[mdaemon-l] Host Screen Refuse

2020-10-15 Terurut Topik Syafril Hermansyah via mdaemon-l
On 16/10/20 09.44, Rievo Niemrod E wrote:
> barusan saya mendaftarkan host di bawah ini di Hostscreen.dat refuse


> Thu 2020-10-15 23:44:25.033: [10082142] Accepting SMTP connection from 
> 142.11.211.208:57659 to 172.16.0.6:25
> 
> Thu 2020-10-15 23:44:25.033: [10082142] Location Screen says connection is 
> from United States, North America
> 
> Thu 2020-10-15 23:44:26.330: [10082142] <-- MAIL FROM:


Ini spam.
Sudah benar kalau ditolak.



-- 
syafril
---
Syafril Hermansyah
MDaemon-L Moderators, running MDaemon 20.0.3-64 bit Beta B
Harap tidak cc: atau kirim ke private mail untuk masalah MDaemon.

Tell me and I forget. Teach me and I remember. Involve me and I learn.
--- Benjamin Franklin


-- 
--[mdaemon-l]--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com
Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com
Versi terakhir: MDaemon 20.0.2, SecurityGateway 7.0.1




[mdaemon-l] Host Screen Refuse

2020-10-15 Terurut Topik Rievo Niemrod E
Selamat Pagi 

 

Dear Pak Syafril 

barusan saya mendaftarkan host di bawah ini di Hostscreen.dat refuse

Mohon bisa di update 

 

Terima Kasih

Rievo

 

Thu 2020-10-15 23:45:09.634: --

Thu 2020-10-15 23:44:25.033: [10082142] Session 10082142; child 0004

Thu 2020-10-15 23:44:25.033: [10082142] Accepting SMTP connection from
142.11.211.208:57659 to 172.16.0.6:25

Thu 2020-10-15 23:44:25.033: [10082142] Location Screen says connection is
from United States, North America

Thu 2020-10-15 23:44:25.034: [10082142] --> 220 bb.ptbmi.com ESMTP MDaemon
20.0.1; Thu, 15 Oct 2020 23:44:25 +0700

Thu 2020-10-15 23:44:26.057: [10082142] <-- EHLO hwc-hwp-6085270

Thu 2020-10-15 23:44:26.057: [10082142] --> 250-bb.ptbmi.com Hello
hwc-hwp-6085270 [142.11.211.208], pleased to meet you

Thu 2020-10-15 23:44:26.057: [10082142] --> 250-ETRN

Thu 2020-10-15 23:44:26.057: [10082142] Location Screening hiding AUTH from
country United States, North America

Thu 2020-10-15 23:44:26.057: [10082142] --> 250-8BITMIME

Thu 2020-10-15 23:44:26.057: [10082142] --> 250-ENHANCEDSTATUSCODES

Thu 2020-10-15 23:44:26.057: [10082142] --> 250-STARTTLS

Thu 2020-10-15 23:44:26.057: [10082142] --> 250 SIZE 36700160

Thu 2020-10-15 23:44:26.330: [10082142] <-- MAIL FROM:

Thu 2020-10-15 23:44:26.333: [10082142] Performing PTR lookup
(208.211.11.142.IN-ADDR.ARPA)

Thu 2020-10-15 23:44:26.348: [10082142] *  D=208.211.11.142.in-addr.arpa
TTL=(212) PTR=[hwsrv-788937.hostwindsdns.com]

Thu 2020-10-15 23:44:26.354: [10082142] *  D=hwsrv-788937.hostwindsdns.com
TTL=(1412) A=[142.11.211.208]

Thu 2020-10-15 23:44:26.354: [10082142]  End PTR results

Thu 2020-10-15 23:44:26.355: [10082142] Performing IP lookup
(hwc-hwp-6085270)

Thu 2020-10-15 23:45:26.406: [10082142] *  DNS: 60 second wait for DNS
response exceeded (DNS Server: 68.6.16.25)

Thu 2020-10-15 23:45:26.406: [10082142] *  DNS server reports domain name
unknown

Thu 2020-10-15 23:45:26.406: [10082142]  End IP lookup results

Thu 2020-10-15 23:45:26.406: [10082142] --> 501 5.7.0 hwc-hwp-6085270 host
can't be resolved

Thu 2020-10-15 23:45:26.406: [10082142] SMTP session terminated (Bytes
in/out: 51/282)

Thu 2020-10-15 23:45:26.406: --


-- 
--[mdaemon-l]--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com
Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com
Versi terakhir: MDaemon 20.0.2, SecurityGateway 7.0.1


[mdaemon-l] Host Screen refused connection

2018-10-03 Terurut Topik Syafril Hermansyah
On 03/10/18 14:53, Suzy Ariyani (s...@ptbmi.com) wrote:
> Harus diapakan lagi ini pak?


