[mdaemon-l] TIps n trik menganalisa Email2 di Quarantine Queue

2018-09-14 Terurut Topik Suzy Ariyani
Smangat pagi Pak Syafril...

Tanya pak.. 

Tentang Email2 yg tersangkut di Quarantine Queue.
Saat kita dpt report dari MDaemon daftar email2 yg masuk Quarantine Queue apa 
yg harus kita lakukan?
1. membagi email tsb. kepada penerima email dan mengkonfirmasi email itu email 
mereka or bukan,
2. mengecek secara manual 1per1 header2 email tsb. dan menganalisa sendiri

Jika mengerjakan no. 2 kemungkinan2nya:
1. PTR bermasalah taunya IP itu harus masuk Dynamic Blacklist or not yg saya 
tau hanya:
a. pastikan bukan IP kelompok IP Public ISP terkait
b. sy ambil domain name yg ada di header email dan coba cek lewat browser
c. .. cara apa lagi yg bs sy pakai utk pengecekan? jika domain merujuk 
ke website tertentu tp email masuk ke quarantine queue

Contoh:
X-SPScan-Result: infected
X-SPScan-VirusName: W97M/Agent
X-MDBadQueue-Reason: WARNING! infected with virus (W97M/Agent)
X-MDAV-Processed: bb.ptbmi.com, Tue, 11 Sep 2018 00:34:51 +0700
Return-path: 
Authentication-Results: bb.ptbmi.com;
spf=pass smtp.mailfrom=saa...@u-mark.net;
dkim=pass (good signature) header.d=u-mark.net header.b=MXGbj0D+eq;
dmarc=none header.from=hotelpesonnasurabaya.com (no DMARC record);
iprev=pass policy.iprev=37.58.76.20 (PTR server2.u-mark.net);
iprev=pass policy.iprev=37.58.76.20 (HELO server2.u-mark.net);
iprev=pass policy.iprev=37.58.76.20 (MAIL saa...@u-mark.net)
Received-SPF: pass (bb.ptbmi.com: domain u-mark.net
designates 37.58.76.20 as permitted sender)
receiver=bb.ptbmi.com; client-ip=37.58.76.20;
mechanism=a; envelope-from="saa...@u-mark.net";
helo=server2.u-mark.net;
Received: from server2.u-mark.net (server2.u-mark.net [37.58.76.20]) by 
bb.ptbmi.com (MDaemon PRO v18.0.2) 
with ESMTPS id 21-md5060985.msg; Tue, 11 Sep 2018 00:34:50 +0700
X-Spam-Processed: bb.ptbmi.com, Tue, 11 Sep 2018 00:34:50 +0700
(not processed: message size (106658) exceeds spam filter configured max 
size of (102400))
X-MDDKIM-Result: unapproved (bb.ptbmi.com)
X-MDSPF-Result: unapproved (bb.ptbmi.com)
X-MDRemoteIP: 37.58.76.20
X-MDHelo: server2.u-mark.net
X-MDArrival-Date: Tue, 11 Sep 2018 00:34:50 +0700
X-Rcpt-To: tiene...@ptbmi.com
X-MDRcpt-To: tiene...@ptbmi.com
X-Return-Path: saa...@u-mark.net
X-Envelope-From: saa...@u-mark.net
X-MDaemon-Deliver-To: tiene...@ptbmi.com
X-CAV-Result: clean
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=u-mark.net;
 s=default; h=Content-Type:MIME-Version:Subject:Message-ID:To:From:Date:
Sender:Reply-To:Cc:Content-Transfer-Encoding:Content-ID:Content-Description:
Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:
In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:List-Subscribe:
List-Post:List-Owner:List-Archive;
bh=Z3n9bBzPgcYldYyXgEOAEix8dJqAyhCzecYOkxK5Sx8=; 
b=MXGbj0D+eqEMgGzVSOwOct7QfT

