On 25/10/21 2:59 pm, Thomas Anderson wrote:
Here is a clean email:

Received: from example.net (unknown [192.168.1.10])
        by mail.example.com (Postfix) with ESMTPSA id D7C3F1980059
        for<do...@example.com>; Mon, 25 Oct 2021 03:42:29 +0200 (CEST)

Here is a non-clean email:

Received: by mail.example.com (Postfix, from userid 1005)
        id F1E621982CA9; Sun, 13 Jun 2021 15:32:28 +0200 (CEST)

This looks legitimate, and generated by the sendmail binary on your system. Check your Postfix logs for a pickup entry that matches that queue id (you can grep for F1E621982CA9 and then look back for the pickup line). It likely indicates some sort of spam coming through a web form on your system, like on a php script, fix the web form to make it harder for spammers to use.


Peter

Reply via email to