[MDaemon-L] Email dobel

2017-05-23 Terurut Topik arianto 
Dear pak Syafril,

Berikut contoh email dobelnya.


Kalau mail dobel yang perlu saya lihat adalah message header dari minimal 2 
buah message yang dobel/duplicate.

Message duplicate adalah message lain yang diterima pada tanggal/jam berbeda 
tetapi sender/subject dan isinya persis sama.

> Received: from pop.paidesign.com ([43.252.8.2])
> by mail.paidesign.com (mail.paidesign.com)
> (MDaemon PRO v9.6.6)
> with DomainPOP id md5276654.msg
> for ; Tue, 23 May 2017 13:14:45 +0700
> X-Spam-Processed: mail.paidesign.com, Tue, 23 May 2017 13:14:45 +0700
> (not processed: recipient jamalu...@paidesign.com in exclude file)
> X-MDRemoteIP: 43.252.8.2
> X-Return-Path: akshay.saw...@in.pwc.com
> X-Envelope-From: akshay.saw...@in.pwc.com
> X-MDaemon-Deliver-To: jamalu...@paidesign.com
> Return-Path: 
> Delivered-To: pai0...@paidesign.com
> Received: from la04.dewaweb.com
> by la04.dewaweb.com (Dovecot) with LMTP id 8d2gJ+V/IlnXPgsAmG3VWQ
> for ; Sun, 21 May 2017 23:06:29 -0700
> Return-path: 
> Envelope-to: aria...@paidesign.com,
> rmuch...@paidesign.com,
> jamalu...@paidesign.com
> Delivery-date: Sun, 21 May 2017 23:06:29 -0700
> Received: from titan.dewaspamguard.com ([198.23.154.7]:41722)
> by la04.dewaweb.com with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
> (Exim 4.89)
> (envelope-from )
> id 1dCgTw-0035SR-T7; Sun, 21 May 2017 23:06:29 -0700
> Received: from lxsmpr20.pwc.com ([155.201.248.112])
> by titan.dewaspamguard.com with esmtps 
> (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
> (Exim 4.86)
> (envelope-from )
> id 1dCgSa-0006uK-VT; Mon, 22 May 2017 13:04:56 +0700
> Received: from intlnamsmtp10.nam.pwcinternal.com 
> (MATLKSMTPGWP001.nam.pwcinternal.com [10.16.104.85])
> by lxsmpr20.nam.pwcinternal.com (8.16.0.17/8.16.0.17) with ESMTP id 
> v4M64o1b026462;
> Mon, 22 May 2017 02:04:51 -0400
> To: "arianto" 
> Cc: amol.pit...@in.pwc.com, depankar@in.pwc.com, jatish.mo...@in.pwc.com,
> ricky.ut...@id.pwc.com, ricky.artan...@id.pwc.com,
> samuel.wibowa...@id.pwc.com, "'Rita Muchdin'" 
> ,
> , aakash.go...@in.pwc.com
> MIME-Version: 1.0
> Subject: Fw: Without Prejudice - Autodesk Software License Review at PT 
> Paramita
> Abirama Istasadhya
> X-KeepSent: 8342256F:45E94B80-65258128:002122D5;
> type=4; name=$KeepSent
