dear Pak Syafril, saya ada dua pertanyaan :
1. ada klien yang mendapatkan bounch back email seperti berikut : -----Original Message----- From: Trend Micro [mailto:Trend Micro] Sent: Wednesday, April 18, 2018 3:13 PM Subject: Trend Micro OfficeScan detected and took action on a malicious email OfficeScan has detected an email that may contain malicious content and attached it to this new mail as a text file. If you need to read the original email message, we recommend that you open it as a text file. To prevent infection, do not save the original email as a mail file. This is an auto-generated message. ---------------- end of message --------------------------- email tersebut disertai dengan attachment original.txt (terlampir) 2. setelah saya cek di smtp(in).log saya menemukan log terlampir [smtp(in).log] yang (jika dilihat dari queue/status manager) statusnya YES. mohon bantuannya untuk menganalisa log tersebut -- Anjas Wahyu Nurhayanto iPower Communications -- --[mdaemon-l]---------------------------------------------------------- Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette Arsip: http://mdaemon-l.dutaint.com Dokumentasi : http://mdaemon.dutaint.co.id Henti Langgan: Kirim mail ke [email protected] Versi terakhir MD 17.5.3, SP 5.5.1, OC 5.0.1, SG 5.0.1
X-MDAV-Result: clean X-MDAV-Processed: aksball.co.id, Wed, 18 Apr 2018 14:53:07 +0700 Return-path: <[email protected]> Authentication-Results: aksball.co.id; spf=permerror [email protected]; dkim=pass (good signature) header.d=365tsel.onmicrosoft.com header.b=foUeM2h9dh; iprev=pass policy.iprev=40.107.128.102 (PTR mail-eopbgr1280102.outbound.protection.outlook.com); iprev=fail policy.iprev=40.107.128.102 reason="does not match" (HELO APC01-HK2-obe.outbound.protection.outlook.com); iprev=fail policy.iprev=40.107.128.102 reason="does not match" (MAIL [email protected]) Received-SPF: permerror (aksball.co.id: DNS error or too many SPF records for telkomsel.co.id: ; too many void lookups) receiver=aksball.co.id; client-ip=40.107.128.102; mechanism=default; envelope-from="[email protected]"; helo=APC01-HK2-obe.outbound.protection.outlook.com; Received: from APC01-HK2-obe.outbound.protection.outlook.com (mail-eopbgr1280102.outbound.protection.outlook.com [40.107.128.102]) by aksball.co.id with ESMTP id md50000046200.msg; Wed, 18 Apr 2018 14:53:06 +0700 X-Spam-Level: X-Spam-Status: No, score=0.00 required=5.0 X-Spam-Report: * 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid X-Spam-Processed: aksball.co.id, Wed, 18 Apr 2018 14:53:06 +0700 (processed during SMTP session) X-MDOP-RefID: str=0001.0A150202.5AD6F95A.00BA,ss=1,re=0.000,recu=0.000,reip=0.000,cl=1,cld=1,fgs=0 (_st=1 _vt=0 _iwf=0) X-MDDKIM-Result: unapproved (aksball.co.id) X-MDSPF-Result: permerror (aksball.co.id) X-MDRemoteIP: 40.107.128.102 X-MDHelo: APC01-HK2-obe.outbound.protection.outlook.com X-MDArrival-Date: Wed, 18 Apr 2018 14:53:06 +0700 X-Rcpt-To: [email protected] X-MDRcpt-To: [email protected] X-Return-Path: [email protected] X-Envelope-From: [email protected] X-MDaemon-Deliver-To: [email protected] X-CAV-Result: clean DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=365tsel.onmicrosoft.com; s=selector1-telkomsel-co-id; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=nHnxJFIFDmkHN0vEun6c9ndcGJqBOBKc0Y+4U2wcFUw=; b=foUeM2h9dhCXbx5KnYdIGOl/aehBLBBmaRnfZzXnXWExTQqjGF4a5scVX6OKTj0hi5HiK6TzssO66TF9K2lJplMQPoEtgs0ob4WVvENjQr2pS3uiiF2IZTltOTYPxuGKnYLNWrdE64RNLQ1hfCNPVAMaSKJ8iBSpXPhu3LqVTzA= Received: from PU1PR06MB2088.apcprd06.prod.outlook.com (52.133.226.141) by PU1PR06MB2151.apcprd06.prod.outlook.com (52.133.227.18) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.20.675.14; Wed, 18 Apr 2018 07:52:34 +0000 Received: from PU1PR06MB2088.apcprd06.prod.outlook.com ([fe80::1c7:975c:ba8a:9803]) by PU1PR06MB2088.apcprd06.prod.outlook.com ([fe80::1c7:975c:ba8a:9803%13]) with mapi id 15.20.0675.015; Wed, 18 Apr 2018 07:52:34 +0000 From: gumilar <[email protected]> To: Yustina <[email protected]> CC: Tuti AKS <[email protected]>, "[email protected]" <[email protected]>, retno_pratiwi_x <[email protected]> Subject: FW: Bukti Transfer Telkomsel Thread-Topic: Bukti Transfer Telkomsel Thread-Index: AdPW5v7sW8Q8kIeqSBK59TqntUNwHwAAcmQQAAA38VAAAAumUA== Date: Wed, 18 Apr 2018 07:52:34 +0000 Message-ID: <pu1pr06mb2088ef7316c22e90a6495c8afc...