邮件服务器-邮件系统-邮件技术论坛(BBS)
标题: MD如何拦截以下垃圾邮件??—找到加入anti-spam.org.cn实时黑名单服务方法 [打印本页]
作者: mrbing 时间: 2007-3-28 16:24
标题: MD如何拦截以下垃圾邮件??—找到加入anti-spam.org.cn实时黑名单服务方法
以下都是一些全英文的垃圾邮件,每天每个帐户都会收到10多封,MD怎样设置才可以阴止这些邮件呢?
还有一些垃圾邮件，发送者把主要内容做成一个jpg的小图片，这些又怎么清除呢？
第一封:
Trading 0pportunity For You...
S.umbol: PLMA
Current price: $0.02
5 Day Target price: $0.1
Recommendation: very aggresive buy!!
500% profit potential short term!!!
PLMA has a nice fresh news, mrb, contact your broker!!!
第二封:
We told you yesterday this would make a move
up 10% in 1 Day and its just the 1st day, Imagine
Check this company out
Critical Care New
Sym-CCTI
Currently : 22 Cents, CHEAP!!!
Easy 300% on this one in Short term
up 10% in 1 Day and its just the 1st day, Imagine where it will be in 5 days Get in this gem tomorrow, Catch an easy doubler!!
The Wolverines finished 22-13, with an 87-66 loss at Florida State on Thursday night. its history. Michigan was 18-12 overall and 10-6 during the 2002-03 season . For once, it was the opposition that did both. Notes: Iverson's season-high in the first half one night after getting just one first-half assist against
----- Original Message -----
From: "QVince CTerry" <
juuekn@kstptv5.com>
To: <
XX@xx.com>
Sent: Thursday, March 22, 2007 8:27 PM
Subject: hijinks strong
> Check this company out
> Critical Care New
> Sym-CCTI
> Currently : 22 Cents, CHEAP!!!
> Easy 300% on this one in Short term
第三封:
We told you yesterday this would make a move
up 10% in 1 Day and its just the 1st day, Imagine
Bull is Calling
Critical CARE NEW
SYm-C.C.T.I
22 Cents is a STEAL
Short or long, this one cant go wrong
up 10% in 1 Day and its just the 1st day, Imagine where it will be in 5 days Get in this gem tomorrow, Catch an easy doubler!!
night. Carmelo Anthony augmented Iverson's night by adding 29 points in handle when Anthony and Iverson are coming at you like that. They are hard to according to the contract. Michigan hired Amaker on hired March 29, 2001, coach on March 31, 2011, to earn a deferred-compensation package after the school's
> Bull is Calling
> Critical CARE NEW
> SYm-C.C.T.I
> 22 Cents is a STEAL
> Short or long, this one cant go wrong
[ 本帖最后由 mrbing 于 2007-3-28 17:58 编辑 ]
作者: stdmis 时间: 2007-3-28 16:55
除了啟用黑名單外，最好是采用MD的貝葉斯學習。具體方法，看看置頂帖中
作者: mrbing 时间: 2007-3-28 17:39
贝叶斯已启用了，但还是防止不了。
作者: mrbing 时间: 2007-3-28 17:46
刚摸索到了在MD中加入http://www.anti-spam.org.cn上有免费的实时黑名单服务（RBL） —— CBL/CDL/CBL+/CBL-的方法，但不知道MD怎么处理，请大家看日志：
大家看日志红色部分，failed 是表示查询服务器失败呢还是表示这个IP已被服务器列入黑名单？
在MD中使用http://www.anti-spam.org.cn上免费的实时黑名单服务方法：（也不知道对不对，请大家指出）
用记事本打开 \MDaemon\App\SpamBlck.dat，加入：
cblless.anti-spam.org.cn, mail from $IP$ refused, see http://www.anti-spam.org.cn
（我用的是CBL- ，我只是参照原来的加上的，也不知道对不对），然后重启MD服务。
Wed 2007-03-28 17:31:41: ----------
