一封邮件遗失，日志上找不到这封邮件的最后踪影

nfore

一封邮件收件人没有收到，见红色的字：


Thu 2008-10-16 19:44:13: ----------
Thu 2008-10-16 19:44:14: Session 6733; child 2; thread 568
Thu 2008-10-16 19:44:13: 接受 SMTP 连接来自 [61.145.121.44:39477]
Thu 2008-10-16 19:44:13: --> 220 mail.xxxxxx.com ESMTP MDaemon 9.6.5; Thu, 16 Oct 2008 19:44:13 +0800
Thu 2008-10-16 19:44:13: <-- HELO corpease.net
Thu 2008-10-16 19:44:13: --> 250 mail.xxxxxx.com Hello corpease.net, pleased to meet you
Thu 2008-10-16 19:44:13: <-- MAIL FROM:<wei@xxxxxx.com>
Thu 2008-10-16 19:44:13: Performing SPF lookup (xxxxxx.com / 61.145.121.44)
Thu 2008-10-16 19:44:13: *  Result: none; no SPF record in DNS
Thu 2008-10-16 19:44:13: ---- End SPF results
Thu 2008-10-16 19:44:13: --> 250 <wei@xxxxxx.com>, Sender ok
Thu 2008-10-16 19:44:13: <-- RCPT TO:<Guo@abcd.cn>
Thu 2008-10-16 19:44:13: 执行 DNS-BL 查询（61.145.121.44 - 正在连接 IP）
Thu 2008-10-16 19:44:13: *  cblless.anti-spam.org.cn - 通过
Thu 2008-10-16 19:44:13: *  zen.spamhaus.org - 通过
Thu 2008-10-16 19:44:13: *  zen.spamhaus.org - 通过
Thu 2008-10-16 19:44:14: *  bl.spamcop.net - 通过
Thu 2008-10-16 19:44:14: ---- 结束 DNS-BL 结果
Thu 2008-10-16 19:44:14: --> 250 <Guo@abcd.cn>, Recipient ok
Thu 2008-10-16 19:44:14: <-- DATA
Thu 2008-10-16 19:44:14: Creating temp file (SMTP): d:\mdaemon\queues\temp\md50000026421.tmp
Thu 2008-10-16 19:44:14: --> 354 Enter mail, end with <CRLF>.<CRLF>
Thu 2008-10-16 19:44:14: Message size: 18140 bytes
Thu 2008-10-16 19:44:14: Performing DKIM lookup
Thu 2008-10-16 19:44:14: *  File: d:\mdaemon\queues\temp\md50000026421.tmp
Thu 2008-10-16 19:44:14: *  Message-ID: [email=99FBDFF6C67B4FDC97C896672CA6C3F8@200809261923]99FBDFF6C67B4FDC97C896672CA6C3F8@200809261923[/email]
Thu 2008-10-16 19:44:14: *  Result: neutral
Thu 2008-10-16 19:44:14: ---- End DKIM results
Thu 2008-10-16 19:44:14: Performing DomainKeys lookup (Sender: wei@xxxxxx.com)
Thu 2008-10-16 19:44:14: *  File: d:\mdaemon\queues\temp\md50000026421.tmp
Thu 2008-10-16 19:44:14: *  Message-ID: [email=99FBDFF6C67B4FDC97C896672CA6C3F8@200809261923]99FBDFF6C67B4FDC97C896672CA6C3F8@200809261923[/email]
Thu 2008-10-16 19:44:14: *  Querying for policy: xxxxxx.com
Thu 2008-10-16 19:44:14: *    Querying: _domainkey.xxxxxx.com ...
Thu 2008-10-16 19:44:14: *    DNS: *  名称服务器报告未知的域名
Thu 2008-10-16 19:44:14: *  Result: neutral
Thu 2008-10-16 19:44:14: ---- End DomainKeys results
Thu 2008-10-16 19:44:14: 邮件创建 successful：d:\mdaemon\queues\inbound\md50000912605.msg
Thu 2008-10-16 19:44:14: --> 250 Ok, message saved <Message-ID: [email=99FBDFF6C67B4FDC97C896672CA6C3F8@200809261923]99FBDFF6C67B4FDC97C896672CA6C3F8@200809261923[/email]>
Thu 2008-10-16 19:44:14: <-- QUIT
Thu 2008-10-16 19:44:14: --> 221 See ya in cyberspace
Thu 2008-10-16 19:44:14: SMTP 会话成功（进/出字节：18258/391）
Thu 2008-10-16 19:44:14: ----------


