主题: 帮忙解析logwatch发的日志

centos5.3 + iredmail0.5.0-rc1

1,  amavis Begin
   ......
   (!)WARN: DSPAM problem, exit 64, result=[4358] warn: Unknown option: stdout\n: 1 Time(s)
   (!)WARN: DSPAM problem, exit 64, result=[4289] warn: Unknown option: stdout\n: 1 Time(s)

   是什么问题啊

2, SSHD Begin
   Received disconnect:
    11: Bye Bye : 1012 Time(s)
**Unmatched Entries**
pam_succeed_if(sshd:auth): error retrieving information about user susan : 1 time(s)
pam_succeed_if(sshd:auth): error retrieving information about user wolfgang : 2 time(s)
......
Address 200.69.100.62 maps to corporat200-69100062.sta.etb.net.co, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! : 1 time(s)
.......
   有上千条,是黑客? 是成功还是不成功啊?

回复: 帮忙解析logwatch发的日志

把你的 sshd 的端口改掉吧,例如改成 60022 这样的。
/etc/ssh/sshd_config
Port = xxxxx

回复: 帮忙解析logwatch发的日志

怎么会出现 DSPAM?