还是winwebmail安全问题

dooman

WinWebMail 老被扫描咋办？？？
用的black ice防火墙，老出现“tcp_probe_SMTP”
另外：winwebmail权限设置怎么才比较安全？？

我的VPS里装上了iis+mysql+php5+zend(以前装过dedecms，现dedecms处于瘫痪状态)、DZ论坛(以前配置环境重新装了，现处于瘫痪状态)

贴上black ice的日志：

Time, Event, Intruder, Count
2010-3-3 11:54:51, TCP_Probe_SQL, astonishinglifeahead.com, 1
2010-3-3 11:51:10, TCP_Probe_SMTP, mail.crocus.dk, 23
2010-3-3 11:49:06, TCP_Probe_SQL, 211.147.218.77, 18
2010-3-3 11:43:52, TCP_Probe_SMTP, noltsofficefurniture.com, 24
2010-3-3 11:43:36, TCP_Probe_SMTP, mail.experian.es, 24
2010-3-3 11:43:17, TCP_Probe_SMTP, admin.bigbadhosting.com, 5
2010-3-3 11:39:56, TCP_Probe_SMTP, 193.158.103.164, 3
2010-3-3 11:39:42, TCP_Probe_SMTP, mail.sailblog.cn, 12
2010-3-3 11:36:42, TCP_Probe_Other, 125.119.165.127, 1
2010-3-3 11:34:34, TCP_Probe_Other, 222.87.184.195, 2
2010-3-3 11:30:03, TCP_Probe_Other, ang58.kingswoodfloors.com, 3
2010-3-3 11:29:58, TCP_Probe_HTTP, 123.117.56.34, 1
2010-3-3 11:26:13, TCP_Probe_SMTP, adslfixo-b4-119-68.telepac.pt, 3
2010-3-3 11:25:29, TCP_Probe_Proxy, 222.186.13.75, 1
2010-3-3 11:25:01, TCP_Probe_SQL, 211.157.35.55, 1
2010-3-3 11:23:20, TCP_Probe_SQL, 61.147.126.92, 1
2010-3-3 11:11:30, TCP_Data_Changed, 124.131.90.21, 212
2010-3-3 11:06:39, TCP_Probe_SQL, 60.173.9.53, 1
2010-3-3 10:49:16, TCP_Probe_SMTP, 220.181.26.192, 4
2010-3-3 10:47:39, MSRPC_RemoteActivate_Bo, 254.167.177.60.broad.hz.zj.dynamic.163data.com.cn, 1
2010-3-3 10:47:15, TCP_Probe_SQL, 222.35.141.160, 1
2010-3-3 10:46:20, TCP_Probe_Other, 202.43.155.68, 1
2010-3-3 10:44:48, TCP_Probe_Other, 221.10.98.120, 1
2010-3-3 10:36:46, TCP_Probe_Socks, 222.186.12.40, 1
2010-3-3 10:34:27, TCP_Probe_Other, 60.10.1.169, 1
2010-3-3 10:26:29, FTP_User_Root, 121.14.220.61, 1
2010-3-3 10:26:29, FTP_User_Root, 121.14.220.61, 1
2010-3-3 10:26:29, FTP_Auth_Failed, 121.14.220.61, 10
2010-3-3 10:26:28, FTP_User_Root, 121.14.220.61, 1
2010-3-3 10:26:28, FTP_User_Root, 121.14.220.61, 1
2010-3-3 10:26:28, FTP_User_Root, 121.14.220.61, 1
2010-3-3 10:26:28, FTP_User_Root, 121.14.220.61, 1
2010-3-3 10:26:28, FTP_User_Root, 121.14.220.61, 1
2010-3-3 10:26:27, FTP_User_Root, 121.14.220.61, 1
2010-3-3 10:26:27, FTP_User_Root, 121.14.220.61, 1
2010-3-3 10:26:27, FTP_User_Root, 121.14.220.61, 1
2010-3-3 10:16:58, TCP_Probe_SMTP, 59.44.141.236, 4
2010-3-3 10:09:11, TCP_Probe_SMTP, 100.3.63.58.broad.gz.gd.dynamic.163data.com.cn, 2
2010-3-3 10:08:23, TCP_Probe_Other, pc0.zz.ha.cn, 1
2010-3-3 10:06:29, TCP_Probe_Other, 60.6.206.13, 1
2010-3-3 9:57:21, TCP_Probe_SMTP, 119.139.227.116, 3