Kalau sender host ganti IP maka harus menambahkan ulang ke hostscreening
dan (kalau perlu) Reverse Lookup whitelist.


> krn Sender juga kyknya dak info ke Administrator Email-nya
> dan kita yg harus memaklumni Sender.


Memang banyak sender yang lugu, yang mengira jika mail sudah masuk ke
Sent folder artinya sudah terkirim dan kalau mendapat bounce meduga yang
salah server penerima (yang di jaman now kirim complaint via socmed
setelah memfoto bounce messagenya) :-(


> Apa bisa sy tambahkan email amy...@shinican.com.tw ke dlm WHITELIST SENDER


Tidak.
Lakukan sync ke ftp.dutaint.com atau tunggu tengah malam nanti agar
otomatis sync.

Sudah diupdate ke

ftp://ftp.dutaint.com/altn-mdaemon/miscl/HostScreen.dat
ftp://ftp.dutaint.com/altn-mdaemon/miscl/ReverseXcpt.dat



-- 
syafril
---
Syafril Hermansyah
MDaemon-L Moderators, running MDaemon 18.5.0-64 bit
Harap tidak cc: atau kirim ke private mail untuk masalah MDaemon.

Challenges are what make life interesting and overcoming them is what
makes life meaningful.
--- Joshua J. Marine


-- 
--[mdaemon-l]--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com
Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com
Versi terakhir MD 18.0.2, SG 5.5.0




[mdaemon-l] Host Screen refused connection

2018-10-03 Terurut Topik Suzy Ariyani

Semangat pagi Pak Syafril..

Hari ini masih tidak bs terima email dari amy...@shinican.com.tw
ilmu sudah didapat, saran sudah dikerjakan..

-Original Message- 

From: Syafril Hermansyah
Sent: Tuesday, October 2, 2018 10:36 AM
To: mdaemon-l@dutaint.com
Subject: [mdaemon-l] Host Screen refused connection

On 02/10/18 10:30, Suzy Ariyani (s...@ptbmi.com) wrote:

*.tw masuk dalam daftar the most abuse tld


Apa memang domain *.tw mostly untrusted domain ya pak?



Tidak selalu, ada saatnya (dulu) tidak disalah gunakan untuk broadcast
spam mail.

https://www.spamhaus.org/statistics/tlds/


Wed 2018-10-03 13:58:52.610: --
Wed 2018-10-03 13:58:59.615: [671843] Session 671843; child 0002
Wed 2018-10-03 13:58:59.615: [671843] Accepting SMTP connection from 
211.21.213.37:43106 to 172.16.0.6:25
Wed 2018-10-03 13:58:59.616: [671843] --> 220 bb.ptbmi.com ESMTP MDaemon 
18.0.2; Wed, 03 Oct 2018 13:58:59 +0700

Wed 2018-10-03 13:58:59.722: [671843] <-- EHLO webmail.shinican.com.tw
Wed 2018-10-03 13:58:59.722: [671843] Performing SPF lookup 
(webmail.shinican.com.tw / 211.21.213.37)

Wed 2018-10-03 13:59:00.113: [671843] *  Result: none; no SPF record in DNS
Wed 2018-10-03 13:59:00.113: [671843]  End SPF results
Wed 2018-10-03 13:59:00.113: [671843] --> 250-bb.ptbmi.com Hello 
webmail.shinican.com.tw [211.21.213.37], pleased to meet you

Wed 2018-10-03 13:59:00.113: [671843] --> 250-ETRN
Wed 2018-10-03 13:59:00.113: [671843] Location Screening hiding AUTH from 
country Taiwan

Wed 2018-10-03 13:59:00.113: [671843] --> 250-8BITMIME
Wed 2018-10-03 13:59:00.113: [671843] --> 250-ENHANCEDSTATUSCODES
Wed 2018-10-03 13:59:00.113: [671843] --> 250-STARTTLS
Wed 2018-10-03 13:59:00.113: [671843] --> 250 SIZE 3584
Wed 2018-10-03 13:59:00.229: [671843] <-- STARTTLS
Wed 2018-10-03 13:59:00.229: [671843] --> 220 2.7.0 Ready to start TLS
Wed 2018-10-03 13:59:00.482: [671843] SSL negotiation successful (TLS 1.0, 
2048 bit key exchange, 256 bit AES encryption)

Wed 2018-10-03 13:59:00.598: [671843] <-- EHLO webmail.shinican.com.tw
Wed 2018-10-03 13:59:00.598: [671843] Performing SPF lookup 
(webmail.shinican.com.tw / 211.21.213.37)