Wed 2007-03-28 17:31:52: Session 42; child 1; thread 888
Wed 2007-03-28 17:31:13: Accepting SMTP connection from [59.108.33.58 : 52117]
Wed 2007-03-28 17:31:13: Performing PTR lookup (58.33.108.59.IN-ADDR.ARPA)
Wed 2007-03-28 17:31:23: * Error: 10 second wait for DNS response exceeded
Wed 2007-03-28 17:31:28: * Error: The name server reports that it is having technical problems
Wed 2007-03-28 17:31:28: ---- End PTR results
Wed 2007-03-28 17:31:28: --> 220 ESMTP Mail Ready
Wed 2007-03-28 17:31:28: <-- ehlo web321.net
Wed 2007-03-28 17:31:28: Performing IP lookup (web321.net)
Wed 2007-03-28 17:31:33: * D=web321.net TTL=(60) A=[66.254.110.148]
Wed 2007-03-28 17:31:33: ---- End IP lookup results
Wed 2007-03-28 17:31:33: --> 250-XXX.cn Hello web321.net (may be forged), pleased to meet you
Wed 2007-03-28 17:31:33: --> 250-ETRN
Wed 2007-03-28 17:31:33: --> 250-AUTH=LOGIN
Wed 2007-03-28 17:31:33: --> 250-AUTH LOGIN
Wed 2007-03-28 17:31:33: --> 250-8BITMIME
Wed 2007-03-28 17:31:33: --> 250 SIZE 1024000000
Wed 2007-03-28 17:31:34: <-- Rset
Wed 2007-03-28 17:31:34: --> 250 RSET? Well, ok.
Wed 2007-03-28 17:31:34: <-- Mail from:<info@web321.net>
Wed 2007-03-28 17:31:34: Performing IP lookup (web321.net)
Wed 2007-03-28 17:31:34: * D=web321.net TTL=(59) A=[66.254.110.148]
Wed 2007-03-28 17:31:36: * P=010 D=web321.net TTL=(60) MX=[smtp-scan01.mx.reflected.net]
Wed 2007-03-28 17:31:36: * D=web321.net TTL=(59) A=[66.254.110.148]
Wed 2007-03-28 17:31:36: ---- End IP lookup results
Wed 2007-03-28 17:31:36: --> 250 <info@web321.net>, Sender ok
Wed 2007-03-28 17:31:36: <-- RCPT to:<shf@XXX.net>
Wed 2007-03-28 17:31:36: Performing DNS-BL lookup (59.108.33.58 - connecting IP)
Wed 2007-03-28 17:31:36: * cblless.anti-spam.org.cn - failed
Wed 2007-03-28 17:31:36: * sbl-xbl.spamhaus.org - passed
Wed 2007-03-28 17:31:37: * opm.blitzed.org - passed
Wed 2007-03-28 17:31:47: * relays.ordb.org - passed
Wed 2007-03-28 17:31:47: * bl.spamcop.net - passed
Wed 2007-03-28 17:31:47: ---- End DNS-BL results
Wed 2007-03-28 17:31:47: --> 250 <shf@XXX.net>, Recipient ok
Wed 2007-03-28 17:31:47: <-- Data
Wed 2007-03-28 17:31:47: Creating temp file (SMTP): c:\mdaemon\queues\temp\md50000000031.tmp
Wed 2007-03-28 17:31:47: --> 354 Enter mail, end with <CRLF>.<CRLF>
Wed 2007-03-28 17:31:49: Message size: 2116 bytes
Wed 2007-03-28 17:31:49: Performing DomainKeys lookup (Sender: info@web321.net)
Wed 2007-03-28 17:31:49: * Message-ID:
Wed 2007-03-28 17:31:49: * Querying for policy: web321.net
Wed 2007-03-28 17:31:49: * Querying: _domainkey.web321.net ...
Wed 2007-03-28 17:31:49: * DNS: Name server reports domain name unknown
Wed 2007-03-28 17:31:49: * Result: pass
Wed 2007-03-28 17:31:49: ---- End DomainKeys results
Wed 2007-03-28 17:31:49: Passing message through AntiVirus (Size: 2116)...
