要如何擋這類的信?

勇氣果子 發表於 2005-11-4 08:51:55

各位… 在下面的log中… 我該如何設定有效的阻擋呢 <img src='http://www.suma.tw/uploads/smiles-058.gif' border='0' style='vertical-align:middle' alt='smiles-058.gif' /> 知道了PTR=68-115-229-134.static.spbg.sc.charter.com 但是阻擋IP的並無法可以直接用*.static.*來阻擋。 那用hostname來阻擋時… 這封垃圾信卻不是用它的ip反解來成為它的主機名稱… 而是hostname=outdoorweb ----------------------------------------------------------------------------------------------- Thu 2005-11-03 14:22:26: Session 1031; child 1; thread 1064 Thu 2005-11-03 14:22:13: Accepting SMTP connection from Thu 2005-11-03 14:22:13: Performing PTR lookup (134.229.115.68.IN-ADDR.ARPA) Thu 2005-11-03 14:22:15: *　D=134.229.115.68.IN-ADDR.ARPA TTL=(720) PTR=[68-115-229-134.static.spbg.sc.charter.com] Thu 2005-11-03 14:22:15: *　Gathering A records... Thu 2005-11-03 14:22:15: *　D=68-115-229-134.static.spbg.sc.charter.com TTL=(60) A= Thu 2005-11-03 14:22:15: ---- End PTR results Thu 2005-11-03 14:22:15: --> 220 mymail.test.com.tw ESMTP MDaemon 8.1.1; Thu, 03 Nov 2005 14:22:15 +0800 Thu 2005-11-03 14:22:15: <-- XXXX outdoorweb Thu 2005-11-03 14:22:15: --> 500 What? I don't understand that. Thu 2005-11-03 14:22:16: <-- HELO outdoorweb Thu 2005-11-03 14:22:16: Performing IP lookup (outdoorweb) Thu 2005-11-03 14:22:16: *　Error: Name server reports domain name unknown Thu 2005-11-03 14:22:16: ---- End IP lookup results Thu 2005-11-03 14:22:16: --> 250 mymail.test.com.tw Hello 68-115-229-134.static.spbg.sc.charter.com, pleased to meet you Thu 2005-11-03 14:22:17: <-- MAIL FROM:<[email protected]> Thu 2005-11-03 14:22:17: Performing IP lookup (cxfse168.com) Thu 2005-11-03 14:22:18: *　P=100 D=cxfse168.com TTL=(60) MX= Thu 2005-11-03 14:22:18: ---- End IP lookup results Thu 2005-11-03 14:22:18: --> 250 <[email protected]>, Sender ok Thu 2005-11-03 14:22:18: <-- RCPT TO:<[email protected]> -----------------------------------------------------------------------------------------------

