ORF反垃圾邮件系统

邮件服务器-邮件系统-邮件技术论坛(BBS)

 找回密码
 会员注册
查看: 5242|回复: 1
打印 上一主题 下一主题

[求助] 【已解决】关于webmail的被封问题

[复制链接]
跳转到指定楼层
顶楼
发表于 2012-2-14 10:39:23 | 只看该作者 回帖奖励 |倒序浏览 |阅读模式
本帖最后由 山坛兄弟 于 2012-2-17 10:16 编辑

这是第二次在电脑上装webmail 上次也是这样的问题,一直被封没办
法停了。
注:邮件系统webmail3,8,1,3  系统2003系统 (加iis 固定ip
装好以后一直没动,建立俩个账号,一直没动,在不到一个星期突然就
msn收不到邮件了提示
[
无法将您的邮件投递至以下指定地址:
xxx@msn,com : 550 OU-001 (COL0-MC3-F47)Unfortunately, messages
from 2x,x,x,x weren't sent, Please contactyour Internet
service p


----- Original message follows,

Received: from [2x,x,x,x]; Mon, 13 Feb 201209:13:59 +0800
Message-ID:<E0B6E27ADDA9492CB66945FE2C828388@sdshipe39f864d>
From: "xxx" <xxx@sdship,com>
Cc: <xxx@msn,com>
Subject: xxx
Date: Mon, 13 Feb 2012 09:13:50 +0800
MIME-Version: 1,0
Content-Type: text/plain;
   charset=b2312"
Content-Transfer-Encoding: base64
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6,00,3790,4657
X-MimeOLE: Produced By Microsoft MimeOLE V6,00,3790,4913

