On 16/11/17 08:50, Ivan wrote: > - Dynamic Screen = SMTP Screen di ver 17.5.1 ? > - Di Dynamic Screen luar biasa kemarin 335.372 attack dlm 1 hari, ini apakah > list IP disimpan dan proses yg kerja Location screen atau smtp screen ?
Di dynamic blacklist. http://mdaemon.dutaint.co.id/mdaemon/17.5/index.html?dynamic-screening_dynamic-blacklist.htm The Dynamic Blacklist contains the list of IP addresses or address ranges that will be blocked by the Dynamic Screening service when they attempt to connect to MDaemon. Addresses can be added automatically by the Auth Failure Tracking and SMTP Screen options, and added manually by clicking the Add button. Each entry contains the IP address or range, the date and time that the entry will expire (or "Never," if it won't expire), any comment that you wish to make about the entry, and an Object ID. Location screening tidak ada reportnya, harus lihat di smtp-in log. Location screening hanya mencegah authentication attempt dari countries yang terfilter. > - Flow process screenning apakah : jika IP sudah diblock oleh Location screen > apakah masih lanjut di cek oleh Dynamic/SMTP screen ? Ya. > - List IP di Dynamic Blacklist di Dynamic screening menu apakah sifatnya > blocked > permanent atau temporary ? Temporary, tetapi kalau diulang oleh IP yang sama akan kena penalti. http://mdaemon.dutaint.co.id/mdaemon/17.5/index.html?dynamic-screening_auth-failure-tracking.htm Multiple Offense Penalties This is the amount of time that an IP address or IP address range will be blocked by the Dynamic Screening system when it fails the specified number of authentication attempts. By default the amount of time that the IP address is blocked increases with each subsequent offense. That is, by default if an IP address violates the authentication failure limit, it will be blocked for one day. Then if that same IP address subsequently violates the limit again, it will be blocked for two days. The length of penalty will be increased each time until it maxes out at the fourth offense penalty. -- syafril ------- Syafril Hermansyah MDaemon-L Moderators, running MDaemon 17.5.1-64, SP 5.5-64 Harap tidak cc: atau kirim ke private mail untuk masalah MDaemon. The more that you read, the more things you will know. The more that you learn, the more places you'll go. --- Dr. Seuss, I Can Read With My Eyes Shut! -- --MDaemon-L---------------------------------------------------------- Milis ini untuk Diskusi antar pengguna MDaemon Mail Server. Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette Arsip: http://mdaemon-l.dutaint.com Dokumentasi : http://mdaemon.dutaint.co.id Henti Langgan: Kirim mail ke [email protected] Versi terakhir MD 17.5.1, SP 5.5, OC 5.0, SG 5.0
