邮件服务器-邮件系统-邮件技术论坛(BBS)

标题: 【已解决】关于webmail的被封问题 [打印本页]

作者: zqslzr 时间: 2012-2-14 10:39
标题: 【已解决】关于webmail的被封问题
本帖最后由山坛兄弟于 2012-2-17 10:16 编辑

这是第二次在电脑上装webmail了上次也是这样的问题，一直被封没办

法停了。

注：邮件系统webmail3,8,1,3 系统2003系统（加iis）固定ip

装好以后一直没动，建立俩个账号，一直没动，在不到一个星期突然就

msn收不到邮件了提示

[

无法将您的邮件投递至以下指定地址:

xxx@msn,com : 550 OU-001 (COL0-MC3-F47)Unfortunately, messages

from 2x,x,x,x weren't sent, Please contactyour Internet

service p

----- Original message follows,

Received: from [2x,x,x,x]; Mon, 13 Feb 201209:13:59 +0800

Message-ID:<E0B6E27ADDA9492CB66945FE2C828388@sdshipe39f864d>

From: "xxx" <xxx@sdship,com>

Cc: <xxx@msn,com>

Subject: xxx

Date: Mon, 13 Feb 2012 09:13:50 +0800

MIME-Version: 1,0

Content-Type: text/plain;

charset=b2312"

Content-Transfer-Encoding: base64

X-Priority: 3

X-MSMail-Priority: Normal

X-Mailer: Microsoft Outlook Express 6,00,3790,4657

X-MimeOLE: Produced By Microsoft MimeOLE V6,00,3790,4913

550错误

163可以正常收到

msn往回发送也可以收到

由此想到上次的ip被封问题。

,kloth,net/services/dnsbl,php 显示

,,, here is the Multi-DNSBL-check resultfor 2x,x,x,x from

these lists :

Listed in cbl,abuseat,org, cbl,abuseat,org: 127,0,0,2 :

Blocked - see cbl,abuseat,org/lookup,cgi?ip=2x,x,x,x -

(ttl:3600) [0,0249 sec]

Not listed in dnsbl,ahbl,org, ,ahbl,org [0,0089 sec]

Not listed in ircbl,ahbl,org, ,ahbl,org [0,0091 sec]

Not listed in virbl,dnsbl,bit,nl, virbl,bit,nl[0,0209 sec]

Listed in blackholes,five-ten-sg,com, ,five-ten-sg,com :

127,0,0,2 : added 2001-04-20;we do not accept mail from china

- (ttl:362819) [0,0013 sec]

Listed in blackholes,five-ten-sg,com, ,five-ten-sg,com :

127,0,0,2 : added 2001-04-19;china does not seem to care about

spam - (ttl:362819) [0,0014 sec]

Not listed in dnsbl,inps,de, dnsbl,inps,de[0,0134 sec]

Not listed in ix,dnsbl,manitu,net, ,dnsbl,manitu,net/

[0,0536 sec]

Listed in no-more-funn,moensted,dk,moensted,dk/spam/no-more-

funn/ : 127,0,0,2 : added 2001-04-19;china does not seem to

care about spam add ,76+77 - (ttl:2100) [0,0917sec]

Listed in no-more-funn,moensted,dk, moensted,dk/spam/no-more-

funn/ : 127,0,0,2 : CN does not seem tocare about spam see

moensted,dk/spam/no-more-funn/?addr=2x,x,x,x1173065559

# - (ttl:2100) [0,0918 sec]

Not listed in combined,njabl,org, njabl,org[0,1155 sec]

Not listed in dnsbl,njabl,org, njabl,org [0,0126sec]

Not listed in dnsbl,sorbs,net, ,nl,sorbs,net [2,3369 sec]

Not listed in bl,spamcannibal,org, ,spamcannibal,org [0,0159

sec]

Not listed in bl,spamcop,net, ,spamcop,net [0,0199 sec]

Not listed in sbl,spamhaus,org, ,spamhaus,org/sbl/ [0,0097

sec]

Listed in xbl,spamhaus,org, ,spamhaus,org/xbl/ : 127,0,0,4 :

,spamhaus,org/query/bl?ip=2x,x,x,x - (ttl:900)

[0,0293 sec]

Not listed in pbl,spamhaus,org, ,spamhaus,org/pbl/ [0,0453

sec]

Not listed in dnsbl-1,uceprotect,net, ,uceprotect,net

[0,0086 sec]

Not listed in dnsbl-2,uceprotect,net, ,uceprotect,net

[0,0128 sec]

Not listed in dnsbl-3,uceprotect,net, ,uceprotect,net

[0,0142 sec]

Not listed in db,wpbl,info, ,wpbl,info [0,0093 sec]

Not listed in list,dnswl,org, ,dnswl,org [0,0042 sec]

________________________________________

Statistics:

23 checks performed in 2,9512 seconds,

Found 6 listed, 17 unlisted in thiscollection of DNSBLs,

Please note, that dnswl,org is a whitelistnot a blacklist,

What to do, if 'your' IP address is listed?

