zhang**用户被别人盗用发邮件，以下日志是改成强密码后的日志。

May 23 14:10:46 vm-mail postfix/postscreen[3227]: CONNECT from [121.232.16.58]:50220 to [61.*.*.*]:25
May 23 14:10:46 vm-mail postfix/postscreen[3227]: PREGREET 14 after 0.01 from [121.232.16.58]:50220: EHLO ylmf-pc\r\n
May 23 14:10:46 vm-mail postfix/postscreen[3227]: HANGUP after 0.05 from [121.232.43.53]:50128 in tests after SMTP handshake
May 23 14:10:46 vm-mail postfix/postscreen[3227]: DISCONNECT [121.232.43.53]:50128
May 23 14:10:47 vm-mail postfix/postscreen[3227]: CONNECT from [121.232.18.230]:50282 to [61.*.*.*]:25
May 23 14:10:47 vm-mail postfix/postscreen[3227]: PREGREET 14 after 0.03 from [121.232.18.230]:50282: EHLO ylmf-pc\r\n
May 23 14:10:47 vm-mail postfix/postscreen[3227]: HANGUP after 0.04 from [121.232.16.58]:50220 in tests after SMTP handshake
May 23 14:10:47 vm-mail postfix/postscreen[3227]: DISCONNECT [121.232.16.58]:50220
May 23 14:10:47 vm-mail postfix/postscreen[3227]: CONNECT from [180.125.131.244]:50356 to [61.*.*.*]:25
May 23 14:10:47 vm-mail postfix/postscreen[3227]: PREGREET 14 after 0.01 from [180.125.131.244]:50356: EHLO ylmf-pc\r\n
May 23 14:10:47 vm-mail postfix/postscreen[3227]: HANGUP after 0.05 from [180.125.131.244]:50356 in tests after SMTP handshake
May 23 14:10:47 vm-mail postfix/postscreen[3227]: DISCONNECT [180.125.131.244]:50356
May 23 14:10:47 vm-mail postfix/postscreen[3227]: CONNECT from [49.67.138.250]:50456 to [61.*.*.*]:25
May 23 14:10:47 vm-mail postfix/postscreen[3227]: PREGREET 14 after 0.03 from [49.67.138.250]:50456: EHLO ylmf-pc\r\n
May 23 14:10:47 vm-mail postfix/postscreen[3227]: HANGUP after 0.03 from [121.232.18.230]:50282 in tests after SMTP handshake
May 23 14:10:47 vm-mail postfix/postscreen[3227]: DISCONNECT [121.232.18.230]:50282
May 23 14:10:47 vm-mail postfix/postscreen[3227]: CONNECT from [117.86.116.191]:50523 to [61.*.*.*]:25
May 23 14:10:47 vm-mail postfix/postscreen[3227]: PREGREET 14 after 0.02 from [117.86.116.191]:50523: EHLO ylmf-pc\r\n
May 23 14:10:47 vm-mail postfix/postscreen[3227]: HANGUP after 0.03 from [49.67.138.250]:50456 in tests after SMTP handshake
May 23 14:10:47 vm-mail postfix/postscreen[3227]: DISCONNECT [49.67.138.250]:50456
May 23 14:10:47 vm-mail postfix/postscreen[3227]: CONNECT from [114.232.192.185]:50704 to [61.*.*.*]:25
May 23 14:10:47 vm-mail postfix/postscreen[3227]: PREGREET 14 after 0.02 from [114.232.192.185]:50704: EHLO ylmf-pc\r\n
May 23 14:10:47 vm-mail postfix/postscreen[3227]: HANGUP after 0.07 from [117.86.116.191]:50523 in tests after SMTP handshake
May 23 14:10:47 vm-mail postfix/postscreen[3227]: DISCONNECT [117.86.116.191]:50523
May 23 14:10:47 vm-mail postfix/postscreen[3227]: HANGUP after 0.04 from [114.232.192.185]:50704 in tests after SMTP handshake
May 23 14:10:47 vm-mail postfix/postscreen[3227]: DISCONNECT [114.232.192.185]:50704
