为什么我收到这些电子邮件?

一段时间以前,我注意到,我的域名的电子邮件不是马上提供的谷歌,我从谷歌服务器得到一个SMTP错误消息。 我不记得那条消息的确切措辞,但是使用googlesearch,build议我需要设置SPF和DKIPlogging。 我做了哪些 它解决了谷歌不接受电子邮件的问题。 但是现在,几个星期后,它又打开了一封回复电子邮件的大门。 以下是我将域名replace为mydomain.com的一个示例

Return-Path: <MAILER-DAEMON> X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on ip-172-31-14-136 X-Spam-Level: X-Spam-Status: No, score=-2.7 required=5.0 tests=BAYES_00,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,FREEMAIL_FROM,RCVD_IN_DNSWL_LOW,RCVD_IN_MSPIKE_H3, RCVD_IN_MSPIKE_WL,URIBL_BLOCKED autolearn=ham autolearn_force=no version=3.4.0 Delivered-To: [email protected] Received: from mail-wg0-f68.google.com (mail-wg0-f68.google.com [74.125.82.68]) by service.mydomain.com (Postfix) with ESMTPS id B2D5C3CD9 for <[email protected]>; Sun, 1 Mar 2015 04:20:12 +1300 (NZDT) Authentication-Results: service.mydomain.com; dkim=pass reason="2048-bit key; unprotected key" header.d=googlemail.com [email protected] header.b=flcXD2tw; dkim-adsp=pass; dkim-atps=neutral Received: by wghb13 with SMTP id b13so6428727wgh.2 for <[email protected]>; Sat, 28 Feb 2015 07:20:10 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=googlemail.com; s=20120113; h=mime-version:from:to:subject:message-id:date:content-type; bh=thNUSyqg9cxzoVV3wQQPzs5jLQUlj/POqhrDqY/p1+s=; b=flcXD2tw+G6XLYhwGlNqRunKXmEqanLfLfxserILW3WU+m5ezqkCcQFIeYEHAoIznM QVIbSv2NWM9ypPc7iEVESIYUv2b2jBYz1kU46U+qZPYx7Gdw57RbZ7PgfnQpKcfoc101 eVbgX+vb5y9oIxIs6yjr9ggnoMn2/5P2UxdlF9QOY9ATaRHmLPupfTJHrdgzBPV696rR 033d6A6a8lFQRR9ReN4OKHHVNrwiiZpmSo0E8lAp+aU2VPrnQSK0fzFr5qdz3ZpVI7hl c162Q9P+5uGggaSz70xc1vDaQRg3Ch7axLL3YGNSZjqkQGBEYOvCEyLgnYcPucvqPDpx jiXQ== X-Received: by 10.180.91.79 with SMTP id cc15mr9706181wib.37.1425136810420; Sat, 28 Feb 2015 07:20:10 -0800 (PST) MIME-Version: 1.0 Received: by 10.180.91.79 with SMTP id cc15mr6423807wib.37; Sat, 28 Feb 2015 07:20:10 -0800 (PST) From: Mail Delivery Subsystem <[email protected]> To: [email protected] X-Failed-Recipients: [email protected] Subject: Delivery Status Notification (Failure) Message-ID: <[email protected]> Date: Sat, 28 Feb 2015 15:20:10 +0000 Content-Type: text/plain; charset=UTF-8 Delivery to the following recipient failed permanently: [email protected] Technical details of permanent failure: Google tried to deliver your message, but it was rejected by the server for the recipient domain gone.bristol.ac.uk by aspmx.l.google.com. [173.194.78.27]. The error that the other server returned was: 550-5.1.1 The email account that you tried to reach does not exist. Please try 550-5.1.1 double-checking the recipient's email address for typos or 550-5.1.1 unnecessary spaces. Learn more at 550 5.1.1 http://support.google.com/mail/bin/answer.py?answer=6596 q6si9283951wic.32 - gsmtp ----- Original message ----- X-Received: by 10.180.91.79 with SMTP id cc15mr9706178wib.37.1425136810390; Sat, 28 Feb 2015 07:20:10 -0800 (PST) X-Gm-Message-State: ALoCoQnh7/8Nv8/oHTiqX41mEzEmq5oNlGy3zy9p01XvfZJzOXyug+NN1QL8PqIJE56gTu5omL6Iy8tNn2AMT43KwsrGdBs94LPANr7ogrNhdcQTKEM2z86gPVU+j4dvqeA9AziAbSPqtFZXBhNv4pZmS8GMWor91A== X-Received: by 10.180.91.79 with SMTP id cc15mr9706170wib.37.1425136810311; Sat, 28 Feb 2015 07:20:10 -0800 (PST) Return-Path: <[email protected]> Received: from mail-we0-f174.google.com (mail-we0-f174.google.com. [74.125.82.174]) by mx.google.com with ESMTPS id ei1si9166190wib.92.2015.02.28.07.20.09 for <[email protected]> (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Sat, 28 Feb 2015 07:20:09 -0800 (PST) Received-SPF: pass (google.com: domain of [email protected] designates 74.125.82.174 as permitted sender) client-ip=74.125.82.174; Authentication-Results: mx.google.com; spf=pass (google.com: domain of [email protected] designates 74.125.82.174 as permitted sender) [email protected] Received: by wevm14 with SMTP id m14so25473931wev.13 for <[email protected]>; Sat, 28 Feb 2015 07:20:09 -0800 (PST) X-Received: by 10.180.86.227 with SMTP id s3mr16337114wiz.58.1425126758697; Sat, 28 Feb 2015 04:32:38 -0800 (PST) X-Received: by 10.180.86.227 with SMTP id s3mr16337091wiz.58.1425126758539; Sat, 28 Feb 2015 04:32:38 -0800 (PST) Return-Path: <[email protected]> Received: from psmtp.com (eu1sys200amx130.postini.com. [207.126.144.199]) by mx.google.com with SMTP id jw7si8639670wid.30.2015.02.28.04.32.24; Sat, 28 Feb 2015 04:32:36 -0800 (PST) Received-SPF: softfail (google.com: domain of transitioning [email protected] does not designate 104.220.1.229 as permitted sender) client-ip=104.220.1.229; Received: from 207.126.147.10 ([104.220.1.229]) by eu1sys200amx130.postini.com ([207.126.147.10]) with SMTP; Sat, 28 Feb 2015 12:32:35 GMT Message-ID: <[email protected]> From: "Charlotte Freeman" <[email protected]> Subject: Re: Afraid of awkward situations? New ED meds won't let you down! To: [email protected] Date: Sat, 28 Feb 2015 18:27:35 +0600 Mime-Version: 1.0 Content-Type: text/html; Content-Transfer-Encoding: 7Bit X-pstn-mail-from: <[email protected]> X-pstn-levels: (S: 0.00000/ 4.08422 CV:99.9000 FC:95.5390 LC:95.5390 R:95.9108 P:95.9108 M:97.0282 C:98.6951 ) X-pstn-dkim: 0 skipped:not-enabled X-pstn-status: off X-pstn-nxpr: disp=neutral, [email protected] X-pstn-nxp: bodyHash=7f565d975b7ab6918b9cc998090b1e19665421b6, headerHash=4e9622b17df37a9b31ee0f1651d42a67c3d3570d, keyName=4, rcptHash=6bfa24bd4d3660f3d9132cffc038b04e7adf948c, sourceip=104.220.1.229, version=1 X-pstn-nxp: bodyHash=7f565d975b7ab6918b9cc998090b1e19665421b6, headerHash=4e9622b17df37a9b31ee0f1651d42a67c3d3570d, keyName=4, rcptHash=6bfa24bd4d3660f3d9132cffc038b04e7adf948c, sourceip=104.220.1.229, version=1 ----- End of message ----- 

