某一帳號固定被非本身寄出的郵件退信(已爬文)

brianchou 發表於 2007-1-12 17:13:10

請問各位 公司的某一帳號最近發生了一件莫名其妙的事情，該使用者未寄出信件，卻收到一些莫名其妙的退信訊息，而且目前只有該帳號會發生，且每一封的退信位置皆不相同....如以下: ----- Original Message ----- From: "Mail Delivery System" <[email protected]> To: <[email protected]>(此為公司內的mail...鎖碼) Sent: Thursday, January 11, 2007 9:48 PM Subject: Undelivered Mail Returned to Sender > This is the Postfix program at host mail.biologigrand.se. > > I'm sorry to have to inform you that your message could not be > be delivered to one or more recipients. It's attached below. > > For further assistance, please send mail to <postmaster> > > If you do so, please include this problem report. You can > delete your own text from the attached returned message. > > The Postfix program > > <[email protected]>: host mx.iossol.de said: 550 unknown user > (in >　　reply to RCPT TO command) > > <[email protected]>: host smtpmx1.bayer.de >　　said: 550 Mail could not processed (in reply to RCPT TO command) > > <[email protected]>: host mx2.mail.psinet.de said: >　　550-Callout verification failed: 550 550 Recipient not in route list. > (in >　　reply to RCPT TO command) > 目前已檢查: 1. Open Relay 已檢查為關閉 2. 至　<a href='http://www.ORDB.org' target='_blank'>http://www.ORDB.org</a> 檢查未列黑名單 3. 該Client PC 未中毒 請問還有甚麼原因可以防治OR阻擋此情形持續發生呢? 架設環境: 1. 作業系統：Windows 2000 Server 2. 防毒軟體：TrendMicro OfficeScan 最新病毒碼及掃描引擎 3. 防火牆：Cisco PIX515 4. 自行架設 DNS 5. 固接式ADSL　固定IP 6. IP 分享器：NO 7. MDaemon、AntiVirus 版本: 6.03 8. MDaemon 其他相關的設定 9 SMTP (in) 及 (Out) 的記錄 Thu 2007-01-11 08:49:00: ---------- Thu 2007-01-11 08:49:02: Processing D:\MDAEMON\Localq\md50001593003.msg Thu 2007-01-11 08:49:02: > Message from: [email protected] Thu 2007-01-11 08:49:02: > Message to: [email protected] Thu 2007-01-11 08:49:02: > Message subject: Undelivered Mail Returned to Sender Thu 2007-01-11 08:49:02: > Message ID: <[email protected]> Thu 2007-01-11 08:49:02: Processing complete (matched 0 of 5 active rules) Thu 2007-01-11 08:49:02: ---------- Thu 2007-01-11 08:49:02: Processing D:\MDAEMON\Localq\md50001593004.msg Thu 2007-01-11 08:49:02: > Message from: [email protected] Thu 2007-01-11 08:49:02: > Message to: [email protected] Thu 2007-01-11 08:49:02: > Message subject: (Archive Copy) Undelivered Mail Returned to Sender Thu 2007-01-11 08:49:02: > Message ID: <[email protected]> Thu 2007-01-11 08:49:02: Processing complete (matched 0 of 5 active rules) Thu 2007-01-11 08:49:02: ---------- Thu 2007-01-11 08:49:02: 分析郵件 <D:\MDAEMON\Localq\pd50001593003.msg> Thu 2007-01-11 08:49:02: From: [email protected] Thu 2007-01-11 08:49:02: To: [email protected] Thu 2007-01-11 08:49:02: Subject: Undelivered Mail Returned to Sender Thu 2007-01-11 08:49:02: Message-ID: <[email protected]> Thu 2007-01-11 08:49:02: ---------- Thu 2007-01-11 08:49:02: 分析郵件 <D:\MDAEMON\Localq\pd50001593004.msg> Thu 2007-01-11 08:49:02: From: [email protected] Thu 2007-01-11 08:49:02: To: [email protected] Thu 2007-01-11 08:49:02: Subject: (Archive Copy) Undelivered Mail Returned to Sender Thu 2007-01-11 08:49:02: Message-ID: <[email protected]>

MarchFun 發表於 2007-1-12 19:49:49

這種情形大多是「別人」中毒了，而那個「別人」的通訊錄中有這個帳號的 Email。一些病毒會在中毒者的通訊錄中隨機挑選對象作為「寄件人」(非收件人)，然後到處丟病毒信。 所以，這個應該不是你們的問題。

brianchou 發表於 2007-1-15 10:30:25

感謝站長提醒有此可能性，我在持續查查看， 若有新的訊息，會繼續回報~^^ 感恩

頁: [1]

數碼中文坊's Archiver

某一帳號固定被非本身寄出的郵件退信(已爬文)