Syafril Hermansyah wrote:
mestinya bukan, virus belum sesakti itu bisa melakukan smtpauth.
IP 131.107.210.180 milik siapa ?
lihat transaksi Wed 2007-06-27 14:44:02 di smtp-in log dan routing log.
milik [EMAIL PROTECTED]
di smtp-in log dan routing log tidak ada transaksi dengan jam segitu,
tapi beberapa menit sebelumnya.
transaksi di smtp-in log
Wed 2007-06-27 14:43:26: ----------
Wed 2007-06-27 14:43:44: Session 2637; child 2; thread 17244
Wed 2007-06-27 14:43:40: Accepting SMTP connection from [131.107.210.180
: 1845]
Wed 2007-06-27 14:43:40: --> 220 araksa.com ESMTP MDaemon 9.5.5; Wed, 27
Jun 2007 14:43:40 +0700
Wed 2007-06-27 14:43:40: <-- EHLO mkspc
Wed 2007-06-27 14:43:40: --> 250-araksa.com Hello mkspc, pleased to meet you
Wed 2007-06-27 14:43:40: --> 250-ETRN
Wed 2007-06-27 14:43:40: --> 250-AUTH=LOGIN
Wed 2007-06-27 14:43:40: --> 250-AUTH LOGIN CRAM-MD5
Wed 2007-06-27 14:43:40: --> 250-8BITMIME
Wed 2007-06-27 14:43:40: --> 250-STARTTLS
Wed 2007-06-27 14:43:40: --> 250 SIZE 0
Wed 2007-06-27 14:43:40: <-- AUTH LOGIN
Wed 2007-06-27 14:43:40: --> 334 VXNlcm5hbWU6
Wed 2007-06-27 14:43:40: <-- bWFydGlu
Wed 2007-06-27 14:43:40: --> 334 UGFzc3dvcmQ6
Wed 2007-06-27 14:43:40: <-- ******
Wed 2007-06-27 14:43:40: --> 235 Authentication successful
Wed 2007-06-27 14:43:40: Authenticated as [EMAIL PROTECTED]
Wed 2007-06-27 14:43:40: <-- MAIL FROM: <[EMAIL PROTECTED]>
Wed 2007-06-27 14:43:40: --> 250 <[EMAIL PROTECTED]>, Sender ok
Wed 2007-06-27 14:43:40: <-- RCPT TO: <[EMAIL PROTECTED]>
Wed 2007-06-27 14:43:40: --> 250 <[EMAIL PROTECTED]>, Recipient ok
Wed 2007-06-27 14:43:40: <-- DATA
Wed 2007-06-27 14:43:40: Creating temp file (SMTP):
d:\mdaemon\temp\md50001489248.tmp
Wed 2007-06-27 14:43:40: --> 354 Enter mail, end with <CRLF>.<CRLF>
Wed 2007-06-27 14:43:40: Message size: 30378 bytes
Wed 2007-06-27 14:43:40: Passing message through AntiVirus (Size: 30378)...
Wed 2007-06-27 14:43:40: * Message is clean (no viruses found)
Wed 2007-06-27 14:43:40: ---- End AntiVirus results
Wed 2007-06-27 14:43:40: Message creation successful:
d:\mdaemon\inbound\md50002861995.msg
Wed 2007-06-27 14:43:40: --> 250 Ok, message saved <Message-ID:
[EMAIL PROTECTED]>
Wed 2007-06-27 14:43:40: <-- MAIL FROM: <[EMAIL PROTECTED]>
Wed 2007-06-27 14:43:40: --> 250 <[EMAIL PROTECTED]>, Sender ok
Wed 2007-06-27 14:43:40: <-- RCPT TO: <[EMAIL PROTECTED]>
Wed 2007-06-27 14:43:40: --> 250 <[EMAIL PROTECTED]>, Recipient ok
Wed 2007-06-27 14:43:40: <-- DATA
Wed 2007-06-27 14:43:40: Creating temp file (SMTP):
d:\mdaemon\temp\md50001489249.tmp
Wed 2007-06-27 14:43:40: --> 354 Enter mail, end with <CRLF>.<CRLF>
Wed 2007-06-27 14:43:41: Message size: 26009 bytes
Wed 2007-06-27 14:43:41: Passing message through AntiVirus (Size: 26009)...
