Selamat Siang Pak Syafril, Saya mau sedikit share, akhir akhir ini beberapa user dikantor saya sering mendapatkan email, kalau menurut saya email ini bukan email sebenarnya yang dikirim oleh koresponden kami. kemungkinan fake mail. berikut contoh log dari email mereka
Thu 2016-06-09 05:59:54.942: 01: ---------- Thu 2016-06-09 06:04:54.705: 05: [220859] Accepting SMTP connection from 103.253.112.239:366 to 192.168.1.254:59499 Thu 2016-06-09 06:04:54.705: 03: [220859] --> 220 pttms.co.id ESMTP MDaemon 16.0.1; Thu, 09 Jun 2016 06:04:54 +0700 Thu 2016-06-09 06:04:54.708: 02: [220859] <-- EHLO dip33.dutaint.com Thu 2016-06-09 06:04:54.708: 03: [220859] --> 250-pttms.co.id Hello dip33.dutaint.com [103.253.112.239], pleased to meet you Thu 2016-06-09 06:04:54.708: 03: [220859] --> 250-ETRN Thu 2016-06-09 06:04:54.708: 03: [220859] --> 250-8BITMIME Thu 2016-06-09 06:04:54.708: 03: [220859] --> 250-ENHANCEDSTATUSCODES Thu 2016-06-09 06:04:54.708: 03: [220859] --> 250 SIZE 30720000 Thu 2016-06-09 06:04:54.710: 02: [220859] <-- MAIL From:< karl-he...@roesseler.eu> SIZE=4779 Thu 2016-06-09 06:04:54.710: 03: [220859] --> 250 2.1.0 Sender OK Thu 2016-06-09 06:04:54.712: 02: [220859] <-- RCPT To:<sa...@pttms.co.id> Thu 2016-06-09 06:04:54.712: 03: [220859] --> 250 2.1.5 Recipient OK Thu 2016-06-09 06:04:54.715: 02: [220859] <-- DATA Thu 2016-06-09 06:04:54.715: 01: [220859] Creating temp file (SMTP): d:\mdaemon\queues\temp\md50000153488.tmp Thu 2016-06-09 06:04:54.715: 03: [220859] --> 354 Enter mail, end with <CRLF>.<CRLF> Thu 2016-06-09 06:04:54.720: 01: [220859] Message size: 4781 bytes Thu 2016-06-09 06:04:54.721: 06: [220859] Passing message through AntiVirus (Size: 4781)... Thu 2016-06-09 06:04:54.721: 06: [220859] * Recipient or sender in exclusion list Thu 2016-06-09 06:04:54.721: 06: [220859] ---- End AntiVirus results Thu 2016-06-09 06:04:54.725: 01: [220859] Message creation successful: d:\mdaemon\queues\inbound\md50000203923.msg Thu 2016-06-09 06:04:54.725: 03: [220859] --> 250 2.6.0 Ok, message saved <Message-ID: <20160608224643.72fcc4244...@dd23922.kasserver.com>> Thu 2016-06-09 06:04:54.726: 02: [220859] <-- RSET Thu 2016-06-09 06:04:54.726: 03: [220859] --> 250 2.0.0 RSET? Well, OK Thu 2016-06-09 06:04:54.730: 02: [220859] <-- MAIL From:< karl-he...@roesseler.eu> SIZE=4821 Thu 2016-06-09 06:04:54.730: 03: [220859] --> 250 2.1.0 Sender OK Thu 2016-06-09 06:04:54.732: 02: [220859] <-- RCPT To:< sales.cop...@pttms.co.id> Thu 2016-06-09 06:04:54.733: 03: [220859] --> 250 2.1.5 Recipient OK Thu 2016-06-09 06:04:54.735: 02: [220859] <-- DATA Thu 2016-06-09 06:04:54.735: 01: [220859] Creating temp file (SMTP): d:\mdaemon\queues\temp\md50000153489.tmp Thu 2016-06-09 06:04:54.735: 03: [220859] --> 354 Enter mail, end with <CRLF>.<CRLF> Thu 2016-06-09 06:04:54.739: 01: [220859] Message size: 4823 bytes Thu 2016-06-09 06:04:54.739: 06: [220859] Passing message through AntiVirus (Size: 4823)... Thu 2016-06-09 06:04:54.740: 06: [220859] * Recipient or sender in exclusion list Thu 2016-06-09 06:04:54.740: 06: [220859] ---- End AntiVirus results Thu 2016-06-09 06:04:54.743: 01: [220859] Message creation successful: d:\mdaemon\queues\inbound\md50000203924.msg Thu 2016-06-09 06:04:54.743: 03: [220859] --> 250 2.6.0 Ok, message saved <Message-ID: <20160608224643.75e854244...@dd23922.kasserver.com>> Thu 2016-06-09 06:04:54.744: 02: [220859] <-- RSET Thu 2016-06-09 06:04:54.744: 03: [220859] --> 250 2.0.0 RSET? Well, OK Thu 2016-06-09 06:04:54.748: 02: [220859] <-- MAIL From:< karl-he...