tsTZIwMFYM1IKMDmIvtPfgJctP+8A3mF8t9opvLz8goQ4naLjVQzCcYPafdaMH8hdkb5P1o0mx6hw

RqQ7h/PCZc0YYq22XjgP/22gLdFWZ+s4KNLZxFnfCn+3daL2670cz84uq2VTV2IAIpt+EFAvk+EaK

nS3eTv3KjbyicXhmX3+zn/01b1PZIZ2gPBg5XMfqNTEVerX9riE2evLQR0ylD3afwAg3nfu6qVUuE

kyoLFXRT+ncI5SNGj/PCLKHgt87tnPegE7aVntghC/KqRcL8tMAihOsV42oAmVmkrTH181oWNLpXS
rGsbmaKw==;
Received: from [46.140.150.178] (port=56529 helo=10.11.7.25)
by server2.u-mark.net with esmtpsa (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.91)
(envelope-from )
id 1fzQ4y-0001X1-Tn
for tiene...@ptbmi.com; Mon, 10 Sep 2018 20:34:29 +0300
Date: Mon, 10 Sep 2018 17:34:28 +
From:   
To: tiene...@ptbmi.com
Message-ID: <10281753412554716416.5a4b21ba5c518...@ptbmi.com>
Subject: Invoice 5553
MIME-Version: 1.0
Content-Type: multipart/mixed; 
boundary="=_Part_33791_3996858684.11217363714285512155"
X-cPanel-MailScanner-Information: Please contact the ISP for more information
X-cPanel-MailScanner-ID: 1fzQ4y-0001X1-Tn
X-cPanel-MailScanner: Found to be clean
X-cPanel-MailScanner-SpamCheck: 
X-cPanel-MailScanner-From: saa...@u-mark.net
X-Spam-Status: No
X-AntiAbuse: This header was added to track abuse, please include it with any 
abuse report
X-AntiAbuse: Primary Hostname - server2.u-mark.net
X-AntiAbuse: Original Domain - ptbmi.com
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - u-mark.net
X-Get-Message-Sender-Via: server2.u-mark.net: authenticated_id: 
saa...@u-mark.net
X-Source: 
X-Source-Args: 
X-Source-Dir: 

--=_Part_33791_3996858684.11217363714285512155
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

=0DPlease find your invoice reference  sad...@hotelpesonnasurabaya.com.=0DT=
he attached invoice MARKED PAID is for records/tax purposes only and shows =
/records the deductions made as agreed, from the invoice total.

MTA_MC_5553_09_10_2018.doc



---

sad...@hotelpesonnasurabaya.com

=0DPhone: 285-341-6162 Ext 85#=0DFax: 285-283-1535
--=_Part_33791_3996858684.11217363714285512155
Content-Type: application/msword; 

[mdaemon-l] TIps n trik menganalisa Email2 di Quarantine Queue

2018-09-14 Terurut Topik Syafril Hermansyah
On 2018-09-14 19:10, Suzy Ariyani (s...@ptbmi.com) wrote:
> Tentang Email2 yg tersangkut di Quarantine Queue.
> Saat kita dpt report dari MDaemon daftar email2 yg masuk Quarantine
> Queue apa yg harus kita lakukan?
> 1. membagi email tsb. kepada penerima email dan mengkonfirmasi email itu
> email mereka or bukan,
> 2. mengecek secara manual 1per1 header2 email tsb. dan menganalisa sendiri

Analisis sendiri.

> Jika mengerjakan no. 2 kemungkinan2nya:
> 1. PTR bermasalah taunya IP itu harus masuk Dynamic Blacklist or not yg saya 
> tau hanya:
> a. pastikan bukan IP kelompok IP Public ISP terkait
> b. sy ambil domain name yg ada di header email dan coba cek lewat browser
> c. .. cara apa lagi yg bs sy pakai utk pengecekan? jika domain 
> merujuk ke website tertentu tp email masuk ke quarantine queue

Gunakan logika bisnis untuk justifikasi.

> Kalimat2 kunci apa di header yg bs kita buat sebagai dasar memilah2 ya pak?

Lihat header berikut ini

> Authentication-Results: bb.ptbmi.com;
> spf=pass smtp.mailfrom=saa...@u-mark.net;
> dkim=pass (good signature) header.d=u-mark.net header.b=MXGbj0D+eq;
> dmarc=none header.from=hotelpesonnasurabaya.com (no DMARC record);
> iprev=pass policy.iprev=37.58.76.20 (PTR server2.u-mark.net);
> iprev=pass policy.iprev=37.58.76.20 (HELO server2.u-mark.net);
> iprev=pass policy.iprev=37.58.76.20 (MAIL saa...@u-mark.net)

Gunakan Mail From (sender)  sebagai patokkan sumber dari mail,
bukan From .