May 23 14:10:47 vm-mail postfix/postscreen[3227]: CONNECT from [121.226.62.59]:50808 to [61.*.*.*]:25
May 23 14:10:47 vm-mail postfix/postscreen[3227]: PREGREET 14 after 0.01 from [121.226.62.59]:50808: EHLO ylmf-pc\r\n
May 23 14:10:47 vm-mail postfix/postscreen[3227]: CONNECT from [218.91.224.155]:50836 to [61.*.*.*]:25
May 23 14:10:47 vm-mail postfix/postscreen[3227]: PREGREET 14 after 0.01 from [218.91.224.155]:50836: EHLO ylmf-pc\r\n
May 23 14:10:48 vm-mail postfix/postscreen[3227]: HANGUP after 0.15 from [218.91.224.155]:50836 in tests after SMTP handshake
May 23 14:10:48 vm-mail postfix/postscreen[3227]: DISCONNECT [218.91.224.155]:50836
May 23 14:10:48 vm-mail postfix/postscreen[3227]: CONNECT from [114.232.195.170]:51025 to [61.*.*.*]:25
May 23 14:10:48 vm-mail postfix/postscreen[3227]: HANGUP after 0.13 from [121.226.62.59]:50808 in tests after SMTP handshake
May 23 14:10:48 vm-mail postfix/postscreen[3227]: DISCONNECT [121.226.62.59]:50808
May 23 14:10:48 vm-mail postfix/postscreen[3227]: PREGREET 14 after 0.03 from [114.232.195.170]:51025: EHLO ylmf-pc\r\n
May 23 14:10:48 vm-mail postfix/postscreen[3227]: CONNECT from [121.226.57.38]:51074 to [61.*.*.*]:25
May 23 14:10:48 vm-mail postfix/postscreen[3227]: PREGREET 14 after 0.08 from [121.226.57.38]:51074: EHLO ylmf-pc\r\n
May 23 14:10:48 vm-mail postfix/postscreen[3227]: HANGUP after 0.09 from [121.226.57.38]:51074 in tests after SMTP handshake
May 23 14:10:48 vm-mail postfix/postscreen[3227]: DISCONNECT [121.226.57.38]:51074
May 23 14:10:48 vm-mail postfix/postscreen[3227]: CONNECT from [221.227.164.167]:51132 to [61.*.*.*]:25
May 23 14:10:48 vm-mail postfix/postscreen[3227]: PREGREET 14 after 0.03 from [221.227.164.167]:51132: EHLO ylmf-pc\r\n
May 23 14:10:48 vm-mail postfix/postscreen[3227]: HANGUP after 0.04 from [114.232.195.170]:51025 in tests after SMTP handshake
May 23 14:10:48 vm-mail postfix/postscreen[3227]: DISCONNECT [114.232.195.170]:51025
May 23 14:10:48 vm-mail postfix/postscreen[3227]: CONNECT from [117.86.116.222]:51249 to [61.*.*.*]:25
May 23 14:10:48 vm-mail postfix/postscreen[3227]: PREGREET 14 after 0.03 from [117.86.116.222]:51249: EHLO ylmf-pc\r\n
May 23 14:10:48 vm-mail postfix/postscreen[3227]: HANGUP after 0.06 from [117.86.116.222]:51249 in tests after SMTP handshake
May 23 14:10:48 vm-mail postfix/postscreen[3227]: DISCONNECT [117.86.116.222]:51249
May 23 14:10:48 vm-mail postfix/postscreen[3227]: CONNECT from [121.232.125.154]:51363 to [61.*.*.*]:25
May 23 14:10:48 vm-mail postfix/postscreen[3227]: HANGUP after 0.03 from [221.227.164.167]:51132 in tests after SMTP handshake
May 23 14:10:48 vm-mail postfix/postscreen[3227]: DISCONNECT [221.227.164.167]:51132
May 23 14:10:48 vm-mail postfix/postscreen[3227]: PREGREET 14 after 0.01 from [121.232.125.154]:51363: EHLO ylmf-pc\r\n
