Selamat Siang Pak Syafril,
Saya mau sedikit share,
akhir akhir ini beberapa user dikantor saya sering mendapatkan email, kalau
menurut saya email ini bukan email sebenarnya yang dikirim oleh koresponden
kami.
kemungkinan fake mail.
berikut contoh log dari email mereka

Thu 2016-06-09 05:59:54.942: 01: ----------
Thu 2016-06-09 06:04:54.705: 05: [220859] Accepting SMTP connection from
103.253.112.239:366 to 192.168.1.254:59499
Thu 2016-06-09 06:04:54.705: 03: [220859] --> 220 pttms.co.id ESMTP MDaemon
16.0.1; Thu, 09 Jun 2016 06:04:54 +0700
Thu 2016-06-09 06:04:54.708: 02: [220859] <-- EHLO dip33.dutaint.com
Thu 2016-06-09 06:04:54.708: 03: [220859] --> 250-pttms.co.id Hello
dip33.dutaint.com [103.253.112.239], pleased to meet you
Thu 2016-06-09 06:04:54.708: 03: [220859] --> 250-ETRN
Thu 2016-06-09 06:04:54.708: 03: [220859] --> 250-8BITMIME
Thu 2016-06-09 06:04:54.708: 03: [220859] --> 250-ENHANCEDSTATUSCODES
Thu 2016-06-09 06:04:54.708: 03: [220859] --> 250 SIZE 30720000
Thu 2016-06-09 06:04:54.710: 02: [220859] <-- MAIL From:<
karl-he...@roesseler.eu> SIZE=4779
Thu 2016-06-09 06:04:54.710: 03: [220859] --> 250 2.1.0 Sender OK
Thu 2016-06-09 06:04:54.712: 02: [220859] <-- RCPT To:<sa...@pttms.co.id>
Thu 2016-06-09 06:04:54.712: 03: [220859] --> 250 2.1.5 Recipient OK
Thu 2016-06-09 06:04:54.715: 02: [220859] <-- DATA
Thu 2016-06-09 06:04:54.715: 01: [220859] Creating temp file (SMTP):
d:\mdaemon\queues\temp\md50000153488.tmp
Thu 2016-06-09 06:04:54.715: 03: [220859] --> 354 Enter mail, end with
<CRLF>.<CRLF>
Thu 2016-06-09 06:04:54.720: 01: [220859] Message size: 4781 bytes
Thu 2016-06-09 06:04:54.721: 06: [220859] Passing message through AntiVirus
(Size: 4781)...
Thu 2016-06-09 06:04:54.721: 06: [220859] *  Recipient or sender in
exclusion list
Thu 2016-06-09 06:04:54.721: 06: [220859] ---- End AntiVirus results
Thu 2016-06-09 06:04:54.725: 01: [220859] Message creation successful:
d:\mdaemon\queues\inbound\md50000203923.msg
Thu 2016-06-09 06:04:54.725: 03: [220859] --> 250 2.6.0 Ok, message saved
<Message-ID: <20160608224643.72fcc4244...@dd23922.kasserver.com>>
Thu 2016-06-09 06:04:54.726: 02: [220859] <-- RSET
Thu 2016-06-09 06:04:54.726: 03: [220859] --> 250 2.0.0 RSET? Well, OK
Thu 2016-06-09 06:04:54.730: 02: [220859] <-- MAIL From:<
karl-he...@roesseler.eu> SIZE=4821
Thu 2016-06-09 06:04:54.730: 03: [220859] --> 250 2.1.0 Sender OK
Thu 2016-06-09 06:04:54.732: 02: [220859] <-- RCPT To:<
sales.cop...@pttms.co.id>
Thu 2016-06-09 06:04:54.733: 03: [220859] --> 250 2.1.5 Recipient OK
Thu 2016-06-09 06:04:54.735: 02: [220859] <-- DATA
Thu 2016-06-09 06:04:54.735: 01: [220859] Creating temp file (SMTP):
d:\mdaemon\queues\temp\md50000153489.tmp
Thu 2016-06-09 06:04:54.735: 03: [220859] --> 354 Enter mail, end with
<CRLF>.<CRLF>
Thu 2016-06-09 06:04:54.739: 01: [220859] Message size: 4823 bytes
Thu 2016-06-09 06:04:54.739: 06: [220859] Passing message through AntiVirus
(Size: 4823)...
Thu 2016-06-09 06:04:54.740: 06: [220859] *  Recipient or sender in
exclusion list
Thu 2016-06-09 06:04:54.740: 06: [220859] ---- End AntiVirus results
Thu 2016-06-09 06:04:54.743: 01: [220859] Message creation successful:
d:\mdaemon\queues\inbound\md50000203924.msg
Thu 2016-06-09 06:04:54.743: 03: [220859] --> 250 2.6.0 Ok, message saved
<Message-ID: <20160608224643.75e854244...@dd23922.kasserver.com>>
Thu 2016-06-09 06:04:54.744: 02: [220859] <-- RSET