> sad...@hotelpesonnasurabaya.com

Domain hotelpesonnasurabaya.com tidak ada hubungannya dengan domain
saa...@u-mark.net.
Kesimpulannya mail itu adalah phising spam.negara

Bisa masukkan sender domain kedalam sender blacklist.

$ whois u-mark.net

Domain Name: U-MARK.NET
Registry Domain ID: 2626096_DOMAIN_NET-VRSN
Registrar WHOIS Server: whois.name.com
Registrar URL: http://www.name.com
Updated Date: 2018-01-29T08:40:05Z
Creation Date: 1998-08-13T04:00:00Z
Registrar Registration Expiration Date: 2020-08-12T04:00:00Z
Registrar: Name.com, Inc.
Registrar IANA ID: 625
Reseller:
Domain Status: clientTransferProhibited
https://www.icann.org/epp#clientTransferProhibited
Registry Registrant ID: Not Available From Registry
Registrant Name: ibrahim salama
Registrant Organization: United Trading  Marketing Ltd. Co. (U-Mark)
Registrant Street: Riyadh - Al Malaz
Registrant City: Riyadh
Registrant State/Province: riyadh
Registrant Postal Code: 11415
Registrant Country: SA
Registrant Phone: +966.507999798
Registrant Email: ibrahim19...@gmail.com
Registry Admin ID: Not Available From Registry
Admin Name: ibrahim salama
Admin Organization: United Trading  Marketing Ltd. Co. (U-Mark)
Admin Street: Riyadh - Al Malaz
Admin City: Riyadh
Admin State/Province: riyadh
Admin Postal Code: 11415
Admin Country: SA
Admin Phone: +966.507999798
Admin Email: ibrahim19...@gmail.com
Registry Tech ID: Not Available From Registry
Tech Name: ibrahim salama
Tech Organization: United Trading  Marketing Ltd. Co. (U-Mark)
Tech Street: Riyadh - Al Malaz
Tech City: Riyadh
Tech State/Province: riyadh
Tech Postal Code: 11415
Tech Country: SA
Tech Phone: +966.507999798
Tech Email: ibrahim19...@gmail.com
Name Server: ns1.u-mark.net

$ whois hotelpesonnasurabaya.com
   Domain Name: HOTELPESONNASURABAYA.COM
   Registry Domain ID: 2062773453_DOMAIN_COM-VRSN
   Registrar WHOIS Server: whois.PublicDomainRegistry.com
   Registrar URL: http://www.publicdomainregistry.com
   Updated Date: 2017-10-02T03:24:41Z
   Creation Date: 2016-09-30T06:06:27Z
   Registry Expiry Date: 2018-09-30T06:06:27Z
   Registrar: PDR Ltd. d/b/a PublicDomainRegistry.com
   Registrar IANA ID: 303
   Registrar Abuse Contact Email: abuse-cont...@publicdomainregistry.com
   Registrar Abuse Contact Phone: +1.2013775952
   Domain Status: clientTransferProhibited
https://icann.org/epp#clientTransferProhibited
   Name Server: NS.BEONINTERMEDIA.COM
   Name Server: NS.JAGOANHOSTING.COM
   Name Server: NS.JAGOANWEB.COM
   DNSSEC: unsigned
   URL of the ICANN Whois Inaccuracy Complaint Form:
https://www.icann.org/wicf/
>>> Last update of whois database: 2018-09-14T13:12:36Z <<<






-- 
syafril
---
Syafril Hermansyah
MDaemon-L Moderators, MDaemon 18.5.0-64 Beta C
Harap tidak cc: atau kirim ke private mail untuk masalah MDaemon.

