Dear Syafril, Pak ini log yang saya ambil dari SMTP-in di server.
Mohon bantuan untuk dianalisa, kenapa email ini bisa masuk? Sekalian setting untuk anti spam yang harus di pasang apa saja? FYI: kami menggunakan MDaeomn 9.5.4 ================================================== Session 9603; child 1; thread 2060 Fri 2007-01-26 03:43:13: Accepting SMTP connection from [202.171.1.134 : 55328] Fri 2007-01-26 03:43:13: Performing PTR lookup (134.1.171.202.IN-ADDR.ARPA) Fri 2007-01-26 03:43:13: * D=134.1.171.202.IN-ADDR.ARPA TTL=(60) PTR=[mail-gateway.ntt.net.id] Fri 2007-01-26 03:43:13: * Gathering A records... Fri 2007-01-26 03:43:14: * D=mail-gateway.ntt.net.id TTL=(60) A=[202.171.1.134] Fri 2007-01-26 03:43:14: ---- End PTR results Fri 2007-01-26 03:43:14: --> 220 yusenid.com ESMTP MDaemon 9.5.4; Fri, 26 Jan 2007 03:43:14 +0700 Fri 2007-01-26 03:43:14: <-- EHLO mail-gateway.ntt.net.id Fri 2007-01-26 03:43:14: Performing IP lookup (mail-gateway.ntt.net.id) Fri 2007-01-26 03:43:15: * D=mail-gateway.ntt.net.id TTL=(60) A=[202.171.1.134] Fri 2007-01-26 03:43:15: ---- End IP lookup results Fri 2007-01-26 03:43:15: --> 250-yusenid.com Hello mail-gateway.ntt.net.id, pleased to meet you Fri 2007-01-26 03:43:15: --> 250-ETRN Fri 2007-01-26 03:43:15: --> 250-AUTH=LOGIN Fri 2007-01-26 03:43:15: --> 250-AUTH LOGIN CRAM-MD5 Fri 2007-01-26 03:43:15: --> 250-8BITMIME Fri 2007-01-26 03:43:15: --> 250 SIZE 0 Fri 2007-01-26 03:43:16: <-- MAIL FROM:<> SIZE=3185 BODY=8BITMIME Fri 2007-01-26 03:43:16: --> 250 <>, Sender ok Fri 2007-01-26 03:43:16: <-- RCPT TO:<[EMAIL PROTECTED]> Fri 2007-01-26 03:43:16: --> 250 <[EMAIL PROTECTED]>, Recipient ok Fri 2007-01-26 03:43:16: <-- DATA Fri 2007-01-26 03:43:16: Creating temp file (SMTP): c:\mdaemon\queues\temp\md50000001979.tmp Fri 2007-01-26 03:43:16: --> 354 Enter mail, end with <CRLF>.<CRLF> Fri 2007-01-26 03:43:17: Message size: 3185 bytes Fri 2007-01-26 03:43:17: Performing DomainKeys lookup (Sender: [EMAIL PROTECTED]) Fri 2007-01-26 03:43:17: * File: c:\mdaemon\queues\temp\md50000001979.tmp Fri 2007-01-26 03:43:17: * Message-ID: [EMAIL PROTECTED] Fri 2007-01-26 03:43:17: * Querying for policy: hdw02.bedrijvenweb.nl Fri 2007-01-26 03:43:17: * Querying: _domainkey.hdw02.bedrijvenweb.nl ... Fri 2007-01-26 03:43:19: * DNS: Name server reports domain name unknown Fri 2007-01-26 03:43:19: * Result: pass Fri 2007-01-26 03:43:19: ---- End DomainKeys results Fri 2007-01-26 03:43:19: Performing DKIM lookup Fri 2007-01-26 03:43:19: * File: c:\mdaemon\queues\temp\md50000001979.tmp Fri 2007-01-26 03:43:19: * Message-ID: [EMAIL PROTECTED] Fri 2007-01-26 03:43:19: * Result: neutral Fri 2007-01-26 03:43:19: ---- End DKIM results Fri 2007-01-26 03:43:19: Passing message through AntiVirus (Size: 3185)... Fri 2007-01-26 03:43:19: * Message is clean (no viruses found) Fri 2007-01-26 03:43:19: ---- End AntiVirus results Fri 2007-01-26 03:43:20: Message creation successful: c:\mdaemon\queues\inbound\md50000035604.msg Fri 2007-01-26 03:43:20: --> 250 Ok, message saved <Message-ID: [EMAIL PROTECTED]> Fri 2007-01-26 03:43:20: <-- QUIT Fri 2007-01-26 03:43:20: --> 221 See ya in cyberspace Fri 2007-01-26 03:43:20: SMTP session successful (Bytes in/out: 3298/419) Fri 2007-01-26 03:43:21: ---------- Fri 2007-01-26 03:43:23: Processing message: c:\mdaemon\queues\inbound\md50000035604.msg Fri 2007-01-26 03:43:23: From: [EMAIL PROTECTED]; Recipient: [EMAIL PROTECTED]; Size: 3185; Message: c:\mdaemon\queues\local\md50000105184.msg