有人盗用服务器发信，各位给参谋参谋

kelvinxiao

Wed 2005-08-17 02:50:45: Session 5889; child 1<br>
Wed 2005-08-17 02:50:45: Parsing Message <d:\mdaemon\remoteq\pd75000013842.msg><br>
<font color="red">Wed 2005-08-17 02:50:45: From: (sender not specified)</font><br>
Wed 2005-08-17 02:50:45: To: jin.feng99@163.com<br>
Wed 2005-08-17 02:50:45: Subject: Warning: hb@mergers-china.com - User unknown!<br>
Wed 2005-08-17 02:50:45: Message-ID: <MDAEMON0046200508170250.AA5042718@mergers-china.com><br>
Wed 2005-08-17 02:50:45: [163.com]的 MX-record 解析已在进行(DNS 服务: 202.106.196.115)...<br>
Wed 2005-08-17 02:50:45: P=050 D=163.com TTL=(133) MX=[mx.mail.163.com]<br>
Wed 2005-08-17 02:50:45: Attempting MX: P=050 D=163.com TTL=(133) MX=[mx.mail.163.com]<br>
Wed 2005-08-17 02:50:45: 正在试图 SMTP 连接到 [mx.mail.163.com : 25]<br>
Wed 2005-08-17 02:50:45: [mx.mail.163.com]A-record 解析已在进行(DNS 服务器: 202.106.196.115)...<br>
Wed 2005-08-17 02:50:45: D=mx.mail.163.com TTL=(2) A=[220.181.12.61]<br>
Wed 2005-08-17 02:50:45: 正在试图 SMTP 连接到 [220.181.12.61 : 25]<br>
Wed 2005-08-17 02:50:45: 等候 socket 连接...<br>
Wed 2005-08-17 02:50:45: Socket 连接建立(211.157.7.109 : 3604 -> 220.181.12.61 : 25)<br>
Wed 2005-08-17 02:50:45: 等候协议初始化...<br>
Wed 2005-08-17 02:50:45: <-- 220 Coremail SMTP(Anti Spam) System (163com[20050206])<br>
Wed 2005-08-17 02:50:45: --> EHLO mail.mergers-china.com<br>
Wed 2005-08-17 02:50:45: <-- 250-mx11<br>
Wed 2005-08-17 02:50:45: <-- 250-PIPELINING<br>
Wed 2005-08-17 02:50:45: <-- 250-AUTH LOGIN PLAIN NTLM<br>
Wed 2005-08-17 02:50:45: <-- 250-AUTH=LOGIN PLAIN NTLM<br>
Wed 2005-08-17 02:50:45: <-- 250 8BITMIME<br>
Wed 2005-08-17 02:50:45: --> MAIL From:<><br>
Wed 2005-08-17 02:50:45: <-- 250 Ok<br>
Wed 2005-08-17 02:50:45: --> RCPT To:<jin.feng99@163.com><br>
Wed 2005-08-17 02:50:45: <-- 250 Ok<br>
Wed 2005-08-17 02:50:45: --> DATA<br>
Wed 2005-08-17 02:50:45: <-- 354 End data with <CR><LF>.<CR><LF><br>
Wed 2005-08-17 02:50:45: 正在发送 <d:\mdaemon\remoteq\pd75000013842.msg> 到 [220.181.12.61]<br>
Wed 2005-08-17 02:50:45: 发送完成。<br>
Wed 2005-08-17 02:50:45: <-- 250 Ok: queued as McCpWXU0AkP+GEMA.1<br>
Wed 2005-08-17 02:50:45: --> QUIT<br>
Wed 2005-08-17 02:50:45: <-- 221 Bye<br>
Wed 2005-08-17 02:50:45: SMTP 连接成功完成(字节入/出: 250/4392)<br>
<br>
<font color="red">拒绝中转和SMTP认证发送都已经设了，此人老是深夜发信，好几天了，怎样把他拒绝掉呀</font>

lisj

是本地帐号，就不用我说了，删了就行<br>
拒绝中继后，应该非本地帐号不能从你处转发<br>
还有就是要注意一下Postmaster等管理员帐号，有些人就是以这个帐号来发送的，我以前也遇到过，后来删了这个帐号，就没有出现过，最后就是SMTP验证，包括选上“来自Postmaster别名的帐号也需要验证“<br>
试试吧