[求助]Ex2013被中继了，请问如何解决啊，谢谢！ [复制链接]

日志如下：


#Fields: date-time,client-ip,client-hostname,server-ip,server-hostname,source-context,connector-id,source,event-id,internal-message-id,message-id,network-message-id,recipient-address,recipient-status,total-bytes,recipient-count,related-recipient-address,reference,message-subject,sender-address,return-path,message-info,directionality,tenant-id,original-client-ip,original-server-ip,custom-data
2013-10-10T00:00:21.306Z,::1,MAIL,,,"MDB:c2e4545d-c5c8-496d-826b-773dac3cf65b, Mailbox:bbda02ab-9923-4b30-b539-8edba2f9bdab, Event:41655, MessageClass:IPM.Note.MapiSubmitLAMProbe, CreationTime:2013-10-10T00:00:20.322Z, ClientType:Monitoring",,STOREDRIVER,NOTIFYMAPI,,,,,,,,,,,,,2013-10-10T00:00:20.322Z;LSRV=mail.unovo.com.cn:TOTAL=0,,,,,S:ItemEntryId=00-00-00-00-FE-F7-4D-F4-6D-F0-D3-47-8F-07-D2-C2-8A-5A-DF-B4-07-00-1F-0B-1F-0E-32-38-B5-41-A6-A0-D4-A4-FB-43-28-EA-00-00-00-00-00-0D-00-00-1F-0B-1F-0E-32-38-B5-41-A6-A0-D4-A4-FB-43-28-EA-00-00-00-67-B3-2C-00-00
2013-10-10T00:00:21.353Z,::1,mail.unovo.com.cn,::1,mail,08D0912ECD94B648,,STOREDRIVER,RECEIVE,0,<712197af5aa8497e9136fbd436bb5dc2@mail.unovo.com.cn>,dbd68e33a78042a4c01e08d09362d8da,HealthMailbox4c9e25b35fe2451a829245d02a422e04@unovo.com.cn,To,7619,1,,,MBTSubmission/StoreDriverSubmission/00000063-0000-0000-0000-0000cc48341b-MapiSubmitLAMProbe,HealthMailbox4c9e25b35fe2451a829245d02a422e04@unovo.com.cn,HealthMailbox4c9e25b35fe2451a829245d02a422e04@unovo.com.cn,04I: ,Originating,,,,S:MailboxDatabaseGuid=c2e4545d-c5c8-496d-826b-773dac3cf65b;S:ItemEntryId=00-00-00-00-FE-F7-4D-F4-6D-F0-D3-47-8F-07-D2-C2-8A-5A-DF-B4-07-00-1F-0B-1F-0E-32-38-B5-41-A6-A0-D4-A4-FB-43-28-EA-00-00-00-00-00-0D-00-00-1F-0B-1F-0E-32-38-B5-41-A6-A0-D4-A4-FB-43-28-EA-00-00-00-67-B3-2C-00-00
2013-10-10T00:00:21.728Z,::1,MAIL,,mail.unovo.com.cn,"MDB:c2e4545d-c5c8-496d-826b-773dac3cf65b, Mailbox:bbda02ab-9923-4b30-b539-8edba2f9bdab, Event:41655, MessageClass:IPM.Note.MapiSubmitLAMProbe, CreationTime:2013-10-10T00:00:20.322Z, ClientType:Monitoring",,STOREDRIVER,SUBMIT,,<712197af5aa8497e9136fbd436bb5dc2@mail.unovo.com.cn>,dbd68e33a78042a4c01e08d09362d8da,HealthMailbox4c9e25b35fe2451a829245d02a422e04@unovo.com.cn,,,1,,,MBTSubmission/StoreDriverSubmission/00000063-0000-0000-0000-0000cc48341b-MapiSubmitLAMProbe,HealthMailbox4c9e25b35fe2451a829245d02a422e04@unovo.com.cn,,2013-10-10T00:00:20.322Z;LSRV=mail.unovo.com.cn:TOTAL=1,Originating,,,,S:ItemEntryId=00-00-00-00-FE-F7-4D-F4-6D-F0-D3-47-8F-07-D2-C2-8A-5A-DF-B4-07-00-1F-0B-1F-0E-32-38-B5-41-A6-A0-D4-A4-FB-43-28-EA-00-00-00-00-00-0D-00-00-1F-0B-1F-0E-32-38-B5-41-A6-A0-D4-A4-FB-43-28-EA-00-00-00-67-B3-2C-00-00