May 23 14:10:48 vm-mail postfix/postscreen[3227]: CONNECT from [121.232.17.173]:51400 to [61.*.*.*]:25
May 23 14:10:48 vm-mail postfix/postscreen[3227]: PREGREET 14 after 0.01 from [121.232.17.173]:51400: EHLO ylmf-pc\r\n
May 23 14:10:49 vm-mail postfix/postscreen[3227]: HANGUP after 0.03 from [121.232.125.154]:51363 in tests after SMTP handshake
May 23 14:10:49 vm-mail postfix/postscreen[3227]: DISCONNECT [121.232.125.154]:51363
May 23 14:10:49 vm-mail postfix/postscreen[3227]: CONNECT from [180.121.150.86]:51560 to [61.*.*.*]:25
May 23 14:10:49 vm-mail postfix/postscreen[3227]: PREGREET 14 after 0.01 from [180.121.150.86]:51560: EHLO ylmf-pc\r\n
May 23 14:10:49 vm-mail postfix/postscreen[3227]: HANGUP after 0.05 from [180.121.150.86]:51560 in tests after SMTP handshake
May 23 14:10:49 vm-mail postfix/postscreen[3227]: DISCONNECT [180.121.150.86]:51560
May 23 14:10:49 vm-mail postfix/postscreen[3227]: CONNECT from [49.67.166.184]:51682 to [61.*.*.*]:25
May 23 14:10:49 vm-mail postfix/postscreen[3227]: PREGREET 14 after 0.02 from [49.67.166.184]:51682: EHLO ylmf-pc\r\n
May 23 14:10:49 vm-mail postfix/postscreen[3227]: HANGUP after 0.05 from [121.232.17.173]:51400 in tests after SMTP handshake
May 23 14:10:49 vm-mail postfix/postscreen[3227]: DISCONNECT [121.232.17.173]:51400
May 23 14:10:49 vm-mail postfix/postscreen[3227]: CONNECT from [49.67.166.184]:51723 to [61.*.*.*]:25
May 23 14:10:49 vm-mail postfix/postscreen[3227]: PREGREET 14 after 0.01 from [49.67.166.184]:51723: EHLO ylmf-pc\r\n
May 23 14:10:49 vm-mail postfix/postscreen[3227]: HANGUP after 0.03 from [49.67.166.184]:51723 in tests after SMTP handshake
May 23 14:10:49 vm-mail postfix/postscreen[3227]: DISCONNECT [49.67.166.184]:51723
May 23 14:10:49 vm-mail postfix/postscreen[3227]: HANGUP after 0.04 from [49.67.166.184]:51682 in tests after SMTP handshake
May 23 14:10:49 vm-mail postfix/postscreen[3227]: DISCONNECT [49.67.166.184]:51682
May 23 14:10:49 vm-mail postfix/postscreen[3227]: CONNECT from [180.121.141.254]:51805 to [61.*.*.*]:25
May 23 14:10:49 vm-mail postfix/postscreen[3227]: PREGREET 14 after 0.03 from [180.121.141.254]:51805: EHLO ylmf-pc\r\n
May 23 14:10:49 vm-mail postfix/postscreen[3227]: CONNECT from [114.232.216.17]:51833 to [61.*.*.*]:25
May 23 14:10:49 vm-mail postfix/postscreen[3227]: PREGREET 14 after 0.02 from [114.232.216.17]:51833: EHLO ylmf-pc\r\n
May 23 14:10:49 vm-mail postfix/postscreen[3227]: HANGUP after 0.05 from [114.232.216.17]:51833 in tests after SMTP handshake
May 23 14:10:49 vm-mail postfix/postscreen[3227]: DISCONNECT [114.232.216.17]:51833
May 23 14:10:49 vm-mail postfix/postscreen[3227]: CONNECT from [180.120.191.173]:51942 to [61.*.*.*]:25
May 23 14:10:49 vm-mail postfix/postscreen[3227]: PREGREET 14 after 0.02 from [180.120.191.173]:51942: EHLO ylmf-pc\r\n
