On 27/04/18 09:35, Syafril Hermansyah wrote:
Periksa ke smtp-out dan smtp-in log untuk melihat faktanya.
Logika tanpa fakta tidak valid.
Pak ini contoh dari log SMTP-in user ini kena freeze, hanya kirim mail ke domain local tidak ada yg kirim ke external address (tidak ada di smtp-out) Kalau dilihat dari jam 8.11 s/d 9.50  = hampir 1 jam total 50email, settiing hijack detection saya 50 mail in 1 minute, TAPI kenapa dalam 1 menit tidak sampai 50 mail tetap ketangkap hijack detection ?

Mon 2018-05-07 08:11:47.061: 02: <-- RCPT TO:<admingud...@pttdp.com>
Mon 2018-05-07 08:11:47.064: 03: --> 250 2.1.5 Recipient OK
Mon 2018-05-07 08:11:47.070: 02: <-- RCPT TO:<re...@pttdp.com>
Mon 2018-05-07 08:11:47.073: 03: --> 250 2.1.5 Recipient OK
Mon 2018-05-07 08:11:47.074: 02: <-- RCPT TO:<he...@pttdp.com>
Mon 2018-05-07 08:11:47.080: 03: --> 250 2.1.5 Recipient OK
Mon 2018-05-07 08:11:47.080: 02: <-- RCPT TO:<yu...@pttdp.com>
Mon 2018-05-07 08:11:47.083: 03: --> 250 2.1.5 Recipient OK
Mon 2018-05-07 08:11:47.084: 02: <-- RCPT TO:<cyn...@pttdp.com>
Mon 2018-05-07 08:11:47.087: 03: --> 250 2.1.5 Recipient OK
Mon 2018-05-07 08:11:47.087: 02: <-- RCPT TO:<dzu...@pttdp.com>
Mon 2018-05-07 08:11:47.091: 03: --> 250 2.1.5 Recipient OK
Mon 2018-05-07 08:11:47.091: 02: <-- RCPT TO:<maria.yun...@pttdp.com>
Mon 2018-05-07 08:11:47.096: 03: --> 250 2.1.5 Recipient OK
Mon 2018-05-07 08:11:47.096: 02: <-- RCPT TO:<lili...@pttdp.com>
Mon 2018-05-07 08:11:47.101: 03: --> 250 2.1.5 Recipient OK
Mon 2018-05-07 08:11:47.101: 02: <-- RCPT TO:<nan...@pttdp.com>
Mon 2018-05-07 08:11:47.105: 03: --> 250 2.1.5 Recipient OK
Mon 2018-05-07 08:11:47.105: 02: <-- RCPT TO:<admin...@pttdp.com>
Mon 2018-05-07 08:11:47.108: 03: --> 250 2.1.5 Recipient OK
Mon 2018-05-07 08:11:47.108: 02: <-- RCPT TO:<harry.wal...@pttdp.com>
Mon 2018-05-07 08:11:47.110: 03: --> 250 2.1.5 Recipient OK

