zkhzf 发表于 2008-7-2 15:31:12

这是从smtp（入）日志中节选下来的一段，应该怎么判断垃圾邮件过滤器是否工作了？

Wed 2008-07-02 15:28:09: ----------
Wed 2008-07-02 15:28:15: Session 1167; child 2; thread 2596
Wed 2008-07-02 15:28:15: ?? SMTP ????
Wed 2008-07-02 15:28:15: --> 220 szluckystar.com ESMTP MDaemon 9.6.6; Wed, 02 Jul 2008 15:28:15 +0800
Wed 2008-07-02 15:28:15: <-- HELO mold05
Wed 2008-07-02 15:28:15: --> 250 szluckystar.com Hello mold05, pleased to meet you
Wed 2008-07-02 15:28:15: <-- MAIL FROM: <yan@szluckystar.com>
Wed 2008-07-02 15:28:15: --> 250 <yan@szluckystar.com>, Sender ok
Wed 2008-07-02 15:28:15: <-- RCPT TO: <pmc-13@season-electric.com>
Wed 2008-07-02 15:28:15: --> 250 <pmc-13@season-electric.com>, Recipient ok
Wed 2008-07-02 15:28:15: <-- Data
Wed 2008-07-02 15:28:15: Creating temp file (SMTP): e:\mdaemon\temp\md50000000292.tmp
Wed 2008-07-02 15:28:15: --> 354 Enter mail, end with <CRLF>.<CRLF>
Wed 2008-07-02 15:28:15: Message size: 5806 bytes
Wed 2008-07-02 15:28:15: Passing message through AntiVirus (Size: 5806)...
Wed 2008-07-02 15:28:15: *????(?????)
Wed 2008-07-02 15:28:15: ---- End AntiVirus results
Wed 2008-07-02 15:28:15: ???? successful:e:\mdaemon\inbound\md50000524645.msg
Wed 2008-07-02 15:28:15: --> 250 Ok, message saved <Message-ID: 200807021526105485019@szluckystar.com>
Wed 2008-07-02 15:28:15: <-- QUIT
Wed 2008-07-02 15:28:15: --> 221 See ya in cyberspace
Wed 2008-07-02 15:28:15: SMTP ????(?/???:5907/356)
Wed 2008-07-02 15:28:15: ----------

wxhsh 发表于 2008-7-2 15:42:35

值调整后把以下两个勾勾上：

zkhzf 发表于 2008-7-2 16:00:14

特别感谢wxhsh对此问题的关注！

zkhzf 发表于 2008-7-2 16:04:59

现已按照wxhsh的提示设置了相关的参数。
现在从antispam日志来看，好像没有什么作用，这是今天该日志的所有内容：


START Event Log / MDaemon PRO v9.6.6, AntiSpam log information
-------------------------------------------------------------------------------
Event Time/Date             Event Description
-------------------------------------------------------------------------------
-------------------------------------------------------------------------------
Server ShutdownWed, 02 Jul 2008 11:43:41 +0800
-------------------------------------------------------------------------------

START Event Log / MDaemon PRO v9.6.6, AntiSpam log information
-------------------------------------------------------------------------------
Event Time/Date             Event Description
-------------------------------------------------------------------------------
-------------------------------------------------------------------------------
Server ShutdownWed, 02 Jul 2008 13:35:08 +0800
-------------------------------------------------------------------------------

START Event Log / MDaemon PRO v9.6.6, AntiSpam log information
-------------------------------------------------------------------------------
Event Time/Date             Event Description
-------------------------------------------------------------------------------
-------------------------------------------------------------------------------
Server ShutdownWed, 02 Jul 2008 15:04:18 +0800
-------------------------------------------------------------------------------

START Event Log / MDaemon PRO v9.6.6, AntiSpam log information
-------------------------------------------------------------------------------
Event Time/Date             Event Description
-------------------------------------------------------------------------------

wxhsh 发表于 2008-7-2 16:10:43

回复 14楼 的帖子

此日志只记录拒绝的邮件日志，不过观察下来好象是无效，可能SA引擎出故障了，先重启下再看吧。

zkhzf 发表于 2008-7-2 16:43:36

重启了，感觉好像还是没有工作一样。
看看我的这些设置有没有错。






gallop 发表于 2008-7-2 23:59:33

给点小提议

1.你可以在内容过滤器中，添加适合自己的规则，对不同的垃圾邮件作出不同的处理。
2.在地址址抑制中，添加要过滤的邮件地址。
3.在IP屏蔽中，添加已知的垃圾邮件IP（可以通过nslookup命令查出域名对应的IP）
可以减少一部分垃圾邮件

