MDaemon 现盗用公司域名发广告垃圾邮件出去，急解

tqj03 · 发表于 2010-12-17 12:42:15

各位，我公司目前用的是MDaemon v10.1.2 简体中文版，目前出现了一个问题，就是外面的人盗用公司域名，前缀随便改个ID发送大量广告信件出去，虽做了内容过滤，但有时候还是能发送出去，有时候邮件归档管理员的收件箱有，同时non-spam也有，请问要如何才能彻底解决盗用域名发广告垃圾信件出去呢？

日志出现如下（playhut为公司域名，kfpbmrm@playhut.net 为盗用公司域名，前缀随便改成的，

Fri 2010-12-17 01:50:51: Content Filter processing d:\mdaemon\queues\local\md50000057434.msg...
Fri 2010-12-17 01:50:51: * Message return-path: XXX@playhut.net
Fri 2010-12-17 01:50:51: * Message from: kfpbmrm@playhut.net
Fri 2010-12-17 01:50:51: * Message to: 管理员ID@playhut.net
Fri 2010-12-17 01:50:51: * Message subject: (Archive Copy) 送你早教光盘
Fri 2010-12-17 01:50:51: * Message ID:
Fri 2010-12-17 01:50:51: Start Content Filter results
Fri 2010-12-17 01:50:51: * Matched 0 of 7 active rules
Fri 2010-12-17 01:50:51: End of Content Filter results
Fri 2010-12-17 01:50:51: ----------
Fri 2010-12-17 01:50:51: Content Filter processing d:\mdaemon\queues\remote\md35000003728.msg...
Fri 2010-12-17 01:50:51: * Message return-path: XXX@playhut.net
Fri 2010-12-17 01:50:51: * Message from: kfpbmrm@playhut.net
Fri 2010-12-17 01:50:51: * Message to: verminex@batelco.com.bh
Fri 2010-12-17 01:50:51: * Message subject: 送你早教光盘
Fri 2010-12-17 01:50:51: * Message ID:
Fri 2010-12-17 01:50:51: Start Content Filter results
Fri 2010-12-17 01:50:51: * Matched 0 of 7 active rules
Fri 2010-12-17 01:50:51: End of Content Filter results
Fri 2010-12-17 01:50:51: ----------
Fri 2010-12-17 01:50:55: Routing message (inbound queue): d:\mdaemon\queues\inbound\md50000035068.msg
Fri 2010-12-17 01:50:55: * From: XXX@playhut.net; Recipient: sailiang.ding@cdcic.com; Size: 1397; Message: d:\mdaemon\queues\remote\md35000003729.msg
Fri 2010-12-17 01:50:55: * From: xxx@playhut.net; Recipient: 管理员ID@playhut.net; Size: 1743; Message: d:\mdaemon\queues\local\md50000057435.msg
Fri 2010-12-17 01:50:55: * Subject: =?utf-8?B?5Zyj6K+e56S85YyF5rS+6YCB5Lit?=
Fri 2010-12-17 01:50:55: * Message-ID:
Fri 2010-12-17 01:50:55: ----------
Fri 2010-12-17 01:50:55: Content Filter processing d:\mdaemon\queues\local\md50000057435.msg...
Fri 2010-12-17 01:50:55: * Message return-path: XXX@playhut.net
Fri 2010-12-17 01:50:55: * Message from: bqby@playhut.net
Fri 2010-12-17 01:50:55: * Message to: 管理员ID@playhut.net
Fri 2010-12-17 01:50:55: * Message subject: (Archive Copy) 圣诞礼包派送中
Fri 2010-12-17 01:50:55: * Message ID:
Fri 2010-12-17 01:50:55: Start Content Filter results
Fri 2010-12-17 01:50:55: * Message matched rule: 主题头、正文包含--移动邮件spam(盗用)
Fri 2010-12-17 01:50:55: * Matched 1 of 7 active rules
Fri 2010-12-17 01:50:55: End of Content Filter results
Fri 2010-12-17 01:50:55: ----------
Fri 2010-12-17 01:50:55: Content Filter processing d:\mdaemon\queues\remote\md35000003729.msg...
Fri 2010-12-17 01:50:55: * Message return-path: XXX@playhut.net
