Dear Pak Syafril, Kami mendapatkan info dari user (recipient) yang menerima email notifikasi bahwa ada yang kirim file hdr yang tidak bisa di scan sehingga masuk karantina, Sender nya ini dari aplikasi yang kirim secara otomatis. Menurut developer kami, file yang di attach adalah file excel (OOS CARREFOUR PABELAN SOLO 1049028_15012018142547.xls) dan tidak di password. Saya cek di log smtp-in dianggap no viruses found, namun di log antivirus attachmnt nya bukan xls dan tidak bisa discan sehingga di karantina. Itu kira-kira kenapa ya Pak?
Berikut log SMTP-in dan log dari antivirus. *Log SMTP-in Tue 2018-01-16 14:24:36.864: ---------- Tue 2018-01-16 14:23:37.775: [639242] Session 639242; child 0048 Tue 2018-01-16 14:23:37.775: [639242] Accepting SMTP connection from 172.16.1.20:54578 to 172.30.2.2:587 Tue 2018-01-16 14:23:37.776: [639242] --> 220 mail.fastratabuana.co.id ESMTP MSA MDaemon 16.0.4; Tue, 16 Jan 2018 14:23:37 +0700 Tue 2018-01-16 14:23:37.777: [639242] <-- EHLO FBFEIS01 Tue 2018-01-16 14:23:37.778: [639242] --> 250-mail.fastratabuana.co.id Hello FBFEIS01 [172.16.1.20], pleased to meet you Tue 2018-01-16 14:23:37.778: [639242] --> 250-AUTH LOGIN CRAM-MD5 PLAIN Tue 2018-01-16 14:23:37.778: [639242] --> 250-8BITMIME Tue 2018-01-16 14:23:37.778: [639242] --> 250-ENHANCEDSTATUSCODES Tue 2018-01-16 14:23:37.778: [639242] --> 250-STARTTLS Tue 2018-01-16 14:23:37.778: [639242] --> 250 SIZE Tue 2018-01-16 14:23:37.778: [639242] <-- AUTH login ZG9ub3RyZXBseUBmYXN0cmF0YWJ1YW5hLmNvLmlk Tue 2018-01-16 14:23:37.778: [639242] --> 334 UGFzc3dvcmQ6 Tue 2018-01-16 14:23:37.778: [639242] <-- ****** Tue 2018-01-16 14:23:37.779: [639242] --> 235 2.7.0 Authentication successful Tue 2018-01-16 14:23:37.779: [639242] Authenticated as [email protected] Tue 2018-01-16 14:23:37.792: [639242] <-- MAIL FROM:<[email protected]> Tue 2018-01-16 14:23:37.793: [639242] --> 250 2.1.0 Sender OK Tue 2018-01-16 14:23:37.793: [639242] <-- RCPT TO:<[email protected]> Tue 2018-01-16 14:23:37.797: [639242] --> 250 2.1.5 Recipient OK Tue 2018-01-16 14:23:37.798: [639242] <-- RCPT TO:<[email protected]> Tue 2018-01-16 14:23:37.800: [639242] --> 250 2.1.5 Recipient OK Tue 2018-01-16 14:23:37.800: [639242] <-- RCPT TO:<[email protected]> Tue 2018-01-16 14:23:37.804: [639242] --> 250 2.1.5 Recipient OK Tue 2018-01-16 14:23:37.804: [639242] <-- RCPT TO:<[email protected]> Tue 2018-01-16 14:23:37.806: [639242] --> 250 2.1.5 Recipient OK Tue 2018-01-16 14:23:37.807: [639242] <-- DATA Tue 2018-01-16 14:23:37.807: [639242] Creating temp file (SMTP): d:\mdaemon\queues\temp\34\md50000009378.tmp Tue 2018-01-16 14:23:37.808: [639242] --> 354 Enter mail, end with <CRLF>.<CRLF> Tue 2018-01-16 14:23:37.809: [639242] Message size: 26866 bytes Tue 2018-01-16 14:23:37.810: [639242] Passing message through AntiVirus (Size: 26866)... Tue 2018-01-16 14:23:37.838: [639242] * Message is clean (no viruses found) Tue 2018-01-16 14:23:37.838: [639242] ---- End AntiVirus results Tue 2018-01-16 14:23:38.042: [639242] Message creation successful: d:\mdaemon\queues\inbound\41\md50000176339.msg Tue 2018-01-16 14:23:38.042: [639242] --> 250 2.6.0 Ok, message