[MDaemon-L] beberapa pdf tidak bisa masuk ke MD10

2008-12-10 Terurut Topik Henry Kuswanto - Office

pak Syafril,


Ini bukan masalah content filter krn rejectionnya dilakukan dilevel smtp.
Coba cari log transaksi lengkapnya di smtp-in log.


Ini lognya, ternyata dinyatakan spam padahal hanya jadwal acara event. 
Setting OP semua default install, apa terlalu galak ? Disana score spamnya 
2.5.


Terima kasih
Henry

Fri 2008-12-05 14:43:24: --
Fri 2008-12-05 14:43:25: [6838:6] Session 6838; child 6; thread 3868
Fri 2008-12-05 14:43:22: [6838:6] Accepting SMTP connection from 
[124.108.123.198:22704]
Fri 2008-12-05 14:43:22: [6838:6] Performing PTR lookup 
(198.123.108.124.IN-ADDR.ARPA)
Fri 2008-12-05 14:43:22: [6838:6] *  D=198.123.108.124.IN-ADDR.ARPA TTL=(20) 
PTR=[smtp127.mail.sg1.yahoo.com]

Fri 2008-12-05 14:43:22: [6838:6] *  Gathering A records...
Fri 2008-12-05 14:43:22: [6838:6] *  D=smtp127.mail.sg1.yahoo.com TTL=(30) 
A=[124.108.123.198]

Fri 2008-12-05 14:43:22: [6838:6]  End PTR results
Fri 2008-12-05 14:43:22: [6838:6] -- 220-mail.dentsu.co.id ESMTP MDaemon 
10.0.2; Fri, 05 Dec 2008 14:43:22 +0700
Fri 2008-12-05 14:43:22: [6838:6] -- 
220-=
Fri 2008-12-05 14:43:22: [6838:6] -- 220-  PLEASE BE GOOD WILL YOU, NO 
SPAM, NO RELAY, THANKS
Fri 2008-12-05 14:43:22: [6838:6] -- 220 
=

Fri 2008-12-05 14:43:22: [6838:6] -- HELO smtp127.mail.sg1.yahoo.com
Fri 2008-12-05 14:43:22: [6838:6] Performing IP lookup 
(smtp127.mail.sg1.yahoo.com)
Fri 2008-12-05 14:43:22: [6838:6] *  D=smtp127.mail.sg1.yahoo.com TTL=(30) 
A=[124.108.123.198]

Fri 2008-12-05 14:43:22: [6838:6]  End IP lookup results
Fri 2008-12-05 14:43:22: [6838:6] -- 250 mail.dentsu.co.id Hello 
smtp127.mail.sg1.yahoo.com, pleased to meet you

Fri 2008-12-05 14:43:22: [6838:6] -- MAIL FROM:[EMAIL PROTECTED]
Fri 2008-12-05 14:43:22: [6838:6] Performing IP lookup (yahoo.com.sg)
Fri 2008-12-05 14:43:22: [6838:6] *  D=yahoo.com.sg TTL=(5) 
A=[206.190.60.37]
Fri 2008-12-05 14:43:22: [6838:6] *  D=yahoo.com.sg TTL=(5) 
A=[68.180.206.184]
Fri 2008-12-05 14:43:22: [6838:6] *  P=010 S=000 D=yahoo.com.sg TTL=(94) 
MX=[mx1.mail.sg1.yahoo.com]
Fri 2008-12-05 14:43:22: [6838:6] *  D=yahoo.com.sg TTL=(5) 
A=[206.190.60.37]

Fri 2008-12-05 14:43:22: [6838:6]  End IP lookup results
Fri 2008-12-05 14:43:22: [6838:6] -- 250 [EMAIL PROTECTED], Sender ok
Fri 2008-12-05 14:43:22: [6838:6] -- RCPT TO:[EMAIL PROTECTED]
Fri 2008-12-05 14:43:22: [6838:6] Performing DNS-BL lookup 
(124.108.123.198 - connecting IP)

Fri 2008-12-05 14:43:22: [6838:6] *  zen.spamhaus.org - passed
Fri 2008-12-05 14:43:22: [6838:6]  End DNS-BL results
Fri 2008-12-05 14:43:22: [6838:6] -- 250 [EMAIL PROTECTED], Recipient ok
Fri 2008-12-05 14:43:22: [6838:6] -- DATA
Fri 2008-12-05 14:43:22: [6838:6] Creating temp file (SMTP): 
d:\mdaemon\queues\temp\32\md5000347.tmp

Fri 2008-12-05 14:43:22: [6838:6] -- 354 Enter mail, end with CRLF.CRLF
Fri 2008-12-05 14:43:24: [6838:6] Message size: 154610 bytes
Fri 2008-12-05 14:43:24: [6838:6] Passing message through AntiVirus (Size: 
154610)...

