On 19/11/18 09.36, Suzy Ariyani ([email protected]) wrote:
> Ada email dari internal, semacam ini headernya:

> Authentication-Results: bb.ptbmi.com;
>    spf=pass [email protected];
>    dmarc=none header.from=ptbmi.com (no DMARC record);
>    iprev=pass policy.iprev=203.160.56.43 reason="white listed" (HELO
> mail.cybermega.co.id);
>    iprev=pass policy.iprev=203.160.56.43 reason="white listed" (MAIL
> [email protected])


Ini bukan mail internal, hanya seolah saja internal.
Karena ini spam mail.

> From: Ronny Triyana <[email protected]> <[email protected]>
> To: [email protected]
> Message-ID: <[email protected]>
> Subject: =?UTF-8?B?UmVjaG51bmcgZsO8ciBaYWhsdW5nICAgdm9tIDEzIE5vdmVtYmVy?=


> Apa ini yg dimaksud email dg DOUBLE FROM yg berbeda ya pak?
> email semacam ini PASTI SPAM ya pak? meski ada tercantum alamat email yg 
> dikenal.


Ya itu spam dari spammer jagoan.


> apa yg harus kita lakukan? 


Upgrade ke MD 18.5.1 dan aktifkan "RFC standards" check.


https://www.mail-archive.com/[email protected]/msg44190.html

* [20945] The options to refuse messages that are not RFC compliant or
incompatible with DMARC do additional checks for invalid syntax in the
>From header.

http://mdaemon.dutaint.co.id/mdaemon/18.5/index.html?default-domain-and-servers_servers.htm

[x] Refuse messages which violate RFC standards


-- 
syafril
-------
Syafril Hermansyah
MDaemon-L Moderators, running MDaemon 18.5.1-64 bit
Harap tidak cc: atau kirim ke private mail untuk masalah MDaemon.

I am who I am today because of the mistakes I made yesterday.
        --- The Prolific Penman


-- 
--[mdaemon-l]----------------------------------------------------------
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Berlangganan: Kirim mail ke [email protected]
Henti Langgan: Kirim mail ke [email protected]
Versi terakhir MD 18.5.1, SG 5.5.0


Kirim email ke