hem*_*s77 3 email-bounces spoofing g-suite
在这里迫切需要一些帮助。我已经将 Google Apps 用于我的域 (2qubed.co.uk) 两年多了,直到最近才出现任何问题。
在过去的几个月里,我从我的域中收到了很多退回的电子邮件,我什至从未创建过这些不存在的电子邮件地址。我确信谷歌应该把它当作垃圾邮件,但由于某种原因它不是。我每天至少收到 50 多封这样的电子邮件。我不知道我的帐户是否被黑客入侵了??
这是我收到的典型电子邮件的示例:
from Mail Delivery Subsystem <mailer-daemon@googlemail.com>
to aypyvagef9461@2qubed.co.uk
date 12 November 2010 10:35
subject Delivery Status Notification (Failure)
mailed-by mail-yw0-f66.google.com
hide details 10:35 (31 minutes ago)
Delivery to the following recipient failed permanently:
174224736.79436842626079@fsumsg6.ferris.edu
Technical details of permanent failure:
Google tried to deliver your message, but it was rejected by the recipient domain. We recommend contacting the other email provider for further information about the cause of this error. The error that the other server returned was: 550 550 5.1.1 <174224736.79436842626079@fsuimail.ferris.edu>: Recipient address rejected: User unknown in relay recipient table (state 14).
----- Original message -----
Received: by 10.90.57.3 with SMTP id f3mr2950105aga.120.1289558131998;
Fri, 12 Nov 2010 02:35:31 -0800 (PST)
Received: by 10.90.57.3 with SMTP id f3mr2950104aga.120.1289558131975;
Fri, 12 Nov 2010 02:35:31 -0800 (PST)
Return-Path: <aypyvagef9461@2qubed.co.uk>
Received: from [77.126.207.119] ([77.126.209.114])
by mx.google.com with ESMTP id r45si7415460yhc.84.2010.11.12.02.35.30;
Fri, 12 Nov 2010 02:35:31 -0800 (PST)
Received-SPF: softfail (google.com: domain of transitioning aypyvagef9461@2qubed.co.uk does not designate 77.126.209.114 as permitted sender) client-ip=77.126.209.114;
Authentication-Results: mx.google.com; spf=softfail (google.com: domain of transitioning aypyvagef9461@2qubed.co.uk does not designate 77.126.209.114 as permitted sender) smtp.mail=aypyvagef9461@2qubed.co.uk
Received: from alt1.aspmx.l.google.com (localhost [127.0.0.1])
by alt1.aspmx.l.google.com (8.14.4/8.14.4) with SMTP id 04df6C1c8059Dd
for <174224736.79436842626079@fsuimail.ferris.edu>; Fri, 12 Nov 2010 12:35:28 +0200
(envelope-from aypyvagef9461@2qubed.co.uk)
Message-Id: <201011121235.dBB78231005f63@[77.126.207.119]>
Subject: Hi 174224736.79436842626079, Sale-Over Reminder. throughout
Date: Fri, 12 Nov 2010 12:35:28 +0200
Mime-Version: 1.0
From: "Pfizer PillsTrader" <aypyvagef9461@2qubed.co.uk>
To: 174224736.79436842626079@fsuimail.ferris.edu
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: 8bit
----- End of message -----
Run Code Online (Sandbox Code Playgroud)
我一直在研究和阅读 SPF 记录,并添加了一个:“v=spf1 include:_spf.google.com ~all”
但这似乎没有任何区别。这是正确的吗?我还更改了 Google 应用程序密码和电子邮件密码,但这并没有帮助。
有人有任何想法吗?
我还想知道在 Google 应用程序中我应该为管理员和用户设置一个单独的帐户吗?目前我只有一个帐户用于我的电子邮件,它是管理员。
谢谢
结束的 spf 记录
~all
Run Code Online (Sandbox Code Playgroud)
在防止joe-jobbing方面基本上没有用,因为它告诉远程系统您(域控制器)不知道它应该如何处理电子邮件(这不是来自您批准的系统),因此很可能接受它。
一旦您对 SPF 设置充满信心,您应该更改
~all
Run Code Online (Sandbox Code Playgroud)
到
-all
Run Code Online (Sandbox Code Playgroud)
这是更积极的声明;这对咨询 SPF 的收件人说,不在您的已批准系统列表中的电子邮件根本不是来自您,应该被拒绝。从上面粘贴的输出来看,在这种情况下,收件人似乎正在检查 SPF,因此此时他们应该在 SMTP RCPT TO: 阶段拒绝电子邮件,并且永远不会生成烦人的退回邮件。
归档时间: |
|
查看次数: |
3343 次 |
最近记录: |