zkhzf 发表于 2008-7-3 08:40:03

对gallop的建议表示感谢。

我的黑名单里的地址大概有好几百个，这样设置的话，工作量还是比较大的。

zkhzf 发表于 2008-7-3 08:42:48

这是昨天晚上的antispam日志：

START Event Log / MDaemon PRO v9.6.6, AntiSpam log information
-------------------------------------------------------------------------------
Event Time/Date             Event Description
-------------------------------------------------------------------------------
Wed 2008-07-02 19:37:40: Spam Filter processing e:\mdaemon\remoteq\md75000095512.msg...
Wed 2008-07-02 19:37:40: * Message return-path: Ivank@gimelli.com.hk
Wed 2008-07-02 19:37:40: * Message from: MDaemon@szluckystar.com
Wed 2008-07-02 19:37:40: * Message to: Ivank@gimelli.com.hk
Wed 2008-07-02 19:37:40: * Message subject: Warning: Wangpp@szluckystar.com - User unknown!
Wed 2008-07-02 19:37:40: * Message ID: <MDAEMON0009200807021937.AA3739265@szluckystar.com>
Wed 2008-07-02 19:39:14: Start SpamAssassin results
Wed 2008-07-02 19:39:14: 100.20 points, 5.00 required
Wed 2008-07-02 19:39:14: =?ISO-8859-1?Q?
Wed 2008-07-02 19:39:14: *100 USER_IN_BLACKLIST From: address is in the blacklist
Wed 2008-07-02 19:39:14: *0.2 CN_BODY_48 BODY: Body contains "=d3=ca=bc=fe"?=
Wed 2008-07-02 19:39:14: End SpamAssassin results
Wed 2008-07-02 19:39:14: ----------
Wed 2008-07-02 19:37:40: Spam Filter processing e:\mdaemon\remoteq\md75000095513.msg...
Wed 2008-07-02 19:37:40: * Message return-path: Ivank@gimelli.com.hk
Wed 2008-07-02 19:37:40: * Message from: MDaemon@szluckystar.com
Wed 2008-07-02 19:37:40: * Message to: Ivank@gimelli.com.hk
Wed 2008-07-02 19:37:40: * Message subject: Warning: Wangpp@szluckystar.com - User unknown!
Wed 2008-07-02 19:37:40: * Message ID: <MDAEMON0010200807021937.AA3739359@szluckystar.com>
Wed 2008-07-02 19:39:14: Start SpamAssassin results
Wed 2008-07-02 19:39:14: 100.20 points, 5.00 required
Wed 2008-07-02 19:39:14: =?ISO-8859-1?Q?
Wed 2008-07-02 19:39:14: *100 USER_IN_BLACKLIST From: address is in the blacklist
Wed 2008-07-02 19:39:14: *0.2 CN_BODY_48 BODY: Body contains "=d3=ca=bc=fe"?=
Wed 2008-07-02 19:39:14: End SpamAssassin results
Wed 2008-07-02 19:39:14: ----------
Wed 2008-07-02 19:43:53: Spam Filter processing e:\mdaemon\remoteq\md75000095515.msg...
Wed 2008-07-02 19:43:53: * Message return-path: Ivank@gimelli.com.hk
Wed 2008-07-02 19:43:53: * Message from: MDaemon@szluckystar.com
Wed 2008-07-02 19:43:53: * Message to: Ivank@gimelli.com.hk
Wed 2008-07-02 19:43:53: * Message subject: Warning: Wangpp@szluckystar.com - User unknown!
Wed 2008-07-02 19:43:53: * Message ID: <MDAEMON0011200807021943.AA4352125@szluckystar.com>
Wed 2008-07-02 19:43:53: Start SpamAssassin results
Wed 2008-07-02 19:43:53: 100.20 points, 5.00 required
Wed 2008-07-02 19:43:53: =?ISO-8859-1?Q?
Wed 2008-07-02 19:43:53: *100 USER_IN_BLACKLIST From: address is in the blacklist
Wed 2008-07-02 19:43:53: *0.2 CN_BODY_48 BODY: Body contains "=d3=ca=bc=fe"?=
Wed 2008-07-02 19:43:53: End SpamAssassin results
Wed 2008-07-02 19:43:53: ----------
Wed 2008-07-02 19:43:53: Spam Filter processing e:\mdaemon\remoteq\md75000095516.msg...
Wed 2008-07-02 19:43:53: * Message return-path: Ivank@gimelli.com.hk
Wed 2008-07-02 19:43:53: * Message from: MDaemon@szluckystar.com
Wed 2008-07-02 19:43:53: * Message to: Ivank@gimelli.com.hk
Wed 2008-07-02 19:43:53: * Message subject: Warning: Wangpp@szluckystar.com - User unknown!
Wed 2008-07-02 19:43:53: * Message ID: <MDAEMON0012200807021943.AA4352187@szluckystar.com>
Wed 2008-07-02 19:43:53: Start SpamAssassin results
Wed 2008-07-02 19:43:53: 100.20 points, 5.00 required
Wed 2008-07-02 19:43:53: =?ISO-8859-1?Q?
Wed 2008-07-02 19:43:53: *100 USER_IN_BLACKLIST From: address is in the blacklist
Wed 2008-07-02 19:43:53: *0.2 CN_BODY_48 BODY: Body contains "=d3=ca=bc=fe"?=
Wed 2008-07-02 19:43:53: End SpamAssassin results
Wed 2008-07-02 19:43:53: ----------

wxhsh 发表于 2008-7-3 09:13:25

回复 19楼 的帖子

不是已经生效了吗？不过你设的50K保守了点，如果硬件配置还可以，一般设200K。
页: 1 [2] 3
查看完整版本: 垃圾邮件不能过滤了？？？－在线急等！