我已经托管了自己的电子邮件多年,直到最近我才开始收到我未发送的失败通知。以下是标题的示例
Hi. This is the qmail-send program at MYSERVER.co.uk.
I'm afraid I wasn't able to deliver your message to the following addresses.
This is a permanent error; I've given up. Sorry it didn't work out.
<[email protected]>:
User and password not set, continuing without authentication.
65.55.92.184 does not like recipient.
Remote host said: 550 Requested action not taken: mailbox unavailable
Giving up on 65.55.92.184.
<[email protected]>:
User and password not set, continuing without authentication.
65.55.92.168 does not like recipient.
Remote host said: 550 Requested action not taken: mailbox unavailable
Giving up on 65.55.92.168.
<[email protected]>:
User and password not set, continuing without authentication.
64.12.138.161 does not like recipient.
Remote host said: 550 5.1.1 <[email protected]>: Recipient address rejected: aim.com
Giving up on 64.12.138.161.
<[email protected]>:
User and password not set, continuing without authentication.
64.12.91.196 does not like recipient.
Remote host said: 550 5.1.1 <[email protected]>: Recipient address rejected: cs.com
Giving up on 64.12.91.196.
<[email protected]>:
User and password not set, continuing without authentication.
64.12.91.195 does not like recipient.
Remote host said: 550 5.1.1 <[email protected]>: Recipient address rejected: aol.com
Giving up on 64.12.91.195.
<[email protected]>:
User and password not set, continuing without authentication.
<[email protected]> 173.252.79.16 failed after I sent the message.
Remote host said: 554 5.7.1 POL-P8 http://postmaster.facebook.com/response_codes?ip=MYIP#pol-m Message refused
--- Below this line is a copy of the message.
Return-Path: <[email protected]>
Received: (qmail 31378 invoked by uid 0); 19 Feb 2014 17:27:42 -0000
Received: from 212.156.182.55.static.turktelekom.com.tr (HELO mycomputer) ([email protected]@212.156.182.55)
by MYSERVER.co.uk with ESMTPA; 19 Feb 2014 17:27:41 -0000
From: "=?ISO-8859-1?Q?frostix28=40aol.com?=" <[email protected]>
To: "=?ISO-8859-1?Q?micayla12=40aol.com?=" <[email protected]>,
"=?ISO-8859-1?Q?bao-01=40msn.com?=" <[email protected]>,
"=?ISO-8859-1?Q?yourkissistorture=40yahoo.com?="
<[email protected]>,
"=?ISO-8859-1?Q?karanisthegasman=40hotmail.com?="
<[email protected]>,
"=?ISO-8859-1?Q?jman5510=40yahoo.com?=" <[email protected]>,
"=?ISO-8859-1?Q?x0laurensays=40aim.com?=" <[email protected]>,
"=?ISO-8859-1?Q?zerin3=40aol.com?=" <[email protected]>,
"=?ISO-8859-1?Q?shortstuff128=40cs.com?=" <[email protected]>,
"=?ISO-8859-1?Q?apps+opee1eef=40facebookmail.com?="
<[email protected]>,
"=?ISO-8859-1?Q?registration=40ebay.com?=" <[email protected]>,
"=?ISO-8859-1?Q?frostix28=40aol.com?=" <[email protected]>
Subject: =?ISO-8859-1?Q?frostix28=40aol.com?=
Date: Tue, 19 Feb 2014 06:27:39 +0100
MIME-Version: 1.0
X-mailer: Microsoft Office Outlook, Build 11.0.5510
Reply-To: [email protected]
Content-type: Multipart/mixed; boundary="4A2C4E38_686FF402_boundary"
Content-Description: Multipart message
--4A2C4E38_686FF402_boundary
Content-type: text/html; charset=UTF-8
Content-Transfer-Encoding: Quoted-printable
Content-Disposition: inline
Content-Description: HTML text
=EF=BB=BF<html><head><meta http-equiv=3D"content-type" content: text/html;=
charset=3DUTF-8></head><body><a href=
=3D"http://contactaviators.com/bx/hga.html">http://contactaviators.com/bx/hga.=
html</a></body></html>
--4A2C4E38_686FF402_boundary--
我已将我的服务器地址更改为 MYSERVER.co.uk,并将我的 IP 更改为 MYIP。消息的其余部分保持不变,
从标题中我可以看到,电子邮件源自 212.156.182.55 而不是我的服务器,但随后邮件本身又返回到我的服务器。
这是正常的吗?我检查了开放中继等,所有在线扫描程序都表明邮件服务器设置正确。
我应该将其视为垃圾邮件吗?或者这是更糟糕的事情?
编辑:
自从发生这种情况以来,我一直密切关注日志文件。
其中有一句话让我感动
xinetd[892]: START: smtp pid=22325 from=205.201.134.23
whois 显示的是 mailchimp 的 IP。我不确定为什么mailchip 正在连接我,但他们似乎正在连接(根据日志显示,他们的连接只持续了 1 秒
答案1
垃圾邮件发送的原因是密码被泄露/嗅探/猜测。更改密码可阻止垃圾邮件发送。
似乎大多数与安全相关的事物中,用户选择的密码都是薄弱环节。我甚至没有考虑过这一点,直到没有别的办法了