qmail的rcpthosts不起作用了？极度郁闷+绝望中

忍者神龟

过年回来发现服务器被人发送垃圾邮件用了：
qmailr    3758 31773  0 14:28 pts/0    00:00:00 qmail-remote online.no  proleads@online.no
qmailr    3819 31773  0 14:28 pts/0    00:00:00 qmail-remote slip.net R_angdyN5242@bigfoot.com ennisads@slip.net
qmailr    3821 31773  0 14:28 pts/0    00:00:00 qmail-remote netscape.net R_angdyN5242@bigfoot.com cherubflyn@netscape.net
qmailr    3826 31773  0 14:28 pts/0    00:00:00 qmail-remote mail.ev1.net funnygal@hitbot.com clifford43@mail.ev1.net
qmailr    3834 31773  0 14:28 pts/0    00:00:00 qmail-remote online.no  proleads@online.no
qmailr    3836 31773  0 14:28 pts/0    00:00:00 qmail-remote alcdsb.on.ca cutiepie123@hotmail.com clifford@alcdsb.on.ca
qmailr    3851 31773  0 14:28 pts/0    00:00:00 qmail-remote online.no  proleads@online.no
qmailr    3853 31773  0 14:28 pts/0    00:00:00 qmail-remote beethoven.com steph007@yahoo.com cliffordbarry@beethoven.com
qmailr    3878 31773  0 14:28 pts/0    00:00:00 qmail-remote cybrtyme.com AlberteJ5242@mail.com jburns@cybrtyme.com
可是过年前是好的啊。
我的rcpthosts也设置了
[root@mail /bin]# more /etc/tcp.smtp
127.0.0.1:allow,RELAYCLIENT=""
192.168.0.229:allow,RELAYCLIENT=""
211.101.129.49:allow,RELAYCLIENT=""
202.108.191.224:allow,RELAYCLIENT=""
:allow


[root@mail control]# more rcpthosts
mail.datatrust.com.cn
datatrust.com.cn
mail.3cn.com.cn
3cn.com.cn
mail.wave.com.cn
wave.com.cn
各位，我真的快走投无路了。
还有什么没有说清楚的，我会尽量提供的。


root      2341  2287  0 09:58 pts/0    00:00:05 -bash
root     31760     1  0 14:03 pts/0    00:00:00 svscan
root     31761     1  0 14:03 pts/0    00:00:00 tcpserver -H -P -R 0 110 /var/qmail/bin/qmail-popup pop /bin/checkvpw /var/qmail/bin/qmail-pop
root     31762 31760  0 14:03 pts/0    00:00:00 supervise qmail-send
root     31763 31760  0 14:03 pts/0    00:00:00 supervise log
root     31764 31760  0 14:03 pts/0    00:00:00 supervise qmail-smtpd
root     31765 31760  0 14:03 pts/0    00:00:00 supervise log
qmails   31766 31762  0 14:03 pts/0    00:00:02 qmail-send
qmaill   31767 31763  0 14:03 pts/0    00:00:00 /usr/local/bin/multilog t s2500000 /var/log/qmail/qmail-send
qmaild   31768 31764  0 14:03 pts/0    00:00:00 /usr/local/bin/tcpserver -v -p -R -l 0 -t 1 -c 100 -x /etc/tcp.smtp.cdb -u 502 -g 501 0 smtp /
qmaill   31769 31765  0 14:03 pts/0    00:00:00 /usr/local/bin/multilog t s2500000 /var/log/qmail/qmail-smtpd
root     31772 31766  0 14:03 pts/0    00:00:00 qmail-lspawn |dot-forward .forward?./Maildir/
qmailr   31773 31766  0 14:03 pts/0    00:00:00 qmail-rspawn
qmailq   31774 31766  0 14:03 pts/0    00:00:00 qmail-clean
root     31787     1  0 14:04 ?        00:00:00 /usr/local/imap/libexec/couriertcpd -address=127.0.0.1 -stderrlogger=/usr/local/imap/libexec/l
root     31790     1  0 14:04 ?        00:00:00 /usr/local/imap/libexec/logger imapd

