询问者
exchange 2007 集线器传输-发垃圾邮件-发件人筛选中没有"阻止发件人为空的邮件"的复选选项

问题
全部回复
-
您好!
我建议你通过outlook查看这些邮件头确定这些邮件是从哪个ip地址发出来的,然后添加这些Ip到Ip block list看看结果如何。
这里有些文章供你参考。
View the Internet header information for an email message
如何向 IP 允许列表和 IP 阻止列表添加 IP 地址
http://technet.microsoft.com/zh-cn/library/bb123801(v=exchg.80).aspx
微软一站式示例脚本库: http://blogs.technet.com/b/onescript
-
您好!<o:p></o:p>
1. 如果你收到了这些邮件,请按照我上面给你的链接在outlook上查看邮件头。<o:p></o:p>
2.如果你没有收到这些邮件,请查看smtp协议日志确定这些邮件是从哪个Ip地址发出来的,在使用smtp协议日志之前,请enable它。<o:p></o:p>
微软一站式示例脚本库: http://blogs.technet.com/b/onescript
-
昨天开启smtp协议日志,今天在D:\new exchange\TransportRoles\Logs\ProtocolLog\SmtpReceive\RECV20131014-1.LOG
里面我找了一断:
2013-10-14T13:45:02.751Z,TOKAI01\Default TOKAI01,08D07E7A22D334D2,3,192.168.5.10:25,1.193.25.59:2052,<,EHLO mhy.org,
2013-10-14T13:45:02.751Z,TOKAI01\Default TOKAI01,08D07E7A22D334D2,4,192.168.5.10:25,1.193.25.59:2052,>,250-*tk.com Hello [1.193.25.59],
2013-10-14T13:45:02.751Z,TOKAI01\Default TOKAI01,08D07E7A22D334D2,5,192.168.5.10:25,1.193.25.59:2052,>,250-SIZE,
2013-10-14T13:45:02.751Z,TOKAI01\Default TOKAI01,08D07E7A22D334D2,6,192.168.5.10:25,1.193.25.59:2052,>,250-PIPELINING,
2013-10-14T13:45:02.751Z,TOKAI01\Default TOKAI01,08D07E7A22D334D2,7,192.168.5.10:25,1.193.25.59:2052,>,250-DSN,
2013-10-14T13:45:02.751Z,TOKAI01\Default TOKAI01,08D07E7A22D334D2,8,192.168.5.10:25,1.193.25.59:2052,>,250-ENHANCEDSTATUSCODES,
2013-10-14T13:45:02.751Z,TOKAI01\Default TOKAI01,08D07E7A22D334D2,9,192.168.5.10:25,1.193.25.59:2052,>,250-STARTTLS,
2013-10-14T13:45:02.751Z,TOKAI01\Default TOKAI01,08D07E7A22D334D2,10,192.168.5.10:25,1.193.25.59:2052,>,250-X-ANONYMOUSTLS,
2013-10-14T13:45:02.751Z,TOKAI01\Default TOKAI01,08D07E7A22D334D2,11,192.168.5.10:25,1.193.25.59:2052,>,250-AUTH NTLM,
2013-10-14T13:45:02.751Z,TOKAI01\Default TOKAI01,08D07E7A22D334D2,12,192.168.5.10:25,1.193.25.59:2052,>,250-X-EXPS GSSAPI NTLM,
2013-10-14T13:45:02.751Z,TOKAI01\Default TOKAI01,08D07E7A22D334D2,13,192.168.5.10:25,1.193.25.59:2052,>,250-8BITMIME,
2013-10-14T13:45:02.751Z,TOKAI01\Default TOKAI01,08D07E7A22D334D2,14,192.168.5.10:25,1.193.25.59:2052,>,250-BINARYMIME,
2013-10-14T13:45:02.751Z,TOKAI01\Default TOKAI01,08D07E7A22D334D2,15,192.168.5.10:25,1.193.25.59:2052,>,250-CHUNKING,