Wed 2018-10-03 13:59:00.717: [671843] *  Result: none; no SPF record in DNS
Wed 2018-10-03 13:59:00.717: [671843]  End SPF results
Wed 2018-10-03 13:59:00.717: [671843] --> 250-bb.ptbmi.com Hello 
webmail.shinican.com.tw [211.21.213.37], pleased to meet you

Wed 2018-10-03 13:59:00.717: [671843] --> 250-ETRN
Wed 2018-10-03 13:59:00.717: [671843] Location Screening hiding AUTH from 
country Taiwan

Wed 2018-10-03 13:59:00.717: [671843] --> 250-8BITMIME
Wed 2018-10-03 13:59:00.717: [671843] --> 250-ENHANCEDSTATUSCODES
Wed 2018-10-03 13:59:00.717: [671843] --> 250 SIZE 3584
Wed 2018-10-03 13:59:00.835: [671843] <-- MAIL FROM: 
SIZE=190621
Wed 2018-10-03 13:59:00.836: [671843] Performing PTR lookup 
(37.213.21.211.IN-ADDR.ARPA)
Wed 2018-10-03 13:59:01.127: [671843] *  D=37.213.21.211.in-addr.arpa 
TTL=(720) PTR=[cwos2.colorlife.com.tw]
Wed 2018-10-03 13:59:01.351: [671843] *  D=cwos2.colorlife.com.tw TTL=(60) 
A=[60.249.54.80]
Wed 2018-10-03 13:59:01.351: [671843] *  D=cwos2.colorlife.com.tw TTL=(60) 
A=[211.21.213.37]

Wed 2018-10-03 13:59:01.351: [671843]  End PTR results
Wed 2018-10-03 13:59:01.353: [671843] Performing IP lookup 
(webmail.shinican.com.tw)
Wed 2018-10-03 13:59:01.448: [671843] *  D=webmail.shinican.com.tw 
TTL=(1440) A=[60.249.54.80]

Wed 2018-10-03 13:59:01.448: [671843]  End IP lookup results
Wed 2018-10-03 13:59:01.450: [671843] --> 550 5.7.1 Sender unknown
Wed 2018-10-03 13:59:01.450: [671843] Host screening refused connection to 
172.16.0.6:25 from cwos2.colorlife.com.tw [211.21.213.37:43106] (matched to 
line "all *.tw refuse")
Wed 2018-10-03 13:59:01.451: [671843] SMTP session terminated (Bytes in/out: 
622/3413)

Wed 2018-10-03 13:59:01.451: --

Harus diapakan lagi ini pak?
krn Sender juga kyknya dak info ke Administrator Email-nya
dan kita yg harus memaklumni Sender.

Apa bisa sy tambahkan email amy...@shinican.com.tw ke dlm WHITELIST SENDER

Mohon pencerahan...

thanks
Suzy 



--
--[mdaemon-l]--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com
Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com
Versi terakhir MD 18.0.2, SG 5.5.0




[mdaemon-l] Host Screen refused connection

2018-10-01 Terurut Topik Syafril Hermansyah
On 02/10/18 10:30, Suzy Ariyani (s...@ptbmi.com) wrote:
>> *.tw masuk dalam daftar the most abuse tld
> 
> Apa memang domain *.tw mostly untrusted domain ya pak?


Tidak selalu, ada saatnya (dulu) tidak disalah gunakan untuk broadcast
spam mail.


https://www.spamhaus.org/statistics/tlds/



-- 
syafril
---
Syafril Hermansyah
MDaemon-L Moderators, running MDaemon 18.5.0-64 bit
Harap tidak cc: atau kirim ke private mail untuk masalah MDaemon.

Learning without thought is labor lost; thought without learning is
perilous.
--- Confucius (551 BC - 479 BC), The Confucian Analects


-- 
--[mdaemon-l]--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com
Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com
Versi terakhir MD 18.0.2, SG 5.5.0




[mdaemon-l] Host Screen refused connection

2018-10-01 Terurut Topik Suzy Ariyani

Semangat pagi Pak Syafril..

Next question...

-Original Message- 
From: Syafril Hermansyah 
Sent: Tuesday, October 2, 2018 9:31 AM 
To: mdaemon-l@dutaint.com 
Subject: [mdaemon-l] Host Screen refused connection 


On 02/10/18 09:15, Suzy Ariyani (s...@ptbmi.com) wrote:

Tue 2018-10-02 08:09:27.287: [493849] Host screening refused connection
to 172.16.0.6:25 from webmail.shinican.com.tw [60.249.54.80:46064]
(matched to line "all *.tw refuse")
Tue 2018-10-02 08:09:27.288: [493849] SMTP session terminated (Bytes
in/out: 622/3412)


*.tw masuk dalam daftar the most abuse tld


Apa memang domain *.tw mostly untrusted domain ya pak?


maka sy menambahkan di file HOSTSCREEN.DAT kalimant sbb:
all webmail.shinican.com.tw accept
dan RESTART MDaemon Services


Ya.


