Postfix, dovecot spam ügyfelektől

Üdv,

Egy olyan problémával szembesültünk, hogy néhány email címünkre kapunk spamet, de az ügyfeleink nevében. Jön indamail, vipmail, citromail mindenféle domainről.


mail.log:Mar 13 05:36:55 s3 postfix/qmgr[23360]: BAA484020BC: from=<********@vipmail.hu>, size=4044, nrcpt=1 (queue active)
mail.log:Mar 13 05:37:04 s3 opendkim[3070]: 04F1E4020AS: no signing table match for '********@vipmail.hu'
mail.log:Mar 13 05:37:04 s3 postfix/qmgr[23360]: 04F1E4020AF: from=<********@vipmail.hu>, size=4711, nrcpt=1 (queue active)
mail.log:Mar 13 05:37:04 s3 amavis[14673]: (14673-09) Passed CLEAN, [113.188.20.176] [113.188.20.176] <********@vipmail.hu> -> , Message-ID: <********@vipmail.hu>, mail_id: 6UKdl0FSfMrL, Hits: 3.623, size: 4010, queued_as: 04F1E4020AF, 8355 ms


A levél tartalma:


Return-Path: <********@vipmail.hu>
X-Original-To: info@********.hu
Delivered-To: info@********.hu
Received: from localhost (localhost [127.0.0.1])
by s3.********.hu (Postfix) with ESMTP id 04F1E4020AF
for ; Mon, 13 Mar 2017 05:37:04 +0100 (CET)
X-Virus-Scanned: Debian amavisd-new at s3.********.hu
X-Spam-Flag: NO
X-Spam-Score: 3.623
X-Spam-Level: ***
X-Spam-Status: No, score=3.623 tagged_above=1 required=4.5
tests=[BAYES_50=0.8, HTML_MESSAGE=0.001, RDNS_NONE=0.793,
SPF_NEUTRAL=0.779, URIBL_JP_SURBL=1.25] autolearn=no
Received: from s3.********.hu ([127.0.0.1])
by localhost (s3.********.hu [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id 6UKdl0FSfMrL for ;
Mon, 13 Mar 2017 05:36:55 +0100 (CET)
Received: from ouyr.pisem.net (unknown [113.188.20.176])
by s3.********.hu (Postfix) with ESMTP id BAA484020EC
for ; Mon, 13 Mar 2017 05:36:52 +0100 (CET)
From: "********" <********@vipmail.hu>
To: "********"
Subject: =?utf-8?B?Rnc6IHNpbmNlIHdlJ3ZlIG1ldCBsYXN0IHRpbWU=?=
Date: Mon, 13 Mar 2017 04:36:45 +0000
Message-ID: <1351383260.20170313073645@vipmail.hu>
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_0048_012A12D2.3C1AAD34"
Content-Language: en-gb
MIME-Version: 1.0


------=_NextPart_000_0048_012A12D2.3C1AAD34
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64

SGVsbG8gZnJpZW5kLCANCg0KSSd2ZSBnb3Qgc29tZSBncmVhdCBuZXdzIHNpbmNlIHdlJ3ZlIG1l
dCAgbGFzdCAgdGltZSwgIHBsZWFzZSasWadByZWFkICBpdCBoZXJlIGh0dHA6Ly9oZWxwZnVsLndvbmRl
cmFtYTM2MC5uZXQvYjhiOQ0KDQpNeSBiZXN0IHRvIHlvdSwgYW5neWFsZGF2aWQNCg0K

------=_NextPart_000_0048_012A12D2.3C1AAD34
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: quoted-printable

.....

Esetleg tud valaki segíteni, hogy merre induljak el?