Dear pa Syafril, Met malem pak...met taun baru 2013. Dah lama saya jarang tanya2x, sekarang baru tanya lagi. Begini pak, saya dapet email (fake mail) yg seolah-oleh dikirim dari internal mail ([email protected]) ke luar. Akhirnya account itu saya freeze dulu, trus baru ganti passwordnya.
Yang saya ingin tanyakan, apakah memang dari email tersebut passwordnya open/ terlalu mudah atau ada settingan untuk security saya yg kurang OK pak ? Apakah saya boleh minta checklist (lagi ) pak untuk security yg saya perlu cek n re check dimail server saya? Berikut saya sertakan juga sepenggal log smtp-out pada saat kejadian, karena selama ini saya sudah mencoba untuk mengikuti saran-saran bapak untuk authentikasi mail server dan sepertinya ada yg (kelewat) di sisi saya. Fri 2013-01-04 00:00:42: [835001:2] Parsing message <d:\mdaemon\queues\remote\pd35000220049.msg> Fri 2013-01-04 00:00:42: [835001:2] * From: [email protected] Fri 2013-01-04 00:00:42: [835001:2] * To: [email protected] Fri 2013-01-04 00:00:42: [835001:2] * Subject: =?utf-8?B?Ym93ZWkuNTIxLOiwgeivtOS+v+WunOayoeWlvei0p++8gQ==?= Fri 2013-01-04 00:00:42: [835001:2] * Size (bytes): 3732 Fri 2013-01-04 00:00:42: [835001:2] * Message-ID: <6855AC175DF1EF7CF1CBE176856DEF61@peq> Fri 2013-01-04 00:00:42: [835001:2] Attempting SMTP connection to [qq.com] Fri 2013-01-04 00:00:42: [835001:2] Resolving MX records for [qq.com] (DNS Server: 61.8.70.58)... Fri 2013-01-04 00:00:42: [835001:2] * P=010 S=001 D=qq.com TTL=(117) MX=[mx3.qq.com] Fri 2013-01-04 00:00:42: [835001:2] * P=020 S=002 D=qq.com TTL=(117) MX=[mx2.qq.com] Fri 2013-01-04 00:00:42: [835001:2] * P=030 S=000 D=qq.com TTL=(117) MX=[mx1.qq.com] Fri 2013-01-04 00:00:42: [835001:2] Attempting SMTP connection to [mx3.qq.com:25] Fri 2013-01-04 00:00:42: [835001:2] * Cache hit on mx3.qq.com; IP = 112.90.137.120 Fri 2013-01-04 00:00:42: [835001:2] Waiting for socket connection... Fri 2013-01-04 00:00:42: [835001:2] * Connection established (202.152.63.126:53433 -> 112.90.137.120:25) Fri 2013-01-04 00:00:42: [835001:2] Waiting for protocol to start... Fri 2013-01-04 00:00:42: [835001:2] <-- 220 newmx86.qq.com MX QQ Mail Server Fri 2013-01-04 00:00:42: [835001:2] --> EHLO yomart-minimarket.com Fri 2013-01-04 00:00:42: [835001:2] <-- 250-newmx86.qq.com Fri 2013-01-04 00:00:42: [835001:2] <-- 250-SIZE 73400320 Fri 2013-01-04 00:00:42: [835001:2] <-- 250 OK Fri 2013-01-04 00:00:43: [835001:2] --> MAIL From:<[email protected]> SIZE=3732 Fri 2013-01-04 00:00:43: [835001:2] <-- 250 Ok Fri 2013-01-04 00:00:43: [835001:2] --> RCPT To:<[email protected]> Fri 2013-01-04 00:00:43: [835001:2] <-- 250 Ok Fri 2013-01-04 00:00:43: [835001:2] --> DATA Fri 2013-01-04 00:00:43: [835001:2] <-- 354 End data with <CR><LF>.<CR><LF> Fri 2013-01-04 00:00:43: [835001:2] Sending <d:\mdaemon\queues\remote\pd35000220049.msg> to [112.90.137.120] Fri 2013-01-04 00:00:43: [835001:2] Transfer Complete Fri 2013-01-04 00:00:43: [835001:2] <-- 550 Mail content denied. http://service.mail.qq.com/cgi-bin/help?subtype=1&&id=20022&&no=1000726 Fri 2013-01-04 00:00:43: [835001:2] --> QUIT Fri 2013-01-04 00:00:44: [835001:2] <-- 221 Bye Fri 2013-01-04 00:00:44: [835001:2] SMTP session terminated (Bytes in/out: 245/3882) Fri 2013-01-04 00:00:44: ---------- Terima kasih atas bantuannya dan masukannya. tommy -- --[MDaemon-L]------------------------------------------------ Milis ini untuk Diskusi antar pengguna MDaemon Mail Server. Netiket: <http://www.netmeister.org/news/learn2quote> Arsip: <http://mdaemon-l.dutaint.com> Dokumentasi : <http://mdaemon.dutaint.co.id> Henti Langgan: Kirim mail ke MDaemon-L-unsubscribe [at] dutaint.com Berlangganan: kirim mail ke MDaemon-L-subscribe [at] dutaint.com Versi terakhir MD 13.0.3, SP 4.1.5, BES 2.0.1, OC 2.3.0, SG 2.0.8, PP 2.0.0 [ attachment or non Plain-Text portion has been remove by MDaemon ]
