- 论坛徽章:
- 0
|
非常感谢大麻兄的帮助,可我看了半天好像只是空行多了点外,没发现有什么不一样的?没想到会这么严格啊。再次感谢大麻兄!
另外日志中有部分说 Failed 或Can't locate object method的,不知有什么问题没有,现在可以防垃圾了。
下面是从163给test发的一封垃圾广告的完整日志
- /var/log/maillog
- Apr 25 10:24:27 mail imapd: Connection, ip=[::ffff:127.0.0.1]
- Apr 25 10:24:27 mail imapd: LOGIN, user=test, ip=[::ffff:127.0.0.1], protocol=IMAP
- Apr 25 10:24:27 mail imapd: LOGOUT, user=test, ip=[::ffff:127.0.0.1], headers=0, body=0, time=0
- Apr 25 10:24:48 mail imapd: Connection, ip=[::ffff:127.0.0.1]
- Apr 25 10:24:48 mail imapd: LOGIN, user=test, ip=[::ffff:127.0.0.1], protocol=IMAP
- Apr 25 10:24:49 mail imapd: LOGOUT, user=test, ip=[::ffff:127.0.0.1], headers=4114, body=0, time=1
- Apr 25 10:24:50 mail spamd[3048]: connection from localhost.localdomain [127.0.0.1] at port 33594
- Apr 25 10:24:50 mail spamd[3048]: checking message <9293949.3530181177467902600.JavaMail.root@bj163app81.163.com> for qscand:1047.
- Apr 25 10:24:50 mail spamd[3048]: Failed to run __ENV_AND_HDR_FROM_MATCH SpamAssassin test, skipping:__(Can't locate object method "check_for_matching_env_and_hdr_from" via package "Mail::SpamAssassin::PerMsgStatus" at /usr/lib/perl5/vendor_perl/5.8.0/Mail/SpamAssassin/PerMsgStatus.pm line 2312, <GEN10> line 57._)
- Apr 25 10:24:50 mail spamd[3048]: Failed to run USER_IN_DEF_SPF_WL SpamAssassin test, skipping:__(Can't locate object method "check_for_def_spf_whitelist_from" via package "Mail::SpamAssassin::PerMsgStatus" at /usr/lib/perl5/vendor_perl/5.8.0/Mail/SpamAssassin/PerMsgStatus.pm line 2312, <GEN10> line 57._)
- Apr 25 10:24:50 mail spamd[3048]: Failed to run USER_IN_SPF_WHITELIST SpamAssassin test, skipping:__(Can't locate object method "check_for_spf_whitelist_from" via package "Mail::SpamAssassin::PerMsgStatus" at /usr/lib/perl5/vendor_perl/5.8.0/Mail/SpamAssassin/PerMsgStatus.pm line 2312, <GEN10> line 57._)
- Apr 25 10:24:50 mail imapd: Connection, ip=[::ffff:127.0.0.1]
- Apr 25 10:24:50 mail imapd: LOGIN, user=test, ip=[::ffff:127.0.0.1], protocol=IMAP
- Apr 25 10:24:51 mail imapd: LOGOUT, user=test, ip=[::ffff:127.0.0.1], headers=618, body=0, time=1
- Apr 25 10:24:53 mail spamd[3048]: identified spam (9.2/5.0) for qscand:1047 in 2.5 seconds, 2651 bytes.
- Apr 25 10:24:53 mail spamd[3048]: result: Y 9 - AWL,CHARSET_FARAWAY_HEADER,CN_BODY_3,CN_BODY_8,CN_SUBJECT_1,CN_SUBJECT_5,CN_SUBJECT_6,HTML_60_70,HTML_MESSAGE,MIME_BASE64_TEXT,MIME_CHARSET_FARAWAY,MPART_ALT_DIFF scantime=2.5,size=2651,mid=<9293949.3530181177467902600.JavaMail.root@bj163app81.163.com>,autolearn=no
- Apr 25 10:24:53 mail qmail-scanner[3323]: Clear:RC:0(220.181.13.81):SA:1(9.2/5.0): 7.944176 2651 songxiatong@163.com test@******.com =?gbk?B?08W73SC6z9f3ILeixrE=?= <9293949.3530181177467902600.JavaMail.root@bj163app81.163.com> 1177467885.3325-1.mail.******.com:699 1177467885.3325-0.mail.******.com:169 orig-mail.******.com11774678857753323:2651
- Apr 25 10:24:53 mail spamd[3049]: connection from localhost.localdomain [127.0.0.1] at port 33597
- Apr 25 10:24:53 mail spamd[3049]: processing message <9293949.3530181177467902600.JavaMail.root@bj163app81.163.com> for test@******.com:1047.
