分页: 1 / 1

求助,被垃圾邮件淹没

发表于 : 2015年3月1日, 19:23
a408421276
救命啊,这是什么状况,服务器被拖得快卡死了

"SMTPD" 7656 1 "2015-03-01 18:20:09.323" "114.24.10.118" "SENT: 530 SMTP authentication is required."
"DEBUG" 7656 "2015-03-01 18:20:09.323" "AWStats::LogDeliveryFailure"
"SMTPD" 7980 1 "2015-03-01 18:20:09.470" "114.24.10.118" "RECEIVED: QUIT"
"DEBUG" 7980 "2015-03-01 18:20:09.471" "Deleting message file."
"SMTPD" 7980 1 "2015-03-01 18:20:09.471" "114.24.10.118" "SENT: 221 goodbye"
"DEBUG" 7980 "2015-03-01 18:20:09.471" "Ending session 1"
"DEBUG" 6828 "2015-03-01 18:20:43.640" "Creating session 7"
"TCPIP" 6828 "2015-03-01 18:20:43.641" "TCP - 36.224.141.251 connected to 172.16.10.181:25."
"DEBUG" 6828 "2015-03-01 18:20:43.644" "TCP connection started for session 6"
"SMTPD" 6828 6 "2015-03-01 18:20:43.644" "36.224.141.251" "SENT: 220 mail.gzhjat.com ESMTP"
"SMTPD" 6624 6 "2015-03-01 18:20:43.874" "36.224.141.251" "RECEIVED: HELO 121.8.219.34"
"SMTPD" 6624 6 "2015-03-01 18:20:43.875" "36.224.141.251" "SENT: 250 Hello."
"SMTPD" 7656 6 "2015-03-01 18:20:43.999" "36.224.141.251" "RECEIVED: MAIL FROM: <xpjxfzovrkoqz@sfilc.com>"
"DEBUG" 7656 "2015-03-01 18:20:44.001" "Total spam score: 0"
"SMTPD" 7656 6 "2015-03-01 18:20:44.005" "36.224.141.251" "SENT: 250 OK"
"SMTPD" 7980 6 "2015-03-01 18:20:44.124" "36.224.141.251" "RECEIVED: RCPT TO: <book99983@yahoo.com.tw>"
"SMTPD" 7980 6 "2015-03-01 18:20:44.126" "36.224.141.251" "SENT: 530 SMTP authentication is required."
"DEBUG" 7980 "2015-03-01 18:20:44.126" "AWStats::LogDeliveryFailure"
"SMTPD" 6624 6 "2015-03-01 18:20:44.233" "36.224.141.251" "RECEIVED: RCPT TO: <darkhell-hc@yahoo.com.tw>"
"SMTPD" 6624 6 "2015-03-01 18:20:44.235" "36.224.141.251" "SENT: 530 SMTP authentication is required."
"DEBUG" 6624 "2015-03-01 18:20:44.236" "AWStats::LogDeliveryFailure"
"SMTPD" 7656 6 "2015-03-01 18:20:44.342" "36.224.141.251" "RECEIVED: RCPT TO: <asahi12345@yahoo.com.tw>"
"SMTPD" 7656 6 "2015-03-01 18:20:44.345" "36.224.141.251" "SENT: 530 SMTP authentication is required."
"DEBUG" 7656 "2015-03-01 18:20:44.345" "AWStats::LogDeliveryFailure"
"SMTPD" 7980 6 "2015-03-01 18:20:44.455" "36.224.141.251" "RECEIVED: RCPT TO: <boydorg@yahoo.com.tw>"
"SMTPD" 7980 6 "2015-03-01 18:20:44.456" "36.224.141.251" "SENT: 530 SMTP authentication is required."
"DEBUG" 7980 "2015-03-01 18:20:44.457" "AWStats::LogDeliveryFailure"
"SMTPD" 6624 6 "2015-03-01 18:20:44.564" "36.224.141.251" "RECEIVED: RCPT TO: <bukyx@yahoo.com.tw>"
"SMTPD" 6624 6 "2015-03-01 18:20:44.567" "36.224.141.251" "SENT: 530 SMTP authentication is required."
"DEBUG" 6624 "2015-03-01 18:20:44.567" "AWStats::LogDeliveryFailure"
"SMTPD" 7656 6 "2015-03-01 18:20:44.689" "36.224.141.251" "RECEIVED: RCPT TO: <angu9@yahoo.com.tw>"
"SMTPD" 7656 6 "2015-03-01 18:20:44.691" "36.224.141.251" "SENT: 530 SMTP authentication is required."
"DEBUG" 7656 "2015-03-01 18:20:44.691" "AWStats::LogDeliveryFailure"
"SMTPD" 7980 6 "2015-03-01 18:20:44.814" "36.224.141.251" "RECEIVED: RCPT TO: <dnjjr@yahoo.com.tw>"
"SMTPD" 7980 6 "2015-03-01 18:20:44.816" "36.224.141.251" "SENT: 530 SMTP authentication is required."
"DEBUG" 7980 "2015-03-01 18:20:44.816" "AWStats::LogDeliveryFailure"
"SMTPD" 6624 6 "2015-03-01 18:20:44.939" "36.224.141.251" "RECEIVED: RCPT TO: <blue200241@yahoo.com.tw>"
"SMTPD" 6624 6 "2015-03-01 18:20:44.940" "36.224.141.251" "SENT: 530 SMTP authentication is required."
"DEBUG" 6624 "2015-03-01 18:20:44.940" "AWStats::LogDeliveryFailure"
"SMTPD" 7656 6 "2015-03-01 18:20:45.048" "36.224.141.251" "RECEIVED: RCPT TO: <ali5254@yahoo.com.tw>"
"SMTPD" 7656 6 "2015-03-01 18:20:45.051" "36.224.141.251" "SENT: 530 SMTP authentication is required."
"DEBUG" 7656 "2015-03-01 18:20:45.051" "AWStats::LogDeliveryFailure"