Fri 2010-12-17 01:50:55: * Message from: bqby@playhut.net
Fri 2010-12-17 01:50:55: * Message to: sailiang.ding@cdcic.com
Fri 2010-12-17 01:50:55: * Message subject: 圣诞礼包派送中
Fri 2010-12-17 01:50:55: * Message ID:
Fri 2010-12-17 01:50:55: Start Content Filter results
Fri 2010-12-17 01:50:55: * Message matched rule: 主题头、正文包含--移动邮件spam(盗用)
Fri 2010-12-17 01:50:55: * Matched 1 of 7 active rules
Fri 2010-12-17 01:50:55: End of Content Filter results
Fri 2010-12-17 01:50:55: ----------
Fri 2010-12-17 01:50:56: Routing message (local queue): d:\mdaemon\queues\local\pd50000057434.msg
Fri 2010-12-17 01:50:56: * From: kfpbmrm@playhut.net; Recipient: 管理员ID@playhut.net
Fri 2010-12-17 01:50:56: * Subject: (Archive Copy) =?utf-8?B?6YCB5L2g5pep5pWZ5YWJ55uY?=
Fri 2010-12-17 01:50:56: * Message-ID:
Fri 2010-12-17 01:50:56: * 大小：1785; 邮件：d:\mdaemon\users\playhut.net\admin2\md50000014552.msg
Fri 2010-12-17 01:50:56: ----------
Fri 2010-12-17 01:50:58: Session 2897; child 1
Fri 2010-12-17 01:50:51: Parsing message <d:\mdaemon\queues\remote\pd35000003728.msg>
Fri 2010-12-17 01:50:51: * From: kfpbmrm@playhut.net
Fri 2010-12-17 01:50:51: * To: verminex@batelco.com.bh
Fri 2010-12-17 01:50:51: * Subject: =?utf-8?B?6YCB5L2g5pep5pWZ5YWJ55uY?=
Fri 2010-12-17 01:50:51: * Size (bytes): 1439
Fri 2010-12-17 01:50:51: * Message-ID:
Fri 2010-12-17 01:50:51: Attempting SMTP connection to [batelco.com.bh]
Fri 2010-12-17 01:50:51: Resolving MX records for [batelco.com.bh] (DNS Server: 202.96.128.166)...
Fri 2010-12-17 01:50:51: * P=010 S=000 D=batelco.com.bh TTL=(31) MX=[mail2.batelco.com.bh] {193.188.97.107}
Fri 2010-12-17 01:50:51: * P=010 S=001 D=batelco.com.bh TTL=(31) MX=[mail1.batelco.com.bh] {193.188.97.106}
Fri 2010-12-17 01:50:51: Attempting SMTP connection to [193.188.97.107:25]
Fri 2010-12-17 01:50:51: Waiting for socket connection...
Fri 2010-12-17 01:50:51: * Connection established (192.168.2.10:1100 -> 193.188.97.107:25)
Fri 2010-12-17 01:50:51: Waiting for protocol to start...
Fri 2010-12-17 01:50:54: <-- 220 mail2.batelco.com.bh ESMTP
Fri 2010-12-17 01:50:54: --> EHLO playhut.net
Fri 2010-12-17 01:50:54: <-- 250-mail2.batelco.com.bh
Fri 2010-12-17 01:50:54: <-- 250-8BITMIME
Fri 2010-12-17 01:50:54: <-- 250 SIZE 10485760
Fri 2010-12-17 01:50:54: --> MAIL From:<XXX@playhut.net> SIZE=1439
Fri 2010-12-17 01:50:56: <-- 250 sender <XXX@playhut.net> ok
Fri 2010-12-17 01:50:56: --> RCPT To:<verminex@batelco.com.bh>
Fri 2010-12-17 01:50:57: <-- 250 recipient <verminex@batelco.com.bh> ok
Fri 2010-12-17 01:50:57: --> DATA
Fri 2010-12-17 01:50:57: <-- 354 go ahead
Fri 2010-12-17 01:50:57: Sending <d:\mdaemon\queues\remote\pd35000003728.msg> to [193.188.97.107]
Fri 2010-12-17 01:50:57: Transfer Complete
Fri 2010-12-17 01:50:58: <-- 250 ok: Message 24513875 accepted
Fri 2010-12-17 01:50:58: --> QUIT