qmailr    3734 31773  0 14:28 pts/0    00:00:00 qmail-remote navlmail.com hehehe@prodigy.net harold_lawrence@navlmail.com
qmailr    3752 31773  0 14:28 pts/0    00:00:00 qmail-remote earthlink.net JoghnnyK524@bigfoot.com gugga@earthlink.net
qmailr    3753 31773  0 14:28 pts/0    00:00:00 qmail-remote excite.com JoghnnyK524@bigfoot.com gugga@excite.com
qmailr    3758 31773  0 14:28 pts/0    00:00:00 qmail-remote online.no  proleads@online.no
qmailr    3819 31773  0 14:28 pts/0    00:00:00 qmail-remote slip.net R_angdyN5242@bigfoot.com ennisads@slip.net
qmailr    3821 31773  0 14:28 pts/0    00:00:00 qmail-remote netscape.net R_angdyN5242@bigfoot.com cherubflyn@netscape.net
qmailr    3826 31773  0 14:28 pts/0    00:00:00 qmail-remote mail.ev1.net funnygal@hitbot.com clifford43@mail.ev1.net
qmailr    3834 31773  0 14:28 pts/0    00:00:00 qmail-remote online.no  proleads@online.no
qmailr    3836 31773  0 14:28 pts/0    00:00:00 qmail-remote alcdsb.on.ca cutiepie123@hotmail.com clifford@alcdsb.on.ca
qmailr    3851 31773  0 14:28 pts/0    00:00:00 qmail-remote online.no  proleads@online.no
qmailr    3853 31773  0 14:28 pts/0    00:00:00 qmail-remote beethoven.com steph007@yahoo.com cliffordbarry@beethoven.com
qmailr    3878 31773  0 14:28 pts/0    00:00:00 qmail-remote cybrtyme.com AlberteJ5242@mail.com jburns@cybrtyme.com
qmailr    3893 31773  0 14:28 pts/0    00:00:00 qmail-remote aol.com kickasstunes@yahoo.com cliffordvc@aol.com
qmailr    3896 31773  0 14:29 pts/0    00:00:00 qmail-remote onebox.com  Rand_dyN5242@onebox.com
qmailq    3902  3243  0 14:29 pts/0    00:00:00 bin/qmail-queue
qmailr    3908 31773  0 14:29 pts/0    00:00:00 qmail-remote online.no  proleads@online.no
qmailq    3909  2689  0 14:29 pts/0    00:00:00 bin/qmail-queue
qmailr    3912 31773  0 14:29 pts/0    00:00:00 qmail-remote hotmail.com  wgeldfglencunnigham91@hotmail.com
qmailq    3913  2766  0 14:29 pts/0    00:00:00 bin/qmail-queue
qmailq    3914  1565  0 14:29 pts/0    00:00:00 bin/qmail-queue
qmailr    3915 31773  0 14:29 pts/0    00:00:00 qmail-remote cqc.com kickasstunes@yahoo.com harpie@cqc.com
qmailr    3918 31773  0 14:29 pts/0    00:00:00 qmail-remote yahoo.com kickasstunes@yahoo.com harpie_17@yahoo.com
qmailq    3920 32139  0 14:29 pts/0    00:00:00 bin/qmail-queue
qmailr    3921 31773  0 14:29 pts/0    00:00:00 qmail-remote online.no  proleads@online.no
qmailq    3922  2420  0 14:29 pts/0    00:00:00 bin/qmail-queue
root      3923  2341  0 14:29 pts/0    00:00:00 ps -ef

jamwolf

大哥，看看你这段策略设置的：
127.0.0.1:allow,RELAYCLIENT=" "
192.168.0.229:allow,RELAYCLIENT=" "
211.101.129.49:allow,RELAYCLIENT=" "
202.108.191.224:allow,RELAYCLIENT=" "
:allow
最后的:allow是允许任何地址的任何流量通过，即任何客户端都使用此邮件服务器进行中继转发，应该把它删掉，这样除了上面的四个地址，其它的连接就会被干掉。

忍者神龟

最后一行没有RELAYCLIENT是不是意味着不进行转发呢？
好多网上例子都有最后一行的

忍者神龟

那别人如果给我发信是不是也不能发了？

jamwolf

应该不会，别人发给你的信不会被拒收。

wienne

你服务器smtp auth功能是否在生效？