On 25/10/21 2:59 pm, Thomas Anderson wrote:
Here is a clean email:Received: from example.net (unknown [192.168.1.10]) by mail.example.com (Postfix) with ESMTPSA id D7C3F1980059 for<[email protected]>; Mon, 25 Oct 2021 03:42:29 +0200 (CEST) Here is a non-clean email: Received: by mail.example.com (Postfix, from userid 1005) id F1E621982CA9; Sun, 13 Jun 2021 15:32:28 +0200 (CEST)
This looks legitimate, and generated by the sendmail binary on your system. Check your Postfix logs for a pickup entry that matches that queue id (you can grep for F1E621982CA9 and then look back for the pickup line). It likely indicates some sort of spam coming through a web form on your system, like on a php script, fix the web form to make it harder for spammers to use.
Peter
