邮件服务器-邮件系统-邮件技术论坛(BBS)

标题: MDaemon反垃圾规则有些诡异啊 [打印本页]

作者: mayborn 时间: 2008-8-29 02:20
标题: MDaemon反垃圾规则有些诡异啊
感觉9.5以前的MDaemon默认的反垃圾规则很弱
现在的太强，误杀率很高
看看MD安全设置里有几个白名单：
DNS-BL
spam filter里有发件人白名单，收件人白名单和自动白名单
relay/trusts 白名单域和IP
SPF白名单
可能是没有一个全局的白名单，我在可信任的域里加入的白名单，一样可以被拒收

最近拒收或者叫误判很严重
公司的一个基于google app的域发送到MDameon域，有时候退信，提示spam
有时候不退信，而且针对客人的邮件也是这样子，取消了rbl，没有改善
现在把启发式的值设置秤为：12
暂时关掉SPF
看一下情况吧，如果垃圾邮件太多只好再启用rbl

作者: mayborn 时间: 2008-8-29 02:25
标题: 退信和日志
还是先把启发值改高点好了，28-30
不然退到伤心啊
而且启发值对防国内垃圾邮件几乎没什么左右

退信：

主题： Returned mail: see transcript for details

The original message was received at Thu, 28 Aug 2008 09:45:03 +0800 (CST)
from ti-out-0910.google.com [209.85.142.186]

   ----- The following addresses had permanent fatal errors -----
<lemon@mbxxx.com >
   (reason: 554 Sorry, message looks like SPAM to me)

   ----- Transcript of session follows -----
... while talking to [192.168.0.2]:
> > > DATA
< < < 554 Sorry, message looks like SPAM to me
554 5.0.0 Service unavailable

Reporting-MTA: dns; mail.mbxxx.com
Arrival-Date: Thu, 28 Aug 2008 09:45:03 +0800 (CST)

Final-Recipient: RFC822; lemon@mbxxx.com
Action: failed
Status: 5.0.0
Remote-MTA: DNS; [192.168.0.2]
Diagnostic-Code: SMTP; 554 Sorry, message looks like SPAM to me
Last-Attempt-Date: Thu, 28 Aug 2008 09:45:09 +0800 (CST)

日志：
<-- MAIL From:<julia@daxxx.com> SIZE=62312
Thu 2008-08-28 09:45:02: --> 250 <julia@daxxx.com>, Sender ok
Thu 2008-08-28 09:45:02: <-- RCPT To:<lemon@mbxxx.com>
Thu 2008-08-28 09:45:02: --> 250 <lemon@mbxxx.com>, Recipient ok
Thu 2008-08-28 09:45:02: <-- DATA
Thu 2008-08-28 09:45:02: Creating temp file (SMTP): d:\mdaemon\queues\temp\md50000019825.tmp
Thu 2008-08-28 09:45:02: --> 354 Enter mail, end with <CRLF>.<CRLF>
Thu 2008-08-28 09:45:02: Message size: 63175 bytes
Thu 2008-08-28 09:45:02: Passing message through Spam Filter (Size: 63175)...
Thu 2008-08-28 09:45:04: *  2.0 BIZ_TLD URI: Contains an URL in the BIZ top-level domain
Thu 2008-08-28 09:45:04: * -4.7 BAYES_00 BODY: Bayesian spam probability is 0 to 1%
Thu 2008-08-28 09:45:04: *    [score: 0.0000]
Thu 2008-08-28 09:45:04: *  0.0 HTML_MESSAGE BODY: HTML included in message
Thu 2008-08-28 09:45:04: *  0.2 MIME_BASE64_NO_NAME RAW: base64 attachment does not have a file name
Thu 2008-08-28 09:45:04: *  8.0 URIBL_AB_SURBL Contains an URL listed in the AB SURBL blocklist
Thu 2008-08-28 09:45:04: *    [URIs: beppi.com.pt]
Thu 2008-08-28 09:45:04: *  9.0 URIBL_WS_SURBL Contains an URL listed in the WS SURBL blocklist
Thu 2008-08-28 09:45:04: *    [URIs: beppi.com.pt]
Thu 2008-08-28 09:45:04: *  8.0 URIBL_SC_SURBL Contains an URL listed in the SC SURBL blocklist
Thu 2008-08-28 09:45:04: *    [URIs: beppi.com.pt]
Thu 2008-08-28 09:45:04: *  0.4 SUBJECT_EXCESS_BASE64 Subject: base64 encoded encoded unnecessarily
Thu 2008-08-28 09:45:04: *  1.3 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily
Thu 2008-08-28 09:45:04: ---- End SpamAssassin results
Thu 2008-08-28 09:45:04: Spam Filter score/req: 24.30/12.0
Thu 2008-08-28 09:45:04: Message refused because spam score is too high
Thu 2008-08-28 09:45:04: --> 554 Sorry, message looks like SPAM to me
Thu 2008-08-28 09:45:04: <-- QUIT

[ 本帖最后由 mayborn 于 2008-8-29 02:33 编辑 ]

作者: mayborn 时间: 2008-8-29 02:50
改成28以后
sohu的邮件被表为spam，163，gmail，google app，yeah，foxmail都ok
等着垃圾邮件滚滚来了

欢迎光临邮件服务器-邮件系统-邮件技术论坛(BBS) (http://bbs.5dmail.cn/)