看日志，对于这种*意垃圾邮件如何防范？

huanghuhai

SMTP日志如下，最近本公司Exchange2003每天收到大量含病毒附件的垃圾邮件，而且估计它们用用户字典功能，有被猜中本域地址的有没中的，我已经装了卡巴斯基，连病毒尸体也一起干掉了，可是，我希望Exchange2003能阻拦，假如不用第三方软硬件的情况下，如何应对？<br>
61.149.105.234, unefp.com, 2005-12-5, 17:56:18, SMTPSVC1, EXSERVER, 10.160.0.3, 0, 27, 29, 250, 0, RCPT, -, TO: <lijihong@本域>,<br>
61.149.105.234, unefp.com, 2005-12-5, 17:56:18, SMTPSVC1, EXSERVER, 10.160.0.3, 0, 28, 30, 250, 0, RCPT, -, TO: <hjczy4644@本域>,<br>
61.149.105.234, unefp.com, 2005-12-5, 17:56:18, SMTPSVC1, EXSERVER, 10.160.0.3, 0, 23, 25, 250, 0, RCPT, -, TO: <wang@本域>,<br>
61.149.105.234, unefp.com, 2005-12-5, 17:56:18, SMTPSVC1, EXSERVER, 10.160.0.3, 0, 32, 34, 250, 0, RCPT, -, TO: <wanghanhui519@本域>,<br>
61.149.105.234, unefp.com, 2005-12-5, 17:56:18, SMTPSVC1, EXSERVER, 10.160.0.3, 0, 31, 33, 250, 0, RCPT, -, TO: <wangyaxin705@本域>,<br>
61.149.105.234, unefp.com, 2005-12-5, 17:56:18, SMTPSVC1, EXSERVER, 10.160.0.3, 0, 32, 34, 250, 0, RCPT, -, TO: <xinghongchang@本域>,<br>
61.149.105.234, unefp.com, 2005-12-5, 17:56:18, SMTPSVC1, EXSERVER, 10.160.0.3, 0, 33, 35, 250, 0, RCPT, -, TO: <hongchangqipei@本域>,<br>
61.149.105.234, unefp.com, 2005-12-5, 17:56:18, SMTPSVC1, EXSERVER, 10.160.0.3, 0, 33, 35, 250, 0, RCPT, -, TO: <renxiaohui2005@本域>,<br>
61.149.105.234, unefp.com, 2005-12-5, 17:56:18, SMTPSVC1, EXSERVER, 10.160.0.3, 0, 31, 33, 250, 0, RCPT, -, TO: <chenheng0720@本域>,<br>
61.149.105.234, unefp.com, 2005-12-5, 17:56:18, SMTPSVC1, EXSERVER, 10.160.0.3, 0, 24, 26, 250, 0, RCPT, -, TO: <zycxs@本域>,<br>
61.149.105.234, unefp.com, 2005-12-5, 17:56:20, SMTPSVC1, EXSERVER, 10.160.0.3, 1484, 76864, 119, 250, 0, DATA, -, <4ef735d44baf3db247a@adbhppabg.com>,<br>
61.149.105.234, unefp.com, 2005-12-5, 17:56:20, SMTPSVC1, EXSERVER, 10.160.0.3, 0, 4, 61, 240, 10766, QUIT, -, unefp.com,<br>
61.149.105.234, cokiowe.com, 2005-12-5, 18:28:31, SMTPSVC1, EXSERVER, 10.160.0.3, 2937, 16, 41, 250, 0, HELO, -, cokiowe.com,<br>
61.149.105.234, cokiowe.com, 2005-12-5, 18:28:31, SMTPSVC1, EXSERVER, 10.160.0.3, 0, 28, 40, 250, 0, MAIL, -, FROM: <office@xbry.com>,<br>
61.149.105.234, cokiowe.com, 2005-12-5, 18:28:31, SMTPSVC1, EXSERVER, 10.160.0.3, 766, 25, 0, 250, 0, RCPT, -, TO: <xingyf@本域>,<br>
61.149.105.234, cokiowe.com, 2005-12-5, 18:28:31, SMTPSVC1, EXSERVER, 10.160.0.3, 0, 31, 33, 250, 0, RCPT, -, TO: <wanganhui519@本域>,<br>
61.149.105.234, cokiowe.com, 2005-12-5, 18:28:32, SMTPSVC1, EXSERVER, 10.160.0.3, 0, 25, 27, 250, 0, RCPT, -, TO: <azg212@本域>,<br>
61.149.105.234, cokiowe.com, 2005-12-5, 18:28:32, SMTPSVC1, EXSERVER, 10.160.0.3, 0, 26, 28, 250, 0, RCPT, -, TO: <zgb-002@本域>,<br>
61.149.105.234, cokiowe.com, 2005-12-5, 18:28:32, SMTPSVC1, EXSERVER, 10.160.0.3, 0, 29, 31, 250, 0, RCPT, -, TO: <junxie1234@本域>,<br>
61.149.105.234, cokiowe.com, 2005-12-5, 18:28:32, SMTPSVC1, EXSERVER, 10.160.0.3, 0, 30, 32, 250, 0, RCPT, -, TO: <liuqing_zyc@本域>,<br>
61.149.105.234, cokiowe.com, 2005-12-5, 18:28:32, SMTPSVC1, EXSERVER, 10.160.0.3, 0, 25, 27, 250, 0, RCPT, -, TO: <fyqfyz@本域>,<br>
61.149.105.234, cokiowe.com, 2005-12-5, 18:28:32, SMTPSVC1, EXSERVER, 10.160.0.3, 0, 25, 27, 250, 0, RCPT, -, TO: <HZJ207@本域>,<br>
61.149.105.234, cokiowe.com, 2005-12-5, 18:28:32, SMTPSVC1, EXSERVER, 10.160.0.3, 0, 32, 34, 250, 0, RCPT, -, TO: <zhangjie_1962@本域>,<br>
61.149.105.234, cokiowe.com, 2005-12-5, 18:28:32, SMTPSVC1, EXSERVER, 10.160.0.3, 0, 34, 36, 250, 0, RCPT, -, TO: <Huangyuping1963@本域>,<br>
61.149.105.234, cokiowe.com, 2005-12-5, 18:28:32, SMTPSVC1, EXSERVER, 10.160.0.3, 0, 24, 26, 250, 0, RCPT, -, TO: <mq_sm@本域>,<br>
61.149.105.234, cokiowe.com, 2005-12-5, 18:28:32, SMTPSVC1, EXSERVER, 10.160.0.3, 0, 25, 27, 250, 0, RCPT, -, TO: <mdjyyw@本域>,<br>
61.149.105.234, cokiowe.com, 2005-12-5, 18:28:32, SMTPSVC1, EXSERVER, 10.160.0.3, 0, 28, 30, 250, 0, RCPT, -, TO: <wangyaxin@本域>,<br>
61.149.105.234, cokiowe.com, 2005-12-5, 18:28:32, SMTPSVC1, EXSERVER, 10.160.0.3, 0, 34, 36, 250, 0, RCPT, -, TO: <xinhongchangljs@本域>,<br>
61.149.105.234, cokiowe.com, 2005-12-5, 18:28:32, SMTPSVC1, EXSERVER, 10.160.0.3, 0, 22, 24, 250, 0, RCPT, -, TO: <yte@本域>,

