|
|
|
各位先看一下下面的日志:<br>
Wed 2005-06-15 11:58:49: [984:9914:1] Accepting SMTP connection from [218.71.173.161 : 1473]<br>
Wed 2005-06-15 11:58:49: [984:9914:1] --> 220 abc.com ESMTP MDaemon 6.8.4; Wed, 15 Jun 2005 11:58:49 +0800<br>
Wed 2005-06-15 11:58:49: [984:9914:1] <-- EHLO abc.com<br>
Wed 2005-06-15 11:58:49: [984:9914:1] --> 250-abc.com Hello abc.com, pleased to meet you<br>
Wed 2005-06-15 11:58:49: [984:9914:1] --> 250-ETRN<br>
Wed 2005-06-15 11:58:49: [984:9914:1] --> 250-AUTH=LOGIN<br>
Wed 2005-06-15 11:58:49: [984:9914:1] --> 250-AUTH LOGIN CRAM-MD5<br>
Wed 2005-06-15 11:58:49: [984:9914:1] --> 250-8BITMIME<br>
Wed 2005-06-15 11:58:49: [984:9914:1] --> 250 SIZE 0<br>
Wed 2005-06-15 11:58:50: [984:9914:1] <-- MAIL FROM: <mssupport@gbrands.com><br>
Wed 2005-06-15 11:58:50: [984:9914:1] Performing reverse lookup on gbrands.com (looking for 218.71.173.161)<br>
Wed 2005-06-15 11:58:50: [984:9914:1] D=gbrands.com TTL=(40) A=[213.131.64.65]<br>
Wed 2005-06-15 11:58:51: [984:9914:1] P=400 D=gbrands.com TTL=(60) MX=[gbrands.com.mail8.psmtp.com] {64.18.5.10}<br>
Wed 2005-06-15 11:58:51: [984:9914:1] P=300 D=gbrands.com TTL=(60) MX=[gbrands.com.mail7.psmtp.com]<br>
Wed 2005-06-15 11:58:51: [984:9914:1] P=200 D=gbrands.com TTL=(60) MX=[gbrands.com.mail6.psmtp.com]<br>
Wed 2005-06-15 11:58:51: [984:9914:1] P=100 D=gbrands.com TTL=(60) MX=[gbrands.com.mail5.psmtp.com] {64.18.5.10}<br>
Wed 2005-06-15 11:58:54: [984:9914:1] D=gbrands.com.mail7.psmtp.com TTL=(240) A=[64.18.5.10]<br>
Wed 2005-06-15 11:58:54: [984:9914:1] D=gbrands.com.mail6.psmtp.com TTL=(240) A=[64.18.5.10]<br>
Wed 2005-06-15 11:58:54: [984:9914:1] --> 250 <mssupport@gbrands.com>, Sender ok<br>
Wed 2005-06-15 11:58:54: [984:9914:1] <-- RCPT TO: <jeff@abc.com><br>
Wed 2005-06-15 11:58:54: [984:9914:1] --> 250 <jeff@abc.com>, Recipient ok<br>
Wed 2005-06-15 11:58:54: [984:9914:1] <-- DATA<br>
通过日志分析,好象此邮件来自本地,或者是局域网,但是显示的地址确实一个外部ip,同时,根据系统的查找,地址和所连接的地址又不符。请问大家,这种ip是否可以伪装,如果可以伪装,那么如何得到正确的ip,同时对于此种地址,如何拒绝接收????曾经尝试过使用反向的地址查询,但是这样的话,会把整个局欲网内部的邮件都屏蔽掉。该如何设置?<br>
<br>
请各位高手指教。 |
|