> X-Mailer: IBM Notes Release 9.0.1FP4 SHF342 September 16, 2015
> Message-ID: 
> 
> From: akshay.saw...@in.pwc.com
> Date: Mon, 22 May 2017 11:34:40 +0530
> X-MIMETrack: S/MIME Sign by NLNOTES.EXE on Akshay Sawant/IN/M/PwC(Release 
> 9.0.1FP4
> SHF342|September 16, 2015) at 22/05/2017 11:34:40 AM,
> Serialize by NLNOTES.EXE on Akshay Sawant/IN/M/PwC(Release 9.0.1FP4
> SHF342|September 16, 2015) at 22/05/2017 11:34:40 AM,
> Serialize complete at 22/05/2017 11:34:40 AM,
> S/MIME Sign failed at 22/05/2017 11:34:41 AM: The cryptographic key was 
> not
> found,
> Serialize by Router on INTLNAMSMTP10/US/INTL at 05/22/2017 02:04:51 AM,
> Serialize complete at 05/22/2017 02:04:51 AM
> Content-Type: multipart/alternative; boundary="=_alternative 
> 0021633365258128_="
> X-Proofpoint-PoS-Virus-Version: PwCProdVirusScanned
> X-Proofpoint-Spam-Details: rule=notspam policy=outboundspam score=0 
> priorityscore=1501 malwarescore=0
> suspectscore=9 phishscore=0 bulkscore=0 spamscore=0 clxscore=1031
> lowpriorityscore=0 impostorscore=0 adultscore=0 classifier=spam adjust=0
> reason=mlx scancount=1 engine=8.0.1-170328 definitions=main-1705220031
> Authentication-Results: titan.dewaspamguard.com; dmarc=none 
> header.from=in.pwc.com
> X-Dewaweb-Class: ham
> X-Dewaweb-Evidence: Combined (0.00)
> X-Recommended-Action: accept
> X-Filter-ID: 
> s0sct1PQhAABKnZB5plbIevfThmsD1/7rH44RTxnWvATg/OKukGcPw5JLwdsR579rFjrsi4qLcmK
> kxFh6VNjEypjp0St8CqNo/WtQtqtkWDHnu8was3t3DYcwTNUjEN6qGnP5pHiZjdglF+U/SDAJOdh
> KZR+1LGcv/ZrRBTSr/b4EUwk69t/o2I4+GsXn2PQzGv0m4lC3sMQmcFI+/JnFt6PJBSmHxmFmrjJ
> 5B0A2wrEMBiHOB3yN7EwtLQPDsD3jJ9rh4GxyNh0McjU6ut9QOWBOXp8nHKe0R+FkIqN7hkAOryw
> n3/gMzjdD0hDmYExZkA7l1pxKXon+PNmjiJyZ59Wyy39ARVu6lpph/EphEkvwZ8xpmVRnZs4VN6W
> qUyb5iXdPRt1hMv4ogXDSfSIZwFKpw6uarMIchUUKBPMSwoWtP6B+fEX5nAvl1CgXiH9Q+CW+UYD
> fWNcm6W9yD2WU4lk345Lf75dTfopLfFTlAOWinTDmzgOjAvlgshtCUxkp5gtNQmDuN0F9zdGKZpQ
> Cfhb98weLdWb28m2etxsUOyXeUpztKD5Bv43nJAmqzMu4M0RIJ6vJ5RdPCpwR0cc4ghfVxVKHDwa
> ennd3fZNNmerwifCrf/YsNGdKYs5FnJUxpfx+PQ8cEegLZeysc62Q9ngocQ7Gwu99/xeJJi0puw8
> qqmNKwE6cxyhn5rTbGE6i3r8yj3pBkV5wJ0FbgHeUd4bejFKDkCpKMa+0OBOpueNR8z5QApT3Qh+
> amEG1YoVlb77urCb2EtSPxQjPQYi6Z4kWCol1BgsrDqkrmX3pgliryz+e0+zNLHJBCLhKoRf7k9+
> JTYOs9yXhAvWAE5bmg==
> X-Report-Abuse-To: s...@atlas.dewaspamguard.com
> X-Spam-Status: No, score=0.3
>

