在我的 Rsys 日志中,我收到了一些不是由我的服务器发起的奇怪的电子邮件请求:
Nov 17 09:32:18 localhost postfix/qmgr[21748]: 8E52272C09: from=<>, size=33770, nrcpt=1 (queue active)
Nov 17 09:32:18 localhost postfix/qmgr[21748]: 15E6472BE2: from=<>, size=36706, nrcpt=1 (queue active)
Nov 17 09:32:18 localhost postfix/qmgr[21748]: AB7F672BE6: from=<>, size=36159, nrcpt=1 (queue active)
Nov 17 09:32:18 localhost postfix/qmgr[21748]: 723D672C0A: from=<>, size=33263, nrcpt=1 (queue active)
Nov 17 09:32:20 localhost postfix/smtp[27598]: 8E52272C09: to=<[email protected]>, relay=mail.crimea.com[80.245.112.5]:25, delay=6902, delays=6900/0.02/2.3/0, dsn=4.7.1, status=deferred (host mail.crimea.com[80.245.112.5] refused to talk to me: 554 5.7.1 Service unavailable; Client host blocked using b.barracudacentral.org)
Nov 17 09:32:48 localhost postfix/smtp[27600]: connect to smereka.com.ua[178.248.232.65]:25: Connection timed out
Nov 17 09:32:48 localhost postfix/smtp[27600]: AB7F672BE6: to=<[email protected]>, relay=none, delay=15304, delays=15274/0.02/30/0, dsn=4.4.1, status=deferred (connect to smereka.com.ua[178.248.232.65]:25: Connection timed out)
Nov 17 09:32:48 localhost postfix/smtp[27601]: connect to alex.krc.karelia.ru[82.196.66.2]:25: Connection timed out
Nov 17 09:32:48 localhost postfix/smtp[27601]: 723D672C0A: to=<[email protected]>, relay=none, delay=6893, delays=6863/0.03/30/0, dsn=4.4.1, status=deferred (connect to alex.krc.karelia.ru[82.196.66.2]:25: Connection timed out)
Nov 17 09:32:48 localhost postfix/smtp[27599]: connect to scbglobal.net[208.73.211.173]:25: Connection timed out
Nov 17 09:33:18 localhost postfix/smtp[27599]: connect to scbglobal.net[208.73.210.212]:25: Connection timed out
Nov 17 09:33:48 localhost postfix/smtp[27599]: connect to scbglobal.net[208.73.211.171]:25: Connection timed out
Nov 17 09:34:18 localhost postfix/smtp[27599]: connect to scbglobal.net[208.73.210.209]:25: Connection timed out
Nov 17 09:34:18 localhost postfix/smtp[27599]: 15E6472BE2: to=<[email protected]>, relay=none, delay=15409, delays=15288/0.02/121/0, dsn=4.4.1, status=deferred (connect to scbglobal.net[208.73.210.209]:25: Connection timed out)
Nov 17 09:37:18 localhost postfix/qmgr[21748]: D125572C2E: from=<>, size=33171, nrcpt=1 (queue active)
Nov 17 09:37:18 localhost postfix/qmgr[21748]: B3CCE72C2D: from=<valeriya.biryukova@dak-cat-stroitelnye-materialy-kirpich-kamen-bloki>, size=31283, nrcpt=1 (queue active)
Nov 17 09:37:29 localhost postfix/smtp[27626]: B3CCE72C2D: host mail.citycon.kiev.ua[77.120.247.43] said: 451 <dak-cat-stroitelnye-materialy-kirpich-kamen-bloki> is invalid or DNS says does not exist (in reply to MAIL FROM command)
Nov 17 09:37:48 localhost postfix/smtp[27625]: connect to konkovotur.ru[109.70.26.37]:25: Connection timed out
Nov 17 09:37:59 localhost postfix/smtp[27626]: connect to mx.lucky.net[193.193.193.137]:25: Connection timed out
Nov 17 09:38:18 localhost postfix/smtp[27625]: connect to konkovotur.ru[194.85.61.76]:25: Connection timed out
Nov 17 09:38:18 localhost postfix/smtp[27625]: D125572C2E: to=<[email protected]>, relay=none, delay=6850, delays=6790/0.01/60/0, dsn=4.4.1, status=deferred (connect to konkovotur.ru[194.85.61.76]:25: Connection timed out)
Nov 17 09:38:29 localhost postfix/smtp[27626]: connect to mx.lucky.net[62.244.55.219]:25: Connection timed out