Fri 2010-12-17 01:50:58: <-- 221 mail2.batelco.com.bh
Fri 2010-12-17 01:50:58: SMTP session successful (Bytes in/out: 244/1548)
Fri 2010-12-17 01:50:58: ----------
Fri 2010-12-17 01:52:21: Session 2898; child 2; thread 5332
Fri 2010-12-17 01:50:54: Accepting SMTP connection from [218.249.27.69:28682]
Fri 2010-12-17 01:50:54: Performing PTR lookup (69.27.249.218.IN-ADDR.ARPA)
Fri 2010-12-17 01:50:54: * Error: * 名称服务器报告未知的域名
Fri 2010-12-17 01:50:54: * No PTR records found
Fri 2010-12-17 01:50:54: ---- End PTR results
Fri 2010-12-17 01:50:54: --> 220 playhut.net ESMTP MDaemon 10.1.1; Fri, 17 Dec 2010 01:50:54 +0800
Fri 2010-12-17 01:50:54: <-- EHLO svctag-g4t6v2x
Fri 2010-12-17 01:50:54: Performing IP lookup (svctag-g4t6v2x)
Fri 2010-12-17 01:50:54: * D=svctag-g4t6v2x TTL=(2) A=[59.37.71.87]
Fri 2010-12-17 01:50:54: ---- End IP lookup results
Fri 2010-12-17 01:50:54: --> 250-playhut.net Hello svctag-g4t6v2x (may be forged), pleased to meet you
Fri 2010-12-17 01:50:54: --> 250-VRFY
Fri 2010-12-17 01:50:54: --> 250-EXPN
Fri 2010-12-17 01:50:54: --> 250-ETRN
Fri 2010-12-17 01:50:54: --> 250-AUTH=LOGIN
Fri 2010-12-17 01:50:54: --> 250-AUTH LOGIN CRAM-MD5
Fri 2010-12-17 01:50:54: --> 250-8BITMIME
Fri 2010-12-17 01:50:54: --> 250 SIZE
Fri 2010-12-17 01:50:54: <-- AUTH login ZXZh
Fri 2010-12-17 01:50:54: --> 334 UGFzc3dvcmQ6
Fri 2010-12-17 01:50:54: <-- ******
Fri 2010-12-17 01:50:54: --> 235 Authentication successful
Fri 2010-12-17 01:50:54: Authenticated as xxx@playhut.net
Fri 2010-12-17 01:50:54: <-- MAIL FROM:<xxx@playhut.net>
Fri 2010-12-17 01:50:54: --> 250 XXX@playhut.net, Sender ok
Fri 2010-12-17 01:50:54: <-- RCPT TO:<sailiang.ding@cdcic.com>
Fri 2010-12-17 01:50:54: --> 250 <sailiang.ding@cdcic.com>, Recipient ok
Fri 2010-12-17 01:50:54: <-- DATA
Fri 2010-12-17 01:50:54: Creating temp file (SMTP): d:\mdaemon\queues\temp\md50000009593.tmp
Fri 2010-12-17 01:50:54: --> 354 Enter mail, end with <CRLF>.<CRLF>
Fri 2010-12-17 01:50:54: Message size: 730 bytes
Fri 2010-12-17 01:50:54: 邮件创建 successful：d:\mdaemon\queues\inbound\md50000035068.msg
Fri 2010-12-17 01:50:54: --> 250 Ok, message saved <Message-ID: >
Fri 2010-12-17 01:52:21: 连接关闭
Fri 2010-12-17 01:52:21: SMTP session successful (Bytes in/out: 851/447)
Fri 2010-12-17 01:52:21: ----------
Fri 2010-12-17 01:52:21: Session 2896; child 1; thread 4712
Fri 2010-12-17 01:50:44: Accepting SMTP connection from [218.249.27.69:18309]
Fri 2010-12-17 01:50:44: Performing PTR lookup (69.27.249.218.IN-ADDR.ARPA)
Fri 2010-12-17 01:50:44: * Error: * 名称服务器报告未知的域名
Fri 2010-12-17 01:50:44: * No PTR records found
Fri 2010-12-17 01:50:44: ---- End PTR results
Fri 2010-12-17 01:50:44: --> 220 playhut.net ESMTP MDaemon 10.1.1; Fri, 17 Dec 2010 01:50:44 +0800
Fri 2010-12-17 01:50:44: <-- EHLO svctag-g4t6v2x
