最近我win2k3事件日志里出现很多这样的提示**** ALERT ****
最近我win2k3事件日志里出现很多这样的提示**** ALERT **** 189.142.140.81 tried to send a message as webmaster@XXXXX.com without proper authentication 。以前发出去邮件yahoo和msn都可以收到，现在发出去的邮件国内的大邮件服务商都收不到邮件了。:@ :L :'( 哪位有没有遇到？如何解决的呢？ :( :( 没人知道么？回复 2楼 surfman 的帖子
这个提示应该是以webmaster@XXXXX.com地址发送的邮件没有通过身份验证。 我也碰见这个问题了，**** ALERT **** 58.41.131.29 gave false logon/password to POP server; user: yangcw@my.com同时找到pop log，确实密码没有试成功：
Mon 2009-01-12 00:43:10: Session 4981; child 1
Mon 2009-01-12 00:43:10: Accepting POP connection from
Mon 2009-01-12 00:43:10: --> +OK my.com POP MDaemon 8.0.3 ready <MDAEMON-F200901120043.AA4310871MD0332@my.com>
Mon 2009-01-12 00:43:10: <-- USER yangcw
Mon 2009-01-12 00:43:10: --> +OK yangcw... User ok
Mon 2009-01-12 00:43:10: <-- PASS ******
Mon 2009-01-12 00:43:10: --> -ERR access denied
Mon 2009-01-12 00:43:10: POP session terminated, (Bytes in/out: 25/136)
但我又同时发现这个log，在试我们的密码吧？这是连接成功了还是连接没有成功，有很多这种连接，不会已经被他们破解成功了吧：
Mon 2009-01-12 00:43:10: Session 4980; child 1
Mon 2009-01-12 00:43:10: Accepting POP connection from
Mon 2009-01-12 00:43:10: --> +OK my.com POP MDaemon 8.0.3 ready <MDAEMON-F200901120043.AA4310543MD1537@my.com>
Mon 2009-01-12 00:43:10: <-- USER hashiguchi
Mon 2009-01-12 00:43:10: --> +OK hashiguchi... User ok
Mon 2009-01-12 00:43:10: <-- PASS ******
Mon 2009-01-12 00:43:10: --> +OK hashiguchi@my.com's mailbox has 65 total messages (542265 octets)
Mon 2009-01-12 00:43:10: <-- STAT
Mon 2009-01-12 00:43:10: --> +OK 65 542265
Mon 2009-01-12 00:43:10: <-- LIST
Mon 2009-01-12 00:43:10: Sending LIST response (not logged)
Mon 2009-01-12 00:43:10: <-- UIDL
Mon 2009-01-12 00:43:10: Sending UIDL response (not logged)
Mon 2009-01-12 00:43:10: <-- QUIT
Mon 2009-01-12 00:43:10: --> +OK hashiguchi@my.com my.com POP Server signing off (65 messages left)
Mon 2009-01-12 00:43:10: POP session complete (Bytes in/out: 55/3939) 最后的部分都list了
肯定是验证通过了
錯誤，刪除。
[ 本帖最后由 Kyan 于 2009-5-11 21:28 编辑 ]
页:
[1]