Thu 2008-10-16 19:44:16: ----------
Thu 2008-10-16 19:44:16: Routing message (inbound queue): d:\mdaemon\queues\inbound\md50000912605.msg
Thu 2008-10-16 19:44:16: *  From: wei@xxxxxx.com; Recipient: Guo@abcd.cn; Size: 18730; Message: d:\mdaemon\queues\local\md50002052511.msg
2008-10-16 19:44:16: *  Subject: =?gb2312?B?UmU6IMfrv+4tLcnPuqOw7DA4xOoxMNTC06a4trXE1+LGvrfRL87v?= =?gb2312?B?0rW30S+157fR?=
Thu 2008-10-16 19:44:16: *  Message-ID: [email=99FBDFF6C67B4FDC97C896672CA6C3F8@200809261923]99FBDFF6C67B4FDC97C896672CA6C3F8@200809261923[/email]
Thu 2008-10-16 19:44:16: ----------



Thu 2008-10-16 19:44:23: ----------
Thu 2008-10-16 19:44:23: Routing message (local queue): d:\mdaemon\queues\local\pd50002052511.msg
Thu 2008-10-16 19:44:23: *  From: wei@xxxxxx.com; Recipient: Guo@abcd.cn
Thu 2008-10-16 19:44:23: *  Subject: =?gb2312?B?UmU6IMfrv+4tLcnPuqOw7DA4xOoxMNTC06a4trXE1+LGvrfRL87v?= =?gb2312?B?0rW30S+157fR?=
Thu 2008-10-16 19:44:23: *  Message-ID: <[email=99FBDFF6C67B4FDC97C896672CA6C3F8@200809261923]99FBDFF6C67B4FDC97C896672CA6C3F8@200809261923[/email]>
Thu 2008-10-16 19:44:23: *  大小：19997; 邮件：d:\mail\users\abcd.cn\Guo\md50000001121.msg
Thu 2008-10-16 19:44:23: ----------



Thu 2008-10-16 15:08:30: ----------
Thu 2008-10-16 15:08:30: Session 7848; child 3
Thu 2008-10-16 15:08:30: 接受 POP 连接来自 [59.56.176.40:1130]
Thu 2008-10-16 15:08:30: --> +OK abcd.cn POP MDaemon 9.6.5 ready <MDAEMON-F200810161508.AA083093MD8432@abcd.cn>
Thu 2008-10-16 15:08:30: <-- USER Guo@abcd.cn
Thu 2008-10-16 15:08:30: --> +OK Guo@abcd.cn... User ok
Thu 2008-10-16 15:08:30: <-- PASS ******
Thu 2008-10-16 15:08:30: --> +OK Guo@abcd.cn's mailbox has 64 total messages (2353461 octets)
Thu 2008-10-16 15:08:30: <-- STAT
Thu 2008-10-16 15:08:30: --> +OK 64 2353461
Thu 2008-10-16 15:08:30: <-- LIST
Thu 2008-10-16 15:08:30: --> +OK 64 2353461
Thu 2008-10-16 15:08:30: 发送 LIST 回复（不记录）
Thu 2008-10-16 15:08:30: <-- UIDL 1
Thu 2008-10-16 15:08:30: --> +OK 1 MD50000001025:MSG:56591:29958068:2196780872
Thu 2008-10-16 15:08:30: <-- UIDL
Thu 2008-10-16 15:08:30: --> +OK
Thu 2008-10-16 15:08:30: 发送 UIDL 回复（不记录）
Thu 2008-10-16 15:08:30: <-- RETR 64
Thu 2008-10-16 15:08:30: --> +OK 15907 octets
Thu 2008-10-16 15:08:30: 正在发送 <D:\MAIL\Users\abcd.cn\Guo\md50000001120.msg> 到 [xxx.xxx.xxx.xxx]
Thu 2008-10-16 15:08:30: 传输完成
Thu 2008-10-16 15:08:30: <-- QUIT
Thu 2008-10-16 15:08:30: --> +OK Guo@abcd.cn abcd.cn POP Server signing off (64 messages left)
Thu 2008-10-16 15:08:30: POP session complete (Bytes in/out: 76/19942)
Thu 2008-10-16 15:08:30: ----------

