On 25/10/21 2:59 pm, Thomas Anderson wrote:
Here is a clean email:
Received: from example.net (unknown [192.168.1.10])
by mail.example.com (Postfix) with ESMTPSA id D7C3F1980059
for<do...@example.com>; Mon, 25 Oct 2021 03:42:29 +0200 (CEST)
Here is a non-clean email:
Received: by mail.example.com (Postfix, from userid 1005)
id F1E621982CA9; Sun, 13 Jun 2021 15:32:28 +0200 (CEST)
This looks legitimate, and generated by the sendmail binary on your
system. Check your Postfix logs for a pickup entry that matches that
queue id (you can grep for F1E621982CA9 and then look back for the
pickup line). It likely indicates some sort of spam coming through a
web form on your system, like on a php script, fix the web form to make
it harder for spammers to use.
Peter