Fri 2007-01-26 03:43:23: Subject: Undeliverable Mail Fri 2007-01-26 03:43:23: Message-ID: [EMAIL PROTECTED] Fri 2007-01-26 03:43:23: ---------- Fri 2007-01-26 03:43:24: SecurityPlus AntiVirus processing c:\mdaemon\queues\local\md50000105184.msg... Fri 2007-01-26 03:43:24: > Message return-path: Fri 2007-01-26 03:43:24: > Message from: [EMAIL PROTECTED] Fri 2007-01-26 03:43:24: > Message to: [EMAIL PROTECTED] Fri 2007-01-26 03:43:24: > Message subject: Undeliverable Mail Fri 2007-01-26 03:43:24: > Message ID: <[EMAIL PROTECTED]> Fri 2007-01-26 03:43:24: Start SecurityPlus AntiVirus results Fri 2007-01-26 03:43:24: * Total attachments scanned : 1 (including multipart/alternatives and message body) Fri 2007-01-26 03:43:24: * Total attachments infected : 0 Fri 2007-01-26 03:43:24: * Total attachments disinfected: 0 Fri 2007-01-26 03:43:24: * Total errors while scanning : 0 Fri 2007-01-26 03:43:24: * Total attachments removed : 0 Fri 2007-01-26 03:43:24: End of SecurityPlus AntiVirus results Fri 2007-01-26 03:43:24: ---------- Fri 2007-01-26 03:43:24: Content Filter processing c:\mdaemon\queues\local\md50000105184.msg... Fri 2007-01-26 03:43:24: > Message return-path: Fri 2007-01-26 03:43:24: > Message from: [EMAIL PROTECTED] Fri 2007-01-26 03:43:24: > Message to: [EMAIL PROTECTED] Fri 2007-01-26 03:43:24: > Message subject: Undeliverable Mail Fri 2007-01-26 03:43:24: > Message ID: <[EMAIL PROTECTED]> Fri 2007-01-26 03:43:24: Start Content Filter results Fri 2007-01-26 03:43:24: * Matched 0 of 2 active rules Fri 2007-01-26 03:43:24: End of Content Filter results Fri 2007-01-26 03:43:24: ---------- Fri 2007-01-26 03:43:26: Delivering message: c:\mdaemon\queues\local\pd50000105184.msg Fri 2007-01-26 03:43:26: From: [EMAIL PROTECTED]; Recipient: [EMAIL PROTECTED]; Size: 4015; Message: c:\mdaemon\users\yusenid.com\victor\md50000000377.msg Fri 2007-01-26 03:43:26: Subject: Undeliverable Mail Fri 2007-01-26 03:43:26: Message-ID: <[EMAIL PROTECTED]> -- Best regards, G4ND4 mailto:[EMAIL PROTECTED] Friday, January 26, 2007, 11:01:40 AM, Syafril Nulis: > On Friday 26 January 2007 10:54, G4ND4 wrote: >> bagai mana membuat content filter yang baik untuk mencegah email >> spam yang datang dari luar? Apa saja yang harus diperhatikan >> dalam pembuatan content filter tersebut? > Content filter itu bukan utk antispam, melainkan utk mengubah pola > kerja MDaemon diluar normal (ad hoc task). > Untuk antispam gunakan fungsi antispam dan anti relay. >> Salah satu contohnya agar kami tidak menerima email-email yang >> seperti ini lagi. >> >> FYI, >> Email ini diterima dari alamat [EMAIL PROTECTED], tapi saya >> tidak melihat alamat diatas pada header email yang diterima. > Bisakah Anda perlihatkan mail header yg diterima oleh end user, > bukan yg dari bounce message ini (masih kurang informatif utk > analisis spam counter), atau Anda cari dari smtp-in log utk > transaksi tsb. > -- > syafril > ------- > Syafril Hermansyah > MDaemon-L Moderators, MDaemon 9.5.5 Beta A under W2K3 > Harap tidak cc: atau kirim ke private mail untuk masalah MDaemon. -- --[MDaemon-L]------------------------------------------------ Milis ini untuk Diskusi antar pengguna MDaemon Mail Server. Mohon tidak posting dengan format HTML, pastikan selalu menggunakan Format Plain_text Arsip : <http://mdaemon-l.dutaint.com> Henti Langgan : <mailto:[EMAIL PROTECTED]> Berlangganan : <mailto:[EMAIL PROTECTED]> Versi Terakhir : MD 9.5.4, LD 2.1.0, WA 3.3.2, MDSP 3.0.4, MDOC 2.1.3
