如何屏蔽仿冒发件人地址的邮件

garywang

最近遇到一个问题，有些用户经常收到发件人是他自己的仿冒垃圾邮件。我检查了邮件头，除了发现Return-Path是ru结尾的，其他找不到任何线索。我把邮件头贴出来，大家帮我看看有什么方法。
第1封：
Return-Path: <mountiesw@resurs.amur.ru>
X-Envelope-To: ling.huang@shrcwc.org, abuse@shrcwc.org
X-Spam-Status: No, hits=0.0 required=6.0
        tests=DNSBL_BL.SPAMCOP.NET: 8.20,DNSBL_ZEN.SPAMHAUS.ORG: 8.50,DNSBL_DNSBL.SORBS.NET: 8.00,
        DNSBL_RHSBL.SORBS.NET: 8.00,DNSBL_CBLLESS.ANTI-SPAM.ORG.CN: 8.50,DNSBL_DB.WPBL.INFO: 1.40,
        BAYES_99: 4.07,FH_DATE_PAST_20XX: 3.188,FH_HELO_EQ_D_D_D_D: 0.001,
        HELO_DYNAMIC_HCC: 4.295,HELO_DYNAMIC_IPADDR2: 4.395,RDNS_NONE: 0,
        STOX_REPLY_TYPE: 0.001,TVD_RCVD_IP: 1.931,URIBL_BLACK: 1.955,
        URIBL_OB_SURBL: 1.5,URIBL_RHS_DOB: 1.083,URIBL_SC_SURBL: 0.474,
        URIBL_WS_SURBL: 1.5,CUSTOM_RULE_FROM: ALLOW,TOTAL_SCORE: 66.993,autolearn=spam
X-Spam-Level:
Received: from 77-255-62-228.adsl.inetia.pl ([77.255.62.228])
        by mail.shrcwc.org
        for ling.huang@shrcwc.org;
        Wed, 24 Feb 2010 06:37:15 +0800
Received: from 77.255.62.228 by resurs.amur.ru; Tue, 23 Feb 2010 23:36:34 +0100
Date: Tue, 23 Feb 2010 23:36:34 +0100
From: ling.huang@shrcwc.org
Subject: Set love energy to max
To: <ling.huang@shrcwc.org>
Message-ID: <000d01cab4d8$a7244c70$6400a8c0@mountiesw>
MIME-Version: 1.0
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
X-Mailer: Microsoft Outlook Express 6.00.2900.2180
Content-type: text/plain; format=flowed; charset="UTF-8"; reply-type=original
Content-transfer-encoding: 7bit
X-Priority: 3
X-MSMail-priority: Normal
X-Antivirus: avast! (VPS 100223-2, 2010-02-23), Outbound message
X-Antivirus-Status: Clean

Your road to affordable-priced cures will be only one click long!
Make this click right now and you will get over 400 brands available for overnight shipping to your region, plus discounts on 40 of them, which are by the way the most top-selling ones!


http://rhrdz095.canusenoy.cn
第2封：
Return-Path: <molotovyx560@okz-kombikorm.ru>
X-Envelope-To: ling.huang@shrcwc.org, abuse@shrcwc.org
X-Spam-Status: No, hits=0.0 required=6.0
        tests=DNSBL_BL.SPAMCOP.NET: 8.20,DNSBL_ZEN.SPAMHAUS.ORG: 8.50,DNSBL_DNSBL.SORBS.NET: 8.00,
        DNSBL_RHSBL.SORBS.NET: 8.00,DNSBL_CBLLESS.ANTI-SPAM.ORG.CN: 8.50,DNSBL_DB.WPBL.INFO: 1.40,
        AWL: -0.362,BAYES_99: 4.07,FH_DATE_PAST_20XX: 3.188,
        FH_HELO_EQ_D_D_D_D: 0.001,HELO_DYNAMIC_IPADDR2: 4.395,PRICES_ARE_AFFORDABLE: 0.001,
        RDNS_NONE: 0,STOX_REPLY_TYPE: 0.001,TVD_RCVD_IP: 1.931,
        URIBL_BLACK: 1.955,URIBL_GREY: 0.25,URIBL_OB_SURBL: 1.5,
        URIBL_RHS_DOB: 1.083,URIBL_SC_SURBL: 0.474,URIBL_WS_SURBL: 1.5,
        CUSTOM_RULE_FROM: ALLOW,TOTAL_SCORE: 62.587,autolearn=spam
X-Spam-Level:
Received: from 189-041-9-086.xd-dynamic.ctbcnetsuper.com.br ([189.41.9.86])
        by mail.shrcwc.org
        for ling.huang@shrcwc.org;
        Tue, 23 Feb 2010 23:19:02 +0800
Received: from 189.41.9.86 by mail.dataforce.net; Tue, 23 Feb 2010 12:18:30 -0300
Date: Tue, 23 Feb 2010 12:18:30 -0300
From: ling.huang@shrcwc.org
Subject: Top quality at affordable prices - the Internet's top retailer of high-end Vertu exotic mobile phones
To: <ling.huang@shrcwc.org>
Message-ID: <000d01cab49b$74c72820$6400a8c0@molotovyx560>
MIME-Version: 1.0
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
X-Mailer: Microsoft Outlook Express 6.00.2900.2180
Content-type: text/plain; format=flowed; charset="iso-8859-2"; reply-type=original
Content-transfer-encoding: 7bit
X-Priority: 3
X-MSMail-priority: Normal

Always wanted a Vertu but put off by the exorbitant prices? Now you can well and truly afford one with this fantastic offer. http://humus745.spaces.live.com

               

neil.fu

可能是员工的邮箱地址密码被破解，被利用发垃圾邮件了，首先让员工把密码修改的复杂点，其次可以隐藏您的服务器，让对方找不到您的MX记录

garywang

应该不是密码的问题，但请教一下，如何隐藏MX记录

tdk

http://bbs.5dmail.net/thread-180632-1-1.html

garywang

谢谢版主，照做测试。
但增加spf记录时，到底是用~all,还是-all ？

tdk

我用 -all