{"id":21484,"date":"2026-09-25T10:45:56","date_gmt":"2026-09-25T02:45:56","guid":{"rendered":"https:\/\/synopower.club\/?post_type=docs&#038;p=21484"},"modified":"2026-09-25T10:46:01","modified_gmt":"2026-09-25T02:46:01","password":"","slug":"email-bombing-contact-form-synology-nas","status":"publish","type":"docs","link":"https:\/\/synopower.club\/cs\/docs\/email-bombing-contact-form-synology-nas\/","title":{"rendered":"E-mailov\u00e9 bombardov\u00e1n\u00ed prost\u0159ednictv\u00edm kontaktn\u00edho formul\u00e1\u0159e: Co jsme se nau\u010dili hosting na Synology"},"content":{"rendered":"<p class=\"wp-block-paragraph\">Bombardov\u00e1n\u00ed e-maily je situace, kdy n\u011bkdo zaplav\u00ed schr\u00e1nku u\u017eivatele stovkami skute\u010dn\u011b vypadaj\u00edc\u00edch e-mail\u016f ze skute\u010dn\u00fdch webov\u00fdch str\u00e1nek, obvykle proto, aby zakryl jednu zpr\u00e1vu, kterou nechce, aby ob\u011b\u0165 vid\u011bla. Ve dnech 24. a 25. z\u00e1\u0159\u00ed 2026 se n\u00e1\u0161 vlastn\u00ed kontaktn\u00ed formul\u00e1\u0159 stal jednou z t\u011bchto webov\u00fdch str\u00e1nek. SynoPower Club b\u011b\u017e\u00ed v\u00fdhradn\u011b na Synology: WordPress v Container Manageru, uvnit\u0159 Virtual DSM, na Virtual Machine Manager, s po\u0161tou odeslanou p\u0159es Synology MailPlus. P\u0159es noc dorazilo deset spamov\u00fdch zpr\u00e1v, ka\u017ed\u00e1 z nich spustila potvrzovac\u00ed e-mail ciz\u00edmu u\u017eivateli a ka\u017ed\u00e1 z nich pro\u0161la kontrolou botem. Tento prvn\u00ed \u010dl\u00e1nek o NAS Hosting 101 v\u00e1m pov\u00ed, jak jsme e-mailov\u00fd bombardov\u00e1n\u00ed odhalili, jak jsme ho b\u011bhem n\u011bkolika minut na NAS vystopovali a co jsme zm\u011bnili, aby skute\u010dn\u00ed z\u00e1kazn\u00edci st\u00e1le dost\u00e1vali sv\u00e1 potvrzen\u00ed.<\/p>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p class=\"wp-block-paragraph\"><strong>Bod SynoPower Club:<\/strong> Str\u00e1vil jsem roky na stran\u011b podpory Synology a nej\u010dast\u011bj\u0161\u00ed obavou, kterou jsem ohledn\u011b vlastn\u00edho hostingu sly\u0161el, byla, \u017ee jedna \u0161patn\u00e1 noc by mohla web zni\u010dit. Tato se nepovedla. NAS st\u00e1le zobrazoval str\u00e1nky, obchod p\u0159ij\u00edmal objedn\u00e1vky a jedin\u00fdm p\u0159\u00edznakem bylo zhruba deset \u0159\u00e1dk\u016f v polo\u017ek\u00e1ch formul\u00e1\u0159e. Rozd\u00edl spo\u010d\u00edval v tom, \u017ee jsem m\u011bl v\u0161echno na jednom m\u00edst\u011b: polo\u017eky formul\u00e1\u0159e, protokol po\u0161ty a IP adresy n\u00e1v\u0161t\u011bvn\u00edk\u016f, to v\u0161e se nach\u00e1zelo na stejn\u00e9m serveru Synology, tak\u017ee sledov\u00e1n\u00ed e-mailov\u00e9ho bombardov\u00e1n\u00ed trvalo jedno sezen\u00ed m\u00edsto t\u0159\u00ed tiket\u016f na podporu ke t\u0159em r\u016fzn\u00fdm hostingov\u00fdm spole\u010dnostem.<\/p>\n<\/blockquote>\n\n\n\n<h2 id=\"what-email-bombing-is-and-why-contact-forms-are-targets\" class=\"wp-block-heading\">Co je e-mailov\u00e9 bombardov\u00e1n\u00ed a pro\u010d jsou kontaktn\u00ed formul\u00e1\u0159e c\u00edlem<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">E-mailov\u00e9 bombardov\u00e1n\u00ed nemus\u00ed nutn\u011b v\u00e9st k prolomen\u00ed ni\u010deho. \u00dato\u010dn\u00edk vezme adresu ob\u011bti a zad\u00e1 ji do co nejv\u011bt\u0161\u00edho po\u010dtu ve\u0159ejn\u00fdch formul\u00e1\u0159\u016f: p\u0159ihl\u00e1\u0161en\u00ed k odb\u011bru newsletteru, registrace \u00fa\u010dt\u016f a kontaktn\u00ed formul\u00e1\u0159e, kter\u00e9 ode\u0161lou kopii zpr\u00e1vy zp\u011bt odes\u00edlateli. Ka\u017ed\u00e1 webov\u00e1 str\u00e1nka pot\u00e9 ode\u0161le ob\u011bti skute\u010dn\u00fd, spr\u00e1vn\u011b podepsan\u00fd e-mail. \u017d\u00e1dn\u00e1 z t\u011bchto zpr\u00e1v nen\u00ed spamem v technick\u00e9m smyslu, tak\u017ee propluj\u00ed filtry a hromad\u00ed se v doru\u010den\u00e9 po\u0161t\u011b.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">C\u00edlem je z\u0159\u00eddkakdy samotn\u00e1 z\u00e1plava. Spole\u010dnost Microsoft Threat Intelligence zdokumentovala skupiny, kter\u00e9 jako prvn\u00ed krok pou\u017e\u00edvaj\u00ed bombardov\u00e1n\u00ed e-maily a pot\u00e9 ob\u011bti zavolaj\u00ed a p\u0159edst\u00edraj\u00ed, \u017ee jsou IT helpdesk, kter\u00fd probl\u00e9m se spamem vy\u0159e\u0161\u00ed. Jin\u00ed \u00fato\u010dn\u00edci zneu\u017e\u00edvaj\u00ed z\u00e1plavu e-mail\u016f k zakryt\u00ed bankovn\u00edho upozorn\u011bn\u00ed, potvrzen\u00ed n\u00e1kupu nebo ozn\u00e1men\u00ed o zm\u011bn\u011b hesla, zat\u00edmco zneu\u017e\u00edvaj\u00ed ukraden\u00fd \u00fa\u010det.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Kontaktn\u00ed formul\u00e1\u0159e jsou atraktivn\u00ed, proto\u017ee mnoho z nich automaticky odpov\u00edd\u00e1 na adresu zadanou do pole e-mailu. Pro \u00fato\u010dn\u00edka se jedn\u00e1 o bezplatnou a anonymn\u00ed po\u0161tu s d\u016fv\u011bryhodn\u00fdm jm\u00e9nem odes\u00edlatele. Pro majitele webu to znamen\u00e1, \u017ee va\u0161e dom\u00e9na pos\u00edl\u00e1 po\u0161tu lidem, kte\u0159\u00ed o ni nikdy nepo\u017e\u00e1dali, a n\u011bkte\u0159\u00ed z nich stisknou tla\u010d\u00edtko spamu.