pak syafril, kami mendapatkan spam dengan log ini :
Thu 2018-08-09 04:49:32.428: ---------- Thu 2018-08-09 04:49:34.362: [315122] Session 315122; child 0002 Thu 2018-08-09 04:49:34.362: [315122] Accepting SMTP connection from 192.168.51.1:34178 to 10.8.40.3:25 Thu 2018-08-09 04:49:34.364: [315122] --> 220 mail.kompas.tv ESMTP MDaemon 17.0.2; Thu, 09 Aug 2018 04:49:34 +0700 Thu 2018-08-09 04:49:34.543: [315122] <-- EHLO mx1.hussong.biz Thu 2018-08-09 04:49:34.543: [315122] --> 250-mail.kompas.tv Hello mx1.hussong.biz [192.168.51.1], pleased to meet you Thu 2018-08-09 04:49:34.543: [315122] --> 250-ETRN Thu 2018-08-09 04:49:34.543: [315122] --> 250-AUTH LOGIN CRAM-MD5 PLAIN Thu 2018-08-09 04:49:34.543: [315122] --> 250-8BITMIME Thu 2018-08-09 04:49:34.543: [315122] --> 250-ENHANCEDSTATUSCODES Thu 2018-08-09 04:49:34.543: [315122] --> 250 SIZE 20480000 Thu 2018-08-09 04:49:34.722: [315122] <-- MAIL FROM:<[email protected]> SIZE=2232 BODY=7BIT Thu 2018-08-09 04:49:34.723: [315122] --> 250 2.1.0 Sender OK Thu 2018-08-09 04:49:34.902: [315122] <-- RCPT TO:<[email protected]> Thu 2018-08-09 04:49:34.903: [315122] --> 250 2.1.5 Recipient OK Thu 2018-08-09 04:49:35.081: [315122] <-- RCPT TO:<[email protected]> Thu 2018-08-09 04:49:35.088: [315122] --> 250 2.1.5 Recipient OK Thu 2018-08-09 04:49:35.269: [315122] <-- RCPT TO:<[email protected]> Thu 2018-08-09 04:49:35.344: [315122] --> 250 2.1.5 Recipient OK Thu 2018-08-09 04:49:35.523: [315122] <-- DATA Thu 2018-08-09 04:49:35.524: [315122] Creating temp file (SMTP): c:\mdaemon\queues\temp\md50000108616.tmp Thu 2018-08-09 04:49:35.524: [315122] --> 354 Enter mail, end with <CRLF>.<CRLF> Thu 2018-08-09 04:49:35.757: [315122] Message size: 2231 bytes Thu 2018-08-09 04:49:35.767: [315122] Passing message through AntiVirus (Size: 2231)... Thu 2018-08-09 04:49:35.776: [315122] * Message is clean (no viruses found) Thu 2018-08-09 04:49:35.776: [315122] ---- End AntiVirus results Thu 2018-08-09 04:49:35.893: [315122] Passing message through Outbreak Protection... Thu 2018-08-09 04:49:35.893: [315122] * Message-ID: < [email protected]> Thu 2018-08-09 04:49:35.894: [315122] * Reference-ID: str=0001.0A150209.5B6B657C.0070,ss=1,re=0.000,recu=0.000,reip=0.000,cl=1,cld=1,fgs=0 Thu 2018-08-09 04:49:35.894: [315122] * Virus result: 0 - Clean Thu 2018-08-09 04:49:35.894: [315122] * Spam result: 1 - Clean Thu 2018-08-09 04:49:35.894: [315122] * IWF result: 0 - Clean Thu 2018-08-09 04:49:35.894: [315122] ---- End Outbreak Protection results Thu 2018-08-09 04:49:35.895: [315122] Passing message through Spam Filter (Size: 2231)... Thu 2018-08-09 04:49:35.957: [315122] * 0.0 HTML_MESSAGE BODY: HTML included in message Thu 2018-08-09 04:49:35.957: [315122] * 1.6 FORGED_MUA_MOZILLA Forged mail pretending to be from Mozilla Thu 2018-08-09 04:49:35.957: [315122] ---- End SpamAssassin results Thu 2018-08-09 04:49:35.957: [315122] Spam Filter score/req: 1.60/12.0 Thu 2018-08-09 04:49:35.959: [315122] Message creation successful: c:\mdaemon\queues\inbound\md50001876777.msg Thu 2018-08-09 04:49:35.959: [315122] --> 250 2.6.0 Ok, message saved <Message-ID: <[email protected]>> Thu 2018-08-09 04:49:36.137: [315122] <-- QUIT Thu 2018-08-09 04:49:36.137: [315122] --> 221 2.0.0 See ya in cyberspace Thu 2018-08-09 04:49:36.137: [315122] SMTP session successful (Bytes in/out: 2411/509) Thu 2018-08-09 04:49:36.137: ---------- apakah yang harus kami lakukan selain melakukan blacklist terhadap domain tersebut. terima kasih salam, ardiansyah -- --[mdaemon-l]---------------------------------------------------------- Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette Arsip: http://mdaemon-l.dutaint.com Dokumentasi : http://mdaemon.dutaint.co.id Berlangganan: Kirim mail ke [email protected] Henti Langgan: Kirim mail ke [email protected] Versi terakhir MD 18.0.2, SG 5.5.0