Fri 2010-12-17 01:50:44: Performing IP lookup (svctag-g4t6v2x)
Fri 2010-12-17 01:50:44: * D=svctag-g4t6v2x TTL=(2) A=[59.37.71.87]
Fri 2010-12-17 01:50:44: ---- End IP lookup results
Fri 2010-12-17 01:50:44: --> 250-playhut.net Hello svctag-g4t6v2x (may be forged), pleased to meet you
Fri 2010-12-17 01:50:44: --> 250-VRFY
Fri 2010-12-17 01:50:44: --> 250-EXPN
Fri 2010-12-17 01:50:44: --> 250-ETRN
Fri 2010-12-17 01:50:44: --> 250-AUTH=LOGIN
Fri 2010-12-17 01:50:44: --> 250-AUTH LOGIN CRAM-MD5
Fri 2010-12-17 01:50:44: --> 250-8BITMIME
Fri 2010-12-17 01:50:44: --> 250 SIZE
Fri 2010-12-17 01:50:44: <-- AUTH login ZXZh
Fri 2010-12-17 01:50:44: --> 334 UGFzc3dvcmQ6
Fri 2010-12-17 01:50:44: <-- ******
Fri 2010-12-17 01:50:44: --> 235 Authentication successful
Fri 2010-12-17 01:50:44: Authenticated as xxx@playhut.net
Fri 2010-12-17 01:50:44: <-- MAIL FROM:<xxx@playhut.net>
Fri 2010-12-17 01:50:44: --> 250 <xxx@playhut.net>, Sender ok
Fri 2010-12-17 01:50:44: <-- RCPT TO:<verminex@batelco.com.bh>
Fri 2010-12-17 01:50:44: --> 250 <verminex@batelco.com.bh>, Recipient ok
Fri 2010-12-17 01:50:44: <-- DATA
Fri 2010-12-17 01:50:44: Creating temp file (SMTP): d:\mdaemon\queues\temp\md50000009592.tmp
Fri 2010-12-17 01:50:44: --> 354 Enter mail, end with <CRLF>.<CRLF>
Fri 2010-12-17 01:50:44: Message size: 772 bytes
Fri 2010-12-17 01:50:45: 邮件创建 successful：d:\mdaemon\queues\inbound\md50000035067.msg
Fri 2010-12-17 01:50:45: --> 250 Ok, message saved <Message-ID: >
Fri 2010-12-17 01:52:21: 连接关闭
Fri 2010-12-17 01:52:21: SMTP session successful (Bytes in/out: 893/447)
Fri 2010-12-17 01:52:21: ----------
Fri 2010-12-17 01:53:10: Session 2899; child 1
Fri 2010-12-17 01:53:10: Accepting POP3 connection from [192.168.2.166:4072]
Fri 2010-12-17 01:53:10: --> +OK playhut.net POP3 MDaemon 10.1.1 ready <MDAEMON-F201012170153.AA531013MD1113@playhut.net>
Fri 2010-12-17 01:53:10: <-- AUTH
Fri 2010-12-17 01:53:10: --> -ERR unknown POP3 command!
Fri 2010-12-17 01:53:10: <-- USER xxx2
Fri 2010-12-17 01:53:10: --> +OK xxx2... User ok
Fri 2010-12-17 01:53:10: <-- PASS ******
Fri 2010-12-17 01:53:10: --> +OK xxx2@playhut.net's mailbox has 25 total messages (4255314 octets)
Fri 2010-12-17 01:53:10: <-- STAT
Fri 2010-12-17 01:53:10: --> +OK 25 4255314
Fri 2010-12-17 01:53:10: <-- UIDL
Fri 2010-12-17 01:53:10: --> +OK
Fri 2010-12-17 01:53:10: Sending UIDL response (not logged)
Fri 2010-12-17 01:53:10: <-- LIST
Fri 2010-12-17 01:53:10: --> +OK 25 4255314
Fri 2010-12-17 01:53:10: Sending LIST response (not logged)
Fri 2010-12-17 01:53:10: <-- QUIT
Fri 2010-12-17 01:53:10: --> +OKxxx2[email=+OKxxx2@playhut.net]@playhut.net[/email] playhut.net POP3 Server signing off (25 messages left)
Fri 2010-12-17 01:53:10: POP3 session complete (Bytes in/out: 59/1782)
Fri 2010-12-17 01:53:10: ----------