May 23 14:10:49 vm-mail postfix/postscreen[3227]: HANGUP after 0.05 from [180.121.141.254]:51805 in tests after SMTP handshake
May 23 14:10:49 vm-mail postfix/postscreen[3227]: DISCONNECT [180.121.141.254]:51805
May 23 14:10:49 vm-mail postfix/postscreen[3227]: CONNECT from [180.121.190.127]:51989 to [61.*.*.*]:25
May 23 14:10:49 vm-mail postfix/postscreen[3227]: PREGREET 14 after 0.02 from [180.121.190.127]:51989: EHLO ylmf-pc\r\n
May 23 14:10:50 vm-mail postfix/postscreen[3227]: HANGUP after 0.04 from [180.121.190.127]:51989 in tests after SMTP handshake
May 23 14:10:50 vm-mail postfix/postscreen[3227]: DISCONNECT [180.121.190.127]:51989
May 23 14:10:50 vm-mail postfix/postscreen[3227]: HANGUP after 0.04 from [180.120.191.173]:51942 in tests after SMTP handshake
May 23 14:10:50 vm-mail postfix/postscreen[3227]: DISCONNECT [180.120.191.173]:51942
May 23 14:10:50 vm-mail postfix/postscreen[3227]: CONNECT from [121.232.18.144]:52189 to [61.*.*.*]:25
May 23 14:10:50 vm-mail postfix/postscreen[3227]: CONNECT from [121.232.17.173]:52195 to [61.*.*.*]:25
May 23 14:10:50 vm-mail postfix/postscreen[3227]: PREGREET 14 after 0.04 from [121.232.18.144]:52189: EHLO ylmf-pc\r\n
May 23 14:10:50 vm-mail postfix/postscreen[3227]: PREGREET 14 after 0.05 from [121.232.17.173]:52195: EHLO ylmf-pc\r\n
May 23 14:10:50 vm-mail postfix/smtpd[13258]: connect from unknown[219.145.208.126]
May 23 14:10:50 vm-mail postfix/postscreen[3227]: HANGUP after 0.05 from [121.232.18.144]:52189 in tests after SMTP handshake
May 23 14:10:50 vm-mail postfix/postscreen[3227]: DISCONNECT [121.232.18.144]:52189
May 23 14:10:50 vm-mail postfix/postscreen[3227]: HANGUP after 0.08 from [121.232.17.173]:52195 in tests after SMTP handshake
May 23 14:10:50 vm-mail postfix/postscreen[3227]: DISCONNECT [121.232.17.173]:52195
May 23 14:10:50 vm-mail postfix/postscreen[3227]: CONNECT from [121.226.126.120]:52376 to [61.*.*.*]:25
May 23 14:10:50 vm-mail postfix/postscreen[3227]: CONNECT from [221.227.136.52]:52387 to [61.*.*.*]:25
May 23 14:10:50 vm-mail postfix/postscreen[3227]: PREGREET 14 after 0.02 from [121.226.126.120]:52376: EHLO ylmf-pc\r\n
May 23 14:10:50 vm-mail postfix/postscreen[3227]: PREGREET 14 after 0.02 from [221.227.136.52]:52387: EHLO ylmf-pc\r\n
May 23 14:10:50 vm-mail postfix/smtpd[13258]: Anonymous TLS connection established from unknown[219.145.208.126]: TLSv1 with cipher AES128-SHA (128/128 bits)
May 23 14:10:50 vm-mail postfix/postscreen[3227]: HANGUP after 0.03 from [121.226.126.120]:52376 in tests after SMTP handshake
May 23 14:10:50 vm-mail postfix/postscreen[3227]: DISCONNECT [121.226.126.120]:52376
May 23 14:10:50 vm-mail postfix/postscreen[3227]: CONNECT from [121.232.18.230]:52512 to [61.*.*.*]:25