<\/p>\n\n\n\n<h2 id=\"how-email-bombing-showed-up-on-our-synology-hosted-store\" class=\"wp-block-heading\">Jak se e-mailov\u00e9 bombardov\u00e1n\u00ed objevilo v na\u0161em obchod\u011b hostovan\u00e9m na Synology<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Vzorec byl z\u0159ejm\u00fd, jakmile jsme si z\u00e1znamy prohl\u00e9dli vedle sebe. Mezi ve\u010derem 24. z\u00e1\u0159\u00ed a n\u00e1sleduj\u00edc\u00edm r\u00e1nem obdr\u017eel n\u00e1\u0161 formul\u00e1\u0159 podpory deset \u017e\u00e1dost\u00ed, s odstupem jedn\u00e9 a\u017e dvou hodin. Toto pomal\u00e9 tempo je z\u00e1m\u011brn\u00e9: dr\u017e\u00ed se pod v\u011bt\u0161inou limit\u016f rychlosti a vypad\u00e1 to jako b\u011b\u017en\u00fd provoz.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Jm\u00e9no a zpr\u00e1va byly n\u00e1hodn\u00e9 \u0159et\u011bzce<\/strong> 17 a\u017e 24 r\u016fzn\u00fdch p\u00edsmen, bez jak\u00fdchkoli skute\u010dn\u00fdch slov.<\/li>\n\n\n\n<li><strong>E-mailov\u00e9 adresy vypadaly jako skute\u010dn\u00e9<\/strong>, rozprost\u0159en\u00e9 mezi velk\u00e9 poskytovatele spot\u0159ebitelsk\u00fdch slu\u017eeb a n\u011bkolik firemn\u00edch dom\u00e9n v r\u016fzn\u00fdch zem\u00edch.<\/li>\n\n\n\n<li><strong>N\u011bkter\u00e9 adresy Gmailu byly dopln\u011bny te\u010dkami<\/strong>, nap\u0159\u00edklad johnsmith Gmail ignoruje te\u010dky, tak\u017ee po\u0161ta se st\u00e1le dostane do jedn\u00e9 schr\u00e1nky, zat\u00edmco formul\u00e1\u0159 poka\u017ed\u00e9 vid\u00ed novou adresu.<\/li>\n\n\n\n<li><strong>Ka\u017ed\u00fd p\u0159\u00edsp\u011bvek si vybral stejn\u00e9 t\u00e9ma<\/strong>, Popt\u00e1vka produktu, prvn\u00ed mo\u017enost v seznamu.<\/li>\n<\/ul>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"eager\" decoding=\"async\" width=\"2000\" height=\"452\" sizes=\"auto, (max-width: 2000px) 100vw, 2000px\" src=\"https:\/\/synopower.club\/wp-content\/uploads\/2026\/09\/email-bombing-form-entries.webp\" alt=\"E-mailov\u00e9 bombardov\u00e1n\u00ed spamov\u00fdmi polo\u017ekami v kontaktn\u00edm formul\u00e1\u0159i WordPressu, n\u00e1hodn\u00e1 jm\u00e9na a zpr\u00e1vy se skryt\u00fdmi e-mailov\u00fdmi adresami\" class=\"wp-image-21487\" srcset=\"https:\/\/synopower.club\/wp-content\/uploads\/2026\/09\/email-bombing-form-entries.webp 2000w, https:\/\/synopower.club\/wp-content\/uploads\/2026\/09\/email-bombing-form-entries-1000x226.webp 1000w, https:\/\/synopower.club\/wp-content\/uploads\/2026\/09\/email-bombing-form-entries-400x90.webp 400w, https:\/\/synopower.club\/wp-content\/uploads\/2026\/09\/email-bombing-form-entries-300x68.webp 300w, https:\/\/synopower.club\/wp-content\/uploads\/2026\/09\/email-bombing-form-entries-1024x231.webp 1024w, https:\/\/synopower.club\/wp-content\/uploads\/2026\/09\/email-bombing-form-entries-768x174.webp 768w, https:\/\/synopower.club\/wp-content\/uploads\/2026\/09\/email-bombing-form-entries-1536x347.webp 1536w, https:\/\/synopower.club\/wp-content\/uploads\/2026\/09\/email-bombing-form-entries-18x4.webp 18w\"  fetchpriority=\"high\"\/><figcaption class=\"wp-element-caption\">Deset spamov\u00fdch polo\u017eek, jak n\u00e1m dorazily do formul\u00e1\u0159e, se skryt\u00fdmi e-mailov\u00fdmi adresami. N\u00e1hodn\u00e1 jm\u00e9na a zpr\u00e1vy, jedno t\u00e9ma, s odstupem jedn\u00e9 a\u017e dvou hodin.<\/figcaption><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">Nikdo z t\u011bchto lid\u00ed nikdy nenav\u0161t\u00edvil web SynoPower Club. Ka\u017ed\u00e9mu z nich jsme zaslali n\u00e1\u0161 potvrzovac\u00ed e-mail s p\u0159edm\u011btem SynoPower #1234: Dotaz na produkt. Pokud jste obdr\u017eeli jednu z t\u011bchto zpr\u00e1v a nikdy n\u00e1s nekontaktovali, stali jste se ter\u010dem e-mailov\u00e9ho bombardov\u00e1n\u00ed: va\u0161i adresu zadal n\u011bkdo jin\u00fd. Nebyl pro v\u00e1s vytvo\u0159en \u017e\u00e1dn\u00fd \u00fa\u010det a nic v\u00e1m nebylo str\u017eeno. N\u00e1\u0161 pr\u016fvodce na <a href=\"\/cs\/docs\/how-to-tell-if-an-email-is-really-from-synopower-club\/\">Jak zjistit, zda e-mail skute\u010dn\u011b poch\u00e1z\u00ed od SynoPower Club<\/a> uv\u00e1d\u00ed v\u0161echny adresy, ze kter\u00fdch odes\u00edl\u00e1me.<\/p>\n\n\n\n<h2 id=\"why-turnstile-and-a-honeypot-did-not-stop-it\" class=\"wp-block-heading\">Pro\u010d tomu turniket a honeypot nezabr\u00e1nily<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">N\u00e1\u0161 formul\u00e1\u0159 u\u017e m\u011bl zapnut\u00e9 dv\u011b obrany proti spamu, ale e-mailov\u00e9 bombardov\u00e1n\u00ed pro\u0161lo p\u0159\u00edmo skrz n\u011b: Cloudflare Turnstile a skryt\u00e9 pole honeypot. Ob\u011b plnily svou funkci a ani jedna na to nebyla stav\u011bn\u00e1.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Honeypot zachycuje skripty, kter\u00e9 vypl\u0148uj\u00ed v\u0161echna pole na str\u00e1nce, v\u010detn\u011b jednoho skryt\u00e9ho p\u0159ed lidmi. Tyto z\u00e1znamy poch\u00e1zely ze skute\u010dn\u00e9ho prohl\u00ed\u017ee\u010de, kter\u00fd vypl\u0148oval pouze viditeln\u00e1 pole, tak\u017ee past z\u016fstala pr\u00e1zdn\u00e1. Turnstile kontroluje, zda se n\u00e1v\u0161t\u011bvn\u00edk chov\u00e1 jako skute\u010dn\u00fd prohl\u00ed\u017ee\u010d a osoba. Ka\u017ed\u00fd z deseti z\u00e1znam\u016f nesl platn\u00fd token Turnstile, co\u017e n\u00e1m \u0159\u00edk\u00e1, \u017ee odes\u00edlatel pou\u017e\u00edval skute\u010dn\u00fd prohl\u00ed\u017ee\u010d lidsk\u00fdm tempem, nikoli hrub\u00fd skript.