1

在 qmail 日志中有很多以下行：

2012-12-14 18:04:49.314299500 simscan:[9999]:CLEAN (4.00/50.00):2.2875s:Delivery Status Notification (Failure):aa.aa.aa.aa::info@xxxx.it
2012-12-14 18:04:49.657999500 CHKUSER accepted rcpt: from <::> remote <utility-xxxx.it:unknown:aa.aa.aa.aa> rcpt <info@xxx.it> : found existing recipient
2012-12-14 18:04:49.658005500 policy_check: local  -> local info@xxxx.it (UNAUTHENTICATED SENDER)
2012-12-14 18:04:49.658016500 policy_check: policy allows transmission
2012-12-14 18:04:49.658019500 spamdyke[9945]: ALLOWED from: (unknown) to: info@xxxx.it origin_ip: 82.85.185.32 origin_rdns: utility-xxxxx.it auth: (unknown)

和

12-14 18:03:57 CHKUSER accepted rcpt: from <::> remote <utility-xxxx.it:unknown:aa.aa.aa.aa> rcpt <info@xxxx.it> : found existing recipient
12-14 18:03:57 policy_check: local  -> local info@xxxx.it (UNAUTHENTICATED SENDER)
12-14 18:03:57 spamdyke[9945]: ALLOWED from: (unknown) to: info@xxxx.it origin_ip: aa.aa.aa.aa origin_rdns: utility-xxxx.it auth: (unknown)
12-14 18:03:59 simscan:[9999]:CLEAN (4.00/50.00):2.4153s:Delivery Status Notification (Failure):aa.aa.aa.aa::info@xxxx.it
12-14 18:04:00 CHKUSER accepted rcpt: from <::> remote <utility-xxxx.it:unknown:aa.aa.aa.aa> rcpt <info@xxxx.it> : found existing recipient
12-14 18:04:00 policy_check: local  -> local info@xxxx.it (UNAUTHENTICATED SENDER)
12-14 18:04:00 spamdyke[9945]: ALLOWED from: (unknown) to: info@xxxx.it origin_ip: aa.aa.aa.aa origin_rdns: utility-xxxx.it auth: (unknown)
12-14 18:04:02 simscan:[9999]:CLEAN (4.00/50.00):2.5481s:Delivery Status Notification (Failure):aa.aa.aa.aa::info@xxxx.it
12-14 18:04:02 CHKUSER accepted rcpt: from <::> remote <utility-xxxx.it:unknown:aa.aa.aa.aa> rcpt <info@xxxx.it> : found existing recipient
12-14 18:04:02 policy_check: local  -> local info@xxxx.it (UNAUTHENTICATED SENDER)
12-14 18:04:02 spamdyke[9945]: ALLOWED from: (unknown) to: info@xxxx.it origin_ip: aa.aa.aa.aa origin_rdns: utility-xxxx.it auth: (unknown)

这是否意味着不需要的东西？谢谢...我对qmail完全陌生

4

1 回答 1

0

可能这些是用户 info@xxxx.it 收到的退回邮件

12-14 18:03:57 CHKUSER 接受了 rcpt：来自 <::> 远程 rcpt：找到了现有的收件人

可能有人欺骗了发件人的邮件 ID，并且可能正在执行一些垃圾邮件活动。众所周知，垃圾邮件发送者向随机 ID 发送邮件，其中大多数不存在。作为回报，发件人 ID 会收到一条退回消息。

只需验证它。

于 2013-02-15T09:14:08.307 回答