Mendeteksi Identitas Spammer dari Email Queue

#mailq

9202D6A8A66 7810 Wed Feb 22 16:01:21xxxxxxxxxxxxxxxxx(host x.x.x.x[x.x.x.x] said: 451 Too many connections, http://x.x.x.x/osfaq.php?cid=2 (in reply to RCPT TO command))

yg harus dilakukan adalah mengecek message id tersebut dengan command postcat

#postcat /opt/zimbra/postfix/sbin/postcat /opt/zimbra/data/postfix/spool/deferred/1/128F5180EE9701

perlu diketahui, jika message id berawalan

1 = /opt/zimbra/data/postfix/spool/deferred/1/
2 = /opt/zimbra/data/postfix/spool/deferred/2/
3 = /opt/zimbra/data/postfix/spool/deferred/3/
.
.
.
9 = /opt/zimbra/data/postfix/spool/deferred/9/
dan seterusnya.

maka hasilnya terlihat, selanjutnya jika alamat email terlihat, maka lakukan disable / closed alamat email tersebut agar tidak melakukan broadcast

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Google photo

You are commenting using your Google account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s