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">To je up\u0159\u00edmn\u00fd limit botov\u00fdch kontrol proti e-mailov\u00e9mu bombardov\u00e1n\u00ed. Zvy\u0161uj\u00ed n\u00e1klady na hromadn\u00e9 automatizovan\u00e9 zneu\u017e\u00edv\u00e1n\u00ed, ale trp\u011bliv\u00fd odes\u00edlatel, kter\u00fd ode\u0161le jeden formul\u00e1\u0159 za hodinu prost\u0159ednictv\u00edm b\u011b\u017en\u00e9ho prohl\u00ed\u017ee\u010de, vypad\u00e1 p\u0159esn\u011b jako z\u00e1kazn\u00edk. K zastaven\u00ed je pot\u0159eba sign\u00e1l o tom, odkud po\u017eadavek poch\u00e1z\u00ed, nejen o tom, jak se chov\u00e1.<\/p>\n\n\n\n<h2 id=\"tracing-email-bombing-on-a-synology-nas-in-4-steps\" class=\"wp-block-heading\">Sledov\u00e1n\u00ed bombardov\u00e1n\u00ed e-maily na NAS Synology ve 4 kroc\u00edch<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Proto\u017ee cel\u00fd stack b\u011b\u017e\u00ed na jednom syst\u00e9mu Synology, vy\u0161et\u0159ov\u00e1n\u00ed nikdy neopustilo NAS. Toto jsou \u010dty\u0159i kontroly, kter\u00e9 jsme provedli v po\u0159ad\u00ed, a funguj\u00ed pro jak\u00fdkoli web WordPress hostovan\u00fd v Container Manageru nebo Web Station.<\/p>\n\n\n<div id=\"rank-math-howto\" class=\"rank-math-block\" >\n<div class=\"rank-math-howto-description\">\n\n<\/div>\n\n<div class=\"rank-math-steps\">\n<div id=\"step-1\" class=\"rank-math-step\">\n<h3 class=\"rank-math-step-title\">P\u0159e\u010dt\u011bte si polo\u017eky formul\u00e1\u0159e<\/h3>\n<div class=\"rank-math-step-content\"><p>Otev\u0159ete seznam z\u00e1znam\u016f ve va\u0161em pluginu formul\u00e1\u0159\u016f a se\u0159a\u010fte je podle data. Hledejte n\u00e1hodn\u00e1 jm\u00e9na nebo zpr\u00e1vy, opakuj\u00edc\u00ed se t\u00e9mata a st\u00e1l\u00fd interval mezi odesl\u00e1n\u00edmi a pot\u00e9 si poznamenejte IP adresu ulo\u017eenou u ka\u017ed\u00e9ho z\u00e1znamu.<\/p>\n<\/div>\n<\/div>\n<div id=\"step-2\" class=\"rank-math-step\">\n<h3 class=\"rank-math-step-title\">Zkontrolujte, kdo obdr\u017eel po\u0161tu<\/h3>\n<div class=\"rank-math-step-content\"><p>Otev\u0159ete protokol po\u0161ty va\u0161eho SMTP pluginu nebo protokol doru\u010den\u00ed na serveru Synology MailPlus a vyhledejte \u010d\u00edsla polo\u017eek. Ta ukazuj\u00ed, zda v\u00e1\u0161 web skute\u010dn\u011b odeslal potvrzen\u00ed na ka\u017edou adresu a zda bylo doru\u010deno.<\/p>\n<\/div>\n<\/div>\n<div id=\"step-3\" class=\"rank-math-step\">\n<h3 class=\"rank-math-step-title\">Porovnejte IP adresy se seznamem Tor<\/h3>\n<div class=\"rank-math-step-content\"><p>St\u00e1hn\u011bte si hromadn\u00fd seznam ukon\u010den\u00ed projektu Tor a vyhledejte v n\u011bm ka\u017edou IP adresu z polo\u017eek. V na\u0161em p\u0159\u00edpad\u011b bylo v\u0161ech deset adres uzly ukon\u010den\u00ed s\u00edt\u011b Tor, zat\u00edmco \u017e\u00e1dn\u00fd ze 199 skute\u010dn\u00fdch z\u00e1znam\u016f od roku 2024 nepoch\u00e1zel z adresy na tomto seznamu.<\/p>\n<\/div>\n<\/div>\n<div id=\"step-4\" class=\"rank-math-step\">\n<h3 class=\"rank-math-step-title\">Ov\u011b\u0159te, zda jsou IP adresy skute\u010dn\u00fdmi n\u00e1v\u0161t\u011bvn\u00edky<\/h3>\n<div class=\"rank-math-step-content\"><p>Ujist\u011bte se, \u017ee IP adresy ve va\u0161ich protokolech pat\u0159\u00ed n\u00e1v\u0161t\u011bvn\u00edk\u016fm a ne Cloudflare nebo va\u0161\u00ed reverzn\u00ed proxy. Pokud ka\u017ed\u00fd z\u00e1znam zobrazuje stejn\u00fdch n\u011bkolik adres, obnovte p\u016fvodn\u00ed IP adresu n\u00e1v\u0161t\u011bvn\u00edka, ne\u017e vyvod\u00edte jak\u00fdkoli z\u00e1v\u011br.<\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n\n\n\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"1568\" height=\"322\" sizes=\"auto, (max-width: 1568px) 100vw, 1568px\" src=\"https:\/\/synopower.club\/wp-content\/uploads\/2026\/09\/email-bombing-mail-log.webp\" alt=\"Z\u00e1znam e-mail\u016f WordPressu zobrazuj\u00edc\u00ed deset e-mail\u016f s potvrzen\u00edm kontaktn\u00edho formul\u00e1\u0159e odeslan\u00fdch b\u011bhem e-mailov\u00e9ho bombardov\u00e1n\u00ed, p\u0159\u00edjemci skryt\u00ed\" class=\"wp-image-21489\" srcset=\"https:\/\/synopower.club\/wp-content\/uploads\/2026\/09\/email-bombing-mail-log.webp 1568w, https:\/\/synopower.club\/wp-content\/uploads\/2026\/09\/email-bombing-mail-log-1000x205.webp 1000w, https:\/\/synopower.club\/wp-content\/uploads\/2026\/09\/email-bombing-mail-log-400x82.webp 400w, https:\/\/synopower.club\/wp-content\/uploads\/2026\/09\/email-bombing-mail-log-300x62.webp 300w, https:\/\/synopower.club\/wp-content\/uploads\/2026\/09\/email-bombing-mail-log-1024x210.webp 1024w, https:\/\/synopower.club\/wp-content\/uploads\/2026\/09\/email-bombing-mail-log-768x158.webp 768w, https:\/\/synopower.club\/wp-content\/uploads\/2026\/09\/email-bombing-mail-log-1536x315.webp 1536w, https:\/\/synopower.club\/wp-content\/uploads\/2026\/09\/email-bombing-mail-log-18x4.webp 18w\" \/><figcaption class=\"wp-element-caption\">Krok 2 v praxi: protokol po\u0161ty potvrdil, \u017ee ka\u017ed\u00e1 polo\u017eka spamu vygenerovala potvrzovac\u00ed e-mail s potvrzen\u00edm doru\u010den\u00ed. P\u0159\u00edjemci jsou skryti.