看来,谷歌接受并尝试发送来自我的域的垃圾邮件。 这并不是看我这些电子邮件通过我的smtp服务器进入系统,因为电子邮件中没有ips匹配它。 看起来这些只是从收件人邮件系统跳转到指定为发件人的地址(这在我的域中不存在,最终在邮箱中)。

我现在每天得到数以百计的这些。 这是否有可能是因为我configuration错误的SPF?

这是我的spflogging:

 v=spf1 a mx include:_spf.google.com ~all 

我的大部分设置(最近刚刚添加的SPF和DKIP除外)在此描述: 邮箱中新文件的Postfix / Dovecot权限 )

我相信你遇到的是Backscatter电子邮件,请查看维基百科的详细描述。 简而言之,如果有人使用伪造的地址发送垃圾邮件(在这种情况下是您的),并且退回邮件发送回您的地址,则会发生反向散射。 许多邮件服务器通过使用称为退回地址标签validation(BATV)的技术来标记每个发出的电子邮件来解决这个问题,并且当邮件服务器得到弹回电子邮件时,可以判断它是否是之前发送的电子邮件的反弹。 如果不是,则根据您的configuration方式拒绝或将其标记为垃圾邮件。

查看原始邮件的标题,返回path设置为您的地址,这意味着如果垃圾邮件发送者的电子邮件未能送达,则退回将被发送到您的地址。

Return-Path: <[email protected]>

原始IP似乎是104.220.1.229,在DNSBL上快速search显示这个IP被许多人列为垃圾邮件的来源。

Received-SPF: softfail (google.com: domain of transitioning [email protected] does not designate 104.220.1.229 as permitted sender) client-ip=104.220.1.229;

解决scheme – 您可能需要设置BATV以防止将来出现此类分散的电子邮件。

除此之外,请检查您的SPF条目,您是否说过不使用Gmail作为中转,那么为什么要把Gmail的SPFlogging? SPFlogging旨在添加作为您的域的合法电子邮件源的发件人主机列表。 如果您不使用Gmail进行中继,请将其从SPFlogging中删除。 只能添加您的SPFlogging中的发送主机的IP地址。