[MDaemon-L] Problem pada Antivirus dan quarantine

2017-05-23 Terurut Topik Panji Agung 
Dear Pak syafril

kami masih mendapati email berpassword masuk quarantine
pada konfigurasi antivirus kami sudah sesuaikan dengan saran dari bapak
 berikut



namun masih saja email ber password masuk quarantine
bahkan ada kasus kami sudah masukan doamin email kedalam Exclusion list
antivirus
namun email dari situ tetap terquarantine
berikut log kasus tersebut untuk AVnya

Tue 2017-05-23 18:52:29.267: SecurityPlus AntiVirus processing
c:\mdaemon\queues\local\md35001523217.msg...
Tue 2017-05-23 18:52:29.267: * Message return-path: prvs=1316ac021b=
panji.ag...@dwisapta.com
Tue 2017-05-23 18:52:29.267: * Message from: panji.ag...@dwisapta.com
Tue 2017-05-23 18:52:29.267: * Message to: rian.b...@dwisapta.com
Tue 2017-05-23 18:52:29.267: * Message subject: FW2: coba kirim file
berpassword lokal domain
Tue 2017-05-23 18:52:29.267: * Message ID: <002601d2d3bb$0ca7bbf0$25f733d0$@
dwisapta.com>
Tue 2017-05-23 18:52:29.267: Start SecurityPlus AntiVirus results
Tue 2017-05-23 18:52:29.267: ** Address is in virus scanning exclusion list
- skipping virus scan*
Tue 2017-05-23 18:52:29.287: End of SecurityPlus AntiVirus results


dan berikut log yang kami temukan pada smtp-in untuk email yang sama

Tue 2017-05-23 18:52:28.193: 05: Session 115194; child 0001
Tue 2017-05-23 18:52:28.193: 05: Accepting SMTP connection from
10.77.211.9:59722 to 10.77.209.13:25
Tue 2017-05-23 18:52:28.194: 03: --> 220 dsp.dwisapta.com ESMTP MDaemon
16.5.2; Tue, 23 May 2017 18:52:28 +0700
Tue 2017-05-23 18:52:28.209: 02: <-- EHLO PanjiAgung
Tue 2017-05-23 18:52:28.209: 03: --> 250-dsp.dwisapta.com Hello PanjiAgung
[10.77.211.9], pleased to meet you
Tue 2017-05-23 18:52:28.210: 03: --> 250-ETRN
Tue 2017-05-23 18:52:28.210: 03: --> 250-AUTH LOGIN CRAM-MD5 PLAIN
Tue 2017-05-23 18:52:28.210: 03: --> 250-8BITMIME
Tue 2017-05-23 18:52:28.210: 03: --> 250-ENHANCEDSTATUSCODES
Tue 2017-05-23 18:52:28.210: 03: --> 250-STARTTLS
Tue 2017-05-23 18:52:28.210: 03: --> 250 SIZE 35875000
Tue 2017-05-23 18:52:28.211: 02: <-- AUTH LOGIN
Tue 2017-05-23 18:52:28.211: 03: --> 334 VXNlcm5hbWU6
Tue 2017-05-23 18:52:28.211: 02: <-- cGFuamkuYWd1bmdAZHdpc2FwdGEuY29t
Tue 2017-05-23 18:52:28.211: 03: --> 334 UGFzc3dvcmQ6
Tue 2017-05-23 18:52:28.212: 02: <-- **
Tue 2017-05-23 18:52:28.213: 03: --> 235 2.7.0 Authentication successful
Tue 2017-05-23 18:52:28.213: 01: Authenticated as panji.ag...@dwisapta.com
Tue 2017-05-23 18:52:28.222: 02: <-- MAIL FROM: 
Tue 2017-05-23 18:52:28.224: 03: --> 250 2.1.0 Sender OK
Tue 2017-05-23 18:52:28.225: 02: <-- RCPT TO: 
Tue 2017-05-23 18:52:28.227: 03: --> 250 2.1.5 Recipient OK
Tue 2017-05-23 18:52:28.228: 02: <-- DATA
Tue 2017-05-23 18:52:28.229: 01: Creating temp file (SMTP):
c:\mdaemon\queues\temp\md5014584.tmp
Tue 2017-05-23 18:52:28.229: 03: --> 354 Enter mail, end with .
Tue 2017-05-23 18:52:28.253: 01: Message size: 443182 bytes
Tue 2017-05-23 18:52:28.254: 06: Passing message through AntiVirus (Size:
443182)...
Tue 2017-05-23 18:52:28.255: 06: *  Recipient or sender in exclusion list
Tue 2017-05-23 18:52:28.255: 06:  End AntiVirus results
Tue 2017-05-23 18:52:28.256: 11: Passing message through ClamAV Plugin
(c:\mdaemon\queues\temp\md5014584.tmp)...
Tue 2017-05-23 18:52:28.256: 11: *  Message-ID:
<002601d2d3bb$0ca7bbf0$25f733d0$@dwisapta.com>
Tue 2017-05-23 18:52:28.320: 11: **  Virus result: 10 - contains
password-protected/encrypted file and could not be scanned - quarantined*
Tue 2017-05-23 18:52:28.373: 01: Message creation successful:
c:\mdaemon\queues\inbound\md5436256.msg
Tue 2017-05-23 18:52:28.373: 03: --> 250 2.6.0 Ok, message saved
>
Tue 2017-05-23 18:52:30.827: 02: <-- QUIT
Tue 2017-05-23 18:52:30.827: 03: --> 221 2.0.0 See ya in cyberspace
Tue 2017-05-23 18:52:30.827: 01: SMTP session successful (Bytes in/out:
443350/543)


berdasarkan Log AV sudah *skipping virus scan* namun pada smtp-in
masih *contains
password-protected/encrypted file and could not be scanned - quarantined*
mohon bantuanya pak.
terima kasih
​