<\/figcaption><\/figure>\n\n\n\n<h2 id=\"what-we-changed-after-the-investigation\" class=\"wp-block-heading\">Co jsme zm\u011bnili po vy\u0161et\u0159ov\u00e1n\u00ed<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Oprava e-mailov\u00e9ho bombardov\u00e1n\u00ed musela spl\u0148ovat dv\u011b podm\u00ednky: \u00fapln\u011b zastavit tohoto odes\u00edlatele a nezp\u016fsobovat komplikace z\u00e1kazn\u00edk\u016fm, kte\u0159\u00ed ka\u017ed\u00fd t\u00fdden pou\u017e\u00edvaj\u00ed formul\u00e1\u0159 k dotazov\u00e1n\u00ed na licence. Dohodli jsme se na jedn\u00e9 c\u00edlen\u00e9 zm\u011bn\u011b.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Formul\u00e1\u0159e odeslan\u00e9 p\u0159es s\u00ed\u0165 Tor jsou nyn\u00ed odm\u00edt\u00e1ny, a to na v\u0161ech formul\u00e1\u0159\u00edch na webu. Cloudflare ozna\u010duje provoz Tor speci\u00e1ln\u00edm k\u00f3dem zem\u011b T1 a tak\u00e9 kontrolujeme IP adresu n\u00e1v\u0161t\u011bvn\u00edka oproti seznamu ukon\u010den\u00fdch server\u016f projektu Tor, kter\u00fd se denn\u011b aktualizuje, tak\u017ee pravidlo st\u00e1le plat\u00ed, pokud se po\u017eadavek dostane na NAS, ani\u017e by pro\u0161el Cloudflare. Ka\u017ed\u00fd, kdo je odm\u00edtnut, uvid\u00ed kr\u00e1tkou zpr\u00e1vu s na\u0161\u00ed adresou podpory, tak\u017ee skute\u010dn\u00fd z\u00e1kazn\u00edk, kter\u00fd preferuje Tor, n\u00e1s m\u016f\u017ee st\u00e1le kontaktovat e-mailem.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Prohl\u00ed\u017een\u00ed, pokladna a str\u00e1nky \u00fa\u010dtu z\u016fst\u00e1vaj\u00ed nedot\u010deny. Zm\u011bna se projev\u00ed pouze v okam\u017eiku odesl\u00e1n\u00ed formul\u00e1\u0159e, co\u017e je p\u0159esn\u011b m\u00edsto, kde do\u0161lo ke zneu\u017eit\u00ed.<\/p>\n\n\n\n<h2 id=\"should-you-keep-the-auto-reply-after-email-bombing\" class=\"wp-block-heading\">M\u011bli byste si ponechat automatickou odpov\u011b\u010f po e-mailov\u00e9m bombardov\u00e1n\u00ed?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Nejsiln\u011bj\u0161\u00ed obranou proti e-mailov\u00e9mu bombardov\u00e1n\u00ed prost\u0159ednictv\u00edm formul\u00e1\u0159e je zabr\u00e1nit odes\u00edl\u00e1n\u00ed \u010dehokoli na adresu, kter\u00e1 je do n\u011bj zad\u00e1na. Pokud v\u00e1s formul\u00e1\u0159 pouze upozorn\u00ed, \u00fato\u010dn\u00edk zad\u00e1n\u00edm adresy ciz\u00ed osoby nic nez\u00edsk\u00e1. Tuto mo\u017enost jsme v\u00e1\u017en\u011b zva\u017eovali.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Rozhodli jsme se potvrzen\u00ed ponechat. Mnoho na\u0161ich z\u00e1kazn\u00edk\u016f n\u00e1m p\u00ed\u0161e, proto\u017ee se jim neaktivoval licen\u010dn\u00ed kl\u00ed\u010d nebo se e-mail s objedn\u00e1vkou dostal do spamu, a okam\u017eit\u00e1 odpov\u011b\u010f s uveden\u00edm \u010d\u00edsla tiketu, \u017ee jsme zpr\u00e1vu obdr\u017eeli, jim v\u00fdrazn\u011b sni\u017euje stres. Jeho odstran\u011bn\u00ed by potrestalo ka\u017ed\u00e9ho skute\u010dn\u00e9ho z\u00e1kazn\u00edka, kter\u00fd by obt\u011b\u017eoval jednoho odes\u00edlatele.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Kompromis je ale jasn\u00fd. Zablokov\u00e1n\u00ed Toru sice uzav\u0159e trasu, kterou tento odes\u00edlatel pou\u017eil, ale odhodlan\u00fd \u00fato\u010dn\u00edk by mohl p\u0159ej\u00edt na b\u011b\u017en\u00e9 proxy. Pokud se spamov\u00e9 polo\u017eky vracej\u00ed z adres mimo Tor, dal\u0161\u00edm krokem je nastaven\u00ed potvrzen\u00ed jako voliteln\u00e9ho nebo jeho vypnut\u00ed a toto rozhodnut\u00ed je t\u0159eba si zapsat do kontroln\u00edho seznamu d\u0159\u00edve, ne\u017e k n\u011bmu dojde, nikoli b\u011bhem dal\u0161\u00edho incidentu.<\/p>\n\n\n\n<h2 id=\"getting-the-real-visitor-ip-behind-cloudflare-and-synology-reverse-proxy\" class=\"wp-block-heading\">Z\u00edsk\u00e1n\u00ed skute\u010dn\u00e9 IP adresy n\u00e1v\u0161t\u011bvn\u00edka za Cloudflare a reverzn\u00ed proxy Synology<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Krok 4 vy\u0161et\u0159ov\u00e1n\u00ed si zaslou\u017e\u00ed vlastn\u00ed sekci, proto\u017ee se jedn\u00e1 o nej\u010dast\u011bj\u0161\u00ed past, se kterou se self-hostingov\u00fd web pot\u00fdk\u00e1 s e-mailov\u00fdm bombardov\u00e1n\u00edm nebo jin\u00fdm zneu\u017eit\u00edm. Po\u017eadavek na SynoPower Club proch\u00e1z\u00ed p\u0159es Cloudflare, pot\u00e9 reverzn\u00ed proxy v Synology DSM, ne\u017e se dostane do WordPressu ve sv\u00e9m kontejneru. Bez dal\u0161\u00ed konfigurace WordPress vid\u00ed adresu posledn\u00edho hopu, tak\u017ee ka\u017ed\u00fd z\u00e1znam ve formul\u00e1\u0159i, koment\u00e1\u0159 a objedn\u00e1vka je zaznamen\u00e1na s IP adresou Cloudflare nebo proxy.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Cloudflare p\u0159ed\u00e1v\u00e1 p\u016fvodn\u00ed adresu v hlavi\u010dce CF-Connecting-IP a Apache m\u016f\u017ee b\u00fdt informov\u00e1n, aby t\u00e9to hlavi\u010dce d\u016fv\u011b\u0159oval pouze tehdy, kdy\u017e po\u017eadavek p\u0159ich\u00e1z\u00ed z Cloudflare nebo va\u0161\u00ed vlastn\u00ed proxy. Tento probl\u00e9m jsme opravili jen n\u011bkolik dn\u00ed p\u0159edt\u00edm kv\u016fli kontrole objedn\u00e1vek na podvody a okam\u017eit\u011b se to vyplatilo: polo\u017eky formul\u00e1\u0159e zobrazovaly skute\u010dn\u00e9 v\u00fdstupn\u00ed adresy Toru, co\u017e umo\u017enilo odhalit tento vzorec b\u011bhem n\u011bkolika minut.