邮件服务器-邮件系统-邮件技术论坛(BBS)

标题: 我的邮件服务器怎么老出现这个问题，收不到好多信，我不知道怎么设置，大哥们帮帮忙 [打印本页]

作者: hejiy 时间: 2009-4-29 10:29
标题: 我的邮件服务器怎么老出现这个问题，收不到好多信，我不知道怎么设置，大哥们帮帮忙
Wed 2009-04-29 09:59:25: Session 2676; child 1; thread 1680
Wed 2009-04-29 09:59:19: Accepting SMTP connection from [119.42.238.234:15471]
Wed 2009-04-29 09:59:19: Performing PTR lookup (234.238.42.119.IN-ADDR.ARPA)
Wed 2009-04-29 09:59:19: *  D=234.238.42.119.IN-ADDR.ARPA TTL=(120) PTR=[mx34.cnz.alimama.com]
Wed 2009-04-29 09:59:19: *  Gathering A records...
Wed 2009-04-29 09:59:19: *  D=mx34.cnz.alimama.com TTL=(120) A=[119.42.238.234]
Wed 2009-04-29 09:59:19: ---- End PTR results
Wed 2009-04-29 09:59:19: --> 220 yiidiy.com ESMTP MDaemon 9.6.1; Wed, 29 Apr 2009 09:59:19 +0800
Wed 2009-04-29 09:59:19: <-- EHLO mx34.cnz.alimama.com
Wed 2009-04-29 09:59:19: Performing IP lookup (mx34.cnz.alimama.com)
Wed 2009-04-29 09:59:19: *  D=mx34.cnz.alimama.com TTL=(120) A=[119.42.238.234]
Wed 2009-04-29 09:59:19: ---- End IP lookup results
Wed 2009-04-29 09:59:19: --> 250-yiidiy.com Hello mx34.cnz.alimama.com, pleased to meet you
Wed 2009-04-29 09:59:19: --> 250-ETRN
Wed 2009-04-29 09:59:19: --> 250-AUTH=LOGIN
Wed 2009-04-29 09:59:19: --> 250-AUTH LOGIN CRAM-MD5
Wed 2009-04-29 09:59:19: --> 250-8BITMIME
Wed 2009-04-29 09:59:19: --> 250 SIZE 0
Wed 2009-04-29 09:59:19: <-- MAIL FROM:<vip-noreply@mail.alimama.com> SIZE=5293
Wed 2009-04-29 09:59:19: Performing IP lookup (mail.alimama.com)
Wed 2009-04-29 09:59:19: *  D=mail.alimama.com TTL=(10) A=[119.42.225.165]
Wed 2009-04-29 09:59:19: *  P=005 S=001 D=mail.alimama.com TTL=(10) MX=[mail.alimama.com]
Wed 2009-04-29 09:59:19: *  P=010 S=000 D=mail.alimama.com TTL=(10) MX=[mail2.alimama.com]
Wed 2009-04-29 09:59:19: *  D=mail.alimama.com TTL=(10) A=[119.42.225.165]
Wed 2009-04-29 09:59:19: *  D=mail.alimama.com TTL=(10) A=[119.42.225.165]
Wed 2009-04-29 09:59:19: ---- End IP lookup results
Wed 2009-04-29 09:59:19: Performing SPF lookup (mail.alimama.com / 119.42.238.234)
Wed 2009-04-29 09:59:20: *  Result: none; no SPF record in DNS
Wed 2009-04-29 09:59:20: ---- End SPF results
Wed 2009-04-29 09:59:20: --> 250 <vip-noreply@mail.alimama.com>, Sender ok
Wed 2009-04-29 09:59:20: <-- RCPT TO:<contact@52jt.net>
Wed 2009-04-29 09:59:20: --> 250 <contact@52jt.net>, Recipient ok
Wed 2009-04-29 09:59:20: <-- DATA
Wed 2009-04-29 09:59:20: Creating temp file (SMTP): e:\mdaemon\queues\temp\md50000002644.tmp
Wed 2009-04-29 09:59:20: --> 354 Enter mail, end with <CRLF>.<CRLF>
Wed 2009-04-29 09:59:20: Message size: 5420 bytes
Wed 2009-04-29 09:59:20: Performing DKIM lookup
Wed 2009-04-29 09:59:20: *  File: e:\mdaemon\queues\temp\md50000002644.tmp
Wed 2009-04-29 09:59:20: *  Message-ID: 15969642.140621240970357474.JavaMail.yahoo@smtp.vip.cnz.alimama.com
Wed 2009-04-29 09:59:20: *  Result: neutral
Wed 2009-04-29 09:59:20: ---- End DKIM results
Wed 2009-04-29 09:59:20: Performing DomainKeys lookup (Sender: vip-noreply@mail.alimama.com)
