论坛徽章:: 0

电梯直达

1楼 [收藏(0)] [报告]

发表于 2004-09-10 23:36 |只看该作者 |倒序浏览

我的邮件服务器近日总有一些捣乱分子进行群发邮件，邮件日志如下：

Sep 10 23:22:44 mail1 postfix/smtpd[30486]: 2A78A3710D: client=unknown[210.192.101.209]
Sep 10 23:22:44 mail1 postfix/smtpd[30486]: 2A78A3710D: reject: RCPT from unknown[210.192.101.209]: 450 <fred@gzu.edu.cn>;: User unknown in local recipient table; from=<>; to=<fred@gzu.edu.cn>; proto=ESMTP helo=<webmail2.email.com.cn>;
Sep 10 23:22:46 mail1 postfix/smtpd[30390]: disconnect from unknown[210.192.101.209]
Sep 10 23:22:46 mail1 postfix/smtpd[30486]: disconnect from unknown[210.192.101.209]
Sep 10 23:22:47 mail1 postfix/smtpd[30390]: connect from unknown[202.108.252.135]
Sep 10 23:22:48 mail1 postfix/smtpd[30390]: A2D3937099: client=unknown[202.108.252.135]
Sep 10 23:22:49 mail1 postfix/smtpd[30390]: A2D3937099: reject: RCPT from unknown[202.108.252.135]: 450 <mike@gzu.edu.cn>;: User unknown in local recipient table; from=<>; to=<mike@gzu.edu.cn>; proto=SMTP helo=<'tom.com'>;
Sep 10 23:22:50 mail1 postfix/smtpd[30390]: disconnect from unknown[202.108.252.135]
Sep 10 23:22:59 mail1 postfix/smtpd[30486]: connect from unknown[211.155.251.252]
Sep 10 23:23:00 mail1 postfix/smtpd[30486]: D396C37099: client=unknown[211.155.251.252]
Sep 10 23:23:01 mail1 postfix/smtpd[30486]: D396C37099: reject: RCPT from unknown[211.155.251.252]: 450 <leo@gzu.edu.cn>;: User unknown in local recipient table; from=<>; to=<leo@gzu.edu.cn>; proto=SMTP helo=<www>;
Sep 10 23:23:01 mail1 postfix/smtpd[30390]: connect from unknown[202.108.255.195]
Sep 10 23:23:02 mail1 postfix/smtpd[30390]: disconnect from unknown[202.108.255.195]
Sep 10 23:23:03 mail1 postfix/smtpd[30390]: connect from unknown[202.108.255.198]
Sep 10 23:23:03 mail1 postfix/smtpd[30486]: disconnect from unknown[211.155.251.252]
Sep 10 23:23:03 mail1 postfix/smtpd[30390]: BDEBE37099: client=unknown[202.108.255.198]
Sep 10 23:23:04 mail1 postfix/smtpd[30390]: BDEBE37099: reject: RCPT from unknown[202.108.255.198]: 450 <brent@gzu.edu.cn>;: User unknown in local recipient table; from=<>; to=<brent@gzu.edu.cn>; proto=SMTP helo=<'tom.com'>;
Sep 10 23:23:05 mail1 postfix/smtpd[30390]: disconnect from unknown[202.108.255.198]
Sep 10 23:23:07 mail1 postfix/smtpd[30486]: connect from unknown[202.108.255.197]
Sep 10 23:23:08 mail1 postfix/smtpd[30486]: 5121537099: client=unknown[202.108.255.197]
Sep 10 23:23:08 mail1 postfix/smtpd[30486]: 5121537099: reject: RCPT from unknown[202.108.255.197]: 450 <cjxy@gzu.edu.cn>;: User unknown in local recipient table; from=<>; to=<cjxy@gzu.edu.cn>; proto=SMTP helo=<'tom.com'>;
Sep 10 23:23:10 mail1 postfix/smtpd[30486]: disconnect from unknown[202.108.255.197]
Sep 10 23:23:19 mail1 postfix/smtpd[30390]: connect from nstnse02.asahi-np.co.jp[133.173.6.132]
Sep 10 23:23:19 mail1 postfix/smtpd[30390]: B6A1A37099: client=nstnse02.asahi-np.co.jp[133.173.6.132]
