免费注册 查看新帖 |

Chinaunix

  平台 论坛 博客 文库
12下一页
最近访问板块 发新帖
查看: 8765 | 回复: 10
打印 上一主题 下一主题

[Mail] Qmail队列堆积了很多邮件,是不是我被做成转发器了? [复制链接]

论坛徽章:
0
跳转到指定楼层
1 [收藏(0)] [报告]
发表于 2010-03-25 13:36 |只看该作者 |倒序浏览
[root@mail aa]# more 496188
Received: (qmail 18536 invoked for bounce); 24 Mar 2010 20:56:22 -0000
Date: 24 Mar 2010 20:56:22 -0000
From: MAILER-DAEMON@mail.mail.com
To: ccerrfc@bossmail.de
Subject: failure notice

Hi. This is the qmail-send program at mail.mail.com.
I'm afraid I wasn't able to deliver your message to the following addresses.
This is a permanent error; I've given up. Sorry it didn't work out.

<atul2007@rediffmail.com>:
Connected to 119.252.147.10 but greeting failed.
Remote host said: 451 delivery from a.b.c.d is deferred,repeatedly. Send again or check at http://www.commtouch.co
m/Site/Resources/Check_IP_Reputation.asp
I'm not going to try again; this message has been in the queue too long.

<atul582002@yahoo.com>:
Connected to 67.195.168.31 but greeting failed.
Remote host said: 421 4.7.0 [TS01] Messages from a.b.c.d temporarily deferred due to user complaints - 4.16.55.1;
see http://postmaster.yahoo.com/421-ts01.html
I'm not going to try again; this message has been in the queue too long.

<atul75@rediffmail.com>:
Connected to 119.252.147.10 but greeting failed.
Remote host said: 451 delivery from a.b.c.d is deferred,repeatedly. Send again or check at http://www.commtouch.co
m/Site/Resources/Check_IP_Reputation.asp
I'm not going to try again; this message has been in the queue too long.

<atulag_2k6@yahoo.com>:
Connected to 98.137.54.237 but greeting failed.
Remote host said: 421 4.7.0 [TS01] Messages from a.b.c.d temporarily deferred due to user complaints - 4.16.55.1;
see http://postmaster.yahoo.com/421-ts01.html
I'm not going to try again; this message has been in the queue too long.

<atulahire007@yahoo.com>:
Connected to 74.6.136.65 but greeting failed.
Connected to 74.6.136.65 but greeting failed.
Remote host said: 421 4.7.0 [TS01] Messages from a.b.c.d temporarily deferred due to user complaints - 4.16.55.1;
see http://postmaster.yahoo.com/421-ts01.html
I'm not going to try again; this message has been in the queue too long.

<atularoadec@yahoo.co.in>:
Connected to 202.86.5.24 but greeting failed.
Remote host said: 421 4.7.0 [TS01] Messages from a.b.c.d temporarily deferred due to user complaints - 4.16.55.1;
see http://postmaster.yahoo.com/421-ts01.html
I'm not going to try again; this message has been in the queue too long.

<atulbatraz@hotmail.com>:
65.54.188.110 does not like recipient.
Remote host said: 550 Requested action not taken: mailbox unavailable
Giving up on 65.54.188.110.

<atulc2@yahoo.com>:
Connected to 206.190.54.127 but greeting failed.
Remote host said: 421 4.7.0 [TS01] Messages from a.b.c.d temporarily deferred due to user complaints - 4.16.55.1;
see http://postmaster.yahoo.com/421-ts01.html
I'm not going to try again; this message has been in the queue too long.

<atulgoel@rediffmail.com>:
Connected to 119.252.147.10 but greeting failed.
Remote host said: 451 delivery from a.b.c.d is deferred,repeatedly. Send again or check at http://www.commtouch.co
m/Site/Resources/Check_IP_Reputation.asp
I'm not going to try again; this message has been in the queue too long.

<atulhatwar@indiatimes.com>:
220.226.197.241 does not like recipient.
Remote host said: 452 sorry no PTR record found for your MTA please contact emailfeedback@indiatimes.com
Giving up on 220.226.197.241.
I'm not going to try again; this message has been in the queue too long.