Aseekkk...


Sudah diupdate ke
ftp://ftp.dutaint.com/altn-mdaemon/miscl/HostScreen.dat


Tengkiu Pak..

Sz

--
--[mdaemon-l]--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com
Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com
Versi terakhir MD 18.0.2, SG 5.5.0




[mdaemon-l] Host Screen refused connection

2018-10-01 Terurut Topik Syafril Hermansyah
On 02/10/18 09:15, Suzy Ariyani (s...@ptbmi.com) wrote:
> Tue 2018-10-02 08:09:27.287: [493849] Host screening refused connection
> to 172.16.0.6:25 from webmail.shinican.com.tw [60.249.54.80:46064]
> (matched to line "all *.tw refuse")
> Tue 2018-10-02 08:09:27.288: [493849] SMTP session terminated (Bytes
> in/out: 622/3412)

*.tw masuk dalam daftar the most abuse tld

> maka sy menambahkan di file HOSTSCREEN.DAT kalimant sbb:
> all webmail.shinican.com.tw accept
> dan RESTART MDaemon Services


Ya.

Sudah diupdate ke

ftp://ftp.dutaint.com/altn-mdaemon/miscl/HostScreen.dat





-- 
syafril
---
Syafril Hermansyah
MDaemon-L Moderators, running MDaemon 18.5.0-64 bit
Harap tidak cc: atau kirim ke private mail untuk masalah MDaemon.

If your actions inspire others to dream more, learn more, do more and
become more, you are a leader.
--- John Quincy Adams


-- 
--[mdaemon-l]--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com
Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com
Versi terakhir MD 18.0.2, SG 5.5.0




[mdaemon-l] Host Screen refused connection

2018-10-01 Terurut Topik Suzy Ariyani

Semangat pagi Pak Syafril...

Krn topiknya sama dan ingin ulangan dan dicek oleh Bpk
maka sy reply di email ini, gpp ya pak..

-Original Message- 

From: Syafril Hermansyah
Sent: Thursday, September 27, 2018 8:59 AM
To: mdaemon-l@dutaint.com
Subject: [mdaemon-l] Host Screen refused connection

On 27/09/18 08:31, Suzy Ariyani (s...@ptbmi.com) wrote:

td mlm ada email tidak masuk dg header dan SMTP-(in).log sbb:




Wed 2018-09-26 21:25:28.924: [124780] Host screening refused
connection to 172.16.0.6:25 from ip-39-93-static.layerspeed.co.id
[120.89.93.39:54008] (matched to line "all *-#-static.* refuse")


ada petunjuknya disini kalau sudah pakai MD 18.x


Mail ditolak karena berasal dri sender host yang koneksinya pakai/mirip
dengan Wired Broadband (Fiber to Home, FTTH, mirip indihome fiber,
Myrepublic dls).


Apa sy bs/harus tambahkan kalimat sbb? all
ip-39-93-static.layerspeed.co.id accept



Ya.

Sudah diupdate ke

ftp://ftp.dutaint.com/altn-mdaemon/miscl/HostScreen.dat


dari SMTP-(in).log berikut:
Tue 2018-10-02 08:09:21.327: --
Tue 2018-10-02 08:09:26.191: [493849] Session 493849; child 0001
Tue 2018-10-02 08:09:26.191: [493849] Accepting SMTP connection from 
60.249.54.80:46064 to 172.16.0.6:25
Tue 2018-10-02 08:09:26.191: [493849] --> 220 bb.ptbmi.com ESMTP MDaemon 
18.0.2; Tue, 02 Oct 2018 08:09:26 +0700

Tue 2018-10-02 08:09:26.298: [493849] <-- EHLO webmail.shinican.com.tw
Tue 2018-10-02 08:09:26.298: [493849] Performing SPF lookup 
(webmail.shinican.com.tw / 60.249.54.80)

Tue 2018-10-02 08:09:26.624: [493849] *  Result: none; no SPF record in DNS
Tue 2018-10-02 08:09:26.624: [493849]  End SPF results
Tue 2018-10-02 08:09:26.624: [493849] --> 250-bb.ptbmi.com Hello 
webmail.shinican.com.tw [60.249.54.80], pleased to meet you

Tue 2018-10-02 08:09:26.624: [493849] --> 250-ETRN
Tue 2018-10-02 08:09:26.624: [493849] Location Screening hiding AUTH from 
country Taiwan

