MRatWork Forum by Mustafa Ramadhan - Setting IPTABLES dan tanya cara mengetahui akun spammer

Sponsor:
Server and Web Integrator
Link:
6.5.0 or 7.0.0
Click for "How to install"
Donation/Sponsorship:
Kloxo-MR is open-source.
Donate and or Sponsorship always welcome.
Click to:

MRatWork Forum | Please login or register. | 2017-11-07, 23:41:56

- MRatWork Forum by Mustafa Ramadhan »
- Language Specific Discussions »
- Indonesia Users »
- Setting IPTABLES dan tanya cara mengetahui akun spammer

« previous next »

- Print

Pages: 1 [2] 3 4 Go Down

### Author Topic: Setting IPTABLES dan tanya cara mengetahui akun spammer (Read 9292 times)

0 Members and 1 Guest are viewing this topic.

#### redpages

- Senior Member
- Posts: 316
- Karma: +0/-0

##### Re: Setting IPTABLES dan tanya cara mengetahui akun spammer

« Reply #15 on: 2015-05-02, 01:46:23 »
maksudnya BAN itu blokir? siapakah yg ngeBAN? sementara akun tersebut berada dalam kendali saya (VPS)
Logged

#### MRatWork

- Administrator
- The Elite
- Posts: 15,381
- Karma: +112/-9
- Gender:

##### Re: Setting IPTABLES dan tanya cara mengetahui akun spammer

« Reply #16 on: 2015-05-02, 01:59:01 »
Ya admin yang blokir.
Cara lain, melalui 'admin > clients > (client terduga > php configure > advanced php configure', tambahkan 'mail' pada 'disable_functions'.
Logged
..:: MRatWork (Mustafa Ramadhan Projects) ::..
-- Server/Web-integrator - Web Hosting (Kloxo-MR READY!) --

#### redpages

- Senior Member
- Posts: 316
- Karma: +0/-0

##### Re: Setting IPTABLES dan tanya cara mengetahui akun spammer

« Reply #17 on: 2015-05-02, 03:02:57 »
oiya seh, memang itu saya mendisablednya. Tapi bagaimana cara memastikan bahwa akun tersebut bermasalah, jadi tempat spam? Saya diabled zubairit berdasar asumsi dari command pak MR yang menghasilkan barisan berisi hanya akun tersebut. Maksudnya sendiri pun saya ga paham.
Terima kasih pencerahannya
Apr 30 03:12:05 server20 root: sendmail: CALLER="php-fpm: pool zubairit" PWD="/h ome/zubairit/zubairitrainer.com" BAN="yes"
Apr 30 03:12:15 server20 root: sendmail: CALLER="php-fpm: pool zubairit" PWD="/h ome/zubairit/zubairitrainer.com" BAN="yes"
Apr 30 03:12:45 server20 root: sendmail: CALLER="php-fpm: pool zubairit" PWD="/h ome/zubairit/zubairitrainer.com" BAN="yes"
Logged

#### MRatWork

- Administrator
- The Elite
- Posts: 15,381
- Karma: +112/-9
- Gender:

##### Re: Setting IPTABLES dan tanya cara mengetahui akun spammer

« Reply #18 on: 2015-05-02, 04:09:35 »
Jika melakukan 'disable_functions' untuk 'mail' maka semua website dibawah zubairit akan tidak bisa sendmail melalui mail(). Kasihan website yang tidak menjadi sumber spam.
Dengan teknik 'ban' maka hanya website yang diinginkan saja tidak bisa kirim email. Laporan tetap ada.
Adalah tugas anda untuk membersihkan code php di website agar bersih. Dengan teknik 'ban' anda akan tahu apakah sudah bersih atau belum karena kalau belum maka akan selalu ter-rekam sendmail melalui log tersebut.
Logged
..:: MRatWork (Mustafa Ramadhan Projects) ::..
-- Server/Web-integrator - Web Hosting (Kloxo-MR READY!) --

#### redpages

- Senior Member
- Posts: 316
- Karma: +0/-0

##### Re: Setting IPTABLES dan tanya cara mengetahui akun spammer

« Reply #19 on: 2015-05-02, 04:22:04 »
jadi sebenarnya meski fungsi 'disable_functions' pada 'mail' aktivitas spaming tetap terjadi ya, hanya sampai tidak berhasil terkirim keluar? sampai dilakukan pembersihan pada code.
Terima kasih pencerahannya
Logged

