ORF反垃圾邮件系统

邮件服务器-邮件系统-邮件技术论坛(BBS)

 找回密码
 会员注册
查看: 3701|回复: 0
打印 上一主题 下一主题

[求助] 如何让MD判别哪些邮件是SPAM

[复制链接]
跳转到指定楼层
顶楼
发表于 2008-4-2 11:25:43 | 只看该作者 回帖奖励 |倒序浏览 |阅读模式
建好MD服务器后进行163.com 126.com 21cn.com等大型邮件供应商的账号对MD服务器进行发送测试发现如果用客户端软件比如FOXMAIL发送邮件过来的话可以收到,但是登录到这些邮件平台上,从WEB页面发送邮件过来就都收不到,查看来日志如下:
Wed 2008-04-02 10:39:50: Session 7; child 1; thread 3136
Wed 2008-04-02 10:39:44: 接受 SMTP 连接来自 [220.181.13.81 :42527]
Wed 2008-04-02 10:39:44: --> 220 aaa.com.cn ESMTP MAIL ready
Wed 2008-04-02 10:39:44: <-- HELO m13-81.163.com
Wed 2008-04-02 10:39:44: Performing IP lookup (m13-81.163.com)
Wed 2008-04-02 10:39:44: *  D=m13-81.163.com TTL=(720) A=[220.181.13.81]
Wed 2008-04-02 10:39:44: ---- End IP lookup results
Wed 2008-04-02 10:39:44: --> 250 aaa.com.cn Hello m13-81.163.com, pleased to meet you
Wed 2008-04-02 10:39:44: <-- MAIL FROM:<xuchenyan_1202@163.com>
Wed 2008-04-02 10:39:44: Performing PTR lookup (81.13.181.220.IN-ADDR.ARPA)
Wed 2008-04-02 10:39:44: *  D=81.13.181.220.IN-ADDR.ARPA TTL=(720) PTR=[m13-81.163.com]
Wed 2008-04-02 10:39:44: *  Gathering A records...
Wed 2008-04-02 10:39:44: *  D=m13-81.163.com TTL=(719) A=[220.181.13.81]
Wed 2008-04-02 10:39:44: ---- End PTR results
Wed 2008-04-02 10:39:44: Performing IP lookup (163.com)
Wed 2008-04-02 10:39:44: *  D=163.com TTL=(8) A=[220.181.29.154]
Wed 2008-04-02 10:39:44: *  P=050 S=000 D=163.com TTL=(695) MX=[mx.mail.163.split.netease.com]
Wed 2008-04-02 10:39:44: *  D=163.com TTL=(8) A=[220.181.29.154]
Wed 2008-04-02 10:39:44: ---- End IP lookup results
Wed 2008-04-02 10:39:44: Performing SPF lookup (163.com / 220.181.13.81)
Wed 2008-04-02 10:39:44: *  163.com 220.181.13.81; matched to SPF cache
Wed 2008-04-02 10:39:44: *  Result: pass
Wed 2008-04-02 10:39:44: ---- End SPF results
Wed 2008-04-02 10:39:44: --> 250 <xuchenyan_1202@163.com>, Sender ok
Wed 2008-04-02 10:39:44: <-- RCPT TO:<master@aaa.com.cn>
Wed 2008-04-02 10:39:44: 执行 DNS-BL 查询(220.181.13.81 - 正在连接 IP)
Wed 2008-04-02 10:39:45: *  sbl-xbl.spamhaus.org,来自 $IP$ 的邮件被拒绝,参见 http://www.spamhaus.org - 通过
Wed 2008-04-02 10:39:46: *  relays.ordb.org,来自 $IP$ 的邮件被拒绝,参见 http://www.ordb.org/faq/ - 通过
Wed 2008-04-02 10:39:46: *  bl.spamcop.net,来自 $IP$ 的邮件被拒绝,参见 http://www.spamcop.net - 通过
Wed 2008-04-02 10:39:46: *  sbl-xbl.spamhaus.org - 通过
Wed 2008-04-02 10:39:46: ---- 结束 DNS-BL 结果
Wed 2008-04-02 10:39:46: --> 250 <master@aaa.com.cn>, Recipient ok
Wed 2008-04-02 10:39:47: <-- DATA
Wed 2008-04-02 10:39:47: Creating temp file (SMTP): d:\mdaemon\queues\temp\md50000000001.tmp
Wed 2008-04-02 10:39:47: --> 354 Enter mail, end with <CRLF>.<CRLF>
Wed 2008-04-02 10:39:47: Message size: 1583 bytes
Wed 2008-04-02 10:39:47: Performing DomainKeys lookup (Sender: xuchenyan_1202@163.com)
Wed 2008-04-02 10:39:47: *  File: d:\mdaemon\queues\temp\md50000000001.tmp
Wed 2008-04-02 10:39:47: *  Message-ID: 27261319.845821207104223096.JavaMail.coremail@bj163app81.163.com
Wed 2008-04-02 10:39:47: *  Querying for policy: 163.com
Wed 2008-04-02 10:39:47: *    Querying: _domainkey.163.com ...
Wed 2008-04-02 10:39:47: *    DNS: 名称服务器没有该域要求类型的记录
Wed 2008-04-02 10:39:47: *  Result: pass
Wed 2008-04-02 10:39:47: ---- End DomainKeys results
Wed 2008-04-02 10:39:47: Performing DKIM lookup
Wed 2008-04-02 10:39:47: *  File: d:\mdaemon\queues\temp\md50000000001.tmp
Wed 2008-04-02 10:39:47: *  Message-ID: 27261319.845821207104223096.JavaMail.coremail@bj163app81.163.com
Wed 2008-04-02 10:39:47: *  Result: neutral
Wed 2008-04-02 10:39:47: ---- End DKIM results
Wed 2008-04-02 10:39:47: Passing message through AntiVirus (Size: 1583)...
Wed 2008-04-02 10:39:47: *  邮件清洁(未发现病毒)
Wed 2008-04-02 10:39:47: ---- End AntiVirus results
Wed 2008-04-02 10:39:49: Passing message through Outbreak Protection...
Wed 2008-04-02 10:39:49: *  Message-ID: 27261319.845821207104223096.JavaMail.coremail@bj163app81.163.com
Wed 2008-04-02 10:39:49: *  Reference-ID: str=0001.0A090207.47F2F2E8.0013:SCFMA508157,ss=1,fgs=0
Wed 2008-04-02 10:39:49: *  Virus result: 0 - Clean
Wed 2008-04-02 10:39:49: *  Spam result: 1 - Clean
Wed 2008-04-02 10:39:49: *  IWF result: (requires MDaemon 9.60 or higher)
Wed 2008-04-02 10:39:49: ---- End Outbreak Protection results
Wed 2008-04-02 10:39:49: Passing message through Spam Filter (Size: 1583)...
Wed 2008-04-02 10:39:50: *  1.5 RCVD_NUMERIC_HELO Received: contains an IP address used for HELO
Wed 2008-04-02 10:39:50: *  0.0 HTML_MESSAGE BODY: HTML included in message
Wed 2008-04-02 10:39:50: *   10 BAYES_99 BODY: Bayesian spam probability is 99 to 100%
Wed 2008-04-02 10:39:50: *      [score: 1.0000]
Wed 2008-04-02 10:39:50: *  0.2 MIME_BASE64_NO_NAME RAW: base64 attachment does not have a file
Wed 2008-04-02 10:39:50: *      name
Wed 2008-04-02 10:39:50: *  1.9 MIME_BASE64_TEXT RAW: Message text disguised using base64 encoding
Wed 2008-04-02 10:39:50: *  0.0 HTML_SHORT_COMMENT HTML is very short with HTML comments
Wed 2008-04-02 10:39:50: ---- End SpamAssassin results
Wed 2008-04-02 10:39:50: Spam Filter score/req: 13.60/12.0
Wed 2008-04-02 10:39:50: Message refused because spam score is too high
Wed 2008-04-02 10:39:50: --> 554 Sorry, message looks like SPAM to me
Wed 2008-04-02 10:39:50: <-- QUIT
Wed 2008-04-02 10:39:50: --> 221 See ya in cyberspace
Wed 2008-04-02 10:39:50: SMTP 会话终止(in/out 字节: 1686/285)