May 23 14:10:50 vm-mail postfix/smtpd[13258]: NOQUEUE: reject: RCPT from unknown[219.145.208.126]: 450 4.7.1 <EXBDC.cement.local>: Helo command rejected: Host not found; from=<jinqingming@jlcement.com> to=<wanghui@sincesh.com> proto=ESMTP helo=<EXBDC.cement.local>
May 23 14:10:50 vm-mail postfix/postscreen[3227]: PREGREET 14 after 0.03 from [121.232.18.230]:52512: EHLO ylmf-pc\r\n
May 23 14:10:50 vm-mail postfix/smtpd[13258]: disconnect from unknown[219.145.208.126]
May 23 14:10:50 vm-mail postfix/postscreen[3227]: HANGUP after 0.04 from [221.227.136.52]:52387 in tests after SMTP handshake
May 23 14:10:50 vm-mail postfix/postscreen[3227]: DISCONNECT [221.227.136.52]:52387
May 23 14:10:50 vm-mail postfix/postscreen[3227]: CONNECT from [49.67.167.250]:52612 to [61.*.*.*]:25
May 23 14:10:50 vm-mail postfix/postscreen[3227]: PREGREET 14 after 0.03 from [49.67.167.250]:52612: EHLO ylmf-pc\r\n
May 23 14:10:50 vm-mail postfix/postscreen[3227]: HANGUP after 0.04 from [121.232.18.230]:52512 in tests after SMTP handshake
May 23 14:10:50 vm-mail postfix/postscreen[3227]: DISCONNECT [121.232.18.230]:52512
May 23 14:10:50 vm-mail postfix/postscreen[3227]: CONNECT from [121.232.18.230]:52637 to [61.*.*.*]:25
May 23 14:10:51 vm-mail postfix/postscreen[3227]: PREGREET 14 after 0.05 from [121.232.18.230]:52637: EHLO ylmf-pc\r\n
May 23 14:10:51 vm-mail postfix/10025/smtpd[13839]: 2D1D742FAD73: client=vm-mail.poocan.com[127.0.0.1]
May 23 14:10:51 vm-mail postfix/cleanup[15292]: 2D1D742FAD73: message-id=<xxkm7k2-iet852-10@sincesh.com>
May 23 14:10:51 vm-mail amavis[15636]: (15636-20) Passed CLEAN {RelayedInbound}, [92.52.207.55]:3858 [92.52.207.55] <zhang**@sincesh.com> -> <ecs162@aol.com>, Queue-ID: D75BA4291CE6, Message-ID: <xxkm7k2-iet852-10@sincesh.com>, mail_id: JLLaTx5g5uce, Hits: 3.669, size: 899, queued_as: 2D1D742FAD73, 6441 ms, Tests: [ALL_TRUSTED=-1,BAYES_00=-1.9,RAZOR2_CF_RANGE_51_100=1.886,RAZOR2_CHECK=0.922,URIBL_BLOCKED=0.001,URIBL_CR_SURBL=1.263,URI_WP_HACKED_2=2.497]
May 23 14:10:51 vm-mail postfix/smtp-amavis/smtp[15731]: D75BA4291CE6: to=<ecs162@aol.com>, relay=127.0.0.1[127.0.0.1]:10024, delay=19141, delays=9169/9966/0/6.4, dsn=2.0.0, status=sent (250 2.0.0 from MTA(smtp:[127.0.0.1]:10025): 250 2.0.0 Ok: queued as 2D1D742FAD73)

以下是邮件能发不能收日志
May 23 13:23:14 vm-mail postfix/smtpd[8435]: 07CD242E994A: client=unknown[116.*.*.*], sasl_method=LOGIN, sasl_username=zuo**@r**.com
May 23 13:45:33 vm-mail postfix/smtpd[13255]: 1D10442F630A: client=unknown[116.*.*.*], sasl_method=LOGIN, sasl_username=zuo**@r**.com
May 23 14:10:17 vm-mail postfix/smtpd[13255]: 2EEB242FAD62: client=unknown[116.*.*.*], sasl_method=LOGIN, sasl_username=zuo**@r**.com
May 23 14:16:51 vm-mail postfix/smtpd[13258]: B931C42FEB62: client=unknown[116.*.*.*], sasl_method=LOGIN, sasl_username=zuo**@r**.com