邮件服务器-邮件系统-邮件技术论坛(BBS)

标题: 队列里都是垃圾邮件～急救，看的出是谁在发吗 [打印本页]

作者: ivanhoe82 时间: 2008-1-23 11:36
标题: 队列里都是垃圾邮件～急救，看的出是谁在发吗
ersion: 4.0.4 EVALUATION Log Mode: Verbose Server: hehui.vcan-sports.com Source: SMTPSVC-1 Time: 2008-1-23 5:12:28 Class: System Message Severity: Information Actions: (not available) Filtering Point: Non-filtering Related IP Address: 65.54.244.200 Message ID: (not available) Email Subject: Response to Question about Item -- Respond Now Sender: users@ebay.com Recipient(s): * 1wpl@comcast.net * 1yinhj3ynrkkh@netscape.net * 1w4zqc4jei@yahoo.com * 1w89hy4rtrw76beachbreeze@yahoo.com * 1w89hy4rtrw76moccia@yahoo.com * 1w89hy4rtrw76verne@yahoo.com * 1xxfdjtgg@yahoo.com * 1yctepuca@yahoo.com * 1zjfzmq6n0l@yahoo.com * 1w89hy4rtrw76mpsneen@mci.net * 1w89hy4rtrw76stotler@mci.net * 1w89hy4rtrw76tuesday@mci.net * 1youthclubs1@weinberggroup.com * 2.pissed@budweiser.com * 1w89hy4rtrw76pandomanda@aol.com * 1w89hy4rtrw76vaca@aol.com * 1wjz6gsmuxs@aol.com * 1zhrististone@aol.com * 1zjeb@aol.com * 1zotee@aol.com * 1ztmtspe1z@aol.com * 2@aol.com * 1woolesi@uvsc.edu * 1yhyotq1jvq@juno.com * 1w89hy4rtrw76thom@bellsouth.net * 2_icit_two@bellsouth.net * 1vku9f9parcr@time.com * 1w89hy4rtrw76dmvs@earthlink.net * 1w89hy4rtrw76neworder@earthlink.net * 1zt6j5eev@solutions.org * 1vyxcrtgqtq@geocities.com * 1warehouse@krasitys.com * 1wb9xgx2z8@21cn.net * 1whiterabbit@insightbb.com * 1x7fny2p8@mail.com * 1w89hy4rtrw76jmdault@hotmail.com * 2@hotmail.com * 1w89hy4rtrw76hhsst@msn.com * 1w89hy4rtrw76vfette@msn.com * 1wcmyyoww@msn.com * 1x6jvgbfz@msn.com * 1xvwwag4r@msn.com * 1z3vsqg@msn.com * 2@msn.com * 1worthylamb@ifriendly.com * 1x315vwb@commercecheck.com * 2@bitwiser.com * 2@globalzone.com * 2@masterformulas.net * 2_cb@1zelda.com Message: Added "1wpl@comcast.net" to the Auto Sender Whitelist.

作者: 钉子 时间: 2008-1-24 23:37
这种情况下如果你怀疑被人中继:

１.也就是说有某一个用户的密码太过简单被对方猜出来了。这时在ＯＲＦ中会有类似下面的记录。注意红色部分的用户名。这个就是被用来发送出件的帐户

Version: 4.0.4 REGISTERED
Log Mode: Verbose
Server: GZMAIL.5dmail.local
Source: SMTPSVC-1
Time: 2008-1-24 10:46:49
Class: Whitelist
Severity: Information
Actions: (not available)
Filtering Point: On Arrival
Related IP Address: 222.208.xxxx.1
Message ID: <20080124xxxxxxxxxx@5dmail.net>
Email Subject: (not available)
Sender: liqiuting@5dmail.net
Recipient(s):
* asdsadf@qq.com
* asdfdsaf@qq.com
Message:
Authenticated session (user: 5dmail\liqiuting).（这个就是被用来发送出件的帐户。）

２.检查ＳＭＴＰ设定改动过，是否开放了中继，不需要验证就可以中继邮件了。

欢迎光临邮件服务器-邮件系统-邮件技术论坛(BBS) (http://bbs.5dmail.cn/)