Qmail日志:很多未经过身份验证的SENDER

时间:2012-12-14 20:29:13

标签: qmail

在qmail日志中,有以下几行:

2012-12-14 18:04:49.314299500 simscan:[9999]:CLEAN (4.00/50.00):2.2875s:Delivery Status Notification (Failure):aa.aa.aa.aa::info@xxxx.it
2012-12-14 18:04:49.657999500 CHKUSER accepted rcpt: from <::> remote <utility-xxxx.it:unknown:aa.aa.aa.aa> rcpt <info@xxx.it> : found existing recipient
2012-12-14 18:04:49.658005500 policy_check: local  -> local info@xxxx.it (UNAUTHENTICATED SENDER)
2012-12-14 18:04:49.658016500 policy_check: policy allows transmission
2012-12-14 18:04:49.658019500 spamdyke[9945]: ALLOWED from: (unknown) to: info@xxxx.it origin_ip: 82.85.185.32 origin_rdns: utility-xxxxx.it auth: (unknown)

12-14 18:03:57 CHKUSER accepted rcpt: from <::> remote <utility-xxxx.it:unknown:aa.aa.aa.aa> rcpt <info@xxxx.it> : found existing recipient
12-14 18:03:57 policy_check: local  -> local info@xxxx.it (UNAUTHENTICATED SENDER)
12-14 18:03:57 spamdyke[9945]: ALLOWED from: (unknown) to: info@xxxx.it origin_ip: aa.aa.aa.aa origin_rdns: utility-xxxx.it auth: (unknown)
12-14 18:03:59 simscan:[9999]:CLEAN (4.00/50.00):2.4153s:Delivery Status Notification (Failure):aa.aa.aa.aa::info@xxxx.it
12-14 18:04:00 CHKUSER accepted rcpt: from <::> remote <utility-xxxx.it:unknown:aa.aa.aa.aa> rcpt <info@xxxx.it> : found existing recipient
12-14 18:04:00 policy_check: local  -> local info@xxxx.it (UNAUTHENTICATED SENDER)
12-14 18:04:00 spamdyke[9945]: ALLOWED from: (unknown) to: info@xxxx.it origin_ip: aa.aa.aa.aa origin_rdns: utility-xxxx.it auth: (unknown)
12-14 18:04:02 simscan:[9999]:CLEAN (4.00/50.00):2.5481s:Delivery Status Notification (Failure):aa.aa.aa.aa::info@xxxx.it
12-14 18:04:02 CHKUSER accepted rcpt: from <::> remote <utility-xxxx.it:unknown:aa.aa.aa.aa> rcpt <info@xxxx.it> : found existing recipient
12-14 18:04:02 policy_check: local  -> local info@xxxx.it (UNAUTHENTICATED SENDER)
12-14 18:04:02 spamdyke[9945]: ALLOWED from: (unknown) to: info@xxxx.it origin_ip: aa.aa.aa.aa origin_rdns: utility-xxxx.it auth: (unknown)

这是否意味着不需要的东西? 谢谢......我是qmail的新手

1 个答案:

答案 0 :(得分:0)

可能这些是用户收到的退回邮件info@xxxx.it

  

12-14 18:03:57 CHKUSER接受了rcpt:来自&lt; ::&gt; remote rcpt:找到现有收件人

有人可能欺骗了发件人的邮件ID,并可能正在执行某些垃圾邮件活动。而且我们都知道垃圾邮件发送者会将邮件发送到随机ID,而且大多数邮件都不存在。作为回报,发件人ID会收到退回邮件。

只需验证它。