|
|
|
MDAEMON8.1.3版本
这几天IP一直进CBL名单,昨天换一个IP,今天就又被CBL,已经换了4个了,请各位老大帮下忙!服务器上查病毒了,用杀毒软件和查木马软件,都没查到,所有外部邮件的密码也都改了,也不行。
查LOG文件,发现有一些自己发给自己的邮件;例如
Wed 2009-07-15 00:15:56: Session 2622; child 1; thread 676
Wed 2009-07-15 00:15:44: Accepting SMTP connection from [83.6.101.182 : 3280]
Wed 2009-07-15 00:15:44: Performing PTR lookup (182.101.6.83.IN-ADDR.ARPA)
Wed 2009-07-15 00:15:45: * D=182.101.6.83.IN-ADDR.ARPA TTL=(1439) PTR=[aaxp182.neoplus.adsl.tpnet.pl]
Wed 2009-07-15 00:15:45: * Gathering A records...
Wed 2009-07-15 00:15:45: * D=aaxp182.neoplus.adsl.tpnet.pl TTL=(720) A=[83.6.101.182]
Wed 2009-07-15 00:15:45: ---- End PTR results
Wed 2009-07-15 00:15:45: --> 220 logoware.com.cn ESMTP MDaemon 8.1.3; Wed, 15 Jul 2009 00:15:45 +0800
Wed 2009-07-15 00:15:45: <-- EHLO aaxp182.neoplus.adsl.tpnet.pl
Wed 2009-07-15 00:15:45: Performing IP lookup (aaxp182.neoplus.adsl.tpnet.pl)
Wed 2009-07-15 00:15:45: * D=aaxp182.neoplus.adsl.tpnet.pl TTL=(719) A=[83.6.101.182]
Wed 2009-07-15 00:15:45: ---- End IP lookup results
Wed 2009-07-15 00:15:45: --> 250-oware.com.cn Hello aaxp182.neoplus.adsl.tpnet.pl, pleased to meet you
Wed 2009-07-15 00:15:45: --> 250-ETRN
Wed 2009-07-15 00:15:45: --> 250-AUTH=LOGIN
Wed 2009-07-15 00:15:45: --> 250-AUTH LOGIN CRAM-MD5
Wed 2009-07-15 00:15:45: --> 250-8BITMIME
Wed 2009-07-15 00:15:45: --> 250 SIZE 20000000
Wed 2009-07-15 00:15:46: <-- MAIL FROM:<abc@oware.com.cn> SIZE=3762
Wed 2009-07-15 00:15:46: Performing IP lookup (logoware.com.cn)
Wed 2009-07-15 00:15:46: * D=oware.com.cn TTL=(60) A=[58.251.14.211]
d 2009-07-15 00:15:47: * P=001 D=oware.com.cn TTL=(38) MX=[mail.oware.com.cn] {58.252.14.228}
Wed 2009-07-15 00:15:47: ---- End IP lookup results
Wed 2009-07-15 00:15:47: --> 250 <abc@oware.com.cn>, Sender ok
Wed 2009-07-15 00:15:47: <-- RCPT TO:<abc@oware.com.cn>
Wed 2009-07-15 00:15:47: Performing DNS-BL lookup (83.6.101.182 - connecting IP)
Wed 2009-07-15 00:15:47: * sbl-xbl.spamhaus.org - failed
Wed 2009-07-15 00:15:55: * opm.blitzed.org - passed
Wed 2009-07-15 00:15:56: * relays.ordb.org - failed
Wed 2009-07-15 00:15:56: * bl.spamcop.net - passed
Wed 2009-07-15 00:15:56: ---- End DNS-BL results
Wed 2009-07-15 00:15:56: --> 250 <abc@oware.com.cn>, Recipient ok
Wed 2009-07-15 00:15:56: <--
Wed 2009-07-15 00:15:56: --> 500 What? I don't understand that.
Wed 2009-07-15 00:15:56: <-- .
Wed 2009-07-15 00:15:56: --> 500 What? I don't understand that.
Wed 2009-07-15 00:15:56: <-- QUIT
Wed 2009-07-15 00:15:56: --> 221 See ya in cyberspace
Wed 2009-07-15 00:15:56: SMTP session terminated (Bytes in/out: 141/433) |
|