MRatWork Forum by Mustafa Ramadhan

Language Specific Discussions => Indonesia Users => Topic started by: Syams on 2019-09-05, 02:59:06

Title: Spam Email Kloxo
Post by: Syams on 2019-09-05, 02:59:06

Sejak beberapa hari lalu saya kerap dapat email dari kloxo. Isinya:

Host: abc.domainsaya.com
Date: Sep-05 12:40
Port: 53
Action: sh /script/restart-dns --force >/dev/null 2>&1

Saya sudah masukan kode tersebut termasuk mengganti /restart menjadi /stop tapi tetap dapat email tersebut. Apakah ada error yang terjadi?

Bagaimana cara mengatasinya?

(https://i.postimg.cc/W1vZxgWz/screenshot-812.png)

Title: Re: Spam Email Kloxo
Post by: MRatWork on 2019-09-05, 03:45:24

Apa hasil dari 'sh /script/restart-dns'

Title: Re: Spam Email Kloxo
Post by: Syams on 2019-09-05, 12:46:29

Gak ada hasil apa-apa

(https://i.postimg.cc/zGdd0rKX/screenshot-812.png)

Title: Re: Spam Email Kloxo
Post by: MRatWork on 2019-09-05, 13:03:52

Infokan 'sh /script/sysinfo'.

Title: Re: Spam Email Kloxo
Post by: Syams on 2019-09-05, 15:13:50

Last login: Tue Sep  3 15:01:13 2019 from 140.213.2.209
grep: unrecognized option '--Disabled--'
Usage: grep [OPTION]... PATTERN [FILE]...
Try 'grep --help' for more information.

A. Control Panel:
   - Kloxo-MR: 7.0.0.c-2019070501
   - Web: hiawatha-10.9.0-f.2.mr.el6.x86_64
   - PHP: php56s - 5.6.31-1.ius.centos6 (fpm mode)
B. Plateform:
   - OS: CentOS release 6.10 (Final) x86_64
   - Hostname: abd.openulis.com
C. Services:
   1. MySQL: MariaDB-server-10.0.38-1.el6.x86_64
   2. PHP:
      - Installed:
        - Branch: php71w-cli-7.1.31-1.w6.x86_64
        - Multiple:
          * php52m - 5.2.17-102.mr.el6
          * php53m - 5.3.29-1.ius.centos6
          * php54m - 5.4.45-1.ius.centos6
          * php55m - 5.5.38-1.ius.centos6
          * php56m - 5.6.31-1.ius.centos6
          * php70m - 7.0.32-1.ius.centos6
          * php71m - 7.1.24-1.ius.centos6
      - Used: php71m-fpm
      - Multiple: disable
   3. Web Used: hiawathaproxy
     - Hiawatha: hiawatha-10.9.0-f.2.mr.el6.x86_64
     - Lighttpd: lighttpd-1.4.47-2.el6.x86_64
     - Nginx: nginx-1.17.3-1.el6.ngx.x86_64
     - Apache: httpd24u-2.4.41-1.el6.ius.x86_64
       - PHP Type: php-fpm_event
       - Secondary PHP: on
   4. WebCache: none
     - ATS: --uninstalled--
     - Squid: --uninstalled--
     - Varnish: --uninstalled--
   5. Dns: nsd
     - Bind: bind-9.9.9-1.mr.el6.x86_64
     - DJBDns: djbdns-1.05-17.4.mr.el6.x86_64
     - NSD: nsd-4.1.27-1.mr.el6.x86_64
     - PowerDNS: pdns-4.1.8-1.el6.MIND.x86_64
     - Yadifa: yadifa-2.2.5-1.mr.el6.x86_64
   6. Mail: qmail-toaster-1.03-1.3.57.mr.el6.x86_64
      - pop3/imap4: none
      - smtp: qmail-toaster-1.03-1.3.57.mr.el6.x86_64
      - spam: bogofilter-1.2.4-1.el6.x86_64
   7. FTP: pure-ftpd
      - pure-ftpd: pure-ftpd-1.0.49-1.mr.el6.x86_64
   8. Stats: --Disabled--
      - --Disabled--: --uninstalled--
D. Memory:
             total       used       free     shared    buffers     cached
Mem:           996        846        149         52         56        284
-/+ buffers/cache:        504        491
Swap:         1023        160        863
E. Disk Space:
Filesystem      Size  Used Avail Use% Mounted on
/dev/vda1        25G  8.5G   15G  37% /


*** Process Time: 00:00:00:46.46623 (dd:hh:mm:ss:xxxxxx) ***

* Note: run 'sh /script/sysinfo -y' if you want run 'fix-service-list' also
        (importance after Kloxo-MR update)

Title: Re: Spam Email Kloxo
Post by: MRatWork on 2019-09-05, 17:43:25

Coba lakukan 'service nsd restart' (karena anda pakai nsd sebagai dns server). Apa hasilnya.

Title: Re: Spam Email Kloxo
Post by: Syams on 2019-09-05, 18:02:21

Ini Master hasilnya:
[root@abd ~]# service nsd restart
Stopping nsd:                                              [FAILED]
Starting nsd:                                              [FAILED]
[root@abd ~]# ^C

Title: Re: Spam Email Kloxo
Post by: MRatWork on 2019-09-06, 03:06:13

Beri saya akses ke server anda.

Title: Re: Spam Email Kloxo
Post by: Syams on 2019-09-06, 09:03:06

Maksudnya SSH om?
Atau Panel?

Untuk 2 hal itu user dan pass, sama seperti kemarin yang pernah saya kirim.

Title: Re: Spam Email Kloxo
Post by: MRatWork on 2019-09-06, 09:59:17

Quote from: Syams on 2019-09-05, 18:02:21

Ini Master hasilnya:
[root@abd ~]# service nsd restart
Stopping nsd:                                              [FAILED]
Starting nsd:                                              [FAILED]
[root@abd ~]# ^C

Ini karena anda tambahkan domain.com di 'secondary/slave dns configures' sedangkan domain. com sendiri sudah berada di server. Jelas bikin 'bingung' dnsnya.

Jadi, kalau ns1 dan ns2 pakai IP sama maka tidak perlu ada 'secondary dns' segala.

Title: Re: Spam Email Kloxo
Post by: Syams on 2019-09-06, 11:56:45

apa ini juga sebab SMTP saya error dan tidak bisa kirim email juga?

Title: Re: Spam Email Kloxo
Post by: MRatWork on 2019-09-06, 12:16:18

Yang jelas salahsatu domain anda belum disetting 'Email Auth'.

Title: Re: Spam Email Kloxo
Post by: Syams on 2019-09-06, 14:50:47

Baik Pak, saya hapus 1 domain yang sudah tidak terpakai.