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Pokud hostujete na NAS serveru Synology za Cloudflare, zkontrolujte si to p\u0159edt\u00edm, ne\u017e to budete pot\u0159ebovat. Ode\u0161lete zku\u0161ebn\u00ed z\u00e1znam z telefonu p\u0159es mobiln\u00ed data a ov\u011b\u0159te, zda ulo\u017een\u00e1 IP adresa odpov\u00edd\u00e1 t\u00e9, kterou hl\u00e1s\u00ed v\u00e1\u0161 telefon.<\/p>\n\n\n\n<h2 id=\"why-we-run-synopower-club-on-synology\" class=\"wp-block-heading\">Pro\u010d provozujeme SynoPower Club na Synology<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Obchod, kter\u00fd prod\u00e1v\u00e1 licence Synology, by m\u011bl b\u00fdt schopen b\u011b\u017eet na Synology a ten n\u00e1\u0161 to dok\u00e1\u017ee, \u00fapln\u011b v\u0161echno. <a href=\"https:\/\/synopower.club\/cs\/synology-vmm-pro-license\/\" target=\"_blank\" rel=\"noreferrer noopener\">Virtual Machine Manager<\/a> hostuje instanci Virtual DSM, kter\u00e1 obsahuje web, Container Manager spou\u0161t\u00ed WordPress a jeho datab\u00e1zi a <a href=\"https:\/\/synopower.club\/cs\/synology-mailplus-license-pack-5-users\/\" target=\"_blank\" rel=\"noreferrer noopener\">Synology MailPlus<\/a> odes\u00edl\u00e1 ka\u017ed\u00e9 potvrzen\u00ed objedn\u00e1vky, doru\u010den\u00ed licence a odpov\u011b\u010f na formul\u00e1\u0159.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"1207\" height=\"1116\" sizes=\"auto, (max-width: 1207px) 100vw, 1207px\" src=\"https:\/\/synopower.club\/wp-content\/uploads\/2026\/09\/synopower-club-on-virtual-dsm.webp\" alt=\"Kontejnery WordPressu a MariaDB v Container Manageru Synology na Virtual DSM s Monitorem zdroj\u016f\" class=\"wp-image-21491\" srcset=\"https:\/\/synopower.club\/wp-content\/uploads\/2026\/09\/synopower-club-on-virtual-dsm.webp 1207w, https:\/\/synopower.club\/wp-content\/uploads\/2026\/09\/synopower-club-on-virtual-dsm-1000x925.webp 1000w, https:\/\/synopower.club\/wp-content\/uploads\/2026\/09\/synopower-club-on-virtual-dsm-400x370.webp 400w, https:\/\/synopower.club\/wp-content\/uploads\/2026\/09\/synopower-club-on-virtual-dsm-300x277.webp 300w, https:\/\/synopower.club\/wp-content\/uploads\/2026\/09\/synopower-club-on-virtual-dsm-1024x947.webp 1024w, https:\/\/synopower.club\/wp-content\/uploads\/2026\/09\/synopower-club-on-virtual-dsm-768x710.webp 768w, https:\/\/synopower.club\/wp-content\/uploads\/2026\/09\/synopower-club-on-virtual-dsm-13x12.webp 13w\" \/><figcaption class=\"wp-element-caption\">SynoPower Club v produk\u010dn\u00edm prost\u0159ed\u00ed: WordPress a jeho datab\u00e1ze MariaDB v Container Manageru na Virtual DSM. Monitor zdroj\u016f zobrazuje celou instanci s vyu\u017eit\u00edm 16\u00a0% CPU a 43\u00a0% pam\u011bti.<\/figcaption><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">B\u011bh uvnit\u0159 <a href=\"https:\/\/synopower.club\/cs\/virtual-dsm-vdsm-license-pack\/\" target=\"_blank\" rel=\"noreferrer noopener\">Virtual DSM<\/a> d\u00e1v\u00e1 n\u00e1m n\u011bco, co sd\u00edlen\u00fd hosting nab\u00edz\u00ed jen z\u0159\u00eddka: sn\u00edmek cel\u00e9ho webu, v\u010detn\u011b datab\u00e1ze a konfigurace, kter\u00fd lze obnovit b\u011bhem n\u011bkolika minut. Zm\u011bny, jako je na\u0161e oprava e-mailov\u00e9ho bombardov\u00e1n\u00ed, jsou n\u00edzkorizikov\u00e9, proto\u017ee cesta zp\u011bt je v\u017edy jen jedno kliknut\u00ed daleko. MailPlus zase uchov\u00e1v\u00e1 na\u0161i po\u0161tu a z\u00e1znamy o jej\u00edm doru\u010den\u00ed na na\u0161em vlastn\u00edm hardwaru nam\u00edsto po\u0161tovn\u00ed slu\u017eby t\u0159et\u00ed strany, tak\u017ee potvrzen\u00ed, kter\u00e9 zpr\u00e1vy byly odesl\u00e1ny a komu je lok\u00e1ln\u00ed vyhled\u00e1v\u00e1n\u00ed.<\/p>\n\n\n\n<div class=\"wp-block-buttons is-content-justification-center is-layout-flex wp-container-core-buttons-is-layout-a221f4eb wp-block-buttons-is-layout-flex\" style=\"border-style:none;border-width:0px;border-radius:0px;margin-top:var(--wp--preset--spacing--50);margin-bottom:var(--wp--preset--spacing--50);padding-top:var(--wp--preset--spacing--40);padding-right:0;padding-bottom:var(--wp--preset--spacing--40);padding-left:0\">\n<div class=\"wp-block-button is-style-fill\"><a class=\"wp-block-button__link has-palette-color-4-color has-luminous-vivid-amber-background-color has-text-color has-background has-link-color wp-element-button\" href=\"https:\/\/synopower.club\/cs\/synology-vmm-pro-license\/\" style=\"border-radius:15px\" target=\"_blank\" rel=\"noreferrer noopener\">Z\u00edskejte licenci VMM Pro<\/a><\/div>\n<\/div>\n\n\n\n<h2 id=\"a-checklist-for-your-own-synology-hosted-forms\" class=\"wp-block-heading\">Kontroln\u00ed seznam pro va\u0161e vlastn\u00ed formul\u00e1\u0159e hostovan\u00e9 na platform\u011b Synology<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Nemus\u00edte \u010dekat na \u00fatok typu \u201ee-mail bombing\u201c, abyste si zajistili ochrannou zn\u00e1mku formul\u00e1\u0159\u016f. Tyto kontroly na typick\u00e9m webu WordPress hostovan\u00e9m na platform\u011b Synology trvaj\u00ed m\u00e9n\u011b ne\u017e hodinu.