2015-07-07 15:55 GMT+07:00 Syafril Hermansyah <[email protected]>:

> On 07/07/15 15:18, Shakir Salim wrote:
> > maksudnya session log yang diambil session log secara acak atau yang
> > berkaitan dengan permasalahan?
>
> >Yang dicari adalah log yang memperlihatkan "menerima koneksi dari server
> >asing menerus ...", yang diduga "... berdampak pada pemakaian memory
> >hingga mencapai 99%".
>
> berikut saya lampirkan session log smtp-in dari IP 185.30.176.xxx -
185.30.177.xxx (netherland)

>
>
> --
> --[MDaemon-L]------------------------------------------------
> Milis ini untuk Diskusi antar pengguna MDaemon Mail Server.
>
> Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
> Arsip: http://mdaemon-l.dutaint.com
> Dokumentasi : http://mdaemon.dutaint.co.id
> Henti Langgan: Kirim mail ke MDaemon-L-unsubscribe [at] dutaint.com
> Berlangganan: kirim mail ke MDaemon-L-subscribe [at] dutaint.com
> Versi terakhir MD 15.0.3, SP 4.5.1, BES 2.0.2, OC 3.5, SG 3.0.2
>
>
Mon 2015-07-06 02:33:45.549: [748950] Session 748950; child 0004
Mon 2015-07-06 02:33:45.549: [748950] Accepting SMTP connection from 
185.30.177.36:51679 to 202.146.0.67:25
Mon 2015-07-06 02:33:45.552: [748950] --> 220 mail.kompas.tv ESMTP MDaemon 
15.0.1; Mon, 06 Jul 2015 02:33:45 +0700
Mon 2015-07-06 02:33:45.899: [748950] <-- EHLO f12.my.com
Mon 2015-07-06 02:33:45.899: [748950] --> 250-mail.kompas.tv Hello f12.my.com, 
pleased to meet you
Mon 2015-07-06 02:33:45.899: [748950] --> 250-ETRN
Mon 2015-07-06 02:33:45.899: [748950] --> 250-AUTH LOGIN CRAM-MD5 PLAIN
Mon 2015-07-06 02:33:45.899: [748950] --> 250-8BITMIME
Mon 2015-07-06 02:33:45.899: [748950] --> 250-ENHANCEDSTATUSCODES
Mon 2015-07-06 02:33:45.899: [748950] --> 250 SIZE 71680000
Mon 2015-07-06 02:33:46.256: [748950] <-- AUTH PLAIN ******
Mon 2015-07-06 02:33:46.257: [748950] --> 235 2.7.0 Authentication successful
Mon 2015-07-06 02:33:46.257: [748950] Authenticated as [email protected]
Mon 2015-07-06 02:33:46.587: [748950] <-- MAIL FROM:<[email protected]> 
SIZE=5196
Mon 2015-07-06 02:33:46.588: [748950] --> 250 2.1.0 Sender OK
Mon 2015-07-06 02:33:46.923: [748950] <-- RCPT TO:<[email protected]>
Mon 2015-07-06 02:33:46.924: [748950] --> 250 2.1.5 Recipient OK
Mon 2015-07-06 02:33:47.268: [748950] <-- DATA
Mon 2015-07-06 02:33:47.269: [748950] Creating temp file (SMTP): 
c:\mdaemon\queues\temp\md50000370445.tmp
Mon 2015-07-06 02:33:47.269: [748950] --> 354 Enter mail, end with <CRLF>.<CRLF>
Mon 2015-07-06 02:33:48.130: [748950] Message size: 3883 bytes
Mon 2015-07-06 02:33:48.134: [748950] Passing message through AntiVirus (Size: 
3883)...
