主页 / server / 问题 / 455145
Accepted
Chase Florell
Asked: 2012-12-05 19:17:15 +0800 CST

ASSP Extreme Ban 引起的极度头痛

  • 772

我的服务器上有一个本地用户，到今天为止无法从他们的任何设备发送电子邮件。只有 Webmail（不接触他们的任何设备）有效。

以下是我在日志中收到的各种电子邮件失败。

Dec-04-12 19:52:47 75966-05166 [SpoofedSender] 111.111.111.111 <[email protected]> to: [email protected] [scoring:20] -- No Spoofing Allowed -- [Test];
Dec-04-12 19:52:47 75966-05166 [Extreme] 111.111.111.111 <[email protected]> to: [email protected] [spam found] -- score for 111.111.111.111 is 1980, surpassing extreme level of 500 -- [Test] -> spam/Test__1.eml;
Dec-04-12 19:52:48 75968-05169 111.111.111.111 <[email protected]> to: [email protected] [scoring:10] -- IP in HELO does not match connection: '[192.168.0.10]' -- [Re Demo Feedbacks for End of November Sales];
Dec-04-12 19:52:48 75968-05169 [SpoofedSender] 111.111.111.111 <[email protected]> to: [email protected] [scoring:20] -- No Spoofing Allowed -- [Re Demo Feedbacks for End of November Sales];
Dec-04-12 19:52:48 75968-05169 [Extreme] 111.111.111.111 <[email protected]> to: [email protected] [spam found] -- score for 111.111.111.111 is 2020, surpassing extreme level of 500 -- [Re Demo Feedbacks for End of November Sales] ->spam/Re_Demo_Feedbacks_for_End_of_N__2.eml;
Dec-04-12 19:52:57 75977-05179 [SpoofedSender] 111.111.111.111 <[email protected]> to: [email protected] [scoring:20] -- No Spoofing Allowed -- [test];
Dec-04-12 19:52:57 75977-05179 [Extreme] 111.111.111.111 <[email protected]> to: [email protected] [spam found] -- score for 111.111.111.111 is 2040, surpassing extreme level of 500 -- [test] -> spam/test__3.eml;

…………….

Dec-04-12 19:55:35 76135-05338 [SpoofedSender] 111.111.111.111 <[email protected]> to: [email protected] [scoring:20] -- No Spoofing Allowed -- [test];
Dec-04-12 19:55:35 76135-05338 [MsgID] 111.111.111.111 <[email protected]> to: [email protected] [scoring] (Message-ID not valid: 'E8472A91545B44FBAE413F6D8760C7C3@bts');
Dec-04-12 19:55:35 76135-05338 [InvalidHELO] 111.111.111.111 <[email protected]> to: [email protected] [spam found] -- Invalid HELO: 'bts' -- [test] -> discarded/test__4.eml;

注意：111.111.111.111 是用户家庭 IP 地址的替代

这是其中一条消息的标题

X-Assp-Score: 10 (HELO contains IP: '[192.168.0.10]')
X-Assp-Score: 10 (IP in HELO does not match connection: '[192.168.0.10]')
X-Assp-Score: 20 (No Spoofing Allowed)
X-Assp-Score: 10 (bombSubjectRe: 'sale')
X-Assp-Score: 20 (blacklisted HELO '[192.168.0.10]')
X-Assp-Score: 45 (DNSBLcache: failed, 111.111.111.111 listed in safe.dnsbl.sorbs.net)
X-Assp-DNSBLcache: failed, 174.0.35.31 listed in safe.dnsbl.sorbs.net
X-Assp-Received-SPF: fail (cache) ip=174.0.35.31 [email protected]
    helo=[192.168.0.10]
X-Assp-Score: 10 (SPF fail)
X-Assp-Envelope-From: [email protected]
X-Assp-Intended-For: [email protected]
X-Assp-Version: 1.7.5.7(1.0.07) on ASSP.nospam
X-Assp-ID: ASSP.nospam (77953-07232)
X-Assp-Spam: YES
X-Assp-Original-Subject: Re: Demo Feedbacks for End of November Sales
X-Spam-Status:yes
X-Assp-Spam-Reason: MessageScore (125) over limit (50)
X-Assp-Message-Totalscore: 125
Received: from [192.168.0.10] ([111.111.111.111] helo=[192.168.0.10]) with
    IPv4:25 by ASSP.nospam; 4 Dec 2012 20:25:52 -0700
Content-Type: multipart/alternative; boundary=Apple-Mail-40FE7453-4BE7-4AD6-B297-FB81DAA554EC
Content-Transfer-Encoding: 7bit
Subject: Re: Demo Feedbacks for End of November Sales
References: <003c01cdd22e$eafbc6f0$c0f354d0$@com>
From: Some User <[email protected]>
In-Reply-To: <003c01cdd22e$eafbc6f0$c0f354d0$@com>
Message-Id: <[email protected]>
Date: Tue, 4 Dec 2012 19:32:28 -0700
To: External User <[email protected]>
Mime-Version: 1.0 (1.0)
X-Mailer: iPhone Mail (10A523)