Fri 2008-12-05 14:43:24: [6838:6] *  Message is clean (no viruses found)
Fri 2008-12-05 14:43:24: [6838:6]  End AntiVirus results
Fri 2008-12-05 14:43:25: [6838:6] Passing message through Outbreak 
Protection...
Fri 2008-12-05 14:43:25: [6838:6] *  Message-ID: 
[EMAIL PROTECTED]
Fri 2008-12-05 14:43:25: [6838:6] *  Reference-ID: 
str=0001.0A150201.4938DCA1.0053,ss=4,vtr=str,vl=0,fgs=8

Fri 2008-12-05 14:43:25: [6838:6] *  Virus result: 0 - Clean
Fri 2008-12-05 14:43:25: [6838:6] *  Spam result: 4 - Spam (confirmed)
Fri 2008-12-05 14:43:25: [6838:6] *  IWF result: 0 - Clean
Fri 2008-12-05 14:43:25: [6838:6]  End Outbreak Protection results
Fri 2008-12-05 14:43:25: [6838:6] -- 554 Sorry, message looks like spam or 
phish to me (OP)
Fri 2008-12-05 14:43:25: [6838:6] SMTP session terminated (Bytes in/out: 
154714/497)

Fri 2008-12-05 14:43:25: --




--
--[MDaemon-L]
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server.
Mohon tidak posting dengan format HTML atau Rich Text, 
pastikan selalu menggunakan Format Plain-text.


Arsip  : http://mdaemon-l.dutaint.com
Henti Langgan  : Kirim mail ke MDaemon-L-unsubscribe [at] dutaint.com
Berlangganan   : kirim mail ke MDaemon-L-subscribe [at] dutaint.com
Versi Terakhir : MD 10.0.2, SP 4.0.2, OC 2.2.1, SG 1.0.5, PP 1.1.0



[MDaemon-L] beberapa pdf tidak bisa masuk ke MD10

2008-12-10 Terurut Topik Syafril Hermansyah
On 10/12/08 16:40 +07:00 Henry Kuswanto - Office wrote:
  Ini bukan masalah content filter krn rejectionnya dilakukan dilevel smtp.
  Coba cari log transaksi lengkapnya di smtp-in log.
 
 Ini lognya, ternyata dinyatakan spam padahal hanya jadwal acara event. 
 Setting OP semua default install, apa terlalu galak ? Disana score spamnya 
 2.5.

Coba di setting account profile [EMAIL PROTECTED] yg ada di Outlook
Express isian Reply-To: address dikosongkan, lalu test lagi.

-- 
syafril
---
Syafril Hermansyah
MDaemon-L Moderators, running MDaemon 10.0.2
Harap tidak cc: atau kirim ke private mail untuk masalah MDaemon.

-- 
--[MDaemon-L]
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server.
Mohon tidak posting dengan format HTML atau Rich Text, 
pastikan selalu menggunakan Format Plain-text.

Arsip  : http://mdaemon-l.dutaint.com
Henti Langgan  : Kirim mail ke MDaemon-L-unsubscribe [at] dutaint.com
Berlangganan   : kirim mail ke MDaemon-L-subscribe [at] dutaint.com
Versi Terakhir : MD 10.0.2, SP 4.0.2, OC 2.2.1, SG 1.0.5, PP 1.1.0



[MDaemon-L] beberapa pdf tidak bisa masuk ke MD10

2008-12-10 Terurut Topik Henry Kuswanto - Office

pak Syafril,

Coba di setting account profile [EMAIL PROTECTED] yg ada di Outlook
Express isian Reply-To: address dikosongkan, lalu test lagi.


Sudah pak dan tetap di tolak OP, terlampir bounced emailnya. Terlampir juga 
2 email yg di tolak senabis, 1 oleh spam filter dan 1 lagi oleh OP.


Terima kasih
Henry

-- email 1 tanpa reply-to --
From: [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Wednesday, December 10, 2008 4:57 PM
Subject: failure notice


Hi. This is the qmail-send program at yahoo.com.
I'm afraid I wasn't able to deliver your message to the following 
addresses.

This is a permanent error; I've given up. Sorry it didn't work out.

[EMAIL PROTECTED]:
203.128.68.100 failed after I sent the message.
Remote host said: 554 Transaction failed

[EMAIL PROTECTED]:
203.128.68.100 failed after I sent the message.
Remote host said: 554 Transaction failed

--- Below this line is a copy of the message.