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Uve\u010fte v\u0161echny formul\u00e1\u0159e na webu a poznamenejte si, kter\u00e9 z nich odes\u00edlaj\u00ed po\u0161tu na adresu, kterou n\u00e1v\u0161t\u011bvn\u00edk zad\u00e1.<\/li>\n\n\n\n<li>Nechte turniket a honeypot zapnut\u00fd, proto\u017ee st\u00e1le zastavuj\u00ed v\u011bt\u0161inu automatick\u00e9ho spamu.<\/li>\n\n\n\n<li>Ov\u011b\u0159te, zda va\u0161e protokoly zaznamen\u00e1vaj\u00ed skute\u010dn\u00e9 IP adresy n\u00e1v\u0161t\u011bvn\u00edk\u016f, nikoli adresy Cloudflare nebo reverzn\u00ed proxy.<\/li>\n\n\n\n<li>P\u0159edem se rozhodn\u011bte, zda v p\u0159\u00edpad\u011b zneu\u017e\u00edv\u00e1n\u00ed zablokujete Tor nebo anonymn\u00ed s\u00edt\u011b na formul\u00e1\u0159\u00edch.<\/li>\n\n\n\n<li>Sledujte objem potvrzen\u00ed formul\u00e1\u0159\u016f v protokolu MailPlus nebo SMTP a nastavte p\u0159ibli\u017en\u00e9 \u010d\u00edslo, kter\u00e9 se bude pova\u017eovat za neobvykl\u00e9.<\/li>\n\n\n\n<li>P\u0159ed zm\u011bnou bezpe\u010dnostn\u00edch pravidel po\u0159i\u010fte sn\u00edmek Virtual DSM nebo Btrfs, abyste se mohli okam\u017eit\u011b vr\u00e1tit zp\u011bt.<\/li>\n<\/ul>\n\n\n\n<h2 id=\"email-bombing-limits-and-caveats\" class=\"wp-block-heading\">Limity a upozorn\u011bn\u00ed pro bombardov\u00e1n\u00ed e-maily<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Na\u0161e zm\u011bna se t\u00fdk\u00e1 tohoto incidentu, nikoli v\u0161ech mo\u017en\u00fdch forem e-mailov\u00e9ho bombardov\u00e1n\u00ed, a je vhodn\u00e9 up\u0159esnit, \u010deho se net\u00fdk\u00e1.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Blokov\u00e1n\u00ed Toru ve formul\u00e1\u0159\u00edch tak\u00e9 odrad\u00ed mal\u00fd po\u010det skute\u010dn\u00fdch n\u00e1v\u0161t\u011bvn\u00edk\u016f, kte\u0159\u00ed Tor pou\u017e\u00edvaj\u00ed pro ochranu soukrom\u00ed. Pro licen\u010dn\u00ed obchod je tento kompromis snadn\u00fd, proto\u017ee \u017e\u00e1dn\u00fd ze 199 skute\u010dn\u00fdch z\u00e1znam\u016f ve formul\u00e1\u0159\u00edch od roku 2024 nepro\u0161el p\u0159es Tor, ale web slou\u017e\u00edc\u00ed novin\u00e1\u0159\u016fm nebo aktivist\u016fm by se m\u011bl rozhodnout jinak.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">E-mailov\u00e1 bombardovac\u00ed kampa\u0148, kter\u00e1 se p\u0159esouv\u00e1 na reziden\u010dn\u00ed proxy nebo napaden\u00e9 dom\u00e1c\u00ed routery, nebude zachycena pravidlem Tor a neexistuje \u017e\u00e1dn\u00fd \u010dist\u00fd seznam t\u011bchto adres. V tomto okam\u017eiku je rozhodnut\u00ed o automatick\u00e9 odpov\u011bdi z d\u0159\u00edv\u011bj\u0161\u00ed doby d\u016fle\u017eit\u011bj\u0161\u00ed ne\u017e jak\u00fdkoli seznam blokovan\u00fdch adres.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Kone\u010dn\u011b, nic zde nechr\u00e1n\u00ed ob\u011bti p\u0159ed z\u00e1plavami zpr\u00e1v zas\u00edlan\u00fdmi z jin\u00fdch webov\u00fdch str\u00e1nek. Pokud se va\u0161e schr\u00e1nka n\u00e1hle zapln\u00ed registracemi a potvrzen\u00edmi ze str\u00e1nek, kter\u00e9 jste nikdy nenav\u0161t\u00edvili, nejprve zkontrolujte sv\u016fj bankovn\u00ed \u00fa\u010det, kartu a e-mailov\u00e9 \u00fa\u010dty, zda se v nich neobjevuje neobvykl\u00e1 aktivita. Z\u00e1plava je \u010dasto odveden\u00edm pozornosti od n\u011b\u010deho jin\u00e9ho.<\/p>\n\n\n\n<h2 id=\"frequently-asked-questions\" class=\"wp-block-heading\">\u010casto kladen\u00e9 ot\u00e1zky<\/h2>\n\n\n<div id=\"rank-math-faq\" class=\"rank-math-block\">\n<div class=\"rank-math-list\">\n<div id=\"faq-1\" class=\"rank-math-list-item\">\n<h3 class=\"rank-math-question\">Co je to bombardov\u00e1n\u00ed e-maily?<\/h3>\n<div class=\"rank-math-answer\">\n\n<p>E-mailov\u00fd bombardov\u00e1n\u00ed je zaplaven\u00ed osoby velk\u00fdm mno\u017estv\u00edm skute\u010dn\u00fdch e-mail\u016f zad\u00e1v\u00e1n\u00edm jej\u00ed adresy do mnoha webov\u00fdch formul\u00e1\u0159\u016f, registrac\u00ed a newsletter\u016f. Ka\u017ed\u00e1 zpr\u00e1va je origin\u00e1ln\u00ed, tak\u017ee ji filtry propou\u0161t\u011bj\u00ed a v z\u00e1plav\u011b zpr\u00e1v se m\u016f\u017ee skr\u00fdt d\u016fle\u017eit\u00e9 upozorn\u011bn\u00ed.<\/p>\n\n<\/div>\n<\/div>\n<div id=\"faq-2\" class=\"rank-math-list-item\">\n<h3 class=\"rank-math-question\">Pro\u010d by se e-mailov\u00e9 bombardov\u00e1n\u00ed zam\u011b\u0159ovalo na mal\u00fd kontaktn\u00ed formul\u00e1\u0159?<\/h3>\n<div class=\"rank-math-answer\">\n\n<p>Jak\u00fdkoli formul\u00e1\u0159, kter\u00fd ode\u0161le kopii zpr\u00e1vy zp\u011bt na zadanou adresu, funguje pro \u00fato\u010dn\u00edka jako bezplatn\u00e9 e-mailov\u00e9 rel\u00e9. Mal\u00e9 weby jsou u\u017eite\u010dn\u00e9, proto\u017ee jejich po\u0161ta je d\u016fv\u011bryhodn\u00e1 a jen z\u0159\u00eddka sleduj\u00ed potvrzen\u00ed formul\u00e1\u0159\u016f.<\/p>\n\n<\/div>\n<\/div>\n<div id=\"faq-3\" class=\"rank-math-list-item\">\n<h3 class=\"rank-math-question\">Zastav\u00ed Cloudflare Turnstile bombardov\u00e1n\u00ed e-maily?<\/h3>\n<div class=\"rank-math-answer\">\n\n<p>Ne s\u00e1m o sob\u011b. Turniket kontroluje, zda se skute\u010dn\u00fd prohl\u00ed\u017ee\u010d chov\u00e1 jako \u010dlov\u011bk. Trp\u011bliv\u00fd odes\u00edlatel pou\u017e\u00edvaj\u00edc\u00ed b\u011b\u017en\u00fd prohl\u00ed\u017ee\u010d s rychlost\u00ed jednoho odesl\u00e1n\u00ed za hodinu jej propust\u00ed, stejn\u011b jako v\u0161ech deset na\u0161ich spamov\u00fdch polo\u017eek.