精確驗證郵箱地址是否真實存在 (SMTP RCPT TO 驗證)

本文介紹通過 SMTP 協議直接與郵件服務器交互，驗證郵箱地址是否真實存在的方法。核心流程：DNS MX 記錄查詢 → 建立 SMTP 連接 → HELO/EHLO → MAIL FROM → RCPT TO → 根據響應碼判斷。附帶完整 Java 實現代碼與生產環境優化方案。

為什麼需要驗證郵箱真實性？

• 減少退信率，維護發件域名信譽
• 清洗營銷郵件列表，降低成本
• 註冊/綁定環節即時攔截無效郵箱
• 防止垃圾郵件陷阱地址

SMTP 驗證核心原理

C: 連接 mail.example.com:25
S: 220 mail.example.com ESMTP Postfix
C: EHLO client.example.com
S: 250-mail.example.com
S: 250-PIPELINING
S: 250-SIZE 10240000
S: 250 8BITMIME
C: MAIL FROM:<verify@mydomain.com>
S: 250 2.1.0 Ok
C: RCPT TO:<target@example.com>
S: 250 2.1.5 Ok          ← 郵箱存在
S: 550 5.1.1 User unknown ← 郵箱不存在
C: QUIT
S: 221 2.0.0 Bye

關鍵響應碼

完整 Java 實現 (基於 Socket + JNDI DNS)

import javax.naming.*;
import javax.naming.directory.*;
import java.io.*;
import java.net.*;
import java.util.*;

public class SmtpEmailValidator {

    private static final int SMTP_PORT = 25;
    private static final int TIMEOUT_MS = 5000;
    private static final String LOCAL_HOSTNAME = "validator.mydomain.com";
    private static final String MAIL_FROM = "verify@mydomain.com";

    /**
     * 驗證單個郵箱地址
     * @return true: 存在, false: 不存在或無法確定
     */
    public static boolean validate(String email) {
        // 1. 基礎格式校驗
        if (email == null || !email.contains("@")) return false;
        String domain = email.substring(email.indexOf('@') + 1);
        
        // 2. 查詢 MX 記錄
        List mxHosts = lookupMxRecords(domain);
        if (mxHosts.isEmpty()) return false;
        
        // 3. 嘗試每個 MX 服務器
        for (String mxHost : mxHosts) {
            if (validateViaSmtp(mxHost, email)) {
                return true;
            }
        }
        return false;
    }

    /**
     * JNDI DNS 查詢 MX 記錄
     */
    private static List lookupMxRecords(String domain) {
        List hosts = new ArrayList<>();
        try {
            Hashtable env = new Hashtable<>();
            env.put("java.naming.factory.initial", "com.sun.jndi.dns.DnsContextFactory");
            DirContext ctx = new InitialDirContext(env);
            
            Attributes attrs = ctx.getAttributes(domain, new String[]{"MX"});
            Attribute mxAttr = attrs.get("MX");
            
            if (mxAttr != null) {
                NamingEnumeration enum = mxAttr.getAll();
                while (enum.hasMore()) {
                    String record = (String) enum.next();
                    // 格式: "10 mail.example.com."
                    String[] parts = record.split("\\s+");
                    String host = parts.length > 1 ? parts[1] : parts[0];
                    // 去除末尾點
                    if (host.endsWith(".")) host = host.substring(0, host.length() - 1);
                    hosts.add(host);
                }
            }
            // 無 MX 記錄時嘗試 A 記錄
            if (hosts.isEmpty()) {
                attrs = ctx.getAttributes(domain, new String[]{"A"});
                Attribute aAttr = attrs.get("A");
                if (aAttr != null) {
                    NamingEnumeration enum = aAttr.getAll();
                    while (enum.hasMore()) hosts.add((String) enum.next());
                }
            }
        } catch (NamingException e) {
            // DNS 查詢失敗
        }
        return hosts;
    }

    /**
     * SMTP 會話驗證
     */
    private static boolean validateViaSmtp(String mxHost, String email) {
        try (Socket socket = new Socket()) {
            socket.connect(new InetSocketAddress(mxHost, SMTP_PORT), TIMEOUT_MS);
            socket.setSoTimeout(TIMEOUT_MS);
            
            BufferedReader reader = new BufferedReader(new InputStreamReader(socket.getInputStream()));
            BufferedWriter writer = new BufferedWriter(new OutputStreamWriter(socket.getOutputStream()));
            
            // 讀取歡迎信息
            String line = readLine(reader);
            if (line == null || !line.startsWith("220")) return false;
            
            // EHLO
            sendCommand(writer, "EHLO " + LOCAL_HOSTNAME);
            line = readMultilineResponse(reader);
            if (line == null || !line.startsWith("250")) return false;
            
            // MAIL FROM
            sendCommand(writer, "MAIL FROM:<" + MAIL_FROM + ">");
            line = readLine(reader);
            if (line == null || !line.startsWith("250")) return false;
            
            // RCPT TO - 關鍵步驟
            sendCommand(writer, "RCPT TO:<" + email + ">");
            line = readLine(reader);
            
            // QUIT
            sendCommand(writer, "QUIT");
            readLine(reader);
            
            return line != null && (line.startsWith("250") || line.startsWith("251"));
            
        } catch (IOException e) {
            // 連接失敗、超時等視為無法驗證
            return false;
        }
    }

    private static void sendCommand(BufferedWriter writer, String cmd) throws IOException {
        writer.write(cmd + "\r\n");
        writer.flush();
    }

    private static String readLine(BufferedReader reader) throws IOException {
        return reader.readLine();
    }

    private static String readMultilineResponse(BufferedReader reader) throws IOException {
        String line;
        StringBuilder sb = new StringBuilder();
        while ((line = reader.readLine()) != null) {
            sb.append(line).append("\n");
            if (line.length() >= 4 && line.charAt(3) != '-') break; // 最後一行
        }
        return sb.toString().trim();
    }

    // 批量驗證 (去重 + 並發)
    public static Map validateBatch(List emails, int concurrency) {
        Map results = new ConcurrentHashMap<>();
        // 實際可用線程池 + 信號量控制併發
        emails.parallelStream().forEach(email -> results.put(email, validate(email)));
        return results;
    }
}

生產環境優化方案

1. 綠色驗證：不發送實際郵件

上述方法僅執行到 RCPT TO，隨後發送 QUIT，不發送 DATA，因此不會向目標郵箱發送任何郵件，屬於「綠色驗證」。

public boolean isCatchAllDomain(String domain) {
    // 生成 3 個隨機不存在的用戶名
    for (int i = 0; i < 3; i++) {
        String randomUser = "nonexist_" + UUID.randomUUID().toString().substring(0, 8) + "@" + domain;
        if (!validate(randomUser)) {
            return false; // 有不存在的，非 catch-all
        }
    }
    return true; // 全存在，極大概率 catch-all
}

// 生產者: 提交驗證任務到隊列
// 消費者: 線程池消費，調用 validate(), 結果寫入 DB/Redis
// Webhook/回調: 驗證完成通知業務方