在服务器邮件队列中看到

grlanzr

在服务器邮件队列中看到很多不是我公司域名发的邮件在发送,我用的邮件系统是merak8.3.8的.附上一些设置图片

请各位帮已看看下面是不是被中继了,谢谢

SYSTEM          [00000CD4] Mon, 4 May 2009 00:17:43 +0800 Client session Message id KPQ40526 file 200905031813267292-983806516_6.tm$
SYSTEM          [00000CD4] Mon, 4 May 2009 00:17:44 +0800 Client session DNS query 'yahoo.com.tw' 0 (2) [OK]
SYSTEM          [00000CD4] Mon, 4 May 2009 00:17:44 +0800 Client session Connecting to "mx1.mail.tw.yahoo.com"
203.188.197.9   [00000CD4] Mon, 4 May 2009 00:17:49 +0800 Client session Connected
203.188.197.9   [00000CD4] Mon, 4 May 2009 00:17:49 +0800 Client session <<< 220 mta186.mail.tp2.yahoo.com ESMTP YSmtp service ready
203.188.197.9   [00000CD4] Mon, 4 May 2009 00:17:49 +0800 Client session >>> EHLO mail.chiuluen.com.cn
203.188.197.9   [00000CD4] Mon, 4 May 2009 00:17:50 +0800 Client session <<< 250 PIPELINING
203.188.197.9   [00000CD4] Mon, 4 May 2009 00:17:50 +0800 Client session >>> MAIL From:<zsolwvde@nobhrqat.com> SIZE=3248
203.188.197.9   [00000CD4] Mon, 4 May 2009 00:17:50 +0800 Client session <<< 250 sender <zsolwvde@nobhrqat.com> ok
203.188.197.9   [00000CD4] Mon, 4 May 2009 00:17:50 +0800 Client session >>> RCPT To:<kkmm0966@yahoo.com.tw>
203.188.197.9   [00000CD4] Mon, 4 May 2009 00:17:50 +0800 Client session <<< 250 recipient <kkmm0966@yahoo.com.tw> ok
203.188.197.9   [00000CD4] Mon, 4 May 2009 00:17:50 +0800 Client session >>> RCPT To:<upr240@yahoo.com.tw>
203.188.197.9   [00000CD4] Mon, 4 May 2009 00:17:50 +0800 Client session <<< 250 recipient <upr240@yahoo.com.tw> ok
203.188.197.9   [00000CD4] Mon, 4 May 2009 00:17:50 +0800 Client session >>> RCPT To:<mu_wai@yahoo.com.tw>
203.188.197.9   [00000CD4] Mon, 4 May 2009 00:17:50 +0800 Client session <<< 250 recipient <mu_wai@yahoo.com.tw> ok
203.188.197.9   [00000CD4] Mon, 4 May 2009 00:17:50 +0800 Client session >>> RCPT To:<a17465155@yahoo.com.tw>
203.188.197.9   [00000CD4] Mon, 4 May 2009 00:17:50 +0800 Client session <<< 250 recipient <a17465155@yahoo.com.tw> ok
203.188.197.9   [00000CD4] Mon, 4 May 2009 00:17:50 +0800 Client session >>> RCPT To:<ping83369@yahoo.com.tw>
203.188.197.9   [00000CD4] Mon, 4 May 2009 00:17:50 +0800 Client session <<< 250 recipient <ping83369@yahoo.com.tw> ok
203.188.197.9   [00000CD4] Mon, 4 May 2009 00:17:50 +0800 Client session >>> RCPT To:<siy456852@yahoo.com.tw>
203.188.197.9   [00000CD4] Mon, 4 May 2009 00:17:50 +0800 Client session <<< 250 recipient <siy456852@yahoo.com.tw> ok
203.188.197.9   [00000CD4] Mon, 4 May 2009 00:17:50 +0800 Client session >>> RCPT To:<maviscmh@yahoo.com.tw>
203.188.197.9   [00000CD4] Mon, 4 May 2009 00:17:50 +0800 Client session <<< 250 recipient <maviscmh@yahoo.com.tw> ok
203.188.197.9   [00000CD4] Mon, 4 May 2009 00:17:50 +0800 Client session >>> RCPT To:<r122517072@yahoo.com.tw>
203.188.197.9   [00000CD4] Mon, 4 May 2009 00:17:50 +0800 Client session <<< 250 recipient <r122517072@yahoo.com.tw> ok
203.188.197.9   [00000CD4] Mon, 4 May 2009 00:17:50 +0800 Client session >>> DATA
203.188.197.9   [00000CD4] Mon, 4 May 2009 00:17:50 +0800 Client session <<< 354 go ahead
203.188.197.9   [00000CD4] Mon, 4 May 2009 00:17:51 +0800 Client session <<< 451 Message temporarily deferred - [90]
203.188.197.9   [00000CD4] Mon, 4 May 2009 00:17:51 +0800 Client session *** <zsolwvde@nobhrqat.com> <kkmm0966@yahoo.com.tw> 8 3248 00:00:00 ERROR
203.188.197.9   [00000CD4] Mon, 4 May 2009 00:17:51 +0800 Client session >>> QUIT
203.188.197.9   [00000CD4] Mon, 4 May 2009 00:17:51 +0800 Client session <<< 221 mta186.mail.tp2.yahoo.com
SYSTEM          [00000CD4] Mon, 4 May 2009 00:17:51 +0800 Client session Disconnected


做了条规则,只要是那个域名发来的,加入IP黑名单,现在没发现有了.

[ 本帖最后由 grlanzr 于 2009-6-19 15:37 编辑 ]

xml

看这日志应该是被中继了，具体怎么解决就不知道了

grlanzr

我都关了中继,要SMTP认证才可以发还是被中继,有没有高手说说怎么办?
设置在附档里.

xml

把那个发垃圾邮件的IP加到入侵防护，可以临时解决一下