Oh ya, yang dikirim terlebih dahulu adalah message header dari mail yang
diterima salah satu user.

Setelah itu cari transaksinya penerimaan mail itu di smtp-in log (kalau
mail dari internet masuk langsung ke MDaemon atau pakai ETRN atau ODMR)
atau dari domainpop/multipop (jika mail masuk dulu ke mail hoster
spooling mailbox).


Saya pakai multipop pak.
terlampir multipopnya.

regards,
Tri
--
--MDaemon-L----------------------------------------------------------
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server.

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Henti Langgan: Kirim mail ke MDaemon-L-unsubscribe [at] dutaint.com
Berlangganan: kirim mail ke MDaemon-L-subscribe [at] dutaint.com
Versi terakhir MD 16.0.3, SP 5.0, OC 3.6.0, SG 4.0

Thu 2016-06-23 10:24:32: [844033] MultiPOP collecting mail from 
(mail.unzavitalis.com) for (clarissa / clari...@unzavitalis.com)
Thu 2016-06-23 10:24:32: [844033] MultiPOP collected mail will be removed from 
remote host!
Thu 2016-06-23 10:24:32: [844033] Attempting MultiPOP connection to 
[mail.unzavitalis.com:110]
Thu 2016-06-23 10:24:32: [844033] Resolving A record for [mail.unzavitalis.com] 
(DNS Server: 202.47.78.8)...
Thu 2016-06-23 10:24:32: [844033] *  D=mail.unzavitalis.com TTL=(4) 
A=[111.221.42.94]
Thu 2016-06-23 10:24:32: [844033] Attempting MultiPOP connection to 
[111.221.42.94:110]
Thu 2016-06-23 10:24:32: [844033] Waiting for socket connection...
Thu 2016-06-23 10:24:32: [844033] *  Connection established (202.47.75.100:61593 
-> 111.221.42.94:110)
Thu 2016-06-23 10:24:32: [844033] Waiting for protocol to start...
Thu 2016-06-23 10:24:32: [844033] <-- +OK Hello there.
Thu 2016-06-23 10:24:32: [844033] --> USER clari...@unzavitalis.com
Thu 2016-06-23 10:24:32: [844033] <-- +OK Password required.
Thu 2016-06-23 10:24:32: [844033] --> PASS ******
Thu 2016-06-23 10:24:32: [844033] <-- +OK logged in.
Thu 2016-06-23 10:24:32: [844033] --> STAT
Thu 2016-06-23 10:24:32: [844033] <-- +OK 0 0
Thu 2016-06-23 10:24:32: [844033] --> QUIT
Thu 2016-06-23 10:24:32: [844033] <-- +OK Bye-bye.
Thu 2016-06-23 10:24:32: [844033] POP3 session complete (Bytes in/out: 
6924788/2500)
Thu 2016-06-23 10:24:32: ----------

Thu 2016-06-23 10:26:08: [844128] MultiPOP collecting mail from 
(mail.unzavitalis.com) for (clarissa / clari...@unzavitalis.com)
Thu 2016-06-23 10:26:08: [844128] MultiPOP collected mail will be removed from 
remote host!
Thu 2016-06-23 10:26:08: [844128] Attempting MultiPOP connection to 
[mail.unzavitalis.com:110]
Thu 2016-06-23 10:26:08: [844128] Resolving A record for [mail.unzavitalis.com] 
(DNS Server: 202.47.78.8)...
Thu 2016-06-23 10:26:08: [844128] *  D=mail.unzavitalis.com TTL=(3) 
A=[111.221.42.94]
Thu 2016-06-23 10:26:08: [844128] Attempting MultiPOP connection to 
[111.221.42.94:110]
Thu 2016-06-23 10:26:08: [844128] Waiting for socket connection...
Thu 2016-06-23 10:26:08: [844128] *  Connection established (202.47.75.100:61996 
-> 111.221.42.94:110)
Thu 2016-06-23 10:26:08: [844128] Waiting for protocol to start...
Thu 2016-06-23 10:26:08: [844128] <-- +OK Hello there.
Thu 2016-06-23 10:26:08: [844128] --> USER clari...@unzavitalis.com
Thu 2016-06-23 10:26:08: [844128] <-- +OK Password required.
Thu 2016-06-23 10:26:08: [844128] --> PASS ******
Thu 2016-06-23 10:26:08: [844128] <-- +OK logged in.
Thu 2016-06-23 10:26:08: [844128] --> STAT
Thu 2016-06-23 10:26:08: [844128] <-- +OK 1 126116
Thu 2016-06-23 10:26:08: [844128] --> UIDL
Thu 2016-06-23 10:26:08: [844128] 1 UID4481-1448331620 - new message
Thu 2016-06-23 10:26:08: [844128] --> .
Thu 2016-06-23 10:26:08: [844128] --> NOOP
Thu 2016-06-23 10:26:08: [844128] <-- +OK Yup.
Thu 2016-06-23 10:26:08: [844128] --> LIST 1
Thu 2016-06-23 10:26:08: [844128] <-- +OK 1 126116
Thu 2016-06-23 10:26:08: [844128] --> RETR 1
Thu 2016-06-23 10:26:08: [844128] <-- +OK 126116 octets follow.
Thu 2016-06-23 10:26:08: [844128] Transmission complete
Thu 2016-06-23 10:26:08: [844128] Message creation successful: 
c:\mdaemon\queues\inbound\md50006041448.msg
Thu 2016-06-23 10:26:08: [844128] --> DELE 1
Thu 2016-06-23 10:26:08: [844128] <-- +OK Deleted.
Thu 2016-06-23 10:26:08: [844128] --> QUIT
Thu 2016-06-23 10:26:08: [844128] <-- +OK Bye-bye.
Thu 2016-06-23 10:26:08: [844128] POP3 session complete (Bytes in/out: 
257959/4048)
Thu 2016-06-23 10:26:08: ----------

