Dear Pak syafril kami masih mendapati email berpassword masuk quarantine pada konfigurasi antivirus kami sudah sesuaikan dengan saran dari bapak berikut
namun masih saja email ber password masuk quarantine bahkan ada kasus kami sudah masukan doamin email kedalam Exclusion list antivirus namun email dari situ tetap terquarantine berikut log kasus tersebut untuk AVnya Tue 2017-05-23 18:52:29.267: SecurityPlus AntiVirus processing c:\mdaemon\queues\local\md35001523217.msg... Tue 2017-05-23 18:52:29.267: * Message return-path: prvs=1316ac021b= [email protected] Tue 2017-05-23 18:52:29.267: * Message from: [email protected] Tue 2017-05-23 18:52:29.267: * Message to: [email protected] Tue 2017-05-23 18:52:29.267: * Message subject: FW2: coba kirim file berpassword lokal domain Tue 2017-05-23 18:52:29.267: * Message ID: <002601d2d3bb$0ca7bbf0$25f733d0$@ dwisapta.com> Tue 2017-05-23 18:52:29.267: Start SecurityPlus AntiVirus results Tue 2017-05-23 18:52:29.267: ** Address is in virus scanning exclusion list - skipping virus scan* Tue 2017-05-23 18:52:29.287: End of SecurityPlus AntiVirus results dan berikut log yang kami temukan pada smtp-in untuk email yang sama Tue 2017-05-23 18:52:28.193: 05: Session 115194; child 0001 Tue 2017-05-23 18:52:28.193: 05: Accepting SMTP connection from 10.77.211.9:59722 to 10.77.209.13:25 Tue 2017-05-23 18:52:28.194: 03: --> 220 dsp.dwisapta.com ESMTP MDaemon 16.5.2; Tue, 23 May 2017 18:52:28 +0700 Tue 2017-05-23 18:52:28.209: 02: <-- EHLO PanjiAgung Tue 2017-05-23 18:52:28.209: 03: --> 250-dsp.dwisapta.com Hello PanjiAgung [10.77.211.9], pleased to meet you Tue 2017-05-23 18:52:28.210: 03: --> 250-ETRN Tue 2017-05-23 18:52:28.210: 03: --> 250-AUTH LOGIN CRAM-MD5 PLAIN Tue 2017-05-23 18:52:28.210: 03: --> 250-8BITMIME Tue 2017-05-23 18:52:28.210: 03: --> 250-ENHANCEDSTATUSCODES Tue 2017-05-23 18:52:28.210: 03: --> 250-STARTTLS Tue 2017-05-23 18:52:28.210: 03: --> 250 SIZE 35875000 Tue 2017-05-23 18:52:28.211: 02: <-- AUTH LOGIN Tue 2017-05-23 18:52:28.211: 03: --> 334 VXNlcm5hbWU6 Tue 2017-05-23 18:52:28.211: 02: <-- cGFuamkuYWd1bmdAZHdpc2FwdGEuY29t Tue 2017-05-23 18:52:28.211: 03: --> 334 UGFzc3dvcmQ6 Tue 2017-05-23 18:52:28.212: 02: <-- ****** Tue 2017-05-23 18:52:28.213: 03: --> 235 2.7.0 Authentication successful Tue 2017-05-23 18:52:28.213: 01: Authenticated as [email protected] Tue 2017-05-23 18:52:28.222: 02: <-- MAIL FROM: <[email protected]> Tue 2017-05-23 18:52:28.224: 03: --> 250 2.1.0 Sender OK Tue 2017-05-23 18:52:28.225: 02: <-- RCPT TO: <[email protected]> Tue 2017-05-23 18:52:28.227: 03: --> 250 2.1.5 Recipient OK Tue 2017-05-23 18:52:28.228: 02: <-- DATA Tue 2017-05-23 18:52:28.229: 01: Creating temp file (SMTP): c:\mdaemon\queues\temp\md50000014584.tmp Tue 2017-05-23 18:52:28.229: 03: --> 354 Enter mail, end with <CRLF>.<CRLF> Tue 2017-05-23 18:52:28.253: 01: Message size: 443182 bytes Tue 2017-05-23 18:52:28.254: 06: Passing message through AntiVirus (Size: 443182)... Tue 2017-05-23 18:52:28.255: 06: * Recipient or sender in exclusion list Tue 2017-05-23 18:52:28.255: 06: ---- End AntiVirus results Tue 2017-05-23 18:52:28.256: 11: Passing message through ClamAV Plugin (c:\mdaemon\queues\temp\md50000014584.tmp)... Tue 2017-05-23 18:52:28.256: 11: * Message-ID: <[email protected]> Tue 2017-05-23 18:52:28.320: 11: ** Virus result: 10 - contains password-protected/encrypted file and could not be scanned - quarantined* Tue 2017-05-23 18:52:28.373: 01: Message creation successful: c:\mdaemon\queues\inbound\md50000436256.msg Tue 2017-05-23 18:52:28.373: 03: --> 250 2.6.0 Ok, message saved <Message-ID: <[email protected]>> Tue 2017-05-23 18:52:30.827: 02: <-- QUIT Tue 2017-05-23 18:52:30.827: 03: --> 221 2.0.0 See ya in cyberspace Tue 2017-05-23 18:52:30.827: 01: SMTP session successful (Bytes in/out: 443350/543) berdasarkan Log AV sudah *skipping virus scan* namun pada smtp-in masih *contains password-protected/encrypted file and could not be scanned - quarantined* mohon bantuanya pak. terima kasih