Thu 2016-06-09 06:04:54.744: 03: [220859] --> 250 2.0.0 RSET? Well, OK
Thu 2016-06-09 06:04:54.748: 02: [220859] <-- MAIL From:<
karl-he...@roesseler.eu> SIZE=4761
Thu 2016-06-09 06:04:54.748: 03: [220859] --> 250 2.1.0 Sender OK
Thu 2016-06-09 06:04:54.751: 02: [220859] <-- RCPT To:<s...@pttms.co.id>
Thu 2016-06-09 06:04:54.751: 03: [220859] --> 250 2.1.5 Recipient OK
Thu 2016-06-09 06:04:54.753: 02: [220859] <-- DATA
Thu 2016-06-09 06:04:54.754: 01: [220859] Creating temp file (SMTP):
d:\mdaemon\queues\temp\md50000153490.tmp
Thu 2016-06-09 06:04:54.754: 03: [220859] --> 354 Enter mail, end with
<CRLF>.<CRLF>
Thu 2016-06-09 06:04:54.757: 01: [220859] Message size: 4763 bytes
Thu 2016-06-09 06:04:54.758: 06: [220859] Passing message through AntiVirus
(Size: 4763)...
Thu 2016-06-09 06:04:54.758: 06: [220859] *  Recipient or sender in
exclusion list
Thu 2016-06-09 06:04:54.758: 06: [220859] ---- End AntiVirus results
Thu 2016-06-09 06:04:54.761: 01: [220859] Message creation successful:
d:\mdaemon\queues\inbound\md50000203925.msg
Thu 2016-06-09 06:04:54.761: 03: [220859] --> 250 2.6.0 Ok, message saved
<Message-ID: <20160608224643.99c3d4244...@dd23922.kasserver.com>>
Thu 2016-06-09 06:04:54.762: 02: [220859] <-- RSET
Thu 2016-06-09 06:04:54.762: 03: [220859] --> 250 2.0.0 RSET? Well, OK
Thu 2016-06-09 06:04:54.766: 02: [220859] <-- MAIL From:<
karl-he...@roesseler.eu> SIZE=4857
Thu 2016-06-09 06:04:54.766: 03: [220859] --> 250 2.1.0 Sender OK
Thu 2016-06-09 06:04:54.768: 02: [220859] <-- RCPT To:<
sandy.sukmaraha...@pttms.co.id>
Thu 2016-06-09 06:04:54.790: 03: [220859] --> 250 2.1.5 Recipient OK
Thu 2016-06-09 06:04:54.792: 02: [220859] <-- DATA
Thu 2016-06-09 06:04:54.793: 01: [220859] Creating temp file (SMTP):
d:\mdaemon\queues\temp\md50000153491.tmp
Thu 2016-06-09 06:04:54.793: 03: [220859] --> 354 Enter mail, end with
<CRLF>.<CRLF>
Thu 2016-06-09 06:04:54.796: 01: [220859] Message size: 4859 bytes
Thu 2016-06-09 06:04:54.797: 06: [220859] Passing message through AntiVirus
(Size: 4859)...
Thu 2016-06-09 06:04:54.797: 06: [220859] *  Recipient or sender in
exclusion list
Thu 2016-06-09 06:04:54.797: 06: [220859] ---- End AntiVirus results
Thu 2016-06-09 06:04:54.801: 01: [220859] Message creation successful:
d:\mdaemon\queues\inbound\md50000203926.msg
Thu 2016-06-09 06:04:54.801: 03: [220859] --> 250 2.6.0 Ok, message saved
<Message-ID: <20160608224643.996474244...@dd23922.kasserver.com>>
Thu 2016-06-09 06:04:54.801: 02: [220859] <-- RSET
Thu 2016-06-09 06:04:54.801: 03: [220859] --> 250 2.0.0 RSET? Well, OK
Thu 2016-06-09 06:04:54.805: 02: [220859] <-- MAIL From:<
karl-he...@roesseler.eu> SIZE=4773
Thu 2016-06-09 06:04:54.806: 03: [220859] --> 250 2.1.0 Sender OK
Thu 2016-06-09 06:04:54.808: 02: [220859] <-- RCPT To:<s...@pttms.co.id>
Thu 2016-06-09 06:04:54.809: 03: [220859] --> 250 2.1.5 Recipient OK
Thu 2016-06-09 06:04:54.811: 02: [220859] <-- DATA
Thu 2016-06-09 06:04:54.811: 01: [220859] Creating temp file (SMTP):
d:\mdaemon\queues\temp\md50000153492.tmp
Thu 2016-06-09 06:04:54.811: 03: [220859] --> 354 Enter mail, end with
<CRLF>.<CRLF>
Thu 2016-06-09 06:04:54.814: 01: [220859] Message size: 4775 bytes
Thu 2016-06-09 06:04:54.815: 06: [220859] Passing message through AntiVirus
(Size: 4775)...
Thu 2016-06-09 06:04:54.815: 06: [220859] *  Recipient or sender in
exclusion list
Thu 2016-06-09 06:04:54.815: 06: [220859] ---- End AntiVirus results
Thu 2016-06-09 06:04:54.818: 01: [220859] Message creation successful:
d:\mdaemon\queues\inbound\md50000203927.msg
Thu 2016-06-09 06:04:54.818: 03: [220859] --> 250 2.6.0 Ok, message saved
<Message-ID: <20160608224643.99aa84244...@dd23922.kasserver.com>>
Thu 2016-06-09 06:04:54.819: 02: [220859] <-- RSET
Thu 2016-06-09 06:04:54.819: 03: [220859] --> 250 2.0.0 RSET? Well, OK
Thu 2016-06-09 06:04:54.823: 02: [220859] <-- MAIL From:<
karl-he...@roesseler.eu> SIZE=4803
Thu 2016-06-09 06:04:54.823: 03: [220859] --> 250 2.1.0 Sender OK
Thu 2016-06-09 06:04:54.825: 02: [220859] <-- RCPT To:<sulasm...@pttms.co.id
>
Thu 2016-06-09 06:04:54.826: 03: [220859] --> 250 2.1.5 Recipient OK
Thu 2016-06-09 06:04:54.828: 02: [220859] <-- DATA
Thu 2016-06-09 06:04:54.828: 01: [220859] Creating temp file (SMTP):
d:\mdaemon\queues\temp\md50000153493.tmp
Thu 2016-06-09 06:04:54.828: 03: [220859] --> 354 Enter mail, end with
<CRLF>.<CRLF>
Thu 2016-06-09 06:04:54.831: 01: [220859] Message size: 4805 bytes
Thu 2016-06-09 06:04:54.832: 06: [220859] Passing message through AntiVirus
(Size: 4805)...
Thu 2016-06-09 06:04:54.832: 06: [220859] *  Recipient or sender in
exclusion list
Thu 2016-06-09 06:04:54.832: 06: [220859] ---- End AntiVirus results
Thu 2016-06-09 06:04:54.835: 01: [220859] Message creation successful:
d:\mdaemon\queues\inbound\md50000203928.msg
Thu 2016-06-09 06:04:54.835: 03: [220859] --> 250 2.6.0 Ok, message saved
<Message-ID: <20160608224643.c04894244...@dd23922.kasserver.com>>
Thu 2016-06-09 06:04:54.836: 02: [220859] <-- RSET
Thu 2016-06-09 06:04:54.836: 03: [220859] --> 250 2.0.0 RSET? Well, OK
Thu 2016-06-09 06:04:54.840: 02: [220859] <-- MAIL From:<
karl-he...@roesseler.eu> SIZE=4839
Thu 2016-06-09 06:04:54.840: 03: [220859] --> 250 2.1.0 Sender OK
Thu 2016-06-09 06:04:54.842: 02: [220859] <-- RCPT To:<
rikko.soffia...@pttms.co.id>
Thu 2016-06-09 06:04:54.843: 03: [220859] --> 250 2.1.5 Recipient OK
Thu 2016-06-09 06:04:54.844: 02: [220859] <-- DATA
Thu 2016-06-09 06:04:54.845: 01: [220859] Creating temp file (SMTP):
d:\mdaemon\queues\temp\md50000153494.tmp
Thu 2016-06-09 06:04:54.845: 03: [220859] --> 354 Enter mail, end with
<CRLF>.<CRLF>
Thu 2016-06-09 06:04:54.848: 01: [220859] Message size: 4841 bytes
Thu 2016-06-09 06:04:54.848: 06: [220859] Passing message through AntiVirus
(Size: 4841)...
Thu 2016-06-09 06:04:54.849: 06: [220859] *  Recipient or sender in
exclusion list
Thu 2016-06-09 06:04:54.849: 06: [220859] ---- End AntiVirus results
Thu 2016-06-09 06:04:54.852: 01: [220859] Message creation successful:
d:\mdaemon\queues\inbound\md50000203929.msg
Thu 2016-06-09 06:04:54.852: 03: [220859] --> 250 2.6.0 Ok, message saved
<Message-ID: <20160608224643.50c5f4244...@dd23922.kasserver.com>>
Thu 2016-06-09 06:04:54.853: 02: [220859] <-- RSET
Thu 2016-06-09 06:04:54.853: 03: [220859] --> 250 2.0.0 RSET? Well, OK

Pertanyaan saya, bagaimana saya mencegah email - email seperti ini yah ?
kadang mereka berganti ganti domain , bahkan ip , namun diterima dengan
mulus oleh server mail kami

Mohon pencerahannya

salam
Rohim

-- 
--MDaemon-L----------------------------------------------------------
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server.

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Henti Langgan: Kirim mail ke MDaemon-L-unsubscribe [at] dutaint.com
Berlangganan: kirim mail ke MDaemon-L-subscribe [at] dutaint.com
Versi terakhir MD 16.0.2, SP 5.0, BES 2.0.2, OC 3.5.2, SG 3.0.3

Kirim email ke