> Ada kemungkinan begitu, bisa karena sengaja atau sender terkena worm > virus atau firewall Anda yang melakukan closed (tcp) connection secara > premature sehingga sender retry to send karena dianggap ada connection > problem.
Saya sudah cek computer usernya Pak, dan sepertinya tidak ada virus atau worm, lagian sampai pagi tadi cpu masih mati > Coba perlihatkan salah satu transaksinya di smtp-in log mungkin ada > petunjuk dari situ. Ini log dari smtp in nya Pak sbb : Tue 2010-11-09 08:49:54: ---------- Tue 2010-11-09 08:49:58: Session 3302; child 5; thread 3768 Tue 2010-11-09 08:49:35: Accepting SMTP connection from [65.75.241.94 : 52577] Tue 2010-11-09 08:49:35: Performing PTR lookup (94.241.75.65.IN-ADDR.ARPA) Tue 2010-11-09 08:49:45: * Error: 10 second wait for DNS response exceeded Tue 2010-11-09 08:49:45: * Error: Name server reports domain name unknown Tue 2010-11-09 08:49:45: * No PTR records found Tue 2010-11-09 08:49:45: ---- End PTR results Tue 2010-11-09 08:49:45: --> 220 trubacs.com ESMTP MDaemon 9.0.4; Tue, 09 Nov 2010 08:49:45 +0700 Tue 2010-11-09 08:49:45: <-- EHLO User Tue 2010-11-09 08:49:45: Performing IP lookup (User) Tue 2010-11-09 08:49:55: * Error: 10 second wait for DNS response exceeded Tue 2010-11-09 08:49:55: * Error: Name server reports domain name unknown Tue 2010-11-09 08:49:55: ---- End IP lookup results Tue 2010-11-09 08:49:55: --> 250-trubacs.com Hello User, pleased to meet you Tue 2010-11-09 08:49:55: --> 250-ETRN Tue 2010-11-09 08:49:55: --> 250-AUTH=LOGIN Tue 2010-11-09 08:49:55: --> 250-AUTH LOGIN CRAM-MD5 Tue 2010-11-09 08:49:55: --> 250-8BITMIME Tue 2010-11-09 08:49:55: --> 250 SIZE 0 Tue 2010-11-09 08:49:57: <-- AUTH LOGIN Tue 2010-11-09 08:49:57: --> 334 VXNlcm5hbWU6 Tue 2010-11-09 08:49:57: <-- YW5pdGE= Tue 2010-11-09 08:49:57: --> 334 UGFzc3dvcmQ6 Tue 2010-11-09 08:49:57: <-- ****** Tue 2010-11-09 08:49:57: --> 235 Authentication successful Tue 2010-11-09 08:49:57: Authenticated as [email protected] Tue 2010-11-09 08:49:58: <-- RSET Tue 2010-11-09 08:49:58: --> 250 RSET? Well, ok. Tue 2010-11-09 08:49:58: <-- MAIL FROM:<[email protected]> Tue 2010-11-09 08:49:58: --> 550 <[email protected]>, Sender unknown Tue 2010-11-09 08:49:58: [email protected] account is currently disabled Tue 2010-11-09 08:49:58: Connection closed Tue 2010-11-09 08:49:58: SMTP session terminated (Bytes in/out: 80/325) Tue 2010-11-09 08:49:58: ---------- > Masukkan IP tersebut ke address blacklist. kalau settingan untuk yang ver 9 gimana ya Pak? -----Original Message----- From: [email protected] [mailto:[email protected]] On Behalf Of Syafril Hermansyah Sent: Tuesday, November 09, 2010 8:34 AM To: [email protected] Subject: [MDaemon-L] reject IP address tertentu Rinno Petra Amzar - IT wrote on 11/09/2010 08:20 AM +07:00: > Pagi ini mail server kami menerima email sangat banyak (sekitar 80.000 an) > kesalah satu user [email protected] yang kalau saya cek IP addressnya dari > 65.75.241.94 apa ini kena bom email Pak? Ada kemungkinan begitu, bisa karena sengaja atau sender terkena worm virus atau firewall Anda yang melakukan closed (tcp) connection secara premature sehingga sender retry to send karena dianggap ada connection problem. Coba perlihatkan salah satu transaksinya di smtp-in log mungkin ada petunjuk dari situ. > Bagaimana setting dimail server agar setiap koneksi dari IP address > 65.75.241.94 tersebut bisa langsung direject. Masukkan IP tersebut ke address blacklist. <http://mdaemon.dutaint.co.id/11.0/index.html?security__address_suppression.htm> -- syafril ------- Syafril Hermansyah MDaemon-L Moderators, running MDaemon 12.0 Beta GM1 Harap tidak cc: atau kirim ke private mail untuk masalah MDaemon. --[MDaemon-L]------------------------------------------------ Milis ini untuk Diskusi antar pengguna MDaemon Mail Server. Netiket: <http://www.netmeister.org/news/learn2quote> Arsip: <http://mdaemon-l.dutaint.com> Henti Langgan: Kirim mail ke MDaemon-L-unsubscribe [at] dutaint.com Berlangganan: kirim mail ke MDaemon-L-subscribe [at] dutaint.com Versi terakhir MD 11.0.3, SP 4.1.2, OC 2.2.5, SG 2.0.4, PP 2.0.0 --[MDaemon-L]------------------------------------------------ Milis ini untuk Diskusi antar pengguna MDaemon Mail Server. Netiket: <http://www.netmeister.org/news/learn2quote> Arsip: <http://mdaemon-l.dutaint.com> Henti Langgan: Kirim mail ke MDaemon-L-unsubscribe [at] dutaint.com Berlangganan: kirim mail ke MDaemon-L-subscribe [at] dutaint.com Versi terakhir MD 11.0.3, SP 4.1.2, OC 2.2.5, SG 2.0.4, PP 2.0.0