550错误
163可以正常收到
msn往回发送也可以收到
由此想到上次的ip被封问题。


  ,kloth,net/services/dnsbl,php   显示
,,, here is the Multi-DNSBL-check resultfor 2x,x,x,x from
these lists :
Listed in cbl,abuseat,org, cbl,abuseat,org: 127,0,0,2 :
Blocked - see  cbl,abuseat,org/lookup,cgi?ip=2x,x,x,x -
(ttl:3600) [0,0249 sec]
Not listed in dnsbl,ahbl,org,  ,ahbl,org [0,0089 sec]
Not listed in ircbl,ahbl,org,  ,ahbl,org [0,0091 sec]
Not listed in virbl,dnsbl,bit,nl, virbl,bit,nl[0,0209 sec]
Listed in blackholes,five-ten-sg,com,  ,five-ten-sg,com :
127,0,0,2 : added 2001-04-20;we do not accept mail from china
- (ttl:362819) [0,0013 sec]
Listed in blackholes,five-ten-sg,com,  ,five-ten-sg,com :
127,0,0,2 : added 2001-04-19;china does not seem to care about
spam - (ttl:362819) [0,0014 sec]
Not listed in dnsbl,inps,de, dnsbl,inps,de[0,0134 sec]
Not listed in ix,dnsbl,manitu,net,  ,dnsbl,manitu,net/
[0,0536 sec]
Listed in no-more-funn,moensted,dk,moensted,dk/spam/no-more-
funn/ : 127,0,0,2 : added 2001-04-19;china does not seem to
care about spam add ,76+77 - (ttl:2100) [0,0917sec]
Listed in no-more-funn,moensted,dk, moensted,dk/spam/no-more-
funn/ : 127,0,0,2 : CN does not seem tocare about spam see
moensted,dk/spam/no-more-funn/?addr=2x,x,x,x1173065559
# - (ttl:2100) [0,0918 sec]
Not listed in combined,njabl,org, njabl,org[0,1155 sec]
Not listed in dnsbl,njabl,org, njabl,org [0,0126sec]
Not listed in dnsbl,sorbs,net,  ,nl,sorbs,net [2,3369 sec]
Not listed in bl,spamcannibal,org,  ,spamcannibal,org [0,0159
sec]
Not listed in bl,spamcop,net,  ,spamcop,net [0,0199 sec]
Not listed in sbl,spamhaus,org,  ,spamhaus,org/sbl/ [0,0097
sec]
Listed in xbl,spamhaus,org,  ,spamhaus,org/xbl/ : 127,0,0,4 :
  ,spamhaus,org/query/bl?ip=2x,x,x,x - (ttl:900)
[0,0293 sec]
Not listed in pbl,spamhaus,org,  ,spamhaus,org/pbl/ [0,0453
sec]
Not listed in dnsbl-1,uceprotect,net,  ,uceprotect,net
[0,0086 sec]
Not listed in dnsbl-2,uceprotect,net,  ,uceprotect,net
[0,0128 sec]
Not listed in dnsbl-3,uceprotect,net,  ,uceprotect,net
[0,0142 sec]
Not listed in db,wpbl,info,  ,wpbl,info [0,0093 sec]
Not listed in list,dnswl,org,  ,dnswl,org [0,0042 sec]
________________________________________
Statistics:
23 checks performed in 2,9512 seconds,
Found 6 listed, 17 unlisted in thiscollection of DNSBLs,
Please note, that dnswl,org is a whitelistnot a blacklist,
What to do, if 'your' IP address is listed?
Since these lists are doing their workcarefully, there is a
very strong evidence that 'your' IP addressis associated with
spam activity, Clean your environment orhave your ISP to clean
his environment and visit the DNSBL toarrange for a de-
listing,
If your receipient's mail server isrejecting your mails by
using one of these DNSBLs, you mayadditionally approach your
receipient to whitelist your IP address (orhave his ISP to do
so),