saved Tue 2018-01-16 14:24:37.707: [639242] Connection closed Tue 2018-01-16 14:24:37.707: [639242] SMTP session successful (Bytes in/out: 27154/503) Tue 2018-01-16 14:24:37.707: ---------- *Log Antivirus Tue 2018-01-16 14:24:47.140: ---------- Tue 2018-01-16 14:24:47.138: SecurityPlus AntiVirus processing d:\mdaemon\queues\local\md35050590294.msg... Tue 2018-01-16 14:24:47.138: * Message return-path: [email protected] Tue 2018-01-16 14:24:47.138: * Message from: [email protected] Tue 2018-01-16 14:24:47.138: * Message to: [email protected] Tue 2018-01-16 14:24:47.138: * Message subject: OOS CARREFOUR PABELAN SOLO 1049028 (RGM DIRECT MM JABAR) Tue 2018-01-16 14:24:47.138: * Message ID: <mdaemon-f201801161424.aa2437745md50000009...@mail.fastratabuana.co.id> Tue 2018-01-16 14:24:47.138: Start SecurityPlus AntiVirus results Tue 2018-01-16 14:24:47.138: * pd546116892.hdr could not be scanned Tue 2018-01-16 14:24:47.138: * Total attachments scanned : 0 (including multipart/alternatives and message body) Tue 2018-01-16 14:24:47.138: * Total attachments infected : 0 Tue 2018-01-16 14:24:47.138: * Total attachments disinfected: 0 Tue 2018-01-16 14:24:47.138: * Total errors while scanning : 1 Tue 2018-01-16 14:24:47.149: * Message moved to d:\mdaemon\cfilter\quarant\md50000001574.msg Tue 2018-01-16 14:24:47.151: * Virus notification sent to [email protected] (sender) Tue 2018-01-16 14:24:47.153: * Virus notification sent to [email protected] (recipient) Tue 2018-01-16 14:24:47.155: * Virus notification sent to [email protected] (admin) Tue 2018-01-16 14:24:47.155: End of SecurityPlus AntiVirus results Tue 2018-01-16 14:24:47.155: ---------- Tue 2018-01-16 14:24:47.152: SecurityPlus AntiVirus processing d:\mdaemon\queues\local\md35050590295.msg... Tue 2018-01-16 14:24:47.152: * Message return-path: [email protected] Tue 2018-01-16 14:24:47.152: * Message from: [email protected] Tue 2018-01-16 14:24:47.152: * Message to: [email protected] Tue 2018-01-16 14:24:47.152: * Message subject: OOS CARREFOUR PABELAN SOLO 1049028 (RGM DIRECT MM JABAR) Tue 2018-01-16 14:24:47.152: * Message ID: <mdaemon-f201801161424.aa2437745md50000009...@mail.fastratabuana.co.id> Tue 2018-01-16 14:24:47.152: Start SecurityPlus AntiVirus results Tue 2018-01-16 14:24:47.152: * pd551014278.hdr could not be scanned Tue 2018-01-16 14:24:47.152: * Total attachments scanned : 0 (including multipart/alternatives and message body) Tue 2018-01-16 14:24:47.152: * Total attachments infected : 0 Tue 2018-01-16 14:24:47.152: * Total attachments disinfected: 0 Tue 2018-01-16 14:24:47.152: * Total errors while scanning : 1 Tue 2018-01-16 14:24:47.162: * Message moved to d:\mdaemon\cfilter\quarant\md50000001575.msg Tue 2018-01-16 14:24:47.164: * Virus notification sent to [email protected] (sender) Tue 2018-01-16 14:24:47.166: * Virus notification sent to [email protected] (recipient) Tue 2018-01-16 14:24:47.169: * Virus notification sent to [email protected] (admin) Tue 2018-01-16 14:24:47.169: End of SecurityPlus AntiVirus results Tue 2018-01-16 14:24:47.169: ---------- Tue 2018-01-16 14:24:47.164: SecurityPlus AntiVirus processing d:\mdaemon\queues\local\md35050590296.msg... Tue 2018-01-16 14:24:47.164: * Message return-path: [email protected] Tue 2018-01-16 14:24:47.164: * Message from: [email protected] Tue 2018-01-16 14:24:47.164: * Message to: [email protected] Tue 2018-01-16 14:24:47.164: * Message subject: OOS CARREFOUR PABELAN SOLO 1049028 (RGM DIRECT MM JABAR) Tue 2018-01-16 14:24:47.164: * Message ID: <mdaemon-f201801161424.aa2437745md50000009...