#### redpages

- Senior Member
- Posts: 316
- Karma: +0/-0

##### Re: Setting IPTABLES dan tanya cara mengetahui akun spammer

« Reply #20 on: 2015-05-02, 04:34:04 »
saya coba lakukan di vps lain perintah ini : cat /var/log/maillog|grep PWD
koq hasilnya : cat: /var/log/maillog: No such file or directory.
saya ls memang tidak ada file tsb
Quote

> [root@server50 ~]# cat /var/log/maillog|grep PWD
> cat: /var/log/maillog: No such file or directory
> [root@server50 ~]# ls /var/log/
> boot.log httpd messages pagespeed qmail spooler
> cron maillog-1 messages.1 php-fpm rpmpkgs yum.log
> cron.1 maillog-2 mysqld.log pm rpmpkgs.1
> hiawatha maillog.1 nginx pureftpd.log secure
> [root@server50 ~]# sh /script/sysinfo

sys vps tersebut :
Quote

> A. Kloxo-MR: 6.5.0.f-2013122002
> B. OS: CentOS release 5.10 (Final) i686
> C. Apps:
> 1. MySQL: mysql55-5.5.41-2.ius.el5
> 2. PHP: php54-5.4.37-1.ius.el5
> 3. Httpd: httpd-2.2.29-1.mr.el5
> 4. Lighttpd: --uninstalled--
> 5. Nginx: nginx-1.7.10-1.el5.ngx
> 6. Qmail: qmail-toaster-1.03-1.3.46.mr.el5
> - with: courier-imap-toaster-4.1.2-1.3.18.mr.el5
> 7. Dns: djbdns-1.05-17.4.mr.el5
> D. Php-type (for Httpd/proxy): mod_php_ruid2
> E. Memory:
> total used free shared buffers cached
> Mem: 756 722 33 0 15 210
> -/+ buffers/cache: 496 260
> Swap:

0 0 0
Logged

#### MRatWork

- Administrator
- The Elite
- Posts: 15,381
- Karma: +112/-9
- Gender:

##### Re: Setting IPTABLES dan tanya cara mengetahui akun spammer

« Reply #21 on: 2015-05-02, 05:25:35 »
Infokan 'dir -l /var/log/maillog*'
Logged
..:: MRatWork (Mustafa Ramadhan Projects) ::..
-- Server/Web-integrator - Web Hosting (Kloxo-MR READY!) --

#### redpages

- Senior Member
- Posts: 316
- Karma: +0/-0

##### Re: Setting IPTABLES dan tanya cara mengetahui akun spammer

« Reply #22 on: 2015-05-02, 09:36:34 »
[root@server50 ~]# dir -l /var/log/maillog*
-rw------- 1 root root 13309956 Apr 30 02:57 /var/log/maillog-1
-rw------- 1 root root 11578799 Apr 23 02:57 /var/log/maillog-2
-rw------- 1 root root 2175520 Apr 27 04:02 /var/log/maillog.1
Logged

#### MRatWork

- Administrator
- The Elite
- Posts: 15,381
- Karma: +112/-9
- Gender:

##### Re: Setting IPTABLES dan tanya cara mengetahui akun spammer

« Reply #23 on: 2015-05-02, 09:40:56 »
Ganti saja dengan 'cat /var/log/maillog-1|grep PWD'.
Coba update server anda dengan 'yum clean all; yum update -y' dan kemudian jalankan 'sh /script/cleanup' jika tidak ada error.
Logged
..:: MRatWork (Mustafa Ramadhan Projects) ::..
-- Server/Web-integrator - Web Hosting (Kloxo-MR READY!) --

#### redpages

- Senior Member
- Posts: 316
- Karma: +0/-0

##### Re: Setting IPTABLES dan tanya cara mengetahui akun spammer

« Reply #24 on: 2015-05-02, 12:08:04 »
hasilnya gini :
Quote

> [root@server50 ~]# yum clean all; yum update -y
> Loaded plugins: fastestmirror, priorities, protectbase, replace
> Cleaning up Everything
> Cleaning up list of fastest mirrors
> Loaded plugins: fastestmirror, priorities, protectbase, replace
> Determining fastest mirrors
> Could not retrieve mirrorlist http://mirrorlist.centos.org/?release=5&arch=i386&repo=os error was
> [Errno 4] IOError: <urlopen error (-3, 'Temporary failure in name resolution')>
> Error: Cannot find a valid baseurl for repo: base

