邮件服务器-邮件系统-邮件技术论坛(BBS)

 找回密码
 会员注册
楼主: heieye104
打印 上一主题 下一主题

[讨论] 垃圾邮件问题

[复制链接]
11
 楼主| 发表于 2008-10-14 15:30:54 | 只看该作者
信任主机里
垃圾邮件过滤里
DNS白名单
12
发表于 2008-10-14 15:38:19 | 只看该作者

回复 11楼 heieye104 的帖子

这么强,能否贴下现在的日志
13
 楼主| 发表于 2008-10-14 15:46:48 | 只看该作者
Tue 2008-10-14 15:09:39: Session 4523; child 11; thread 3432
Tue 2008-10-14 15:09:36: 接受 SMTP 连接来自 [218.30.103.139:43599]
Tue 2008-10-14 15:09:36: Performing PTR lookup (139.103.30.218.IN-ADDR.ARPA)
Tue 2008-10-14 15:09:36: *  D=139.103.30.218.IN-ADDR.ARPA TTL=(502) PTR=[gate.hichina.com]
Tue 2008-10-14 15:09:36: *  Gathering A records...
Tue 2008-10-14 15:09:36: *  D=gate.hichina.com TTL=(10) A=[218.30.103.139]
Tue 2008-10-14 15:09:36: ---- End PTR results
Tue 2008-10-14 15:09:36: --> 220 mail.abc.com ESMTP MDaemon 9.6.4; Tue, 14 Oct 2008 15:09:36 +0800
Tue 2008-10-14 15:09:36: <-- EHLO gate.hichina.com
Tue 2008-10-14 15:09:36: Performing IP lookup (gate.hichina.com)
Tue 2008-10-14 15:09:36: *  D=gate.hichina.com TTL=(10) A=[218.30.103.139]
Tue 2008-10-14 15:09:36: ---- End IP lookup results
Tue 2008-10-14 15:09:36: --> 250-mail.abc.com Hello gate.hichina.com, pleased to meet you
Tue 2008-10-14 15:09:36: --> 250-ETRN
Tue 2008-10-14 15:09:36: --> 250-AUTH=LOGIN
Tue 2008-10-14 15:09:36: --> 250-AUTH LOGIN CRAM-MD5
Tue 2008-10-14 15:09:36: --> 250-8BITMIME
Tue 2008-10-14 15:09:36: --> 250 SIZE 0
Tue 2008-10-14 15:09:36: <-- MAIL From:<sales@hichina.com> SIZE=3875 BODY=8BITMIME
Tue 2008-10-14 15:09:36: Performing IP lookup (hichina.com)
Tue 2008-10-14 15:09:37: *  D=hichina.com TTL=(10) A=[121.199.253.130]
Tue 2008-10-14 15:09:37: *  P=010 S=001 D=hichina.com TTL=(1) MX=[mx.hichina.com]
Tue 2008-10-14 15:09:37: *  P=020 S=000 D=hichina.com TTL=(1) MX=[mxrelay.hichina.com]
Tue 2008-10-14 15:09:37: *  D=hichina.com TTL=(10) A=[121.199.253.130]
Tue 2008-10-14 15:09:37: *  D=hichina.com TTL=(10) A=[121.199.253.130]
Tue 2008-10-14 15:09:37: ---- End IP lookup results
Tue 2008-10-14 15:09:37: Performing SPF lookup (hichina.com / 218.30.103.139)
Tue 2008-10-14 15:09:37: *  Result: none; no SPF record in DNS
Tue 2008-10-14 15:09:37: ---- End SPF results
Tue 2008-10-14 15:09:37: --> 250 <sales@hichina.com>, Sender ok
Tue 2008-10-14 15:09:37: <-- RCPT To:<liyong@abc.com>
Tue 2008-10-14 15:09:37: 执行 DNS-BL 查询(218.30.103.139 - 正在连接 IP)
Tue 2008-10-14 15:09:37: *  zen.spamhaus.org,spamhaus 列出的 $IP$,请参见http://www.spamhaus.org - 失败
Tue 2008-10-14 15:09:37: ---- 结束 DNS-BL 结果
Tue 2008-10-14 15:09:37: --> 250 <liyong@abc.com>, Recipient ok
Tue 2008-10-14 15:09:37: <-- DATA
Tue 2008-10-14 15:09:37: Creating temp file (SMTP): d:\mdaemon\queues\temp\md50000016736.tmp
Tue 2008-10-14 15:09:37: --> 354 Enter mail, end with <CRLF>.<CRLF>
Tue 2008-10-14 15:09:37: Message size: 4193 bytes
Tue 2008-10-14 15:09:37: Performing DKIM lookup
Tue 2008-10-14 15:09:37: *  File: d:\mdaemon\queues\temp\md50000016736.tmp
Tue 2008-10-14 15:09:37: *  Message-ID: 200810140708.m9E78tLv008506@gate.hichina.com
Tue 2008-10-14 15:09:37: *  Result: neutral
Tue 2008-10-14 15:09:37: ---- End DKIM results
Tue 2008-10-14 15:09:37: Performing DomainKeys lookup (Sender: sales@hichina.com)
Tue 2008-10-14 15:09:37: *  File: d:\mdaemon\queues\temp\md50000016736.tmp
