On 17/07/12 9:25 AM, Syafril Hermansyah wrote:
Perlihatkan mail header dari spam mail tersebut dan antispam log transkrip.
SPAM LOG
Sat 2012-07-14 00:22:38: ----------
Sat 2012-07-14 00:32:33: Spam Filter processing
c:\mdaemon\queues\local\md50000131512.msg...
Sat 2012-07-14 00:32:33: * Message return-path: [email protected]
Sat 2012-07-14 00:32:33: * Message from: [email protected]
Sat 2012-07-14 00:32:33: * Message to: [email protected]
Sat 2012-07-14 00:32:33: * Message subject: ??????????????? ????????
?????????????? ??????????? ?????????????? 7 ??????..
Sat 2012-07-14 00:32:33: * Message ID:
<[email protected]>
Sat 2012-07-14 00:32:49: Start SpamAssassin results
Sat 2012-07-14 00:32:49: 2.80 points, 5.00 required
Sat 2012-07-14 00:32:49: * 1.5 MPART_ALT_DIFF_COUNT BODY: HTML and text
parts are different
Sat 2012-07-14 00:32:49: * 0.0 HTML_MESSAGE BODY: HTML included in message
Sat 2012-07-14 00:32:49: * 1.3 RDNS_NONE Delivered to internal network
by a host with no rDNS
Sat 2012-07-14 00:32:49: * 0.0 MSGID_FROM_MTA_HEADER Message-Id was
added by a relay
Sat 2012-07-14 00:32:49: End SpamAssassin results
MESSAGE SOURCE
From - Tue Jul 17 10:56:19 2012
X-Account-Key: account5
X-UIDL: MD50000004303:MSG:54595:30236957:2245066728
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:
X-MDAV-Processed: webmail.pttdp.com, Sat, 14 Jul 2012 00:32:49 +0700
X-Spam-Processed: webmail.pttdp.com, Sat, 14 Jul 2012 00:32:33 +0700
Return-path:<[email protected]>
X-Spam-Level: **
X-Spam-Status: No, score=2.8 required=5.0 tests=HTML_MESSAGE,
MPART_ALT_DIFF_COUNT,MSGID_FROM_MTA_HEADER,RDNS_NONE shortcircuit=no
autolearn=disabled version=3.3.2
X-Spam-Report:
* 1.5 MPART_ALT_DIFF_COUNT BODY: HTML and text parts are different
* 0.0 HTML_MESSAGE BODY: HTML included in message
* 1.3 RDNS_NONE Delivered to internal network by a host with no rDNS
* 0.0 MSGID_FROM_MTA_HEADER Message-Id was added by a relay
X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06)
Received: from pop.cbn.net.id ([202.158.81.40])
by pttdp.com (webmail.pttdp.com)
(MDaemon PRO v12.5.3)
with DomainPOP id md50000075318.msg
for<[email protected]>; Sat, 14 Jul 2012 00:32:32 +0700
X-MDRemoteIP: 202.158.81.40
X-Return-Path: [email protected]
X-Envelope-From: [email protected]
X-MDaemon-Deliver-To: [email protected]
Envelope-to: [email protected]
Delivery-date: Sat, 14 Jul 2012 00:32:21 +0700
Received: from ip6.cbn.net.id ([125.208.145.67])
by host-5.int.cbn.net.id with esmtp (Exim 4.71)
(envelope-from<[email protected]>)
id 1Spjj3-00028j-Gt
for [email protected]; Sat, 14 Jul 2012 00:32:21 +0700
X-SBRS-Score: 5.6
X-HAT: Sender Group None, Policy $ACCEPTED applied.