Tue 2018-10-02 08:09:26.624: [493849] --> 250-8BITMIME
Tue 2018-10-02 08:09:26.624: [493849] --> 250-ENHANCEDSTATUSCODES
Tue 2018-10-02 08:09:26.624: [493849] --> 250-STARTTLS
Tue 2018-10-02 08:09:26.624: [493849] --> 250 SIZE 3584
Tue 2018-10-02 08:09:26.731: [493849] <-- STARTTLS
Tue 2018-10-02 08:09:26.731: [493849] --> 220 2.7.0 Ready to start TLS
Tue 2018-10-02 08:09:26.957: [493849] SSL negotiation successful (TLS 1.0, 
2048 bit key exchange, 256 bit AES encryption)

Tue 2018-10-02 08:09:27.068: [493849] <-- EHLO webmail.shinican.com.tw
Tue 2018-10-02 08:09:27.068: [493849] Performing SPF lookup 
(webmail.shinican.com.tw / 60.249.54.80)

Tue 2018-10-02 08:09:27.181: [493849] *  Result: none; no SPF record in DNS
Tue 2018-10-02 08:09:27.181: [493849]  End SPF results
Tue 2018-10-02 08:09:27.181: [493849] --> 250-bb.ptbmi.com Hello 
webmail.shinican.com.tw [60.249.54.80], pleased to meet you

Tue 2018-10-02 08:09:27.181: [493849] --> 250-ETRN
Tue 2018-10-02 08:09:27.181: [493849] Location Screening hiding AUTH from 
country Taiwan

Tue 2018-10-02 08:09:27.181: [493849] --> 250-8BITMIME
Tue 2018-10-02 08:09:27.181: [493849] --> 250-ENHANCEDSTATUSCODES
Tue 2018-10-02 08:09:27.181: [493849] --> 250 SIZE 3584
Tue 2018-10-02 08:09:27.286: [493849] <-- MAIL FROM: 
SIZE=156416

Tue 2018-10-02 08:09:27.287: [493849] --> 550 5.7.1 Sender unknown
Tue 2018-10-02 08:09:27.287: [493849] Host screening refused connection to 
172.16.0.6:25 from webmail.shinican.com.tw [60.249.54.80:46064] (matched to 
line "all *.tw refuse")
Tue 2018-10-02 08:09:27.288: [493849] SMTP session terminated (Bytes in/out: 
622/3412)


maka sy menambahkan di file HOSTSCREEN.DAT kalimant sbb:
all webmail.shinican.com.tw accept
dan RESTART MDaemon Services

Betul pak?

thanks for ur support..
Suzy


--
--[mdaemon-l]--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com
Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com
Versi terakhir MD 18.0.2, SG 5.5.0




[mdaemon-l] Host Screen refused connection

2018-09-26 Terurut Topik Syafril Hermansyah
On 27/09/18 08:31, Suzy Ariyani (s...@ptbmi.com) wrote:
> td mlm ada email tidak masuk dg header dan SMTP-(in).log sbb:


> Wed 2018-09-26 21:25:28.924: [124780] Host screening refused 
> connection to 172.16.0.6:25 from ip-39-93-static.layerspeed.co.id 
> [120.89.93.39:54008] (matched to line "all *-#-static.* refuse")

ada petunjuknya disini kalau sudah pakai MD 18.x




Mail ditolak karena berasal dri sender host yang koneksinya pakai/mirip
dengan Wired Broadband (Fiber to Home, FTTH, mirip indihome fiber,
Myrepublic dls).

> Apa sy bs/harus tambahkan kalimat sbb? all 
> ip-39-93-static.layerspeed.co.id accept


Ya.

Sudah diupdate ke

ftp://ftp.dutaint.com/altn-mdaemon/miscl/HostScreen.dat


-- 
syafril
---
Syafril Hermansyah
MDaemon-L Moderators, running MDaemon 18.5.0-64 bit
Harap tidak cc: atau kirim ke private mail untuk masalah MDaemon.

Life is really simple, but we insist on making it complicated.
--- Confucius


-- 
--[mdaemon-l]--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com
Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com
Versi terakhir MD 18.0.2, SG 5.5.0




[mdaemon-l] Host Screen refused connection

2018-09-26 Terurut Topik Suzy Ariyani

Semangat pagi pak Syafril..

td mlm ada email tidak masuk dg header dan SMTP-(in).log sbb:
From: Mail Delivery System 
Date: 26 September 2018 21.25.28 GMT+7
To: ewij...@acrcorp.com
Subject: Mail delivery failed: returning message to sender

This message was created automatically by mail delivery software.