yinjie

本域的不能阻拦，用EX2003的收件人筛选的筛选不在目录中的用户可以实现阻拦不存在的受件人，存在的无法解决。

huanghuhai

谢谢回答，我再研究研究“收件人筛选”的使用。有问题再麻烦各位。

huanghuhai

再问，是否在收件人筛选中“筛选不在目录中的收件人”打勾就可以了？

kevin_kowk

建议还是安装一个邮件网关，对于拦截这样的病毒邮件和垃圾邮件会比较有效！

bluesky_007

那exchange 2000內怎麼處理呢?我也存在與你一樣的情況,我找了些時間2000里沒發現有設置篩選組織內收件人?

yinjie

已经明确的告诉你做不到了。

yinjie

不要乱说，邮件网关可以拦截掉这些邮件？那要是这样，我发给你邮件你不是也收不到了？组织内传递不属于RELAY，因此网关不会做处理的，最多是将收件人不存在的筛选掉。有的绝对不会去做筛选（除非你有什么KEYWORD之类规则）。<br>
<br>
EX2000没有这一功能，需要借助第三方软件实现。

bluesky_007

這樣的郵件還是由於W32.Sober.X@mm病毒引起的,exchange 2000服務器只是一直被灌這种垃圾郵件,有什麼好的方法根治還請指教,ths

wendenwu

我用的是EX5.5，也是每天收到大量的这些邮件，不知道有什么好的方法或软件。请各位大哥指教。