e-mail newsletter. It's the freshest tech news and opinion, served hot. Get it.

Topics

Zack Whittaker, a criminologist who studied at the University of Kent, Canterbury, is a journalist, writer and broadcaster.

Disclosure

Zack Whittaker

I worked briefly with Microsoft UK in 2006 but no longer have any connection with the company. Regardless, I remain impartial and unbiased in my views.

I don't hold any stock or shares, investments or industrial secrets in any company, but have signed confidentiality agreements with a number of UK and U.S. organisations, whose names I am not at liberty to disclose.

I was involved with Kent Union, the University of Kent's student union, undertaking voluntary, non-salaried, elected positions between early 2009 and mid-2010.

No other company, body, government department, non-governmental organisation or third sector organisation employs me or pays me a salary in any capacity whatsoever.

As a freelance journalist, whenever expenses are given and taken by a company that is not CBS Interactive, these will be disclosed in each relevant post to ensure transparency.

I currently work with a UK law enforcement unit, but this is an entirely separate position which bears no connection to other work.

(Updated: 23rd October 2011)

Biography

Zack Whittaker

Zack Whittaker, criminologist who studied at the University of Kent, UK, is a journalist, writer and broadcaster.

After studying criminology at university, though still in his early-20's, he has already had a series unconventional work and voluntary positions. He has worked with researchers studying neurological illnesses like Tourette's syndrome (which he suffers from), has given lectures on the nature of disabilities in the public community, and occasionally ends up speaking on television and radio discussing the events of the day.

He first had academic work published at the age of 22, then still an undergraduate, and has been cited by a wide range of publications: from the Huffington Post, Business Insider, AllThingsDigital, The Atlantic Wire and CBS News.

Related Discussions on TechRepublic

Did you know you can take part in these discussions with your ZDNet membership?
12
Comments

Join the conversation!

Just In

RE: Microsoft 'blacklists' Oxford University in accidental 'spam' overload
DontBeEvil 4th Oct
@Mister Spock

I will concede that I dont understand the subject matter if you care to explain?

Writing snarky comments about Oxford Diploma doesnt make you sound any wiser. If you think I am off-base i request you to enlighten me with your wisdom.....or do us a favor and keep your mouth shut
0 Votes
+ -
Which is it?
toddybottom 3rd Oct
You first write:
"triggering Microsoft???s anti-spam technologies"

and then you write:
"pushed Microsoft to enact automatic preventative measures to prevent its own systems from crumbling."

So were these anti-spam measures or can MS not handle a million email messages?
@toddybottom

Since this was a mailing list, one can assume that the scenario is 1 sender to 1,000,000 recipients.

Since this ratio is bigger than any corporation (who has more than thousands of employees let alone millions?), or number of Facebook friends a person has, or business contacts a company has.... I'd be curious what rudimentary spam criteria you'd assign.

Regardless of whether is was an accident on the part of Oxford, the resulting emails *were* spam.
@croberts

"Since this was a mailing list, one can assume that the scenario is 1 sender to 1,000,000 recipients."

It was ~9,000 recipients spread over hotmail,gmail,aol,yahoo who apparently had requested a certain publication. The list got into a loop overnight when people discovered replying to the list went back out to all recipients (oh dear).

Hotmails block was put in the day after the incident, for a week.

gmail,aol and yahoo put in rate based blocks at the actual time of the incident and dropped them off the same day when the issue was fixed.
0 Votes
+ -
RE: Microsoft 'blacklists' Oxford University in accidental 'spam' overload
LoverockDavidson_-24231404894599612871915491754222 3rd Oct
So Microsoft's anti-spam technologies worked just like it was supposed to. Good for them.
@LoverockDavidson_ you have the right idea ...... just go and punish those poor college students because Microsoft uses antiquated anti-spam technologies to protect there systems. As usual you side with Microsoft and blame everyone else for their failings. Microsoft should not have rushed to punish a fine University Like Oxford for their own short comings. If as Microsoft claims that a college student can almost bring down Microsofts system that easily, it only shows the world how crappy a system Microsoft puts out in the market place in the first place.
0 Votes
+ -
RE: Microsoft 'blacklists' Oxford University in accidental 'spam' overload
LoverockDavidson_-24231404894599612871915491754222 3rd Oct
@SoYouSaid
How is the system crappy when Microsoft's software did what its supposed to? Everything worked the way it should have. Problem was within Oxford University not Microsoft.
@SoYouSaid

Wow...you are way offbase here man. BTW, it wasnt 'a college student' bringing down MS system? Read the article, an employee misconfigured a mailing list which caused this issue. What would you have Microsoft do, let millions of unnecessary emails into their system, potentially slowing it down? And ofcourse you will be the first person then to point out how MS doenst have any system to stop such a thing.

You cannot have it both ways sir!!
@SoYouSaid
to see that you do not understand the subject matter being discussed.

If you did, you would not have written that which you did.

plain
@Mister Spock

I will concede that I dont understand the subject matter if you care to explain?

Writing snarky comments about Oxford Diploma doesnt make you sound any wiser. If you think I am off-base i request you to enlighten me with your wisdom.....or do us a favor and keep your mouth shut
We had a person at our work email out via a distribution list a notice - but the distribution list they choose included ALL the distrbution lists including the one they used - within 15 minutes 300,000 messages had been sent - all to internal people and within another 5 minutes it had gone to around 500,000 so they had to shut the system down. And only 4,000 accounts were in the email system.

This was a USER error for sure - and the MS response was correct - project the bigger environment from the smaller.

That is how LOTS of computer systems / damage control systems work - isolate the problem to protect the rest of the network.
@TAPhilo

A logical approach. plain
0 Votes
+ -
Or the one.
crazydanr@... 4th Oct
@Mister Spock

Join the conversation!

Formatting +
BB Codes - Note: HTML is not supported in forums
  • [b] Bold [/b]
  • [i] Italic [/i]
  • [u] Underline [/u]
  • [s] Strikethrough [/s]
  • [q] "Quote" [/q]
  • [ol][*] 1. Ordered List [/ol]
  • [ul][*] · Unordered List [/ul]
  • [pre] Preformat [/pre]
  • [quote] "Blockquote" [/quote]
ie8 fix

The best of ZDNet, delivered

ZDNet Newsletters

Get the best of ZDNet delivered straight to your inbox

Facebook Activity

White Papers, Webcasts, & Resources
ie8 fix