MAIL FROM:<>,Exchange server 2010

在解决另一个问题的过程中,我在Exchange 2010服务器上打开了协议日志logging。 我注意到在日志中有很多MAIL FROM:<>实例。 许多消息显示信息,如MAIL FROM:<[email protected]> SIZE=11209 ,所以我有点担心,也许有什么不对劲。

这更令人怀疑,因为大多数情况下,这些消息似乎都与消息中继失败的尝试相对应。

这是一个例子

 2013-06-17T15:06:12.167Z,Send Connector - Internet,08D038810B434725,1,192.18.101.201:23428,64.191.104.238:25,+,, 2013-06-17T15:06:13.540Z,Send Connector - Internet,08D038810B434725,2,192.18.101.201:23428,64.191.104.238:25,<,220 mail4.canteke.com ESMTP, 2013-06-17T15:06:13.540Z,Send Connector - Internet,08D038810B434725,3,192.18.101.201:23428,64.191.104.238:25,>,EHLO mail.mydomain.com, 2013-06-17T15:06:13.587Z,Send Connector - Internet,08D038810B434725,4,192.18.101.201:23428,64.191.104.238:25,<,250 mail4.canteke.com, 2013-06-17T15:06:13.587Z,Send Connector - Internet,08D038810B434725,5,192.18.101.201:23428,64.191.104.238:25,*,85673,sending message 2013-06-17T15:06:13.587Z,Send Connector - Internet,08D038810B434725,6,192.18.101.201:23428,64.191.104.238:25,>,MAIL FROM:<>, 2013-06-17T15:06:13.634Z,Send Connector - Internet,08D038810B434725,7,192.18.101.201:23428,64.191.104.238:25,<,250 Ok, 2013-06-17T15:06:13.634Z,Send Connector - Internet,08D038810B434725,8,192.18.101.201:23428,64.191.104.238:25,>,RCPT TO:<[email protected]>, 2013-06-17T15:06:13.696Z,Send Connector - Internet,08D038810B434725,9,192.18.101.201:23428,64.191.104.238:25,<,"553 sorry, that domain isn't in my list of allowed rcpthosts (#5.7.1)", 2013-06-17T15:06:13.696Z,Send Connector - Internet,08D038810B434725,10,192.18.101.201:23428,64.191.104.238:25,>,QUIT, 2013-06-17T15:06:13.743Z,Send Connector - Internet,08D038810B434725,11,192.18.101.201:23428,64.191.104.238:25,<,221 Bye, 2013-06-17T15:06:13.743Z,Send Connector - Internet,08D038810B434725,12,192.18.101.201:23428,64.191.104.238:25,-,,Local 

我想知道如何以及为什么这些邮件尝试正在生成。

这个是正常的。 许多MTA将使用空的发件人地址用于反弹和其他types的状态消息,以避免邮件循环。 RFC 5321的 4.5.5部分引用了这种做法。