Mon 2015-07-06 02:33:48.144: [748950] *  Message is clean (no viruses found)
Mon 2015-07-06 02:33:48.144: [748950] ---- End AntiVirus results
Mon 2015-07-06 02:33:48.515: [748950] Message creation successful: 
c:\mdaemon\queues\inbound\md50000144807.msg
Mon 2015-07-06 02:33:48.515: [748950] --> 250 2.6.0 Ok, message saved 
<Message-ID: <[email protected]>>
Mon 2015-07-06 02:33:48.708: [748950] <-- QUIT
Mon 2015-07-06 02:33:48.708: [748950] --> 221 2.0.0 See ya in cyberspace
Mon 2015-07-06 02:33:48.708: [748950] SMTP session successful (Bytes in/out: 
4055/462)
Mon 2015-07-06 02:33:48.708: ----------
Mon 2015-07-06 02:34:13.347: [748971] Session 748971; child 0004
Mon 2015-07-06 02:34:13.347: [748971] Accepting SMTP connection from 
10.209.21.37:26079 to 10.209.48.20:25
Mon 2015-07-06 02:34:13.348: [748971] --> 220 mail.kompas.tv ESMTP MDaemon 
15.0.1; Mon, 06 Jul 2015 02:34:13 +0700
Mon 2015-07-06 02:34:13.349: [748971] <-- HELO 10.209.21.37
Mon 2015-07-06 02:34:13.349: [748971] --> 250 mail.kompas.tv Hello 
10.209.21.37, pleased to meet you
Mon 2015-07-06 02:34:13.350: [748971] <-- MAIL FROM: [email protected]
Mon 2015-07-06 02:34:13.350: [748971] --> 530 5.7.0 Authentication required to 
send mail from 10.209.21.37
Mon 2015-07-06 02:34:13.350: [748971] <-- QUIT
Mon 2015-07-06 02:34:13.351: [748971] --> 221 2.0.0 See ya in cyberspace
Mon 2015-07-06 02:34:13.351: [748971] SMTP session terminated (Bytes in/out: 
56/232)

Mon 2015-07-06 10:57:19.660: [778186] Session 778186; child 0008
Mon 2015-07-06 10:57:19.660: [778186] Accepting SMTP connection from 
185.30.177.43:40922 to 202.146.0.67:25
Mon 2015-07-06 10:57:19.660: [778186] --> 220 mail.kompas.tv ESMTP MDaemon 
15.0.1; Mon, 06 Jul 2015 10:57:19 +0700
Mon 2015-07-06 10:57:20.792: [778186] <-- EHLO f19.my.com
Mon 2015-07-06 10:57:20.792: [778186] --> 250-mail.kompas.tv Hello f19.my.com, 
pleased to meet you
Mon 2015-07-06 10:57:20.792: [778186] --> 250-ETRN
Mon 2015-07-06 10:57:20.792: [778186] --> 250-AUTH LOGIN CRAM-MD5 PLAIN
Mon 2015-07-06 10:57:20.792: [778186] --> 250-8BITMIME
Mon 2015-07-06 10:57:20.792: [778186] --> 250-ENHANCEDSTATUSCODES
Mon 2015-07-06 10:57:20.792: [778186] --> 250 SIZE 71680000
Mon 2015-07-06 10:57:21.077: [778186] <-- AUTH PLAIN ******
Mon 2015-07-06 10:57:21.079: [778186] --> 235 2.7.0 Authentication successful
Mon 2015-07-06 10:57:21.079: [778186] Authenticated as [email protected]
Mon 2015-07-06 10:57:21.356: [778186] <-- MAIL FROM:<[email protected]> 
SIZE=3415
Mon 2015-07-06 10:57:21.357: [778186] --> 250 2.1.0 Sender OK
Mon 2015-07-06 10:57:21.642: [778186] <-- RCPT TO:<[email protected]>
Mon 2015-07-06 10:57:21.660: [778186] --> 250 2.1.5 Recipient OK
Mon 2015-07-06 10:57:21.936: [778186] <-- DATA
Mon 2015-07-06 10:57:21.937: [778186] Creating temp file (SMTP): 
c:\mdaemon\queues\temp\md50000381085.tmp
Mon 2015-07-06 10:57:21.937: [778186] --> 354 Enter mail, end with <CRLF>.<CRLF>
Mon 2015-07-06 10:57:22.228: [778186] Message size: 2098 bytes
Mon 2015-07-06 10:57:22.236: [778186] Passing message through AntiVirus (Size: 
2098)...