Instruction does much, but encouragement everything.
--- Johann Wolfgang von Goethe


-- 
--[mdaemon-l]--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com
Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com
Versi terakhir MD 18.0.2, SG 5.5.0




[mdaemon-l] New Case.. Attachment Email hilang 1 setelah 24/08/2018

2018-09-14 Terurut Topik Suzy Ariyani


-Original Message- 
>From: Syafril Hermansyah 
>Sent: Friday, September 14, 2018 3:03 PM 
>To: mdaemon-l@dutaint.com 
>Subject: [mdaemon-l] New Case.. Attachment Email hilang 1 setelah 24/08/2018 
>
>On 14/09/18 13:58, Suzy Ariyani (s...@ptbmi.com) wrote:
>
>> Sebelum tgl 24/08/2018 attachment normal 2file .txt
>> SETELAH tgl 24/08/2018 attachment HANYA 1file (Pemberitahuan LC)
>> sedangkan file LC selalu HILANG dari email exim.ju...@ptbmi.com
>
>Akun lain yang terima pemberitahuan itu apakah bisa lihat lampirannya?


Tampilan ini di akun exim.ju...@ptbmi.com dan acc.sha...@ptbmi.com sama spt ini
attachmentnya yg setelah tgl 24/08 hilang 1file

>> Sedangkan HEADER Email SETELAH 24/08/2018 (sy beri contoh tgl 13/09/2018) 
>> sbb:
>
>> Content-type: multipart/mixed;
>> Boundary="0__=C7BB0994DFBA1DA68f9e8a93df938690918cC7BB0994DFBA1DA6"
>
>Harusnya ada lampirannya.

Ya ada lampirannya tapi harusnya 2file:
1. file pemberitahuan pembuatan L/C
2. file L/C itu sendiri

Nah yg hilang itu file L/C yg dibutuhkan oleh Exim pak.


>> Bisakah kita menengetahui attachment tsb. hilang dari sisi kita krn apa
>> ya pak?
>
>Harus langsung lihat ke email client, khususnya ke AVG untuk periksa
>apakah ada file terkarantina.
>
>Coba disable dulu AVG nya atau setidaknya Email Protection.
>  
>https://support.avg.com/SupportArticleView?l=en=How-to-disable-AVG=home
>
OK sudah sy matikan Email Protection-nya di computer exim.ju...@ptbmi.com 
kita lihat hasilnya

Suzy

[mdaemon-l] Retry queuee & holding queue menumpuk

2018-09-14 Terurut Topik Syafril Hermansyah
On 14/09/18 15:03, Agus Tarpindo (agus.tarpi...@os-selnajaya.com) wrote:
>> setelah mail traffic normal dan melakukan approve terhadap message yang
>> ada di holding queue, lakukan reset antispam content filtering sbb:
>>
>> - stop MDaemon service.
>> - rename folder \\mdaemon\spamassassin menjadi
>> \\mdaemon\spamassassin.old.
>> - Refresh install MDaemon dengan versi yang sama.
>>
> Ada solusi lain kah Pak, yang tanpa refresh install ?


Refresh install hanya untuk mengembalikan setting antispam content
filtering ke standar instalasi.


> Karena saat inni saya sudah bisa terima email dari klien.
> Bahkan email yang ada di holding queue sudah diterima user saya Pak, sebelum 
> saya non aktifkan spam filter


Terserah saja kalau mau setting antispamnya tidak ingin dikembalikan ke
standar saat ini.







-- 
syafril
---
Syafril Hermansyah
MDaemon-L Moderators, running MDaemon 18.5.0-64 bit Beta C
Harap tidak cc: atau kirim ke private mail untuk masalah MDaemon.

Bodily exercise, when compulsory, does no harm to the body; but
knowledge which is acquired under compulsion obtains no hold on the mind.
--- Plato, The Republic


-- 
--[mdaemon-l]--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com
Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com
Versi terakhir MD 18.0.2, SG 5.5.0




[mdaemon-l] Retry queuee & holding queue menumpuk

2018-09-14 Terurut Topik Agus Tarpindo
YTH Pak Syafril

> Antispam content filteringnya bermasalah.
> Umumnya karena isian blacklist/whitelist yang formatnya tidak benar atau
> bayesian token database rusak atau overload.
> 
> Non aktifkan dulu AntiSpam Contenet filtering setelah itu restart MDaemon
> service dari windows service control panel.
> 
> http://mdaemon.dutaint.co.id/mdaemon/18.0/index.html?sf_spam_filterin
> g.htm
> 
> [ ] Enable Spam Filter
>

Baik Pak saya coba dulu

> setelah mail traffic normal dan melakukan approve terhadap message yang
> ada di holding queue, lakukan reset antispam content filtering sbb:
> 
> - stop MDaemon service.
> - rename folder \\mdaemon\spamassassin menjadi
> \\mdaemon\spamassassin.old.
> - Refresh install MDaemon dengan versi yang sama.
>

Ada solusi lain kah Pak, yang tanpa refresh install ?