tqj03 · 发表于 2010-12-17 12:44:13

Fri 2010-12-17 01:53:35: Session 2900; child 1; thread 1988
Fri 2010-12-17 01:53:34: Accepting SMTP connection from [59.42.86.59:2312]
Fri 2010-12-17 01:53:34: Performing PTR lookup (59.86.42.59.IN-ADDR.ARPA)
Fri 2010-12-17 01:53:34: * D=59.86.42.59.in-addr.arpa TTL=(1432) PTR=[59.86.42.59.broad.gz.gd.dynamic.163data.com.cn]
Fri 2010-12-17 01:53:34: * Gathering A records...
Fri 2010-12-17 01:53:34: * D=59.86.42.59.broad.gz.gd.dynamic.163data.com.cn TTL=(2) A=[59.37.71.88]
Fri 2010-12-17 01:53:34: ---- End PTR results
Fri 2010-12-17 01:53:34: --> 220 playhut.net ESMTP MDaemon 10.1.1; Fri, 17 Dec 2010 01:53:34 +0800
Fri 2010-12-17 01:53:34: <-- ehlo misrnet.com.eg
Fri 2010-12-17 01:53:34: Performing IP lookup (misrnet.com.eg)
Fri 2010-12-17 01:53:35: * D=misrnet.com.eg TTL=(2) A=[59.37.71.87]
Fri 2010-12-17 01:53:35: ---- End IP lookup results
Fri 2010-12-17 01:53:35: --> 250-playhut.net Hello 59.86.42.59.broad.gz.gd.dynamic.163data.com.cn (may be forged), pleased to meet you
Fri 2010-12-17 01:53:35: --> 250-VRFY
Fri 2010-12-17 01:53:35: --> 250-EXPN
Fri 2010-12-17 01:53:35: --> 250-ETRN
Fri 2010-12-17 01:53:35: --> 250-AUTH=LOGIN
Fri 2010-12-17 01:53:35: --> 250-AUTH LOGIN CRAM-MD5
Fri 2010-12-17 01:53:35: --> 250-8BITMIME
Fri 2010-12-17 01:53:35: --> 250 SIZE
Fri 2010-12-17 01:53:35: <-- Rset
Fri 2010-12-17 01:53:35: --> 250 RSET? Well, ok.
Fri 2010-12-17 01:53:35: <-- Mail from:<gsye6463n@misrnet.com.eg>
Fri 2010-12-17 01:53:35: Performing IP lookup (misrnet.com.eg)
Fri 2010-12-17 01:53:35: * D=misrnet.com.eg TTL=(2) A=[61.140.3.66]
Fri 2010-12-17 01:53:35: ---- End IP lookup results
Fri 2010-12-17 01:53:35: Performing SPF lookup (misrnet.com.eg / 59.42.86.59)
Fri 2010-12-17 01:53:35: * Result: none; no SPF record in DNS
Fri 2010-12-17 01:53:35: ---- End SPF results
Fri 2010-12-17 01:53:35: --> 250 <gsye6463n@misrnet.com.eg>, Sender ok
Fri 2010-12-17 01:53:35: <-- RCPT to:<tech-hr@playhut.net> [url=]/tech-hr@playhut.net[/url]这个地址公司内部也没有的/
Fri 2010-12-17 01:53:35: 发件人试图投递邮件到未知地址