勇氣果子 發表於 2005-11-4 08:54:36

我再補上完整的log.... Thu 2005-11-03 14:22:24: ---------- Thu 2005-11-03 14:22:26: Session 1031; child 1; thread 1064 Thu 2005-11-03 14:22:13: Accepting SMTP connection from Thu 2005-11-03 14:22:13: Performing PTR lookup (134.229.115.68.IN-ADDR.ARPA) Thu 2005-11-03 14:22:15: *　D=134.229.115.68.IN-ADDR.ARPA TTL=(720) PTR= Thu 2005-11-03 14:22:15: *　Gathering A records... Thu 2005-11-03 14:22:15: *　D=68-115-229-134.static.spbg.sc.charter.com TTL=(60) A= Thu 2005-11-03 14:22:15: ---- End PTR results Thu 2005-11-03 14:22:15: --> 220 mymail.test.com.tw ESMTP MDaemon 8.1.1; Thu, 03 Nov 2005 14:22:15 +0800 Thu 2005-11-03 14:22:15: <-- XXXX outdoorweb Thu 2005-11-03 14:22:15: --> 500 What? I don't understand that. Thu 2005-11-03 14:22:16: <-- HELO outdoorweb Thu 2005-11-03 14:22:16: Performing IP lookup (outdoorweb) Thu 2005-11-03 14:22:16: *　Error: Name server reports domain name unknown Thu 2005-11-03 14:22:16: ---- End IP lookup results Thu 2005-11-03 14:22:16: --> 250 mymail.test.com.tw Hello 68-115-229-134.static.spbg.sc.charter.com, pleased to meet you Thu 2005-11-03 14:22:17: <-- MAIL FROM:<[email protected]> Thu 2005-11-03 14:22:17: Performing IP lookup (cxfse168.com) Thu 2005-11-03 14:22:18: *　P=100 D=cxfse168.com TTL=(60) MX= Thu 2005-11-03 14:22:18: ---- End IP lookup results Thu 2005-11-03 14:22:18: --> 250 <[email protected]>, Sender ok Thu 2005-11-03 14:22:18: <-- RCPT TO:<[email protected]> Thu 2005-11-03 14:22:18: Performing DNS-BL lookup (68.115.229.134 - connecting IP) Thu 2005-11-03 14:22:19: *　sbl-xbl.spamhaus.org - passed Thu 2005-11-03 14:22:19: *　opm.blitzed.org - passed Thu 2005-11-03 14:22:20: *　relays.ordb.org - passed Thu 2005-11-03 14:22:20: *　bl.spamcop.net - passed Thu 2005-11-03 14:22:20: ---- End DNS-BL results Thu 2005-11-03 14:22:20: --> 250 <[email protected]>, Recipient ok Thu 2005-11-03 14:22:21: <-- DATA Thu 2005-11-03 14:22:21: Creating temp file (SMTP): d:\mdaemon\temp\md50000000258.tmp Thu 2005-11-03 14:22:21: --> 354 Enter mail, end with <CRLF>.<CRLF> Thu 2005-11-03 14:22:21: Message size: 2365 bytes Thu 2005-11-03 14:22:21: Performing DomainKeys lookup (Sender: [email protected]) Thu 2005-11-03 14:22:21: *　Message-ID: OUTDOORWEBxArGvnCjn000044d4@outdoorweb Thu 2005-11-03 14:22:21: *　Querying for policy: cxfse168.com Thu 2005-11-03 14:22:21: *　　Querying: _domainkey.cxfse168.com ... Thu 2005-11-03 14:22:23: *　　DNS: Name server reports domain name unknown Thu 2005-11-03 14:22:23: *　Result: pass Thu 2005-11-03 14:22:23: ---- End DomainKeys results Thu 2005-11-03 14:22:23: Passing message through AntiVirus (Size: 2365)... Thu 2005-11-03 14:22:23: *　Message is clean (no viruses found) Thu 2005-11-03 14:22:23: ---- End AntiVirus results Thu 2005-11-03 14:22:23: Passing message through Spam Filter (Size: 2365)... Thu 2005-11-03 14:22:25: *　1.4 DOMAIN_RATIO BODY: Message body mentions many internet domains Thu 2005-11-03 14:22:25: *　1.2 MIME_HTML_ONLY BODY: Message only has text/html MIME parts Thu 2005-11-03 14:22:25: *　0.8 HTML_IMAGE_ONLY_20 BODY: HTML: images with 1600-2000 bytes of words Thu 2005-11-03 14:22:25: *　0.0 HTML_MESSAGE BODY: HTML included in message Thu 2005-11-03 14:22:25: *　0.2 HTML_90_100 BODY: Message is 90% to 100% HTML Thu 2005-11-03 14:22:25: ---- End SpamAssassin results Thu 2005-11-03 14:22:25: Spam Filter score/req: 3.55/12.0 Thu 2005-11-03 14:22:25: Message creation successful: d:\mdaemon\inbound\md50000014890.msg Thu 2005-11-03 14:22:25: --> 250 Ok, message saved <Message-ID: <OUTDOORWEBxArGvnCjn000044d4@outdoorweb>> Thu 2005-11-03 14:22:26: <-- QUIT Thu 2005-11-03 14:22:26: --> 221 See ya in cyberspace Thu 2005-11-03 14:22:26: SMTP session successful (Bytes in/out: 2485/440) Thu 2005-11-03 14:22:26: ----------

tungwj 發表於 2005-11-7 10:22:57

如果說 Address IP HOST 隨時都在變更 那就真的無法確實檔下, 我的方式是....就讓它過吧! 擋垃圾信真的很傷腦筋, 我已經很少花時間在這上面了

頁: [1]

數碼中文坊's Archiver

要如何擋這類的信?