Karena saat inni saya sudah bisa terima email dari klien.
Bahkan email yang ada di holding queue sudah diterima user saya Pak, sebelum 
saya non aktifkan spam filter

Mohon pencerahan kembali Pak, terima kasih sebelumnya

Best regards, 

Agus 



--
--[mdaemon-l]--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com
Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com
Versi terakhir MD 18.0.2, SG 5.5.0




[mdaemon-l] New Case.. Attachment Email hilang 1 setelah 24/08/2018

2018-09-14 Terurut Topik Syafril Hermansyah
On 14/09/18 13:58, Suzy Ariyani (s...@ptbmi.com) wrote:

> Sebelum tgl 24/08/2018 attachment normal 2file .txt
> SETELAH tgl 24/08/2018 attachment HANYA 1file (Pemberitahuan LC)
> sedangkan file LC selalu HILANG dari email exim.ju...@ptbmi.com


Akun lain yang terima pemberitahuan itu apakah bisa lihat lampirannya?

> Sedangkan HEADER Email SETELAH 24/08/2018 (sy beri contoh tgl 13/09/2018) sbb:

> Content-type: multipart/mixed;
>     Boundary="0__=C7BB0994DFBA1DA68f9e8a93df938690918cC7BB0994DFBA1DA6"

Harusnya ada lampirannya.

> Bisakah kita menengetahui attachment tsb. hilang dari sisi kita krn apa
> ya pak?


Harus langsung lihat ke email client, khususnya ke AVG untuk periksa
apakah ada file terkarantina.

Coba disable dulu AVG nya atau setidaknya Email Protection.
  
https://support.avg.com/SupportArticleView?l=en=How-to-disable-AVG=home

-- 
syafril
---
Syafril Hermansyah
MDaemon-L Moderators, running MDaemon 18.5.0-64 bit Beta C
Harap tidak cc: atau kirim ke private mail untuk masalah MDaemon.

Competition is the keen cutting edge of business, always shaving away at
costs.
--- Henry Ford


-- 
--[mdaemon-l]--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com
Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com
Versi terakhir MD 18.0.2, SG 5.5.0




[mdaemon-l] New Case.. Attachment Email hilang 1 setelah 24/08/2018

2018-09-14 Terurut Topik Suzy Ariyani
Semangat pagi Pak Syafril..

Mau merepotkan kembali..

Dept Exim biasa menerima email
dari imo_ecots_em...@hsbc.co.id
dg subject berawalan: NEW DC ADVICE Our Ref: L/C .
terdiri dari 2 Attachment file .TXT (1 Pemberitahuan LC, 1 LC)

Sebelum tgl 24/08/2018 attachment normal 2file .txt
SETELAH tgl 24/08/2018 attachment HANYA 1file (Pemberitahuan LC)
sedangkan file LC selalu HILANG dari email exim.ju...@ptbmi.com