Mon 2018-05-07 08:11:57.669: 02: <-- RCPT TO:<admingud...@pttdp.com>
Mon 2018-05-07 08:11:57.673: 03: --> 250 2.1.5 Recipient OK
Mon 2018-05-07 08:11:57.675: 02: <-- RCPT TO:<re...@pttdp.com>
Mon 2018-05-07 08:11:57.678: 03: --> 250 2.1.5 Recipient OK
Mon 2018-05-07 08:11:57.683: 02: <-- RCPT TO:<he...@pttdp.com>
Mon 2018-05-07 08:11:57.690: 03: --> 250 2.1.5 Recipient OK
Mon 2018-05-07 08:11:57.691: 02: <-- RCPT TO:<yu...@pttdp.com>
Mon 2018-05-07 08:11:57.695: 03: --> 250 2.1.5 Recipient OK
Mon 2018-05-07 08:11:57.697: 02: <-- RCPT TO:<admin...@pttdp.com>
Mon 2018-05-07 08:11:57.700: 03: --> 250 2.1.5 Recipient OK
Mon 2018-05-07 08:11:57.700: 02: <-- RCPT TO:<dzu...@pttdp.com>
Mon 2018-05-07 08:11:57.704: 03: --> 250 2.1.5 Recipient OK
Mon 2018-05-07 08:11:57.706: 02: <-- RCPT TO:<maria.yun...@pttdp.com>
Mon 2018-05-07 08:11:57.712: 03: --> 250 2.1.5 Recipient OK
Mon 2018-05-07 08:11:57.713: 02: <-- RCPT TO:<lili...@pttdp.com>
Mon 2018-05-07 08:11:57.718: 03: --> 250 2.1.5 Recipient OK
Mon 2018-05-07 08:11:57.719: 02: <-- RCPT TO:<nan...@pttdp.com>
Mon 2018-05-07 08:11:57.723: 03: --> 250 2.1.5 Recipient OK

Mon 2018-05-07 09:39:52.798: 02: <-- RCPT TO:<natalia.so...@pttdp.com>
Mon 2018-05-07 09:39:52.803: 03: --> 250 2.1.5 Recipient OK

Mon 2018-05-07 09:40:10.604: 02: <-- RCPT TO:<natalia.so...@pttdp.com>
Mon 2018-05-07 09:40:10.608: 03: --> 250 2.1.5 Recipient OK

Mon 2018-05-07 09:42:14.569: 02: <-- RCPT TO:<deni...@pttdp.com>
Mon 2018-05-07 09:42:14.575: 03: --> 250 2.1.5 Recipient OK

Mon 2018-05-07 09:44:55.992: 02: <-- RCPT TO:<admingud...@pttdp.com>
Mon 2018-05-07 09:44:55.996: 03: --> 250 2.1.5 Recipient OK
Mon 2018-05-07 09:44:55.997: 02: <-- RCPT TO:<nan...@pttdp.com>
Mon 2018-05-07 09:44:56.002: 03: --> 250 2.1.5 Recipient OK
Mon 2018-05-07 09:44:56.003: 02: <-- RCPT TO:<maria.yun...@pttdp.com>
Mon 2018-05-07 09:44:56.010: 03: --> 250 2.1.5 Recipient OK
Mon 2018-05-07 09:44:56.011: 02: <-- RCPT TO:<lili...@pttdp.com>
Mon 2018-05-07 09:44:56.017: 03: --> 250 2.1.5 Recipient OK
Mon 2018-05-07 09:44:56.018: 02: <-- RCPT TO:<n...@pttdp.com>
Mon 2018-05-07 09:44:56.022: 03: --> 250 2.1.5 Recipient OK
Mon 2018-05-07 09:44:56.022: 02: <-- RCPT TO:<re...@pttdp.com>
Mon 2018-05-07 09:44:56.026: 03: --> 250 2.1.5 Recipient OK
Mon 2018-05-07 09:44:56.029: 02: <-- RCPT TO:<sept...@pttdp.com>
Mon 2018-05-07 09:44:56.035: 03: --> 250 2.1.5 Recipient OK
Mon 2018-05-07 09:44:56.036: 02: <-- RCPT TO:<yafe...@pttdp.com>
Mon 2018-05-07 09:44:56.043: 03: --> 250 2.1.5 Recipient OK
Mon 2018-05-07 09:44:56.044: 02: <-- RCPT TO:<dzu...@pttdp.com>
Mon 2018-05-07 09:44:56.049: 03: --> 250 2.1.5 Recipient OK
Mon 2018-05-07 09:44:56.050: 02: <-- RCPT TO:<admin...@pttdp.com>
Mon 2018-05-07 09:44:56.054: 03: --> 250 2.1.5 Recipient OK
Mon 2018-05-07 09:44:56.055: 02: <-- RCPT TO:<harry.wal...@pttdp.com>
Mon 2018-05-07 09:44:56.059: 03: --> 250 2.1.5 Recipient OK
Mon 2018-05-07 09:44:56.060: 02: <-- RCPT TO:<yu...@pttdp.com>
Mon 2018-05-07 09:44:56.065: 03: --> 250 2.1.5 Recipient OK
Mon 2018-05-07 09:44:56.066: 02: <-- RCPT TO:<murni.iskan...@pttdp.com>
Mon 2018-05-07 09:44:56.075: 03: --> 250 2.1.5 Recipient OK
Mon 2018-05-07 09:44:56.076: 02: <-- RCPT TO:<v...@pttdp.com>
Mon 2018-05-07 09:44:56.082: 03: --> 250 2.1.5 Recipient OK

