过滤器不能用了

fail2002

Thu 2007-10-04 21:47:35: ----------
Thu 2007-10-04 22:00:56: Content Filter processing h:\mdaemon\queues\local\md50000000473.msg...
Thu 2007-10-04 22:00:56: > Message return-path: 10000@xxx.com
Thu 2007-10-04 22:00:56: > Message from: 10000@xxx.com
Thu 2007-10-04 22:00:56: > Message to: server@yyy.cn
Thu 2007-10-04 22:00:56: > Message subject: 你好
Thu 2007-10-04 22:00:56: > Message ID: <f3ead7bce42a2eae72fd97663fb8a942@xxx.com>
Thu 2007-10-04 22:00:56: Start Content Filter results
Thu 2007-10-04 22:00:56: * Matched 0 of 8 active rules
Thu 2007-10-04 22:00:56: End of Content Filter results
Thu 2007-10-04 22:00:56: ----------

[ 本帖最后由 fail2002 于 2007-10-6 11:44 编辑 ]

fail2002

Thu 2007-10-04 21:59:10: ----------
Thu 2007-10-04 22:00:53: Session 5024; child 1; thread 5648
Thu 2007-10-04 22:00:40: 接受 SMTP 连接来自 [221.130.195.** ：4774]
Thu 2007-10-04 22:00:40: Performing PTR lookup (67.195.130.221.IN-ADDR.ARPA)
Thu 2007-10-04 22:00:40: * D=67.195.130.221.IN-ADDR.ARPA TTL=(30) A=[218.83.175.154]
Thu 2007-10-04 22:00:40: * Gathering A records...
Thu 2007-10-04 22:00:40: * 未找到 PTR 记录
Thu 2007-10-04 22:00:40: ---- End PTR results
Thu 2007-10-04 22:00:40: --> 220 mx02.yyy.cn ESMTP MDaemon 9.5.2; Thu, 04 Oct 2007 22:00:40 +0800
Thu 2007-10-04 22:00:40: <-- HELO hihttp.cn
Thu 2007-10-04 22:00:40: Performing IP lookup (xxxxxx.cn)
Thu 2007-10-04 22:00:50: * 错误：等候 DNS 响应 10 秒时间已到（尝试第 0 次，共 0 次）
Thu 2007-10-04 22:00:50: * Error: 名称服务器没有该域要求类型的记录
Thu 2007-10-04 22:00:50: ---- End IP lookup results
Thu 2007-10-04 22:00:50: --> 250 mx02.yyy.cn Hello xxxxxx.cn, pleased to meet you
Thu 2007-10-04 22:00:50: <-- MAIL FROM: <10000@xxx.com>
Thu 2007-10-04 22:00:50: Performing IP lookup (xxx.com)
Thu 2007-10-04 22:00:53: * P=020 S=000 D=xxx.com TTL=(46) MX=[221.130.195.**]
Thu 2007-10-04 22:00:53: ---- End IP lookup results
Thu 2007-10-04 22:00:53: Performing SPF lookup (xxx.com / 221.130.195.**)
Thu 2007-10-04 22:00:53: * Result: none; no SPF record in DNS
Thu 2007-10-04 22:00:53: ---- End SPF results
Thu 2007-10-04 22:00:53: --> 250 <10000@xxx.com>, Sender ok
Thu 2007-10-04 22:00:53: <-- RCPT TO: <server@yyy.cn>
Thu 2007-10-04 22:00:53: 执行 DNS-BL 查询（221.130.195.** - 正在连接 IP）
Thu 2007-10-04 22:00:53: * sbl-xbl.spamhaus.org，来自 $IP$ 的邮件被拒绝，参见 http://www.spamhaus.org - 通过
Thu 2007-10-04 22:00:53: * relays.ordb.org，来自 $IP$ 的邮件被拒绝，参见 http://www.ordb.org/faq/ - 通过
Thu 2007-10-04 22:00:53: * bl.spamcop.net，来自 $IP$ 的邮件被拒绝，参见 http://www.spamcop.net - 通过
Thu 2007-10-04 22:00:53: * sbl-xbl.spamhaus.org - 通过
Thu 2007-10-04 22:00:53: * cblless.anti-spam.org.cn - 通过
Thu 2007-10-04 22:00:53: ---- 结束 DNS-BL 结果
Thu 2007-10-04 22:00:53: --> 250 <server@yyy.cn>, Recipient ok
Thu 2007-10-04 22:00:53: <-- DATA
Thu 2007-10-04 22:00:53: Creating temp file (SMTP): h:\mdaemon\queues\temp\md50000002060.tmp
Thu 2007-10-04 22:00:53: --> 354 Enter mail, end with <CRLF>.<CRLF>
