在我的 VPS 的 WebHost Manager 中，有一个名为“邮件队列管理器”的区域。我经常会在那里堆积一些似乎包含病毒和其他问题的消息。
这些消息到底是什么？它们是试图发送到我的域的消息吗？还是它们试图以某种方式从我的域发送的消息？
我担心我的服务器不安全，垃圾邮件发送者正在使用它。此消息是确认还是否认了这一点？
注：我转发我的[电子邮件保护]到[电子邮件保护]，并且我使用我的 MYDOMAIN.com SMTP 服务器从 Gmail 发送邮件。
1NbSMG-0005mN-Ul-H
mailnull 47 12
<>
1264915708 0
-ident mailnull
-received_protocol local
-body_linecount 230
-max_received_linelength 80
-allow_unqualified_recipient
-allow_unqualified_sender
-frozen 1264915709
-localerror
XX
1
[email protected]
144P Received: from mailnull by vps.MYDOMAIN.com with local (Exim 4.69)
id 1NbSMG-0005mN-Ul
for [email protected]; Sun, 31 Jan 2010 00:28:28 -0500
040 X-Failed-Recipients: [email protected]
029 Auto-Submitted: auto-replied
060F From: Mail Delivery System <[email protected]>
022T To: [email protected]
059 Subject: Mail delivery failed: returning message to sender
049I Message-Id: <[email protected]>
038 Date: Sun, 31 Jan 2010 00:28:28 -0500
1NbSMG-0005mN-Ul-D
This message was created automatically by mail delivery software.
A message that you sent could not be delivered to one or more of its
recipients. This is a permanent error. The following address(es) failed:
[email protected]
(ultimately generated from [email protected])
SMTP error from remote mail server after end of data:
host gmail-smtp-in.l.google.com [209.85.221.42]:
552-5.7.0 Our system detected an illegal attachment on your message. Please
552-5.7.0 visit http://mail.google.com/support/bin/answer.py?answer=6590 to
552 5.7.0 review our attachment guidelines. 8si6597260qyk.56
------ This is a copy of the message, including all the headers. ------
Return-path: <[email protected]>
Received: from dyncable-72-159-38-204.bardstown.com ([72.159.38.204])
by vps.MYDOMAIN.com with esmtp (Exim 4.69)
(envelope-from <[email protected]>)
id 1NbSMF-0005kn-3O
for [email protected]; Sun, 31 Jan 2010 00:28:27 -0500
Received: from 72.159.38.204 by mail.rowzie.com; Sun, 31 Jan 2010 00:27:12 -0500
Message-ID: <000d01caa236$0a893ba0$6400a8c0@gullyj>
From: "Erma Cornelius" <[email protected]>
To: <[email protected]>
Subject: You've received a postcard
Date: Sun, 31 Jan 2010 00:27:12 -0500
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----=_NextPart_000_0006_01CAA236.0A893BA0"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2900.2180
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
This is a multi-part message in MIME format.
------=_NextPart_000_0006_01CAA236.0A893BA0
Content-Type: text/plain;
format=flowed;
charset="Windows-1252";
reply-type=original
Content-Transfer-Encoding: 7bit
Good day.
Your family member has sent you an ecard
Send free ecards from with your choice of colors, words and music.
Your ecard will be available with us for the next 30 days.
If you wish to keep the ecard longer, you may save it on your computer or take a
print.
To view your ecard, open zip attached file.
------=_NextPart_000_0006_01CAA236.0A893BA0
Content-Type: application/zip;
name="ecard.zip"
Content-Transfer-Encoding: base64
Content-Disposition: attachment;
filename="ecard.zip"
(attachment data here)
答案1
您需要配置您的 vps 的防火墙以关闭端口 25 的外部流量。
如果您想从您的网络服务器发送邮件，您仍然可以关闭 25 端口，从而避免 99% 的问题。
如果您需要用于外部流量的 SMTP 服务器，请使用托管公司提供的服务器。
否则，您将花费大量时间来修补 SMTP 服务器并关闭恶意流量。
答案2
这些消息到底是什么？它们是试图发送到我的域的消息吗？还是它们试图以某种方式从我的域发送的消息？
垃圾邮件发送者通过您的服务器向外界转发电子邮件。您的电子邮件服务器配置为开放中继，因此才会发生这种情况。
我担心我的服务器不安全，垃圾邮件发送者正在使用它。此消息是确认还是否认了这一点？
服务器配置不正确，因此不安全。不过，有一个简单的方法可以解决这个问题：
- 仅在环回接口 (127.0.0.1) 上运行您的 MTA (电子邮件服务器)。
- 从外部关闭端口 25（请注意，这对于发送电子邮件来说根本不是必需的）。