> > Kalau penerima masih terima notification itu kemungkian ada mail
> > proses content filter rule yang melakukannya.
> > Perlihatkan message header notification yang diterima user yang tidak
> > punya hak sebagai postmaster kesini.
> Sekalian periksa ke contentfilter log.
Ini yang saya dapat di log contentfilter
Thu 2016-03-17 17:26:40.891: ----------
Thu 2016-03-17 17:26:40.938: Content Filter processing
c:\mdaemon\queues\local\md50004365272.msg...
Thu 2016-03-17 17:26:40.938: * Message return-path: vic...@pakubuwono6.com
Thu 2016-03-17 17:26:40.938: * Message from: vic...@pakubuwono6.com
Thu 2016-03-17 17:26:40.938: * Message to: vic...@pakubuwono6.com
Thu 2016-03-17 17:26:40.938: * Message subject: Document9
Thu 2016-03-17 17:26:40.938: * Message ID:
<ae82e44c81f3a6297b2ecc7dfab96...@pakubuwono6.com>
Thu 2016-03-17 17:26:40.938: Start Content Filter results
Thu 2016-03-17 17:26:40.948: * Matched 0 of 8 active rules
Thu 2016-03-17 17:26:40.948: End of Content Filter results
Thu 2016-03-17 17:26:40.948: ----------
Dan ini Message Header yg diterima usernya (bukan administrator)
X-MDAV-Result: infected
X-MDAV-Infected: ???
X-MDAV-Processed: pakubuwono6.com, Thu, 17 Mar 2016 17:26:40 +0700
Return-path: <vic...@pakubuwono6.com>
Received: from pop.cbn.net.id ([202.158.81.40])
by pakubuwono6.com ([127.0.0.1])
(MDaemon PRO v16.0.0)
with DomainPOP id md50002565195.msg for <vic...@pakubuwono6.com>;
Thu, 17 Mar 2016 17:26:38 +0700
X-MDRemoteIP: 202.158.81.40
X-MDHelo:
X-MDArrival-Date: Thu, 17 Mar 2016 17:26:38 +0700
X-Return-Path: vic...@pakubuwono6.com
X-Envelope-From: vic...@pakubuwono6.com
X-MDaemon-Deliver-To: vic...@pakubuwono6.com
Envelope-to: vic...@pakubuwono6.com
Delivery-date: Thu, 17 Mar 2016 17:24:09 +0700
Received: from [10.64.162.1] (port=42782 helo=mx-1-2.int.cbn.net.id)
by backend-1-3.int.cbn.net.id with esmtp (Exim 4.80.1)
(envelope-from <vic...@pakubuwono6.com>)
id 1agV69-0002dT-9r
for vic...@pakubuwono6.com; Thu, 17 Mar 2016 17:24:09 +0700
Received: from [123.231.120.100] (port=31814)
by mx-1-2.int.cbn.net.id with esmtp (Exim 4.80.1)
(envelope-from <vic...@pakubuwono6.com>)
id 1agV68-0000Nt-O9
for vic...@pakubuwono6.com; Thu, 17 Mar 2016 17:24:09 +0700
From: <vic...@pakubuwono6.com>
To: <vic...@pakubuwono6.com>
Subject: MDaemon Warning - infected: Document9
Thread-Topic: Document9
Thread-Index: AdF+sJZYKtxaTvOhSFC+rMKD/CUwyg==
Date: Thu, 17 Mar 2016 15:54:05 +0530
Message-ID: <ae82e44c81f3a6297b2ecc7dfab96...@pakubuwono6.com>
Accept-Language: en-GB, en-US
Content-Language: en-US
X-MS-Has-Attach: yes
X-MS-TNEF-Correlator:
x-originating-ip: [192.168.0.9]
Content-Type: multipart/mixed;
boundary="_004_300621BC94B77642BC430B054CFFEC9C4A08FF5DBOROSBSboroloca_"
MIME-Version: 1.0
--_004_300621BC94B77642BC430B054CFFEC9C4A08FF5DBOROSBSboroloca_
Content-Type: multipart/alternative;
boundary="_000_300621BC94B77642BC430B054CFFEC9C4A08FF5DBOROSBSboroloca_"
--_000_300621BC94B77642BC430B054CFFEC9C4A08FF5DBOROSBSboroloca_
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
--------------------------------------------------------------
SecurityPlus for MDaemon has detected a virus infected message
--------------------------------------------------------------
******************************* WARNING *******************************
The message has been scanned by SecurityPlus for MDaemon and was found=20
to contain a virus. Information on the virus and action taken is=20
provided below.
******************************* WARNING *******************************
----------------------------------------------------------------------
Attachment Virus name Action taken
----------------------------------------------------------------------
Document9.zip ??? Removed
Untuk Recipientsnya bisa lihat di attachment saya.
Terima Kasih.
Regards,
Sukardy
--
--[MDaemon-L]------------------------------------------------
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server.
Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Henti Langgan: Kirim mail ke MDaemon-L-unsubscribe [at] dutaint.com
Berlangganan: kirim mail ke MDaemon-L-subscribe [at] dutaint.com
Versi terakhir MD 15.5.3, SP 4.5.1, BES 2.0.2, OC 3.5.2, SG 3.0.3
