[Mdaemon-L] Too many IPs seen in too short a time frame

2026-07-16 Terurut Topik Syafril Hermansyah via Mdaemon-L 

On 7/16/26 15:03, Dedet Saputra via Mdaemon-L wrote:

Mohon bantuan untuk error log berikut :




Thu 2026-07-16 14:16:31.827: [34671274] --> 250-mailhub.kobexindo.com Hello 
mail-yx1-f50.google.com [74.125.224.50], pleased to meet you



Thu 2026-07-16 14:16:33.252: [34671274] Spambot detection blocked 74.125.224.50 
(4320 minutes remaining)
Thu 2026-07-16 14:16:33.257: [34671274] --> 550 5.7.0 Too many IPs seen in too 
short a time frame


Transaksi mail dari sender google.com (aka gmail.com) ke server 
mailhub.kobexindo.com sangat tinggi, sehingga melebihi batas nilain 
spambot detection.


https://mdaemon.dutaint.com/mdaemon/26.0.0/security--spambot_detection.html

Sebaiknya spambot detection tidak usah diaktifkan, atau setidaknnya 
masukkan IP googlemail.com kedalam pengecualian (exempt list).


74.125.0.0/16
209.85.128.0/17

$ host -t txt _spf.google.com 103.88.88.88
Using domain server:
Name: 103.88.88.88
Address: 103.88.88.88#53
Aliases:

_spf.google.com descriptive text "v=spf1 ip4:74.125.0.0/16 
ip4:209.85.128.0/17 ip6:2001:4860:4864::/56 ip6:2404:6800:4864::/56 
ip6:2607:f8b0:4864::/56 ip6:2800:3f0:4864::/56 ip6:2a00:1450:4864::/56 
ip6:2c0f:fb50:4864::/56 ~all"



https://www.sourceonetechnology.com/gmail-ip-address-ranges/


--
syafril

Syafril Hermansyah

MDaemon-L Moderator, run MDaemon 26.0.3
Mohon tidak kirim private mail (atau cc:) untuk masalah MDaemon.

Insecure managers create complexity. Frightened, nervous managers us 
thick convoluted planning books and busy slides filled with everything 
thet've known since childhood. Real leaders don't need clutter. People 
must have self-confidence to be clear, precise, to be sure everyperson 
understands.

-- Jack Welch


--
--[mdaemon-l]--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.com
Berlangganan: Kirim mail ke [email protected]
Henti Langgan: Kirim mail ke [email protected]
Versi terakhir: MDaemon 26.0.3, SecurityGateway 12.0.3

[Mdaemon-L] Too many IPs seen in too short a time frame

2026-07-16 Terurut Topik Dedet Saputra via Mdaemon-L 

Yth Pak Syafril,

Mohon bantuan untuk error log berikut :

Thu 2026-07-16 14:16:31.554: [34671274] Session 34671274; child 0002
Thu 2026-07-16 14:16:31.554: [34671274] Accepting SMTP connection from 
74.125.224.50:61886 to 10.10.10.85:25
Thu 2026-07-16 14:16:31.554: [34671274] --> 220 mailhub.kobexindo.com 
ESMTP MDaemon 26.0.3; Thu, 16 Jul 2026 14:16:31 +0700

Thu 2026-07-16 14:16:31.826: [34671274] <-- EHLO mail-yx1-f50.google.com
Thu 2026-07-16 14:16:31.827: [34671274] --> 250-mailhub.kobexindo.com 
Hello mail-yx1-f50.google.com [74.125.224.50], pleased to meet you

Thu 2026-07-16 14:16:31.827: [34671274] --> 250-ETRN
Thu 2026-07-16 14:16:31.827: [34671274] --> 250-8BITMIME
Thu 2026-07-16 14:16:31.827: [34671274] --> 250-ENHANCEDSTATUSCODES
Thu 2026-07-16 14:16:31.827: [34671274] --> 250-PIPELINING
Thu 2026-07-16 14:16:31.827: [34671274] --> 250-CHUNKING
Thu 2026-07-16 14:16:31.827: [34671274] --> 250-STARTTLS
Thu 2026-07-16 14:16:31.827: [34671274] --> 250 SIZE 103137280
Thu 2026-07-16 14:16:32.084: [34671274] <-- STARTTLS
Thu 2026-07-16 14:16:32.084: [34671274] --> 220 2.7.0 Ready to start TLS
Thu 2026-07-16 14:16:32.553: [34671274] SSL negotiation successful (TLS 
1.3, TLS_AES_256_GCM_SHA384)

