收发邮件都被隔离了
今天上午的邮件一封也没有收到,检查服务器日志发现,自凌晨3点隔离了第一封查出的带病毒邮件后,后面所有的收发邮件(正常邮件)都被隔离了,重启Mdaemon后好了。哪位高手知道是什么原因?如何彻底解决?(10个月前曾经也有一次) 日志应该有说明为什么全隔离了 偶上次隔壁是因为装了杀毒软件
开启了电子邮件监控
而且又没有吧MD文件夹加入例外 日志中是这样写的:(感觉即便是第一封邮件有问题,后面的邮件也不应该全被隔离了吧?而且重起MD后把被隔离的邮件拷回来却能正常发送!)
Thu 2008-05-29 03:51:46: Spam Filter processing e:\mdaemon\queues\local\md50000048782.msg...
Thu 2008-05-29 03:51:46: > Message return-path: st@rc.com
Thu 2008-05-29 03:51:46: > Message from: st@rc.com
Thu 2008-05-29 03:51:46: > Message to: eht@st.cn
Thu 2008-05-29 03:51:46: > Message subject: 2008-05-28 业务1部
Thu 2008-05-29 03:51:46: > Message ID: <2745175.31212004690542.JavaMail.root@mail.rc.com>
Thu 2008-05-29 03:51:46: Start SpamAssassin results
Thu 2008-05-29 03:51:46: -70.30 points, 10.00 required
Thu 2008-05-29 03:51:46: *1.5 SUBJECT_ENCODED_TWICE Subject: MIME encoded twice
Thu 2008-05-29 03:51:46: * -100 USER_IN_WHITELIST From: address is in the whitelist
Thu 2008-05-29 03:51:46: *0.0 HTML_MESSAGE BODY: HTML included in message
Thu 2008-05-29 03:51:46: *0.1 MPART_ALT_DIFF BODY: HTML and text parts are different
Thu 2008-05-29 03:51:46: *0.0 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
Thu 2008-05-29 03:51:46: *8.0 URIBL_PH_SURBL Contains an URL listed in the PH SURBL blocklist
Thu 2008-05-29 03:51:46: *
Thu 2008-05-29 03:51:46: *3.0 URIBL_BLACK Contains a URL listed in the URIBL.com blacklist
Thu 2008-05-29 03:51:46: *
Thu 2008-05-29 03:51:46: *9.0 URIBL_WS_SURBL Contains an URL listed in the WS SURBL blocklist
Thu 2008-05-29 03:51:46: *
Thu 2008-05-29 03:51:46: *8.0 URIBL_SC_SURBL Contains an URL listed in the SC SURBL blocklist
Thu 2008-05-29 03:51:46: *
Thu 2008-05-29 03:51:46: *0.0 MIME_HTML_ONLY_MULTI Multipart message only has text/html MIME
Thu 2008-05-29 03:51:46: * parts
Thu 2008-05-29 03:51:46: End SpamAssassin results
Thu 2008-05-29 03:51:46: ----------
Thu 2008-05-29 03:51:46: SecurityPlus AntiVirus processing e:\mdaemon\queues\local\md50000048782.msg...
Thu 2008-05-29 03:51:46: > Message return-path: st@rc.com
Thu 2008-05-29 03:51:46: > Message from: st@rc.com
Thu 2008-05-29 03:51:46: > Message to: eht@st.cn
Thu 2008-05-29 03:51:46: > Message subject: 2008-05-28 业务1部
Thu 2008-05-29 03:51:46: > Message ID: <2745175.31212004690542.JavaMail.root@mail.rc.com>
Thu 2008-05-29 03:51:46: Start SecurityPlus AntiVirus results
Thu 2008-05-29 03:51:46: * pd114397028.hdr could not be scanned
Thu 2008-05-29 03:51:46: * Total attachments scanned : 0 (including multipart/alternatives and message body)
Thu 2008-05-29 03:51:46: * Total attachments infected : 0
Thu 2008-05-29 03:51:46: * Total attachments disinfected: 0
Thu 2008-05-29 03:51:46: * Total errors while scanning: 1
Thu 2008-05-29 03:51:46: * Message moved to e:\mdaemon\cfilter\quarant\md50000000013.msg
Thu 2008-05-29 03:51:46: End of SecurityPlus AntiVirus results
Thu 2008-05-29 03:51:46: ----------
回复 4楼 的帖子
感觉你的SP出故障了。 能说得详细点吗?出什么故障了?是指我的服务器的MDaemon软件出故障了?还是邮件域名提供商那边出故障了?还有,最近发现很多账号下收到以“账号名+广告语”为主题的垃圾邮件,而且发件人的邮箱都是正常的,有些发件人邮箱是某个公司的(这个邮箱在网上能搜到,但从未给任何人使用)。这种邮件一天能收很多封!!真是太烦了!!请问有办法解决吗?
举例:邮箱为asd@sd.cn,则收到的邮件主题为“asd上门免费签约集群网”
回复 6楼 的帖子
SP为你MD的反病毒插件,因为看日志在扫描中发生错误所以才进隔离队列的,建议你先把它禁用一段时间观察下。关于反垃圾邮件的分析需要大量的样本分析,不是三言两语能解决的。 设了个过滤规则,把类似的邮件都删除了!
再问个问题,网上有人说下载更新中文规则库,下载后将Chinese_rules.cf 文件copy到\MDaemon\SpamAssassin\rules 目录下,覆盖原文件。
我下载了,也拷进去了,但好像不起作用,还需要在哪里设置吗? 那个规则里有些不是很好
譬如财务、报价
对生产型企业不太合适
还是手动关键字比较好 确实有些不是很好,我把这个文件中有些感觉不好的删掉了,但是怎样使用?
手动关键字指的是像我那样在内容过滤器中自己建立过滤规则吗?怎样加入多个过滤关键字?
页:
[1]
2