<\/p>\n\n<\/div>\n<\/div>\n<div id=\"faq-4\" class=\"rank-math-list-item\">\n<h3 class=\"rank-math-question\">Znamen\u00e1 e-mailov\u00e9 bombardov\u00e1n\u00ed v m\u00fdch formul\u00e1\u0159\u00edch, \u017ee m\u016fj web byl napaden hackery?<\/h3>\n<div class=\"rank-math-answer\">\n\n<p>Ne. \u00dato\u010dn\u00edk pou\u017eil pouze ve\u0159ejn\u00fd formul\u00e1\u0159, kter\u00fd m\u016f\u017ee vyplnit kdokoli. V na\u0161em p\u0159\u00edpad\u011b se nejednalo o \u017e\u00e1dn\u00e9 \u00fa\u010dty, objedn\u00e1vky ani platebn\u00ed \u00fadaje a NAS po celou dobu norm\u00e1ln\u011b obsluhoval z\u00e1kazn\u00edky.<\/p>\n\n<\/div>\n<\/div>\n<div id=\"faq-5\" class=\"rank-math-list-item\">\n<h3 class=\"rank-math-question\">M\u00e1m vypnout potvrzovac\u00ed e-mail, kter\u00fd mi formul\u00e1\u0159 odes\u00edl\u00e1?<\/h3>\n<div class=\"rank-math-answer\">\n\n<p>Je to nejsiln\u011bj\u0161\u00ed obrana, proto\u017ee \u00fato\u010dn\u00edk nic nez\u00edsk\u00e1, pokud v\u00e1s formul\u00e1\u0159 pouze upozorn\u00ed. My jsme si ten n\u00e1\u0161 ponechali, proto\u017ee z\u00e1kazn\u00edci si cen\u00ed okam\u017eit\u00e9ho p\u0159ijet\u00ed, a m\u00edsto toho jsme zablokovali s\u00ed\u0165, ze kter\u00e9 zneu\u017eit\u00ed p\u0159i\u0161lo.<\/p>\n\n<\/div>\n<\/div>\n<div id=\"faq-6\" class=\"rank-math-list-item\">\n<h3 class=\"rank-math-question\">Zastav\u00ed blokov\u00e1n\u00ed Toru na formul\u00e1\u0159\u00edch skute\u010dn\u00e9 z\u00e1kazn\u00edky?<\/h3>\n<div class=\"rank-math-answer\">\n\n<p>Velmi z\u0159\u00eddka. Prohl\u00ed\u017een\u00ed a placen\u00ed st\u00e1le funguj\u00ed p\u0159es Tor a ka\u017ed\u00fd, kdo odm\u00edtne formul\u00e1\u0159, uvid\u00ed na\u0161i e-mailovou adresu podpory. \u017d\u00e1dn\u00fd ze 199 skute\u010dn\u00fdch z\u00e1znam\u016f v historii na\u0161ich formul\u00e1\u0159\u016f od roku 2024 nepoch\u00e1zel z Toru.<\/p>\n\n<\/div>\n<\/div>\n<div id=\"faq-7\" class=\"rank-math-list-item\">\n<h3 class=\"rank-math-question\">Obdr\u017eel(a) jsem potvrzen\u00ed SynoPower Club, o kter\u00e9 jsem nikdy ne\u017e\u00e1dal(a). Co m\u00e1m d\u011blat?<\/h3>\n<div class=\"rank-math-answer\">\n\n<p>U n\u00e1s nemus\u00edte d\u011blat nic. Nebyl vytvo\u0159en \u017e\u00e1dn\u00fd \u00fa\u010det a nic nebylo str\u017eeno. Pokud jste obdr\u017eeli mnoho podobn\u00fdch e-mail\u016f z jin\u00fdch web\u016f sou\u010dasn\u011b, zkontrolujte sv\u016fj bankovn\u00ed a e-mailov\u00fd \u00fa\u010det, zda nedo\u0161lo k neobvykl\u00e9 aktivit\u011b.<\/p>\n\n<\/div>\n<\/div>\n<div id=\"faq-8\" class=\"rank-math-list-item\">\n<h3 class=\"rank-math-question\">Zvl\u00e1dne NAS Synology e-mailov\u00e9 bombardov\u00e1n\u00ed na webu hostovan\u00e9m na vlastn\u00edm serveru?<\/h3>\n<div class=\"rank-math-answer\">\n\n<p>Ano. \u00datok vygeneroval n\u011bkolik po\u017eadavk\u016f, co\u017e je v r\u00e1mci toho, co NAS Synology obslou\u017e\u00ed ka\u017edou minutu. Skute\u010dnou prac\u00ed je detekce a p\u0159\u00edtomnost z\u00e1znam\u016f ve formul\u00e1\u0159\u00edch, protokol\u016f po\u0161ty a IP adres n\u00e1v\u0161t\u011bvn\u00edk\u016f na jednom syst\u00e9mu Synology to urychluje.<\/p>\n\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n\n\n<h2 id=\"references-and-video-walkthroughs\" class=\"wp-block-heading\">Reference a video n\u00e1vody<\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n<li><a href=\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2024\/05\/15\/threat-actors-misusing-quick-assist-in-social-engineering-attacks-leading-to-ransomware\/\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">Microsoft Threat Intelligence o e-mailov\u00e9m bombardov\u00e1n\u00ed<\/a>, kter\u00fd ukazuje, jak je z\u00e1plava registrac\u00ed zneu\u017eita jako prvn\u00ed krok podvodu na helpdesku.<\/li>\n\n\n\n<li><a href=\"https:\/\/developers.cloudflare.com\/fundamentals\/reference\/http-headers\/\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">HTTP hlavi\u010dky Cloudflare<\/a>, kter\u00fd dokumentuje k\u00f3d zem\u011b T1, kter\u00fd Cloudflare p\u0159i\u0159azuje provozu Tor.<\/li>\n\n\n\n<li><a href=\"https:\/\/check.torproject.org\/torbulkexitlist\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">Seznam hromadn\u00fdch ukon\u010den\u00ed projektu Tor<\/a>, zve\u0159ejn\u011bn\u00fd seznam aktu\u00e1ln\u00edch adres v\u00fdstupn\u00edch uzl\u016f Toru.<\/li>\n\n\n\n<li><a href=\"https:\/\/support.google.com\/mail\/answer\/7436150\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">Te\u010dky v adres\u00e1ch Gmailu nehraj\u00ed roli<\/a>, co\u017e vysv\u011btluje, pro\u010d se v\u0161echny varianty s te\u010dkou dostanou do stejn\u00e9 schr\u00e1nky.<\/li>\n\n\n\n<li><a href=\"https:\/\/developers.cloudflare.com\/support\/troubleshooting\/restoring-visitor-ips\/restoring-original-visitor-ips\/\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">Obnoven\u00ed p\u016fvodn\u00edch IP adres n\u00e1v\u0161t\u011bvn\u00edk\u016f<\/a>, Pokyny Cloudflare pro zaznamen\u00e1v\u00e1n\u00ed skute\u010dn\u00fdch adres n\u00e1v\u0161t\u011bvn\u00edk\u016f za proxy.