[MDaemon-L] maill direject oleh server Mdaemon

2017-05-23 Terurut Topik safrizal 
On 23/05/17 10:05, safrizal wrote:
> Mohon bantuannya kolega kita mengeluh tidak bisa kirim 
> email ke kita dengan notifiaksi di mereka sbb dbawah ini


Notifikasinya tidak lengkap, mestinya ada lampiran file *.txt yang isinya
diagnostic.

Atau carikan saja transaksi tolakkannya di smtp-in log tanggal 23 May
2017 10:06:03 +0700

Cara mencari transaksi dari log lihat disini

http://www.mail-archive.com/mdaemon-l@dutaint.com/msg38093.html

dalam hal ini pakai cara 2.A. Menggunakan Glogg (Gnome Log Grep) for windows
akan lebih mudah.
Lokasi log ada di \\mdaemon\logs.
Gunakan katakunci pencarian "msaj...@novanetworks.com" (tanpa tanda kutip).

> terlampir pak Lognya 







"This e-mail and any attachments may contain confidential and privileged 
information. If you are not
the intended recipient, please notify the sender immediately by return e-mail, 
delete this e-mail and -
destroy any copies. Any dissemination or use of this information by a person 
other than the intended
recipient is unauthorized and may be illegal."

==
"E-mail berikut beserta lampiran didalamnya bersifat rahasia dan ditujukan 
secara khusus. Bilamana
anda bukanlah dari alamat yang dituju, mohon memberitahukan segera kepada 
pengirim dengan  -
mengirim kembali, menghapus isi serta duplikasi dari informasi tersebut. Segala 
penyalahgunaan atas
informasi terhadap penerima yang bukan seharusnya adalah tindakan melanggar 
hukum."

CARE International Indonesia

-- 
--MDaemon-L--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server.

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com
Versi terakhir MD 17.0.2, SP 5.1.0, OC 4.5.0, SG 4.5.1

Tue 2017-05-23 00:57:48.843: [094200] Session 094200; child 0003
Tue 2017-05-23 00:57:48.843: [094200] Accepting SMTP connection from 
207.107.112.190:7034 to 202.137.29.190:25
Tue 2017-05-23 00:57:48.843: [094200] --> 220-mail.careind.or.id ESMTP MDaemon 
17.0.0; Tue, 23 May 2017 00:57:48 +0700
Tue 2017-05-23 00:57:48.843: [094200] --> 220-Care International Indonesia 
Messaging Server
Tue 2017-05-23 00:57:48.843: [094200] --> 220 Unauthorized relay prohibited
Tue 2017-05-23 00:57:49.125: [094200] <-- EHLO mail.novanetworks.com
Tue 2017-05-23 00:57:49.125: [094200] --> 250-mail.careind.or.id Hello 
mail.novanetworks.com [207.107.112.190], pleased to meet you
Tue 2017-05-23 00:57:49.125: [094200] --> 250-ETRN
Tue 2017-05-23 00:57:49.125: [094200] --> 250-AUTH LOGIN CRAM-MD5 PLAIN
Tue 2017-05-23 00:57:49.125: [094200] --> 250-8BITMIME
Tue 2017-05-23 00:57:49.125: [094200] --> 250-ENHANCEDSTATUSCODES
Tue 2017-05-23 00:57:49.125: [094200] --> 250 SIZE
Tue 2017-05-23 00:57:49.390: [094200] <-- MAIL FROM: 
SIZE=30479
Tue 2017-05-23 00:57:49.390: [094200] Performing PTR lookup 
(190.112.107.207.IN-ADDR.ARPA)
Tue 2017-05-23 00:57:49.390: [094200] *  D=190.112.107.207.IN-ADDR.ARPA 
TTL=(642) PTR=[mail.novanetworks.com]
Tue 2017-05-23 00:58:50.421: [094200] *  DNS: 60 second wait for DNS response 
exceeded (DNS Server: 202.137.29.186)
Tue 2017-05-23 00:58:50.421: [094200] *  No A/ records found
Tue 2017-05-23 00:58:50.421: [094200] *  MDaemon configured to drop connection 
on PTR record mismatch
Tue 2017-05-23 00:58:50.421: [094200]  End PTR results
Tue 2017-05-23 00:58:50.421: [094200] --> 501 5.7.0 Domain must resolve
Tue 2017-05-23 00:58:50.421: [094200] SMTP session terminated (Bytes in/out: 
77/376)