Sep 10 23:23:20 mail1 postfix/smtpd[30390]: B6A1A37099: reject: RCPT from nstnse02.asahi-np.co.jp[133.173.6.132]: 450 <joe@gzu.edu.cn>;: User unknown in local recipient table; from=<>; to=<joe@gzu.edu.cn>; proto=ESMTP helo=<nstnse02.asahi-np.co.jp>;
Sep 10 23:23:21 mail1 postfix/smtpd[30412]: timeout after RSET from unknown[202.38.193.34]
Sep 10 23:23:21 mail1 postfix/smtpd[30412]: disconnect from unknown[202.38.193.34]
Sep 10 23:23:53 mail1 postfix/smtpd[30486]: connect from fallback.us4.outblaze.com[205.158.62.120]
Sep 10 23:23:53 mail1 postfix/smtpd[30486]: EBF8D37099: client=fallback.us4.outblaze.com[205.158.62.120]
Sep 10 23:23:53 mail1 postfix/smtpd[30486]: EBF8D37099: reject: RCPT from fallback.us4.outblaze.com[205.158.62.120]: 450 <kevin@gzu.edu.cn>;: User unknown in local recipient table; from=<>; to=<kevin@gzu.edu.cn>; proto=ESMTP helo=<fallback.us4.outblaze.com>;
Sep 10 23:23:56 mail1 postfix/smtpd[30486]: disconnect from fallback.us4.outblaze.com[205.158.62.120]
Sep 10 23:24:08 mail1 postfix/smtpd[30412]: connect from unknown[202.108.255.198]
Sep 10 23:24:09 mail1 postfix/smtpd[30412]: 4E3C137099: client=unknown[202.108.255.198]
Sep 10 23:24:09 mail1 postfix/smtpd[30412]: 4E3C137099: reject: RCPT from unknown[202.108.255.198]: 450 <abc@gzu.edu.cn>;: User unknown in local recipient table; from=<>; to=<abc@gzu.edu.cn>; proto=SMTP helo=<'tom.com'>;
Sep 10 23:24:11 mail1 postfix/smtpd[30412]: disconnect from unknown[202.108.255.198]
Sep 10 23:24:30 mail1 postfix/smtpd[30486]: connect from unknown[202.108.252.134]
Sep 10 23:24:30 mail1 postfix/smtpd[30486]: BD7CE37099: client=unknown[202.108.252.134]
Sep 10 23:24:31 mail1 postfix/smtpd[30486]: BD7CE37099: reject: RCPT from unknown[202.108.252.134]: 450 <dave@gzu.edu.cn>;: User unknown in local recipient table; from=<>; to=<dave@gzu.edu.cn>; proto=SMTP helo=<'tom.com'>;
Sep 10 23:24:32 mail1 postfix/smtpd[30486]: disconnect from unknown[202.108.252.134]
Sep 10 23:24:49 mail1 postfix/smtpd[30412]: connect from rcpt-expgw.biglobe.ne.jp[202.225.89.184]
Sep 10 23:24:50 mail1 postfix/smtpd[30412]: 29BD637099: client=rcpt-expgw.biglobe.ne.jp[202.225.89.184]
Sep 10 23:24:50 mail1 postfix/smtpd[30412]: 29BD637099: reject: RCPT from rcpt-expgw.biglobe.ne.jp[202.225.89.184]: 450 <antivirus-daemon@gzu.edu.cn>;: User unknown in local recipient table; from=<info@bcs.biglobe.ne.jp>; to=<antivirus-daemon@gzu.edu.cn>; proto=ESMTP helo=<rcpt-expgw.biglobe.ne.jp>;
Sep 10 23:24:51 mail1 postfix/smtpd[30486]: connect from unknown[61.188.178.93]
Sep 10 23:24:53 mail1 postfix/smtpd[30412]: disconnect from rcpt-expgw.biglobe.ne.jp[202.225.89.184]
Sep 10 23:24:53 mail1 postfix/smtpd[30486]: 7DB0237099: client=unknown[61.188.178.93]
Sep 10 23:24:54 mail1 postfix/smtpd[30486]: 7DB0237099: reject: RCPT from unknown[61.188.178.93]: 450 <stan@gzu.edu.cn>;: User unknown in local recipient table; from=<>; to=<stan@gzu.edu.cn>; proto=SMTP helo=<seasky.cn>;
Sep 10 23:24:56 mail1 postfix/smtpd[30486]: disconnect from unknown[61.188.178.93]
Sep 10 23:25:03 mail1 postfix/smtpd[30418]: timeout after RSET from unknown[202.38.193.34]
