Kita juga sudah pakai MDAV, dan jalan, karena bila ada email bervirus,
langsung ada
notification bahwa kita telah menerima email bervirus.
Tapi saya copy-kan smtp-in nya.....

Wed 2004-07-28 19:12:49: Session 2493; child 1; thread 1756
Wed 2004-07-28 19:12:39: Accepting SMTP connection from [69.93.90.186 :
47600]
Wed 2004-07-28 19:12:40: --> 220 reindo.co.id ESMTP MDaemon 7.1.0; Wed, 28
Jul 2004 19:12:40 +0700
Wed 2004-07-28 19:12:43: <-- HELO 13.hostcorporate.com
Wed 2004-07-28 19:12:43: Spam Blocker is checking 69.93.90.186 (connecting
IP)
Wed 2004-07-28 19:12:43: * relays.ordb.org - passed
Wed 2004-07-28 19:12:44: * bl.spamcop.net - passed
Wed 2004-07-28 19:12:44: * sbl-xbl.spamhaus.org - passed
Wed 2004-07-28 19:12:44: Spam Blocker is finished
Wed 2004-07-28 19:12:44: --> 250 reindo.co.id Hello 13.hostcorporate.com,
pleased to meet you
Wed 2004-07-28 19:12:45: <-- MAIL FROM:<[EMAIL PROTECTED]>
Wed 2004-07-28 19:12:45: --> 250 <[EMAIL PROTECTED]>, Sender ok
Wed 2004-07-28 19:12:46: <-- RCPT TO:<[EMAIL PROTECTED]>
Wed 2004-07-28 19:12:46: --> 250 <[EMAIL PROTECTED]>, Recipient ok
Wed 2004-07-28 19:12:47: <-- DATA
Wed 2004-07-28 19:12:47: Creating temp file (SMTP):
c:\mdaemon\temp\md50000019464.tmp
Wed 2004-07-28 19:12:47: --> 354 Enter mail, end with <CRLF>.<CRLF>
Wed 2004-07-28 19:12:48: Message creation successful:
c:\mdaemon\inbound\md50000060892.msg
Wed 2004-07-28 19:12:48: --> 250 Ok, message saved <Message-ID:
<[EMAIL PROTECTED]>>
Wed 2004-07-28 19:12:49: <-- QUIT
Wed 2004-07-28 19:12:49: --> 221 See ya in cyberspace
Wed 2004-07-28 19:12:49: SMTP session successful (Bytes in/out: 1757/375)
Wed 2004-07-28 19:12:49: ----------
Wed 2004-07-28 19:13:04: Session 2494; child 1; thread 1644
Wed 2004-07-28 19:12:58: Accepting SMTP connection from [69.93.90.186 :
47750]
Wed 2004-07-28 19:12:58: --> 220 reindo.co.id ESMTP MDaemon 7.1.0; Wed, 28
Jul 2004 19:12:58 +0700
Wed 2004-07-28 19:12:59: <-- HELO 13.hostcorporate.com
Wed 2004-07-28 19:12:59: Spam Blocker is checking 69.93.90.186 (connecting
IP)
Wed 2004-07-28 19:12:59: * relays.ordb.org - passed
Wed 2004-07-28 19:12:59: * bl.spamcop.net - passed
Wed 2004-07-28 19:12:59: * sbl-xbl.spamhaus.org - passed
Wed 2004-07-28 19:12:59: Spam Blocker is finished
Wed 2004-07-28 19:12:59: --> 250 reindo.co.id Hello 13.hostcorporate.com,
pleased to meet you
Wed 2004-07-28 19:13:00: <-- MAIL FROM:<[EMAIL PROTECTED]>
Wed 2004-07-28 19:13:00: --> 250 <[EMAIL PROTECTED]>, Sender ok
Wed 2004-07-28 19:13:01: <-- RCPT TO:<[EMAIL PROTECTED]>
Wed 2004-07-28 19:13:01: --> 250 <[EMAIL PROTECTED]>, Recipient ok
Wed 2004-07-28 19:13:01: <-- DATA
Wed 2004-07-28 19:13:02: Creating temp file (SMTP):
c:\mdaemon\temp\md50000019465.tmp
Wed 2004-07-28 19:13:02: --> 354 Enter mail, end with <CRLF>.<CRLF>
Wed 2004-07-28 19:13:03: Message creation successful:
c:\mdaemon\inbound\md50000060893.msg
Wed 2004-07-28 19:13:03: --> 250 Ok, message saved <Message-ID:
<[EMAIL PROTECTED]>>
Wed 2004-07-28 19:13:04: <-- QUIT
Wed 2004-07-28 19:13:04: --> 221 See ya in cyberspace
Wed 2004-07-28 19:13:04: SMTP session successful (Bytes in/out: 1757/375)
Wed 2004-07-28 19:13:04: ----------


-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Syafril Hermansyah
Sent: Wednesday, July 28, 2004 7:17 PM
To: [EMAIL PROTECTED]
Subject: [mdaemon-l] Virus atau SPAM ??


On Wed, 28 Jul 2004 19:48:28 +0700
Edwin Setiawan wrote:

> Pak, user saya terus menerus terima mail subjectnya "HAI Stupid Crazy",
bisa
> sampai ratusan.

Kalau pakai MDAV atau Mailscan dg hanya notification to administrator aktif,
mestinya tidak ada  mail begituan yg masuk ke mailboxnya user.

> Lalu saya cegat di cf, yang actionnya langsung delete.
> Tetapi waktu saya cek di log SMTP-IN, banayk sekali si HAI... itu kirim
> email.
> Takutnya, malah ngabisin bandwidth yang kita punya.
> Bagaimana untuk mencegah itu Pak??

Coba perlihatnya potongan log dari smtp-in.log utk transaksi itu.


--
syafril
-------
Syafril Hermansyah

MDaemon-L Moderators, menggunakan MDaemon 7.2.0 R Beta C under W2K3

--
--[MDaemon-L]------------------------------------------------
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server.
Mohon tidak posting dalam format HTML!

Arsip          : <http://mdaemon-l.dutaint.com>
Moderator      : <mailto:[EMAIL PROTECTED]>
Henti Langgan  : <mailto:[EMAIL PROTECTED]>
Berlangganan   : <mailto:[EMAIL PROTECTED]>
Versi Terakhir : MD 7.1.2, LD 2.1.0, WA 2.0.8, MDAV 2.2.4, MDGW 1.0.6



-- 
--[MDaemon-L]------------------------------------------------
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server.
Mohon tidak posting dalam format HTML!

Arsip          : <http://mdaemon-l.dutaint.com>
Moderator      : <mailto:[EMAIL PROTECTED]>
Henti Langgan  : <mailto:[EMAIL PROTECTED]>
Berlangganan   : <mailto:[EMAIL PROTECTED]>
Versi Terakhir : MD 7.1.2, LD 2.1.0, WA 2.0.8, MDAV 2.2.4, MDGW 1.0.6 

Kirim email ke