Return-Path: [EMAIL PROTECTED]
Received: (qmail 24797 invoked from network); 10 Dec 2008 09:56:53 -
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
 s=s1024; d=yahoo.com.sg;

h=Received:X-YMail-OSG:X-Yahoo-Newman-Property:Message-ID:From:To:Subject:Date:MIME-Version:Content-Type:X-Priority:X-MSMail-Priority:X-Mailer:X-MimeOLE;

b=rhvvdC2hinfZRHSrML66wO+bc85dpKR4ILm2OItHBv+WZ3dr5UFjLH2gePMSpymy7C/4x1Xavp90KXArieeKzHkWU4/rw4rWpqB9+H3eyOTbxSqvEhX2ec0b+ctOMu2VaxyQwF5JwV4H4dfnP31msfEtkrobQJal/LQtw2LzTAo= 
;

Received: from unknown (HELO lhknote) ([EMAIL PROTECTED] with login)
 by smtp120.mail.sg1.yahoo.com with SMTP; 10 Dec 2008 09:56:52 -
X-YMail-OSG: 
6G2hmQoVM1lqFgPVE2VzV8CYuW3lUx0DOWOp_jwDhymKMzVPhFLs4fM.CtX6aSjdTv5DWCqgIVOqdpVBV7ipYg4LI96OTEoaNdW1dy0Eah3I7GMRAK4YH2ukoHuU9VkQR6J8R5nQqGOdUwkuFwzJNGjkAqTiOdFDuKLjajdI383MzPOwN6ZN2Z1AYn74

X-Yahoo-Newman-Property: ymail-3
Message-ID: [EMAIL PROTECTED]
From: Henry Kuswanto [EMAIL PROTECTED]
To: [EMAIL PROTECTED],
[EMAIL PROTECTED]
Subject: Fw: [Reuni83_13 Dec 08] Susunan Acara
Date: Wed, 10 Dec 2008 16:58:34 +0700
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary==_NextPart_000_0064_01C95AE8.89E5A190
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2900.5512
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.5579

This is a multi-part message in MIME format.

--=_NextPart_000_0064_01C95AE8.89E5A190
Content-Type: multipart/alternative;
boundary==_NextPart_001_0065_01C95AE8.89E5A190

--=_NextPart_001_0065_01C95AE8.89E5A190
Content-Type: text/plain;
charset=UTF-8
Content-Transfer-Encoding: quoted-printable

 Original Message -=20
From: indra Gunadharma=20
To: [EMAIL PROTECTED] ; [EMAIL PROTECTED] ; [EMAIL PROTECTED]
Sent: Friday, December 05, 2008 1:46 PM
Subject: Trs: [Reuni83_13 Dec 08] Susunan Acara


[dihapus]


--=_NextPart_000_0064_01C95AE8.89E5A190
Content-Type: application/pdf;
name=Jadwal Acara Reuni Perak ITB 83.pdf
Content-Transfer-Encoding: base64
Content-Disposition: attachment;
filename=Jadwal Acara Reuni Perak ITB 83.pdf


-- email 2 di tolak spam filter --
Wed 2008-12-10 06:56:27: --
Wed 2008-12-10 06:56:48: [2976:1] Session 2976; child 1; thread 3400
Wed 2008-12-10 06:56:40: [2976:1] Accepting SMTP connection from 
[202.169.56.139:17354]
Wed 2008-12-10 06:56:40: [2976:1] Performing PTR lookup 
(139.56.169.202.IN-ADDR.ARPA)
Wed 2008-12-10 06:56:40: [2976:1] *  Error: *  Name server reports domain 
name unknown

Wed 2008-12-10 06:56:40: [2976:1] *  No PTR records found
Wed 2008-12-10 06:56:40: [2976:1]  End PTR results
Wed 2008-12-10 06:56:40: [2976:1] -- 220-mail.dentsu.co.id ESMTP MDaemon 
10.0.2; Wed, 10 Dec 2008 06:56:40 +0700
Wed 2008-12-10 06:56:40: [2976:1] -- 
220-=
Wed 2008-12-10 06:56:40: [2976:1] -- 220-  PLEASE BE GOOD WILL YOU, NO 
SPAM, NO RELAY, THANKS
Wed 2008-12-10 06:56:40: [2976:1] -- 220 
=

Wed 2008-12-10 06:56:40: [2976:1] -- EHLO c150.mufg.co.id
Wed 2008-12-10 06:56:40: [2976:1] Performing IP lookup (c150.mufg.co.id)
Wed 2008-12-10 06:56:40: [2976:1] *  Error: *  Name server reports domain 
name unknown

Wed 2008-12-10 06:56:40: [2976:1]  End IP lookup results
Wed 2008-12-10 06:56:40: [2976:1] -- 250-mail.dentsu.co.id Hello 
c150.mufg.co.id, pleased to meet you