Sep 10 23:25:03 mail1 postfix/smtpd[30418]: disconnect from unknown[202.38.193.34]
Sep 10 23:25:04 mail1 postfix/smtpd[30412]: connect from unknown[202.108.255.198]
Sep 10 23:25:05 mail1 postfix/smtpd[30412]: 4E32A37099: client=unknown[202.108.255.198]
Sep 10 23:25:05 mail1 postfix/smtpd[30412]: 4E32A37099: reject: RCPT from unknown[202.108.255.198]: 450 <xdjyzx@gzu.edu.cn>;: User unknown in local recipient table; from=<>; to=<xdjyzx@gzu.edu.cn>; proto=SMTP helo=<'tom.com'>;
Sep 10 23:25:07 mail1 postfix/smtpd[30412]: disconnect from unknown[202.108.255.198]
Sep 10 23:25:10 mail1 postfix/smtpd[30486]: connect from fep09.swip.net[130.244.199.137]
Sep 10 23:25:12 mail1 postfix/smtpd[30486]: D5E5437099: client=fep09.swip.net[130.244.199.137]
Sep 10 23:25:13 mail1 postfix/smtpd[30486]: D5E5437099: reject: RCPT from fep09.swip.net[130.244.199.137]: 450 <xdjyzx@gzu.edu.cn>;: User unknown in local recipient table; from=<>; to=<xdjyzx@gzu.edu.cn>; proto=ESMTP helo=<fep09-svc.swip.net>;
Sep 10 23:25:16 mail1 postfix/smtpd[30418]: connect from unknown[202.98.18.28]
Sep 10 23:25:17 mail1 postfix/smtpd[30418]: 3619537099: client=unknown[202.98.18.28]
Sep 10 23:25:17 mail1 postfix/smtpd[30418]: 3619537099: reject: RCPT from unknown[202.98.18.28]: 450 <alice@gzu.edu.cn>;: User unknown in local recipient table; from=<>; to=<alice@gzu.edu.cn>; proto=ESMTP helo=<mail1.jlu.edu.cn>;
Sep 10 23:25:17 mail1 postfix/smtpd[30486]: 43C513710D: client=fep09.swip.net[130.244.199.137]
Sep 10 23:25:17 mail1 postfix/smtpd[30486]: 43C513710D: reject: RCPT from fep09.swip.net[130.244.199.137]: 450 <jerry@gzu.edu.cn>;: User unknown in local recipient table; from=<>; to=<jerry@gzu.edu.cn>; proto=ESMTP helo=<fep09-svc.swip.net>;
Sep 10 23:25:20 mail1 postfix/smtpd[30418]: disconnect from unknown[202.98.18.28]
Sep 10 23:25:20 mail1 postfix/smtpd[30486]: A4EEA37099: client=fep09.swip.net[130.244.199.137]
Sep 10 23:25:21 mail1 postfix/smtpd[30486]: A4EEA37099: reject: RCPT from fep09.swip.net[130.244.199.137]: 450 <julie@gzu.edu.cn>;: User unknown in local recipient table; from=<>; to=<julie@gzu.edu.cn>; proto=ESMTP helo=<fep09-svc.swip.net>;
Sep 10 23:25:23 mail1 postfix/smtpd[30486]: D408A37099: client=fep09.swip.net[130.244.199.137]
Sep 10 23:25:24 mail1 postfix/smtpd[30486]: D408A37099: reject: RCPT from fep09.swip.net[130.244.199.137]: 450 <jack@gzu.edu.cn>;: User unknown in local recipient table; from=<>; to=<jack@gzu.edu.cn>; proto=ESMTP helo=<fep09-svc.swip.net>;
Sep 10 23:25:24 mail1 postfix/smtpd[30412]: connect from unknown[202.108.255.197]
Sep 10 23:25:25 mail1 postfix/smtpd[30412]: 527BC3710D: client=unknown[202.108.255.197]
Sep 10 23:25:25 mail1 postfix/smtpd[30412]: 527BC3710D: reject: RCPT from unknown[202.108.255.197]: 450 <jack@gzu.edu.cn>;: User unknown in local recipient table; from=<>; to=<jack@gzu.edu.cn>; proto=SMTP helo=<'tom.com'>;
Sep 10 23:25:27 mail1 postfix/smtpd[30412]: disconnect from unknown[202.108.255.197]
