Selamat Pagi Pak Syafril,
Pagi ini kami mendapati email dengan log SMT-In sebagai berikut : Mon 2014-11-10 08:45:07: [308368:2] Session 308368; child 2 Mon 2014-11-10 08:45:07: [308368:2] Accepting SMTP connection from [185.8.12.210:9949] to [172.16.16.50:25] Mon 2014-11-10 08:45:07: [308368:2] --> 220 mail.bakrietower.com ESMTP MDaemon 13.0.4; Mon, 10 Nov 2014 08:45:07 +0700 Mon 2014-11-10 08:45:16: [308368:2] <-- EHLO inunderstand.com Mon 2014-11-10 08:45:16: [308368:2] --> 250-mail.bakrietower.com Hello inunderstand.com, pleased to meet you Mon 2014-11-10 08:45:16: [308368:2] --> 250-ETRN Mon 2014-11-10 08:45:16: [308368:2] --> 250-AUTH LOGIN CRAM-MD5 PLAIN Mon 2014-11-10 08:45:16: [308368:2] --> 250-8BITMIME Mon 2014-11-10 08:45:16: [308368:2] --> 250-STARTTLS Mon 2014-11-10 08:45:16: [308368:2] --> 250 SIZE 10240000 Mon 2014-11-10 08:45:27: [308368:2] <-- MAIL FROM: <[email protected]> BODY=7BIT Mon 2014-11-10 08:45:27: [308368:2] Performing PTR lookup (210.12.8.185.IN-ADDR.ARPA) Mon 2014-11-10 08:45:27: [308368:2] * D=210.12.8.185.IN-ADDR.ARPA TTL=(122) PTR=[210-12-8-185.flynet.net] Mon 2014-11-10 08:45:27: [308368:2] * Gathering A records... Mon 2014-11-10 08:45:28: [308368:2] * No A records found Mon 2014-11-10 08:45:28: [308368:2] ---- End PTR results Mon 2014-11-10 08:45:28: [308368:2] Performing IP lookup (inunderstand.com) Mon 2014-11-10 08:45:28: [308368:2] * D=inunderstand.com TTL=(26) A=[162.255.119.254] Mon 2014-11-10 08:45:28: [308368:2] ---- End IP lookup results Mon 2014-11-10 08:45:28: [308368:2] Performing IP lookup (inunderstand.com) Mon 2014-11-10 08:45:28: [308368:2] * D=inunderstand.com TTL=(26) A=[162.255.119.254] Mon 2014-11-10 08:45:28: [308368:2] * P=010 S=001 D=inunderstand.com TTL=(26) MX=[eforward2.registrar-servers.com] Mon 2014-11-10 08:45:28: [308368:2] * P=010 S=003 D=inunderstand.com TTL=(26) MX=[eforward1.registrar-servers.com] Mon 2014-11-10 08:45:28: [308368:2] * P=010 S=004 D=inunderstand.com TTL=(26) MX=[eforward3.registrar-servers.com] Mon 2014-11-10 08:45:28: [308368:2] * P=015 S=000 D=inunderstand.com TTL=(26) MX=[eforward4.registrar-servers.com] Mon 2014-11-10 08:45:28: [308368:2] * P=020 S=002 D=inunderstand.com TTL=(26) MX=[eforward5.registrar-servers.com] Mon 2014-11-10 08:45:28: [308368:2] * D=inunderstand.com TTL=(26) A=[162.255.119.254] Mon 2014-11-10 08:45:28: [308368:2] * D=inunderstand.com TTL=(26) A=[162.255.119.254] Mon 2014-11-10 08:45:28: [308368:2] * D=inunderstand.com TTL=(26) A=[162.255.119.254] Mon 2014-11-10 08:45:28: [308368:2] * D=inunderstand.com TTL=(26) A=[162.255.119.254] Mon 2014-11-10 08:45:28: [308368:2] * D=inunderstand.com TTL=(26) A=[162.255.119.254] Mon 2014-11-10 08:45:28: [308368:2] ---- End IP lookup results Mon 2014-11-10 08:45:28: [308368:2] Performing SPF lookup (inunderstand.com / 185.8.12.210) Mon 2014-11-10 08:45:28: [308368:2] * Result: none; no