2010-3-3 9:56:59, TCP_Probe_SMTP, 119.139.177.35, 6
2010-3-3 9:55:52, TCP_Probe_SMTP, n15a.bullet.mail.mud.yahoo.com, 9
2010-3-3 9:53:36, TCP_Probe_SMTP, 113.141.79.168, 1
2010-3-3 9:52:05, TCP_Probe_HTTP, 123.97.24.235, 2
2010-3-3 9:52:04, TCP_Probe_HTTP, 57.90.91.125.broad.st.gd.dynamic.163data.com.cn, 6
2010-3-3 9:52:03, TCP_Probe_HTTP, 58.242.50.77, 3
2010-3-3 9:52:03, TCP_Probe_HTTP, 219.232.36.194, 39
2010-3-3 9:52:00, TCP_Probe_HTTP, 123.115.251.190, 6
2010-3-3 9:51:59, TCP_Probe_HTTP, 210.34.152.13, 84
2010-3-3 9:51:54, TCP_Probe_HTTP, baiduspider-123-125-66-77.crawl.baidu.com, 1
2010-3-3 9:51:52, TCP_Probe_HTTP, baiduspider-123-125-66-83.crawl.baidu.com, 1
2010-3-3 9:51:48, TCP_Probe_HTTP, 119.123.211.209, 15
2010-3-3 9:51:47, TCP_Probe_HTTP, 122.227.29.66, 27
2010-3-3 9:48:51, TCP_Probe_SQL, 211.147.218.77, 16
2010-3-3 9:48:07, TCP_Probe_SMTP, mail.crocus.dk, 21
2010-3-3 9:47:58, TCP_Probe_Other, VE047363, 1
2010-3-3 9:47:49, TCP_Probe_Other, 222.186.12.40, 1
2010-3-3 9:47:13, TCP_Probe_SMTP, 119.139.177.35, 5
2010-3-3 9:43:58, TCP_Probe_SMTP, 116.30.85.117, 3
2010-3-3 9:43:03, TCP_Probe_Other, 222.87.184.195, 1
2010-3-3 9:40:15, TCP_Probe_SMTP, mail.experian.es, 18
2010-3-3 9:39:35, TCP_Probe_SMTP, noltsofficefurniture.com, 10
2010-3-3 9:30:12, TCP_Probe_Other, 58.23.127.24, 1
2010-3-3 9:29:52, TCP_Probe_SQL, 113.205.80.131, 1
2010-3-3 9:25:11, TCP_Probe_SMTP, adslfixo-b4-119-68.telepac.pt, 3
2010-3-3 9:20:04, TCP_Probe_Other, 61.191.188.22, 2
2010-3-3 9:14:52, TCP_Probe_Other, ang58.kingswoodfloors.com, 2
2010-3-3 9:08:10, TCP_Probe_SMTP, n15a.bullet.mail.mud.yahoo.com, 9
2010-3-3 9:06:14, TCP_Probe_Socks, 61.143.134.52, 1
2010-3-3 9:04:16, TCP_Probe_SMTP, 220.181.26.192, 4
2010-3-3 9:01:04, TCP_Probe_Other, 118-160-210-42.dynamic.hinet.net, 6
2010-3-3 8:59:10, TCP_Probe_SQL, astonishinglifeahead.com, 1
2010-3-3 8:56:22, TCP_Probe_Proxy, 222.186.12.40, 1
2010-3-3 8:55:14, MSRPC_RemoteActivate_Bo, 60.169.0.36, 1
2010-3-3 8:50:20, TCP_Probe_SQL, 222.35.141.160, 1
2010-3-3 8:49:44, TCP_Probe_Other, 58.221.33.5, 1
2010-3-3 8:49:01, TCP_Probe_Proxy, dsl.static8121422352.ttnet.net.tr, 2
2010-3-3 8:46:48, TCP_Probe_SQL, 123.176.41.14, 1
2010-3-3 8:44:31, TCP_Probe_Socks, 205.209.136.182, 1
2010-3-3 8:42:58, TCP_Probe_SQL, 221.203.168.98, 1
2010-3-3 8:42:27, TCP_Probe_SMTP, 119.123.141.56, 6
2010-3-3 8:41:55, HTTP_GET_SQL_UnionSelect, 60.190.217.28, 3
2010-3-3 8:30:37, TCP_Probe_SMTP, 123.64.70.129, 3
2010-3-3 8:25:13, TCP_Probe_SQL, 221.7.154.28, 1
2010-3-3 8:20:08, TCP_Probe_SQL, 61.183.175.95, 1