Mon 2015-07-06 10:57:22.453: [778186] *  Message is clean (no viruses found)
Mon 2015-07-06 10:57:22.453: [778186] ---- End AntiVirus results
Mon 2015-07-06 10:57:22.785: [778186] Message creation successful: 
c:\mdaemon\queues\inbound\md50000145655.msg
Mon 2015-07-06 10:57:22.785: [778186] --> 250 2.6.0 Ok, message saved 
<Message-ID: <[email protected]>>
Mon 2015-07-06 10:57:22.911: [778186] <-- QUIT
Mon 2015-07-06 10:57:22.911: [778186] --> 221 2.0.0 See ya in cyberspace
Mon 2015-07-06 10:57:22.911: [778186] SMTP session successful (Bytes in/out: 
2270/462)
Mon 2015-07-06 10:57:22.911: ----------
Mon 2015-07-06 10:57:28.174: [778200] Session 778200; child 0008
Mon 2015-07-06 10:57:28.174: [778200] Accepting SMTP connection from 
10.209.21.37:60630 to 10.209.48.20:25
Mon 2015-07-06 10:57:28.174: [778200] --> 220 mail.kompas.tv ESMTP MDaemon 
15.0.1; Mon, 06 Jul 2015 10:57:28 +0700
Mon 2015-07-06 10:57:28.175: [778200] <-- HELO 10.209.21.37
Mon 2015-07-06 10:57:28.176: [778200] --> 250 mail.kompas.tv Hello 
10.209.21.37, pleased to meet you
Mon 2015-07-06 10:57:28.177: [778200] <-- MAIL FROM: [email protected]
Mon 2015-07-06 10:57:28.177: [778200] --> 530 5.7.0 Authentication required to 
send mail from 10.209.21.37
Mon 2015-07-06 10:57:28.179: [778200] <-- QUIT
Mon 2015-07-06 10:57:28.179: [778200] --> 221 2.0.0 See ya in cyberspace
Mon 2015-07-06 10:57:28.179: [778200] SMTP session terminated (Bytes in/out: 
56/232)

Mon 2015-07-06 11:11:40.573: [779412] Session 779412; child 0008
Mon 2015-07-06 11:11:40.573: [779412] Accepting SMTP connection from 
185.30.177.91:55906 to 202.146.0.67:25
Mon 2015-07-06 11:11:40.573: [779412] --> 220 mail.kompas.tv ESMTP MDaemon 
15.0.1; Mon, 06 Jul 2015 11:11:40 +0700
Mon 2015-07-06 11:11:41.786: [779412] <-- EHLO f29.my.com
Mon 2015-07-06 11:11:41.789: [779412] --> 250-mail.kompas.tv Hello f29.my.com, 
pleased to meet you
Mon 2015-07-06 11:11:41.789: [779412] --> 250-ETRN
Mon 2015-07-06 11:11:41.789: [779412] --> 250-AUTH LOGIN CRAM-MD5 PLAIN
Mon 2015-07-06 11:11:41.789: [779412] --> 250-8BITMIME
Mon 2015-07-06 11:11:41.789: [779412] --> 250-ENHANCEDSTATUSCODES
Mon 2015-07-06 11:11:41.789: [779412] --> 250 SIZE 71680000
Mon 2015-07-06 11:11:42.133: [779412] <-- AUTH PLAIN ******
Mon 2015-07-06 11:11:42.134: [779412] --> 235 2.7.0 Authentication successful
Mon 2015-07-06 11:11:42.134: [779412] Authenticated as 
[email protected]
Mon 2015-07-06 11:11:42.470: [779412] <-- MAIL 
FROM:<[email protected]> SIZE=18409
Mon 2015-07-06 11:11:42.471: [779412] --> 250 2.1.0 Sender OK
Mon 2015-07-06 11:11:42.818: [779412] <-- RCPT TO:<[email protected]>