Sep 10 23:25:27 mail1 postfix/smtpd[30486]: 1D3D837099: client=fep09.swip.net[130.244.199.137]
Sep 10 23:25:27 mail1 postfix/smtpd[30486]: 1D3D837099: reject: RCPT from fep09.swip.net[130.244.199.137]: 450 <alex@gzu.edu.cn>;: User unknown in local recipient table; from=<>; to=<alex@gzu.edu.cn>; proto=ESMTP helo=<fep09-svc.swip.net>;
Sep 10 23:25:28 mail1 postfix/smtpd[30418]: connect from unknown[202.98.18.28]
Sep 10 23:25:28 mail1 postfix/smtpd[30418]: 652DB3710D: client=unknown[202.98.18.28]
Sep 10 23:25:28 mail1 postfix/smtpd[30418]: 652DB3710D: reject: RCPT from unknown[202.98.18.28]: 450 <john@gzu.edu.cn>;: User unknown in local recipient table; from=<>; to=<john@gzu.edu.cn>; proto=ESMTP helo=<mail1.jlu.edu.cn>;
Sep 10 23:25:30 mail1 postfix/smtpd[30412]: connect from fep06.swip.net[130.244.199.134]
Sep 10 23:25:30 mail1 postfix/smtpd[30486]: disconnect from fep09.swip.net[130.244.199.137]
Sep 10 23:25:30 mail1 postfix/smtpd[30418]: disconnect from unknown[202.98.18.28]
Sep 10 23:25:31 mail1 postfix/smtpd[30412]: 7407837099: client=fep06.swip.net[130.244.199.134]
Sep 10 23:25:31 mail1 postfix/smtpd[30412]: 7407837099: reject: RCPT from fep06.swip.net[130.244.199.134]: 450 <jack@gzu.edu.cn>;: User unknown in local recipient table; from=<>; to=<jack@gzu.edu.cn>; proto=ESMTP helo=<fep06-svc.swip.net>;
Sep 10 23:25:34 mail1 postfix/smtpd[30412]: C575737099: client=fep06.swip.net[130.244.199.134]
Sep 10 23:25:35 mail1 postfix/smtpd[30412]: C575737099: reject: RCPT from fep06.swip.net[130.244.199.134]: 450 <alex@gzu.edu.cn>;: User unknown in local recipient table; from=<>; to=<alex@gzu.edu.cn>; proto=ESMTP helo=<fep06-svc.swip.net>;
Sep 10 23:25:38 mail1 postfix/smtpd[30412]: 2E55137099: client=fep06.swip.net[130.244.199.134]
Sep 10 23:25:38 mail1 postfix/smtpd[30057]: timeout after RSET from tx0.becha.pu.ru[194.58.104.214]
Sep 10 23:25:38 mail1 postfix/smtpd[30057]: disconnect from tx0.becha.pu.ru[194.58.104.214]
Sep 10 23:25:38 mail1 postfix/smtpd[30412]: 2E55137099: reject: RCPT from fep06.swip.net[130.244.199.134]: 450 <xdjyzx@gzu.edu.cn>;: User unknown in local recipient table; from=<>; to=<xdjyzx@gzu.edu.cn>; proto=ESMTP helo=<fep06-svc.swip.net>;
Sep 10 23:25:41 mail1 postfix/smtpd[30412]: 9215E37099: client=fep06.swip.net[130.244.199.134]
Sep 10 23:25:42 mail1 postfix/smtpd[30412]: 9215E37099: reject: RCPT from fep06.swip.net[130.244.199.134]: 450 <jerry@gzu.edu.cn>;: User unknown in local recipient table; from=<>; to=<jerry@gzu.edu.cn>; proto=ESMTP helo=<fep06-svc.swip.net>;
Sep 10 23:25:45 mail1 postfix/smtpd[30412]: 5EBD137099: client=fep06.swip.net[130.244.199.134]
Sep 10 23:25:45 mail1 postfix/smtpd[30412]: 5EBD137099: reject: RCPT from fep06.swip.net[130.244.199.134]: 450 <julie@gzu.edu.cn>;: User unknown in local recipient table; from=<>; to=<julie@gzu.edu.cn>; proto=ESMTP helo=<fep06-svc.swip.net>;
Sep 10 23:25:48 mail1 postfix/smtpd[30412]: disconnect from fep06.swip.net[130.244.199.134
我的系统mta用的是postfix.
这个有什么好的办法防止这种连接吗？
不然速度和磁盘空间受到很大影响，请赐教。