<atulhatwar@usa.net>:
165.212.8.32 does not like recipient.
Remote host said: 550 <atulhatwar@usa.net>... User not known
<atul2112@gmail.com>:
209.85.216.93 failed after I sent the message.
Remote host said: 421-4.7.0 [a.b.c.d] Our system has detected an unusual amount of
421-4.7.0 unsolicited mail originating from your IP address. To protect our
421-4.7.0 users from spam, mail sent from your IP address has been temporarily
421-4.7.0 blocked. Please visit http://www.google.com/mail/help/bulk_mail.html
421 4.7.0 to review our Bulk Email Senders Guidelines. 24si16279979pxi.29
I'm not going to try again; this message has been in the queue too long.

<atulk11@yahoo.com>:
Connected to 66.94.236.34 but greeting failed.
Remote host said: 421 4.7.0 [TS01] Messages from a.b.c.d temporarily deferred due to user complaints - 4.16.55.1;
see http://postmaster.yahoo.com/421-ts01.html
I'm not going to try again; this message has been in the queue too long.

<atul44885@gmail.com>:
209.85.216.93 failed after I sent the message.
Remote host said: 421-4.7.0 [a.b.c.d] Our system has detected an unusual amount of
421-4.7.0 unsolicited mail originating from your IP address. To protect our
421-4.7.0 users from spam, mail sent from your IP address has been temporarily
421-4.7.0 blocked. Please visit http://www.google.com/mail/help/bulk_mail.html
421 4.7.0 to review our Bulk Email Senders Guidelines. 29si16278497pxi.14
I'm not going to try again; this message has been in the queue too long.

<atulkane@iinvestor.com>:
64.14.239.195 does not like recipient.
Remote host said: 550 5.7.1 relaying not allowed to <atulkane@iinvestor.com> in "RCPT TO:<atulkane@iinvestor.com>"
Giving up on 64.14.239.195.

<atulkbhandari@netscape.net>:
Connected to 64.12.90.66 but greeting failed.
Remote host said: 421 4.7.1 : (DNS:NR) http://postmaster.info.aol.com/errors/421dnsnr.html
I'm not going to try again; this message has been in the queue too long.
<atulsaxena.mrt@gmail.com>:
209.85.216.9 failed after I sent the message.
Remote host said: 421-4.7.0 [a.b.c.d] Our system has detected an unusual amount of
421-4.7.0 unsolicited mail originating from your IP address. To protect our
421-4.7.0 users from spam, mail sent from your IP address has been temporarily
421-4.7.0 blocked. Please visit http://www.google.com/mail/help/bulk_mail.html
421 4.7.0 to review our Bulk Email Senders Guidelines. 26si12856397pxi.79
I'm not going to try again; this message has been in the queue too long.

--- Below this line is a copy of the message.

Return-Path: <ccerrfc@bossmail.de>
Received: (qmail 27147 invoked by uid 89); 24 Mar 2010 01:39:19 -0000
Received: from unknown (HELO User) (market@78.83.168.231)
  by 0 with SMTP; 24 Mar 2010 01:39:19 -0000
Reply-To: <garysmith001@live.com>
From: "DR. Irene Smith"<ccerrfc@bossmail.de>
Subject: Urgent.....
Date: Wed, 24 Mar 2010 02:23:59 +0100
MIME-Version: 1.0
Content-Type: text/html;
        charset="_iso-2022-jp$ESC"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2800.1081
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1081

Attn: Beneficiary,
We wish to inform you that the diplomatic agent conveying the consignment box valued the sum of $10 Million United State
s Dollars misplaced your address and he is currently stranded at your International airport now. We required you reconfi
rm the following informations below so that he can deliver your consignment box to you today.

NAME:=======
ADDRESS:========
MOBILE NO.:========
NAME OF YOUR NEAREST AIRPORT:========
A COPY OF YOUR IDENTIFICATION:=======
Please do contact the diplomatic agent with the email below with the informations required.