Tue 2008-10-14 15:09:37: *  Message-ID: 200810140708.m9E78tLv008506@gate.hichina.com
Tue 2008-10-14 15:09:37: *  Querying for policy: hichina.com
Tue 2008-10-14 15:09:37: *    Querying: _domainkey.hichina.com ...
Tue 2008-10-14 15:09:37: *    DNS: *  名称服务器报告未知的域名
Tue 2008-10-14 15:09:37: *  Result: neutral
Tue 2008-10-14 15:09:37: ---- End DomainKeys results
Tue 2008-10-14 15:09:37: Passing message through AntiVirus (Size: 4193)...
Tue 2008-10-14 15:09:37: *  例外列表里的收件人或发件人
Tue 2008-10-14 15:09:37: ---- End AntiVirus results
Tue 2008-10-14 15:09:37: Passing message through Outbreak Protection...
Tue 2008-10-14 15:09:37: *  Message-ID: 200810140708.m9E78tLv008506@gate.hichina.com
Tue 2008-10-14 15:09:37: *  Reference-ID: str=0001.0A150204.48F445B4.0011,ss=1,fgs=0
Tue 2008-10-14 15:09:37: *  Virus result: 0 - Clean
Tue 2008-10-14 15:09:37: *  Spam result: 1 - Clean
Tue 2008-10-14 15:09:37: *  IWF result: 0 - Clean
Tue 2008-10-14 15:09:37: ---- End Outbreak Protection results
Tue 2008-10-14 15:09:37: Passing message through Spam Filter (Size: 4193)...
Tue 2008-10-14 15:09:38: *  0.4 X_PRIORITY_HIGH Sent with 'X-Priority' set to high
Tue 2008-10-14 15:09:38: *  3.0 MDAEMON_DNSBL MDaemon: marked by MDaemon's DNSBL
Tue 2008-10-14 15:09:38: *  4.1 FROM_ILLEGAL_CHARS From: has too many raw illegal characters
Tue 2008-10-14 15:09:38: *  4.3 SUBJ_ILLEGAL_CHARS Subject: has too many raw illegal characters
Tue 2008-10-14 15:09:38: *  1.6 HEAD_ILLEGAL_CHARS Headers have too many raw illegal characters
Tue 2008-10-14 15:09:38: *  0.1 HTML_50_60 BODY: Message is 50% to 60% HTML
Tue 2008-10-14 15:09:38: *  1.9 HTML_IMAGE_ONLY_28 BODY: HTML: images with 2400-2800 bytes of words
Tue 2008-10-14 15:09:38: *  1.8 HTML_OBFUSCATE_10_20 BODY: Message is 10% to 20% HTML obfuscation
Tue 2008-10-14 15:09:38: *  0.0 HTML_MESSAGE BODY: HTML included in message
Tue 2008-10-14 15:09:38: *   10 BAYES_99 BODY: Bayesian spam probability is 99 to 100%
Tue 2008-10-14 15:09:38: *      [score: 1.0000]
Tue 2008-10-14 15:09:38: *  0.0 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
Tue 2008-10-14 15:09:38: *  0.2 MIME_BASE64_NO_NAME RAW: base64 attachment does not have a file name
Tue 2008-10-14 15:09:38: *  1.9 MIME_BASE64_TEXT RAW: Message text disguised using base64 encoding
Tue 2008-10-14 15:09:38: *  0.2 MIME_BASE64_BLANKS RAW: Extra blank lines in base64 encoding
Tue 2008-10-14 15:09:38: *  3.0 URIBL_BLACK Contains a URL listed in the URIBL.com blacklist
Tue 2008-10-14 15:09:38: *      [URIs: eachnic.com www.net.cn www.com.cn]
Tue 2008-10-14 15:09:38: [hichina.com]
Tue 2008-10-14 15:09:38: *  1.1 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag
Tue 2008-10-14 15:09:38: *  1.6 MISSING_MIMEOLE Message has X-MSMail-Priority, but no X-MimeOLE
Tue 2008-10-14 15:09:38: ---- End SpamAssassin results
Tue 2008-10-14 15:09:38: Spam Filter score/req: 35.30/12.0
Tue 2008-10-14 15:09:38: Message refused because spam score is too high
Tue 2008-10-14 15:09:38: --> 554 Sorry, message looks like SPAM to me
Tue 2008-10-14 15:09:39: <-- QUIT
Tue 2008-10-14 15:09:39: --> 221 See ya in cyberspace
14
发表于 2008-10-14 15:48:49 | 只看该作者

