On September 15, 2022 12:17:37 PM GMT+07:00, Bambang Setiawan via
Mdaemon-L <[email protected]> wrote:

>Mohon bantuan analisa Bapak, hari ini ada satu user kami yang menerima spam 
>cukup banyak ( 8 email ),
>
>untuk sample mail header-nya terlampir pak. terima kasih
>
>Mail Header 1
>

>X-Spam-Status: Yes, score=5.7 required=5.0 tests=HTML_FONT_LOW_CONTRAST,
>       HTML_MESSAGE,MDAEMON_OP_SPAM_HIGH,MISSING_HEADERS,PDS_OTHER_BAD_TLD,
>       SPF_PASS,T_SCC_BODY_TEXT_LINE shortcircuit=no autolearn=disabled
>       version=3.4.4
>X-Spam-Report: *  2.5 MDAEMON_OP_SPAM_HIGH MDaemon: spam/phish
>       *  2.0 PDS_OTHER_BAD_TLD Untrustworthy TLDs
>       *      [URI: losiposi.xyz (xyz)]
>       * -0.0 SPF_PASS SPF: sender matches SPF record
>       *  1.2 MISSING_HEADERS Missing To: header
>       *  0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or
>       *      identical to background
>       *  0.0 HTML_MESSAGE BODY: HTML included in message
>       * -0.0 T_SCC_BODY_TEXT_LINE No description available.


Perbaiki setting Outbreak Protection.

http://mdaemon.dutaint.co.id/mdaemon/22.0/sp_outbreak_protection.html

boleh di set

Spam should be...

[x] blocked in real time

atau naikkkan scorenya ke +10.2

[x] accepted for filtering   with Score =+10.2

https://www.mail-archive.com/[email protected]/msg47240.html



>Mail Header 2 :
>

>X-Spam-Report: *  3.2 AXB_X_FF_SEZ_S Forefront sez this is spam
>       *  2.5 MDAEMON_OP_SPAM_HIGH MDaemon: spam/phish
>       * -0.0 SPF_PASS SPF: sender matches SPF record
>       *  1.0 BANG_GUAR BODY: Something is emphatically guaranteed
>       *  0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or
>       *      identical to background
>       *  0.0 HTML_MESSAGE BODY: HTML included in message
>       * -0.0 T_SCC_BODY_TEXT_LINE No description available.


Sama dengan kasus no 1 diatas.


>Mail Header 3 :
>
>
>X-Spam-Status: No, score=4.9 required=5.0 tests=HTML_IMAGE_RATIO_02,
>       HTML_MESSAGE,MDAEMON_OP_SPAM_HIGH,MIME_HTML_MOSTLY,MISSING_HEADERS,
>       RCVD_HELO_IP_MISMATCH,SPF_PASS,T_SCC_BODY_TEXT_LINE shortcircuit=no
>       autolearn=disabled version=3.4.4
>X-Spam-Report: *  2.5 MDAEMON_OP_SPAM_HIGH MDaemon: spam/phish
>       *  1.2 MISSING_HEADERS Missing To: header
>       *  1.2 RCVD_HELO_IP_MISMATCH Received: HELO and IP do not match, but
>       *      should
>       * -0.0 SPF_PASS SPF: sender matches SPF record
>       *  0.0 HTML_MESSAGE BODY: HTML included in message
>       *  0.1 MIME_HTML_MOSTLY BODY: Multipart message mostly text/html MIME
>       *  0.0 HTML_IMAGE_RATIO_02 BODY: HTML has a low ratio of text to image
>       *       area
>       * -0.0 T_SCC_BODY_TEXT_LINE No description available.

sama dengan kasus nomer 1 diatas.


--------------------------------------------------------------------------------
-- 
syafril
--------
Syafril Hermansyah

MDaemon-L Moderator, run MDaemon 22.0.3
Mohon tidak kirim private mail (atau cc:) untuk masalah MDaemon.

Orang rasional menanggapi dunia, orang tdk rasional berusaha membuat
dunia menanggapinya
        -- Bernard Shaw


-- 
--[mdaemon-l]----------------------------------------------------------
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Berlangganan: Kirim mail ke [email protected]
Henti Langgan: Kirim mail ke [email protected]
Versi terakhir: MDaemon 22.0.3, SecurityGateway 8.5.3


Kirim email ke