[MDaemon-L] maill direject oleh server Mdaemon

2017-05-23 Terurut Topik Syafril Hermansyah 
On 23/05/17 17:30, safrizal wrote:

---
Standar internet mail format untuk teks kutipan (quote text) jika
menggunakan Interleave Reply atau bottom reply ditandai dengan character
> di depan semua barisnya.
Sementara teks tulisan sendiri (response text) ditulis dari kolom paling
kiri (tanpa tanda apapun didepannya) dan dipisahkan dengan sedikitnya 1
baris kosong dengan teks kutipan.

lihat contohnya disini

https://wiki.openstack.org/wiki/MailingListEtiquette#Reply_Level_Indication
---


>> terlampir pak Lognya 


> Tue 2017-05-23 00:57:49.125: [094200] --> 250-mail.careind.or.id Hello 
> mail.novanetworks.com [207.107.112.190], pleased to meet you
> Tue 2017-05-23 00:57:49.390: [094200] *  D=190.112.107.207.IN-ADDR.ARPA 
> TTL=(642) PTR=[mail.novanetworks.com]
> Tue 2017-05-23 00:58:50.421: [094200] *  DNS: 60 second wait for DNS response 
> exceeded (DNS Server: 202.137.29.186)
> Tue 2017-05-23 00:58:50.421: [094200] *  No A/ records found


Mail ditolak karena identitas sender host tidak terdaftar di internet.
Sudah diupdate ke


ftp://ftp.dutaint.com/altn-mdaemon/miscl/ReverseXcpt.dat


-- 
syafril
---
Syafril Hermansyah
MDaemon-L Moderators, running MDaemon 17.0.1-64, SP 5.1-64
Harap tidak cc: atau kirim ke private mail untuk masalah MDaemon.

Instruction does much, but encouragement everything.
--- Johann Wolfgang von Goethe


-- 
--MDaemon-L--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server.

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com
Versi terakhir MD 17.0.2, SP 5.1.0, OC 4.5.0, SG 4.5.1

[MDaemon-L] Problem pada Antivirus dan quarantine

2017-05-23 Terurut Topik Syafril Hermansyah 
On 23/05/17 19:23, Panji Agung wrote:> kami masih mendapati email
berpassword masuk quarantine

Email berpassword?
Kalau email di enkripsi (password protect) dengan PGP atau S/MIME akan
otomatis bypass antivirus scanning, bahkan jika lampirannya saja yang di
enkripsi dengan PGP akan bypass virus scanning.
Hal itu terjadi karena PGP dan S/MIME adalah open Standard di Internet Mail.



> pada konfigurasi antivirus kami sudah sesuaikan dengan saran dari bapak
>  berikut> namun masih saja email ber password masuk quarantine
> bahkan ada kasus kami sudah masukan doamin email kedalam Exclusion list 
> antivirus
> namun email dari situ tetap terquarantine
> berikut log kasus tersebut untuk AVnya


Saran itu untuk  Securityplus versi lama (5.0 kebawah) dan hanya untuk
email yang mengandung *lampiran* yang diproteksi dengan password non-PGP.

