> >Saya sudah cek melalui commtouch, IP Public Mail Server yang handle > >domain > >talent-q.com yaitu : 199.230.53.57 > >Tidak terindikasi penyebar spam (unknown reputation). > > > Bukan IP itu yang dicheck tetapi IP nya sender host (yang kirim mail), > y.i. mail.fast.net.id
Oh ok pak, saya barusan cek mail.fast.net.id --> 202.73.97.30 , keterangannya unknown reputation IP Address: 202.73.97.30 Risk Level: Unknown Description: The IP has only recently started sending mails, and therefore still has an Unknown reputation > >Saya coba cek juga di logs di MDaemon transaksi pada tanggal 22 > >tersebut > >masih belum ketemu jarum dalam jeraminya. > > Apakah smtp probe enable di log? > > http://mdaemon.dutaint.co.id/13.6/index.html?log_options.htm > > [x] Log SMTP 'probes' > > Kalau ya, mestinya ketemu di smtp-in log. Sudah di aktifkan pak, saya hanya menemukan ini (yang mengandung talent-q.com), sbb : Tue 2013-10-22 14:49:37: Session 560473; child 0009 Tue 2013-10-22 14:49:37: Accepting SMTP connection from [106.10.149.19:38074] to [192.168.1.19:25] Tue 2013-10-22 14:49:37: Performing PTR lookup (19.149.10.106.IN-ADDR.ARPA) Tue 2013-10-22 14:49:37: * D=19.149.10.106.IN-ADDR.ARPA TTL=(14) PTR=[nm13-vm4.bullet.mail.sg3.yahoo.com] Tue 2013-10-22 14:49:37: * Gathering A records... Tue 2013-10-22 14:49:37: * D=nm13-vm4.bullet.mail.sg3.yahoo.com TTL=(5) A=[106.10.149.19] Tue 2013-10-22 14:49:37: ---- End PTR results Tue 2013-10-22 14:49:37: --> 220 mail.aio.co.id ESMTP MDaemon 13.5.2; Tue, 22 Oct 2013 14:49:37 +0700 Tue 2013-10-22 14:49:37: <-- EHLO nm13-vm4.bullet.mail.sg3.yahoo.com Tue 2013-10-22 14:49:37: --> 250-mail.aio.co.id Hello nm13-vm4.bullet.mail.sg3.yahoo.com, pleased to meet you Tue 2013-10-22 14:49:37: --> 250-ETRN Tue 2013-10-22 14:49:37: --> 250-AUTH LOGIN CRAM-MD5 PLAIN Tue 2013-10-22 14:49:37: --> 250-8BITMIME Tue 2013-10-22 14:49:37: --> 250 SIZE Tue 2013-10-22 14:49:37: <-- MAIL FROM:<[email protected]> Tue 2013-10-22 14:49:37: Performing IP lookup (nm13-vm4.bullet.mail.sg3.yahoo.com) Tue 2013-10-22 14:49:37: * D=nm13-vm4.bullet.mail.sg3.yahoo.com TTL=(5) A=[106.10.149.19] Tue 2013-10-22 14:49:37: ---- End IP lookup results Tue 2013-10-22 14:49:37: Performing IP lookup (yahoo.com) Tue 2013-10-22 14:49:37: * D=yahoo.com TTL=(8) A=[206.190.36.45] Tue 2013-10-22 14:49:37: * D=yahoo.com TTL=(8) A=[98.139.183.24] Tue 2013-10-22 14:49:37: * D=yahoo.com TTL=(8) A=[98.138.253.109] Tue 2013-10-22 14:49:37: * P=001 S=000 D=yahoo.com TTL=(2) MX=[mta5.am0.yahoodns.net] {66.196.118.37} Tue 2013-10-22 14:49:37: * P=001 S=001 D=yahoo.com TTL=(2) MX=[mta7.am0.yahoodns.net] Tue 2013-10-22 14:49:37: * P=001 S=002 D=yahoo.com TTL=(2) MX=[mta6.am0.yahoodns.net] Tue 2013-10-22 14:49:37: * D=yahoo.com TTL=(8) A=[98.139.183.24] Tue 2013-10-22 14:49:37: * D=yahoo.com TTL=(8) A=[98.138.253.109] Tue 2013-10-22 14:49:37: ---- End IP lookup results Tue 2013-10-22 14:49:37: Performing SPF lookup (yahoo.com / 106.10.149.19) Tue 2013-10-22 14:49:37: * Result: none; no SPF record in DNS Tue 2013-10-22 14:49:37: ---- End SPF results Tue 2013-10-22 14:49:37: --> 250 <[email protected]>, Sender ok Tue 2013-10-22 14:49:37: <-- RCPT TO:<[email protected]> Tue 2013-10-22 14:49:37: --> 250 <[email protected]>, Recipient ok Tue 2013-10-22 14:49:37: <-- DATA Tue 2013-10-22 14:49:37: Creating temp file (SMTP): c:\mdaemon\temp\md50000593923.tmp Tue 2013-10-22 14:49:37: --> 354 Enter mail, end with <CRLF>.