Fri 2010-12-17 01:53:35: --> 550 <tech-hr@playhut.net>, Recipient unknown
Fri 2010-12-17 01:53:35: <-- Quit
Fri 2010-12-17 01:53:35: --> 221 See ya in cyberspace
Fri 2010-12-17 01:53:35: SMTP session terminated (Bytes in/out: 102/409)
Fri 2010-12-17 01:53:35: ----------
Fri 2010-12-17 01:54:26: Session 2901; child 1; thread 3844
Fri 2010-12-17 01:54:25: Accepting SMTP connection from [183.38.77.117:3700]
Fri 2010-12-17 01:54:25: Performing PTR lookup (117.77.38.183.IN-ADDR.ARPA)
Fri 2010-12-17 01:54:25: * Error: * 名称服务器报告未知的域名
Fri 2010-12-17 01:54:25: * No PTR records found
Fri 2010-12-17 01:54:25: ---- End PTR results
Fri 2010-12-17 01:54:25: --> 220 playhut.net ESMTP MDaemon 10.1.1; Fri, 17 Dec 2010 01:54:25 +0800
Fri 2010-12-17 01:54:25: <-- EHLO 56.com
Fri 2010-12-17 01:54:25: Performing IP lookup (56.com)
Fri 2010-12-17 01:54:25: * D=56.com TTL=(19) A=[61.142.208.67]
Fri 2010-12-17 01:54:25: ---- End IP lookup results
Fri 2010-12-17 01:54:25: --> 250-playhut.net Hello 56.com (may be forged), pleased to meet you
Fri 2010-12-17 01:54:25: --> 250-VRFY
Fri 2010-12-17 01:54:25: --> 250-EXPN
Fri 2010-12-17 01:54:25: --> 250-ETRN
Fri 2010-12-17 01:54:25: --> 250-AUTH=LOGIN
Fri 2010-12-17 01:54:25: --> 250-AUTH LOGIN CRAM-MD5
Fri 2010-12-17 01:54:25: --> 250-8BITMIME
Fri 2010-12-17 01:54:25: --> 250 SIZE
Fri 2010-12-17 01:54:25: <-- RSET
Fri 2010-12-17 01:54:25: --> 250 RSET? Well, ok.
Fri 2010-12-17 01:54:25: <-- MAIL FROM:<asegtfeh@56.com>
Fri 2010-12-17 01:54:25: Performing IP lookup (56.com)
Fri 2010-12-17 01:54:25: * D=56.com TTL=(19) A=[61.142.208.67]
Fri 2010-12-17 01:54:25: * P=000 S=000 D=56.com TTL=(3) MX=[mx.56.com] {121.9.215.140}
Fri 2010-12-17 01:54:25: ---- End IP lookup results
Fri 2010-12-17 01:54:25: Performing SPF lookup (56.com / 183.38.77.117)
Fri 2010-12-17 01:54:25: * Result: none; no SPF record in DNS
Fri 2010-12-17 01:54:25: ---- End SPF results
Fri 2010-12-17 01:54:25: --> 250 <asegtfeh@56.com>, Sender ok
Fri 2010-12-17 01:54:26: <-- RCPT TO:<connie@playhut.net> /connie@playhut.net这个地址公司内部也没有的/