2013-10-10T00:02:21.128Z,::1,MAIL,,,"MDB:c2e4545d-c5c8-496d-826b-773dac3cf65b, Mailbox:bbda02ab-9923-4b30-b539-8edba2f9bdab, Event:41672, MessageClass:IPM.Note.MapiSubmitLAMProbe, CreationTime:2013-10-10T00:02:20.456Z, ClientType:Monitoring",,STOREDRIVER,NOTIFYMAPI,,,,,,,,,,,,,2013-10-10T00:02:20.456Z;LSRV=mail.unovo.com.cn:TOTAL=0,,,,,S:ItemEntryId=00-00-00-00-FE-F7-4D-F4-6D-F0-D3-47-8F-07-D2-C2-8A-5A-DF-B4-07-00-1F-0B-1F-0E-32-38-B5-41-A6-A0-D4-A4-FB-43-28-EA-00-00-00-00-00-0D-00-00-1F-0B-1F-0E-32-38-B5-41-A6-A0-D4-A4-FB-43-28-EA-00-00-00-67-B3-2D-00-00
2013-10-10T00:02:21.144Z,::1,mail.unovo.com.cn,::1,mail,08D0912ECD94B64A,,STOREDRIVER,RECEIVE,0,<622e7436d35e4669b6845c6498efdb06@mail.unovo.com.cn>,975d0a4594f842ab5d9008d093632041,HealthMailbox4c9e25b35fe2451a829245d02a422e04@unovo.com.cn,To,7619,1,,,MBTSubmission/StoreDriverSubmission/00000063-0000-0000-0000-0000cc48341c-MapiSubmitLAMProbe,HealthMailbox4c9e25b35fe2451a829245d02a422e04@unovo.com.cn,HealthMailbox4c9e25b35fe2451a829245d02a422e04@unovo.com.cn,04I: ,Originating,,,,S:MailboxDatabaseGuid=c2e4545d-c5c8-496d-826b-773dac3cf65b;S:ItemEntryId=00-00-00-00-FE-F7-4D-F4-6D-F0-D3-47-8F-07-D2-C2-8A-5A-DF-B4-07-00-1F-0B-1F-0E-32-38-B5-41-A6-A0-D4-A4-FB-43-28-EA-00-00-00-00-00-0D-00-00-1F-0B-1F-0E-32-38-B5-41-A6-A0-D4-A4-FB-43-28-EA-00-00-00-67-B3-2D-00-00
2013-10-10T00:02:21.550Z,::1,MAIL,,mail.unovo.com.cn,"MDB:c2e4545d-c5c8-496d-826b-773dac3cf65b, Mailbox:bbda02ab-9923-4b30-b539-8edba2f9bdab, Event:41672, MessageClass:IPM.Note.MapiSubmitLAMProbe, CreationTime:2013-10-10T00:02:20.456Z, ClientType:Monitoring",,STOREDRIVER,SUBMIT,,<622e7436d35e4669b6845c6498efdb06@mail.unovo.com.cn>,975d0a4594f842ab5d9008d093632041,HealthMailbox4c9e25b35fe2451a829245d02a422e04@unovo.com.cn,,,1,,,MBTSubmission/StoreDriverSubmission/00000063-0000-0000-0000-0000cc48341c-MapiSubmitLAMProbe,HealthMailbox4c9e25b35fe2451a829245d02a422e04@unovo.com.cn,,2013-10-10T00:02:20.456Z;LSRV=mail.unovo.com.cn:TOTAL=1,Originating,,,,S:ItemEntryId=00-00-00-00-FE-F7-4D-F4-6D-F0-D3-47-8F-07-D2-C2-8A-5A-DF-B4-07-00-1F-0B-1F-0E-32-38-B5-41-A6-A0-D4-A4-FB-43-28-EA-00-00-00-00-00-0D-00-00-1F-0B-1F-0E-32-38-B5-41-A6-A0-D4-A4-FB-43-28-EA-00-00-00-67-B3-2D-00-00
2013-10-10T00:04:20.971Z,::1,MAIL,,,"MDB:c2e4545d-c5c8-496d-826b-773dac3cf65b, Mailbox:bbda02ab-9923-4b30-b539-8edba2f9bdab, Event:41692, MessageClass:IPM.Note.MapiSubmitLAMProbe, CreationTime:2013-10-10T00:04:20.457Z, ClientType:Monitoring",,STOREDRIVER,NOTIFYMAPI,,,,,,,,,,,,,2013-10-10T00:04:20.457Z;LSRV=mail.unovo.com.cn:TOTAL=0,,,,,S:ItemEntryId=00-00-00-00-FE-F7-4D-F4-6D-F0-D3-47-8F-07-D2-C2-8A-5A-DF-B4-07-00-1F-0B-1F-0E-32-38-B5-41-A6-A0-D4-A4-FB-43-28-EA-00-00-00-00-00-0D-00-00-1F-0B-1F-0E-32-38-B5-41-A6-A0-D4-A4-FB-43-28-EA-00-00-00-67-B3-2E-00-00

