MDaemon日志查看方法—外发邮件

邮件收发的过程会体现在日志中,即可以通过查看日志文件来排查收发故障。日志文件在MDaemon安装目录下的Logs子目录下(MDaemon/Logs),下面的日志文件均以SMTP session successful代表成功。在日志中,从左向右的箭头“→”代表你方服务器发送给对方的信息,从右向左的箭头“←”表示对方发送给你方的信息。

下面将以“外发邮件”情况进行说明。

“外发邮件(出站)”日志查看步骤

邮件外发的过程,日志大致的经过步骤是:

Smtp In(Smtp 接收)→ AntiVirus(反病毒引擎)→ AntiSpam(反垃圾引擎)→   ContentFilter(内容过滤器)→Routing(路由)→Smtp Out(Smtp发送)

但一般查看SMTP-(in)→SMTP-(out)即可,详细步骤如下:

(1)在邮件外发给外网邮箱没有收到的情况下,请收集“发件人地址”、“收件人地址”和“发送时间”。

(2)进入MDaemon\Logs目录下

(3)打开当天的smtp(in)日志,并按快捷键“Ctrl+F”或“编辑—查找”。输入收件人或发件人进行查找(对照时间)。

(4)以下是smtp(in)日志的具体分析。

Wed 2017-03-22 22:31:02.734: 05: Session 163021; child 0001
Wed 2017-03-22 22:31:02.734: 05: Accepting SMTP connection from 120.27.38.xxx:59649 to 120.27.38.xxx:25

连接是从120.27.38.xxx发起的,这是我服务器地址,也就是本地发起的
Wed 2017-03-22 22:31:02.737: 03: –> 220 mail.yuncan.cn ESMTP MDaemon 16.5.1; Wed, 22 Mar 2017 22:31:02 +0800
Wed 2017-03-22 22:31:02.737: 02: <– EHLO WorldClient
Wed 2017-03-22 22:31:02.737: 03: –> 250-mail.yuncan.cn Hello WorldClient [120.27.38.xxx], pleased to meet you
Wed 2017-03-22 22:31:02.737: 03: –> 250-ETRN
Wed 2017-03-22 22:31:02.737: 03: –> 250-AUTH LOGIN CRAM-MD5 PLAIN
Wed 2017-03-22 22:31:02.737: 03: –> 250-8BITMIME
Wed 2017-03-22 22:31:02.737: 03: –> 250-ENHANCEDSTATUSCODES
Wed 2017-03-22 22:31:02.737: 03: –> 250 SIZE
Wed 2017-03-22 22:31:02.737: 02: <– AUTH CRAM-MD5
Wed 2017-03-22 22:31:02.737: 03: –> 334 PE1EQUVNT04tRjIwMTcwMzIyMjIzMS5BQTMxMDI3MzdNRDY4MTlAbWFpbC5tYWlsc3RvcmUuY24+
Wed 2017-03-22 22:31:02.737: 02: <– dGVzdDFAbWFpbHN0b3JlLmNuIGRmNzA1NzQ2OTI0NzdiZDA5NmU2MjY2NWJiZDdjOTJk
Wed 2017-03-22 22:31:02.738: 03: –> 235 2.7.0 Authentication successful

MDaemon邮件系统的一些认证等系统信息
Wed 2017-03-22 22:31:02.738: 01: Authenticated as test1@yuncan.cn
Wed 2017-03-22 22:31:02.739: 02: <– MAIL FROM:<test1@yuncan.cn> SIZE=955
Wed 2017-03-22 22:31:02.740: 03: –> 250 2.1.0 Sender OK

发件人是test1@yuncan.cn
Wed 2017-03-22 22:31:02.740: 02: <– RCPT TO:<xxx@qq.com>
Wed 2017-03-22 22:31:02.743: 03: –> 250 2.1.5 Recipient OK

收件人是xxx@qq.com
Wed 2017-03-22 22:31:02.743: 02: <– DATA
Wed 2017-03-22 22:31:02.743: 01: Creating temp file (SMTP): c:\mdaemon\queues\temp\md50000000747.tmp
Wed 2017-03-22 22:31:02.744: 03: –> 354 Enter mail, end with <CRLF>.<CRLF>
Wed 2017-03-22 22:31:02.744: 01: Message size: 957 bytes

创建邮件的过程
Wed 2017-03-22 22:31:02.745: 06: Passing message through AntiVirus (Size: 957)…
Wed 2017-03-22 22:31:02.754: 06: * 邮件清洁(未发现病毒)
Wed 2017-03-22 22:31:02.754: 06: —- End AntiVirus results
Wed 2017-03-22 22:31:02.754: 11: Passing message through ClamAV Plugin (c:\mdaemon\queues\temp\md50000000747.tmp)…
Wed 2017-03-22 22:31:02.754: 11: * Message-ID: <WC20170322143102.73001C@mailstore.cn>
Wed 2017-03-22 22:31:02.779: 11: * Virus result: 0 – clean
Wed 2017-03-22 22:31:02.781: 01: 邮件创建 successful:c:\mdaemon\queues\inbound\md50000002006.msg
Wed 2017-03-22 22:31:02.781: 03: –> 250 2.6.0 Ok, message saved <Message-ID: <WC20170322143102.73001C@mailstore.cn>>
Wed 2017-03-22 22:31:02.785: 02: <– QUIT
Wed 2017-03-22 22:31:02.785: 03: –> 221 2.0.0 See ya in cyberspace