If in doubt, if the lists are alife and thechecks are working,
you may check for the test IP address 127,0,0,2,which should
trigger most lists as a standard testrecord,
________________________________________
我感觉主要是  Listed in cbl,abuseat,org, cbl,abuseat,org
Listed in xbl,spamhaus,org
我这边没发送邮件 然后 就这几个账号别人也没用
为什么就被封了能。?
是因为被入侵了 人家发送的还是?webmail自己发送的邮件?很困惑
注: log日志是
Sun, 12 Feb 2012 04:07:26 Smtp登录, IP: 113,128,156,212 , Port
40526
Sun, 12 Feb 2012 04:07:27 用户: admin 通过了SMTP发信身份认证,
Sun, 12 Feb 2012 04:08:59 [113,128,156,212]关闭连接,
Sun, 12 Feb 2012 06:22:16 Smtp登录, IP: 122,225,101,202 , Port
63714
Sun, 12 Feb 2012 06:22:17 [122,225,101,202]关闭Smtp连接,
Sun, 12 Feb 2012 06:22:30 [122,225,101,202]关闭连接,
Sun, 12 Feb 2012 06:55:11 Smtp登录, IP: 122,225,101,202 , Port
28753
Sun, 12 Feb 2012 06:55:12 [122,225,101,202]关闭Smtp连接,
Sun, 12 Feb 2012 06:55:25 [122,225,101,202]关闭连接,
Sun, 12 Feb 2012 07:40:55 Pop3登录, IP: 74,93,195,217 , Port
3996
Sun, 12 Feb 2012 07:40:55 Pop3登录, IP: 74,93,195,217 , Port
4134
Sun, 12 Feb 2012 07:40:56 POP3身份验证失败, 用户: TEST
Sun, 12 Feb 2012 07:40:56 用户: TEST [74,93,195,217] 退出POP3
,
Sun, 12 Feb 2012 07:40:56 Pop3登录, IP: 74,93,195,217 , Port
4586
Sun, 12 Feb 2012 07:40:56 Pop3登录, IP: 74,93,195,217 , Port
4726
Sun, 12 Feb 2012 07:40:56 Pop3登录, IP: 74,93,195,217 , Port
4735
Sun, 12 Feb 2012 07:40:57 POP3身份验证失败, 用户: TEST
Sun, 12 Feb 2012 07:40:57 POP3密码验证失败, 用户: ADMIN
Sun, 12 Feb 2012 07:40:57 [74,93,195,217] 关闭连接,
Sun, 12 Feb 2012 07:40:57 用户: TEST [74,93,195,217] 退出POP3
,
Sun, 12 Feb 2012 07:40:57 用户: ADMIN [74,93,195,217] 退出POP3
服务,
Sun, 12 Feb 2012 07:40:57 Pop3登录, IP: 74,93,195,217 , Port
1587
Sun, 12 Feb 2012 07:40:57 Pop3登录, IP: 74,93,195,217 , Port
1586
Sun, 12 Feb 2012 07:40:58 POP3登录成功, 用户: ADMIN
[74,93,195,217]
Sun, 12 Feb 2012 07:40:58 POP3身份验证失败, 用户: TEST
Sun, 12 Feb 2012 07:40:58 [74,93,195,217] 关闭连接,
Sun, 12 Feb 2012 07:40:58 [74,93,195,217] 关闭连接,
Sun, 12 Feb 2012 07:41:01 用户: ADMIN [74,93,195,217] 退出POP3
服务,
Sun, 12 Feb 2012 07:41:01 用户: TEST [74,93,195,217] 退出POP3
,
Sun, 12 Feb 2012 07:41:02 Pop3登录, IP: 74,93,195,217 , Port
3187
Sun, 12 Feb 2012 07:41:02 [74,93,195,217] 关闭连接,
Sun, 12 Feb 2012 07:41:02 [74,93,195,217] 关闭连接,
Sun, 12 Feb 2012 07:41:02 POP3身份验证失败, 用户: TEST
Sun, 12 Feb 2012 07:41:02 用户: TEST [74,93,195,217] 退出POP3
,
Sun, 12 Feb 2012 07:41:03 Pop3登录, IP: 74,93,195,217 , Port
3774
Sun, 12 Feb 2012 07:41:03 POP3身份验证失败, 用户: TEST
Sun, 12 Feb 2012 07:41:03 [74,93,195,217] 关闭连接,
Sun, 12 Feb 2012 07:41:04 用户: TEST [74,93,195,217] 退出POP3
,
Sun, 12 Feb 2012 07:41:04 Pop3登录, IP: 74,93,195,217 , Port
4460
Sun, 12 Feb 2012 07:41:04 POP3身份验证失败, 用户: TEST
Sun, 12 Feb 2012 07:41:05 [74,93,195,217] 关闭连接,
Sun, 12 Feb 2012 07:41:05 用户: TEST [74,93,195,217] 退出POP3
,
Sun, 12 Feb 2012 07:41:05 Pop3登录, IP: 74,93,195,217 , Port
1142
Sun, 12 Feb 2012 07:41:06 POP3身份验证失败, 用户: TEST