Logged

#### MRatWork

- Administrator
- The Elite
- Posts: 15,381
- Karma: +112/-9
- Gender:

##### Re: Setting IPTABLES dan tanya cara mengetahui akun spammer

« Reply #25 on: 2015-05-02, 12:55:01 »
Infokan 'cat /etc/resolv.conf'.
Logged
..:: MRatWork (Mustafa Ramadhan Projects) ::..
-- Server/Web-integrator - Web Hosting (Kloxo-MR READY!) --

#### redpages

- Senior Member
- Posts: 316
- Karma: +0/-0

##### Re: Setting IPTABLES dan tanya cara mengetahui akun spammer

« Reply #26 on: 2015-05-02, 13:10:33 »
Berikut:
Code: [Select]

    [root@server50 ~]# cat /etc/resolv.conf
    nameserver 8.8.8.8
    nameserver 117.103.67.235

IP vps sendiri adalah: 103.237.33.51
Logged

#### MRatWork

- Administrator
- The Elite
- Posts: 15,381
- Karma: +112/-9
- Gender:

##### Re: Setting IPTABLES dan tanya cara mengetahui akun spammer

« Reply #27 on: 2015-05-02, 13:22:13 »
Coba jadikan:
Code: [Select]

    nameserver 117.103.67.235
    nameserver 8.8.8.8
    nameserver 8.8.4.4
    nameserver 208.67.222.222
    nameserver 208.67.220.220

Logged
..:: MRatWork (Mustafa Ramadhan Projects) ::..
-- Server/Web-integrator - Web Hosting (Kloxo-MR READY!) --

#### redpages

- Senior Member
- Posts: 316
- Karma: +0/-0

##### Re: Setting IPTABLES dan tanya cara mengetahui akun spammer

« Reply #28 on: 2015-05-02, 15:10:23 »
tetap pak
Quote

> [root@server50 ~]# cat /etc/resolv.conf
> nameserver 117.103.67.235
> nameserver 8.8.8.8
> nameserver 8.8.4.4
> nameserver 208.67.222.222
> nameserver 208.67.220.220
> [root@server50 ~]# [root@server50 ~]# yum clean all; yum update -y
> -bash: [root@server50: command not found
> Loaded plugins: fastestmirror, priorities, protectbase, replace
> Loading mirror speeds from cached hostfile
> Could not retrieve mirrorlist http://mirrorlist.centos.org/?release=5&arch=i386&repo=os error was
> [Errno 4] IOError: <urlopen error (-3, 'Temporary failure in name resolution')>
> Error: Cannot find a valid baseurl for repo: base
> [root@server50 ~]#

Logged

#### MRatWork

- Administrator
- The Elite
- Posts: 15,381
- Karma: +112/-9
- Gender:

##### Re: Setting IPTABLES dan tanya cara mengetahui akun spammer

« Reply #29 on: 2015-05-02, 15:20:45 »
Ada masalah di url dari centos sendiri.
Bisa jadi karena sudah/hampir expire, CentOS 5 tidak terlalu diurus lagi oleh pihak CentOS.
Logged
..:: MRatWork (Mustafa Ramadhan Projects) ::..
-- Server/Web-integrator - Web Hosting (Kloxo-MR READY!) --

- Print

Pages: 1 [2] 3 4 Go Up
« previous next »

- MRatWork Forum by Mustafa Ramadhan »
- Language Specific Discussions »
- Indonesia Users »
- Setting IPTABLES dan tanya cara mengetahui akun spammer

MRatWork Affiliates: BIGRAF(R) Inc. House of LMAR EFARgrafix

..:: Monetize Your Website with ylliXmedia ::.. ..:: Online Advertising that Sale Anything with ylliXmedia ::..

- Design By SMFSimple.com
- SMF 2.0.14 | SMF © 2017, Simple Machines

Page created in 0.042 seconds with 17 queries.

Mirror created by MasterkinG32.CoM