Untuk Securityplus 5.1 yang pakai 3 Antivirus engine sarannya seperti
yang sudah pernah saya sampaikan dulu

http://www.mail-archive.com/mdaemon-l@dutaint.com/msg41311.html

dan

http://www.mail-archive.com/mdaemon-l@dutaint.com/msg41297.html

coba dibaca ulang sampai dengan baris terbawah arsip diatas, juga
diperiksa ke tautan yang diberikan disitu, khususnya tautan yang ini

http://www.mail-archive.com/mdaemon-l@dutaint.com/msg41017.html

(lihat tampilan grafisnya di lampiran, file "ClamAV-Plugin-quarantine.png")


BTW. Kalau baca email di gmail (baik webmail maupun gmail apps)
terkadang perlu klik tanda  ellipsis [...] agar tampil utuh semua quote
textnya, khususnya kalau ingin melakukan inline replies bukan SMS style
reply.

https://webapps.stackexchange.com/questions/49884/how-to-insert-a-reply-inline-in-gmail/49886





-- 
syafril
---
Syafril Hermansyah
MDaemon-L Moderators, running MDaemon 17.0.2-64, SP 5.1-64
Harap tidak cc: atau kirim ke private mail untuk masalah MDaemon.

The more I read, the more I acquire, the more certain I am that I know
nothing.
--- Voltaire

-- 
--MDaemon-L--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server.

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com
Versi terakhir MD 17.0.2, SP 5.1.0, OC 4.5.0, SG 4.5.1

[MDaemon-L] email ke recipient yang bukan tujuan

2017-05-23 Terurut Topik safrizal 
Dear team Dutaint,

Mohon bantuannya untuk melihat salah satu contoh log terlmapir dimana email
ditujukan ke orang yang yang dimaksud namun email tsb juga masuk ke email
saya (safri...@careind.or.id  )

Dan ini terjadi bukan hanya dari sender ini melinkan hamper dari semua
sender lainnya.

 

Regards,



"This e-mail and any attachments may contain confidential and privileged 
information. If you are not
the intended recipient, please notify the sender immediately by return e-mail, 
delete this e-mail and -
destroy any copies. Any dissemination or use of this information by a person 
other than the intended
recipient is unauthorized and may be illegal."

==
"E-mail berikut beserta lampiran didalamnya bersifat rahasia dan ditujukan 
secara khusus. Bilamana
anda bukanlah dari alamat yang dituju, mohon memberitahukan segera kepada 
pengirim dengan  -
mengirim kembali, menghapus isi serta duplikasi dari informasi tersebut. Segala 
penyalahgunaan atas
informasi terhadap penerima yang bukan seharusnya adalah tindakan melanggar 
hukum."

CARE International Indonesia
Mon 2017-05-22 11:49:35.968: [090298] Session 090298; child 0001
Mon 2017-05-22 11:49:35.968: [090298] Accepting SMTP connection from 
202.137.29.186:53671 to 202.137.29.190:587
Mon 2017-05-22 11:49:35.968: [090298] --> 220-mail.careind.or.id ESMTP MSA 
MDaemon 17.0.0; Mon, 22 May 2017 11:49:35 +0700
Mon 2017-05-22 11:49:35.968: [090298] --> 220-Care International Indonesia 
Messaging Server
Mon 2017-05-22 11:49:35.968: [090298] --> 220 Unauthorized relay prohibited
Mon 2017-05-22 11:49:36.000: [090298] <-- EHLO DESKTOPN3O4AMO
Mon 2017-05-22 11:49:36.000: [090298] --> 250-mail.careind.or.id Hello 
DESKTOPN3O4AMO [202.137.29.186], pleased to meet you
Mon 2017-05-22 11:49:36.000: [090298] --> 250-AUTH LOGIN CRAM-MD5 PLAIN
Mon 2017-05-22 11:49:36.000: [090298] --> 250-8BITMIME
Mon 2017-05-22 11:49:36.000: [090298] --> 250-ENHANCEDSTATUSCODES
Mon 2017-05-22 11:49:36.000: [090298] --> 250 SIZE
Mon 2017-05-22 11:49:36.000: [090298] <-- AUTH LOGIN
Mon 2017-05-22 11:49:36.000: [090298] --> 334 VXNlcm5hbWU6
Mon 2017-05-22 11:49:36.000: [090298] <-- 
bXVjaHJpemFsX3JpdG9uZ2FAY2FyZWluZC5vci5pZA==
Mon 2017-05-22 11:49:36.000: [090298] --> 334 UGFzc3dvcmQ6
Mon 2017-05-22 11:49:36.015: [090298] <-- **
Mon 2017-05-22 11:49:36.015: [090298] --> 235 2.7.0 Authentication successful
Mon 2017-05-22 11:49:36.015: [090298] Authenticated as 
muchrizal_rito...@careind.or.id
Mon 2017-05-22 11:49:36.046: [090298] <-- MAIL FROM: 

