Добрый день!
Сегодня пришло странное письмо от пользователя нашего домена volsky.v@mydomen.ru.Return-Path: <smus@from_domen.ru>
Delivered-To: geniatov.s@mydomen.ru
Received: from localhost (ip6-localhost [127.0.0.1])
by mail.mydomen.ru (Postfix) with ESMTP id 24C2890071D
for <geniatov.s@mydomen.ru>; Mon, 27 Oct 2014 03:50:08 +0300 (MSK)
Received: from mail.mydomen.ru ([127.0.0.1])
by localhost (mail.mydomen.ru [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id Shn4XMoVZhUt for <geniatov.s@mydomen.ru>;
Mon, 27 Oct 2014 03:50:03 +0300 (MSK)
Received: from gw.domen.ru (sg-123.sk.sml.ru [123.123.123.123])
by mail.mydomen.ru (Postfix) with ESMTP id 50DF49006A2;
Mon, 27 Oct 2014 03:49:20 +0300 (MSK)
Received: from un1234.inet.dgk ([192.168.16.26])
by gw.domen.ru (8.13.6/8.13.6) with ESMTP id s9R0ouaZ024750;
Mon, 27 Oct 2014 08:50:56 +0800
Resent-Date: Mon, 27 Oct 2014 08:50:56 +0800
Resent-Message-Id: <201410270050.s9R0ouaZ024750@gw.domen.ru>
Date: Mon, 27 Oct 2014 08:50:55 +0800
From: =?windows-1251?B?wuvg5Ojx6+DiIMLu6/zx6ujp?= <volsky.v@mydomen.ru>
X-Mailer: The Bat! (v4.0.12) Professional
X-Priority: 3 (Normal)
Message-ID: <197985553.20141027085055@from_domen.ru>
To: apalko.i@mydomen.ru,
=?windows-1251?B?yu7t8fLg7fLo7SDM6Pjl9+ro7Q==?= <kostyan@mail.ru>,
=?windows-1251?B?z+Di5esg3+3q5eLo9w==?= <yankevich.p@mydomen.ru>,
=?windows-1251?B?0fLg7ejx6+DiIMPl7ejg8u7i?= <geniatov.s@mydomen.ru>
CC: kosareva.n@mydomen.ru
Subject: =?windows-1251?B?wdHRINDg8ffl8iDK0s4gMyDq4uDw8uDrIDIwMTQ=?=
Resent-from: =?windows-1251?Q?=CE=F2=E4=E5=EB_=EC=EE=ED=E8=F2=EE=F0=E8=ED=E3=E0_=D3=D1?=
<smus@from_domen.ru>
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----------7B121A72D4F24B"
Данный пользователь говорит что не отсылал данного письма. Ок, идем в логи:
Oct 27 03:50:03 mail postfix/qmgr[2885]: 50DF49006A2: from=<smus@from_domen.ru>, size=645864, nrcpt=4 (queue active)
Oct 27 03:50:07 mail postfix/smtpd[19338]: disconnect from sg-123.sk.sml.ru[123.123.123.123]
Oct 27 03:50:08 mail postfix/smtpd[19379]: connect from ip6-localhost[127.0.0.1]
Oct 27 03:50:08 mail postfix/smtpd[19379]: 1F39790065E: client=ip6-localhost[127.0.0.1]
Oct 27 03:50:08 mail postfix/cleanup[19398]: 1F39790065E: resent-message-id=<201410270050.s9R0ouaZ024750@gw.domen.ru>
Oct 27 03:50:08 mail postfix/cleanup[19398]: 1F39790065E: message-id=<197985553.20141027085055@from_domen.ru>
Oct 27 03:50:08 mail postfix/smtpd[19444]: connect from ip6-localhost[127.0.0.1]
Oct 27 03:50:08 mail postfix/smtpd[19444]: 24C2890071D: client=ip6-localhost[127.0.0.1]
