請問我是否被當成跳板

lay

各位大大:
             我的伺服器每天幾乎被灌爆,自家的信件幾乎無法處理,可否可以幫幫查出哪個環節出了問題
                  Fri 2010-07-09 17:28:26: [620:21] Authenticated as [email protected]
Fri 2010-07-09 17:28:26: [620:21] MAIL FROM:<[email protected]> SIZE=3221
Fri 2010-07-09 17:28:26: [620:21] 250 <[email protected]>, Sender ok (發信人確定)
Fri 2010-07-09 17:28:26: [620:21] RCPT TO:<[email protected]>
Fri 2010-07-09 17:28:26: [620:21] 250 <[email protected]>, Recipient ok (收信人確定)
Fri 2010-07-09 17:28:27: [620:21] RCPT TO:<[email protected]>
Fri 2010-07-09 17:28:27: [620:21] 250 <[email protected]>, Recipient ok (收信人確定)
Fri 2010-07-09 17:28:27: [620:21] RCPT TO:<[email protected]>
Fri 2010-07-09 17:28:27: [620:21] 250 <[email protected]>, Recipient ok (收信人確定)
Fri 2010-07-09 17:28:27: [620:21] RCPT TO:<[email protected]>
Fri 2010-07-09 17:28:27: [620:21] 250 <[email protected]>, Recipient ok (收信人確定)
Fri 2010-07-09 17:28:28: [620:21] RCPT TO:<[email protected]>
Fri 2010-07-09 17:28:28: [620:21] 250 <[email protected]>, Recipient ok (收信人確定)
Fri 2010-07-09 17:28:28: [620:21] RCPT TO:<[email protected]>
Fri 2010-07-09 17:28:28: [620:21] 250 <[email protected]>, Recipient ok (收信人確定)
Fri 2010-07-09 17:28:29: [620:21] RCPT TO:<[email protected]>
Fri 2010-07-09 17:28:29: [620:21] 250 <[email protected]>, Recipient ok (收信人確定)
Fri 2010-07-09 17:28:29: [620:21] RCPT TO:<[email protected]>
Fri 2010-07-09 17:28:29: [620:21] 250 <[email protected]>, Recipient ok (收信人確定)
Fri 2010-07-09 17:28:29: [620:21] RCPT TO:<[email protected]>
Fri 2010-07-09 17:28:29: [620:21] 250 <[email protected]>, Recipient ok (收信人確定)
Fri 2010-07-09 17:28:30: [620:21] RCPT TO:<[email protected]>
Fri 2010-07-09 17:28:30: [620:21] 250 <[email protected]>, Recipient ok (收信人確定)
Fri 2010-07-09 17:28:30: [620:21] DATA
Fri 2010-07-09 17:28:30: [620:21] 正在儲存 <c:\mdaemon\smtpin\16\md50000000001.tmp>
Fri 2010-07-09 17:28:30: [620:21] 354 Enter mail, end with <CRLF>.<CRLF>
Fri 2010-07-09 17:28:30: [620:21] 250 Ok, message saved (確定，信件已儲存。)
Fri 2010-07-09 17:28:31: [620:21] QUIT
Fri 2010-07-09 17:28:31: [620:21] 221 See ya in cyberspace (網際空間再見)
Fri 2010-07-09 17:28:31: [620:21] SMTP 連線期間成功完成，已發送 3251 位元組。
Fri 2010-07-09 17:28:31: [620:21] 將信件移動到適當的佇列。
Fri 2010-07-09 17:28:31: ----------
Fri 2010-07-09 17:28:33: [576:25] TCP 連線嘗試到 [dayuan.gov.tw] ，來自 [187.58.65.10] 為 IP 屏蔽所拒絕。
Fri 2010-07-09 17:28:33: [576:25] SMTP 連線期間異常終止，已發送 0 位元組。
Fri 2010-07-09 17:28:33: ----------
Fri 2010-07-09 17:28:34: [616:23] 信件接收來自 kcbtuivj.com [96.57.137.91] ，使用 SMTP 給 <[email protected]> [大小 12173896]
Fri 2010-07-09 17:28:34: [616:23] 信件接收來自 kcbtuivj.com [96.57.137.91] ，使用 SMTP 給 <[email protected]> [大小 12146736]
Fri 2010-07-09 17:28:34: [616:23] 信件接收來自 kcbtuivj.com [96.57.137.91] ，使用 SMTP 給 <[email protected]> [大小 12146736]
Fri 2010-07-09 17:28:34: [616:23] 信件接收來自 kcbtuivj.com [96.57.137.91] ，使用 SMTP 給 <[email protected]> [大小 12146736]
Fri 2010-07-09 17:28:34: [616:23] 信件接收來自 kcbtuivj.com [96.57.137.91] ，使用 SMTP 給 <[email protected]> [大小 12146736]
Fri 2010-07-09 17:28:34: [616:23] 信件接收來自 kcbtuivj.com [96.57.137.91] ，使用 SMTP 給 <[email protected]> [大小 12146736]
Fri 2010-07-09 17:28:34: [616:23] 信件接收來自 kcbtuivj.com [96.57.137.91] ，使用 SMTP 給 <[email protected]> [大小 12146736]
Fri 2010-07-09 17:28:34: [616:23] 信件接收來自 kcbtuivj.com [96.57.137.91] ，使用 SMTP 給 <[email protected]> [大小 12146736]
Fri 2010-07-09 17:28:34: [616:23] 信件接收來自 kcbtuivj.com [96.57.137.91] ，使用 SMTP 給 <[email protected]> [大小 12146736]
Fri 2010-07-09 17:28:29: [616:23] 正在接受 SMTP 連線來自: [96.57.137.91]
Fri 2010-07-09 17:28:29: [616:23] 220 dayuan.gov.tw ESMTP MDaemon 6.0.8; Fri, 09 Jul 2010 17:28:29 +0800
Fri 2010-07-09 17:28:30: [616:23] EHLO kcbtuivj.com
Fri 2010-07-09 17:28:30: [616:23] 250-dayuan.gov.tw Hello kcbtuivj.com, pleased to meet you (很高興見到你)
Fri 2010-07-09 17:28:30: [616:23] 250-ETRN
Fri 2010-07-09 17:28:30: [616:23] 250-AUTH LOGIN CRAM-MD5
Fri 2010-07-09 17:28:30: [616:23] 250-8BITMIME
Fri 2010-07-09 17:28:30: [616:23] 250 SIZE 0
Fri 2010-07-09 17:28:30: [616:23] AUTH CRAM-MD5
Fri 2010-07-09 17:28:30: [616:23] 334 PE1EQUVNT04tRjIwMTAwNzA5MTcyOC5BQTI4MzA0MzdNRDM2NDRAZGF5dWFuLmdvdi50dz4=
Fri 2010-07-09 17:28:30: [616:23] cHVibGljIDZkNTNjZDhhYjJlNDRmMzM5NzdmYzYxZThhZTQ4YjBl
Fri 2010-07-09 17:28:30: [616:23] 235 Authentication successful
Fri 2010-07-09 17:28:30: [616:23] Authenticated as [email protected]
Fri 2010-07-09 17:28:30: [616:23] MAIL FROM:<[email protected]> SIZE=3267
Fri 2010-07-09 17:28:30: [616:23] 250 <[email protected]>, Sender ok (發信人確定)
Fri 2010-07-09 17:28:31: [616:23] RCPT TO:<[email protected]>