Since these lists are doing their workcarefully, there is a

very strong evidence that 'your' IP addressis associated with

spam activity, Clean your environment orhave your ISP to clean

his environment and visit the DNSBL toarrange for a de-

listing,

If your receipient's mail server isrejecting your mails by

using one of these DNSBLs, you mayadditionally approach your

receipient to whitelist your IP address (orhave his ISP to do

so),

If in doubt, if the lists are alife and thechecks are working,

you may check for the test IP address 127,0,0,2,which should

trigger most lists as a standard testrecord,

________________________________________

我感觉主要是 Listed in cbl,abuseat,org, cbl,abuseat,org和

Listed in xbl,spamhaus,org

我这边没发送邮件然后就这几个账号别人也没用

为什么就被封了能。？

是因为被入侵了人家发送的还是？webmail自己发送的邮件？很困惑

注： log日志是

Sun, 12 Feb 2012 04:07:26 Smtp登录, IP: 113,128,156,212 , Port

40526

Sun, 12 Feb 2012 04:07:27 用户: admin 通过了SMTP发信身份认证,

Sun, 12 Feb 2012 04:08:59 [113,128,156,212]关闭连接,

Sun, 12 Feb 2012 06:22:16 Smtp登录, IP: 122,225,101,202 , Port

63714

Sun, 12 Feb 2012 06:22:17 [122,225,101,202]关闭Smtp连接,

Sun, 12 Feb 2012 06:22:30 [122,225,101,202]关闭连接,

Sun, 12 Feb 2012 06:55:11 Smtp登录, IP: 122,225,101,202 , Port

28753

Sun, 12 Feb 2012 06:55:12 [122,225,101,202]关闭Smtp连接,

Sun, 12 Feb 2012 06:55:25 [122,225,101,202]关闭连接,

Sun, 12 Feb 2012 07:40:55 Pop3登录, IP: 74,93,195,217 , Port

3996

Sun, 12 Feb 2012 07:40:55 Pop3登录, IP: 74,93,195,217 , Port

4134

Sun, 12 Feb 2012 07:40:56 POP3身份验证失败, 用户: TEST

Sun, 12 Feb 2012 07:40:56 用户: TEST [74,93,195,217] 退出POP3服

务,

Sun, 12 Feb 2012 07:40:56 Pop3登录, IP: 74,93,195,217 , Port

4586

Sun, 12 Feb 2012 07:40:56 Pop3登录, IP: 74,93,195,217 , Port

4726

Sun, 12 Feb 2012 07:40:56 Pop3登录, IP: 74,93,195,217 , Port

4735

Sun, 12 Feb 2012 07:40:57 POP3身份验证失败, 用户: TEST

Sun, 12 Feb 2012 07:40:57 POP3密码验证失败, 用户: ADMIN

Sun, 12 Feb 2012 07:40:57 [74,93,195,217] 关闭连接,

Sun, 12 Feb 2012 07:40:57 用户: TEST [74,93,195,217] 退出POP3服

务,

Sun, 12 Feb 2012 07:40:57 用户: ADMIN [74,93,195,217] 退出POP3

服务,

Sun, 12 Feb 2012 07:40:57 Pop3登录, IP: 74,93,195,217 , Port

1587

Sun, 12 Feb 2012 07:40:57 Pop3登录, IP: 74,93,195,217 , Port

1586

Sun, 12 Feb 2012 07:40:58 POP3登录成功, 用户: ADMIN

[74,93,195,217]

