[Mdaemon-L] Limit ip screening di mdaemon

2024-01-18 Terurut Topik Syafril Hermansyah via Mdaemon-L

On 1/19/24 14:13, Hengga KMN wrote:
Apakah ada informasi limit jumlah IP yang bisa ditambahkan ke IP 
Screening di MDaemon?


Tidak ada batasan untuk saat ini.

Sebulan terakhir ini saya lagi ‘rajin’ menambahkan IP ke dalam IP Screening ini untuk menolak IP yang pernah mencoba-coba masuk ke server. 


Server yang mana?
Pakai MDaemon versi berapa?


Kemudian, boleh sarankan ke tim developer MDaemon, akan sangat
membantu jika bisa kerja sama dengan misalkan situs abusedipdb.com
untuk sinkron dengan list ipscreen.dat di MDaemon.

Apa itu abusedipdb.com?

Umumnya MDaemon user sudah merasa cukup dengan Dynamic Screening, 
iPscreen jarang dipakai kecuali memang sangat terpaksa misalkan memblock 
local private IP dijaringan sendiri.






--
syafril

Syafril Hermansyah
MDaemon-L Moderators, running MDaemon 23.5.2 Beta B
Harap tidak cc: atau kirim ke private mail untuk masalah MDaemon.

Don’t worry about failures, worry about the chances you miss when you 
don’t even try.

--- Jack Canfield


--
--[mdaemon-l]--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.com
Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com
Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com
Versi terakhir: MDaemon 23.5.1, SecurityGateway 9.5.2





[Mdaemon-L] Authentication does not match address found in FROM header

2024-01-18 Terurut Topik Syafril Hermansyah via Mdaemon-L

On 1/19/24 11:11, Bambang Setiawan via Mdaemon-L wrote:

Mohon bantuannya untuk error log terlampir pak.




Fri 2024-01-19 10:28:52.709: 02: [4614] <-- MAIL FROM: 

Fri 2024-01-19 10:28:52.713: 03: [4614] --> 250 2.1.0 Sender OK
Fri 2024-01-19 10:28:52.728: 02: [4614] <-- RCPT TO: 

Fri 2024-01-19 10:28:52.740: 03: [4614] --> 250 2.1.5 Recipient OK
Fri 2024-01-19 10:28:52.750: 02: [4614] <-- RCPT TO: 

Fri 2024-01-19 10:28:52.790: 03: [4614] --> 250 2.1.5 Recipient OK
Fri 2024-01-19 10:28:52.804: 02: [4614] <-- RCPT TO: 

Fri 2024-01-19 10:28:52.815: 03: [4614] --> 250 2.1.5 Recipient OK
Fri 2024-01-19 10:28:52.829: 02: [4614] <-- RCPT TO: 
Fri 2024-01-19 10:28:52.841: 03: [4614] --> 250 2.1.5 Recipient OK
Fri 2024-01-19 10:28:52.848: 02: [4614] <-- RCPT TO: 

Fri 2024-01-19 10:28:52.860: 03: [4614] --> 250 2.1.5 Recipient OK
Fri 2024-01-19 10:28:52.869: 02: [4614] <-- RCPT TO: 

Fri 2024-01-19 10:28:52.881: 03: [4614] --> 250 2.1.5 Recipient OK
Fri 2024-01-19 10:28:52.891: 02: [4614] <-- RCPT TO: 

Fri 2024-01-19 10:28:52.905: 03: [4614] --> 250 2.1.5 Recipient OK
Fri 2024-01-19 10:28:52.919: 02: [4614] <-- DATA
Fri 2024-01-19 10:28:52.921: 03: [4614] --> 354 Enter mail, end with 
.
Fri 2024-01-19 10:28:53.402: 01: [4614] Message size: 188122 bytes
Fri 2024-01-19 10:28:53.403: 03: [4614] --> 550 5.7.0 Authentication 
rejected
Fri 2024-01-19 10:28:53.403: 01: [4614] Authentication does not match 
address found in FROM header



Mail yang kedua ini berisikan  lampiran calendar invitation yang From 
addressnya bukan harris.purwa...@persada.id.


Lihat ke arsip

https://www.mail-archive.com/mdaemon-l@dutaint.com/msg49187.html

https://www.mail-archive.com/mdaemon-l@dutaint.com/msg46635.html

Atau baca lengkap thread berikut

https://www.mail-archive.com/mdaemon-l@dutaint.com/msg50115.html

--
syafril

Syafril Hermansyah
MDaemon-L Moderators, running MDaemon 23.5.2 Beta B
Harap tidak cc: atau kirim ke private mail untuk masalah MDaemon.