Nov 17 09:38:29 localhost postfix/smtp[27626]: B3CCE72C2D: to=<[email protected]>, relay=none, delay=6855, delays=6783/0.02/72/0, dsn=4.4.1, status=deferred (connect to mx.lucky.net[62.244.55.219]:25: Connection timed out)
Nov 17 09:42:18 localhost postfix/qmgr[21748]: 779D772BB4: from=<[email protected]>, size=34213, nrcpt=1 (queue active)
Nov 17 09:42:26 localhost postfix/smtp[27683]: 779D772BB4: to=<[email protected]>, relay=none, delay=15297, delays=15289/0.01/8/0, dsn=4.4.3, status=deferred (Host or domain name not found. Name service error for name=tica.co type=MX: Host not found, try again)
Nov 17 09:47:18 localhost postfix/qmgr[21748]: 138A972BB1: from=<[email protected]>, size=34196, nrcpt=1 (queue active)
Nov 17 09:47:18 localhost postfix/qmgr[21748]: 2A97872BF7: from=<[email protected]>, size=34185, nrcpt=1 (queue active)
Nov 17 09:47:18 localhost postfix/qmgr[21748]: C16D772BB5: from=<[email protected]>, size=34250, nrcpt=1 (queue active)
Nov 17 09:47:18 localhost postfix/qmgr[21748]: E6BC972C23: from=<>, size=33139, nrcpt=1 (queue active)
Nov 17 09:47:19 localhost postfix/smtp[27704]: C16D772BB5: host imx1.rambler.ru[81.19.66.235] said: 450 4.1.8 <[email protected]>: Sender address rejected: Domain not found (in reply to RCPT TO command)
Nov 17 09:47:20 localhost postfix/smtp[27704]: C16D772BB5: to=<[email protected]>, relay=imx1.rambler.ru[81.19.66.234]:25, delay=17125, delays=17123/0.02/1.3/0.2, dsn=4.1.8, status=deferred (host imx1.rambler.ru[81.19.66.234] said: 450 4.1.8 <[email protected]>: Sender address rejected: Domain not found (in reply to RCPT TO command))
Nov 17 09:47:46 localhost postfix/smtp[27702]: 138A972BB1: host mxs.mail.ru[217.69.139.150] said: 421 DNS problem (mail.starce.net). Try again later (in reply to MAIL FROM command)
Nov 17 09:47:50 localhost postfix/smtp[27705]: connect to mail.zoomlynx.com[206.251.24.106]:25: Connection timed out
Nov 17 09:47:50 localhost postfix/smtp[27705]: E6BC972C23: lost connection with mail.zoomlynx.com[206.251.24.108] while receiving the initial server greeting
Nov 17 09:47:51 localhost postfix/smtp[27705]: E6BC972C23: to=<[email protected]>, relay=smtp.zoomlynx.com[206.251.24.108]:25, delay=6951, delays=6919/0.03/32/0, dsn=4.4.2, status=deferred (lost connection with smtp.zoomlynx.com[206.251.24.108] while receiving the initial server greeting)
有人可以帮忙吗?
答案1
邮件来自以下邮件地址。
biryukova@dak-cat-stroitelnye-materialy-kirpich-kamen-bloki
& 邮件将被递送至以下地址
除此之外,还有这个错误消息
[电子邮件保护]:发件人地址被拒绝:未找到域(回复 RCPT TO 命令))
然后你会得到一些空的发件人地址
来自=<>
这可能意味着发件人地址是假的。但是 postfix 无论如何都会让邮件通过,我认为说你有问题是安全的。
答案2
发件人地址为空通常意味着您的服务器正在发送 MAILER-DAEMON 消息,例如:“未送达的邮件已返回给发件人”,有时可能是反向散射。
Nov 17 09:47:18 localhost postfix/qmgr[21748]: C16D772BB5: from=<[email protected]>, size=34250, nrcpt=1 (queue active)
Nov 17 09:47:19 localhost postfix/smtp[27704]: C16D772BB5: host imx1.rambler.ru[81.19.66.235] said: 450 4.1.8 <[email protected]>: Sender address rejected: Domain not found (in reply to RCPT TO command)
Nov 17 09:47:20 localhost postfix/smtp[27704]: C16D772BB5: to=<[email protected]>, relay=imx1.rambler.ru[81.19.66.234]:25, delay=17125, delays=17123/0.02/1.3/0.2, dsn=4.1.8, status=deferred (host imx1.rambler.ru[81.19.66.234] said: 450 4.1.8 <[email protected]>: Sender address rejected: Domain not found (in reply to RCPT TO command))
如果您的域名地址是 judwin.demon.co.uk,则说明 DNS 输入不正确。否则,您的服务器似乎是一个开放的邮件中继,或者至少它不验证外发邮件的发件人地址。