Oct 27 03:50:08 mail postfix/cleanup[19368]: 24C2890071D: resent-message-id=<201410270050.s9R0ouaZ024750@gw.domen.ru>
Oct 27 03:50:08 mail postfix/cleanup[19368]: 24C2890071D: message-id=<197985553.20141027085055@from_domen.ru>
Oct 27 03:50:08 mail postfix/qmgr[2885]: 1F39790065E: from=<smus@from_domen.ru>, size=646250, nrcpt=1 (queue active)
Oct 27 03:50:08 mail postfix/smtpd[19379]: disconnect from ip6-localhost[127.0.0.1]
Oct 27 03:50:08 mail amavis[18833]: (18833-17) Passed CLEAN, LOCAL [123.123.123.123] [123.123.123.123] <smus@from_domen.ru> -> <apalko.i@mydomen.ru>, Message-ID: <197985553.20141027085055@from_domen.ru>, Resent-Message-ID: <201410270050.s9R0ouaZ024750@gw.domen.ru>, mail_id: pOgPWm5-yBuz, Hits: -3.352, size: 645860, queued_as: 1F39790065E, 4560 ms
Oct 27 03:50:08 mail postfix/smtp[19372]: 50DF49006A2: to=<apalko.i@mydomen.ru>, relay=127.0.0.1[127.0.0.1]:10024, delay=48, delays=43/0/0.01/4.6, dsn=2.0.0, status=sent (250 2.0.0 from MTA([127.0.0.1]:10025): 250 2.0.0 Ok: queued as 1F39790065E)
Oct 27 03:50:08 mail postfix/pipe[19380]: 1F39790065E: to=<apalko.i@mydomen.ru>, relay=dovecot, delay=0.09, delays=0.03/0/0/0.06, dsn=2.0.0, status=sent (delivered via dovecot service)
Oct 27 03:50:08 mail postfix/qmgr[2885]: 1F39790065E: removed
Oct 27 03:50:08 mail postfix/qmgr[2885]: 24C2890071D: from=<smus@from_domen.ru>, size=646254, nrcpt=1 (queue active)
Oct 27 03:50:08 mail postfix/smtpd[19444]: disconnect from ip6-localhost[127.0.0.1]
Oct 27 03:50:08 mail amavis[18841]: (18841-18) Passed CLEAN, LOCAL [123.123.123.123] [123.123.123.123] <smus@from_domen.ru> -> <geniatov.s@mydomen.ru>, Message-ID: <197985553.20141027085055@from_domen.ru>, Resent-Message-ID: <201410270050.s9R0ouaZ024750@gw.domen.ru>, mail_id: Shn4XMoVZhUt, Hits: -3.352, size: 645860, queued_as: 24C2890071D, 4638 ms
Oct 27 03:50:08 mail postfix/smtp[19376]: 50DF49006A2: to=<geniatov.s@mydomen.ru>, relay=127.0.0.1[127.0.0.1]:10024, delay=48, delays=43/0/0.01/4.6, dsn=2.0.0, status=sent (250 2.0.0 from MTA([127.0.0.1]:10025): 250 2.0.0 Ok: queued as 24C2890071D)
Oct 27 03:50:08 mail postfix/smtpd[19379]: connect from ip6-localhost[127.0.0.1]
Oct 27 03:50:08 mail postfix/smtpd[19379]: 699B69008C1: client=ip6-localhost[127.0.0.1]
Oct 27 03:50:08 mail postfix/pickup[17784]: 6A99E9008C6: uid=1001 from=<smus@from_domen.ru>
Oct 27 03:50:08 mail postfix/cleanup[19368]: 6A99E9008C6: resent-message-id=<201410270050.s9R0ouaZ024750@gw.domen.ru>
Oct 27 03:50:08 mail postfix/cleanup[19368]: 6A99E9008C6: message-id=<197985553.20141027085055@from_domen.ru>