回复 13楼 heieye104 的帖子

对方的发邮件IP太多,现在又是218.30.103.139 了。。。。。。
15
发表于 2008-10-14 15:50:52 | 只看该作者

回复 14楼 wxhsh 的帖子

不过这个信里有from,白名单加*@hichina.com应该有效的吧。
16
 楼主| 发表于 2008-10-14 15:53:42 | 只看该作者
这是要他们手动发的信,我白名单加*@hichina.com 应该是有效的,加完后我还重启了MD,不服不行了
17
发表于 2008-10-14 15:55:53 | 只看该作者

回复 16楼 heieye104 的帖子

对方自动发的程序写的不好,我一般都定义FROM的。
18
 楼主| 发表于 2008-10-14 16:00:01 | 只看该作者
呵,问题是手动的也给挡了,气人呀,换人了,我得找回万网ID密码,这样太不安全了
19
发表于 2008-10-14 16:03:13 | 只看该作者

回复 18楼 heieye104 的帖子

另外有个小问题,其实是MD的BUG,它DNS黑名单两行并一行了,你把原来删了,手动再加下吧。
20
 楼主| 发表于 2008-10-14 16:15:31 | 只看该作者

回复 19楼 wxhsh 的帖子

删了重建还在一行
您需要登录后才可以回帖 登录 | 会员注册

本版积分规则

小黑屋|手机版|Archiver|邮件技术资讯网

GMT+8, 2026-8-5 19:00

Powered by Discuz! X3.2

© 2001-2016 Comsenz Inc.

本论坛为非盈利中立机构,所有言论属发表者个人意见,不代表本论坛立场。内容所涉及版权和法律相关事宜请参考各自所有者的条款。
如认定侵犯了您权利,请联系我们。本论坛原创内容请联系后再行转载并务必保留我站信息。此声明修改不另行通知,保留最终解释权。
*本论坛会员专属QQ群:邮件技术资讯网会员QQ群
*本论坛会员备用QQ群:邮件技术资讯网备用群

快速回复 返回顶部 返回列表