POP没有找到接收 md50000001121.msg 的记录！这封邮件哪里去了？收件人没有收到！


Fri 2008-10-17 14:09:00: ----------
Fri 2008-10-17 14:09:03: Session 7919; child 5
Fri 2008-10-17 14:09:03: 接受 POP 连接来自 [192.168.74.110:49609]
Fri 2008-10-17 14:09:03: SSL negotiation successful (TLS 1.0, 1024 bit key exchange, 128 bit RC4 encryption)
Fri 2008-10-17 14:09:03: --> +OK abcd.cn POP MDaemon 9.6.5 ready <MDAEMON-F200810171409.AA0903562MD6385@abcd.cn>
Fri 2008-10-17 14:09:03: <-- USER Guo@abcd.cn
Fri 2008-10-17 14:09:03: --> +OK Guo@abcd.cn... User ok
Fri 2008-10-17 14:09:03: <-- PASS ******
Fri 2008-10-17 14:09:03: --> +OK Guo@abcd.cn's mailbox has 1 total messages (2807 octets)
Fri 2008-10-17 14:09:03: <-- STAT
Fri 2008-10-17 14:09:03: --> +OK 1 2807
Fri 2008-10-17 14:09:03: <-- LIST
Fri 2008-10-17 14:09:03: --> +OK 1 2807
Fri 2008-10-17 14:09:03: 发送 LIST 回复（不记录）
Fri 2008-10-17 14:09:03: <-- UIDL 1
Fri 2008-10-17 14:09:03: --> +OK 1 MD50000001122:MSG:2807:29962270:3552796830
Fri 2008-10-17 14:09:03: <-- UIDL
Fri 2008-10-17 14:09:03: --> +OK
Fri 2008-10-17 14:09:03: 发送 UIDL 回复（不记录）
Fri 2008-10-17 14:09:03: <-- RETR 1
Fri 2008-10-17 14:09:03: --> +OK 2807 octets
Fri 2008-10-17 14:09:03: 正在发送 <D:\MAIL\Users\abcd.cn\Guo\md50000001122.msg> 到 [xxx.xxx.xxx.xxx]
Fri 2008-10-17 14:09:03: 传输完成
Fri 2008-10-17 14:09:03: <-- QUIT
Fri 2008-10-17 14:09:03: --> +OK Guo@abcd.cn abcd.cn POP Server signing off (1 messages left)
Fri 2008-10-17 14:09:03: POP session complete (Bytes in/out: 75/3479)
Fri 2008-10-17 14:09:03: ----------

nfore

自己UP,

此用户目录有其它邮件，但没有这封。杀毒软件是诺顿，有杀任何文件方面都有记录，我查了没有。服务器也没有中毒。服务器只安装了MD这个服务。

nfore

该用户在 接收 2008-10-16 15:08:30 接收 md50000001120.msg
和  2008-10-17 14:09:03: 接收 md50000001122.msg 是前后两天的时间

在这两个时间中间,用户有POP上来,但日志上显示没有新邮件,未收下任何邮件.

lwz_08

有没有收到系统过滤之类的通知?

nfore

原帖由 lwz_08 于 2008-10-23 09:51 发表
有没有收到系统过滤之类的通知?

这是过滤日志的关于这封邮件的：

Thu 2008-10-16 19:44:19: ----------
Thu 2008-10-16 19:44:19: Content Filter processing d:\mdaemon\queues\local\md50002052511.msg...
Thu 2008-10-16 19:44:19: * Message return-path: wei@xxxxxxx.com
Thu 2008-10-16 19:44:19: * Message from: wei@xxxxxx.com
Thu 2008-10-16 19:44:19: * Message to: Guo@abcd.cn
Thu 2008-10-16 19:44:19: * Message subject: Re: 请款xxxxxxxx
Thu 2008-10-16 19:44:19: * Message ID: <[email=99FBDFF6C67B4FDC97C896672CA6C3F8@200809261923]99FBDFF6C67B4FDC97C896672CA6C3F8@200809261923[/email]>
Thu 2008-10-16 19:44:19: Start Content Filter results
Thu 2008-10-16 19:44:19: * Matched 0 of 6 active rules
Thu 2008-10-16 19:44:19: End of Content Filter results
Thu 2008-10-16 19:44:19: ----------