@roesseler.eu> SIZE=4761 Thu 2016-06-09 06:04:54.748: 03: [220859] --> 250 2.1.0 Sender OK Thu 2016-06-09 06:04:54.751: 02: [220859] <-- RCPT To:<s...@pttms.co.id> Thu 2016-06-09 06:04:54.751: 03: [220859] --> 250 2.1.5 Recipient OK Thu 2016-06-09 06:04:54.753: 02: [220859] <-- DATA Thu 2016-06-09 06:04:54.754: 01: [220859] Creating temp file (SMTP): d:\mdaemon\queues\temp\md50000153490.tmp Thu 2016-06-09 06:04:54.754: 03: [220859] --> 354 Enter mail, end with <CRLF>.<CRLF> Thu 2016-06-09 06:04:54.757: 01: [220859] Message size: 4763 bytes Thu 2016-06-09 06:04:54.758: 06: [220859] Passing message through AntiVirus (Size: 4763)... Thu 2016-06-09 06:04:54.758: 06: [220859] * Recipient or sender in exclusion list Thu 2016-06-09 06:04:54.758: 06: [220859] ---- End AntiVirus results Thu 2016-06-09 06:04:54.761: 01: [220859] Message creation successful: d:\mdaemon\queues\inbound\md50000203925.msg Thu 2016-06-09 06:04:54.761: 03: [220859] --> 250 2.6.0 Ok, message saved <Message-ID: <20160608224643.99c3d4244...@dd23922.kasserver.com>> Thu 2016-06-09 06:04:54.762: 02: [220859] <-- RSET Thu 2016-06-09 06:04:54.762: 03: [220859] --> 250 2.0.0 RSET? Well, OK Thu 2016-06-09 06:04:54.766: 02: [220859] <-- MAIL From:< karl-he...@roesseler.eu> SIZE=4857 Thu 2016-06-09 06:04:54.766: 03: [220859] --> 250 2.1.0 Sender OK Thu 2016-06-09 06:04:54.768: 02: [220859] <-- RCPT To:< sandy.sukmaraha...@pttms.co.id> Thu 2016-06-09 06:04:54.790: 03: [220859] --> 250 2.1.5 Recipient OK Thu 2016-06-09 06:04:54.792: 02: [220859] <-- DATA Thu 2016-06-09 06:04:54.793: 01: [220859] Creating temp file (SMTP): d:\mdaemon\queues\temp\md50000153491.tmp Thu 2016-06-09 06:04:54.793: 03: [220859] --> 354 Enter mail, end with <CRLF>.<CRLF> Thu 2016-06-09 06:04:54.796: 01: [220859] Message size: 4859 bytes Thu 2016-06-09 06:04:54.797: 06: [220859] Passing message through AntiVirus (Size: 4859)... Thu 2016-06-09 06:04:54.797: 06: [220859] * Recipient or sender in exclusion list Thu 2016-06-09 06:04:54.797: 06: [220859] ---- End AntiVirus results Thu 2016-06-09 06:04:54.801: 01: [220859] Message creation successful: d:\mdaemon\queues\inbound\md50000203926.msg Thu 2016-06-09 06:04:54.801: 03: [220859] --> 250 2.6.0 Ok, message saved <Message-ID: <20160608224643.996474244...@dd23922.kasserver.com>> Thu 2016-06-09 06:04:54.801: 02: [220859] <-- RSET Thu 2016-06-09 06:04:54.801: 03: [220859] --> 250 2.0.0 RSET? Well, OK Thu 2016-06-09 06:04:54.805: 02: [220859] <-- MAIL From:< karl-he...@roesseler.eu> SIZE=4773 Thu 2016-06-09 06:04:54.806: 03: [220859] --> 250 2.1.0 Sender OK Thu 2016-06-09 06:04:54.808: 02: [220859] <-- RCPT To:<s...@pttms.co.id> Thu 2016-06-09 06:04:54.809: 03: [220859] --> 250 2.1.5 Recipient OK Thu 2016-06-09 06:04:54.811: 02: [220859] <-- DATA Thu 2016-06-09 06:04:54.811: 01: [220859] Creating temp file (SMTP): d:\mdaemon\queues\temp\md50000153492.tmp Thu 2016-06-09 06:04:54.811: 03: [220859] --> 354 Enter mail, end with <CRLF>.<CRLF> Thu 2016-06-09 06:04:54.814: 01: [220859] Message size: 4775 bytes Thu 2016-06-09 06:04:54.815: 06: [220859] Passing message through AntiVirus (Size: 4775)... Thu 2016-06-09 06:04:54.815: 06: [220859] * Recipient or sender in exclusion list Thu 2016-06-09 06:04:54.815: 06: [220859] ---- End AntiVirus results Thu 2016-06-09 06:04:54.818: 01: [220859] Message creation successful: d:\mdaemon\queues\inbound\md50000203927.msg Thu 2016-06-09 06:04:54.818: 03: [220859] --> 250 2.6.0 Ok, message saved <Message-ID: <20160608224643.99aa84244...