邮件服务器-邮件系统-邮件技术论坛(BBS)

标题: MD邮箱被垃圾邮件劫持。 [打印本页]

作者: ken_tech 时间: 2011-4-1 15:10
标题: MD邮箱被垃圾邮件劫持。
最近发现公司有个别人员的邮箱在往QQ邮箱里发送垃圾邮件。
日志如下：
X-Uidl: MD50000002892:MSG:3731:30142520:587067830&&mail.XXXX.com.cn
Return-path: <shaob@ XXXX.com.cn>
Received: from 201101291921 by XXXX.com.cn (MDaemon PRO v10.1.1)
with ESMTP id md50000004489.msg
for <admin@ XXXX.com.cn>; Fri, 01 Apr 2011 14:43:40 +0800
Authentication-Results: XXXX.com.cn
auth=pass smtp.mail=shaob@ XXXX.com.cn
x-ip-ptr=hardfail ip=58.250.87.109 (no PTR records found);
x-ip-helo=hardfail smtp.helo=201101291921 (does not match 58.250.87.109)
X-Spam-Processed: XXXX.com.cn, Fri, 01 Apr 2011 14:43:40 +0800
(not processed: message from trusted or authenticated source)
X-MDPtrLookup-Result: hardfail ip=58.250.87.109 (no PTR records found) (XXXX.com.cn)
X-MDHeloLookup-Result: hardfail smtp.helo=201101291921 (does not match 58.250.87.109) (XXXX.com.cn)
X-Authenticated-Sender: shaob@ XXXX.com.cn
X-MDArchive-Copy: 1
X-Rcpt-To: 1191180477@qq.com
X-MDRcpt-To: 1191180477@qq.com
X-MDRemoteIP: 58.250.87.109
X-Return-Path: shaob@ XXXX.com.cn
X-Envelope-From: shaob@ XXXX.com.cn
X-MDaemon-Deliver-To: admin@ XXXX.com.cn
Thread-Topic: =?gb2312?B?J7DZ0NXN+KOtKtbQufrX7rTztcTD4rfRt6J+LrK8LSDQxc+iLX7GvQ==?=
=?gb2312?B?J8yofqOsJ7PP0ft+KicuxPotw+InKicut9G808jrLirO0i1+w8cnLaGk?=
Reply-To: <16621124312123123127@ qq.com
thread-index: AcvwN5sjSa1KNVTwQ9CBndtVgT3PDQ==
From: <shaob@ XXXX.com.cn>
To: <281111211@ qq.com>,
<16587141@ qq.com>,
<716511181@ qq.com>,
<4111956117410@ qq.com>,
<827111112138@ qq.com,
<111111110477@ qq.com>,
<362811111317@ qq.com>,
<4111111111476@ qq.com>,
<3111111117@ qq.com>
Subject: (Archive Copy) =?gb2312?B?J7DZ0NXN+KOtKtbQufrX7rTztcTD4rfRt6J+LrK8LSDQxc+iLX7GvQ==?=
=?gb2312?B?J8yofqOsJ7PP0ft+KicuxPotw+InKicut9G808jrLirO0i1+w8cnLaGk?=
Date: Fri, 1 Apr 2011 14:39:52 +0800
Message-ID: <7697E5FBAE4447C8BDB26902416D4D39@ 201101291921>
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_06AE_01CBF07A.A94970F0"
X-Mailer: Microsoft CDO for Windows 2000
Content-Class: urn:content-classes:message
Importance: normal
Priority: normal
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.5579

其中这个IP：58.250.87.109 并不是我公司的IP地址，想将此IP列入到黑名单中，但不清楚应该怎样操作，请各位大大帮忙解决下。。

[ 本帖最后由 ken_tech 于 2011-4-6 09:22 编辑 ]

作者: 520hero 时间: 2011-6-4 16:06
dns那有个黑名单啊。把那个ip加入到黑名单估计就行了

作者: yudong118 时间: 2011-6-10 09:48
请参考下此贴中的方法：
http://bbs.5dmail.net/viewthread ... mp;page=1#pid319208

欢迎光临邮件服务器-邮件系统-邮件技术论坛(BBS) (http://news.5dmail.net/bbs/)