Dear pak syafril mohon analisanya dari log berikut, apakah ini spam atau bukan ya? karena diterima di recipient kami body messagenya mencurigakan dan sendernya itu pakai nama orang indonesia, tidak layak sepertinya untuk domain dari jerman, atau si sender yang ter-hijack random ngirim ke domain kami?
Mon 2018-05-07 19:43:55.677: [763340] Session 763340; child 0004 Mon 2018-05-07 19:43:55.677: [763340] Accepting SMTP connection from 85.13.133.63:52382 to 10.0.0.6:25 Mon 2018-05-07 19:43:55.679: [763340] --> 220 mail.kompas.tv ESMTP MDaemon 17.0.2; Mon, 07 May 2018 19:43:55 +0700 Mon 2018-05-07 19:43:55.875: [763340] <-- EHLO dd10004.kasserver.com Mon 2018-05-07 19:43:55.876: [763340] --> 250-mail.kompas.tv Hello dd10004.kasserver.com [85.13.133.63], pleased to meet you Mon 2018-05-07 19:43:55.876: [763340] --> 250-ETRN Mon 2018-05-07 19:43:55.876: [763340] --> 250-AUTH LOGIN CRAM-MD5 PLAIN Mon 2018-05-07 19:43:55.876: [763340] --> 250-8BITMIME Mon 2018-05-07 19:43:55.876: [763340] --> 250-ENHANCEDSTATUSCODES Mon 2018-05-07 19:43:55.876: [763340] --> 250 SIZE 20480000 Mon 2018-05-07 19:43:56.074: [763340] <-- MAIL FROM:< [email protected]> SIZE=232422 Mon 2018-05-07 19:43:56.077: [763340] Performing PTR lookup (63.133.13.85.IN-ADDR.ARPA) Mon 2018-05-07 19:43:56.096: [763340] * D=63.133.13.85.IN-ADDR.ARPA TTL=(29) PTR=[dd10004.kasserver.com] Mon 2018-05-07 19:43:56.431: [763340] * D=dd10004.kasserver.com TTL=(119) A=[85.13.133.63] Mon 2018-05-07 19:43:56.431: [763340] ---- End PTR results Mon 2018-05-07 19:43:56.434: [763340] Performing IP lookup ( dd10004.kasserver.com) Mon 2018-05-07 19:43:56.453: [763340] * D=dd10004.kasserver.com TTL=(119) A=[85.13.133.63] Mon 2018-05-07 19:43:56.453: [763340] ---- End IP lookup results Mon 2018-05-07 19:43:56.457: [763340] Performing IP lookup ( klinikamkaiserteich.de) Mon 2018-05-07 19:43:56.796: [763340] * D=klinikamkaiserteich.de TTL=(119) A=[85.13.133.63] Mon 2018-05-07 19:43:56.796: [763340] ---- End IP lookup results Mon 2018-05-07 19:43:56.797: [763340] Performing SPF lookup ( klinikamkaiserteich.de / 85.13.133.63) Mon 2018-05-07 19:43:57.131: [763340] * Policy: v=spf1 mx a ptr ?all Mon 2018-05-07 19:43:57.485: [763340] * Evaluating mx: match Mon 2018-05-07 19:43:57.485: [763340] * Result: pass Mon 2018-05-07 19:43:57.485: [763340] ---- End SPF results Mon 2018-05-07 19:43:57.485: [763340] --> 250 2.1.0 Sender OK Mon 2018-05-07 19:43:57.682: [763340] <-- RCPT TO:< [email protected]> Mon 2018-05-07 19:43:57.691: [763340] --> 250 2.1.5 Recipient OK Mon 2018-05-07 19:43:57.888: [763340] <-- DATA Mon 2018-05-07 19:43:57.891: [763340] Creating temp file (SMTP): c:\mdaemon\queues\temp\md50001037212.tmp Mon 2018-05-07 19:43:57.891: [763340] --> 354 Enter mail, end with <CRLF>.<CRLF> Mon 2018-05-07 19:43:59.762: [763340] Message size: 232422 bytes Mon 2018-05-07 19:43:59.763: [763340] Performing DKIM lookup Mon 2018-05-07 19:43:59.763: [763340] * File: c:\mdaemon\queues\temp\md50001037212.tmp Mon 2018-05-07 19:43:59.763: [763340] * Message-ID: < [email protected]> Mon 2018-05-07 19:43:59.763: [763340] * Result: neutral Mon 2018-05-07 19:43:59.763: [763340] ---- End DKIM results Mon 2018-05-07 19:43:59.767: [763340] Performing DMARC processing Mon 2018-05-07 19:43:59.767: [763340] * File: c:\mdaemon\queues\temp\md50001037212.tmp Mon 2018-05-07 19:43:59.767: [763340] * Message-ID: < [email protected]> Mon 2018-05-07 19:43:59.767: [763340] * Author domain: klinikamkaiserteich.de Mon 2018-05-07 19:43:59.767: [763340] * Organizational domain: klinikamkaiserteich.de Mon 2018-05-07 19:43:59.767: [763340] * Query domain: _ dmarc.klinikamkaiserteich.de Mon 2018-05-07 19:44:01.088: [763340] * No DMARC policy record found Mon 2018-05-07 19:44:01.088: [763340] * Action taken: none Mon 2018-05-07 19:44:01.088: [763340] * Result: none Mon 2018-05-07 19:44:01.088: [763340] ---- End DMARC results Mon 2018-05-07 19:44:01.091: [763340] Passing message through AntiVirus (Size: 232422)... Mon 2018-05-07 19:44:01.366: [763340] * Message is clean (no viruses found) Mon 2018-05-07 19:44:01.366: [763340] ---- End AntiVirus results Mon 2018-05-07 19:44:01.367: [763340] Passing message through Spam Filter (Size: 232422)... Mon 2018-05-07 19:44:02.377: [763340] ---- End SpamAssassin results Mon 2018-05-07 19:44:02.377: [763340] Spam Filter score/req: 0.00/12.0 Mon 2018-05-07 19:44:02.379: [763340] Message creation successful: c:\mdaemon\queues\inbound\md50001651891.msg Mon 2018-05-07 19:44:02.379: [763340] --> 250 2.6.0 Ok, message saved <Message-ID: <[email protected]>> Mon 2018-05-07 19:44:02.575: [763340] <-- QUIT Mon 2018-05-07 19:44:02.575: [763340] --> 221 2.0.0 See ya in cyberspace Mon 2018-05-07 19:44:02.575: [763340] SMTP session successful (Bytes in/out: 232563/456) Regards, Thariq Basyir -- --[mdaemon-l]---------------------------------------------------------- Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette Arsip: http://mdaemon-l.dutaint.com Dokumentasi : http://mdaemon.dutaint.co.id Berlangganan: Kirim mail ke [email protected] Henti Langgan: Kirim mail ke [email protected] Versi terakhir MD 18.0 (all-in-one), SG 5.0.1