Adapun header email SEBELUM 24/08/2018 sbb:
X-MDAV-Result: clean
X-MDAV-Processed: bb.ptbmi.com, Thu, 23 Aug 2018 14:42:51 +0700
X-Spam-Processed: bb.ptbmi.com, Thu, 23 Aug 2018 14:42:51 +0700
Return-path: 
X-Spam-Level: 
X-Spam-Status: No, score=-100.0 required=5.0 tests=SHORTCIRCUIT,
USER_IN_WHITELIST shortcircuit=ham autolearn=disabled version=3.4.1
X-Spam-Report: 
* -0.0 SHORTCIRCUIT Not all rules were run, due to a shortcircuited rule
* -100 USER_IN_WHITELIST From: address is in the whitelist
X-Spam-Checker-Version: SpamAssassin 3.4.1 (2015-04-28)
Received: from mail.ptbmi.com [(202.148.6.47)] by bb.ptbmi.com (MDaemon PRO 
v18.0.2) 
with MultiPOP id md50002718548.msg; Thu, 23 Aug 2018 14:42:48 +0700
X-MDRemoteIP: 202.148.6.47
X-MDHelo: 
X-MDArrival-Date: Thu, 23 Aug 2018 14:42:48 +0700
X-MDMultiPOP: exim.ju...@ptbmi.com@mail.ptbmi.com
X-Rcpt-To: exim.ju...@ptbmi.com
X-MDRcpt-To: exim.ju...@ptbmi.com
X-Return-Path: programreleaseteamaphit...@hsbc.com.hk
X-Envelope-From: programreleaseteamaphit...@hsbc.com.hk
X-MDaemon-Deliver-To: exim.ju...@ptbmi.com
Delivered-To: exim.ju...@ptbmi.com
Received: from cpanel1.dnetsurabaya.id
by cpanel1.dnetsurabaya.id with LMTP id OI39D4NkflsN7iMA/YGXhw
for ; Thu, 23 Aug 2018 14:38:43 +0700
Envelope-to: exim.ju...@ptbmi.com
Delivery-date: Thu, 23 Aug 2018 14:38:43 +0700
Received: from mxin3.dnetsurabaya.id ([202.148.11.228]:53028)
by cpanel1.dnetsurabaya.id with esmtps 
(TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.91)
(envelope-from )
id 1fskCQ-00A6tV-6n
for exim.ju...@ptbmi.com; Thu, 23 Aug 2018 14:38:43 +0700
Received-SPF: Pass (sender SPF authorized) identity=mailfrom; 
client-ip=203.112.90.14; helo=hsbc.com.hk; 
envelope-from=programreleaseteamaphit...@hsbc.com.hk; 
receiver=exim.ju...@ptbmi.com 
Received: from hsbc.com.hk (unknown [203.112.90.14])
(using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
(No client certificate requested)
by mxin3.dnetsurabaya.id (Postfix) with ESMTPS id 034C724B03
for ; Thu, 23 Aug 2018 14:38:31 +0700 (WIB)
X-NAI-Header: Modified by McAfee Email Gateway (5500)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=hsbc.com; i=*@hsbc.com; s=20160807hsbc;
t=1535009905; h=From:To:Subject:Date:Message-Id:
 Reply-To:MIME-Version:X-Mailer:Content-Type;
bh=1+fRCKOWVJyJ9AgCIPPDNDWypZxKnCvPuAX160
UE5cc=; b=aVbf/YYBJlySpObIKRF3mdRsUZKBJ4TJkFohhX0M
hIhTV7v8vY6E/inUCExzbnUZBlTCmiwaEkoYjLqQlPnZQIf3R7
CGOyIUtvqZkhVxoLaq3vP7e2H4ASbFyddrCZIkxl7Q7Z9+WVSl
stwBEDfzpiFnI3CQoCUjz+tMWXMSNwc=
Received: from apac-smtp-01.hk.hsbc (hk000tko11989.hk.hsbc [10.208.56.112]) by 
HKIMP06SRV01.hsbc.com.hk with smtp
 id 0ffe_b176_57a1e946_c43b_43ec_a46a_8e896e7d88d0;
Thu, 23 Aug 2018 15:38:24 +0800
From: imo_ecots_em...@hsbc.co.id
Subject: NEW DC ADVICE Our Ref: L/C-102813-00 Counterparty: NORDIC SEAFOOD A/S
Auto-Submitted: auto-generated
Sender: programreleaseteamaphit...@hsbc.com.hk
To: exim.ju...@ptbmi.com
Message-ID: 

Date: Thu, 23 Aug 2018 15:38:23 +0800
MIME-Version: 1.0
Content-type: multipart/mixed;
Boundary="0__=C7BB0861DFBA71198f9e8a93df938690918cC7BB0861DFBA7119"
X-CFilter-Loop: Forward
X-Ham-Report: Spam detection software, running on the system 
"cpanel1.dnetsurabaya.id",
has NOT identified this incoming email as spam.  The original
message has been attached to this so you can view it or label
similar future email.  If you have any questions, see
root\@localhost for details.

