|
|
汉,这两天忙联系中继服务的事,后来发现可能是邮件地址被盗了,很多个,由不同的IP地址发过来的垃圾邮件,邮件主题和内容差不多,但不是完全一样,都是自己发自己,有什么办法屏避这些垃圾邮件?
ps:我们的邮件服务器是放在公司的局域网内,通过端口映射来实现IP绑定的,而且网内的IP是192。168。0。250,没有真正的IP地址
两段日志:
Wed 2009-02-25 09:22:33: Session 9547; child 2; thread 1052
Wed 2009-02-25 09:22:28: 接收 SMTP 来自[200.117.194.84 : 29498]的连接
Wed 2009-02-25 09:22:28: Looking up PTR record for 200.117.194.84 (84.194.117.200.IN-ADDR.ARPA)
Wed 2009-02-25 09:22:28: D=84.194.117.200.IN-ADDR.ARPA TTL=(1440) PTR=[host84.200-117-194.telecom.net.ar]
Wed 2009-02-25 09:22:28: Gathering A-records for PTR hosts
Wed 2009-02-25 09:22:28: D=host84.200-117-194.telecom.net.ar TTL=(120) A=[200.117.194.84]
Wed 2009-02-25 09:22:28: --> 220 wollamgroup.com ESMTP MDaemon 7.2.1; Wed, 25 Feb 2009 09:22:28 +0800
Wed 2009-02-25 09:22:29: <-- HELO host84.200-117-194.telecom.net.ar
Wed 2009-02-25 09:22:29: Performing lookup on host84.200-117-194.telecom.net.ar (looking for 200.117.194.84)
Wed 2009-02-25 09:22:29: D=host84.200-117-194.telecom.net.ar TTL=(119) A=[200.117.194.84]
Wed 2009-02-25 09:22:29: --> 250 wollamgroup.com Hello host84.200-117-194.telecom.net.ar, 很高兴见到你
Wed 2009-02-25 09:22:30: <-- MAIL FROM:<zhor@wollamgroup.com>
Wed 2009-02-25 09:22:30: --> 250 <zhor@wollamgroup.com> , 发信人完成。
Wed 2009-02-25 09:22:30: <-- RCPT TO:<zhor@wollamgroup.com>
Wed 2009-02-25 09:22:33: --> 250 <zhor@wollamgroup.com>, 收信人完成。
Wed 2009-02-25 09:22:33: <--
Wed 2009-02-25 09:22:33: --> 500 什么? 我不理解这个。
Wed 2009-02-25 09:22:33: <-- .
Wed 2009-02-25 09:22:33: --> 500 什么? 我不理解这个。
Wed 2009-02-25 09:22:33: <-- QUIT
Wed 2009-02-25 09:22:33: --> 221 下回见
Wed 2009-02-25 09:22:33: SMTP 连接成功完成(字节入/出: 117/298)
第二段:
Wed 2009-02-25 03:41:09: Session 8192; child 8; thread 1412
Wed 2009-02-25 03:41:07: 接收 SMTP 来自[92.85.96.44 : 60801]的连接
Wed 2009-02-25 03:41:07: Looking up PTR record for 92.85.96.44 (44.96.85.92.IN-ADDR.ARPA)
Wed 2009-02-25 03:41:07: 名称服务器报告域名未知
Wed 2009-02-25 03:41:07: --> 220 wollamgroup.com ESMTP MDaemon 7.2.1; Wed, 25 Feb 2009 03:41:07 +0800
Wed 2009-02-25 03:41:07: <-- HELO alston.com
Wed 2009-02-25 03:41:07: Performing lookup on alston.com (looking for 92.85.96.44)
Wed 2009-02-25 03:41:08: D=alston.com TTL=(1440) A=[12.192.18.94]
Wed 2009-02-25 03:41:08: --> 250 wollamgroup.com Hello alston.com(可能被伪造), 很高兴见到你
Wed 2009-02-25 03:41:08: <-- MAIL FROM:<luciashi@wollamgroup.com>
Wed 2009-02-25 03:41:08: --> 250 <luciashi@wollamgroup.com> , 发信人完成。
Wed 2009-02-25 03:41:09: <-- RCPT TO:<luciashi@wollamgroup.com>
Wed 2009-02-25 03:41:09: --> 250 <luciashi@wollamgroup.com>, 收信人完成。
Wed 2009-02-25 03:41:09: <--
Wed 2009-02-25 03:41:09: --> 500 什么? 我不理解这个。
Wed 2009-02-25 03:41:09: <-- .
Wed 2009-02-25 03:41:09: --> 500 什么? 我不理解这个。
Wed 2009-02-25 03:41:09: <-- QUIT
Wed 2009-02-25 03:41:09: --> 221 下回见
Wed 2009-02-25 03:41:09: SMTP 连接成功完成(字节入/出: 102/295 |
|