后缀:接收不属于我域名的邮件

Question

我们正在使用带有自定义SA规则的后缀/dovecot/amavis/spamassassin配置，等等。

但是有些奇怪的邮件被送到我们这里，即使没有垃圾邮件测试头和dkim测试。

示例标题：

Return-Path: <udqosvf@fenixinc.biz.ua>
Delivered-To: user@ourdomain.cz
Received: from localhost (localhost [127.0.0.1])
    by mx.ourserver.cz (Postfix) with ESMTP id 8A6854207E
    for <user@ourdomain.cz>; Thu, 14 Sep 2017 08:00:54 +0200 (CEST)
X-Virus-Scanned: Debian amavisd-new at mx.ourserver.cz
Received: from mx.ourserver.cz ([127.0.0.1])
    by localhost (mx.ourserver.cz [127.0.0.1]) (amavisd-new, port 10024)
    with ESMTP id mAd28zkivdoO for <user@ourdomain.cz>;
    Thu, 14 Sep 2017 08:00:51 +0200 (CEST)
Received-SPF: pass (fenixinc.biz.ua: 62.141.46.12 is authorized to use 'udqosvf@fenixinc.biz.ua' in 'mfrom' identity (mechanism 'a/24' matched)) receiver=mx.ourserver.cz; identity=mailfrom; envelope-from="udqosvf@fenixinc.biz.ua"; helo=mail.fenixinc.biz.ua; client-ip=62.141.46.12
Received: from mail.fenixinc.biz.ua (mail.fenixinc.biz.ua [62.141.46.12])
    by mx.ourserver.cz (Postfix) with ESMTP id A236542011
    for <user@mydomain.cz>; Thu, 14 Sep 2017 08:00:51 +0200 (CEST)
Received: from fenixinc.biz.ua (mail.fenixinc.biz.ua [62.141.46.12])
    by mail.fenixinc.biz.ua (Postfix) with ESMTPA id 833118C313;
    Thu, 14 Sep 2017 06:07:31 +0300 (EEST)
Message-ID: <udqosvf34621287.80857417@mail.fenixinc.biz.ua>
Reply-To: "ED Packs" <udqosvf@fenixinc.biz.ua>
From: "ED Packs" <udqosvf@fenixinc.biz.ua>
To: <**x.v@azckjykrclbk.cz**>
Subject: ED Packs for Potency
Date: Thu, 14 Sep 2017 06:07:35 +0300
MIME-Version: 1.0
Content-Type: multipart/related;
    type="multipart/alternative";
    boundary="----=_NextPart_000_0006_01D32D1F.7177D070"

Precedence: bulk
List-Id: b30356035v06500326
X-Complaints-To: abuse@fenixinc.biz.ua
List-Unsubscribe: <http://fenixinc.biz.ua/ru/unsubscribe/do?hash=7468576857015011>

正如您所看到的，TO:是x.v@azckjykrclbk.cz，它肯定不是我们的域，甚至不是用户，但是奇怪地被传递到随机用户的邮箱。没有正在使用的域篮。

有什么问题吗？

Answer 1

发送电子邮件时，SMTP服务器将创建一个SMTP信封，其中包含收件人(S) (RCPT TO:)头和邮件发件人(MAIL FROM:)头。收件人(S)标题用于确定电子邮件的实际收件人(S)。To:标头被电子邮件阅读器(电子邮件DATA的一部分)用来显示谁是收件人(S)。信封和DATA头地址通常是匹配的，但它们不必匹配。垃圾邮件发送者经常伪造这些标题，以避免垃圾邮件过滤器。

看到您的postfix或SpamAssassin/Amavis日志会很有趣。尝试查看后缀地址验证和后缀smtp中继和访问控制页面。