A message that you sent could not be delivered to one or more of its
recipients. This is a permanent error. The following address(es) failed:

s...@ptbmi.com
  host bb.ptbmi.com [202.148.25.131]
  SMTP error from remote mail server after MAIL FROM: 
SIZE=36600:

  550 5.7.1 Sender unknown

Wed 2018-09-26 21:25:27.320: [124780] Session 124780; child 0001
Wed 2018-09-26 21:25:27.320: [124780] Accepting SMTP connection from 
120.89.93.39:54008 to 172.16.0.6:25
Wed 2018-09-26 21:25:27.321: [124780] --> 220 bb.ptbmi.com ESMTP MDaemon 
18.0.2; Wed, 26 Sep 2018 21:25:27 +0700

Wed 2018-09-26 21:25:27.340: [124780] <-- EHLO www1.acrcorp.com
Wed 2018-09-26 21:25:27.340: [124780] Performing SPF lookup 
(www1.acrcorp.com / 120.89.93.39)

Wed 2018-09-26 21:25:28.041: [124780] * Result: none; no SPF record in DNS
Wed 2018-09-26 21:25:28.041: [124780]  End SPF results
Wed 2018-09-26 21:25:28.041: [124780] --> 250-bb.ptbmi.com Hello 
www1.acrcorp.com [120.89.93.39], pleased to meet you

Wed 2018-09-26 21:25:28.041: [124780] --> 250-ETRN
Wed 2018-09-26 21:25:28.041: [124780] --> 250-AUTH LOGIN PLAIN
Wed 2018-09-26 21:25:28.041: [124780] --> 250-8BITMIME
Wed 2018-09-26 21:25:28.041: [124780] --> 250-ENHANCEDSTATUSCODES
Wed 2018-09-26 21:25:28.041: [124780] --> 250-STARTTLS
Wed 2018-09-26 21:25:28.041: [124780] --> 250 SIZE 3584
Wed 2018-09-26 21:25:28.066: [124780] <-- STARTTLS
Wed 2018-09-26 21:25:28.066: [124780] --> 220 2.7.0 Ready to start TLS
Wed 2018-09-26 21:25:28.141: [124780] SSL negotiation successful (TLS 1.2, 
521 bit key exchange, 256 bit AES encryption)

Wed 2018-09-26 21:25:28.161: [124780] <-- EHLO www1.acrcorp.com
Wed 2018-09-26 21:25:28.161: [124780] Performing SPF lookup 
(www1.acrcorp.com / 120.89.93.39)

Wed 2018-09-26 21:25:28.229: [124780] * Result: none; no SPF record in DNS
Wed 2018-09-26 21:25:28.229: [124780]  End SPF results
Wed 2018-09-26 21:25:28.229: [124780] --> 250-bb.ptbmi.com Hello 
www1.acrcorp.com [120.89.93.39], pleased to meet you

Wed 2018-09-26 21:25:28.229: [124780] --> 250-ETRN
Wed 2018-09-26 21:25:28.229: [124780] --> 250-AUTH LOGIN PLAIN
Wed 2018-09-26 21:25:28.229: [124780] --> 250-8BITMIME
Wed 2018-09-26 21:25:28.229: [124780] --> 250-ENHANCEDSTATUSCODES
Wed 2018-09-26 21:25:28.229: [124780] --> 250 SIZE 3584
Wed 2018-09-26 21:25:28.247: [124780] <-- MAIL FROM: 
SIZE=36600
Wed 2018-09-26 21:25:28.250: [124780] Performing PTR lookup 
(39.93.89.120.IN-ADDR.ARPA)
Wed 2018-09-26 21:25:28.250: [124780] * D=39.93.89.120.IN-ADDR.ARPA TTL=(11) 
PTR=[ip-39-93-static.layerspeed.co.id]
Wed 2018-09-26 21:25:28.636: [124780] * D=ip-39-93-static.layerspeed.co.id 
TTL=(240) A=[120.89.93.39]

Wed 2018-09-26 21:25:28.636: [124780]  End PTR results
Wed 2018-09-26 21:25:28.638: [124780] Performing IP lookup 
(www1.acrcorp.com)
Wed 2018-09-26 21:25:28.924: [124780] * D=www1.acrcorp.com TTL=(240) 
A=[120.89.93.139]

Wed 2018-09-26 21:25:28.924: [124780]  End IP lookup results
Wed 2018-09-26 21:25:28.924: [124780] --> 550 5.7.1 Sender unknown
Wed 2018-09-26 21:25:28.924: [124780] Host screening refused connection to 
172.16.0.6:25 from ip-39-93-static.layerspeed.co.id [120.89.93.39:54008] 
(matched to line "all *-#-static.* refuse")
Wed 2018-09-26 21:25:28.925: [124780] SMTP session terminated (Bytes in/out: 
753/4582)

Wed 2018-09-26 21:25:28.925: --

Saya coba cari di HostScreen.dat by notepad pagi ini dg keyword:
- acrcorp.com (nihil)
- 120.89.93.139 (nihil)
- 39.93.89.120 (nihil)
- ip-39-93-static.layerspeed.co.id (nihil)

Apa sy bs/harus tambahkan kalimat sbb?
all ip-39-93-static.layerspeed.co.id accept

Mohon pencerahan... 