X-CBN-ID: 863185664
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result:
AsgCAAZbAFDLkK3anGdsb2JhbABCA4JKgx6hWAGPPRoDfSIBAQEBAQgLCQkUJ4JBAQgDAQZCASI6AwQDAgQOESUGERMXh2cDCwyaKo5BiTsNiU4UgiqIGGaCVYIPgRIDBIhFjgOEGYVZh22BUw
X-IronPort-AV: E=Sophos;i="4.77,580,1336323600";
d="scan'208,217";a="863185664"
Delivered-To: [email protected]
Received: from irgb2.truemail.co.th ([203.144.173.218])
by ip6-corp.int.cbn.net.id with ESMTP; 14 Jul 2012 00:32:19 +0700
Message-Id:<[email protected]>
X-Auth-ID: [email protected]
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result:
AiEHAAZbAFCrYlkZ/2dsb2JhbABCA4JKgx6hWAGPPRp/gQiCQQEIAwEGKRkBIQE6AwQDAgQfGA0GERMXh2cDCwyaKo5BiTsNiWKKQmaCVYIPDYEFAwSIRY4DhBmFWYUCgmuBUw
X-IronPort-AV: E=Sophos;i="4.77,580,1336323600";
d="scan'208,217";a="631051194"
Received: from cm-171-98-89-25.revip7.asianet.co.th (HELO noomnoy)
([171.98.89.25])
by irp3auth.truemail.co.th with ESMTP; 14 Jul 2012 00:31:30 +0700
MIME-Version: 1.0
From:
=?utf-8?B?4LmC4LiG4Lip4LiT4Liy4LiY4Li44Lij4LiB4Li04LiIIOC5geC4muC4muC4h+C5iOC4suC4ouC5hOC4lOC5ieC4nOC4pQ==?=<[email protected]>
To:
=?utf-8?B?4LmC4LiG4Lip4LiT4Liy4LiY4Li44Lij4LiB4Li04LiIIOC5geC4muC4muC4h+C5iOC4suC4ouC5hOC4lOC5ieC4nOC4pQ==?=<[email protected]>
Date: 14 Jul 2012 00:32:52 +0700
Subject:
=?utf-8?B?4Lin4Li04LiY4Li14LmB4LiZ4Liw4LiZ4Liz4Liq4Li04LiZ4LiE4LmJ4LiyIOC4q+C4suC4quC4oeC4suC4iuC4tOC4gSDguKrguKPguYnguLLguIfguYDguITguKPguLfguK3guILguYjguLLguKIg4LmA4Lie4Li04LmI4Lih4Lii4Lit4LiU4LiC4Liy4LiiIOC4lOC5iOC4p+C4meC4nuC4o+C5ieC4reC4oeC5guC4muC4meC4seC4qiA3IOC4o+C4suC4ouC4geC4suC4oy4u?=
Content-Type: multipart/alternative;
boundary=--boundary_13_4f3d55d2-d3b4-4155-9442-11626952417a
----boundary_13_4f3d55d2-d3b4-4155-9442-11626952417a
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: base64
Website : WWW.PTTDP.COM
-----------------------------------------------------------------------------------------------
DISCLAIMER :
This message contains confidential information and is intended only for the
individual named. If you are not the named addressee you should not
disseminate, distribute or copy this e-mail. Please notify the sender
immediately by e-mail if you have received this e-mail by mistake and delete
this e-mail from your system. E-mail transmission cannot be guaranteed to be
secure or error-free as information could be intercepted, corrupted, lost,
destroyed, arrive late or incomplete, or contain viruses. The sender therefore
does not accept liability for any errors or omissions in the contents of this
message, which arise as a result of e-mail transmission. If verification is
required please request a hard-copy version.
--[MDaemon-L]------------------------------------------------
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server.
Netiket: <http://www.netmeister.org/news/learn2quote>
Arsip: <http://mdaemon-l.dutaint.com>
Dokumentasi : <http://mdaemon.dutaint.co.id>
Henti Langgan: Kirim mail ke MDaemon-L-unsubscribe [at] dutaint.com
Berlangganan: kirim mail ke MDaemon-L-subscribe [at] dutaint.com
Versi terakhir MD 12.5.6, SP 4.1.4, OC 2.2.9, SG 2.0.7, PP 2.0.0
