某一帳號固定被非本身寄出的郵件退信(已爬文)

brianchou

請問各位
公司的某一帳號最近發生了一件莫名其妙的事情，該使用者未寄出信件，卻收到一些莫名其妙的退信訊息，而且目前只有該帳號會發生，且每一封的退信位置皆不相同....如以下:

----- Original Message -----
From: "Mail Delivery System" <[email protected]>
To: <[email protected]>(此為公司內的mail...鎖碼)
Sent: Thursday, January 11, 2007 9:48 PM
Subject: Undelivered Mail Returned to Sender


> This is the Postfix program at host mail.biologigrand.se.
>
> I'm sorry to have to inform you that your message could not be
> be delivered to one or more recipients. It's attached below.
>
> For further assistance, please send mail to <postmaster>
>
> If you do so, please include this problem report. You can
> delete your own text from the attached returned message.
>
> The Postfix program
>
> <[email protected]>: host mx.iossol.de[88.198.47.241] said: 550 unknown user
> (in
>　　reply to RCPT TO command)
>
> <[email protected]>: host smtpmx1.bayer.de[212.64.228.131]
>　　said: 550 Mail could not processed (in reply to RCPT TO command)
>
> <[email protected]>: host mx2.mail.psinet.de[154.15.251.158] said:
>　　550-Callout verification failed: 550 550 Recipient not in route list.
> (in
>　　reply to RCPT TO command)
>

目前已檢查:
1. Open Relay 已檢查為關閉
2. 至　http://www.ORDB.org 檢查未列黑名單
3. 該Client PC 未中毒
請問還有甚麼原因可以防治OR阻擋此情形持續發生呢?

架設環境:
1. 作業系統：Windows 2000 Server
2. 防毒軟體：TrendMicro OfficeScan 最新病毒碼及掃描引擎
3. 防火牆：Cisco PIX515
4. 自行架設 DNS
5. 固接式ADSL　固定IP
6. IP 分享器：NO
7. MDaemon、AntiVirus 版本: 6.03
8. MDaemon 其他相關的設定
9 SMTP (in) 及 (Out) 的記錄

Thu 2007-01-11 08:49:00: ----------
Thu 2007-01-11 08:49:02: Processing D:\MDAEMON\Localq\md50001593003.msg
Thu 2007-01-11 08:49:02: > Message from: [email protected]
Thu 2007-01-11 08:49:02: > Message to: [email protected]
Thu 2007-01-11 08:49:02: > Message subject: Undelivered Mail Returned to Sender
Thu 2007-01-11 08:49:02: > Message ID: <[email protected]>
Thu 2007-01-11 08:49:02: Processing complete (matched 0 of 5 active rules)
Thu 2007-01-11 08:49:02: ----------
Thu 2007-01-11 08:49:02: Processing D:\MDAEMON\Localq\md50001593004.msg
Thu 2007-01-11 08:49:02: > Message from: [email protected]
Thu 2007-01-11 08:49:02: > Message to: [email protected]
Thu 2007-01-11 08:49:02: > Message subject: (Archive Copy) Undelivered Mail Returned to Sender
Thu 2007-01-11 08:49:02: > Message ID: <[email protected]>
Thu 2007-01-11 08:49:02: Processing complete (matched 0 of 5 active rules)
Thu 2007-01-11 08:49:02: ----------
Thu 2007-01-11 08:49:02: [RFC822] 分析郵件 <D:\MDAEMON\Localq\pd50001593003.msg>
Thu 2007-01-11 08:49:02: [RFC822] From: [email protected]
Thu 2007-01-11 08:49:02: [RFC822] To: [email protected]
Thu 2007-01-11 08:49:02: [RFC822] Subject: Undelivered Mail Returned to Sender
Thu 2007-01-11 08:49:02: [RFC822] Message-ID: <[email protected]>
Thu 2007-01-11 08:49:02: ----------
Thu 2007-01-11 08:49:02: [RFC822] 分析郵件 <D:\MDAEMON\Localq\pd50001593004.msg>
Thu 2007-01-11 08:49:02: [RFC822] From: [email protected]
Thu 2007-01-11 08:49:02: [RFC822] To: [email protected]
Thu 2007-01-11 08:49:02: [RFC822] Subject: (Archive Copy) Undelivered Mail Returned to Sender
Thu 2007-01-11 08:49:02: [RFC822] Message-ID: <[email protected]>

MarchFun

這種情形大多是「別人」中毒了，而那個「別人」的通訊錄中有這個帳號的 Email。一些病毒會在中毒者的通訊錄中隨機挑選對象作為「寄件人」(非收件人)，然後到處丟病毒信。

所以，這個應該不是你們的問題。

brianchou

感謝站長提醒有此可能性，我在持續查查看，
若有新的訊息，會繼續回報~^^ 感恩