heieye104 发表于 2008-10-14 15:30:54

信任主机里
垃圾邮件过滤里
DNS白名单

wxhsh 发表于 2008-10-14 15:38:19

回复 11楼 heieye104 的帖子

这么强,能否贴下现在的日志

heieye104 发表于 2008-10-14 15:46:48

Tue 2008-10-14 15:09:39: Session 4523; child 11; thread 3432
Tue 2008-10-14 15:09:36: 接受 SMTP 连接来自
Tue 2008-10-14 15:09:36: Performing PTR lookup (139.103.30.218.IN-ADDR.ARPA)
Tue 2008-10-14 15:09:36: *D=139.103.30.218.IN-ADDR.ARPA TTL=(502) PTR=
Tue 2008-10-14 15:09:36: *Gathering A records...
Tue 2008-10-14 15:09:36: *D=gate.hichina.com TTL=(10) A=
Tue 2008-10-14 15:09:36: ---- End PTR results
Tue 2008-10-14 15:09:36: --> 220 mail.abc.com ESMTP MDaemon 9.6.4; Tue, 14 Oct 2008 15:09:36 +0800
Tue 2008-10-14 15:09:36: <-- EHLO gate.hichina.com
Tue 2008-10-14 15:09:36: Performing IP lookup (gate.hichina.com)
Tue 2008-10-14 15:09:36: *D=gate.hichina.com TTL=(10) A=
Tue 2008-10-14 15:09:36: ---- End IP lookup results
Tue 2008-10-14 15:09:36: --> 250-mail.abc.com Hello gate.hichina.com, pleased to meet you
Tue 2008-10-14 15:09:36: --> 250-ETRN
Tue 2008-10-14 15:09:36: --> 250-AUTH=LOGIN
Tue 2008-10-14 15:09:36: --> 250-AUTH LOGIN CRAM-MD5
Tue 2008-10-14 15:09:36: --> 250-8BITMIME
Tue 2008-10-14 15:09:36: --> 250 SIZE 0
Tue 2008-10-14 15:09:36: <-- MAIL From:<sales@hichina.com> SIZE=3875 BODY=8BITMIME
Tue 2008-10-14 15:09:36: Performing IP lookup (hichina.com)
Tue 2008-10-14 15:09:37: *D=hichina.com TTL=(10) A=
Tue 2008-10-14 15:09:37: *P=010 S=001 D=hichina.com TTL=(1) MX=
Tue 2008-10-14 15:09:37: *P=020 S=000 D=hichina.com TTL=(1) MX=
Tue 2008-10-14 15:09:37: *D=hichina.com TTL=(10) A=
Tue 2008-10-14 15:09:37: *D=hichina.com TTL=(10) A=
Tue 2008-10-14 15:09:37: ---- End IP lookup results
Tue 2008-10-14 15:09:37: Performing SPF lookup (hichina.com / 218.30.103.139)
Tue 2008-10-14 15:09:37: *Result: none; no SPF record in DNS
Tue 2008-10-14 15:09:37: ---- End SPF results
Tue 2008-10-14 15:09:37: --> 250 <sales@hichina.com>, Sender ok
Tue 2008-10-14 15:09:37: <-- RCPT To:<liyong@abc.com>
Tue 2008-10-14 15:09:37: 执行 DNS-BL 查询(218.30.103.139 - 正在连接 IP)
Tue 2008-10-14 15:09:37: *zen.spamhaus.org,spamhaus 列出的 $IP$,请参见http://www.spamhaus.org - 失败
Tue 2008-10-14 15:09:37: ---- 结束 DNS-BL 结果
Tue 2008-10-14 15:09:37: --> 250 <liyong@abc.com>, Recipient ok
Tue 2008-10-14 15:09:37: <-- DATA
Tue 2008-10-14 15:09:37: Creating temp file (SMTP): d:\mdaemon\queues\temp\md50000016736.tmp
Tue 2008-10-14 15:09:37: --> 354 Enter mail, end with <CRLF>.<CRLF>
Tue 2008-10-14 15:09:37: Message size: 4193 bytes
Tue 2008-10-14 15:09:37: Performing DKIM lookup
Tue 2008-10-14 15:09:37: *File: d:\mdaemon\queues\temp\md50000016736.tmp
Tue 2008-10-14 15:09:37: *Message-ID: 200810140708.m9E78tLv008506@gate.hichina.com
Tue 2008-10-14 15:09:37: *Result: neutral
Tue 2008-10-14 15:09:37: ---- End DKIM results
Tue 2008-10-14 15:09:37: Performing DomainKeys lookup (Sender: sales@hichina.com)
Tue 2008-10-14 15:09:37: *File: d:\mdaemon\queues\temp\md50000016736.tmp
Tue 2008-10-14 15:09:37: *Message-ID: 200810140708.m9E78tLv008506@gate.hichina.com
Tue 2008-10-14 15:09:37: *Querying for policy: hichina.com
Tue 2008-10-14 15:09:37: *    Querying: _domainkey.hichina.com ...
Tue 2008-10-14 15:09:37: *    DNS: *名称服务器报告未知的域名
Tue 2008-10-14 15:09:37: *Result: neutral
Tue 2008-10-14 15:09:37: ---- End DomainKeys results