Wed 2007-03-28 17:31:49: * Message is clean (no viruses found)
Wed 2007-03-28 17:31:49: ---- End AntiVirus results
Wed 2007-03-28 17:31:49: Passing message through Spam Filter (Size: 2116)...
Wed 2007-03-28 17:31:52: * 0.0 CN_BODY_2 BODY: Body contains "有限公司"
Wed 2007-03-28 17:31:52: * 0.0 CN_BODY_4 BODY: Body contains "广告"
Wed 2007-03-28 17:31:52: * 0.3 CN_BODY_5 BODY: Body contains "销售"
Wed 2007-03-28 17:31:52: * 0.0 CN_BODY_8 BODY: Body contains "优惠"
Wed 2007-03-28 17:31:52: * 0.5 CN_BODY_77 BODY: Body contains "详情"
Wed 2007-03-28 17:31:52: * 0.0 CN_BODY_91 BODY: Body contains "查询"
Wed 2007-03-28 17:31:52: * 1.7 CN_BODY_696 BODY: Body contains "进销存"
Wed 2007-03-28 17:31:52: * 0.4 CN_BODY_879 BODY: Body contains "： "
Wed 2007-03-28 17:31:52: * 0.3 CN_BODY_16 BODY: Body contains "联系人"
Wed 2007-03-28 17:31:52: * 10 BAYES_99 BODY: Bayesian spam probability is 99 to 100%
Wed 2007-03-28 17:31:52: * [score: 1.0000]
Wed 2007-03-28 17:31:52: ---- End SpamAssassin results
Wed 2007-03-28 17:31:52: Spam Filter score/req: 13.15/12.0
Wed 2007-03-28 17:31:52: Message refused because spam score is too high
Wed 2007-03-28 17:31:52: --> 554 Sorry, message looks like SPAM to me
Wed 2007-03-28 17:31:52: <-- Quit
Wed 2007-03-28 17:31:52: --> 221 See ya in cyberspace
Wed 2007-03-28 17:31:52: SMTP session terminated (Bytes in/out: 2212/369)
Wed 2007-03-28 17:31:52: ----------
也有pass 的：
Wed 2007-03-28 17:54:56: * cblless.anti-spam.org.cn - passed
Wed 2007-03-28 17:54:56: * sbl-xbl.spamhaus.org - failed
Wed 2007-03-28 17:54:56: * opm.blitzed.org - passed
Wed 2007-03-28 17:55:06: * relays.ordb.org - passed
Wed 2007-03-28 17:55:07: * bl.spamcop.net - failed
Wed 2007-03-28 17:55:07: ---- End DNS-BL results
[ 本帖最后由 mrbing 于 2007-3-28 17:56 编辑 ]
作者: mrbing 时间: 2007-3-28 18:00
大家知道如果加入到DNS-BL名单里面，日志会怎样显示呢？请大家帮帮忙测试一下效果如果
作者: lwz_08 时间: 2007-3-28 18:15
pass通过了
作者: mrbing 时间: 2007-3-29 15:46
好象生效了,昨晚设好后到现在快一天了,那些英文的垃圾邮件一封也没收到过
作者: 钉子 时间: 2007-4-3 00:03
楼主这个设定有创意，以前也有网友写过这样的帖子。
在MDaemon中增加anti-spam.org.cn 的RBL
http://www.5dmail.net/html/2005-8-2/200582121128.htm
作者: peter1025 时间: 2008-8-27 19:59
这个贴要顶上云，让更多的人看到。
作者: peter1025 时间: 2008-8-27 20:46
我刚刚做了跟楼主一样的设置，不知会不会有问题，正在怕怕中。。。
作者: peter1025 时间: 2008-8-28 18:19
这个方法好像挻管用的呢，明显感觉垃圾邮件少了。
作者: nfore 时间: 2008-8-29 09:31
是不是这样设置？见图：
-
dns-bl.gif
(18.57 KB, 下载次数: 0)
| 欢迎光临 邮件服务器-邮件系统-邮件技术论坛(BBS) (http://bbs.5dmail.cn/) |
Powered by Discuz! X3.2 |
