On 3/16/26 14:39, Rievo Niemrod Efraim via Mdaemon-L wrote:
Sat 2026-03-14 19:33:50.207: ----------
Sat 2026-03-14 19:34:23.710: [62059231] Session 62059231; child 0002
Sat 2026-03-14 19:34:23.710: [62059231] Accepting SMTP connection from 
172.16.20.30:39709 to 172.16.0.6:25
Sat 2026-03-14 19:34:23.711: [62059231] --> 220 bb.ptbmi.com ESMTP MDaemon 
25.5.2; Sat, 14 Mar 2026 19:34:23 +0700
Sat 2026-03-14 19:34:23.933: [62059231] <-- EHLO 
mail.gasplurryfarm-itech.abrdns.com


Ini spammernya dari local LAN.
Apakah menu berikut tidak aktif?

https://mdaemon.dutaint.com/mdaemon/25.5.0/security--smtp_authentication.html

[x] Authentication is always required when mail is from local accounts
        [ ] ...unless message is to a local account

[x] Authentication is always required when mail is sent from local IPs

[x] Credentials used must match those of the return-path address
[x] Credentials used must match those of the 'From:' header address

periksa isi "Exempt list"

juga periksa

https://mdaemon.dutaint.com/mdaemon/25.5.0/security--send-as-permissions.html

apakah ada isinya?


Ip 172.16.20.30 itu adalah perangkat firewall kami yang baru di pasang

Kok aneh ya,


Itu artinya firewall yang tersusupi.
Pakai firewall apa?





--
syafril
--------
Syafril Hermansyah

MDaemon-L Moderator, run MDaemon 26.0.0 Beta RC2
Mohon tidak kirim private mail (atau cc:) untuk masalah MDaemon.

True leaders inspire people to do great things and when the work is done their people proudly say "We did this ourselves".
        -- Lao-Tzu


--
--[mdaemon-l]----------------------------------------------------------
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.com
Berlangganan: Kirim mail ke [email protected]
Henti Langgan: Kirim mail ke [email protected]
Versi terakhir: MDaemon 25.5.2, SecurityGateway 12.0.1



Kirim email ke