@dd23922.kasserver.com>> Thu 2016-06-09 06:04:54.819: 02: [220859] <-- RSET Thu 2016-06-09 06:04:54.819: 03: [220859] --> 250 2.0.0 RSET? Well, OK Thu 2016-06-09 06:04:54.823: 02: [220859] <-- MAIL From:< karl-he...@roesseler.eu> SIZE=4803 Thu 2016-06-09 06:04:54.823: 03: [220859] --> 250 2.1.0 Sender OK Thu 2016-06-09 06:04:54.825: 02: [220859] <-- RCPT To:<sulasm...@pttms.co.id > Thu 2016-06-09 06:04:54.826: 03: [220859] --> 250 2.1.5 Recipient OK Thu 2016-06-09 06:04:54.828: 02: [220859] <-- DATA Thu 2016-06-09 06:04:54.828: 01: [220859] Creating temp file (SMTP): d:\mdaemon\queues\temp\md50000153493.tmp Thu 2016-06-09 06:04:54.828: 03: [220859] --> 354 Enter mail, end with <CRLF>.<CRLF> Thu 2016-06-09 06:04:54.831: 01: [220859] Message size: 4805 bytes Thu 2016-06-09 06:04:54.832: 06: [220859] Passing message through AntiVirus (Size: 4805)... Thu 2016-06-09 06:04:54.832: 06: [220859] * Recipient or sender in exclusion list Thu 2016-06-09 06:04:54.832: 06: [220859] ---- End AntiVirus results Thu 2016-06-09 06:04:54.835: 01: [220859] Message creation successful: d:\mdaemon\queues\inbound\md50000203928.msg Thu 2016-06-09 06:04:54.835: 03: [220859] --> 250 2.6.0 Ok, message saved <Message-ID: <20160608224643.c04894244...@dd23922.kasserver.com>> Thu 2016-06-09 06:04:54.836: 02: [220859] <-- RSET Thu 2016-06-09 06:04:54.836: 03: [220859] --> 250 2.0.0 RSET? Well, OK Thu 2016-06-09 06:04:54.840: 02: [220859] <-- MAIL From:< karl-he...@roesseler.eu> SIZE=4839 Thu 2016-06-09 06:04:54.840: 03: [220859] --> 250 2.1.0 Sender OK Thu 2016-06-09 06:04:54.842: 02: [220859] <-- RCPT To:< rikko.soffia...@pttms.co.id> Thu 2016-06-09 06:04:54.843: 03: [220859] --> 250 2.1.5 Recipient OK Thu 2016-06-09 06:04:54.844: 02: [220859] <-- DATA Thu 2016-06-09 06:04:54.845: 01: [220859] Creating temp file (SMTP): d:\mdaemon\queues\temp\md50000153494.tmp Thu 2016-06-09 06:04:54.845: 03: [220859] --> 354 Enter mail, end with <CRLF>.<CRLF> Thu 2016-06-09 06:04:54.848: 01: [220859] Message size: 4841 bytes Thu 2016-06-09 06:04:54.848: 06: [220859] Passing message through AntiVirus (Size: 4841)... Thu 2016-06-09 06:04:54.849: 06: [220859] * Recipient or sender in exclusion list Thu 2016-06-09 06:04:54.849: 06: [220859] ---- End AntiVirus results Thu 2016-06-09 06:04:54.852: 01: [220859] Message creation successful: d:\mdaemon\queues\inbound\md50000203929.msg Thu 2016-06-09 06:04:54.852: 03: [220859] --> 250 2.6.0 Ok, message saved <Message-ID: <20160608224643.50c5f4244...@dd23922.kasserver.com>> Thu 2016-06-09 06:04:54.853: 02: [220859] <-- RSET Thu 2016-06-09 06:04:54.853: 03: [220859] --> 250 2.0.0 RSET? Well, OK Pertanyaan saya, bagaimana saya mencegah email - email seperti ini yah ? kadang mereka berganti ganti domain , bahkan ip , namun diterima dengan mulus oleh server mail kami Mohon pencerahannya salam Rohim -- --MDaemon-L---------------------------------------------------------- Milis ini untuk Diskusi antar pengguna MDaemon Mail Server. Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette Arsip: http://mdaemon-l.dutaint.com Dokumentasi : http://mdaemon.dutaint.co.id Henti Langgan: Kirim mail ke MDaemon-L-unsubscribe [at] dutaint.com Berlangganan: kirim mail ke MDaemon-L-subscribe [at] dutaint.com Versi terakhir MD 16.0.2, SP 5.0, BES 2.0.2, OC 3.5.2, SG 3.0.3