Thu 2016-06-23 10:33:10: ----------
Thu 2016-06-23 10:33:09: [844445] MultiPOP collecting mail from 
(mail.unzavitalis.com) for (clarissa / clari...@unzavitalis.com)
Thu 2016-06-23 10:33:09: [844445] MultiPOP collected mail will be removed from 
remote host!
Thu 2016-06-23 10:33:09: [844445] Attempting MultiPOP connection to 
[mail.unzavitalis.com:110]
Thu 2016-06-23 10:33:09: [844445] Resolving A record for [mail.unzavitalis.com] 
(DNS Server: 202.47.78.8)...
Thu 2016-06-23 10:33:09: [844445] *  D=mail.unzavitalis.com TTL=(57) 
A=[111.221.42.94]
Thu 2016-06-23 10:33:09: [844445] Attempting MultiPOP connection to 
[111.221.42.94:110]
Thu 2016-06-23 10:33:09: [844445] Waiting for socket connection...
Thu 2016-06-23 10:33:09: [844445] *  Connection established (202.47.75.100:63367 
-> 111.221.42.94:110)
Thu 2016-06-23 10:33:09: [844445] Waiting for protocol to start...
Thu 2016-06-23 10:33:09: [844445] <-- +OK Hello there.
Thu 2016-06-23 10:33:09: [844445] --> USER clari...@unzavitalis.com
Thu 2016-06-23 10:33:09: [844445] <-- +OK Password required.
Thu 2016-06-23 10:33:09: [844445] --> PASS ******
Thu 2016-06-23 10:33:09: [844445] <-- +OK logged in.
Thu 2016-06-23 10:33:09: [844445] --> STAT
Thu 2016-06-23 10:33:09: [844445] <-- +OK 1 129749
Thu 2016-06-23 10:33:09: [844445] --> UIDL
Thu 2016-06-23 10:33:09: [844445] 1 UID4482-1448331620 - new message
Thu 2016-06-23 10:33:09: [844445] --> .
Thu 2016-06-23 10:33:09: [844445] --> NOOP
Thu 2016-06-23 10:33:09: [844445] <-- +OK Yup.
Thu 2016-06-23 10:33:09: [844445] --> LIST 1
Thu 2016-06-23 10:33:09: [844445] <-- +OK 1 129749
Thu 2016-06-23 10:33:09: [844445] --> RETR 1
Thu 2016-06-23 10:33:09: [844445] <-- +OK 129749 octets follow.
Thu 2016-06-23 10:33:10: [844445] Transmission complete
Thu 2016-06-23 10:33:10: [844445] Message creation successful: 
c:\mdaemon\queues\inbound\md50006041492.msg
Thu 2016-06-23 10:33:10: [844445] --> DELE 1
Thu 2016-06-23 10:33:10: [844445] <-- +OK Deleted.
Thu 2016-06-23 10:33:10: [844445] --> QUIT
Thu 2016-06-23 10:33:10: [844445] <-- +OK Bye-bye.
Thu 2016-06-23 10:33:10: [844445] POP3 session complete (Bytes in/out: 
133664/2795)
Thu 2016-06-23 10:33:10: ----------
--
--MDaemon-L----------------------------------------------------------
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server.

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Henti Langgan: Kirim mail ke MDaemon-L-unsubscribe [at] dutaint.com
Berlangganan: kirim mail ke MDaemon-L-subscribe [at] dutaint.com
Versi terakhir MD 16.0.3, SP 5.0, OC 3.6.0, SG 4.0

Kirim email ke