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Tato videa se zab\u00fdvaj\u00ed platformami Synology, na kter\u00fdch tento web b\u011b\u017e\u00ed: MailPlus, kter\u00fd odes\u00edl\u00e1 na\u0161i po\u0161tu, a hostov\u00e1n\u00edm WordPressu na NAS serveru Synology.<\/p>\n\n\n\n<figure class=\"wp-block-embed is-type-video is-provider-youtube wp-block-embed-youtube wp-embed-aspect-16-9 wp-has-aspect-ratio\"><div class=\"wp-block-embed__wrapper\">\n<iframe loading=\"lazy\" title=\"P\u0159edstavujeme Synology MailPlus | Synology\" width=\"1200\" height=\"675\" src=\"https:\/\/www.youtube.com\/embed\/3XGTSb3D3TA?feature=oembed\" frameborder=\"0\" allow=\"accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share\" referrerpolicy=\"strict-origin-when-cross-origin\" allowfullscreen><\/iframe>\n<\/div><figcaption class=\"wp-element-caption\">P\u0159edstavujeme Synology MailPlus<\/figcaption><\/figure>\n\n\n\n<figure class=\"wp-block-embed is-type-video is-provider-youtube wp-block-embed-youtube wp-embed-aspect-16-9 wp-has-aspect-ratio\"><div class=\"wp-block-embed__wrapper\">\n<iframe loading=\"lazy\" title=\"Jak nakonfigurovat server Synology MailPlus pro ochranu va\u0161\u00ed po\u0161tovn\u00ed slu\u017eby\" width=\"1200\" height=\"675\" src=\"https:\/\/www.youtube.com\/embed\/I_ap-K0Y9jg?feature=oembed\" frameborder=\"0\" allow=\"accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share\" referrerpolicy=\"strict-origin-when-cross-origin\" allowfullscreen><\/iframe>\n<\/div><figcaption class=\"wp-element-caption\">Jak nakonfigurovat server Synology MailPlus pro ochranu va\u0161\u00ed po\u0161tovn\u00ed slu\u017eby<\/figcaption><\/figure>\n\n\n\n<figure class=\"wp-block-embed is-type-video is-provider-youtube wp-block-embed-youtube wp-embed-aspect-16-9 wp-has-aspect-ratio\"><div class=\"wp-block-embed__wrapper\">\n<iframe loading=\"lazy\" title=\"Jak si sami hostovat web WordPress na Synology NAS (aktualizov\u00e1no pro rok 2024)\" width=\"1200\" height=\"675\" src=\"https:\/\/www.youtube.com\/embed\/8sa9KeBH38g?feature=oembed\" frameborder=\"0\" allow=\"accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share\" referrerpolicy=\"strict-origin-when-cross-origin\" allowfullscreen><\/iframe>\n<\/div><figcaption class=\"wp-element-caption\">Jak si sami hostovat web WordPress na NAS serveru Synology<\/figcaption><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">Pl\u00e1nujete hostovat vlastn\u00ed webov\u00e9 str\u00e1nky nebo e-mail na Synology? Za\u010dn\u011bte s <a href=\"https:\/\/synopower.club\/cs\/virtual-dsm-vdsm-license-pack\/\" target=\"_blank\" rel=\"noreferrer noopener\">licence Virtual DSM<\/a> pro izolovanou instanci chr\u00e1n\u011bnou sn\u00edmky nebo proch\u00e1zejte v\u0161echny licence na <a href=\"https:\/\/synopower.club\/cs\/\" target=\"_blank\" rel=\"noreferrer noopener\">SynoPower Club<\/a>.<\/p>","protected":false},"excerpt":{"rendered":"<p>Email bombing is when someone floods a person&#8217;s inbox with hundreds of genuine-looking emails from real websites, usually to bury one message they do not want the victim to see. On 24 and 25 September 2026 our own contact form became one of those websites. SynoPower Club runs entirely on Synology: WordPress in Container Manager, [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":21491,"comment_status":"open","ping_status":"closed","template":"","meta":{"_xspeed_no_cache":false,"_xspeed_expiry_hours":0,"footnotes":""},"doc_category":[197],"doc_tag":[],"class_list":["post-21484","docs","type-docs","status-publish","has-post-thumbnail","hentry","doc_category-nas-hosting-101"],"year_month":"2026-11","word_count":2608,"total_views":"163","reactions":{"happy":"0","normal":"0","sad":"0"},"author_info":{"name":"Adair Hsu","author_nicename":"adairpk17","author_url":"https:\/\/synopower.club\/cs\/author\/adairpk17\/"},"doc_category_info":[{"term_name":"NAS Hosting 101","term_url":"https:\/\/synopower.club\/cs\/docs-category\/nas-hosting-101\/"}],"doc_tag_info":[],"_links":{"self":[{"href":"https:\/\/synopower.club\/cs\/wp-json\/wp\/v2\/docs\/21484","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/synopower.club\/cs\/wp-json\/wp\/v2\/docs"}],"about":[{"href":"https:\/\/synopower.club\/cs\/wp-json\/wp\/v2\/types\/docs"}],"author":[{"embeddable":true,"href":"https:\/\/synopower.club\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/synopower.club\/cs\/wp-json\/wp\/v2\/comments?post=21484"}],"version-history":[{"count":3,"href":"https:\/\/synopower.club\/cs\/wp-json\/wp\/v2\/docs\/21484\/revisions"}],"predecessor-version":[{"id":21492,"href":"https:\/\/synopower.club\/cs\/wp-json\/wp\/v2\/docs\/21484\/revisions\/21492"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/synopower.club\/cs\/wp-json\/wp\/v2\/media\/21491"}],"wp:attachment":[{"href":"https:\/\/synopower.club\/cs\/wp-json\/wp\/v2\/media?parent=21484"}],"wp:term":[{"taxonomy":"doc_category","embeddable":true,"href":"https:\/\/synopower.club\/cs\/wp-json\/wp\/v2\/doc_category?post=21484"},{"taxonomy":"doc_tag","embeddable":true,"href":"https:\/\/synopower.club\/cs\/wp-json\/wp\/v2\/doc_tag?post=21484"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}