Wed 2009-04-29 09:59:20: *  File: e:\mdaemon\queues\temp\md50000002644.tmp
Wed 2009-04-29 09:59:20: *  Message-ID: 15969642.140621240970357474.JavaMail.yahoo@smtp.vip.cnz.alimama.com
Wed 2009-04-29 09:59:20: *  Querying for policy: mail.alimama.com
Wed 2009-04-29 09:59:20: * Querying: _domainkey.mail.alimama.com ...
Wed 2009-04-29 09:59:20: * DNS: *  Name server reports domain name unknown
Wed 2009-04-29 09:59:20: *  Result: pass
Wed 2009-04-29 09:59:20: ---- End DomainKeys results
Wed 2009-04-29 09:59:20: Passing message through AntiVirus (Size: 5420)...
Wed 2009-04-29 09:59:20: *  Message is clean (no viruses found)
Wed 2009-04-29 09:59:20: ---- End AntiVirus results
Wed 2009-04-29 09:59:20: Passing message through Outbreak Protection...
Wed 2009-04-29 09:59:20: *  Message-ID: 15969642.140621240970357474.JavaMail.yahoo@smtp.vip.cnz.alimama.com
Wed 2009-04-29 09:59:20: *  Reference-ID: str=0001.0A150204.49F7B476.001C:SCFSTAT3905930,ss=1,pt=DBB_65838,fgs=0
Wed 2009-04-29 09:59:20: *  Virus result: 0 - Clean
Wed 2009-04-29 09:59:20: *  Spam result: 1 - Clean
Wed 2009-04-29 09:59:20: *  IWF result: 0 - Clean
Wed 2009-04-29 09:59:20: ---- End Outbreak Protection results
Wed 2009-04-29 09:59:20: Passing message through Spam Filter (Size: 5420)...
Wed 2009-04-29 09:59:20: *  0.8 HTML_IMAGE_ONLY_32 BODY: HTML: images with 2800-3200 bytes of words
Wed 2009-04-29 09:59:20: *  0.0 HTML_MESSAGE BODY: HTML included in message
Wed 2009-04-29 09:59:20: *  0.1 MPART_ALT_DIFF BODY: HTML and text parts are different
Wed 2009-04-29 09:59:20: *  0.0 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
Wed 2009-04-29 09:59:20: *  8.0 URIBL_PH_SURBL Contains an URL listed in the PH SURBL blocklist
Wed 2009-04-29 09:59:20: *    [URIs: alimama.com taobao.com alimama.cn]
Wed 2009-04-29 09:59:20: *  3.0 URIBL_BLACK Contains a URL listed in the URIBL.com blacklist
Wed 2009-04-29 09:59:20: *    [URIs: alimama.com taobao.com alimama.cn]
Wed 2009-04-29 09:59:20: *  9.5 URIBL_OB_SURBL Contains an URL listed in the OB SURBL blocklist
Wed 2009-04-29 09:59:20: *    [URIs: alimama.com taobao.com alimama.cn]
Wed 2009-04-29 09:59:20: *  8.0 URIBL_SC_SURBL Contains an URL listed in the SC SURBL blocklist
Wed 2009-04-29 09:59:20: *    [URIs: alimama.com taobao.com alimama.cn]
Wed 2009-04-29 09:59:20: *  0.5 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag
Wed 2009-04-29 09:59:20: *  0.0 MIME_HTML_ONLY_MULTI Multipart message only has text/html MIME parts
Wed 2009-04-29 09:59:20: ---- End SpamAssassin results
Wed 2009-04-29 09:59:20: Spam Filter score/req: 30.00/12.0
Wed 2009-04-29 09:59:20: Message refused because spam score is too high
Wed 2009-04-29 09:59:20: --> 554 Sorry, message looks like SPAM to me
Wed 2009-04-29 09:59:25: <-- QUIT
Wed 2009-04-29 09:59:25: --> 221 See ya in cyberspace
Wed 2009-04-29 09:59:25: SMTP session terminated (Bytes in/out: 5542/403)
Wed 2009-04-29 09:59:25: ----------