Mon 2015-07-06 11:11:42.871: [779412] --> 250 2.1.5 Recipient OK
Mon 2015-07-06 11:11:43.210: [779412] <-- RCPT TO:<[email protected]>
Mon 2015-07-06 11:11:43.211: [779412] --> 250 2.1.5 Recipient OK
Mon 2015-07-06 11:11:43.546: [779412] <-- RCPT TO:<[email protected]>
Mon 2015-07-06 11:11:43.547: [779412] --> 250 2.1.5 Recipient OK
Mon 2015-07-06 11:11:43.887: [779412] <-- RCPT TO:<[email protected]>
Mon 2015-07-06 11:11:43.888: [779412] --> 250 2.1.5 Recipient OK
Mon 2015-07-06 11:11:44.227: [779412] <-- DATA
Mon 2015-07-06 11:11:44.227: [779412] Creating temp file (SMTP): 
c:\mdaemon\queues\temp\md50000381494.tmp
Mon 2015-07-06 11:11:44.227: [779412] --> 354 Enter mail, end with <CRLF>.<CRLF>
Mon 2015-07-06 11:11:44.935: [779412] Message size: 17119 bytes
Mon 2015-07-06 11:11:44.944: [779412] Passing message through AntiVirus (Size: 
17119)...
Mon 2015-07-06 11:11:44.953: [779412] *  Message is clean (no viruses found)
Mon 2015-07-06 11:11:44.953: [779412] ---- End AntiVirus results
Mon 2015-07-06 11:11:45.337: [779412] Message creation successful: 
c:\mdaemon\queues\inbound\md50000145728.msg
Mon 2015-07-06 11:11:45.337: [779412] --> 250 2.6.0 Ok, message saved 
<Message-ID: <[email protected]>>
Mon 2015-07-06 11:11:45.378: [779412] <-- QUIT
Mon 2015-07-06 11:11:45.378: [779412] --> 221 2.0.0 See ya in cyberspace
Mon 2015-07-06 11:11:45.378: [779412] SMTP session successful (Bytes in/out: 
17386/534)
Mon 2015-07-06 11:11:45.378: ----------
Mon 2015-07-06 11:11:41.928: [779453] Session 779453; child 0014
Mon 2015-07-06 11:11:41.928: [779453] Accepting SMTP connection from 
10.209.58.226:57075 to 10.209.48.20:25
Mon 2015-07-06 11:11:41.928: [779453] --> 220 mail.kompas.tv ESMTP MDaemon 
15.0.1; Mon, 06 Jul 2015 11:11:41 +0700
Mon 2015-07-06 11:11:41.932: [779453] <-- EHLO [10.209.58.226]
Mon 2015-07-06 11:11:41.935: [779453] --> 250-mail.kompas.tv Hello 
[10.209.58.226], pleased to meet you
Mon 2015-07-06 11:11:41.935: [779453] --> 250-ETRN
Mon 2015-07-06 11:11:41.935: [779453] --> 250-AUTH LOGIN CRAM-MD5 PLAIN
Mon 2015-07-06 11:11:41.935: [779453] --> 250-8BITMIME
Mon 2015-07-06 11:11:41.935: [779453] --> 250-ENHANCEDSTATUSCODES
Mon 2015-07-06 11:11:41.935: [779453] --> 250 SIZE 71680000
Mon 2015-07-06 11:11:41.953: [779453] <-- MAIL FROM: <[email protected]>
Mon 2015-07-06 11:11:41.953: [779453] --> 530 5.7.0 Authentication required to 
send mail from 10.209.58.226
Mon 2015-07-06 11:11:45.581: [779453] Connection closed
Mon 2015-07-06 11:11:45.581: [779453] SMTP session terminated (Bytes in/out: 
62/303)

Kirim email ke