數碼中文坊

 取回密碼
 我要註冊
檢視: 5995|回覆: 2

要如何擋這類的信?

[複製連結]
發表於 2005-11-4 08:51:55 | 顯示全部樓層 |閱讀模式

馬上註冊,結交更多好友,享用更多功能,讓你輕鬆瀏覽論壇。

你需要 登入 才可以下載或檢視,沒有帳號?我要註冊

x
各位…
在下面的log中… 我該如何設定有效的阻擋呢 smiles-058.gif
知道了PTR=68-115-229-134.static.spbg.sc.charter.com
但是阻擋IP的並無法可以直接用*.static.*來阻擋。

那用hostname來阻擋時…
這封垃圾信卻不是用它的ip反解來成為它的主機名稱…
而是hostname=outdoorweb

-----------------------------------------------------------------------------------------------
Thu 2005-11-03 14:22:26: Session 1031; child 1; thread 1064
Thu 2005-11-03 14:22:13: Accepting SMTP connection from [68.115.229.134 : 3613]
Thu 2005-11-03 14:22:13: Performing PTR lookup (134.229.115.68.IN-ADDR.ARPA)
Thu 2005-11-03 14:22:15: * D=134.229.115.68.IN-ADDR.ARPA TTL=(720) PTR=[68-115-229-134.static.spbg.sc.charter.com]
Thu 2005-11-03 14:22:15: * Gathering A records...
Thu 2005-11-03 14:22:15: * D=68-115-229-134.static.spbg.sc.charter.com TTL=(60) A=[68.115.229.134]
Thu 2005-11-03 14:22:15: ---- End PTR results
Thu 2005-11-03 14:22:15: --> 220 mymail.test.com.tw ESMTP MDaemon 8.1.1; Thu, 03 Nov 2005 14:22:15 +0800
Thu 2005-11-03 14:22:15: <-- XXXX outdoorweb
Thu 2005-11-03 14:22:15: --> 500 What? I don't understand that.
Thu 2005-11-03 14:22:16: <-- HELO outdoorweb
Thu 2005-11-03 14:22:16: Performing IP lookup (outdoorweb)
Thu 2005-11-03 14:22:16: * Error: Name server reports domain name unknown
Thu 2005-11-03 14:22:16: ---- End IP lookup results
Thu 2005-11-03 14:22:16: --> 250 mymail.test.com.tw Hello 68-115-229-134.static.spbg.sc.charter.com, pleased to meet you
Thu 2005-11-03 14:22:17: <-- MAIL FROM:<[email protected]>
Thu 2005-11-03 14:22:17: Performing IP lookup (cxfse168.com)
Thu 2005-11-03 14:22:18: * P=100 D=cxfse168.com TTL=(60) MX=[mailss.pomailer.com]
Thu 2005-11-03 14:22:18: ---- End IP lookup results
Thu 2005-11-03 14:22:18: --> 250 <[email protected]>, Sender ok
Thu 2005-11-03 14:22:18: <-- RCPT TO:<[email protected]>
-----------------------------------------------------------------------------------------------
 樓主| 發表於 2005-11-4 08:54:36 | 顯示全部樓層
我再補上完整的log....