作者: wxhsh 时间: 2009-4-29 10:33
标题: 回复 1楼 hejiy 的帖子
这个是老问题了，典型的DNS劫持现象，最好的方法是更换没有被劫持的DNS SERVER。

作者: hejiy 时间: 2009-4-29 11:42
我的邮箱YAHOO,GMAIL,163等都可以收到，但最近发觉ALIMAMA，xinnet等会出现如上的问题，实在不明白，SA的设置基本都是默认的，请大哥们指点啊

作者: wxhsh 时间: 2009-4-29 11:44
可以通过修改\SpamAssassin\rules\80_MDaemon_scores.cf
找到

score URIBL_SBL 4.0
score URIBL_SC_SURBL 8.0
score URIBL_WS_SURBL 9.0
score URIBL_OB_SURBL 9.5
score URIBL_PH_SURBL 8.0
score URIBL_AB_SURBL 8.0
score URIBL_JP_SURBL 8.0

分值部分全换成0.0
不过建议还是先检查下DNS。

作者: hejiy 时间: 2009-4-29 11:53
好的，我再试试，谢谢了

作者: neil.fu 时间: 2009-4-30 11:40
DNS很不问题，可以换一家DNS服务商吗

作者: Kyan 时间: 2009-4-30 23:47
回覆 1樓 hejiy 的帖子

要換 DNS 就要換 ISP 了。

DNS 被劫持在台灣沒有聽說過，這可能是大陸的特產。

從你的被退信的原因（554）看來似乎是疑為寄去是垃圾信。

作者: leungys 时间: 2009-5-1 10:19

原帖由 wxhsh 于 2009-4-29 10:33 发表
这个是老问题了，典型的DNS劫持现象，最好的方法是更换没有被劫持的DNS SERVER。

是的, 同意 !!

作者: Kyan 时间: 2009-5-1 17:36

原帖由 leungys 于 2009-5-1 10:19 发表

是的, 同意 !!

220.207.177.194 是你們大陸的 IP，請看下列說明：

220.207.177.194
Host reachable, 110 ms. average

220.192.0.0 - 220.207.255.255

China United Telecommunications Corporation
No.133,Taiyun Building,Xidan North Street
Xicheng District,Beijing,China