Mon 2017-05-22 11:49:36.046: [090298] --> 250 2.1.0 Sender OK
Mon 2017-05-22 11:49:36.062: [090298] <-- RCPT TO: 

Mon 2017-05-22 11:49:36.062: [090298] --> 250 2.1.5 Recipient OK
Mon 2017-05-22 11:49:36.062: [090298] <-- RCPT TO: 
Mon 2017-05-22 11:49:36.062: [090298] --> 250 2.1.5 Recipient OK
Mon 2017-05-22 11:49:36.078: [090298] <-- DATA
Mon 2017-05-22 11:49:36.078: [090298] Creating temp file (SMTP): 
d:\mdaemon\queues\temp\05\md593.tmp
Mon 2017-05-22 11:49:36.078: [090298] --> 354 Enter mail, end with .
Mon 2017-05-22 11:49:36.234: [090298] Message size: 316936 bytes
Mon 2017-05-22 11:49:36.234: [090298] Passing message through ClamAV Plugin 
(d:\mdaemon\queues\temp\05\md593.tmp)...
Mon 2017-05-22 11:49:36.234: [090298] *  Message-ID: 
<005801d2d2b6$3cd1d0f0$b67572d0$@careind.or.id>
Mon 2017-05-22 11:49:36.453: [090298] *  Virus result: 0 - clean
Mon 2017-05-22 11:49:36.453: [090298] Spam filter scan skipped; message size 
(316936) exceeds spam filter configured max size of (153600)
Mon 2017-05-22 11:49:36.453: [090298] Message creation successful: 
d:\mdaemon\queues\inbound\24\md597.msg
Mon 2017-05-22 11:49:36.453: [090298] --> 250 2.6.0 Ok, message saved 
>
Mon 2017-05-22 11:49:39.156: [090298] <-- QUIT
Mon 2017-05-22 11:49:39.156: [090298] --> 221 2.0.0 See ya in cyberspace
Mon 2017-05-22 11:49:39.156: [090298] SMTP session successful (Bytes in/out: 
317172/636)

[MDaemon-L] email ke recipient yang bukan tujuan

2017-05-23 Terurut Topik Syafril Hermansyah 
On 24/05/17 11:07, safrizal wrote:
> Mohon bantuannya untuk melihat salah satu contoh log terlmapir dimana
> email ditujukan ke orang yang yang dimaksud namun email tsb juga masuk
> ke email saya (safri...@careind.or.id )
> 
> Dan ini terjadi bukan hanya dari sender ini melinkan hamper dari semua
> sender lainnya.


Di terima di Inbox atau di public folder/bayesian lerning system/ham?

Bisa diperlihatkan message header mail yang nyasar tersebut kesini kalau
diterimanya di inbox folder.



-- 
syafril
---
Syafril Hermansyah
MDaemon-L Moderators, running MDaemon 17.0.2-64, SP 5.1-64
Harap tidak cc: atau kirim ke private mail untuk masalah MDaemon.

If your actions inspire others to dream more, learn more, do more and
become more, you are a leader.
--- John Quincy Adams


-- 
--MDaemon-L--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server.

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com
Versi terakhir MD 17.0.2, SP 5.1.0, OC 4.5.0, SG 4.5.1

[MDaemon-L] Email dobel

2017-05-23 Terurut Topik Syafril Hermansyah 
On May 23, 2017 10:10, "arianto"  wrote:

---
Posting in tidak tampil di akun saya, tetapi tampil di akun Gmail.
Rupanya ditolak oleh server saya karena lampirannya dianggap bervirus oleh
cyren AV.


Sejak Jumat lalu, kami menerima dobel  incoming mail dari luar domain.


Kalau mail dobel yang perlu saya lihat adalah message header dari minimal 2
buah message yang dobel/duplicate.

Message duplicate adalah message lain yang diterima pada tanggal/jam
berbeda tetapi sender/subject dan isinya persis sama.

-- 
syafril
--
Syafril Hermansyah

-- 
--MDaemon-L--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server.

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com
Versi terakhir MD 17.0.2, SP 5.1.0, OC 4.5.0, SG 4.5.1