当我运行命令时邮件在我的网站上得到如下输出：
B8D90603E86F4 3422 Wed Apr 12 14:04:14 [email protected]
(host alt1.gmail-smtp-in.l.google.com[209.85.202.26] said: 421-4.7.0 [vvv.xxx.yyy.zzz 4] Our system has detected an unusual rate of 421-4.7.0 unsolicited mail originating from your IP address. To protect our 421-4.7.0 users from spam, mail sent from your IP address has been temporarily 421-4.7.0 rate limited. Please visit 421-4.7.0 https://support.google.com/mail/?p=UnsolicitedRateLimitError to 421 4.7.0 review our Bulk Email Senders Guidelines. g3si9112268wmc.148 - gsmtp (in reply to end of DATA command))
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
4E8F2603E86EB 6067 Wed Apr 12 14:04:13 MAILER-DAEMON
(host mx.yandex.net[213.180.193.89] said: 451 4.7.1 Sorry, the service is currently unavailable. Please come back later. 1492020260-fQSwdIJrgP-4KMuQhZW (in reply to end of DATA command))
[email protected]
其中 vvv.xxx.yyy.zzz 是我的 IP 地址
当我在 mail.log 上搜索垃圾邮件时，我得到了这个
Apr 12 14:13:44 mail postfix/smtp[30705]: 1ADDD603E8E77: host gmail-smtp-in.l.google.com[108.177.11.27] said: 421-4.7.0 [190.202.87.1 4] Our system has detected an unusual rate of 421-4.7.0 unsolicited mail originating from your IP address. To protect our 421-4.7.0 users from spam, mail sent from your IP address has been temporarily 421-4.7.0 rate limited. Please visit 421-4.7.0 https://support.google.com/mail/?p=UnsolicitedRateLimitError to 421 4.7.0 review our Bulk Email Senders Guidelines. q34si10070519uaq.158 - gsmtp (in reply to end of DATA command)
Apr 12 14:13:44 mail postfix/smtp[30699]: 2EAB4603E86FC: host gmail-smtp-in.l.google.com[108.177.11.27] said: 421-4.7.0 [190.202.87.1 4] Our system has detected an unusual rate of 421-4.7.0 unsolicited mail originating from your IP address. To protect our 421-4.7.0 users from spam, mail sent from your IP address has been temporarily 421-4.7.0 rate limited. Please visit 421-4.7.0 https://support.google.com/mail/?p=UnsolicitedRateLimitError to 421 4.7.0 review our Bulk Email Senders Guidelines. f7si1701964uaf.125 - gsmtp (in reply to end of DATA command)
Apr 12 14:13:45 mail postfix/smtp[30701]: 1F131603E8E50: host gmail-smtp-in.l.google.com[108.177.11.27] said: 421-4.7.0 [190.202.87.1 4] Our system has detected an unusual rate of 421-4.7.0 unsolicited mail originating from your IP address. To protect our 421-4.7.0 users from spam, mail sent from your IP address has been temporarily 421-4.7.0 rate limited. Please visit 421-4.7.0 https://support.google.com/mail/?p=UnsolicitedRateLimitError to 421 4.7.0 review our Bulk Email Senders Guidelines. g126si7977133vkg.204 - gsmtp (in reply to end of DATA command)
Apr 12 14:13:45 mail postfix/smtp[30691]: 1BD69603E8D97: host gmail-smtp-in.l.google.com[108.177.11.27] said: 421-4.7.0 [190.202.87.1 4] Our system has detected an unusual rate of 421-4.7.0 unsolicited mail originating from your IP address. To protect our 421-4.7.0 users from spam, mail sent from your IP address has been temporarily 421-4.7.0 rate limited. Please visit 421-4.7.0 https://support.google.com/mail/?p=UnsolicitedRateLimitError to 421 4.7.0 review our Bulk Email Senders Guidelines. v5si2114982uaf.147 - gsmtp (in reply to end of DATA command)
