不久前，我注意到來自我的網域的電子郵件不會立即由 google 發送，並且我從 google 伺服器收到一條 smtp 錯誤訊息。我不記得該訊息的確切措辭，但谷歌搜尋後，建議我需要設定 SPF 和 DKIP 記錄。我做到了。它解決了谷歌不接受電子郵件的問題。然而現在，幾週後，它打開了退回電子郵件的洪水閘門。下面是我將網域替換為 mydomain.com 的範例
Return-Path: <MAILER-DAEMON>
X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on ip-172-31-14-136
X-Spam-Level:
X-Spam-Status: No, score=-2.7 required=5.0 tests=BAYES_00,DKIM_SIGNED,
DKIM_VALID,DKIM_VALID_AU,FREEMAIL_FROM,RCVD_IN_DNSWL_LOW,RCVD_IN_MSPIKE_H3,
RCVD_IN_MSPIKE_WL,URIBL_BLOCKED autolearn=ham autolearn_force=no version=3.4.0
Delivered-To: [email protected]
Received: from mail-wg0-f68.google.com (mail-wg0-f68.google.com [74.125.82.68])
by service.mydomain.com (Postfix) with ESMTPS id B2D5C3CD9
for <[email protected]>; Sun, 1 Mar 2015 04:20:12 +1300 (NZDT)
Authentication-Results: service.mydomain.com; dkim=pass
reason="2048-bit key; unprotected key"
header.d=googlemail.com [email protected] header.b=flcXD2tw;
dkim-adsp=pass; dkim-atps=neutral
Received: by wghb13 with SMTP id b13so6428727wgh.2
for <[email protected]>; Sat, 28 Feb 2015 07:20:10 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=googlemail.com; s=20120113;
h=mime-version:from:to:subject:message-id:date:content-type;
bh=thNUSyqg9cxzoVV3wQQPzs5jLQUlj/POqhrDqY/p1+s=;
b=flcXD2tw+G6XLYhwGlNqRunKXmEqanLfLfxserILW3WU+m5ezqkCcQFIeYEHAoIznM
QVIbSv2NWM9ypPc7iEVESIYUv2b2jBYz1kU46U+qZPYx7Gdw57RbZ7PgfnQpKcfoc101
eVbgX+vb5y9oIxIs6yjr9ggnoMn2/5P2UxdlF9QOY9ATaRHmLPupfTJHrdgzBPV696rR
033d6A6a8lFQRR9ReN4OKHHVNrwiiZpmSo0E8lAp+aU2VPrnQSK0fzFr5qdz3ZpVI7hl
c162Q9P+5uGggaSz70xc1vDaQRg3Ch7axLL3YGNSZjqkQGBEYOvCEyLgnYcPucvqPDpx
jiXQ==
X-Received: by 10.180.91.79 with SMTP id cc15mr9706181wib.37.1425136810420;
Sat, 28 Feb 2015 07:20:10 -0800 (PST)
MIME-Version: 1.0
Received: by 10.180.91.79 with SMTP id cc15mr6423807wib.37; Sat, 28 Feb 2015
07:20:10 -0800 (PST)
From: Mail Delivery Subsystem <[email protected]>
To: [email protected]
X-Failed-Recipients: [email protected]
Subject: Delivery Status Notification (Failure)
Message-ID: <[email protected]>
Date: Sat, 28 Feb 2015 15:20:10 +0000
Content-Type: text/plain; charset=UTF-8
Delivery to the following recipient failed permanently:
[email protected]
Technical details of permanent failure:
Google tried to deliver your message, but it was rejected by the server for the recipient domain gone.bristol.ac.uk by aspmx.l.google.com. [173.194.78.27].