MarchFun

是被當跳板了，為何垃圾客可以通過你的認證呢？找找看是哪裏的設定有問題。是不是 SMTP 設定了一組統一的密碼被猜到了？

lay

感謝大大的回覆:
                        依據擬指點的方向去查詢,真的發覺一堆USER攬的去變更預設密碼,經改變
                                密碼後,已經大大改善情況.謝謝

MarchFun

如果是這樣，建議啟用 POP Before SMTP 功能。

wacul

如果启用了也不能怎么办

NBBSOFT

如果是自家人發給自家人呢?
ex:[email protected] to [email protected]傳來傳去
(實際上mdaemon並無增設[email protected]這個帳號)
那麼是啥狀況?

MarchFun

既然沒有這個帳號就不會收到信哪！

rickhuang1

account password 設太簡單很容易被利用成為跳跳虎

wellboz

還是有很多需要請教老大

wnqsh

请问改了长密码依然被当做跳板应该怎么办呢?如果开了pop优先的话会对发邮件的人有什么影响么?里面的必须访问邮箱x分钟是说必须从网页上登陆x分钟之后才可以发送邮件么?谢谢

MarchFun

pop 優先並不是指從網頁登入，而是透過 pop3 收信。在 n 分鐘內有透過 pop3 收信才能寄信。