Fri 2010-12-17 01:54:26: 发件人试图投递邮件到未知地址
Fri 2010-12-17 01:54:26: --> 550 <connie@playhut.net>, Recipient unknown
Fri 2010-12-17 01:54:26: <-- QUIT
Fri 2010-12-17 01:54:26: --> 221 See ya in cyberspace
Fri 2010-12-17 01:54:26: SMTP session terminated (Bytes in/out: 84/359)
Fri 2010-12-17 01:54:26: ----------
Fri 2010-12-17 01:56:35: Session 2902; child 1; thread 4220
Fri 2010-12-17 01:56:31: Accepting SMTP connection from [113.67.82.240:3780]
Fri 2010-12-17 01:56:31: Performing PTR lookup (240.82.67.113.IN-ADDR.ARPA)
Fri 2010-12-17 01:56:31: * Error: * 名称服务器报告未知的域名
Fri 2010-12-17 01:56:31: * No PTR records found
Fri 2010-12-17 01:56:31: ---- End PTR results
Fri 2010-12-17 01:56:31: --> 220 playhut.net ESMTP MDaemon 10.1.1; Fri, 17 Dec 2010 01:56:31 +0800
Fri 2010-12-17 01:56:31: <-- ehlo runtopworld.com
Fri 2010-12-17 01:56:31: Performing IP lookup (runtopworld.com)
Fri 2010-12-17 01:56:31: * D=runtopworld.com TTL=(48) A=[173.201.132.160]
Fri 2010-12-17 01:56:31: ---- End IP lookup results
Fri 2010-12-17 01:56:31: --> 250-playhut.net Hello runtopworld.com (may be forged), pleased to meet you
Fri 2010-12-17 01:56:31: --> 250-VRFY
Fri 2010-12-17 01:56:31: --> 250-EXPN
Fri 2010-12-17 01:56:31: --> 250-ETRN
Fri 2010-12-17 01:56:31: --> 250-AUTH=LOGIN
Fri 2010-12-17 01:56:31: --> 250-AUTH LOGIN CRAM-MD5
Fri 2010-12-17 01:56:31: --> 250-8BITMIME
Fri 2010-12-17 01:56:31: --> 250 SIZE
Fri 2010-12-17 01:56:31: <-- Rset
Fri 2010-12-17 01:56:31: --> 250 RSET? Well, ok.
Fri 2010-12-17 01:56:32: <-- Mail from:<gzwise@runtopworld.com>
Fri 2010-12-17 01:56:32: Performing IP lookup (runtopworld.com)
Fri 2010-12-17 01:56:32: * D=runtopworld.com TTL=(59) A=[173.201.132.160]
Fri 2010-12-17 01:56:32: * P=005 S=000 D=runtopworld.com TTL=(48) MX=[mxwcom.263xmail.com]
Fri 2010-12-17 01:56:32: * P=010 S=001 D=runtopworld.com TTL=(48) MX=[mxcom.263xmail.com] {211.150.64.49}
Fri 2010-12-17 01:56:32: * D=runtopworld.com TTL=(59) A=[173.201.132.160]
Fri 2010-12-17 01:56:32: ---- End IP lookup results
Fri 2010-12-17 01:56:32: Performing SPF lookup (runtopworld.com / 113.67.82.240)
Fri 2010-12-17 01:56:32: * Result: none; no SPF record in DNS
Fri 2010-12-17 01:56:32: ---- End SPF results
Fri 2010-12-17 01:56:32: --> 250 <gzwise@runtopworld.com>, Sender ok
Fri 2010-12-17 01:56:32: <-- RCPT to:<XXX3@playhut.net>