SPF record in DNS Mon 2014-11-10 08:45:28: [308368:2] ---- End SPF results Mon 2014-11-10 08:45:28: [308368:2] --> 250 <[email protected]>, Sender ok Mon 2014-11-10 08:45:33: [308368:2] <-- RCPT TO:<[email protected]> Mon 2014-11-10 08:45:33: [308368:2] Performing DNS-BL lookup (185.8.12.210 - connecting IP) Mon 2014-11-10 08:45:33: [308368:2] * zen.spamhaus.org - passed Mon 2014-11-10 08:45:33: [308368:2] ---- End DNS-BL results Mon 2014-11-10 08:45:33: [308368:2] --> 250 <[email protected]>, Recipient ok Mon 2014-11-10 08:45:53: [308368:2] <-- DATA Mon 2014-11-10 08:45:53: [308368:2] Creating temp file (SMTP): c:\mdaemon\queues\temp\md50000338266.tmp Mon 2014-11-10 08:45:53: [308368:2] --> 354 Enter mail, end with <CRLF>.<CRLF> Mon 2014-11-10 08:46:09: [308368:2] Message size: 320921 bytes Mon 2014-11-10 08:46:09: [308368:2] Performing DKIM lookup Mon 2014-11-10 08:46:09: [308368:2] * File: c:\mdaemon\queues\temp\md50000338266.tmp Mon 2014-11-10 08:46:09: [308368:2] * Message-ID: n/a Mon 2014-11-10 08:46:09: [308368:2] * Result: neutral Mon 2014-11-10 08:46:09: [308368:2] ---- End DKIM results Mon 2014-11-10 08:46:09: [308368:2] Performing DomainKeys lookup (Sender: [email protected]) Mon 2014-11-10 08:46:09: [308368:2] * File: c:\mdaemon\queues\temp\md50000338266.tmp Mon 2014-11-10 08:46:09: [308368:2] * Message-ID: n/a Mon 2014-11-10 08:46:09: [308368:2] * Querying for policy: inunderstand.com Mon 2014-11-10 08:46:09: [308368:2] * Querying: _domainkey.inunderstand.com ... Mon 2014-11-10 08:46:10: [308368:2] * DNS: * Name server reports domain name unknown Mon 2014-11-10 08:46:10: [308368:2] * Result: neutral Mon 2014-11-10 08:46:10: [308368:2] ---- End DomainKeys results Mon 2014-11-10 08:46:10: [308368:2] Passing message through AntiVirus (Size: 320921)... Mon 2014-11-10 08:46:10: [308368:2] * Message is clean (no viruses found) Mon 2014-11-10 08:46:10: [308368:2] ---- End AntiVirus results Mon 2014-11-10 08:46:10: [308368:2] Spam filter scan skipped; message size (320921) exceeds spam filter configured max size of (102400) Mon 2014-11-10 08:46:10: [308368:2] Message creation successful: c:\mdaemon\queues\inbound\md50000135333.msg Mon 2014-11-10 08:46:10: [308368:2] --> 250 Ok, message saved <Message-ID: > Mon 2014-11-10 08:46:10: [308368:2] <-- QUIT Mon 2014-11-10 08:46:10: [308368:2] --> 221 See ya in cyberspace Mon 2014-11-10 08:46:10: [308368:2] SMTP session successful (Bytes in/out: 321050/437) Mohon bantuannya untuk menganalisa log tersebut, bagaimana setting security agar email semacam ini bisa bisa kami block. CARE WITH SINCERE Andri Susanto MIS Dept. logo BT Rasuna Epicentrum Jl. HR Rasuna Said, Jakarta 12960 Tel : 6221-2994.1188, Fax: 6221-2994.1288 email : <mailto:[email protected]> [email protected] website : <http://www.rasunaepicentrum.com/> www.rasunaepicentrum.com A luxury development by : cid:[email protected]
