关于kerio外部收发的问题，急

bearcanfly

服务器放置在网通机房，使用的是fc5的系统(linux)，公司收发邮件正常。但是有同事反应出差的时候和在家里收发邮件就失败了,我一直都找不到失败的原因，所以没有办法解决这个问题。有类似经验的朋友共享一下解决方法吧，谢谢阿

PS：我个人怀疑是由于动态IP造成的。因为我看到失败的IP基本上都是一些动态IP，而我让同学尝试了一下，都是正常的(他们公司的是固定IP)，但是我不明白为什么会这样子。

tdk

把日志贴出来
失败是怎么失败？什么失败？
什么方式登陆？   登陆失败？
发送失败？ pop3客户端发送接收失败？ web上发送失败？

太难猜了

bearcanfly

[14/Jun/2007 10:19:06] Relay attempt from IP address 58.246.175.134, mail from <albert_gu@nxnets.com> to <vincenchen@pei-tech.com.cn> rejected

就这样子。然后如果我把这个发件的IP加到 Allow relay only for 的users from ip address group 的ip组里面，那么就可以发送了。但是我不可能罗列出所有的外部Ip吧，哪天出差的时候不就又不能用了吗？

我不知道自己的配置是不是出了问题，以前是正常的。

tdk

应该就是你的安全策略 限制了
你是不是在放垃圾邮件设置了白名单ip组什么的

你去看看config日志，近期有什么变化

bearcanfly

是啊。我设置了白名单....这个白名单应该是默认最高权限的吧，黑名单应该是直接block的，剩下的才会按照我订制的一些规则去判断。我这么理解没有错误吧

tdk

估计就是这个设置的有问题，是不是取消黑白名单就没问题了？
黑名单怎么设置的 白名单怎么设置的

bearcanfly

取消黑名单和白名单....这个.....危险系数太高了。我贴出来看看
.....好像不能贴图啊

tdk

有rbl过滤 有贝也斯 有spf过滤
基本可靠
自定义其他黑白名单 可以一点点尝试 没有问题就可以用

[ 本帖最后由 tdk 于 2007-6-19 12:09 编辑 ]

my1872

求助：发邮件被退信，请大家帮帮忙（在线等）

发hotmail、yahoo、sina、gmail都被退信，但是收得到，其它的邮箱没有这个问题。。
This is an informative message sent by eaglekin-eb3ff8.
The server was not able to deliver your email message to the following addresses:

  <soile@msn.cn> (70731977.pamx1.hotmail.com: 550 DY-001 Mail rejected by Windows Live Hotmail for policy reasons. We generally do not accept email from dynamic IP's as they are not typically used to deliver unauthenticated SMTP e-mail to an Internet mail server. http://www.spamhaus.org maintains lists of dynamic and residential IP addresses. If you are not an email/network admin please contact your E-mail/Internet Service Provider for help. Email/network admins, please visit http://postmaster.live.com for email delivery information and support)
  <songshihong2000@sina.com> (freemx2.sinamail.sina.com.cn: 550 #5.7.1 Your access to submit messages to this e-mail system has been rejected.)
  <songshihong2000@yahoo.com.cn> (mta-v1.mail.vip.cnb.yahoo.com: 553 Mail from 222.240.208.* not allowed - [10])
Reporting-MTA: dns; eaglekin-eb3ff8
Arrival-Date: Fri, 8 Aug 2008 09:42:01 +0800

Final-Recipient: rfc822;soile@msn.cn
Action: failed
Status: 5.1.8
Remote-MTA: 70731977.pamx1.hotmail.com
Diagnostic-Code: SMTP; 550 DY-001 Mail rejected by Windows Live Hotmail for policy reasons. We generally do not accept email from dynamic IP's as they are not typically used to deliver unauthenticated SMTP e-mail to an Internet mail server. http://www.spamhaus.org maintains lists of dynamic and residential IP addresses. If you are not an email/network admin please contact your E-mail/Internet Service Provider for help. Email/network admins, please visit http://postmaster.live.com for email delivery information and support

Final-Recipient: rfc822;songshihong2000@sina.com
Action: failed
Status: 5.1.1
Remote-MTA: freemx2.sinamail.sina.com.cn
Diagnostic-Code: SMTP; 550 #5.7.1 Your access to submit messages to this e-mail system has been rejected.

Final-Recipient: rfc822;songshihong2000@yahoo.com.cn
Action: failed
Status: 5.4.0
Remote-MTA: mta-v1.mail.vip.cnb.yahoo.com
Diagnostic-Code: SMTP; 553 Mail from 222.240.208.* not allowed - [10]

Received: from WWW-2DF21EBE6B4 ([203.93.210.210])
        (authenticated user 13560730007@1872.net)
        by eaglekin-eb3ff8 (Kerio MailServer 6.1.2);
        Fri, 8 Aug 2008 09:41:58 +0800
Date: Fri, 8 Aug 2008 09:39:26 +0800
From: "13560730007" <13560730007@1872.net>
To: "=?GB2312?B?uci46EdtYWls?=" <songshihong@gmail.com>,
"=?GB2312?B?zfjS1zE2Mw==?=" <songshihong@163.com>,
"=?GB2312?B?zfjS1zEyNg==?=" <songshihong@126.com>,
"soile" <soile@msn.cn>,
"songshihong2000" <songshihong2000@sina.com>
Cc: "=?GB2312?B?zNrRuFFR?=" <hngolf@qq.com>,
"songshihong2000" <songshihong2000@yahoo.com.cn>,
"=?GB2312?B?zNrRuEZveG1haWw=?=" <songshihong@foxmail.com>
Subject: =?gb2312?B?xvPStdPKvtbO3reous3QwsDLw+K30dPKz+TNqNDF?=
Message-ID: <200808080939231714815@1872.net>
X-mailer: Foxmail 6, 10, 201, 20 [cn]
Mime-Version: 1.0
Content-Type: multipart/alternative;
        boundary="=====003_Dragon417182033267_====="

[ 本帖最后由 my1872 于 2008-8-8 14:36 编辑 ]

apples2010

做个tracert 命令

另外telnet IP 25看看能不能连上。另外服务器是网通的线路，想问问你家里上网时网通的吗？