現在他被退件了。請問：是他的 DNS 被劫持？還是我的 DNS 被劫持？不要說得像【天方夜譚】一樣。

Wed 2009-04-29 19:16:08: Session 61; child 1; thread 4456
Wed 2009-04-29 19:16:04: Accepting SMTP connection from [220.207.177.194:15075]
Wed 2009-04-29 19:16:04: Performing PTR lookup (194.177.207.220.IN-ADDR.ARPA)
Wed 2009-04-29 19:16:06: *  Error: *  Name server reports domain name unknown
Wed 2009-04-29 19:16:06: *  No PTR records found
Wed 2009-04-29 19:16:06: ---- End PTR results
Wed 2009-04-29 19:16:06: --> 220 tgshi.net ESMTP MDaemon 10.0.4; Wed, 29 Apr 2009 19:16:06 +0800
Wed 2009-04-29 19:16:06: <-- EHLO dc1.braintimes.local
Wed 2009-04-29 19:16:06: Performing IP lookup (dc1.braintimes.local)
Wed 2009-04-29 19:16:07: *  Error: *  Name server reports domain name unknown
Wed 2009-04-29 19:16:07: ---- End IP lookup results
Wed 2009-04-29 19:16:07: --> 250-tgshi.net Hello dc1.braintimes.local, pleased to meet you
Wed 2009-04-29 19:16:07: --> 250-ETRN
Wed 2009-04-29 19:16:07: --> 250-AUTH=LOGIN
Wed 2009-04-29 19:16:07: --> 250-AUTH LOGIN CRAM-MD5
Wed 2009-04-29 19:16:07: --> 250-8BITMIME
Wed 2009-04-29 19:16:07: --> 250-STARTTLS
Wed 2009-04-29 19:16:07: --> 250 SIZE 0
Wed 2009-04-29 19:16:07: <-- MAIL FROM:<le.benson@msa.hinet.net>
Wed 2009-04-29 19:16:07: Performing IP lookup (msa.hinet.net)
Wed 2009-04-29 19:16:07: *  D=msa.hinet.net TTL=(1440) A=[168.95.4.211]
Wed 2009-04-29 19:16:07: *  P=000 S=000 D=msa.hinet.net TTL=(1440) MX=[msa-mx5.hinet.net] {168.95.6.129}
Wed 2009-04-29 19:16:07: *  P=000 S=001 D=msa.hinet.net TTL=(1440) MX=[msa-mx6.hinet.net]
Wed 2009-04-29 19:16:07: *  P=000 S=002 D=msa.hinet.net TTL=(1440) MX=[msa-mx7.hinet.net]
Wed 2009-04-29 19:16:07: *  P=000 S=003 D=msa.hinet.net TTL=(1440) MX=[msa-mx8.hinet.net]
Wed 2009-04-29 19:16:07: *  P=000 S=004 D=msa.hinet.net TTL=(1440) MX=[msa-mx9.hinet.net]
Wed 2009-04-29 19:16:07: *  P=000 S=005 D=msa.hinet.net TTL=(1440) MX=[msa-mx10.hinet.net]
Wed 2009-04-29 19:16:07: *  P=000 S=006 D=msa.hinet.net TTL=(1440) MX=[msa-mx11.hinet.net]
Wed 2009-04-29 19:16:07: *  P=000 S=007 D=msa.hinet.net TTL=(1440) MX=[msa-mx1.hinet.net]
Wed 2009-04-29 19:16:07: *  P=000 S=008 D=msa.hinet.net TTL=(1440) MX=[msa-mx2.hinet.net]
Wed 2009-04-29 19:16:07: *  P=000 S=009 D=msa.hinet.net TTL=(1440) MX=[msa-mx3.hinet.net]
Wed 2009-04-29 19:16:07: *  P=000 S=010 D=msa.hinet.net TTL=(1440) MX=[msa-mx4.hinet.net]
Wed 2009-04-29 19:16:07: *  D=msa.hinet.net TTL=(1440) A=[168.95.4.211]
Wed 2009-04-29 19:16:07: *  D=msa.hinet.net TTL=(1440) A=[168.95.4.211]
Wed 2009-04-29 19:16:07: *  D=msa.hinet.net TTL=(1440) A=[168.95.4.211]
Wed 2009-04-29 19:16:07: *  D=msa.hinet.net TTL=(1440) A=[168.95.4.211]
Wed 2009-04-29 19:16:07: *  D=msa.hinet.net TTL=(1440) A=[168.95.4.211]