请简要说明一下，这封中继的邮件发件人和收件人分别是什么，经过Exchange的哪个接收连接器。

看不出来啊，不过我在域用户管理界面看到了被开了很多账户，“HealthMailbox4c9e25b35fe2451a829245d02a422e04”这是其中一个，我删了，他过一会又开了几个，不知道他如何能开帐号？

琨翔的围脖:看不出来啊，不过我在域用户管理界面看到了被开了很多账户，“HealthMailbox4c9e25b35fe2451a829245d02a422e04”这是其中一个，我删了，他过一会又开了几个，不知道他如何能开帐号？(2013-10-12 16:01)嬀/color]

HealthMailbox<guid>是Exchange 2013自动创建的为Managed Availability服务所使用的邮箱。一般每个邮箱数据库会有两个HealthMailbox。Exchange每五分钟自动通过这些邮箱发送邮件以测试邮件传输是否正常。所以对此你不必有任何担心。

更多参考：

http://www.expta.com/2012/12/exchange-2013-health-check-monitors-and.html

哦，非常感谢，但是我信箱队列还是有垃圾邮件啊，我做防垃圾邮件，发件人为空是否可以解决啊？我最担心是别人用我的smtp发垃圾邮件，谁能共享下经验，谢谢了！！！！

琨翔的围脖:哦，非常感谢，但是我信箱队列还是有垃圾邮件啊，我做防垃圾邮件，发件人为空是否可以解决啊？我最担心是别人用我的smtp发垃圾邮件，谁能共享下经验，谢谢了！！！！
(2013-10-15 09:23)嬀/color]

发件人为空的一般是一些NDR邮件，只不过收件人不存在所以暂时保留在队列里面。timeout后会自动删除的。这不是垃圾邮件。

此外，默认情况下，Exchange 2013是没有开启open relay的，别人要用你的smtp发垃圾邮件的话，除非你的接收连接器上赋予了匿名用户Ms-Exch-SMTP-Accept-Any-Recipient的权限。

参考：
http://www.shudnow.net/2013/06/04/how-anonymous-relay-works-in-exchange-2013/

非常感谢版主的耐心解释！

琨翔的围脖:非常感谢版主的耐心解释！(2013-10-16 09:49)嬀/color]