Sun, 12 Feb 2012 07:40:58 POP3身份验证失败, 用户: TEST

Sun, 12 Feb 2012 07:40:58 [74,93,195,217] 关闭连接,

Sun, 12 Feb 2012 07:41:01 用户: ADMIN [74,93,195,217] 退出POP3

服务,

Sun, 12 Feb 2012 07:41:01 用户: TEST [74,93,195,217] 退出POP3服

务,

Sun, 12 Feb 2012 07:41:02 Pop3登录, IP: 74,93,195,217 , Port

3187

Sun, 12 Feb 2012 07:41:02 [74,93,195,217] 关闭连接,

Sun, 12 Feb 2012 07:41:02 POP3身份验证失败, 用户: TEST

Sun, 12 Feb 2012 07:41:02 用户: TEST [74,93,195,217] 退出POP3服

务,

Sun, 12 Feb 2012 07:41:03 Pop3登录, IP: 74,93,195,217 , Port

3774

Sun, 12 Feb 2012 07:41:03 POP3身份验证失败, 用户: TEST

Sun, 12 Feb 2012 07:41:03 [74,93,195,217] 关闭连接,

Sun, 12 Feb 2012 07:41:04 用户: TEST [74,93,195,217] 退出POP3服

务,

Sun, 12 Feb 2012 07:41:04 Pop3登录, IP: 74,93,195,217 , Port

4460

Sun, 12 Feb 2012 07:41:04 POP3身份验证失败, 用户: TEST

Sun, 12 Feb 2012 07:41:05 [74,93,195,217] 关闭连接,

Sun, 12 Feb 2012 07:41:05 用户: TEST [74,93,195,217] 退出POP3服

务,

Sun, 12 Feb 2012 07:41:05 Pop3登录, IP: 74,93,195,217 , Port

1142

Sun, 12 Feb 2012 07:41:06 POP3身份验证失败, 用户: TEST

Sun, 12 Feb 2012 07:41:06 [74,93,195,217] 关闭连接,

Sun, 12 Feb 2012 07:41:06 用户: TEST [74,93,195,217] 退出POP3服

务,

Sun, 12 Feb 2012 07:41:06 Pop3登录, IP: 74,93,195,217 , Port

1544

Sun, 12 Feb 2012 07:41:07 POP3身份验证失败, 用户: TEST

Sun, 12 Feb 2012 07:41:07 [74,93,195,217] 关闭连接,

Sun, 12 Feb 2012 07:41:07 用户: TEST [74,93,195,217] 退出POP3服

务,

Sun, 12 Feb 2012 07:41:07 Pop3登录, IP: 74,93,195,217 , Port

1959

Sun, 12 Feb 2012 07:41:08 POP3身份验证失败, 用户: TEST

Sun, 12 Feb 2012 07:41:08 [74,93,195,217] 关闭连接,

Sun, 12 Feb 2012 07:41:08 用户: TEST [74,93,195,217] 退出POP3服

务,

Sun, 12 Feb 2012 07:41:08 Pop3登录, IP: 74,93,195,217 , Port

2432

Sun, 12 Feb 2012 07:41:09 POP3身份验证失败, 用户: TEST

Sun, 12 Feb 2012 07:41:09 [74,93,195,217] 关闭连接,

Sun, 12 Feb 2012 07:41:09 用户: TEST [74,93,195,217] 退出POP3服

务,

Sun, 12 Feb 2012 07:41:10 Pop3登录, IP: 74,93,195,217 , Port

2869

Sun, 12 Feb 2012 07:41:10 POP3身份验证失败, 用户: TEST

Sun, 12 Feb 2012 07:41:10 [74,93,195,217] 关闭连接,

Sun, 12 Feb 2012 07:41:10 用户: TEST [74,93,195,217] 退出POP3服

务,

Sun, 12 Feb 2012 07:41:11 Pop3登录, IP: 74,93,195,217 , Port

3248

Sun, 12 Feb 2012 07:41:11 POP3身份验证失败, 用户: TEST

Sun, 12 Feb 2012 07:41:11 [74,93,195,217] 关闭连接,

Sun, 12 Feb 2012 07:41:12 用户: TEST [74,93,195,217] 退出POP3服

务,

Sun, 12 Feb 2012 07:41:12 Pop3登录, IP: 74,93,195,217 , Port

3928

Sun, 12 Feb 2012 07:41:12 POP3身份验证失败, 用户: TEST

Sun, 12 Feb 2012 07:41:13 [74,93,195,217] 关闭连接,

Sun, 12 Feb 2012 07:41:13 用户: TEST [74,93,195,217] 退出POP3服

务,

Sun, 12 Feb 2012 07:41:13 Pop3登录, IP: 74,93,195,217 , Port

4522

Sun, 12 Feb 2012 07:41:14 POP3身份验证失败, 用户: TEST

Sun, 12 Feb 2012 07:41:14 [74,93,195,217] 关闭连接,

Sun, 12 Feb 2012 07:41:14 用户: TEST [74,93,195,217] 退出POP3服

务,

Sun, 12 Feb 2012 07:41:14 Pop3登录, IP: 74,93,195,217 , Port

1160

Sun, 12 Feb 2012 07:41:15 POP3身份验证失败, 用户: TEST

Sun, 12 Feb 2012 07:41:15 [74,93,195,217] 关闭连接,

Sun, 12 Feb 2012 07:41:15 用户: TEST [74,93,195,217] 退出POP3服

务,

Sun, 12 Feb 2012 07:41:16 [74,93,195,217] 关闭连接,

Sun, 12 Feb 2012 07:42:27 [74,93,195,217] 关闭连接,

Sun, 12 Feb 2012 08:54:01 Smtp登录, IP: 14,153,89,33 , Port

38436

Sun, 12 Feb 2012 08:54:02 [14,153,89,33] 关闭Smtp连接,

Sun, 12 Feb 2012 08:54:14 [14,153,89,33] 关闭连接,

Sun, 12 Feb 2012 11:31:49 Smtp登录, IP: 82,7,165,5 , Port 54653

Sun, 12 Feb 2012 11:32:02 [82,7,165,5] 关闭连接,

Sun, 12 Feb 2012 15:53:59 Smtp登录, IP: 117,79,84,4 , Port

38612

Sun, 12 Feb 2012 15:54:00 [117,79,84,4] 关闭Smtp连接,

Sun, 12 Feb 2012 15:54:12 [117,79,84,4] 关闭连接,

这是星期天的没有人在，我们周日是没人的

作者: 山坛兄弟 时间: 2012-2-16 11:50
固定IP做好了策略一般都不会被封的。

欢迎光临邮件服务器-邮件系统-邮件技术论坛(BBS) (http://bbs.5dmail.cn/)