我貼出我被假冒「駭客」想以我的主機作為他濫發垃圾廣告郵件時的 SMTP(in) 日誌一節：
..
Mon 2008-08-11 18:03:05: <-- Host: www.scanproxy.com
Mon 2008-08-11 18:03:05: Too many errors encountered
Mon 2008-08-11 18:03:05: SMTP session terminated (Bytes in/out: 407/176)
Do you notice the last line of your quote?
Your version is SMTP session terminated.
The fsdjsb's version is SMTP session successful.
In fact, by default, if three consecutive errors encountered by MDaemon email server, the associated session should be terminated. It is what I mentioned before - the logical fault.
For whatever reasons, if sending mail with invaild commands, this statement "500 What? I don't understand that." would be recorded to the smtp(in) log.
[ 本帖最后由 leungys 于 2009-2-14 17:58 编辑 ] 原帖由 leungys 于 2009-2-14 17:20 发表 http://www.5dmail.net/bbs/images/common/back.gif
Do you notice the last line of your quote?
Your version is SMTP session terminated.
The fsdjsb's version is SMTP session successful.
In fact, by default, if three consecutive errors encoun ...
你說得對，在我的日誌有三個 "500 What? I don't understand that." 錯誤以後 SMTP session 就終止了。而在 fsdjsb 的日誌裡，雖有三個 "500 What? I don't understand that." 錯誤，但它的 SMTP session 卻仍是成功的。 的確是不合邏輯，所以你懷疑他日誌是被改過的。 邮件接收者收到了邮件的正文信息,但只是邮件附件丢失,所以session successful,因为是一台本地服务器,所以这个问题应该定位在邮件客户端呢,还是发送邮件的服务器端?
页:
1
[2]