Wed 2009-04-29 19:16:07: *  D=msa.hinet.net TTL=(1440) A=[168.95.4.211]
Wed 2009-04-29 19:16:07: *  D=msa.hinet.net TTL=(1440) A=[168.95.4.211]
Wed 2009-04-29 19:16:07: *  D=msa.hinet.net TTL=(1440) A=[168.95.4.211]
Wed 2009-04-29 19:16:07: *  D=msa.hinet.net TTL=(1440) A=[168.95.4.211]
Wed 2009-04-29 19:16:07: *  D=msa.hinet.net TTL=(1440) A=[168.95.4.211]
Wed 2009-04-29 19:16:07: ---- End IP lookup results
Wed 2009-04-29 19:16:07: Performing SPF lookup (msa.hinet.net / 220.207.177.194)
Wed 2009-04-29 19:16:07: *  Result: none; no SPF record in DNS
Wed 2009-04-29 19:16:07: ---- End SPF results
Wed 2009-04-29 19:16:07: --> 250 <le.benson@msa.hinet.net>, Sender ok
Wed 2009-04-29 19:16:07: <-- RCPT TO:<xxxxx@tgshi.net>
Wed 2009-04-29 19:16:07: --> 250 <xxxxx@tgshi.net>, Recipient ok
Wed 2009-04-29 19:16:07: <-- DATA
Wed 2009-04-29 19:16:07: Creating temp file (SMTP): c:\mdaemon\queues\temp\md50000000004.tmp
Wed 2009-04-29 19:16:07: --> 354 Enter mail, end with <CRLF>.<CRLF>
Wed 2009-04-29 19:16:07: Message size: 4117 bytes
Wed 2009-04-29 19:16:07: Performing DKIM lookup
Wed 2009-04-29 19:16:07: *  File: c:\mdaemon\queues\temp\md50000000004.tmp
Wed 2009-04-29 19:16:07: *  Message-ID: KMXTSFXTPOKWFIMDUWUXP.LDRPUANle.benson@msa.hinet.net
Wed 2009-04-29 19:16:07: *  Result: neutral
Wed 2009-04-29 19:16:07: ---- End DKIM results
Wed 2009-04-29 19:16:07: Performing DomainKeys lookup (Sender: le.benson@msa.hinet.net)
Wed 2009-04-29 19:16:07: *  File: c:\mdaemon\queues\temp\md50000000004.tmp
Wed 2009-04-29 19:16:07: *  Message-ID: KMXTSFXTPOKWFIMDUWUXP.LDRPUANle.benson@msa.hinet.net
Wed 2009-04-29 19:16:07: *  Querying for policy: msa.hinet.net
Wed 2009-04-29 19:16:07: * Querying: _domainkey.msa.hinet.net ...
Wed 2009-04-29 19:16:07: * DNS: *  Name server reports domain name unknown
Wed 2009-04-29 19:16:07: *  Result: neutral
Wed 2009-04-29 19:16:07: ---- End DomainKeys results
Wed 2009-04-29 19:16:07: Passing message through AntiVirus (Size: 4117)...
Wed 2009-04-29 19:16:08: *  Message is clean (no viruses found)
Wed 2009-04-29 19:16:08: ---- End AntiVirus results
Wed 2009-04-29 19:16:08: Passing message through Outbreak Protection...
Wed 2009-04-29 19:16:08: *  Message-ID: KMXTSFXTPOKWFIMDUWUXP.LDRPUANle.benson@msa.hinet.net
Wed 2009-04-29 19:16:08: *  Reference-ID: str=0001.0A150205.49F836F6.008A,ss=4,pt=DBB_65837,fgs=0
Wed 2009-04-29 19:16:08: *  Virus result: 0 - Clean
Wed 2009-04-29 19:16:08: *  Spam result: 4 - Spam (confirmed)
Wed 2009-04-29 19:16:08: *  IWF result: 0 - Clean
Wed 2009-04-29 19:16:08: ---- End Outbreak Protection results
Wed 2009-04-29 19:16:08: --> 554 Sorry, message looks like spam or phish to me (OP)
Wed 2009-04-29 19:16:08: SMTP session terminated (Bytes in/out: 4217/398)