In learning you will teach, and in teaching you will learn.
---  Phil Collins


--
--[mdaemon-l]--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.com
Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com
Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com
Versi terakhir: MDaemon 23.5.1, SecurityGateway 9.5.2





[Mdaemon-L] Limit ip screening di mdaemon

2024-01-18 Terurut Topik Hengga KMN
Selamat siang pak,

 

Apakah ada informasi limit jumlah IP yang bisa ditambahkan ke IP Screening
di MDaemon?

Sebulan terakhir ini saya lagi 'rajin' menambahkan IP ke dalam IP Screening
ini untuk menolak IP yang pernah mencoba-coba masuk ke server.  

Saya coba cari info, belum ada informasi mengenai limit banyaknya IP yang
bisa didaftarkan ke dalam IP Screening ini (ipscreen.dat), mungkin dari Pak
Syafril dan tim ada info mengenai ini?

 

Kemudian, boleh sarankan ke tim developer MDaemon, akan sangat membantu jika
bisa kerja sama dengan misalkan situs abusedipdb.com untuk sinkron dengan
list ipscreen.dat di MDaemon.

 

Salam,

Hengga

 


-- 
--[mdaemon-l]--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.com
Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com
Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com
Versi terakhir: MDaemon 23.5.1, SecurityGateway 9.5.2



[Mdaemon-L] Authentication does not match address found in FROM header

2024-01-18 Terurut Topik Bambang Setiawan via Mdaemon-L
Dear Pak Syafril,

 

Mohon bantuannya untuk error log terlampir pak.

 

Fri 2024-01-19 10:28:52.053: 01: --

Fri 2024-01-19 10:28:52.301: 05: [4614] Session 4614; child 0002

Fri 2024-01-19 10:28:52.301: 05: [4614] Accepting SMTP connection from
103.247.218.37:64464 to 103.150.114.155:587

Fri 2024-01-19 10:28:52.301: 07: [4614] Location Screen says connection
is from Indonesia, Asia

Fri 2024-01-19 10:28:52.303: 03: [4614] --> 220 mail.persada.id ESMTP
MSA MDaemon 23.5.1; Fri, 19 Jan 2024 10:28:52 +0700

Fri 2024-01-19 10:28:52.321: 02: [4614] <-- EHLO DESKTOPN00RCUV

Fri 2024-01-19 10:28:52.321: 03: [4614] --> 250-mail.persada.id Hello
DESKTOPN00RCUV [103.247.218.37], pleased to meet you

Fri 2024-01-19 10:28:52.321: 03: [4614] --> 250-8BITMIME

Fri 2024-01-19 10:28:52.321: 03: [4614] --> 250-ENHANCEDSTATUSCODES

Fri 2024-01-19 10:28:52.321: 03: [4614] --> 250-PIPELINING

Fri 2024-01-19 10:28:52.321: 03: [4614] --> 250-CHUNKING

Fri 2024-01-19 10:28:52.321: 03: [4614] --> 250-STARTTLS

Fri 2024-01-19 10:28:52.321: 03: [4614] --> 250 SIZE

Fri 2024-01-19 10:28:52.330: 02: [4614] <-- STARTTLS

Fri 2024-01-19 10:28:52.330: 03: [4614] --> 220 2.7.0 Ready to start TLS

Fri 2024-01-19 10:28:52.372: 01: [4614] SSL negotiation successful (TLS
1.2, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384)

Fri 2024-01-19 10:28:52.410: 02: [4614] <-- EHLO DESKTOPN00RCUV

Fri 2024-01-19 10:28:52.410: 03: [4614] --> 250-mail.persada.id Hello
DESKTOPN00RCUV [103.247.218.37], pleased to meet you