--
--[mdaemon-l]--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com
Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com
Versi terakhir MD 18.0.2, SG 5.5.0




[MDaemon-L] Host Screen

2014-05-13 Terurut Topik Syafril Hermansyah
On 2014-05-12 12:48, Syafril Hermansyah wrote:
> On 2014-05-12 12:38, krissanto wrote:
>>> Nanti saya usulkan ke developer agar delay verfication hanya berlaku
>>> untuk MSA port saja.
>> Kira - kira realisasinya membutuhkan waktu berapa lama, Pak ? :-D
> 
> Belum tahu, masih harus dipertimbangkan adanya koneksi MD BIS yang masih
> pakai stmp port 25.

Dan sebenarnya fasilitas dynamic screening sudah lumayan memadai untuk
masalah ini.
Upgrade  ke MD 14.0 akan lebih baik, laporan "Account failed
authentication numerous times" yang dilaporkan lebih rinci, sangat
membantu sehingga tidak harus periksa ke log.

Serta turunkan nilai "Watch accounts that fail this many authentication
attempts" menjadi berkisar 3 saja (dari standar 10).

http://mdaemon.dutaint.co.id/14.0/security--dynamic_screening.htm



-- 
syafril
---
Syafril Hermansyah
MDaemon-L Moderators, running MDaemon 14.0.1 Beta C SecurityPlus 4.1.5
Harap tidak cc: atau kirim ke private mail untuk masalah MDaemon.


-- 
--[MDaemon-L]
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server.

Netiket: http://www.netmeister.org/news/learn2quote
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Henti Langgan: Kirim mail ke MDaemon-L-unsubscribe [at] dutaint.com
Berlangganan: kirim mail ke MDaemon-L-subscribe [at] dutaint.com
Versi terakhir MD 13.6.2, SP 4.1.5, BES 2.0.2, OC 2.3.3, SG 2.1.2, PP 2.0.1



[MDaemon-L] Host Screen

2014-05-11 Terurut Topik Syafril Hermansyah
On 2014-05-12 12:38, krissanto wrote:
>> Nanti saya usulkan ke developer agar delay verfication hanya berlaku
>> untuk MSA port saja.
> Kira - kira realisasinya membutuhkan waktu berapa lama, Pak ? :-D

Belum tahu, masih harus dipertimbangkan adanya koneksi MD BIS yang masih
pakai stmp port 25.

-- 
syafril
---
Syafril Hermansyah
MDaemon-L Moderators, running MDaemon 14.0.1 Beta C SecurityPlus 4.1.5
Harap tidak cc: atau kirim ke private mail untuk masalah MDaemon.


-- 
--[MDaemon-L]
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server.

Netiket: http://www.netmeister.org/news/learn2quote
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Henti Langgan: Kirim mail ke MDaemon-L-unsubscribe [at] dutaint.com
Berlangganan: kirim mail ke MDaemon-L-subscribe [at] dutaint.com
Versi terakhir MD 13.6.2, SP 4.1.5, BES 2.0.2, OC 2.3.3, SG 2.1.2, PP 2.0.1



[MDaemon-L] Host Screen

2014-05-11 Terurut Topik krissanto

On 5/12/2014 12:21 PM, Syafril Hermansyah wrote:

Nanti saya usulkan ke developer agar delay verfication hanya berlaku
untuk MSA port saja.

Kira - kira realisasinya membutuhkan waktu berapa lama, Pak ? :-D

--
--[MDaemon-L]
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server.

Netiket: http://www.netmeister.org/news/learn2quote
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Henti Langgan: Kirim mail ke MDaemon-L-unsubscribe [at] dutaint.com
Berlangganan: kirim mail ke MDaemon-L-subscribe [at] dutaint.com
Versi terakhir MD 13.6.2, SP 4.1.5, BES 2.0.2, OC 2.3.3, SG 2.1.2, PP 2.0.1



[MDaemon-L] Host Screen

2014-05-11 Terurut Topik Syafril Hermansyah
On 2014-05-12 11:51, krissanto wrote:
> Saya ingin bertanya mengenai host screen,
> 
> Saya telah membuat host screen untuk localhost.domain, ylmf-pc ,
> localhost dan yang berhasil terblok adalah localhost.domain dan
> localhost namun tidak untuk ylmf-pc , apakah ada bug pada Mdaemon dengan
> penggunaan tanda " - " ?

Bukan bug, authenticate session connection memang tidak langsung di
tolak tetapi ditunggu sampai sender kirim authentication command
(deffered/delay verification).

Nanti saya usulkan ke developer agar delay verfication hanya berlaku
untuk MSA port saja.