@mail.fastratabuana.co.id> Tue 2018-01-16 14:24:47.164: Start SecurityPlus AntiVirus results Tue 2018-01-16 14:24:47.164: * pd556222412.hdr could not be scanned Tue 2018-01-16 14:24:47.164: * Total attachments scanned : 0 (including multipart/alternatives and message body) Tue 2018-01-16 14:24:47.164: * Total attachments infected : 0 Tue 2018-01-16 14:24:47.164: * Total attachments disinfected: 0 Tue 2018-01-16 14:24:47.164: * Total errors while scanning : 1 Tue 2018-01-16 14:24:47.175: * Message moved to d:\mdaemon\cfilter\quarant\md50000001576.msg Tue 2018-01-16 14:24:47.177: * Virus notification sent to [email protected] (sender) Tue 2018-01-16 14:24:47.179: * Virus notification sent to [email protected] (recipient) Tue 2018-01-16 14:24:47.181: * Virus notification sent to [email protected] (admin) Tue 2018-01-16 14:24:47.181: End of SecurityPlus AntiVirus results Tue 2018-01-16 14:24:47.181: ---------- Tue 2018-01-16 14:24:47.180: SecurityPlus AntiVirus processing d:\mdaemon\queues\local\md35050590297.msg... Tue 2018-01-16 14:24:47.180: * Message return-path: [email protected] Tue 2018-01-16 14:24:47.180: * Message from: [email protected] Tue 2018-01-16 14:24:47.180: * Message to: [email protected] Tue 2018-01-16 14:24:47.180: * Message subject: OOS CARREFOUR PABELAN SOLO 1049028 (RGM DIRECT MM JABAR) Tue 2018-01-16 14:24:47.180: * Message ID: <mdaemon-f201801161424.aa2437745md50000009...@mail.fastratabuana.co.id> Tue 2018-01-16 14:24:47.180: Start SecurityPlus AntiVirus results Tue 2018-01-16 14:24:47.180: * pd561119798.hdr could not be scanned Tue 2018-01-16 14:24:47.180: * Total attachments scanned : 0 (including multipart/alternatives and message body) Tue 2018-01-16 14:24:47.180: * Total attachments infected : 0 Tue 2018-01-16 14:24:47.180: * Total attachments disinfected: 0 Tue 2018-01-16 14:24:47.180: * Total errors while scanning : 1 Tue 2018-01-16 14:24:47.191: * Message moved to d:\mdaemon\cfilter\quarant\md50000001577.msg Tue 2018-01-16 14:24:47.193: * Virus notification sent to [email protected] (sender) Tue 2018-01-16 14:24:47.195: * Virus notification sent to [email protected] (recipient) Tue 2018-01-16 14:24:47.198: * Virus notification sent to [email protected] (admin) Tue 2018-01-16 14:24:47.198: End of SecurityPlus AntiVirus results Tue 2018-01-16 14:24:47.198: ---------- Terimakasih, Asep. Y -- --MDaemon-L---------------------------------------------------------- Milis ini untuk Diskusi antar pengguna MDaemon Mail Server. Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette Arsip: http://mdaemon-l.dutaint.com Dokumentasi : http://mdaemon.dutaint.co.id Henti Langgan: Kirim mail ke [email protected] Versi terakhir MD 17.5.2, SP 5.5, OC 5.0.1, SG 5.0