上面的黑体大字中显示是此信被判定为垃圾邮件,便进入MD中查看设置

已经选择了判定为垃圾邮件后继续下传了,怎么还是收不到邮件?
难不成我要在白名单里把所有可信域都加进去?那不是很累?敢问一下各位先人,如何对叶斯贝的过滤进行整理,又如何对启发式进行定义?根据日志中对SPAM分值的定义,难道我要将在“启发式”页面中的“邮件是垃圾邮件的条件为其总值大于或等于”一直改为14分?

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?会员注册

x
您需要登录后才可以回帖 登录 | 会员注册

本版积分规则

小黑屋|手机版|Archiver|邮件技术资讯网

GMT+8, 2024-11-18 23:48

Powered by Discuz! X3.2

© 2001-2016 Comsenz Inc.

本论坛为非盈利中立机构,所有言论属发表者个人意见,不代表本论坛立场。内容所涉及版权和法律相关事宜请参考各自所有者的条款。
如认定侵犯了您权利,请联系我们。本论坛原创内容请联系后再行转载并务必保留我站信息。此声明修改不另行通知,保留最终解释权。
*本论坛会员专属QQ群:邮件技术资讯网会员QQ群
*本论坛会员备用QQ群:邮件技术资讯网备用群

快速回复 返回顶部 返回列表