☰

Postfix：接收不属于我的域名的邮件

tag-icon • tag-icon debian postfix spam spamassassin
Postfix：接收不属于我的域名的邮件

我们正在使用带有自定义 SA 规则等的 postfix/dovecot/amavis/spamassassin 配置。

但即使没有垃圾邮件测试标头和 dkim 测试，我们还是会收到一些奇怪的邮件

示例标题：

Return-Path: <[email protected]>
Delivered-To: [email protected]
Received: from localhost (localhost [127.0.0.1])
    by mx.ourserver.cz (Postfix) with ESMTP id 8A6854207E
    for <[email protected]>; Thu, 14 Sep 2017 08:00:54 +0200 (CEST)
X-Virus-Scanned: Debian amavisd-new at mx.ourserver.cz
Received: from mx.ourserver.cz ([127.0.0.1])
    by localhost (mx.ourserver.cz [127.0.0.1]) (amavisd-new, port 10024)
    with ESMTP id mAd28zkivdoO for <[email protected]>;
    Thu, 14 Sep 2017 08:00:51 +0200 (CEST)
Received-SPF: pass (fenixinc.biz.ua: 62.141.46.12 is authorized to use '[email protected]' in 'mfrom' identity (mechanism 'a/24' matched)) receiver=mx.ourserver.cz; identity=mailfrom; envelope-from="[email protected]"; helo=mail.fenixinc.biz.ua; client-ip=62.141.46.12
Received: from mail.fenixinc.biz.ua (mail.fenixinc.biz.ua [62.141.46.12])
    by mx.ourserver.cz (Postfix) with ESMTP id A236542011
    for <[email protected]>; Thu, 14 Sep 2017 08:00:51 +0200 (CEST)
Received: from fenixinc.biz.ua (mail.fenixinc.biz.ua [62.141.46.12])
    by mail.fenixinc.biz.ua (Postfix) with ESMTPA id 833118C313;
    Thu, 14 Sep 2017 06:07:31 +0300 (EEST)
Message-ID: <[email protected]>
Reply-To: "ED Packs" <[email protected]>
From: "ED Packs" <[email protected]>
To: <**[email protected]**>
Subject: ED Packs for Potency
Date: Thu, 14 Sep 2017 06:07:35 +0300
MIME-Version: 1.0
Content-Type: multipart/related;
    type="multipart/alternative";
    boundary="----=_NextPart_000_0006_01D32D1F.7177D070"

Precedence: bulk
List-Id: b30356035v06500326
X-Complaints-To: [email protected]
List-Unsubscribe: <http://fenixinc.biz.ua/ru/unsubscribe/do?hash=7468576857015011>

如你看到的，到：是[电子邮件保护]这绝对不是我们的域名，甚至不是我们的用户，但奇怪的是却被发送到了随机用户的邮箱。没有使用域名篮。

可能是什么问题呢？

答案1

发送电子邮件时，SMTP 服务器会创建一个SMTP信封，其中包含收件人（RCPT TO:）标头和邮件发件人（MAIL FROM:）标头。收件人标头用于确定电子邮件的实际收件人。To:电子邮件阅读器（电子邮件的一部分）使用标头向DATA您显示收件人是谁。信封和DATA标头地址通常会匹配，但并非必须匹配。垃圾邮件发送者经常伪造这些标头以试图避开垃圾邮件过滤器。

查看你的 postfix 或 SpamAssassin/Amavis 日志会很有趣。尝试查看postfix 地址验证和postfix smtp中继和访问控制页。

相关内容