Content preview:  From : PT BANK HSBC INDONESIA As per previous arrangement,
the attachment below contains a Trade Services transaction advice for your
perusal. Any Documentary Credit or Amendment attached herein is fo

Content analysis details:   (-2.9 points, 5.0 required)

  pts rule name  description
 -- --
-5.0 RCVD_IN_DNSWL_HI   RBL: Sender listed at http://www.dnswl.org/, high
 trust
 [203.112.90.14 listed in list.dnswl.org]
  2.0 DEAR_SOMETHING BODY: Contains 'Dear (something)'
-0.0 SPF_PASS   SPF: sender matches SPF record
  0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail
 domains are different
-0.0 SPF_HELO_PASS  SPF: HELO matches SPF record
-1.9 BAYES_00   BODY: Bayes spam probability is 0 to 1%
 [score: 0.]
  0.0 HTML_MESSAGE   BODY: HTML included in message

[mdaemon-l] Retry queuee & holding queue menumpuk

2018-09-14 Terurut Topik Syafril Hermansyah
On 14/09/18 13:03, Agus Tarpindo (agus.tarpi...@os-selnajaya.com) wrote:
> MD saya ada masalah penumpukan email pada retry queue dan holding queue Pak.
> 
> Dan akhirnya user mendapatkan email “message delayed” (mohon cek
> attachment).
> 
> Saya juga mendapatkan email informasi daftar pengiriman yang masuk dalam
> holding queue (mohon cek attachment).
> 
> Mohon informasi ini penyebabnya apa ya Pak?


Antispam content filteringnya bermasalah.
Umumnya karena isian blacklist/whitelist yang formatnya tidak benar atau
bayesian token database rusak atau overload.

Non aktifkan dulu AntiSpam Contenet filtering setelah itu restart
MDaemon service dari windows service control panel.

http://mdaemon.dutaint.co.id/mdaemon/18.0/index.html?sf_spam_filtering.htm

[ ] Enable Spam Filter

setelah mail traffic normal dan melakukan approve terhadap message yang
ada di holding queue, lakukan reset antispam content filtering sbb:

- stop MDaemon service.
- rename folder \\mdaemon\spamassassin menjadi \\mdaemon\spamassassin.old.
- Refresh install MDaemon dengan versi yang sama.





-- 
syafril
---
Syafril Hermansyah
MDaemon-L Moderators, running MDaemon 18.5.0-64 bit Beta C
Harap tidak cc: atau kirim ke private mail untuk masalah MDaemon.

The life so short, the craft so long to learn.
--- Hippocrates













-- 
--[mdaemon-l]--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com
Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com
Versi terakhir MD 18.0.2, SG 5.5.0




[mdaemon-l] Test Kirim Email Ke sesama server & luar server Delayed

2018-09-14 Terurut Topik Tatang Saeful Rohman
Dear Pak Syafril Ysh,
 
Selamat Pagi, mohon pencerahannya terkait log dibawah ini :
 
despite one or more unsuccessful attempts to do so.
 
Delivery attempts will continue for up to 24 hours (1 days).  If delivery
fails after that time you will be separately informed.
 
You do not need to resend the message!
 
The original message headers follow at the end of this report.  For
information on DSN messages see http://www.altn.com/dsn/.
 
Please quote the Queue-ID, Session-ID, and Message-ID found above in any
inquiries regarding this message.
 

=  Session Transcript  =

 
  [456956] Session 456956; child 0005
  [456956] Parsing message 
  [456956] *  From: tatang.sae...@os-selnajaya.com
  [456956] *  To: t.saefulrohma...@gmail.com
  [456956] *  Subject: Test Kirim Email
  [456956] *  Size (bytes): 74590
  [456956] *  Message-ID: <044201d44bd7$ba576ad0$2f064070$@os-selnajaya.com>
  [456956] *  This message is 17 minutes old; it has 0 minutes left in this
queue
  [456956] Remote queue lifetime exceeded; message placed in retry queue
 

=End Transcript=

 
 
Best regards, 

Tatang Saeful Rohman
 

-- 
--[mdaemon-l]--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com
Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com
Versi terakhir MD 18.0.2, SG 5.5.0