Oct 27 03:50:08 mail postfix/cleanup[19398]: 699B69008C1: resent-message-id=<201410270050.s9R0ouaZ024750@gw.domen.ru>
Oct 27 03:50:08 mail postfix/cleanup[19398]: 699B69008C1: message-id=<197985553.20141027085055@from_domen.ru>
Oct 27 03:50:08 mail postfix/qmgr[2885]: 6A99E9008C6: from=<smus@from_domen.ru>, size=646483, nrcpt=1 (queue active)
Oct 27 03:50:08 mail postfix/pickup[17784]: 7475D90065E: uid=1001 from=<smus@from_domen.ru>
Oct 27 03:50:08 mail postfix/cleanup[19368]: 7475D90065E: resent-message-id=<201410270050.s9R0ouaZ024750@gw.domen.ru>
Oct 27 03:50:08 mail postfix/cleanup[19368]: 7475D90065E: message-id=<197985553.20141027085055@from_domen.ru>
Oct 27 03:50:08 mail postfix/qmgr[2885]: 7475D90065E: from=<smus@from_domen.ru>, size=646483, nrcpt=1 (queue active)
Oct 27 03:50:08 mail postfix/smtpd[19444]: connect from ip6-localhost[127.0.0.1]
Oct 27 03:50:08 mail postfix/smtpd[19444]: 82B8A9008BF: client=ip6-localhost[127.0.0.1]
Oct 27 03:50:08 mail postfix/cleanup[19452]: 82B8A9008BF: resent-message-id=<201410270050.s9R0ouaZ024750@gw.domen.ru>
Oct 27 03:50:08 mail postfix/cleanup[19452]: 82B8A9008BF: message-id=<197985553.20141027085055@from_domen.ru>
Oct 27 03:50:08 mail postfix/qmgr[2885]: 699B69008C1: from=<smus@from_domen.ru>, size=646254, nrcpt=1 (queue active)
Oct 27 03:50:08 mail amavis[18833]: (18833-18) Passed CLEAN, LOCAL [123.123.123.123] [123.123.123.123] <smus@from_domen.ru> -> <kosareva.n@mydomen.ru>, Message-ID: <197985553.20141027085055@from_domen.ru>, Resent-Message-ID: <201410270050.s9R0ouaZ024750@gw.domen.ru>, mail_id: g-VyIAbLrOFC, Hits: -3.352, size: 645860, queued_as: 699B69008C1, 358 ms
Oct 27 03:50:08 mail postfix/smtp[19372]: 50DF49006A2: to=<kosareva.n@mydomen.ru>, relay=127.0.0.1[127.0.0.1]:10024, delay=48, delays=43/4.6/0.01/0.36, dsn=2.0.0, status=sent (250 2.0.0 from MTA([127.0.0.1]:10025): 250 2.0.0 Ok: queued as 699B69008C1)
Oct 27 03:50:08 mail postfix/qmgr[2885]: 82B8A9008BF: from=<smus@from_domen.ru>, size=646256, nrcpt=1 (queue active)
Oct 27 03:50:08 mail postfix/pipe[19380]: 24C2890071D: to=<geniatov.s@mydomen.ru>, relay=dovecot, delay=0.49, delays=0.09/0/0/0.4, dsn=2.0.0, status=sent (delivered via dovecot service)
Oct 27 03:50:08 mail postfix/qmgr[2885]: 24C2890071D: removed
Oct 27 03:50:08 mail amavis[18841]: (18841-19) Passed CLEAN, LOCAL [123.123.123.123] [123.123.123.123] <smus@from_domen.ru> -> <yankevich.p@mydomen.ru>, Message-ID: <197985553.20141027085055@from_domen.ru>, Resent-Message-ID: <201410270050.s9
Данное письмо всем получаетелям отправлено с адреса smus@from_domen.ru. Почему в клиенте от кого указан адрес volsky.v@mydomen.ru?