反病毒及系统方面的检测

 

Wed 2017-03-22 22:31:02.785: 01: SMTP session successful (Bytes in/out: 1145/563)

 

如果最后提示SMTP session successful那表明in日志是成功的(即邮件已经成功发送到远程队列),接下来查看outl日志。

 

(5)如果smtp(in)日志显示“SMTP session successful”字符,那么查看smtp(out)日志。

(6)打开当天的smtp(out)日志,并按快捷键“Ctrl+F”或“编辑—查找”。输入收件人或发件人进行查找(对照时间)。

(7)以下是smtp(out)日志的具体分析。

Wed 2017-03-22 22:31:06.431: 05: Session 163022; child 0001
Wed 2017-03-22 22:31:06.431: 01: Parsing message <c:\mdaemon\queues\remote\pd35000004366.msg>
Wed 2017-03-22 22:31:06.431: 01: * From: test1@yuncan.cn
Wed 2017-03-22 22:31:06.431: 01: * To: xxx@qq.com
Wed 2017-03-22 22:31:06.431: 01: * Subject: 测试
Wed 2017-03-22 22:31:06.431: 01: * Size (bytes): 1628
Wed 2017-03-22 22:31:06.431: 01: * Message-ID: <WC20170322143102.73001C@yuncan.cn>
Wed 2017-03-22 22:31:06.433: 05: Resolving MX record for qq.com (DNS Server: 10.202.72.118)…
Wed 2017-03-22 22:31:06.434: 05: * P=010 S=001 D=qq.com TTL=(30) MX=[mx3.qq.com]
Wed 2017-03-22 22:31:06.434: 05: * P=020 S=002 D=qq.com TTL=(30) MX=[mx2.qq.com]
Wed 2017-03-22 22:31:06.434: 05: * P=030 S=000 D=qq.com TTL=(30) MX=[mx1.qq.com]

发件人、收件人、主题,查找收件人的MX记录等信息
Wed 2017-03-22 22:31:06.434: 05: Attempting SMTP connection to mx3.qq.com
Wed 2017-03-22 22:31:06.451: 05: Resolving A record for mx3.qq.com (DNS Server: 10.202.72.118)…
Wed 2017-03-22 22:31:06.451: 05: * D=mx3.qq.com TTL=(1) A=[183.57.48.35]

解析收件方域名的MX记录与A记录(这里为mx3.qq.com)
Wed 2017-03-22 22:31:06.451: 05: Attempting SMTP connection to 183.57.48.35:25
Wed 2017-03-22 22:31:06.452: 05: Waiting for socket connection…
Wed 2017-03-22 22:31:06.494: 05: * Connection established 120.27.38.xxx:59651 –> 183.57.48.35:25
Wed 2017-03-22 22:31:06.494: 05: Waiting for protocol to start…

连接收件方服务器的25端口
Wed 2017-03-22 22:31:06.538: 02: <– 220 newmx.qq.com MX QQ Mail Server
Wed 2017-03-22 22:31:06.539: 03: –> EHLO mail.yuncan.cn
Wed 2017-03-22 22:31:06.581: 02: <– 250-newmx.qq.com
Wed 2017-03-22 22:31:06.581: 02: <– 250-SIZE 73400320
Wed 2017-03-22 22:31:06.581: 02: <– 250-STARTTLS
Wed 2017-03-22 22:31:06.582: 02: <– 250 OK

发件方邮件系统与收件方邮件系统的一些握手信息
Wed 2017-03-22 22:31:06.582: 03: –> MAIL From:<test1@yuncan.cn> SIZE=1628
Wed 2017-03-22 22:31:06.631: 02: <– 250 Ok
Wed 2017-03-22 22:31:06.631: 03: –> RCPT To:<xxx@qq.com>
Wed 2017-03-22 22:31:06.712: 02: <– 250 Ok
Wed 2017-03-22 22:31:06.712: 03: –> DATA
Wed 2017-03-22 22:31:06.754: 02: <– 354 End data with <CR><LF>.<CR><LF>

上述表明收件人是xxx@qq.com,并且存在该收件人
Wed 2017-03-22 22:31:06.754: 01: Sending <c:\mdaemon\queues\remote\pd35000004366.msg> to [183.57.48.35]
Wed 2017-03-22 22:31:06.754: 01: Transfer Complete
Wed 2017-03-22 22:31:07.152: 02: <– 250 Ok: queued as
Wed 2017-03-22 22:31:07.152: 03: –> QUIT

创建邮件,并发送邮件到收件人

Wed 2017-03-22 22:31:07.195: 02: <– 221 Bye
Wed 2017-03-22 22:31:07.195: 01: SMTP session successful (Bytes in/out: 177/1740)

如果最后提示SMTP session successful那表明邮件已经发送成功了,已经到达收件方服务器了。

 

(8)如果smtp(out)日志显示“SMTP session successful”字符,那么代表邮件已成功发送给收件人(已成功从远程队列发出给收件人了)。

下次给大家带来“内接邮件”的情况分析!

分享到: 更多 (0)
友情链接: MailStore中文官网 | 上海云璨信息技术有限公司官网 | 邮件技术资讯网 | 云邮科技

Copyright © 2019 MDaemon中文 网站地图 备案号:沪ICP备14033669号-4