"SMTPD" 7980 6 "2015-03-01 18:20:45.173" "36.224.141.251" "RECEIVED: RCPT TO: <baby06120227@yahoo.com.tw>"
"SMTPD" 7980 6 "2015-03-01 18:20:45.192" "36.224.141.251" "SENT: 530 SMTP authentication is required."
"DEBUG" 7980 "2015-03-01 18:20:45.192" "AWStats::LogDeliveryFailure"
"SMTPD" 7656 6 "2015-03-01 18:20:45.313" "36.224.141.251" "RECEIVED: RCPT TO: <bruce.pauli@yahoo.com.tw>"
"SMTPD" 7656 6 "2015-03-01 18:20:45.316" "36.224.141.251" "SENT: 530 SMTP authentication is required."
"DEBUG" 7656 "2015-03-01 18:20:45.316" "AWStats::LogDeliveryFailure"
"SMTPD" 6624 6 "2015-03-01 18:20:45.438" "36.224.141.251" "RECEIVED: RCPT TO: <amelie_hsiao@yahoo.com.tw>"
"SMTPD" 6624 6 "2015-03-01 18:20:45.440" "36.224.141.251" "SENT: 530 SMTP authentication is required."
"DEBUG" 6624 "2015-03-01 18:20:45.441" "AWStats::LogDeliveryFailure"
"SMTPD" 7980 6 "2015-03-01 18:20:45.582" "36.224.141.251" "RECEIVED: RSET"
"DEBUG" 7980 "2015-03-01 18:20:45.582" "Deleting message file."
"SMTPD" 7980 6 "2015-03-01 18:20:45.582" "36.224.141.251" "SENT: 250 OK"
"SMTPD" 7656 6 "2015-03-01 18:20:45.735" "36.224.141.251" "RECEIVED: MAIL FROM: <gbusqcgfd@sfilc.com>"
"DEBUG" 7656 "2015-03-01 18:20:45.736" "Total spam score: 0"
"SMTPD" 7656 6 "2015-03-01 18:20:45.738" "36.224.141.251" "SENT: 250 OK"
"SMTPD" 6624 6 "2015-03-01 18:20:45.860" "36.224.141.251" "RECEIVED: RCPT TO: <alice57822003@yahoo.com.tw>"
"SMTPD" 6624 6 "2015-03-01 18:20:45.862" "36.224.141.251" "SENT: 530 SMTP authentication is required."
"DEBUG" 6624 "2015-03-01 18:20:45.863" "AWStats::LogDeliveryFailure"
"SMTPD" 7980 6 "2015-03-01 18:20:45.984" "36.224.141.251" "RECEIVED: RCPT TO: <bscm@yahoo.com.tw>"
"SMTPD" 7980 6 "2015-03-01 18:20:45.987" "36.224.141.251" "SENT: 530 SMTP authentication is required."
"DEBUG" 7980 "2015-03-01 18:20:45.987" "AWStats::LogDeliveryFailure"
"SMTPD" 7656 6 "2015-03-01 18:20:46.094" "36.224.141.251" "RECEIVED: RCPT TO: <choco22038621@yahoo.com.tw>"
"SMTPD" 7656 6 "2015-03-01 18:20:46.096" "36.224.141.251" "SENT: 530 SMTP authentication is required."
"DEBUG" 7656 "2015-03-01 18:20:46.096" "AWStats::LogDeliveryFailure"
"SMTPD" 6624 6 "2015-03-01 18:20:46.214" "36.224.141.251" "RECEIVED: RCPT TO: <cto@yahoo.com.tw>"
"SMTPD" 6624 6 "2015-03-01 18:20:46.215" "36.224.141.251" "SENT: 530 SMTP authentication is required."
"DEBUG" 6624 "2015-03-01 18:20:46.215" "AWStats::LogDeliveryFailure"
"SMTPD" 7656 6 "2015-03-01 18:20:46.328" "36.224.141.251" "RECEIVED: RCPT TO: <alexchang77@yahoo.com.tw>"
"SMTPD" 7656 6 "2015-03-01 18:20:46.330" "36.224.141.251" "SENT: 530 SMTP authentication is required."
"DEBUG" 7656 "2015-03-01 18:20:46.331" "AWStats::LogDeliveryFailure"
"SMTPD" 7980 6 "2015-03-01 18:20:46.437" "36.224.141.251" "RECEIVED: RCPT TO: <appleman678@yahoo.com.tw>"
"SMTPD" 7980 6 "2015-03-01 18:20:46.439" "36.224.141.251" "SENT: 530 SMTP authentication is required."
"DEBUG" 7980 "2015-03-01 18:20:46.440" "AWStats::LogDeliveryFailure"
"SMTPD" 6624 6 "2015-03-01 18:20:46.547" "36.224.141.251" "RECEIVED: RCPT TO: <arisa611@yahoo.com.tw>"
"SMTPD" 6624 6 "2015-03-01 18:20:46.549" "36.224.141.251" "SENT: 530 SMTP authentication is required."
"DEBUG" 6624 "2015-03-01 18:20:46.549" "AWStats::LogDeliveryFailure"
"SMTPD" 7656 6 "2015-03-01 18:20:46.656" "36.224.141.251" "RECEIVED: RCPT TO: <ciboys_music@yahoo.com.tw>"
"SMTPD" 7656 6 "2015-03-01 18:20:46.658" "36.224.141.251" "SENT: 530 SMTP authentication is required."
"DEBUG" 7656 "2015-03-01 18:20:46.658" "AWStats::LogDeliveryFailure"
"SMTPD" 7980 6 "2015-03-01 18:20:46.765" "36.224.141.251" "RECEIVED: RCPT TO: <dand731216@yahoo.com.tw>"
"SMTPD" 7980 6 "2015-03-01 18:20:46.767" "36.224.141.251" "SENT: 530 SMTP authentication is required."
"DEBUG" 7980 "2015-03-01 18:20:46.767" "AWStats::LogDeliveryFailure"