为什么本地发件人在我们的本地服务器上被禁止，我该如何解决？

smtp

1 个回答

  1. Best Answer

    是我一个人，还是标题没有告诉您这个用户的邮件被拒绝的确切原因？

    X-Assp-Spam-Reason：MessageScore (125) 超过限制 (50)

    他的邮件作为垃圾邮件得分太高。具体原因也在标题中进一步列出......

    X-Assp-Score: 10 (HELO contains IP: '[192.168.0.10]')
X-Assp-Score: 10 (IP in HELO does not match connection: '[192.168.0.10]')
X-Assp-Score: 20 (No Spoofing Allowed)
X-Assp-Score: 10 (bombSubjectRe: 'sale')
X-Assp-Score: 20 (blacklisted HELO '[192.168.0.10]')
X-Assp-Score: 45 (DNSBLcache: failed, 111.111.111.111 listed in safe.dnsbl.sorbs.net)
X-Assp-DNSBLcache: failed, 174.0.35.31 listed in safe.dnsbl.sorbs.net
X-Assp-Received-SPF: fail (cache) ip=174.0.35.31 [email protected]
    helo=[192.168.0.10]
X-Assp-Score: 10 (SPF fail)

    +10 包含 IP 的 HELO，+10 与连接 IP 不匹配的 IP，+20 没有欺骗，+10sale主题中的单词，+20 黑名单 HELO（再次使用该 IP），+45对于在黑名单上的 IP (safe.dnsbl.sorbs.net) 和 +10 对于 SPF 失败。总计 125，这大于 50 的垃圾邮件阈值。

    对我来说似乎很清楚。我错过了什么？

    编辑：

    针对您的评论，

    我看到两个问题，第一个是你的外部 IP 在SORBS-DUHL黑名单上，虽然它给了我一个奇怪的返回码，而且似乎是你在的唯一黑名单......所以我会礼貌地联系他们问到底是怎么回事。那是那里 125 个垃圾邮件分数中的 45 个。

    第二个问题似乎是您的 ASSP 配置为将来自私有 IP (192.168.0.10) 的任何内容都标记为垃圾邮件，并且当发生这种情况时您的用户在家（根据您的评论），他可能支持某些 SOHO为其 PC 分配私有 IP (192.168.0.10) 的路由器或交换机。这至少是 125 垃圾邮件分数中的 40，可能是 60 或 70 - 我不能确定为什么会发生 SPF 失败和欺骗失败，但我怀疑它们都与该用户正在尝试的事实有关从您的域发送邮件，但使用对来自您公司网络的邮件无效的 IP 地址。

    无论哪种方式，我能看到的唯一解决方案是整理用户的家庭网络，以便他的 PC 在他的外部 ISP 提供的 IP 地址上看到自己，或者更改垃圾邮件过滤器的规则以适应该用户。我推荐不需要支持某些用户的家庭网络的选项。或者，想想它告诉用户他的家庭设置与您的邮件设置不兼容，他将不得不处理它，自己修复它，或者使用网络邮件。实际上，这就是我要做的，因为它工作量较小，而且我通常不想为一个用户更改整个垃圾邮件过滤方案。

    因此，通常得分为 10 分（包含sale在主题中）的邮件由于任一问题而得分超过了阈值。因此，看起来您必须同时解决我们在这里看到的黑名单和 IP 问题，才能使邮件从本地发件人可靠地传输。

    • 1

相关问题