哪位给分析一下这封奇怪的退信

leon

企业内部用户A发给内部用户B一封邮件，收到来自gmail的一封退信，说到刚才A发给B的邮件发送失败。

奇怪呀

From: "Mail Delivery Subsystem" <mailer-daemon@googlemail.com>
To: <A@X.com.cn>
Sent: Friday, January 12, 2007 9:15 AM
Subject: Delivery Status Notification (Failure)


> This is an automatically generated Delivery Status Notification
>
> Delivery to the following recipient failed permanently:
>
>
defunct.kde@gmail.com
>
> Technical details of permanent failure:
> PERM_FAILURE: Mail quota exceeded
>
>
----- Original message -----
>
> Received: by 10.70.87.5 with SMTP id k5mr110943wxb.1168564520247;
>
Thu, 11 Jan 2007 17:15:20 -0800 (PST)
> Return-Path: <A@X.com.cn>
> Received: from app108.chinabank.com.cn ([219.235.240.3])
>

by mx.google.com with ESMTP id h20si2267335wxd.2007.01.11.17.15.10;
>
Thu, 11 Jan 2007 17:15:20 -0800 (PST)
> Received-SPF: neutral (google.com: 219.235.240.3 is neither permitted nor
denied by best guess record for domain of A@X.com.cn)
> Received: from app108.chinabank.com.cn (localhost [127.0.0.1])
> by app108.chinabank.com.cn (8.13.1/8.13.1) with ESMTP id l0C1F9Pu017819
> for <defunct.kde@gmail.com>; Fri, 12 Jan 2007 09:15:09 +0800
> Received: (from root@localhost)
> by app108.chinabank.com.cn (8.13.1/8.13.1/Submit) id l0C1F8e5017724
> for defunct.kde@gmail.com; Fri, 12 Jan 2007 09:15:08 +0800
> Received: from mail.X.com.cn (smtp.X.com.cn [202.106.172.16])
> by localhost (mpop-1.0.5) with POP3
> for <root>; Fri, 12 Jan 2007 09:15:08 +0800
> Received: from IBME462AA46D6B ([192.168.5.35]) by X.com.cn with
Microsoft SMTPSVC(6.0.3790.1830);
> Fri, 12 Jan 2007 09:14:03 +0800
> Message-ID: <000501c735e6$ea321750$192410ac@IBME462AA46D6B>
> From: =?gb2312?B?yubAtMn6?= <A@X.com.cn>
> To: "liuke" <B@X.com.cn>
> Subject: =?gb2312?B?MdTCMTHI1cjV1r4=?=
> Date: Fri, 12 Jan 2007 09:13:48 +0800
> MIME-Version: 1.0
> Content-Type: multipart/mixed;
> boundary="----=_NextPart_000_0001_01C73629.F801E020"
> X-Priority: 3
> X-MSMail-Priority: Normal
> X-Mailer: Microsoft Outlook Express 6.00.2900.3028
> X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3028
> X-OriginalArrivalTime: 12 Jan 2007 01:14:03.0311 (UTC)
FILETIME=[F2A6B3F0:01C735E6]

[ 本帖最后由 leon 于 2007-9-18 15:24 编辑 ]

liu

有没有设自动转发

leon

没有设置转发呀

钉子

查找defunct.kde@gmail.com这个用户的归属是关键.然后可以看看是从哪边转发到这个gmail邮箱的.

leon

老大，怎么找到这个用户的归属呢？很想知道

在邮件跟踪中心以及log中，找不到这个邮箱的任何信息。
检查B用户的aduc属性，看不出任何异样。

leon

不会是邮件服务器被安装了后门之类的东西了吧，怕怕

leon

这个问题持续好久了，郁闷

jhonlone

B用户是否启用了gmail的pop3转发？

pater

垃圾郵件病毒，不要怕。殺一下，有防毒的，就不要緊了。

tdk

会不会是匿名地址发信造成呢？