Thu 2026-07-16 14:16:32.553: [34671274] <-- EHLO mail-yx1-f50.google.com
Thu 2026-07-16 14:16:32.554: [34671274] --> 250-mailhub.kobexindo.com 
Hello mail-yx1-f50.google.com [74.125.224.50], pleased to meet you

Thu 2026-07-16 14:16:32.554: [34671274] --> 250-ETRN
Thu 2026-07-16 14:16:32.554: [34671274] --> 250-8BITMIME
Thu 2026-07-16 14:16:32.554: [34671274] --> 250-ENHANCEDSTATUSCODES
Thu 2026-07-16 14:16:32.554: [34671274] --> 250-PIPELINING
Thu 2026-07-16 14:16:32.554: [34671274] --> 250-CHUNKING
Thu 2026-07-16 14:16:32.554: [34671274] --> 250-REQUIRETLS
Thu 2026-07-16 14:16:32.554: [34671274] --> 250 SIZE 103137280
Thu 2026-07-16 14:16:32.898: [34671274] <-- MAIL 
FROM: SIZE=12785
Thu 2026-07-16 14:16:32.902: [34671274] Performing IP lookup 
(alambumijasindo.com)
Thu 2026-07-16 14:16:33.163: [34671274] * P=001 S=000 
D=alambumijasindo.com TTL=(240) MX=[aspmx.l.google.com] {172.217.194.27}
Thu 2026-07-16 14:16:33.163: [34671274] * P=005 S=002 
D=alambumijasindo.com TTL=(240) MX=[alt2.aspmx.l.google.com] {173.194.43.27}
Thu 2026-07-16 14:16:33.163: [34671274] * P=005 S=003 
D=alambumijasindo.com TTL=(240) MX=[alt1.aspmx.l.google.com] 
{192.178.230.27}
Thu 2026-07-16 14:16:33.163: [34671274] * P=010 S=001 
D=alambumijasindo.com TTL=(240) MX=[alt4.aspmx.l.google.com] 
{142.250.101.26}
Thu 2026-07-16 14:16:33.163: [34671274] * P=010 S=004 
D=alambumijasindo.com TTL=(240) MX=[alt3.aspmx.l.google.com] {172.217.78.26}

Thu 2026-07-16 14:16:33.163: [34671274]  End IP lookup results
Thu 2026-07-16 14:16:33.168: [34671274] Performing SPF lookup 
(alambumijasindo.com / 74.125.224.50)
Thu 2026-07-16 14:16:33.218: [34671274] * Policy: v=spf1 
include:_spf.google.com ~all
Thu 2026-07-16 14:16:33.218: [34671274] * Evaluating 
include:_spf.google.com: performing lookup
Thu 2026-07-16 14:16:33.223: [34671274] * Policy: v=spf1 
ip4:74.125.0.0/16 ip4:209.85.128.0/17 ip6:2001:4860:4864::/56 
ip6:2404:6800:4864::/56 ip6:2607:f8b0:4864::/56 ip6:2800:3f0:4864::/56 
ip6:2a00:1450:4864::/56 ip6:2c0f:fb50:4864::/56 ~all
Thu 2026-07-16 14:16:33.223: [34671274] * Evaluating ip4:74.125.0.0/16: 
match
Thu 2026-07-16 14:16:33.223: [34671274] * Evaluating 
include:_spf.google.com: match

Thu 2026-07-16 14:16:33.223: [34671274] * Result: pass
Thu 2026-07-16 14:16:33.223: [34671274]  End SPF results
Thu 2026-07-16 14:16:33.223: [34671274] --> 250 2.1.0 Sender OK
Thu 2026-07-16 14:16:33.223: [34671274] <-- RCPT 
TO:
Thu 2026-07-16 14:16:33.252: [34671274] Spambot detection blocked 
74.125.224.50 (4320 minutes remaining)
Thu 2026-07-16 14:16:33.257: [34671274] --> 550 5.7.0 Too many IPs seen 
in too short a time frame
Thu 2026-07-16 14:16:33.257: [34671274] SMTP session terminated (Bytes 
in/out: 13863/5413)

Thu 2026-07-16 14:16:33.257: --


--
--[mdaemon-l]--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.com
Berlangganan: Kirim mail ke [email protected]
Henti Langgan: Kirim mail ke [email protected]
Versi terakhir: MDaemon 26.0.3, SecurityGateway 12.0.3