2013-10-14T13:45:02.751Z,TOKAI01\Default TOKAI01,08D07E7A22D334D2,16,192.168.5.10:25,1.193.25.59:2052,>,250-XEXCH50,
2013-10-14T13:45:02.751Z,TOKAI01\Default TOKAI01,08D07E7A22D334D2,17,192.168.5.10:25,1.193.25.59:2052,>,250 XRDST,
2013-10-14T13:45:02.875Z,TOKAI01\Default TOKAI01,08D07E7A22D334D2,18,192.168.5.10:25,1.193.25.59:2052,<,MAIL FROM: <sumdru@mhy.org>,
2013-10-14T13:45:02.875Z,TOKAI01\Default TOKAI01,08D07E7A22D334D2,19,192.168.5.10:25,1.193.25.59:2052,*,08D07E7A22D334D2;2013-10-14T13:45:02.626Z;1,receiving message
2013-10-14T13:45:02.875Z,TOKAI01\Default TOKAI01,08D07E7A22D334D2,20,192.168.5.10:25,1.193.25.59:2052,>,250 2.1.0 Sender OK,
2013-10-14T13:45:03.000Z,TOKAI01\Default TOKAI01,08D07E7A22D334D2,21,192.168.5.10:25,1.193.25.59:2052,<,RCPT TO: info@*tk.com,
2013-10-14T13:45:03.000Z,TOKAI01\Default TOKAI01,08D07E7A22D334D2,22,192.168.5.10:25,1.193.25.59:2052,>,250 2.1.5 Recipient OK,
2013-10-14T13:45:03.109Z,TOKAI01\Default TOKAI01,08D07E7A22D334D2,23,192.168.5.10:25,1.193.25.59:2052,<,DATA,
2013-10-14T13:45:03.109Z,TOKAI01\Default TOKAI01,08D07E7A22D334D2,24,192.168.5.10:25,1.193.25.59:2052,>,354 Start mail input; end with <CRLF>.<CRLF>,
2013-10-14T13:45:04.888Z,TOKAI01\Default TOKAI01,08D07E7A22D334D2,25,192.168.5.10:25,1.193.25.59:2052,>,250 2.6.0 <05A0C3273568DA978BF0E3D45E53FCE0@mhy.org> Queued mail for delivery,
2013-10-14T13:45:04.997Z,TOKAI01\Default TOKAI01,08D07E7A22D334D2,26,192.168.5.10:25,1.193.25.59:2052,<,QUIT,
2013-10-14T13:45:04.997Z,TOKAI01\Default TOKAI01,08D07E7A22D334D2,27,192.168.5.10:25,1.193.25.59:2052,>,221 2.0.0 Service closing transmission channel,
2013-10-14T13:45:04.997Z,TOKAI01\Default TOKAI01,08D07E7A22D334D2,28,192.168.5.10:25,1.193.25.59:2052,-,,Local -
这一款是垃圾邮件,我公司里没有这个叫info@*tk.com的用户,你帮我看下,是不是这么看,我现在把1.193.25.0-1.193.25.255全封了.
-
您好!
从这段log来看,你的邮件来自sumdru@mhy.org,发送到info@*tk.com 这个用户的。如果你的组织中没有这个收件人,你可以通过配置收件人筛选来增加改收件人到收件人阻止列表中。
配置收件人筛选
http://technet.microsoft.com/zh-cn/library/aa998898(v=exchg.80).aspx
微软一站式示例脚本库: http://blogs.technet.com/b/onescript
-
您好!
1. 你之前的配置有没有起作用。
2.我建议你按照以下文章中”写入协议日志“主题查看smtp log中这些字段。
http://technet.microsoft.com/zh-cn/library/aa997624(v=exchg.141).aspx
微软一站式示例脚本库: http://blogs.technet.com/b/onescript