大家帮忙看个退信日志

mayborn

上周五发现客人邮件发不进来，可能是DBL，就加入了白名单，客人发送test邮件正常
今天又发不进来了，不晓得什么原因
请指教，多谢！

Mon 2010-01-11 08:32:26: <-- MAIL FROM:<cryolitexxxxx@163.com>
Mon 2010-01-11 08:32:26: Performing IP lookup (163.com)
Mon 2010-01-11 08:32:26: *  D=163.com TTL=(3) A=[220.181.31.8]
Mon 2010-01-11 08:32:26: *  P=010 S=000 D=163.com TTL=(41) MX=[mxnew-b.163.com] {220.181.12.81}
Mon 2010-01-11 08:32:26: *  P=010 S=001 D=163.com TTL=(41) MX=[mxnew-c.163.com] {220.181.12.63}
Mon 2010-01-11 08:32:26: *  P=010 S=002 D=163.com TTL=(41) MX=[mxnew-d.163.com]
Mon 2010-01-11 08:32:26: *  P=010 S=003 D=163.com TTL=(41) MX=[mxnew-a.163.com]
Mon 2010-01-11 08:32:26: *  D=163.com TTL=(3) A=[220.181.31.8]
Mon 2010-01-11 08:32:26: *  D=163.com TTL=(3) A=[220.181.31.8]
Mon 2010-01-11 08:32:26: ---- End IP lookup results
Mon 2010-01-11 08:32:26: Performing SPF lookup (163.com / 123.125.50.132)
Mon 2010-01-11 08:32:26: *  Policy: v=spf1 include:spf.163.com -all
Mon 2010-01-11 08:32:26: *  Evaluating include:spf.163.com: performing lookup
Mon 2010-01-11 08:32:26: *    Policy: v=spf1 ip4:220.181.12.0/22 ip4:220.232.228.72/29 ip4:60.12.227.128/27 ip4:60.191.85.0/24 ip4:220.181.31.0/24 ip4:123.125.50.0/24 ip4:220.181.72.0/24 ip4:202.108.5.64/26 ip4:202.108.5.128/25 ip4:202.108.16.26 ip4:202.108.15.31 -all
Mon 2010-01-11 08:32:26: *    Evaluating ip4:220.181.12.0/22: no match
Mon 2010-01-11 08:32:26: *    Evaluating ip4:220.232.228.72/29: no match
Mon 2010-01-11 08:32:26: *    Evaluating ip4:60.12.227.128/27: no match
Mon 2010-01-11 08:32:26: *    Evaluating ip4:60.191.85.0/24: no match
Mon 2010-01-11 08:32:26: *    Evaluating ip4:220.181.31.0/24: no match
Mon 2010-01-11 08:32:26: *    Evaluating ip4:123.125.50.0/24: match
Mon 2010-01-11 08:32:26: *  Evaluating include:spf.163.com: match
Mon 2010-01-11 08:32:26: *  Result: pass
Mon 2010-01-11 08:32:26: ---- End SPF results
Mon 2010-01-11 08:32:26: --> 250 <cryolitexxxxx@163.com>, Sender ok
Mon 2010-01-11 08:32:26: <-- RCPT TO:<price@mbxxxx.com>
Mon 2010-01-11 08:32:26: Performing DNS-BL lookup (123.125.50.132 - connecting IP)
Mon 2010-01-11 08:32:26: *  zen.spamhaus.org - failed
Mon 2010-01-11 08:32:26: ---- End DNS-BL results
Mon 2010-01-11 08:32:26: --> 250 <price@mbxxxx.com>, Recipient ok
Mon 2010-01-11 08:32:26: <-- DATA
Mon 2010-01-11 08:32:26: Creating temp file (SMTP): d:\mdaemon\queues\temp\md50000110336.tmp
Mon 2010-01-11 08:32:26: --> 354 Enter mail, end with <CRLF>.<CRLF>
Mon 2010-01-11 08:32:27: Message size: 7070 bytes
Mon 2010-01-11 08:32:27: Performing DKIM lookup
Mon 2010-01-11 08:32:27: *  File: d:\mdaemon\queues\temp\md50000110336.tmp
Mon 2010-01-11 08:32:27: *  Message-ID: 201001110832508757899@163.com
Mon 2010-01-11 08:32:27: *  Result: neutral
Mon 2010-01-11 08:32:27: ---- End DKIM results
Mon 2010-01-11 08:32:27: Performing DomainKeys lookup (Sender: cryolitexxxxx@163.com)
Mon 2010-01-11 08:32:27: *  File: d:\mdaemon\queues\temp\md50000110336.tmp
Mon 2010-01-11 08:32:27: *  Message-ID: 201001110832508757899@163.com
Mon 2010-01-11 08:32:27: *  Querying for policy: 163.com
Mon 2010-01-11 08:32:27: *    Querying: _domainkey.163.com ...
Mon 2010-01-11 08:32:27: *    DNS: *  Name server reports domain name unknown
Mon 2010-01-11 08:32:27: *  Result: neutral
Mon 2010-01-11 08:32:27: ---- End DomainKeys results
Mon 2010-01-11 08:32:27: Message creation successful: d:\mdaemon\queues\inbound\md50000535769.msg
Mon 2010-01-11 08:32:27: --> 250 Ok, message saved <Message-ID: 201001110832508757899@163.com>
Mon 2010-01-11 08:32:27: <-- QUIT
Mon 2010-01-11 08:32:27: --> 221 See ya in cyberspace
Mon 2010-01-11 08:32:27: SMTP session successful (Bytes in/out: 7170/420)
Mon 2010-01-11 08:32:27: ----------
Mon 2010-01-11 08:32:27: Performing SPF lookup (163.com / 123.125.50.132)
Mon 2010-01-11 08:32:27: *  Policy: v=spf1 include:spf.163.com -all
Mon 2010-01-11 08:32:27: *  Evaluating include:spf.163.com: performing lookup
Mon 2010-01-11 08:32:27: *    Policy: v=spf1 ip4:220.181.12.0/22 ip4:220.232.228.72/29 ip4:60.12.227.128/27 ip4:60.191.85.0/24 ip4:220.181.31.0/24 ip4:123.125.50.0/24 ip4:220.181.72.0/24 ip4:202.108.5.64/26 ip4:202.108.5.128/25 ip4:202.108.16.26 ip4:202.108.15.31 -all
Mon 2010-01-11 08:32:27: *    Evaluating ip4:220.181.12.0/22: no match
Mon 2010-01-11 08:32:27: *    Evaluating ip4:220.232.228.72/29: no match
Mon 2010-01-11 08:32:27: *    Evaluating ip4:60.12.227.128/27: no match
Mon 2010-01-11 08:32:27: *    Evaluating ip4:60.191.85.0/24: no match
Mon 2010-01-11 08:32:27: *    Evaluating ip4:220.181.31.0/24: no match
Mon 2010-01-11 08:32:27: *    Evaluating ip4:123.125.50.0/24: match
Mon 2010-01-11 08:32:27: *  Evaluating include:spf.163.com: match
Mon 2010-01-11 08:32:27: *  Result: pass

mayborn

已解决
应该是IFRAME问题，去掉这条默认规则 了……
Tue 2010-01-12 08:46:01: * Message ID: <201001120845597031432@163.com>
Tue 2010-01-12 08:46:01: Start Content Filter results
Tue 2010-01-12 08:46:01: * Message matched rule: IFRAME vulnerability [Move to bad message queue]
Tue 2010-01-12 08:46:01: * Matched 1 of 15 active rules
Tue 2010-01-12 08:46:01: End of Content Filter results