Wed 2007-06-27 14:43:41: * Message is clean (no viruses found)
Wed 2007-06-27 14:43:41: ---- End AntiVirus results
Wed 2007-06-27 14:43:41: Message creation successful:
d:\mdaemon\inbound\md50002861996.msg
Wed 2007-06-27 14:43:41: --> 250 Ok, message saved <Message-ID:
[EMAIL PROTECTED]>
Wed 2007-06-27 14:43:41: <-- MAIL FROM: <[EMAIL PROTECTED]>
Wed 2007-06-27 14:43:41: --> 250 <[EMAIL PROTECTED]>, Sender ok
Wed 2007-06-27 14:43:41: <-- RCPT TO: <[EMAIL PROTECTED]>
Wed 2007-06-27 14:43:41: --> 250 <[EMAIL PROTECTED]>, Recipient ok
Wed 2007-06-27 14:43:41: <-- DATA
Wed 2007-06-27 14:43:41: Creating temp file (SMTP):
d:\mdaemon\temp\md50001489250.tmp
Wed 2007-06-27 14:43:41: --> 354 Enter mail, end with <CRLF>.<CRLF>
Wed 2007-06-27 14:43:41: Message size: 26912 bytes
Wed 2007-06-27 14:43:41: Passing message through AntiVirus (Size: 26912)...
Wed 2007-06-27 14:43:41: * Message is clean (no viruses found)
Wed 2007-06-27 14:43:41: ---- End AntiVirus results
Wed 2007-06-27 14:43:41: Message creation successful:
d:\mdaemon\inbound\md50002861997.msg
Wed 2007-06-27 14:43:41: --> 250 Ok, message saved <Message-ID:
[EMAIL PROTECTED]>
Wed 2007-06-27 14:43:41: <-- MAIL FROM: <[EMAIL PROTECTED]>
Wed 2007-06-27 14:43:41: --> 250 <[EMAIL PROTECTED]>, Sender ok
Wed 2007-06-27 14:43:41: <-- RCPT TO: <[EMAIL PROTECTED]>
Wed 2007-06-27 14:43:41: --> 250 <[EMAIL PROTECTED]>, Recipient ok
Wed 2007-06-27 14:43:41: <-- DATA
Wed 2007-06-27 14:43:41: Creating temp file (SMTP):
d:\mdaemon\temp\md50001489251.tmp
Wed 2007-06-27 14:43:41: --> 354 Enter mail, end with <CRLF>.<CRLF>
Wed 2007-06-27 14:43:42: Message size: 23388 bytes
Wed 2007-06-27 14:43:42: Passing message through AntiVirus (Size: 23388)...
Wed 2007-06-27 14:43:42: * Message is clean (no viruses found)
Wed 2007-06-27 14:43:42: ---- End AntiVirus results
Wed 2007-06-27 14:43:42: Message creation successful:
d:\mdaemon\inbound\md50002861998.msg
Wed 2007-06-27 14:43:42: --> 250 Ok, message saved <Message-ID:
[EMAIL PROTECTED]>
Wed 2007-06-27 14:43:44: <-- QUIT
Wed 2007-06-27 14:43:44: --> 221 See ya in cyberspace
Wed 2007-06-27 14:43:44: SMTP session successful (Bytes in/out: 107039/1068)
Wed 2007-06-27 14:43:44: ----------
-----------------------------
ketiga email diatas tidak dikirim oleh yang bersangkutan, tapi oleh
email client bersangkutan, dan hal ini baru terjadi 2 hari terakhir dan
waktunya random. Email client yang bersangkutan sudah dicek auto forward
dan rulesnya..tidak ada yang aneh.
Solusi saat ini hanyalah install email clientnya.
Thanks atas perhatiannya
--
Herman
--
--[MDaemon-L]------------------------------------------------
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server.
Mohon tidak posting dengan format HTML, pastikan selalu menggunakan Format
Plain-text
Arsip : <http://mdaemon-l.dutaint.com>
Henti Langgan : <mailto:[EMAIL PROTECTED]>
Berlangganan : <mailto:[EMAIL PROTECTED]>
Versi Terakhir : MD 9.6.0, MDSP 3.0.4, MDOC 2.1.5