Contact Person Mr. GARY SMITH MAIL: (garysmith001@live.com) He is waiting to hear from you today with the informations.N
OTE: The Diplomatic agent does not know that the content of the consignment box is $10 Millions United States Dollars an
d on no circumstances should you let him know the content.

The consignments was moved from here as family treasures, so never allow him to open the box.

Thanks.
GARY SMITH

论坛徽章:
0
2 [报告]
发表于 2010-03-25 13:36 |只看该作者
怎么解决这个问题呢?

论坛徽章:
0
3 [报告]
发表于 2010-03-25 13:53 |只看该作者
[root@mail bin]# qmailctl queue
messages in queue: 4
messages in queue but not yet preprocessed: 0
25 Mar 2010 05:48:17 GMT  #490044  18925  <>
        remote  tgu@onoio.com
25 Mar 2010 06:05:43 GMT  #490025  6946  <>
        remote  coverss@rapidtorc.com
25 Mar 2010 05:48:24 GMT  #490054  4687  <>
        remote  lavalsrd@ebooks-planet.com
25 Mar 2010 05:43:41 GMT  #490036  8275  <>
        remote  jerwvre@rietoo.com

清除队列后,出现的新邮件。

内容

[root@mail 7]# more 489999
Received: (qmail 31952 invoked by uid 89); 25 Mar 2010 06:06:31 -0000
Received: from unknown (HELO tonlaget.com) (113.91.174.32)
  by 0 with SMTP; 25 Mar 2010 06:06:31 -0000
Received-SPF: none (0: domain at tonlaget.com does not designate permitted sender hosts)
Received: from ACA0BF403DB946D[192.168.1.28] by themathpage.com
  with SMTP id 0C8EE902; Mon, 29 Mar 2010 13:51:09 +0800
From: =?GB2312?B?XLTeINChveNc?= <dsbumton@tonlaget.com>
Subject: =?GB2312?B?wey1vNPQ0Ke8pMD4z8LK9Ly4teO93b62bmdzd2pyaQ==?=
To: "wanganliang" <wanganliang@mail.com>
Content-Type: text/html;
        charset="gb2312"
Content-Transfer-Encoding: 8bit
Date: Mon, 29 Mar 2010 13:51:17 +0800
X-Mailer: Microsoft Outlook Express 6.00.2800.1158

<HTML><HEAD><TITLE>dsbumton@tonlaget.com 304415 13:51:14</TITLE>
<META http-equiv=Content-Type content="text/html; charset=gb2312">

论坛徽章:
0
4 [报告]
发表于 2010-03-26 23:57 |只看该作者
检查信头from、to是否是你的客户域名,如果都不是,那就被人中继了(当然也有可能是伪造信),先关闭邮件中继功能在进一步确定。

论坛徽章:
0
5 [报告]
发表于 2010-05-14 19:53 |只看该作者
如何关闭中继

论坛徽章:
0
6 [报告]
发表于 2010-05-15 09:08 |只看该作者
有人知道吗

论坛徽章:
0
7 [报告]
发表于 2010-05-15 09:10 |只看该作者
没人啊

论坛徽章:
0
8 [报告]
发表于 2010-05-23 10:05 |只看该作者
需要实际在服务器中查看一下队列中的邮件相信,做定量分析

论坛徽章:
0
9 [报告]
发表于 2010-06-03 19:45 |只看该作者
这垃圾邮件真是够头疼的!!

论坛徽章:
0
10 [报告]
发表于 2010-06-08 08:54 |只看该作者
显然是被别人破解了某个账号的密码用来发垃圾邮件了。检查日志就能发现是那个账号。
您需要登录后才可以回帖 登录 | 注册

本版积分规则 发表回复

  

北京盛拓优讯信息技术有限公司. 版权所有 京ICP备16024965号-6 北京市公安局海淀分局网监中心备案编号:11010802020122 niuxiaotong@pcpop.com 17352615567
未成年举报专区
中国互联网协会会员  联系我们:huangweiwei@itpub.net
感谢所有关心和支持过ChinaUnix的朋友们 转载本站内容请注明原作者名及出处

清除 Cookies - ChinaUnix - Archiver - WAP - TOP