Wed 2008-12-10 06:56:40: [2976:1] -- 250-ETRN
Wed 2008-12-10 06:56:40: [2976:1] -- 250-AUTH=LOGIN
Wed 2008-12-10 06:56:40: [2976:1] -- 250-AUTH LOGIN CRAM-MD5
Wed 2008-12-10 06:56:40: [2976:1] -- 250-8BITMIME
Wed 2008-12-10 06:56:40: [2976:1] -- 250 SIZE 1024
Wed 2008-12-10 06:56:40: [2976:1] -- MAIL 
FROM:[EMAIL PROTECTED] SIZE=27223

Wed 2008-12-10 06:56:40: [2976:1] Performing IP lookup (mufg.co.id)
Wed 2008-12-10 06:56:40: [2976:1] *  P=010 S=000 D=mufg.co.id TTL=(60) 
MX=[jktmail1.biz.net.id]

Wed 2008-12-10 06:56:40: [2976:1]  End IP lookup results
Wed 2008-12-10 06:56:40: [2976:1] -- 250 
[EMAIL PROTECTED], Sender ok

Wed 2008-12-10 06:56:40: [2976:1] -- RCPT 

[MDaemon-L] beberapa pdf tidak bisa masuk ke MD10

2008-12-10 Terurut Topik Syafril Hermansyah
Henry Kuswanto - Office said the following on 10/12/08 17:18 +07:00:

 Coba di setting account profile [EMAIL PROTECTED] yg ada di Outlook
 Express isian Reply-To: address dikosongkan, lalu test lagi.
 
 Sudah pak dan tetap di tolak OP, terlampir bounced emailnya. Terlampir juga 
 2 email yg di tolak senabis, 1 oleh spam filter dan 1 lagi oleh OP.

Lakukan sbb :
- whitelist [EMAIL PROTECTED] atau [EMAIL PROTECTED] kirim mail dulu
ke [EMAIL PROTECTED] [EMAIL PROTECTED]
- [EMAIL PROTECTED] kirim ulang mail yg tadi direject.
- message yg diterima di forward as attachment ke [EMAIL PROTECTED]


 Wed 2008-12-10 06:56:43: [2976:1] Passing message through Spam Filter (Size: 
 27266)...
 Wed 2008-12-10 06:56:43: [2976:1] *  2.2 DEAR_SOMETHING BODY: Contains 'Dear 
 (something)'
 Wed 2008-12-10 06:56:43: [2976:1] *  0.0 HTML_MESSAGE BODY: HTML included in 
 message
 Wed 2008-12-10 06:56:43: [2976:1] *  1.7 MIME_HTML_ONLY BODY: Message only 
 has text/html MIME parts
 Wed 2008-12-10 06:56:43: [2976:1] *  1.1 HTML_MIME_NO_HTML_TAG HTML-only 
 message, but there is no HTML tag
 Wed 2008-12-10 06:56:43: [2976:1] *  1.5 MSGID_FROM_MTA_HEADER Message-Id 
 was added by a relay
 Wed 2008-12-10 06:56:43: [2976:1] *  0.1 RDNS_NONE Delivered to trusted 
 network by a host with no rDNS
 Wed 2008-12-10 06:56:43: [2976:1]  End SpamAssassin results

Yg ini karena sender kirim mail pakai format HTML murni tanpa plain-text
part sama sekali.
Di whitelist sajalah.

 -- email 3 di tolak OP --

 Wed 2008-12-10 14:16:56: [2432:1] -- 250 [EMAIL PROTECTED], Sender 
 ok
 Wed 2008-12-10 14:16:57: [2432:1] -- RCPT TO:[EMAIL PROTECTED]
 Wed 2008-12-10 14:16:57: [2432:1] Performing DNS-BL lookup (98.136.44.50 - 
 connecting IP)
 Wed 2008-12-10 14:16:57: [2432:1] *  zen.spamhaus.org - passed
 Wed 2008-12-10 14:16:57: [2432:1]  End DNS-BL results
 Wed 2008-12-10 14:16:57: [2432:1] -- 250 [EMAIL PROTECTED], Recipient ok

 Wed 2008-12-10 14:17:16: [2432:1] -- 554 Sorry, message looks like spam or 
 phish to me (OP)

Kasusnya sama dg nomer 1 diatas.


-- 
syafril
---
Syafril Hermansyah
MDaemon-L Moderators, running MDaemon 10.0.2
Harap tidak cc: atau kirim ke private mail untuk masalah MDaemon.

-- 
--[MDaemon-L]
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server.
Mohon tidak posting dengan format HTML atau Rich Text, 
pastikan selalu menggunakan Format Plain-text.

Arsip  : http://mdaemon-l.dutaint.com
Henti Langgan  : Kirim mail ke MDaemon-L-unsubscribe [at] dutaint.com
Berlangganan   : kirim mail ke MDaemon-L-subscribe [at] dutaint.com
Versi Terakhir : MD 10.0.2, SP 4.0.2, OC 2.2.1, SG 1.0.5, PP 1.1.0