Saya ada membuat CF sbb :
RuleName=DEL VIRUS
Enable=No
ThisRuleCondition=All
ProcessQueue=BOTH
Condition01=X-MDAV-Result:|contains|AND|Infected|
Condition02=X-MDAV-Infected:|does not contain|OR|Password|Not|
Action01=copy to|"ivanleona...@pttdp.com"
Action02=delete|

tapi kenapa ada email bervirus tidak kena ke CF ini ya ?

ini source mailnya :

X-MDAV-Result: infected
X-MDAV-Infected: Trojan-Dropper.VBS.Agent.gd
X-MDAV-Processed: webmail.pttdp.com, Thu, 12 May 2016 11:52:51 +0700
Return-path: <jon...@jonsan.com>
Received: from pop.cbn.net.id ([202.158.81.40])
    by pttdp.com ([117.102.88.187])
    (MDaemon PRO v15.5.2)
    with DomainPOP id md50001166401.msg for <murni.iskan...@pttdp.com>;
    Thu, 12 May 2016 11:52:50 +0700
X-MDRemoteIP: 202.158.81.40
X-MDHelo:
X-MDArrival-Date: Thu, 12 May 2016 11:52:50 +0700
X-Return-Path: jon...@jonsan.com
X-Envelope-From: jon...@jonsan.com
X-MDaemon-Deliver-To: murni.iskan...@pttdp.com
Envelope-to: murni.iskan...@pttdp.com
--
--MDaemon-L----------------------------------------------------------
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server.

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Henti Langgan: Kirim mail ke MDaemon-L-unsubscribe [at] dutaint.com
Berlangganan: kirim mail ke MDaemon-L-subscribe [at] dutaint.com
Versi terakhir MD 16.0.2, SP 5.0, BES 2.0.2, OC 3.5.2, SG 3.0.3



Kirim email ke