Fri 2010-12-17 01:56:32: --> 250 <XXX3@playhut.net>, Recipient ok
Fri 2010-12-17 01:56:32: <-- Data
Fri 2010-12-17 01:56:32: Creating temp file (SMTP): d:\mdaemon\queues\temp\md50000009596.tmp
Fri 2010-12-17 01:56:32: --> 354 Enter mail, end with <CRLF>.<CRLF>
Fri 2010-12-17 01:56:33: Message size: 9110 bytes
Fri 2010-12-17 01:56:33: Performing DKIM lookup
Fri 2010-12-17 01:56:33: * File: d:\mdaemon\queues\temp\md50000009596.tmp
Fri 2010-12-17 01:56:33: * Message-ID: n/a
Fri 2010-12-17 01:56:33: * Result: neutral
Fri 2010-12-17 01:56:33: ---- End DKIM results
Fri 2010-12-17 01:56:33: Performing DomainKeys lookup (Sender: gzwise@runtopworld.com)
Fri 2010-12-17 01:56:33: * File: d:\mdaemon\queues\temp\md50000009596.tmp
Fri 2010-12-17 01:56:33: * Message-ID: n/a
Fri 2010-12-17 01:56:33: * Querying for policy: runtopworld.com
Fri 2010-12-17 01:56:33: * Querying: _domainkey.runtopworld.com ...
Fri 2010-12-17 01:56:33: * DNS: * 名称服务器报告未知的域名
Fri 2010-12-17 01:56:33: * Result: neutral
Fri 2010-12-17 01:56:33: ---- End DomainKeys results
Fri 2010-12-17 01:56:33: Passing message through Spam Filter (Size: 9110)...
Fri 2010-12-17 01:56:34: * 10 BAYES_99 BODY: Bayesian spam probability is 99 to 100%
Fri 2010-12-17 01:56:34: * [score: 1.0000]
Fri 2010-12-17 01:56:34: * 0.0 MISSING_MID Missing Message-Id: header
Fri 2010-12-17 01:56:34: * 1.4 DATE_IN_FUTURE_96_XX Date: is 96 hours or more after Received: date
Fri 2010-12-17 01:56:34: * 0.1 RDNS_NONE Delivered to trusted network by a host with no rDNS
Fri 2010-12-17 01:56:34: * 0.0 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
Fri 2010-12-17 01:56:34: * 2.8 DOS_OE_TO_MX Delivered direct to MX with OE headers
Fri 2010-12-17 01:56:34: ---- End SpamAssassin results
Fri 2010-12-17 01:56:34: Spam Filter score/req: 14.30/30.0
Fri 2010-12-17 01:56:35: 邮件创建 successful：d:\mdaemon\queues\inbound\md50000035069.msg
Fri 2010-12-17 01:56:35: --> 250 Ok, message saved <Message-ID: >
Fri 2010-12-17 01:56:35: <-- Quit
Fri 2010-12-17 01:56:35: --> 221 See ya in cyberspace
Fri 2010-12-17 01:56:35: SMTP session successful (Bytes in/out: 9215/444)

U-Mail · 发表于 2010-12-19 17:51:54

改密码也不能彻底解决这个问题。。。。

mynetway · 发表于 2010-12-20 11:15:11

我仍认为我此前提出的解决方案是目前最佳解决方案

tqj03 · 发表于 2010-12-24 09:50:14

楼上的，是不是指的这篇文章 http://www.5dmail.net/bbs/thread-192149-1-1.html

		自动登录	找回密码
密码			会员注册

[求助] MDaemon 现盗用公司域名发广告垃圾邮件出去，急解