Mon 2018-05-07 09:50:38.052: 02: <-- RCPT TO:<admingud...@pttdp.com>
Mon 2018-05-07 09:50:38.056: 03: --> 250 2.1.5 Recipient OK
Mon 2018-05-07 09:50:38.057: 02: <-- RCPT TO:<nan...@pttdp.com>
Mon 2018-05-07 09:50:38.061: 03: --> 250 2.1.5 Recipient OK
Mon 2018-05-07 09:50:38.066: 02: <-- RCPT TO:<maria.yun...@pttdp.com>
Mon 2018-05-07 09:50:38.071: 03: --> 250 2.1.5 Recipient OK
Mon 2018-05-07 09:50:38.072: 02: <-- RCPT TO:<lili...@pttdp.com>
Mon 2018-05-07 09:50:38.077: 03: --> 250 2.1.5 Recipient OK
Mon 2018-05-07 09:50:38.082: 02: <-- RCPT TO:<n...@pttdp.com>
Mon 2018-05-07 09:50:38.085: 03: --> 250 2.1.5 Recipient OK
Mon 2018-05-07 09:50:38.085: 02: <-- RCPT TO:<re...@pttdp.com>
Mon 2018-05-07 09:50:38.088: 03: --> 250 2.1.5 Recipient OK
Mon 2018-05-07 09:50:38.089: 02: <-- RCPT TO:<yafe...@pttdp.com>
Mon 2018-05-07 09:50:38.095: 03: --> 250 2.1.5 Recipient OK
Mon 2018-05-07 09:50:38.098: 02: <-- RCPT TO:<dzu...@pttdp.com>
Mon 2018-05-07 09:50:38.102: 03: --> 250 2.1.5 Recipient OK
Mon 2018-05-07 09:50:38.103: 02: <-- RCPT TO:<admin...@pttdp.com>
Mon 2018-05-07 09:50:38.106: 03: --> 250 2.1.5 Recipient OK
Mon 2018-05-07 09:50:38.107: 02: <-- RCPT TO:<yu...@pttdp.com>
Mon 2018-05-07 09:50:38.110: 03: --> 250 2.1.5 Recipient OK
Mon 2018-05-07 09:50:38.111: 02: <-- RCPT TO:<he...@pttdp.com>
Mon 2018-05-07 09:50:38.116: 03: --> 250 2.1.5 Recipient OK
Mon 2018-05-07 09:50:38.117: 02: <-- RCPT TO:<budi...@pttdp.com>
*Mon 2018-05-07 09:50:38.121: 03: --> 550 5.7.0 Too many messages in too short a time frame** **Mon 2018-05-07 09:50:38.121: 01: Hijack detection has frozen the nurhay...@pttdp.com account** **Mon 2018-05-07 09:50:38.125: 04: SMTP session terminated (Bytes in/out: 1852/1600)*

--
--[mdaemon-l]----------------------------------------------------------
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com
Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com
Versi terakhir MD 18.0 (all-in-one), SG 5.0.1

Kirim email ke