Re: 求助,被垃圾邮件淹没

发表于 : 2015年3月1日, 21:12
a408421276
好像是被当成公共SMTP垃圾邮件转发站了???怎么添加必须账户密码验证才可以SMTP?

Re: 求助,被垃圾邮件淹没

发表于 : 2015年3月2日, 17:26
jimmy
SMTP验证失败,应该是没发出去。不过这样频繁的嗅探,会占用服务器资源和带宽资源

你可以用防火墙,手动禁用这些IP
或者用ipsec+批处理,自动检测这些IP,并加入ipsec过滤

Re: 求助,被垃圾邮件淹没

发表于 : 2015年3月3日, 09:23
a408421276
谢谢,IP地址常常更换,怎么做ipsec+批处理,自动检测这些IP,并加入ipsec过滤?

Re: 求助,被垃圾邮件淹没

发表于 : 2015年3月3日, 09:43
a408421276
我明明在“设置”——“高级”——“IP范围”——禁止了允许递交来自网外发送到网外的Email地址,为何它还可以尝试递交,在SMTP验证这步才停止呢

Re: 求助,被垃圾邮件淹没

发表于 : 2015年3月3日, 09:49
a408421276
这些IP地址都在spamhaus的CBL上,我在DNS黑名单上有启用spamhaus,为何还是可以进来呢?

Re: 求助,被垃圾邮件淹没

发表于 : 2015年3月3日, 17:46
Hsia
你这个情况我在初期也遇到过,查了很多,官网也问过,不了了之。然后换了个Ip。

Re: 求助,被垃圾邮件淹没

发表于 : 2015年3月4日, 09:19
a408421276
这样子啊,我的服务器被拖累,有时甚至卡死,换IP不太方便,而且换了还被攻击咋办?有没有这样的防火墙工具?