<CRLF> Tue 2013-10-22 14:49:39: Message size: 19215 bytes Tue 2013-10-22 14:49:39: Performing DKIM lookup Tue 2013-10-22 14:49:39: * File: c:\mdaemon\temp\md50000593923.tmp Tue 2013-10-22 14:49:39: * Message-ID: [email protected] Tue 2013-10-22 14:49:39: * Signature (1): ;v=1;a=rsa-sha256;c=relaxed/relaxed;d=yahoo.com;s=s1024;t=1382428010;b h=<not logged>; Tue 2013-10-22 14:49:39: * Verification result: [0] good Tue 2013-10-22 14:49:39: * Result: pass Tue 2013-10-22 14:49:39: ---- End DKIM results Tue 2013-10-22 14:49:39: Performing VBR certification (Domain: yahoo.com, Auth: DKIM) Tue 2013-10-22 14:49:39: * File: c:\mdaemon\temp\md50000593923.tmp Tue 2013-10-22 14:49:39: * Message-ID: [email protected] Tue 2013-10-22 14:49:39: * Certifier (trusted): vbr.emailcertification.org ... Tue 2013-10-22 14:49:39: * Querying: yahoo.com._vouch.vbr.emailcertification.org ... Tue 2013-10-22 14:49:39: * Certifier does not recognize that domain Tue 2013-10-22 14:49:39: * Certification result: message not certified Tue 2013-10-22 14:49:39: ---- End VBR results Tue 2013-10-22 14:49:39: Passing message through AntiVirus (Size: 19215)... Tue 2013-10-22 14:49:39: * Message is clean (no viruses found) Tue 2013-10-22 14:49:39: ---- End AntiVirus results Tue 2013-10-22 14:49:39: Passing message through Outbreak Protection... Tue 2013-10-22 14:49:39: * Message-ID: <[email protected]> Tue 2013-10-22 14:49:39: * Reference-ID: str=0001.0A090204.52662D6C.0191,ss=1,re=0.000,fgs=0 Tue 2013-10-22 14:49:39: * Virus result: 0 - Clean Tue 2013-10-22 14:49:39: * Spam result: 1 - Clean Tue 2013-10-22 14:49:39: * IWF result: 0 - Clean Tue 2013-10-22 14:49:39: ---- End Outbreak Protection results Tue 2013-10-22 14:49:39: Passing message through Spam Filter (Size: 19215)... Tue 2013-10-22 14:49:41: * -0.4 RP_MATCHES_RCVD Envelope sender domain matches handover relay domain Tue 2013-10-22 14:49:41: * 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. Tue 2013-10-22 14:49:41: * See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block Tue 2013-10-22 14:49:41: * for more information. Tue 2013-10-22 14:49:41: * [URIs: talent-q.com] Tue 2013-10-22 14:49:41: * -4.0 BAYES_00 BODY: Bayes spam probability is 0 to 1% Tue 2013-10-22 14:49:41: * [score: 0.0000] Tue 2013-10-22 14:49:41: * 0.0 HTML_MESSAGE BODY: HTML included in message Tue 2013-10-22 14:49:41: ---- End SpamAssassin results Tue 2013-10-22 14:49:41: Spam Filter score/req: -4.40/12.0 Tue 2013-10-22 14:49:41: Message creation successful: c:\mdaemon\inbound\md50005787572.msg Tue 2013-10-22 14:49:41: --> 250 Ok, message saved <Message-ID: <[email protected]>> Tue 2013-10-22 14:49:41: <-- QUIT Tue 2013-10-22 14:49:41: --> 221 See ya in cyberspace Tue 2013-10-22 14:49:41: SMTP session successful (Bytes in/out: 19332/460) Tue 2013-10-22 14:49:41: ---------- Best Regards, Slamet Raharjo IT Dept. -- --[MDaemon-L]------------------------------------------------ Milis ini untuk Diskusi antar pengguna MDaemon Mail Server. Netiket: http://www.netmeister.org/news/learn2quote Arsip: http://mdaemon-l.dutaint.com Dokumentasi : http://mdaemon.dutaint.co.id Henti Langgan: Kirim mail ke MDaemon-L-unsubscribe [at] dutaint.com Berlangganan: kirim mail ke MDaemon-L-subscribe [at] dutaint.com Versi terakhir MD 13.6.0, SP 4.1.5, BES 2.0.2, OC 2.3.2, SG 2.1.2, PP 2.0.1
