leon 发表于 2007-9-18 15:05:12

哪位给分析一下这封奇怪的退信

企业内部用户A发给内部用户B一封邮件,收到来自gmail的一封退信,说到刚才A发给B的邮件发送失败。

奇怪呀

From: "Mail Delivery Subsystem" <mailer-daemon@googlemail.com>
To: <A@X.com.cn>
Sent: Friday, January 12, 2007 9:15 AM
Subject: Delivery Status Notification (Failure)


> This is an automatically generated Delivery Status Notification
>
> Delivery to the following recipient failed permanently:
>
>
defunct.kde@gmail.com
>
> Technical details of permanent failure:
> PERM_FAILURE: Mail quota exceeded
>
>
----- Original message -----
>
> Received: by 10.70.87.5 with SMTP id k5mr110943wxb.1168564520247;
>
Thu, 11 Jan 2007 17:15:20 -0800 (PST)
> Return-Path: <A@X.com.cn>
> Received: from app108.chinabank.com.cn ()
>

by mx.google.com with ESMTP id h20si2267335wxd.2007.01.11.17.15.10;
>
Thu, 11 Jan 2007 17:15:20 -0800 (PST)
> Received-SPF: neutral (google.com: 219.235.240.3 is neither permitted nor
denied by best guess record for domain of A@X.com.cn)
> Received: from app108.chinabank.com.cn (localhost )
> by app108.chinabank.com.cn (8.13.1/8.13.1) with ESMTP id l0C1F9Pu017819
> for <defunct.kde@gmail.com>; Fri, 12 Jan 2007 09:15:09 +0800
> Received: (from root@localhost)
> by app108.chinabank.com.cn (8.13.1/8.13.1/Submit) id l0C1F8e5017724
> for defunct.kde@gmail.com; Fri, 12 Jan 2007 09:15:08 +0800
> Received: from mail.X.com.cn (smtp.X.com.cn )
> by localhost (mpop-1.0.5) with POP3
> for <root>; Fri, 12 Jan 2007 09:15:08 +0800
> Received: from IBME462AA46D6B () by X.com.cn with
Microsoft SMTPSVC(6.0.3790.1830);
> Fri, 12 Jan 2007 09:14:03 +0800
> Message-ID: <000501c735e6$ea321750$192410ac@IBME462AA46D6B>
> From: =?gb2312?B?yubAtMn6?= <A@X.com.cn>
> To: "liuke" <B@X.com.cn>
> Subject: =?gb2312?B?MdTCMTHI1cjV1r4=?=
> Date: Fri, 12 Jan 2007 09:13:48 +0800
> MIME-Version: 1.0
> Content-Type: multipart/mixed;
> boundary="----=_NextPart_000_0001_01C73629.F801E020"
> X-Priority: 3
> X-MSMail-Priority: Normal
> X-Mailer: Microsoft Outlook Express 6.00.2900.3028
> X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3028
> X-OriginalArrivalTime: 12 Jan 2007 01:14:03.0311 (UTC)
FILETIME=

[ 本帖最后由 leon 于 2007-9-18 15:24 编辑 ]

liu 发表于 2007-9-18 16:55:35

有没有设自动转发

leon 发表于 2007-9-18 18:15:20

没有设置转发呀

钉子 发表于 2007-9-18 23:52:16

查找defunct.kde@gmail.com这个用户的归属是关键.然后可以看看是从哪边转发到这个gmail邮箱的.

leon 发表于 2007-9-19 08:03:55

老大,怎么找到这个用户的归属呢?很想知道

在邮件跟踪中心以及log中,找不到这个邮箱的任何信息。
检查B用户的aduc属性,看不出任何异样。

leon 发表于 2007-9-19 08:07:04

不会是邮件服务器被安装了后门之类的东西了吧,怕怕

leon 发表于 2007-9-19 15:57:24

这个问题持续好久了,郁闷

jhonlone 发表于 2007-9-19 16:58:37

B用户是否启用了gmail的pop3转发?

pater 发表于 2007-9-19 20:08:41

垃圾郵件病毒,不要怕。殺一下,有防毒的,就不要緊了。

tdk 发表于 2007-9-19 22:23:55

会不会是匿名地址发信造成呢?
页: [1]
查看完整版本: 哪位给分析一下这封奇怪的退信