Sun, 12 Feb 2012 07:41:06 [74,93,195,217] 关闭连接,
Sun, 12 Feb 2012 07:41:06 用户: TEST [74,93,195,217] 退出POP3
,
Sun, 12 Feb 2012 07:41:06 Pop3登录, IP: 74,93,195,217 , Port
1544
Sun, 12 Feb 2012 07:41:07 POP3身份验证失败, 用户: TEST
Sun, 12 Feb 2012 07:41:07 [74,93,195,217] 关闭连接,
Sun, 12 Feb 2012 07:41:07 用户: TEST [74,93,195,217] 退出POP3
,
Sun, 12 Feb 2012 07:41:07 Pop3登录, IP: 74,93,195,217 , Port
1959
Sun, 12 Feb 2012 07:41:08 POP3身份验证失败, 用户: TEST
Sun, 12 Feb 2012 07:41:08 [74,93,195,217] 关闭连接,
Sun, 12 Feb 2012 07:41:08 用户: TEST [74,93,195,217] 退出POP3
,
Sun, 12 Feb 2012 07:41:08 Pop3登录, IP: 74,93,195,217 , Port
2432
Sun, 12 Feb 2012 07:41:09 POP3身份验证失败, 用户: TEST
Sun, 12 Feb 2012 07:41:09 [74,93,195,217] 关闭连接,
Sun, 12 Feb 2012 07:41:09 用户: TEST [74,93,195,217] 退出POP3
,
Sun, 12 Feb 2012 07:41:10 Pop3登录, IP: 74,93,195,217 , Port
2869
Sun, 12 Feb 2012 07:41:10 POP3身份验证失败, 用户: TEST
Sun, 12 Feb 2012 07:41:10 [74,93,195,217] 关闭连接,
Sun, 12 Feb 2012 07:41:10 用户: TEST [74,93,195,217] 退出POP3
,
Sun, 12 Feb 2012 07:41:11 Pop3登录, IP: 74,93,195,217 , Port
3248
Sun, 12 Feb 2012 07:41:11 POP3身份验证失败, 用户: TEST
Sun, 12 Feb 2012 07:41:11 [74,93,195,217] 关闭连接,
Sun, 12 Feb 2012 07:41:12 用户: TEST [74,93,195,217] 退出POP3
,
Sun, 12 Feb 2012 07:41:12 Pop3登录, IP: 74,93,195,217 , Port
3928
Sun, 12 Feb 2012 07:41:12 POP3身份验证失败, 用户: TEST
Sun, 12 Feb 2012 07:41:13 [74,93,195,217] 关闭连接,
Sun, 12 Feb 2012 07:41:13 用户: TEST [74,93,195,217] 退出POP3
,
Sun, 12 Feb 2012 07:41:13 Pop3登录, IP: 74,93,195,217 , Port
4522
Sun, 12 Feb 2012 07:41:14 POP3身份验证失败, 用户: TEST
Sun, 12 Feb 2012 07:41:14 [74,93,195,217] 关闭连接,
Sun, 12 Feb 2012 07:41:14 用户: TEST [74,93,195,217] 退出POP3
,
Sun, 12 Feb 2012 07:41:14 Pop3登录, IP: 74,93,195,217 , Port
1160
Sun, 12 Feb 2012 07:41:15 POP3身份验证失败, 用户: TEST
Sun, 12 Feb 2012 07:41:15 [74,93,195,217] 关闭连接,
Sun, 12 Feb 2012 07:41:15 用户: TEST [74,93,195,217] 退出POP3
,
Sun, 12 Feb 2012 07:41:16 [74,93,195,217] 关闭连接,
Sun, 12 Feb 2012 07:41:16 [74,93,195,217] 关闭连接,
Sun, 12 Feb 2012 07:42:27 [74,93,195,217] 关闭连接,
Sun, 12 Feb 2012 08:54:01 Smtp登录, IP: 14,153,89,33 , Port
38436
Sun, 12 Feb 2012 08:54:02 [14,153,89,33] 关闭Smtp连接,
Sun, 12 Feb 2012 08:54:14 [14,153,89,33] 关闭连接,
Sun, 12 Feb 2012 11:31:49 Smtp登录, IP: 82,7,165,5 , Port 54653
Sun, 12 Feb 2012 11:32:02 [82,7,165,5] 关闭连接,
Sun, 12 Feb 2012 15:53:59 Smtp登录, IP: 117,79,84,4 , Port
38612
Sun, 12 Feb 2012 15:54:00 [117,79,84,4] 关闭Smtp连接,
Sun, 12 Feb 2012 15:54:12 [117,79,84,4] 关闭连接,
这是星期天的 没有人在,我们周日是没人的

沙发
发表于 2012-2-16 11:50:42 | 只看该作者
固定IP做好了策略一般都不会被封的。
您需要登录后才可以回帖 登录 | 会员注册

本版积分规则

小黑屋|手机版|Archiver|邮件技术资讯网

GMT+8, 2024-12-22 20:07

Powered by Discuz! X3.2

© 2001-2016 Comsenz Inc.

本论坛为非盈利中立机构,所有言论属发表者个人意见,不代表本论坛立场。内容所涉及版权和法律相关事宜请参考各自所有者的条款。
如认定侵犯了您权利,请联系我们。本论坛原创内容请联系后再行转载并务必保留我站信息。此声明修改不另行通知,保留最终解释权。
*本论坛会员专属QQ群:邮件技术资讯网会员QQ群
*本论坛会员备用QQ群:邮件技术资讯网备用群

快速回复 返回顶部 返回列表