-- 
syafril
---
Syafril Hermansyah
MDaemon-L Moderators, running MDaemon 14.0.1 Beta C SecurityPlus 4.1.5
Harap tidak cc: atau kirim ke private mail untuk masalah MDaemon.


-- 
--[MDaemon-L]
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server.

Netiket: http://www.netmeister.org/news/learn2quote
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Henti Langgan: Kirim mail ke MDaemon-L-unsubscribe [at] dutaint.com
Berlangganan: kirim mail ke MDaemon-L-subscribe [at] dutaint.com
Versi terakhir MD 13.6.2, SP 4.1.5, BES 2.0.2, OC 2.3.3, SG 2.1.2, PP 2.0.1



[MDaemon-L] Host Screen

2014-05-11 Terurut Topik krissanto

Selamat siang Pak Syafril,

Saya ingin bertanya mengenai host screen,

Saya telah membuat host screen untuk localhost.domain, ylmf-pc , 
localhost dan yang berhasil terblok adalah localhost.domain dan 
localhost namun tidak untuk ylmf-pc , apakah ada bug pada Mdaemon dengan 
penggunaan tanda " - " ?


Saya telah berulang kali melakukan remove kemudian menambahkan kembali 
ymlf-pc namun host ini tidak terblokir oleh mdaemon :-(


Mon 2014-05-12 00:47:42: 05: [069239] Session 069239; child 0001
Mon 2014-05-12 00:47:42: 05: [069239] Accepting SMTP connection from 
[182.79.252.246:58517] to [202.159.14.34:25]
Mon 2014-05-12 00:47:42: 03: [069239] --> 220 mail.victoriabank.co.id 
ESMTP MDaemon 13.6.1; Mon, 12 May 2014 00:47:42 +0700

Mon 2014-05-12 00:47:42: 02: [069239] <-- HELO localhost
Mon 2014-05-12 00:47:42: 03: [069239] --> 250 mail.victoriabank.co.id 
Hello localhost, pleased to meet you

Mon 2014-05-12 00:47:42: 02: [069239] <-- MAIL FROM: 
Mon 2014-05-12 00:47:42: 03: [069239] --> 550 mail.victoriabank.co.id 
does not accept mail from localhost
Mon 2014-05-12 00:47:42: 04: [069239] SMTP session terminated (Bytes 
in/out: 49/214)


Mon 2014-05-12 03:54:38: 05: [070039] Session 070039; child 0001
Mon 2014-05-12 03:54:38: 05: [070039] Accepting SMTP connection from 
[81.140.46.153:59870] to [202.159.14.34:25]
Mon 2014-05-12 03:54:38: 03: [070039] --> 220 mail.victoriabank.co.id 
ESMTP MDaemon 13.6.1; Mon, 12 May 2014 03:54:38 +0700

Mon 2014-05-12 03:54:39: 02: [070039] <-- EHLO ylmf-pc
Mon 2014-05-12 03:54:39: 03: [070039] --> 250-mail.victoriabank.co.id 
Hello ylmf-pc, pleased to meet you

Mon 2014-05-12 03:54:39: 03: [070039] --> 250-ETRN
Mon 2014-05-12 03:54:39: 03: [070039] --> 250-AUTH LOGIN CRAM-MD5 PLAIN
Mon 2014-05-12 03:54:39: 03: [070039] --> 250-8BITMIME
Mon 2014-05-12 03:54:39: 03: [070039] --> 250-STARTTLS
Mon 2014-05-12 03:54:39: 03: [070039] --> 250 SIZE
Mon 2014-05-12 03:54:39: 02: [070039] <-- AUTH LOGIN
Mon 2014-05-12 03:54:39: 03: [070039] --> 334 VXNlcm5hbWU6
Mon 2014-05-12 03:54:39: 02: [070039] <-- 
dGFtdW5hbUB2aWN0b3JpYWJhbmsuY28uaWQ=

Mon 2014-05-12 03:54:39: 03: [070039] --> 334 UGFzc3dvcmQ6
Mon 2014-05-12 03:54:40: 02: [070039] <-- **
Mon 2014-05-12 03:54:40: 03: [070039] --> 535 Authentication failed
Mon 2014-05-12 03:54:40: 05: [070039] Connection closed
Mon 2014-05-12 03:54:40: 04: [070039] SMTP session terminated (Bytes 
in/out: 82/289)


--
--[MDaemon-L]
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server.

Netiket: http://www.netmeister.org/news/learn2quote
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Henti Langgan: Kirim mail ke MDaemon-L-unsubscribe [at] dutaint.com
Berlangganan: kirim mail ke MDaemon-L-subscribe [at] dutaint.com
Versi terakhir MD 13.6.2, SP 4.1.5, BES 2.0.2, OC 2.3.3, SG 2.1.2, PP 2.0.1