> > Tidak ada batasan untuk saat ini. Baik. > > Server yang mana? > Pakai MDaemon versi berapa? Server MDaemon, saat ini msh versi 18.0.6
> Apa itu abusedipdb.com? Situs yang saat ini saya gunakan untuk verifikasi apakah suatu IP yang ketangkap error login di log SMTP(in) atau pun log POP3 di MDaemon itu, IP yang memang verified mencoba abused (hacked) ke MDaemon atau hanya tidak sengaja masuk. Contohnya log SMTP-in berikut: Fri 2024-01-19 00:05:47.850: Session 563512; child 0001 Fri 2024-01-19 00:05:47.850: Accepting SMTP connection from 134.249.44.8:13266 to 172.16.24.23:587 Fri 2024-01-19 00:05:47.851: --> 220 mail.anjhealthcare.com ESMTP MSA Fri, 19 Jan 2024 00:05:47 +0700 Fri 2024-01-19 00:05:48.048: <-- EHLO BZ3a8FtDn Fri 2024-01-19 00:05:48.048: --> 250-mail.anjhealthcare.com Hello BZ3a8FtDn [134.249.44.8], pleased to meet you Fri 2024-01-19 00:05:48.048: --> 250-AUTH LOGIN CRAM-MD5 PLAIN Fri 2024-01-19 00:05:48.048: --> 250-8BITMIME Fri 2024-01-19 00:05:48.048: --> 250-ENHANCEDSTATUSCODES Fri 2024-01-19 00:05:48.048: --> 250-STARTTLS Fri 2024-01-19 00:05:48.048: --> 250 SIZE Fri 2024-01-19 00:05:48.244: <-- STARTTLS Fri 2024-01-19 00:05:48.244: --> 220 2.7.0 Ready to start TLS Fri 2024-01-19 00:05:48.642: SSL negotiation successful (TLS 1.2, 256 bit key exchange, 256 bit AES encryption) Fri 2024-01-19 00:05:48.838: <-- EHLO BZ3a8FtDn Fri 2024-01-19 00:05:48.838: --> 250-mail.anjhealthcare.com Hello BZ3a8FtDn [134.249.44.8], pleased to meet you Fri 2024-01-19 00:05:48.838: --> 250-AUTH LOGIN CRAM-MD5 PLAIN Fri 2024-01-19 00:05:48.838: --> 250-8BITMIME Fri 2024-01-19 00:05:48.838: --> 250-ENHANCEDSTATUSCODES Fri 2024-01-19 00:05:48.838: --> 250 SIZE Fri 2024-01-19 00:05:49.034: <-- AUTH LOGIN Fri 2024-01-19 00:05:49.034: --> 334 VXNlcm5hbWU6 Fri 2024-01-19 00:05:49.231: <-- aGVuZ2dhLmhpdGNoY29ja0BhbmpoZWFsdGhjYXJlLmNvbQ== Fri 2024-01-19 00:05:49.231: --> 334 UGFzc3dvcmQ6 Fri 2024-01-19 00:05:49.426: <-- ****** Fri 2024-01-19 00:05:49.426: Authenticating [email protected]... Fri 2024-01-19 00:05:49.632: Incorrect password Fri 2024-01-19 00:05:49.632: **** ALERT **** Failed SMTP authentication attempt from 134.249.44.8 for "[email protected]" [EvSecurity] Fri 2024-01-19 00:05:49.836: --> 535 5.7.8 Authentication failed Fri 2024-01-19 00:05:50.036: * Socket error 590615 - The sender has finished using the connection and has initiated a shutdown. Fri 2024-01-19 00:05:50.037: SMTP session terminated (Bytes in/out: 1020/2413) Fri 2024-01-19 00:05:50.037: ---------- IP 134.249.44.8 yang masuk sebagai akun saya, akan saya cek di https://www.abuseipdb.com/check/134.249.44.8, dan hasilnya jika confirmed Abuse, saya akan masukkanIP itu ke IP Screening. > > Umumnya MDaemon user sudah merasa cukup dengan Dynamic Screening, > iPscreen jarang dipakai kecuali memang sangat terpaksa misalkan memblock > local private IP dijaringan sendiri. Benar pak. Sebenarnya Dynamic Screening sangat membantu. Salam, Hengga -- --[mdaemon-l]---------------------------------------------------------- Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette Arsip: http://mdaemon-l.dutaint.com Dokumentasi : http://mdaemon.dutaint.com Berlangganan: Kirim mail ke [email protected] Henti Langgan: Kirim mail ke [email protected] Versi terakhir: MDaemon 23.5.1, SecurityGateway 9.5.2