Fri 2024-01-19 10:28:52.410: 03: [4614] --> 250-AUTH LOGIN CRAM-MD5
PLAIN

Fri 2024-01-19 10:28:52.410: 03: [4614] --> 250-8BITMIME

Fri 2024-01-19 10:28:52.410: 03: [4614] --> 250-ENHANCEDSTATUSCODES

Fri 2024-01-19 10:28:52.410: 03: [4614] --> 250-PIPELINING

Fri 2024-01-19 10:28:52.410: 03: [4614] --> 250-CHUNKING

Fri 2024-01-19 10:28:52.410: 03: [4614] --> 250-REQUIRETLS

Fri 2024-01-19 10:28:52.410: 03: [4614] --> 250 SIZE

Fri 2024-01-19 10:28:52.420: 02: [4614] <-- AUTH LOGIN

Fri 2024-01-19 10:28:52.420: 03: [4614] --> 334 VXNlcm5hbWU6

Fri 2024-01-19 10:28:52.434: 02: [4614] <--
aGFycmlzLnB1cndhbnRvQHBlcnNhZGEuaWQ=

Fri 2024-01-19 10:28:52.434: 03: [4614] --> 334 UGFzc3dvcmQ6

Fri 2024-01-19 10:28:52.443: 02: [4614] <-- **

Fri 2024-01-19 10:28:52.444: 01: [4614] Authenticating
harris.purwa...@persada.id...

Fri 2024-01-19 10:28:52.448: 01: [4614] Authenticated as
harris.purwa...@persada.id

Fri 2024-01-19 10:28:52.449: 03: [4614] --> 235 2.7.0 Authentication
successful

Fri 2024-01-19 10:28:52.480: 02: [4614] <-- MAIL FROM:


Fri 2024-01-19 10:28:52.485: 03: [4614] --> 250 2.1.0 Sender OK

Fri 2024-01-19 10:28:52.497: 02: [4614] <-- RCPT TO:


Fri 2024-01-19 10:28:52.506: 03: [4614] --> 250 2.1.5 Recipient OK

Fri 2024-01-19 10:28:52.513: 02: [4614] <-- DATA

Fri 2024-01-19 10:28:52.514: 03: [4614] --> 354 Enter mail, end with
.

Fri 2024-01-19 10:28:52.601: 01: [4614] Message size: 17769 bytes

Fri 2024-01-19 10:28:52.607: 06: [4614] Passing message through
AntiVirus (Size: 17769)...

Fri 2024-01-19 10:28:52.630: 06: [4614] *  Recipient, sender or IP in
exclusion list

Fri 2024-01-19 10:28:52.630: 06: [4614]  End AntiVirus results

Fri 2024-01-19 10:28:52.631: 11: [4614] Outbreak Protection: Processing
skipped.  Authenticated connection.

Fri 2024-01-19 10:28:52.701: 01: [4614] Message creation successful:
c:\mdaemon\queues\inbound\md5001007512371.msg

Fri 2024-01-19 10:28:52.701: 03: [4614] --> 250 2.6.0 Ok, message saved
>

Fri 2024-01-19 10:28:52.709: 02: [4614] <-- MAIL FROM:


Fri 2024-01-19 10:28:52.713: 03: [4614] --> 250 2.1.0 Sender OK

Fri 2024-01-19 10:28:52.728: 02: [4614] <-- RCPT TO:


Fri 2024-01-19 10:28:52.740: 03: [4614] --> 250 2.1.5 Recipient OK

Fri 2024-01-19 10:28:52.750: 02: [4614] <-- RCPT TO:


Fri 2024-01-19 10:28:52.790: 03: [4614] --> 250 2.1.5 Recipient OK

Fri 2024-01-19 10:28:52.804: 02: [4614] <-- RCPT TO:


Fri 2024-01-19 10:28:52.815: 03: [4614] --> 250 2.1.5 Recipient OK

Fri 2024-01-19 10:28:52.829: 02: [4614] <-- RCPT TO:


Fri 2024-01-19 10:28:52.841: 03: [4614] --> 250 2.1.5 Recipient OK

Fri 2024-01-19 10:28:52.848: 02: [4614] <-- RCPT TO:


Fri 2024-01-19 10:28:52.860: 03: [4614] --> 250 2.1.5 Recipient OK

Fri 2024-01-19 10:28:52.869: 02: [4614] <-- RCPT TO:


Fri 2024-01-19 10:28:52.881: 03: [4614] --> 250 2.1.5 Recipient OK

Fri 2024-01-19 10:28:52.891: 02: [4614] <-- RCPT TO:


Fri 2024-01-19 10:28:52.905: 03: [4614] --> 250 2.1.5 Recipient OK

Fri 2024-01-19 10:28:52.919: 02: [4614] <-- DATA

Fri 2024-01-19 10:28:52.921: 03: [4614] --> 354 Enter mail, end with
.

Fri 2024-01-19 10:28:53.402: 01: [4614] Message size: 188122 bytes

Fri 2024-01-19 10:28:53.403: 03: [4614] --> 550 5.7.0 Authentication
rejected

Fr