Apr 12 14:13:45 mail postfix/smtp[30681]: 23144603E8AA0: host gmail-smtp-in.l.google.com[108.177.11.27] said: 421-4.7.0 [190.202.87.1 4] Our system has detected an unusual rate of 421-4.7.0 unsolicited mail originating from your IP address. To protect our 421-4.7.0 users from spam, mail sent from your IP address has been temporarily 421-4.7.0 rate limited. Please visit 421-4.7.0 https://support.google.com/mail/?p=UnsolicitedRateLimitError to 421 4.7.0 review our Bulk Email Senders Guidelines. g72si7067092vki.93 - gsmtp (in reply to end of DATA command)
Apr 12 14:13:45 mail postfix/smtp[30678]: 2F334603E8A90: host gmail-smtp-in.l.google.com[108.177.11.27] said: 421-4.7.0 [190.202.87.1 4] Our system has detected an unusual rate of 421-4.7.0 unsolicited mail originating from your IP address. To protect our 421-4.7.0 users from spam, mail sent from your IP address has been temporarily 421-4.7.0 rate limited. Please visit 421-4.7.0 https://support.google.com/mail/?p=UnsolicitedRateLimitError to 421 4.7.0 review our Bulk Email Senders Guidelines. w66si10076884vke.101 - gsmtp (in reply to end of DATA command)
Apr 12 14:13:47 mail postfix/smtp[30686]: 299DA603E8DA5: host gmail-smtp-in.l.google.com[108.177.11.27] said: 421-4.7.0 [190.202.87.1 4] Our system has detected an unusual rate of 421-4.7.0 unsolicited mail originating from your IP address. To protect our 421-4.7.0 users from spam, mail sent from your IP address has been temporarily 421-4.7.0 rate limited. Please visit 421-4.7.0 https://support.google.com/mail/?p=UnsolicitedRateLimitError to 421 4.7.0 review our Bulk Email Senders Guidelines. c187si10068708vkd.194 - gsmtp (in reply to end of DATA command)
Apr 12 14:13:47 mail postfix/smtp[30700]: 22329603E8E45: host gmail-smtp-in.l.google.com[108.177.11.27] said: 421-4.7.0 [190.202.87.1 4] Our system has detected an unusual rate of 421-4.7.0 unsolicited mail originating from your IP address. To protect our 421-4.7.0 users from spam, mail sent from your IP address has been temporarily 421-4.7.0 rate limited. Please visit 421-4.7.0 https://support.google.com/mail/?p=UnsolicitedRateLimitError to 421 4.7.0 review our Bulk Email Senders Guidelines. k20si7240125uaf.60 - gsmtp (in reply to end of DATA command)
Apr 12 14:13:48 mail postfix/smtp[30710]: 27917603E8DAB: host gmail-smtp-in.l.google.com[108.177.11.27] said: 421-4.7.0 [190.202.87.1 4] Our system has detected an unusual rate of 421-4.7.0 unsolicited mail originating from your IP address. To protect our 421-4.7.0 users from spam, mail sent from your IP address has been temporarily 421-4.7.0 rate limited. Please visit 421-4.7.0 https://support.google.com/mail/?p=UnsolicitedRateLimitError to 421 4.7.0 review our Bulk Email Senders Guidelines. x38si10023076uax.138 - gsmtp (in reply to end of DATA command)
Apr 12 14:13:49 mail postfix/smtp[30709]: 2E36E603E8DA7: host gmail-smtp-in.l.google.com[108.177.11.27] said: 421-4.7.0 [190.202.87.1 4] Our system has detected an unusual rate of 421-4.7.0 unsolicited mail originating from your IP address. To protect our 421-4.7.0 users from spam, mail sent from your IP address has been temporarily 421-4.7.0 rate limited. Please visit 421-4.7.0 https://support.google.com/mail/?p=UnsolicitedRateLimitError to 421 4.7.0 review our Bulk Email Senders Guidelines. k129si10052482vkf.49 - gsmtp (in reply to end of DATA command)
请提出任何建议来阻止这种情况
答案1
看此主题可能是以下之一：
如果它来自其他地方并被中继到完全不同的地方，则 postfix 目前处于开放中继状态。这非常非常糟糕，您应该加强 smtpd_recipient_restrictions 和 smtpd_client_restrictions 中的设置
/etc/postfix/main.cf。如果是从本地主机发来的，则很可能是某个网站托管用户被 php 脚本攻击，该脚本会按需发送垃圾邮件。使用该
find命令查找最近添加或更改的 .php 文件，然后仔细查看任何可疑名称。