The error that the other server returned was:
550-5.1.1 The email account that you tried to reach does not exist. Please try
550-5.1.1 double-checking the recipient's email address for typos or
550-5.1.1 unnecessary spaces. Learn more at
550 5.1.1 http://support.google.com/mail/bin/answer.py?answer=6596 q6si9283951wic.32 - gsmtp
----- Original message -----
X-Received: by 10.180.91.79 with SMTP id cc15mr9706178wib.37.1425136810390;
Sat, 28 Feb 2015 07:20:10 -0800 (PST)
X-Gm-Message-State: ALoCoQnh7/8Nv8/oHTiqX41mEzEmq5oNlGy3zy9p01XvfZJzOXyug+NN1QL8PqIJE56gTu5omL6Iy8tNn2AMT43KwsrGdBs94LPANr7ogrNhdcQTKEM2z86gPVU+j4dvqeA9AziAbSPqtFZXBhNv4pZmS8GMWor91A==
X-Received: by 10.180.91.79 with SMTP id cc15mr9706170wib.37.1425136810311;
Sat, 28 Feb 2015 07:20:10 -0800 (PST)
Return-Path: <[email protected]>
Received: from mail-we0-f174.google.com (mail-we0-f174.google.com. [74.125.82.174])
by mx.google.com with ESMTPS id ei1si9166190wib.92.2015.02.28.07.20.09
for <[email protected]>
(version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
Sat, 28 Feb 2015 07:20:09 -0800 (PST)
Received-SPF: pass (google.com: domain of [email protected] designates 74.125.82.174 as permitted sender) client-ip=74.125.82.174;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 74.125.82.174 as permitted sender) [email protected]
Received: by wevm14 with SMTP id m14so25473931wev.13
for <[email protected]>; Sat, 28 Feb 2015 07:20:09 -0800 (PST)
X-Received: by 10.180.86.227 with SMTP id s3mr16337114wiz.58.1425126758697;
Sat, 28 Feb 2015 04:32:38 -0800 (PST)
X-Received: by 10.180.86.227 with SMTP id s3mr16337091wiz.58.1425126758539;
Sat, 28 Feb 2015 04:32:38 -0800 (PST)
Return-Path: <[email protected]>
Received: from psmtp.com (eu1sys200amx130.postini.com. [207.126.144.199])
by mx.google.com with SMTP id jw7si8639670wid.30.2015.02.28.04.32.24;
Sat, 28 Feb 2015 04:32:36 -0800 (PST)
Received-SPF: softfail (google.com: domain of transitioning [email protected] does not designate 104.220.1.229 as permitted sender) client-ip=104.220.1.229;
Received: from 207.126.147.10 ([104.220.1.229]) by eu1sys200amx130.postini.com ([207.126.147.10]) with SMTP;
Sat, 28 Feb 2015 12:32:35 GMT
Message-ID: <[email protected]>
From: "Charlotte Freeman" <[email protected]>
Subject: Re: Afraid of awkward situations? New ED meds won't let you down!
To: [email protected]
Date: Sat, 28 Feb 2015 18:27:35 +0600
Mime-Version: 1.0
Content-Type: text/html;
Content-Transfer-Encoding: 7Bit
X-pstn-mail-from: <[email protected]>
X-pstn-levels: (S: 0.00000/ 4.08422 CV:99.9000 FC:95.5390 LC:95.5390 R:95.9108 P:95.9108 M:97.0282 C:98.6951 )
X-pstn-dkim: 0 skipped:not-enabled
X-pstn-status: off
X-pstn-nxpr: disp=neutral, [email protected]
X-pstn-nxp: bodyHash=7f565d975b7ab6918b9cc998090b1e19665421b6, headerHash=4e9622b17df37a9b31ee0f1651d42a67c3d3570d, keyName=4, rcptHash=6bfa24bd4d3660f3d9132cffc038b04e7adf948c, sourceip=104.220.1.229, version=1
X-pstn-nxp: bodyHash=7f565d975b7ab6918b9cc998090b1e19665421b6, headerHash=4e9622b17df37a9b31ee0f1651d42a67c3d3570d, keyName=4, rcptHash=6bfa24bd4d3660f3d9132cffc038b04e7adf948c, sourceip=104.220.1.229, version=1
----- End of message -----
谷歌似乎接受並嘗試發送來自我的網域的垃圾郵件。在我看來，這些電子郵件並不是透過我的 smtp 伺服器進入系統的，因為電子郵件中沒有 ip 與其相符。看起來這些只是從收件者郵件系統退回到指定為寄件者的地址（該地址在我的網域中不存在，最終出現在包羅萬象的郵箱中）。
我現在每天收到數百個這樣的訊息。這有可能是因為我錯誤配置了 SPF 嗎？
這是我的SPF記錄：
v=spf1 a mx include:_spf.google.com ~all
我的大部分設定（除了我最近添加的 SPF 和 DKIP）如下所述：Postfix/Dovecot 對郵件信箱中新檔案的權限）
答案1
我相信您遇到的是反向散射電子郵件，請查看維基百科以獲取詳細說明。簡而言之，當有人使用偽造的地址（在本例中是您的地址）發送垃圾郵件，並且退回郵件發送回您的地址時，就會發生反向散射。許多郵件伺服器透過使用稱為退回位址標記驗證(BATV) 的技術標記發送的每封電子郵件來解決此問題，當收到退回電子郵件時，郵件伺服器可以判斷這是否是先前發送的電子郵件的退回郵件。如果不是，它會拒絕它或將其標記為垃圾郵件，具體取決於您的配置方式。
查看原始郵件的標頭，返迴路徑設定為您的地址，這表示如果垃圾郵件發送者的電子郵件未能送達，退回的郵件將發送到您的地址。
Return-Path: <[email protected]>
原始 IP 似乎是 104.220.1.229，在 DNSBL 上快速搜尋顯示該 IP 已被許多人列為垃圾郵件來源。
Received-SPF: softfail (google.com: domain of transitioning [email protected] does not designate 104.220.1.229 as permitted sender) client-ip=104.220.1.229;
解決方案 - 您可能需要設定 BATV 以防止將來出現此類分散回覆的電子郵件。
除此之外，請檢查您的SPF條目，您說您不使用gmail作為中繼，那為什麼要放Gmail的SPF記錄呢？ SPF 記錄旨在新增作為您的網域的合法電子郵件來源的寄件者主機清單。如果您不使用 Gmail 進行中繼，請將其從 SPF 記錄中刪除。僅將發送主機的 IP 新增至 SPF 記錄。