Tue 2008-10-14 15:09:37: Passing message through AntiVirus (Size: 4193)...
Tue 2008-10-14 15:09:37: *例外列表里的收件人或发件人
Tue 2008-10-14 15:09:37: ---- End AntiVirus results
Tue 2008-10-14 15:09:37: Passing message through Outbreak Protection...
Tue 2008-10-14 15:09:37: *Message-ID: 200810140708.m9E78tLv008506@gate.hichina.com
Tue 2008-10-14 15:09:37: *Reference-ID: str=0001.0A150204.48F445B4.0011,ss=1,fgs=0
Tue 2008-10-14 15:09:37: *Virus result: 0 - Clean
Tue 2008-10-14 15:09:37: *Spam result: 1 - Clean
Tue 2008-10-14 15:09:37: *IWF result: 0 - Clean
Tue 2008-10-14 15:09:37: ---- End Outbreak Protection results
Tue 2008-10-14 15:09:37: Passing message through Spam Filter (Size: 4193)...
Tue 2008-10-14 15:09:38: *0.4 X_PRIORITY_HIGH Sent with 'X-Priority' set to high
Tue 2008-10-14 15:09:38: *3.0 MDAEMON_DNSBL MDaemon: marked by MDaemon's DNSBL
Tue 2008-10-14 15:09:38: *4.1 FROM_ILLEGAL_CHARS From: has too many raw illegal characters
Tue 2008-10-14 15:09:38: *4.3 SUBJ_ILLEGAL_CHARS Subject: has too many raw illegal characters
Tue 2008-10-14 15:09:38: *1.6 HEAD_ILLEGAL_CHARS Headers have too many raw illegal characters
Tue 2008-10-14 15:09:38: *0.1 HTML_50_60 BODY: Message is 50% to 60% HTML
Tue 2008-10-14 15:09:38: *1.9 HTML_IMAGE_ONLY_28 BODY: HTML: images with 2400-2800 bytes of words
Tue 2008-10-14 15:09:38: *1.8 HTML_OBFUSCATE_10_20 BODY: Message is 10% to 20% HTML obfuscation
Tue 2008-10-14 15:09:38: *0.0 HTML_MESSAGE BODY: HTML included in message
Tue 2008-10-14 15:09:38: *   10 BAYES_99 BODY: Bayesian spam probability is 99 to 100%
Tue 2008-10-14 15:09:38: *      
Tue 2008-10-14 15:09:38: *0.0 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
Tue 2008-10-14 15:09:38: *0.2 MIME_BASE64_NO_NAME RAW: base64 attachment does not have a file name
Tue 2008-10-14 15:09:38: *1.9 MIME_BASE64_TEXT RAW: Message text disguised using base64 encoding
Tue 2008-10-14 15:09:38: *0.2 MIME_BASE64_BLANKS RAW: Extra blank lines in base64 encoding
Tue 2008-10-14 15:09:38: *3.0 URIBL_BLACK Contains a URL listed in the URIBL.com blacklist
Tue 2008-10-14 15:09:38: *      www.net.cn www.com.cn]
Tue 2008-10-14 15:09:38:
Tue 2008-10-14 15:09:38: *1.1 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag
Tue 2008-10-14 15:09:38: *1.6 MISSING_MIMEOLE Message has X-MSMail-Priority, but no X-MimeOLE
Tue 2008-10-14 15:09:38: ---- End SpamAssassin results
Tue 2008-10-14 15:09:38: Spam Filter score/req: 35.30/12.0
Tue 2008-10-14 15:09:38: Message refused because spam score is too high
Tue 2008-10-14 15:09:38: --> 554 Sorry, message looks like SPAM to me
Tue 2008-10-14 15:09:39: <-- QUIT
Tue 2008-10-14 15:09:39: --> 221 See ya in cyberspace

wxhsh 发表于 2008-10-14 15:48:49

回复 13楼 heieye104 的帖子

对方的发邮件IP太多,现在又是218.30.103.139 了。。。。。。

wxhsh 发表于 2008-10-14 15:50:52

回复 14楼 wxhsh 的帖子

不过这个信里有from,白名单加*@hichina.com应该有效的吧。

heieye104 发表于 2008-10-14 15:53:42

这是要他们手动发的信,我白名单加*@hichina.com 应该是有效的,加完后我还重启了MD,不服不行了

wxhsh 发表于 2008-10-14 15:55:53

回复 16楼 heieye104 的帖子

对方自动发的程序写的不好,我一般都定义FROM的。

heieye104 发表于 2008-10-14 16:00:01

呵,问题是手动的也给挡了,气人呀,换人了,我得找回万网ID密码,这样太不安全了

wxhsh 发表于 2008-10-14 16:03:13

回复 18楼 heieye104 的帖子

另外有个小问题,其实是MD的BUG,它DNS黑名单两行并一行了,你把原来删了,手动再加下吧。

heieye104 发表于 2008-10-14 16:15:31

回复 19楼 wxhsh 的帖子

删了重建还在一行
页: 1 [2] 3
查看完整版本: 垃圾邮件问题