共计一页
imail smtp 服务一打开,spool下就出现N多 .smd的文件(附日志) 请高手看下
#1
发表于 2006-06-24 01:01:23
只要把SMTP服务一打开就有.... imail的spool目录下就有N多 .smd 的文件,不断的出现,
日志如下:
06:24 01:00 SMTPD(0009004A) server starting on port 25 of xianqi_01server
06:24 01:00 SMTPD(06C601EA) [xx1.xx1.xx1.xx1] connect xx2.xx2.xx2.xx2 port 3562
06:24 01:00 SMTPD(06C601EA) [xx2.xx2.xx2.xx2] HELO xx1.xx1.xx1.xx1
06:24 01:00 SMTPD(06C601EA) [xx2.xx2.xx2.xx2] MAIL FROM: <dyjscjnijqapxr@yahoo.com>
06:24 01:00 SMTPD(06C601EA) [xx2.xx2.xx2.xx2] RCPT TO: <folksong@yahoo.com.tw>
06:24 01:00 SMTPD(06C601EA) [xx2.xx2.xx2.xx2] RCPT TO: <folksongs@yahoo.com.tw>
06:24 01:00 SMTPD(06C601EA) [xx2.xx2.xx2.xx2] C:\IMail\spool\D1e2206c601ea2b12.SMD 2393
06:24 01:00 SMTP-(14340008) processing C:\IMail\spool\Q1e2206c601ea2b12.SMD
06:24 01:00 SMTP-(14340008) Trying yahoo.com.tw (0)
06:24 01:00 SMTPD(06C601EA) [xx2.xx2.xx2.xx2] MAIL FROM: <yrnlwiew@yahoo.com>
06:24 01:00 SMTPD(06C601EA) [xx2.xx2.xx2.xx2] RCPT TO: <folksy@yahoo.com.tw>
06:24 01:00 SMTPD(06C601EA) [xx2.xx2.xx2.xx2] RCPT TO: <folkvangr@yahoo.com.tw>
06:24 01:00 SMTPD(06C601EA) [xx2.xx2.xx2.xx2] RCPT TO: <folkway@yahoo.com.tw>
06:24 01:00 SMTPD(06C601EA) [xx2.xx2.xx2.xx2] RCPT TO: <folky@yahoo.com.tw>
06:24 01:00 SMTPD(06C601EA) [xx2.xx2.xx2.xx2] C:\IMail\spool\D1e2406c601ea33ec.SMD 3039
06:24 01:00 SMTP-(10FC0004) processing C:\IMail\spool\Q1e2406c601ea33ec.SMD
06:24 01:00 SMTP-(10FC0004) Trying yahoo.com.tw (0)
其中 xx1.xx1.xx1.xx1 是我服务器的地址 xx2.xx2.xx2.xx2 是另一个地址,
我现在能确定的是xx2.xx2.xx2.xx2这个地址在搞鬼,但不知道怎么解决,请版主及高手明示
日志如下:
06:24 01:00 SMTPD(0009004A) server starting on port 25 of xianqi_01server
06:24 01:00 SMTPD(06C601EA) [xx1.xx1.xx1.xx1] connect xx2.xx2.xx2.xx2 port 3562
06:24 01:00 SMTPD(06C601EA) [xx2.xx2.xx2.xx2] HELO xx1.xx1.xx1.xx1
06:24 01:00 SMTPD(06C601EA) [xx2.xx2.xx2.xx2] MAIL FROM: <dyjscjnijqapxr@yahoo.com>
06:24 01:00 SMTPD(06C601EA) [xx2.xx2.xx2.xx2] RCPT TO: <folksong@yahoo.com.tw>
06:24 01:00 SMTPD(06C601EA) [xx2.xx2.xx2.xx2] RCPT TO: <folksongs@yahoo.com.tw>
06:24 01:00 SMTPD(06C601EA) [xx2.xx2.xx2.xx2] C:\IMail\spool\D1e2206c601ea2b12.SMD 2393
06:24 01:00 SMTP-(14340008) processing C:\IMail\spool\Q1e2206c601ea2b12.SMD
06:24 01:00 SMTP-(14340008) Trying yahoo.com.tw (0)
06:24 01:00 SMTPD(06C601EA) [xx2.xx2.xx2.xx2] MAIL FROM: <yrnlwiew@yahoo.com>
06:24 01:00 SMTPD(06C601EA) [xx2.xx2.xx2.xx2] RCPT TO: <folksy@yahoo.com.tw>
06:24 01:00 SMTPD(06C601EA) [xx2.xx2.xx2.xx2] RCPT TO: <folkvangr@yahoo.com.tw>
06:24 01:00 SMTPD(06C601EA) [xx2.xx2.xx2.xx2] RCPT TO: <folkway@yahoo.com.tw>
06:24 01:00 SMTPD(06C601EA) [xx2.xx2.xx2.xx2] RCPT TO: <folky@yahoo.com.tw>
06:24 01:00 SMTPD(06C601EA) [xx2.xx2.xx2.xx2] C:\IMail\spool\D1e2406c601ea33ec.SMD 3039
06:24 01:00 SMTP-(10FC0004) processing C:\IMail\spool\Q1e2406c601ea33ec.SMD
06:24 01:00 SMTP-(10FC0004) Trying yahoo.com.tw (0)
其中 xx1.xx1.xx1.xx1 是我服务器的地址 xx2.xx2.xx2.xx2 是另一个地址,
我现在能确定的是xx2.xx2.xx2.xx2这个地址在搞鬼,但不知道怎么解决,请版主及高手明示
#5
发表于 2006-09-10 09:09:42
