>> Kalau mau dianggap aman (tidak akan di tolak oleh server penerima) 
>> maka di MDaemon bisa di set
>> 
>> http://mdaemon.dutaint.co.id/mdaemon/23.5/antivirus.html
> >
>> When viruses are detected...
>> 
>> [x] ...quarantine the entire message to...
>> 
>> agar mail itu masuk ke quarantine queue dan bisa di approve (release) 
>> nantinya.
>> 
>> Atau masukkan sender kedalam exclude from virus scanning.
>> Pilihan lain lagi, dokumennya di password protect.
> 
> Noted Pak Syafril terimakasih untuk inside nya.

Pak Syafril, mohon maaf saya rise kembali case ini,
Saya sudah mengikuti masukan Bapak untuk centang quarantine ketika email 
terdeteksi virus
When viruses are detected...
 
[x] ...quarantine the entire message to...

Yang terjadi saat ini ada beberapa case yang eamilnya di blokir antivirus, 
namun tidak ada di quarantine.
Berikut log smtp-in nya Pak
Thu 2023-11-09 10:02:39.862: 01: ----------
Thu 2023-11-09 10:02:29.071: 05: [03555627] Session 03555627; child 0032
Thu 2023-11-09 10:02:29.071: 05: [03555627] Accepting SMTP connection from 
36.64.10.242:54369 to 172.30.2.2:465
Thu 2023-11-09 10:02:29.175: 01: [03555627] SSL negotiation successful (TLS 
1.2, TLS_RSA_WITH_AES_128_CBC_SHA256)
Thu 2023-11-09 10:02:29.175: 03: [03555627] --> 220 mail.fastratabuana.co.id 
ESMTP MDaemon 23.0.2; Thu, 09 Nov 2023 10:02:29 +0700
Thu 2023-11-09 10:02:29.213: 02: [03555627] <-- EHLO FAAIDA
Thu 2023-11-09 10:02:29.213: 03: [03555627] --> 250-mail.fastratabuana.co.id 
Hello FAAIDA [36.64.10.242], pleased to meet you
Thu 2023-11-09 10:02:29.213: 03: [03555627] --> 250-ETRN
Thu 2023-11-09 10:02:29.213: 03: [03555627] --> 250-AUTH LOGIN CRAM-MD5 PLAIN
Thu 2023-11-09 10:02:29.213: 03: [03555627] --> 250-8BITMIME
Thu 2023-11-09 10:02:29.213: 03: [03555627] --> 250-ENHANCEDSTATUSCODES
Thu 2023-11-09 10:02:29.213: 03: [03555627] --> 250-PIPELINING
Thu 2023-11-09 10:02:29.213: 03: [03555627] --> 250-CHUNKING
Thu 2023-11-09 10:02:29.213: 03: [03555627] --> 250-REQUIRETLS
Thu 2023-11-09 10:02:29.213: 03: [03555627] --> 250 SIZE
Thu 2023-11-09 10:02:29.233: 02: [03555627] <-- AUTH LOGIN
Thu 2023-11-09 10:02:29.233: 03: [03555627] --> 334 VXNlcm5hbWU6
Thu 2023-11-09 10:02:29.254: 02: [03555627] <-- RmluLmthZ0BrYXBhbGFwaS5jby5pZA==
Thu 2023-11-09 10:02:29.254: 03: [03555627] --> 334 UGFzc3dvcmQ6
Thu 2023-11-09 10:02:29.273: 02: [03555627] <-- ******
Thu 2023-11-09 10:02:29.273: 01: [03555627] Authenticating 
[email protected]...
Thu 2023-11-09 10:02:29.274: 01: [03555627] Authenticated as 
[email protected]
Thu 2023-11-09 10:02:29.275: 03: [03555627] --> 235 2.7.0 Authentication 
successful
Thu 2023-11-09 10:02:29.299: 02: [03555627] <-- MAIL FROM: 
<[email protected]>
Thu 2023-11-09 10:02:29.300: 03: [03555627] --> 250 2.1.0 Sender OK
Thu 2023-11-09 10:02:29.322: 02: [03555627] <-- RCPT TO: 
<[email protected]>
Thu 2023-11-09 10:02:29.324: 03: [03555627] --> 250 2.1.5 Recipient OK
Thu 2023-11-09 10:02:29.349: 02: [03555627] <-- DATA
Thu 2023-11-09 10:02:29.350: 03: [03555627] --> 354 Enter mail, end with 
<CRLF>.<CRLF>
Thu 2023-11-09 10:02:30.791: 01: [03555627] Message size: 5476531 bytes
Thu 2023-11-09 10:02:30.793: 06: [03555627] Passing message through AntiVirus 
(Size: 5476531)...
Thu 2023-11-09 10:02:37.193: 06: [03555627] *  Message scanned by (IKARUS: 
clean (0.08584s)) (ClamAV: infected (6.30084s)) is infected with 
Heuristics.OLE2.ContainsMacros.VBA
Thu 2023-11-09 10:02:37.193: 06: [03555627] ---- End AntiVirus results
Thu 2023-11-09 10:02:37.194: 04: [03555627] Message refused because it contains 
a virus
Thu 2023-11-09 10:02:37.194: 03: [03555627] --> 550 5.6.0 Sorry, virus detected 
within message
Thu 2023-11-09 10:02:39.903: 02: [03555627] <-- QUIT
Thu 2023-11-09 10:02:39.903: 03: [03555627] --> 221 2.0.0 See ya in cyberspace
Thu 2023-11-09 10:02:39.903: 04: [03555627] SMTP session terminated (Bytes 
in/out: 5523938/4632)
Thu 2023-11-09 10:02:39.903: 01: ----------

Kemudian saya cek log antivirus, tidak ada transaksi diatas.
Apakah ada setingan saya yang kurang Pak? namun saya cek di jendela MDaemon tab 
Queue \ Quarantine ada beberapa email yang masuk quarantine namun hanya sedikit.

Mohon advicenya Pak.

Terimakasih,
Asep. Y


--
--[mdaemon-l]----------------------------------------------------------
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.com
Berlangganan: Kirim mail ke [email protected]
Henti Langgan: Kirim mail ke [email protected]
Versi terakhir: MDaemon 23.5.0, SecurityGateway 9.5.0


Kirim email ke