[ 本帖最后由 Kyan 于 2009-5-1 17:52 编辑 ]

作者: leungys 时间: 2009-5-2 07:01
回覆 10樓 Kyan 的帖子

1) Before answering, you must fully understand what I said.

2) Do you know what is the difference between "agree" and "totally agree" ?

3) If not sure what I said, please ask me first. Of course, answering or not is up to me okay !!

4) LLL is a must !!

[ 本帖最后由 leungys 于 2009-5-2 07:31 编辑 ]

作者: Kyan 时间: 2009-5-2 10:10

原帖由 leungys 于 2009-5-2 07:01 发表
回覆 10樓 Kyan 的帖子

1) Before answering, you must fully understand what I said.

2) Do you know what is the difference between "agree" and "totally agree" ?

3) If not sure what I said, pleas ...

碩士先生：

你在回應 2 樓的帖子裡說：「是的，同意！！」。你並沒有說明你所謂的「同意」是那一種 "同意"！在中文裡的「同意」沒有像你在回覆裡所敘述的區別。

作無謂的強辯是沒有意義的，我也不願對此與你爭論。

你可以去 Google 查訽有關「劫持 DNS」或「DNS 被劫持」幾乎都是大陸的說法，似乎對此問題使大陸成為一個無政府狀態。我不認為這是事實，最多只是幾個壞分子在搞鬼，你們為什麽願意承受這種詐騙的行為，而不把他們揪出來移送法辦呢？這是我們不住在大陸的人們所不能理解的事項。也使我們對大陸政府執法能力產生懐疑。請參閱此文 http://www.icannwatch.org/article.pl?sid=07/09/10/0320238&mode=thread 不要再丟中國人的臉了，我也是中國人，看了使我感到羞愧。

[ 本帖最后由 Kyan 于 2009-5-2 10:13 编辑 ]

作者: leungys 时间: 2009-5-2 10:19

原帖由 Kyan 于 2009-5-2 10:10 发表
碩士先生：
你在回應 2 樓的帖子裡說：「是的，同意！！」。你並沒有說明你所謂的「同意」是那一種 "同意"！在中文裡的「同意」沒有像你在回覆裡所敘述的區別。
作無謂的強辯是沒有意義的，我也不願對 ...

LLL is a must ! Okay !! that is !!

作者: Kyan 时间: 2009-5-2 10:35

原帖由 leungys 于 2009-5-2 10:19 发表

LLL is a must ! Okay !! that is !!

我不知道你閱讀 http://www.icannwatch.org/article.pl?sid=07/09/10/0320238&mode=thread 此文以後有何感想？

作者: Kyan 时间: 2009-5-2 11:27

原帖由 hejiy 于 2009-4-29 10:29 发表
Wed 2009-04-29 09:59:25: Session 2676; child 1; thread 1680
Wed 2009-04-29 09:59:19: Accepting SMTP connection from [119.42.238.234:15471]
Wed 2009-04-29 09:59:19: Performing PTR lookup (234.238.42. ...

Wed 2009-04-29 09:59:20: Spam Filter score/req: 30.00/12.0
Wed 2009-04-29 09:59:20: Message refused because spam score is too high

你把 spam score 設得太高了。

作者: leungys 时间: 2009-5-2 13:13

原帖由 Kyan 于 2009-5-2 11:27 发表
Wed 2009-04-29 09:59:20: Spam Filter score/req: 30.00/12.0
Wed 2009-04-29 09:59:20: Message refused because spam score is too high
你把 spam score 設得太高了。

Try one of the followings if #1 wanna solve the problem.

1. Security -> Spam Filter, set DNS service available to NO.
Function: This will skip all of the network based tests that SpamAssassin does including the URIBL and SURBL blocklist checks.

P.S. If DNS(s) used by email server do not function properly (e.g.Kidnapping; unavailable; unstable; invalid DNS cache) and spam filter DNS-service-available-setting being set to "test or yes", the checking results will become wrong. In fact, in this case, I think DNS replacement is needed if still getting no further improvement. I suggest to use the OpenDNS service.
or
2. Add this to your MDaemon\SpamAssassin\Rules\local.cf file:
score URIBL_BLACK 0.0
and modify the MDaemon\SpamAssassin\Rules\80_MDaemon_scores.cf file:
score URIBL_PH_SURBL 8.0 to URIBL_PH_SURBL 0.0
score URIBL_OB_SURBL 9.5 to URIBL_OB_SURBL 0.0
score URIBL_SC_SURBL 8.0 to URIBL_SC_SURBL 0.0

Function: This will remove those four rules from being scored. Other network based test will still be run. Restart MDaemon to reload the spam filter configuration. you may refer to this http://spamassassin.apache.org/tests.html to get ideas about the tags.

Of course, figuring out why alimama.com taobao.com alimama.cn in the blocklist is always useful.

[ 本帖最后由 leungys 于 2009-5-2 18:10 编辑 ]

作者: Kyan 时间: 2009-5-2 15:59

原帖由 leungys 于 2009-5-2 13:13 发表

Try one of the followings if #1 wanna to solve the problem.

1. Security -> Spam Filter, set DNS service available to NO.
Function: This will skip all of the network based tests that SpamAssas ...

1. 憑你的學歷和經驗，早就應該提出一些具有建設性的建議去幫助這些「新手」朋友們解決些問題與困擾，而不必去附和別人「是或不是」。你可知道我很重視你的意見，可是你總是給我失望。

2. OpenDNS service：
208.67.222.222
208.67.220.220

欢迎光临邮件服务器-邮件系统-邮件技术论坛(BBS) (http://bbs.5dmail.net/)