跑呀跑, on 2006年6月24日 - 1:23, said:
只要把SMTP服务一打开就有.... imail的spool目录下就有N多 .smd 的文件,不断的出现,
日志如下:
06:24 01:00 SMTPD(0009004A) server starting on port 25 of xianqi_01server
06:24 01:00 SMTPD(06C601EA) [xx1.xx1.xx1.xx1] connect xx2.xx2.xx2.xx2 port 3562
06:24 01:00 SMTPD(06C601EA) [xx2.xx2.xx2.xx2] HELO xx1.xx1.xx1.xx1
06:24 01:00 SMTPD(06C601EA) [xx2.xx2.xx2.xx2] MAIL FROM: <dyjscjnijqapxr@yahoo.com>
06:24 01:00 SMTPD(06C601EA) [xx2.xx2.xx2.xx2] RCPT TO: <folksong@yahoo.com.tw>
06:24 01:00 SMTPD(06C601EA) [xx2.xx2.xx2.xx2] RCPT TO: <folksongs@yahoo.com.tw>
06:24 01:00 SMTPD(06C601EA) [xx2.xx2.xx2.xx2] C:\IMail\spool\D1e2206c601ea2b12.SMD 2393
06:24 01:00 SMTP-(14340008) processing C:\IMail\spool\Q1e2206c601ea2b12.SMD
06:24 01:00 SMTP-(14340008) Trying yahoo.com.tw (0)
06:24 01:00 SMTPD(06C601EA) [xx2.xx2.xx2.xx2] MAIL FROM: <yrnlwiew@yahoo.com>
06:24 01:00 SMTPD(06C601EA) [xx2.xx2.xx2.xx2] RCPT TO: <folksy@yahoo.com.tw>
06:24 01:00 SMTPD(06C601EA) [xx2.xx2.xx2.xx2] RCPT TO: <folkvangr@yahoo.com.tw>
06:24 01:00 SMTPD(06C601EA) [xx2.xx2.xx2.xx2] RCPT TO: <folkway@yahoo.com.tw>
06:24 01:00 SMTPD(06C601EA) [xx2.xx2.xx2.xx2] RCPT TO: <folky@yahoo.com.tw>
06:24 01:00 SMTPD(06C601EA) [xx2.xx2.xx2.xx2] C:\IMail\spool\D1e2406c601ea33ec.SMD 3039
06:24 01:00 SMTP-(10FC0004) processing C:\IMail\spool\Q1e2406c601ea33ec.SMD
06:24 01:00 SMTP-(10FC0004) Trying yahoo.com.tw (0)
其中 xx1.xx1.xx1.xx1 是我服务器的地址 xx2.xx2.xx2.xx2 是另一个地址,
我现在能确定的是xx2.xx2.xx2.xx2这个地址在搞鬼,但不知道怎么解决,请版主及高手明示
日志如下:
06:24 01:00 SMTPD(0009004A) server starting on port 25 of xianqi_01server
06:24 01:00 SMTPD(06C601EA) [xx1.xx1.xx1.xx1] connect xx2.xx2.xx2.xx2 port 3562
06:24 01:00 SMTPD(06C601EA) [xx2.xx2.xx2.xx2] HELO xx1.xx1.xx1.xx1
06:24 01:00 SMTPD(06C601EA) [xx2.xx2.xx2.xx2] MAIL FROM: <dyjscjnijqapxr@yahoo.com>
06:24 01:00 SMTPD(06C601EA) [xx2.xx2.xx2.xx2] RCPT TO: <folksong@yahoo.com.tw>
06:24 01:00 SMTPD(06C601EA) [xx2.xx2.xx2.xx2] RCPT TO: <folksongs@yahoo.com.tw>
06:24 01:00 SMTPD(06C601EA) [xx2.xx2.xx2.xx2] C:\IMail\spool\D1e2206c601ea2b12.SMD 2393
06:24 01:00 SMTP-(14340008) processing C:\IMail\spool\Q1e2206c601ea2b12.SMD
06:24 01:00 SMTP-(14340008) Trying yahoo.com.tw (0)
06:24 01:00 SMTPD(06C601EA) [xx2.xx2.xx2.xx2] MAIL FROM: <yrnlwiew@yahoo.com>
06:24 01:00 SMTPD(06C601EA) [xx2.xx2.xx2.xx2] RCPT TO: <folksy@yahoo.com.tw>
06:24 01:00 SMTPD(06C601EA) [xx2.xx2.xx2.xx2] RCPT TO: <folkvangr@yahoo.com.tw>
06:24 01:00 SMTPD(06C601EA) [xx2.xx2.xx2.xx2] RCPT TO: <folkway@yahoo.com.tw>
06:24 01:00 SMTPD(06C601EA) [xx2.xx2.xx2.xx2] RCPT TO: <folky@yahoo.com.tw>
06:24 01:00 SMTPD(06C601EA) [xx2.xx2.xx2.xx2] C:\IMail\spool\D1e2406c601ea33ec.SMD 3039
06:24 01:00 SMTP-(10FC0004) processing C:\IMail\spool\Q1e2406c601ea33ec.SMD
06:24 01:00 SMTP-(10FC0004) Trying yahoo.com.tw (0)
其中 xx1.xx1.xx1.xx1 是我服务器的地址 xx2.xx2.xx2.xx2 是另一个地址,
我现在能确定的是xx2.xx2.xx2.xx2这个地址在搞鬼,但不知道怎么解决,请版主及高手明示
你的服务器被人利用来转发邮件了,小心被列入垃圾邮件服务器名单,
方法:在smtp中关闭转发功能,或只允许本地域的用户转发
共计一页

Sign In
Register
帮助
多贴引用