- Apr 25 10:24:53 mail spamd[3049]: Failed to run __ENV_AND_HDR_FROM_MATCH SpamAssassin test, skipping:__(Can't locate object method "check_for_matching_env_and_hdr_from" via package "Mail::SpamAssassin::PerMsgStatus" at /usr/lib/perl5/vendor_perl/5.8.0/Mail/SpamAssassin/PerMsgStatus.pm line 2312, <GEN10> line 68._)
- Apr 25 10:24:53 mail spamd[3049]: Failed to run USER_IN_DEF_SPF_WL SpamAssassin test, skipping:__(Can't locate object method "check_for_def_spf_whitelist_from" via package "Mail::SpamAssassin::PerMsgStatus" at /usr/lib/perl5/vendor_perl/5.8.0/Mail/SpamAssassin/PerMsgStatus.pm line 2312, <GEN10> line 68._)
- Apr 25 10:24:53 mail spamd[3049]: Failed to run USER_IN_SPF_WHITELIST SpamAssassin test, skipping:__(Can't locate object method "check_for_spf_whitelist_from" via package "Mail::SpamAssassin::PerMsgStatus" at /usr/lib/perl5/vendor_perl/5.8.0/Mail/SpamAssassin/PerMsgStatus.pm line 2312, <GEN10> line 68._)
- Apr 25 10:24:55 mail spamd[3049]: identified spam (9.2/5.0) for test@******.com:1047 in 2.5 seconds, 3325 bytes.
- Apr 25 10:24:55 mail spamd[3049]: result: Y 9 - AWL,CHARSET_FARAWAY_HEADER,CN_BODY_3,CN_BODY_8,CN_SUBJECT_1,CN_SUBJECT_5,CN_SUBJECT_6,HTML_60_70,HTML_MESSAGE,MIME_BASE64_TEXT,MIME_CHARSET_FARAWAY,MPART_ALT_DIFF scantime=2.5,size=3325,mid=<9293949.3530181177467902600.JavaMail.root@bj163app81.163.com>,autolearn=no
- Apr 25 10:25:00 mail imapd: Connection, ip=[::ffff:127.0.0.1]
- Apr 25 10:25:00 mail imapd: LOGIN, user=test, ip=[::ffff:127.0.0.1], protocol=IMAP
- Apr 25 10:25:00 mail imapd: LOGOUT, user=test, ip=[::ffff:127.0.0.1], headers=0, body=0, time=0
- Apr 25 10:25:00 mail imapd: Connection, ip=[::ffff:127.0.0.1]
- Apr 25 10:25:00 mail imapd: LOGIN, user=test, ip=[::ffff:127.0.0.1], protocol=IMAP
- Apr 25 10:25:00 mail imapd: LOGOUT, user=test, ip=[::ffff:127.0.0.1], headers=0, body=0, time=0
- Apr 25 10:25:00 mail imapd: Connection, ip=[::ffff:127.0.0.1]
- Apr 25 10:25:00 mail imapd: LOGIN, user=test, ip=[::ffff:127.0.0.1], protocol=IMAP
- Apr 25 10:25:01 mail imapd: LOGOUT, user=test, ip=[::ffff:127.0.0.1], headers=3941, body=0, time=1
- Apr 25 10:25:02 mail imapd: Connection, ip=[::ffff:127.0.0.1]
- Apr 25 10:25:02 mail imapd: LOGIN, user=test, ip=[::ffff:127.0.0.1], protocol=IMAP
- Apr 25 10:25:03 mail imapd: LOGOUT, user=test, ip=[::ffff:127.0.0.1], headers=1299, body=0, time=1
- Apr 25 10:25:08 mail imapd: Connection, ip=[::ffff:127.0.0.1]
- Apr 25 10:25:08 mail imapd: LOGIN, user=test, ip=[::ffff:127.0.0.1], protocol=IMAP
- Apr 25 10:25:08 mail imapd: LOGOUT, user=test, ip=[::ffff:127.0.0.1], headers=0, body=2753, time=0
- Apr 25 10:25:28 mail imapd: Connection, ip=[::ffff:127.0.0.1]
- Apr 25 10:25:28 mail imapd: LOGIN, user=test, ip=[::ffff:127.0.0.1], protocol=IMAP
- Apr 25 10:25:29 mail imapd: LOGOUT, user=test, ip=[::ffff:127.0.0.1], headers=0, body=843, time=1
复制代码
相应的/var/log/qmail/smtpd/current日志,这个看上去倒没事。
- tai64nlocal </var/log/qmail/smtpd/current
- 2007-04-25 10:24:53.292548500 new msg 8245108
- 2007-04-25 10:24:53.292554500 info msg 8245108: bytes 3251 from <test163@163.com> qp 3333 uid 1049
- 2007-04-25 10:24:53.389692500 starting delivery 9: msg 8245108 to local ********.com-test@********.com
- 2007-04-25 10:24:53.389702500 status: local 1/10 remote 0/20
- 2007-04-25 10:24:55.995805500 delivery 9: success: did_0+0+1/
- 2007-04-25 10:24:55.995906500 status: local 0/10 remote 0/20
- 2007-04-25 10:24:55.995965500 end msg 8245108
复制代码 |
|