Thu 2005-11-03 14:22:24: ----------
Thu 2005-11-03 14:22:26: Session 1031; child 1; thread 1064
Thu 2005-11-03 14:22:13: Accepting SMTP connection from [68.115.229.134 : 3613]
Thu 2005-11-03 14:22:13: Performing PTR lookup (134.229.115.68.IN-ADDR.ARPA)
Thu 2005-11-03 14:22:15: * D=134.229.115.68.IN-ADDR.ARPA TTL=(720) PTR=[68-115-229-134.static.spbg.sc.charter.com]
Thu 2005-11-03 14:22:15: * Gathering A records...
Thu 2005-11-03 14:22:15: * D=68-115-229-134.static.spbg.sc.charter.com TTL=(60) A=[68.115.229.134]
Thu 2005-11-03 14:22:15: ---- End PTR results
Thu 2005-11-03 14:22:15: --> 220 mymail.test.com.tw ESMTP MDaemon 8.1.1; Thu, 03 Nov 2005 14:22:15 +0800
Thu 2005-11-03 14:22:15: <-- XXXX outdoorweb
Thu 2005-11-03 14:22:15: --> 500 What? I don't understand that.
Thu 2005-11-03 14:22:16: <-- HELO outdoorweb
Thu 2005-11-03 14:22:16: Performing IP lookup (outdoorweb)
Thu 2005-11-03 14:22:16: * Error: Name server reports domain name unknown
Thu 2005-11-03 14:22:16: ---- End IP lookup results
Thu 2005-11-03 14:22:16: --> 250 mymail.test.com.tw Hello 68-115-229-134.static.spbg.sc.charter.com, pleased to meet you
Thu 2005-11-03 14:22:17: <-- MAIL FROM:<[email protected]>
Thu 2005-11-03 14:22:17: Performing IP lookup (cxfse168.com)
Thu 2005-11-03 14:22:18: * P=100 D=cxfse168.com TTL=(60) MX=[mailss.pomailer.com]
Thu 2005-11-03 14:22:18: ---- End IP lookup results
Thu 2005-11-03 14:22:18: --> 250 <[email protected]>, Sender ok
Thu 2005-11-03 14:22:18: <-- RCPT TO:<[email protected]>
Thu 2005-11-03 14:22:18: Performing DNS-BL lookup (68.115.229.134 - connecting IP)
Thu 2005-11-03 14:22:19: * sbl-xbl.spamhaus.org - passed
Thu 2005-11-03 14:22:19: * opm.blitzed.org - passed
Thu 2005-11-03 14:22:20: * relays.ordb.org - passed
Thu 2005-11-03 14:22:20: * bl.spamcop.net - passed
Thu 2005-11-03 14:22:20: ---- End DNS-BL results
Thu 2005-11-03 14:22:20: --> 250 <[email protected]>, Recipient ok
Thu 2005-11-03 14:22:21: <-- DATA
Thu 2005-11-03 14:22:21: Creating temp file (SMTP): d:\mdaemon\temp\md50000000258.tmp
Thu 2005-11-03 14:22:21: --> 354 Enter mail, end with <CRLF>.<CRLF>
Thu 2005-11-03 14:22:21: Message size: 2365 bytes
Thu 2005-11-03 14:22:21: Performing DomainKeys lookup (Sender: [email protected])
Thu 2005-11-03 14:22:21: * Message-ID: OUTDOORWEBxArGvnCjn000044d4@outdoorweb
Thu 2005-11-03 14:22:21: * Querying for policy: cxfse168.com
Thu 2005-11-03 14:22:21: *  Querying: _domainkey.cxfse168.com ...
Thu 2005-11-03 14:22:23: *  DNS: Name server reports domain name unknown
Thu 2005-11-03 14:22:23: * Result: pass
Thu 2005-11-03 14:22:23: ---- End DomainKeys results
Thu 2005-11-03 14:22:23: Passing message through AntiVirus (Size: 2365)...
Thu 2005-11-03 14:22:23: * Message is clean (no viruses found)
Thu 2005-11-03 14:22:23: ---- End AntiVirus results
Thu 2005-11-03 14:22:23: Passing message through Spam Filter (Size: 2365)...
Thu 2005-11-03 14:22:25: * 1.4 DOMAIN_RATIO BODY: Message body mentions many internet domains
Thu 2005-11-03 14:22:25: * 1.2 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
Thu 2005-11-03 14:22:25: * 0.8 HTML_IMAGE_ONLY_20 BODY: HTML: images with 1600-2000 bytes of words
Thu 2005-11-03 14:22:25: * 0.0 HTML_MESSAGE BODY: HTML included in message
Thu 2005-11-03 14:22:25: * 0.2 HTML_90_100 BODY: Message is 90% to 100% HTML
Thu 2005-11-03 14:22:25: ---- End SpamAssassin results
Thu 2005-11-03 14:22:25: Spam Filter score/req: 3.55/12.0
Thu 2005-11-03 14:22:25: Message creation successful: d:\mdaemon\inbound\md50000014890.msg
Thu 2005-11-03 14:22:25: --> 250 Ok, message saved <Message-ID: <OUTDOORWEBxArGvnCjn000044d4@outdoorweb>>
Thu 2005-11-03 14:22:26: <-- QUIT
Thu 2005-11-03 14:22:26: --> 221 See ya in cyberspace
Thu 2005-11-03 14:22:26: SMTP session successful (Bytes in/out: 2485/440)
Thu 2005-11-03 14:22:26: ----------
發表於 2005-11-7 10:22:57 | 顯示全部樓層
如果說 Address IP HOST 隨時都在變更
那就真的無法確實檔下, 我的方式是....就讓它過吧!
擋垃圾信真的很傷腦筋, 我已經很少花時間在這上面了
你需要登入後才可以回覆 登入 | 我要註冊

本版積分規則

Archiver|禁閉室|手機版|數碼中文坊

GMT+8, 2024-3-29 07:51 PM

Powered by Discuz! X3.4 Licensed

© 2001-2023 Discuz! Team.

快速回覆 返回頂端 返回清單