On 05/15/2013 02:12 PM, Benny Kurniawan wrote:

>> Mestinya transaksi ini ada di smtp-in log?
> Ini pak

> Mon 2013-05-13 15:51:49: [800431:2] Accepting SMTP connection from 
> [165.108.159.189:52819] to [165.108.159.10:25]
> Mon 2013-05-13 15:51:49: [800431:2] --> 220-mail.jkt.itochu.co.id ESMTP 
> MDaemon 13.0.4; Mon, 13 May 2013 15:51:49 +0700
> Mon 2013-05-13 15:51:49: [800431:2] --> 220 No public service mail PT. Itochu 
> Indonesia
> Mon 2013-05-13 15:51:49: [800431:2] <-- EHLO Ishikawa-PC.itochu.co.id
> Mon 2013-05-13 15:51:49: [800431:2] Performing IP lookup 
> (Ishikawa-PC.itochu.co.id)
> Mon 2013-05-13 15:51:49: [800431:2] *  Error: *  Name server reports domain 
> name unknown

Apakah semua user Anda memang pakai public IP 165.108.159.*?
Jika ya, masukkan range IP tersebut kedalam daftar reverse look up
whitelist.

http://mdaemon.dutaint.co.id/13.0.1/index.html?security__reverse_lookup.htm

klik "whitelist".

> Mon 2013-05-13 15:51:49: [800431:2] <-- MAIL 
> FROM:<[email protected]>
> Mon 2013-05-13 15:51:49: [800431:2] --> 250 <[email protected]>, 
> Sender ok
> Mon 2013-05-13 15:51:49: [800431:2] <-- RCPT TO:<[email protected]>
> Mon 2013-05-13 15:51:49: [800431:2] --> 250 <[email protected]>, 
> Recipient ok
....
> Mon 2013-05-13 15:51:50: [800431:2] Message creation successful: 
> e:\mdaemon\queues\inbound\md50003581877.msg
> Mon 2013-05-13 15:51:50: [800431:2] --> 250 Ok, message saved <Message-ID: 
> [email protected]>

Tidak cocok dengan mail "aneh" yang diterima user [email protected]
itu yang Anda kirim tadi, kelihatannya ini transaksi yang berbeda.

Cari smtp-in log yang date stamp nya kira-2x sekitar

Date: Fri, 10 May 2013 18:59:16 +0700
Message-ID: <[email protected]>

>> Kalau mail header dari mail asli (awal) yang dikirim oleh
>> <[email protected] seperti apa saat diterima salah satu member
>> milis [email protected]?

> Return-path: <[email protected]>
> X-Return-Path: [email protected]

Hmm...kok beda ya isi return-path dan x-return-path, mestinya isinya
sama (silakan periksa mail header milis ini).

Apakah isian "Replace 'TO:' header" kosong untuk milis
[email protected] ini?

http://mdaemon.dutaint.co.id/13.0.1/index.html?ml_options.htm

-- 
syafril
-------
Syafril Hermansyah
MDaemon-L Moderators, running MDaemon 13.5 Beta RC2 SecurityPlus 4.1.5
Harap tidak cc: atau kirim ke private mail untuk masalah MDaemon.


-- 
--[MDaemon-L]------------------------------------------------
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server.

Netiket: http://www.netmeister.org/news/learn2quote
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Henti Langgan: Kirim mail ke MDaemon-L-unsubscribe [at] dutaint.com
Berlangganan: kirim mail ke MDaemon-L-subscribe [at] dutaint.com
Versi terakhir MD 13.0.5, SP 4.1.5, BES 2.0.2, OC 2.3.1, SG 2.1.2, PP 2.0.1

Kirim email ke