Thu 2007-10-04 22:00:53: Message size: 1350 bytes
Thu 2007-10-04 22:00:53: Performing DomainKeys lookup (Sender: 10000@xxx.com)
Thu 2007-10-04 22:00:53: * File: h:\mdaemon\queues\temp\md50000002060.tmp
Thu 2007-10-04 22:00:53: * Message-ID: f3ead7bce42a2eae72fd97663fb8a942@xxx.com
Thu 2007-10-04 22:00:53: * Querying for policy: xxx.com
Thu 2007-10-04 22:00:53: * Querying: _domainkey.xxx.com ...
Thu 2007-10-04 22:00:53: * D=_domainkey.xxx.com TTL=(30) A=[218.83.175.154]
Thu 2007-10-04 22:00:53: * Policy record:
Thu 2007-10-04 22:00:53: * Result: pass
Thu 2007-10-04 22:00:53: ---- End DomainKeys results
Thu 2007-10-04 22:00:53: Performing DKIM lookup
Thu 2007-10-04 22:00:53: * File: h:\mdaemon\queues\temp\md50000002060.tmp
Thu 2007-10-04 22:00:53: * Message-ID: f3ead7bce42a2eae72fd97663fb8a942@xxx.com
Thu 2007-10-04 22:00:53: * Result: neutral
Thu 2007-10-04 22:00:53: ---- End DKIM results
Thu 2007-10-04 22:00:53: Passing message through AntiVirus (Size: 1350)...
Thu 2007-10-04 22:00:53: * 邮件清洁（未发现病毒）
Thu 2007-10-04 22:00:53: ---- End AntiVirus results
Thu 2007-10-04 22:00:53: Passing message through Outbreak Protection...
Thu 2007-10-04 22:00:53: * Message-ID: f3ead7bce42a2eae72fd97663fb8a942@xxx.com
Thu 2007-10-04 22:00:53: * Reference-ID: str=0001.0A090207.4704F22D.00A7,ss=1,fgs=0
Thu 2007-10-04 22:00:53: * Spam/Phish threat level: 1 - Clean
Thu 2007-10-04 22:00:53: * Virus threat level: 0 - Clean
Thu 2007-10-04 22:00:53: ---- End Outbreak Protection results
Thu 2007-10-04 22:00:53: Passing message through Spam Filter (Size: 1350)...
Thu 2007-10-04 22:00:53: * 1.9 FROM_ALL_NUMS From numeric address (except US/Canada phones)
Thu 2007-10-04 22:00:53: * 1.3 RCVD_NUMERIC_HELO Received: contains an IP address used for HELO
Thu 2007-10-04 22:00:53: * 0.0 HTML_MESSAGE BODY: HTML included in message
Thu 2007-10-04 22:00:53: * 1.5 MIME_BASE64_TEXT RAW: Message text disguised using base64 encoding
Thu 2007-10-04 22:00:53: ---- End SpamAssassin results
Thu 2007-10-04 22:00:53: Spam Filter score/req: 4.70/15.0
Thu 2007-10-04 22:00:53: 邮件创建 successful：h:\mdaemon\queues\inbound\md50000000385.msg
Thu 2007-10-04 22:00:53: --> 250 Ok, message saved <Message-ID: f3ead7bce42a2eae72fd97663fb8a942@xxx.com>
Thu 2007-10-04 22:00:53: <-- QUIT
Thu 2007-10-04 22:00:53: --> 221 See ya in cyberspace
Thu 2007-10-04 22:00:53: SMTP 会话成功（进/出字节：1438/345）
Thu 2007-10-04 22:00:53: ----------

[ 本帖最后由 fail2002 于 2007-10-4 22:37 编辑 ]

fail2002

第一个是规则过滤器，第二个是我测试的一份邮件

我是设置，主题包含某某文字，删除邮件，可是最后还是能收到。。

hrstudy

是不是规则制定的有问题，提示8个规则没有一个被应用啊。

kks168

看日志的确是通过了过滤，把设置也贴出来看看

fail2002

如图

kks168

你设错了吧，怎把主题设成 rytoswqe@163.com???

hrstudy

是啊，我看应该是From吧。

fail2002

我要屏蔽，邮件内容里面如果包含“rytoswqe@163.com”则删除
不是屏蔽 rytoswqe@163.com来的邮件

kks168

到底你要的是主题还是邮件内容,  晕！！
我看你测试邮件的主题是：你好 ， 你却把规则设成 rtoswqe@163.com ，当然会通过CF
如果你要的是邮件内容的话应该勾选 “如果邮件正文包含“