@pu1pr06mb2088.apcprd06.prod.outlook.com> References: <[email protected]> <pu1pr06mb2088bb08dae146e9621db1d4fc...@pu1pr06mb2088.apcprd06.prod.outlook.com> <32eccc6afbf2c94a991bb9b80d9571b52bca3...@g12-msgmbx05.telkomsel.co.id> In-Reply-To: <32eccc6afbf2c94a991bb9b80d9571b52bca3...@g12-msgmbx05.telkomsel.co.id> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: msip_labels: x-originating-ip: [202.3.212.132] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1;PU1PR06MB2151;7:I/A5S2FF3T1Rt7DuowGHeLe64gdP7PmLVasOSjOhJGINL5Q8b/u0dLAWrI+JRCPAjnc2MhM5aXAtcQ2CwXNfHceWRkNqupgfhIhlurtRpknHlL/XWY5RF0sWtq2KF+u0avrZ+nzg1kWHw4vvLryHKmX6c9QjrXDUACItLONASgzTKZg8tOQZ+pukbm0azW+tAkn4rnHuV8JZYYZLlknOeu+SoyV9KkwC1YfWgRcqBt34cVgpgARpePA+0G+bJPgl x-ms-exchange-antispam-srfa-diagnostics: SOS; x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:(7020095)(4652020)(5600026)(4534165)(4627221)(201703031133081)(201702281549075)(2017052603328)(7153060)(7193020);SRVR:PU1PR06MB2151; x-ms-traffictypediagnostic: PU1PR06MB2151: x-ld-processed: fc743075-93ed-4a5c-82c0-ca5eac914220,ExtAddr x-microsoft-antispam-prvs: <pu1pr06mb2151d5e00312c051cce5f97efc...@pu1pr06mb2151.apcprd06.prod.outlook.com> x-exchange-antispam-report-test: UriScan:(130873036417446)(194151415913766); x-exchange-antispam-report-cfa-test: BCL:0;PCL:0;RULEID:(8211001083)(6040522)(2401047)(8121501046)(5005006)(93006095)(93001095)(10201501046)(3002001)(3231232)(944501327)(52105095)(6041310)(20161123564045)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123560045)(20161123562045)(20161123558120)(6072148)(201708071742011);SRVR:PU1PR06MB2151;BCL:0;PCL:0;RULEID:;SRVR:PU1PR06MB2151; x-forefront-prvs: 06469BCC91 x-forefront-antispam-report: SFV:NSPM;SFS:(10019020)(396003)(376002)(366004)(39860400002)(346002)(39380400002)(13464003)(33656002)(26005)(66066001)(6916009)(7116003)(413944005)(53936002)(5660300001)(3846002)(97736004)(316002)(6116002)(186003)(8676002)(14454004)(2473003)(305945005)(5250100002)(229853002)(81166006)(8936002)(2900100001)(2906002)(476003)(9686003)(4326008)(6506007)(6436002)(99286004)(74482002)(102836004)(39060400002)(55016002)(3280700002)(7736002)(86152003)(478600001)(53546011)(11346002)(7696005)(59450400001)(74316002)(76176011)(446003)(107886003)(86362001)(3660700001)(25786009)(54906003);DIR:OUT;SFP:1102;SCL:1;SRVR:PU1PR06MB2151;H:PU1PR06MB2088.apcprd06.prod.outlook.com;FPR:;SPF:None;LANG:id;MLV:ovrnspm;PTR:InfoNoRecords; x-microsoft-antispam-message-info: +jx0NpA9k9gaect/cgSeCJsqQTM4g3CDWDNay2hOomglsNkyHVx29qo+okvxK8IK3w/qZwrJagTSo2/XInbZiul4sWfkPi8HaWRQIWeSAnj2uAuu6nSWchEsHuRA/C8f3qDc8Cw+FMhOzNPq/2LgJifVtbmLKlU2PMfR68P65eIKMEDQcU6YB9e851TSF4gI spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-MS-Office365-Filtering-Correlation-Id: 65d15564-7064-4b5e-0b47-08d5a50158bd X-OriginatorOrg: telkomsel.co.id X-MS-Exchange-CrossTenant-Network-Message-Id: 65d15564-7064-4b5e-0b47-08d5a50158bd X-MS-Exchange-CrossTenant-originalarrivaltime: 18 Apr 2018 07:52:34.2783 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: fc743075-93ed-4a5c-82c0-ca5eac914220 X-MS-Exchange-Transport-CrossTenantHeadersStamped: PU1PR06MB2151 RGVhciBidSBZdXN0aW5hLA0KDQpGeWksDQoNCg0KQScgZ3VtaQ0KDQpBa2FuIGRpYWp1a2FuIHBy b3NlcyBsb2FkaW5nIGJpbGEgdWFuZyBtYXN1a255YSBzZGggdXBkYXRlLg0KDQo2MjgxMTExNDM2 NjUJIDc0Myw4MDEuMDAgCU5TSyBBS1MgUFJFQ0lTSU9OIEJBTEwgSU5ET05FU0lBCQ0KNjI4MTEx MzA2NjEJIDExMiwwMjkuMDAgCU5TSyBBS1MgUFJFQ0lTSU9OIEJBTEwgSU5ET05FU0lBCQ0KNjI4 MTExNzA5OTU1CSAzMzIsNTYwLjAwIAlOU0sgQUtTIFBSRUNJU0lPTiBCQUxMIElORE9ORVNJQQkN CjYyODExMTk3NzM0NAkgOTMzLDQ2MC4wMCAJTlNLIEFLUyBQUkVDSVNJT04gQkFMTCBJTkRPTkVT SUEJDQo2MjgxMTE5Nzg0OTYJIDM2LDA2My4wMCAJTlNLIEFLUyBQUkVDSVNJT04gQkFMTCBJTkRP TkVTSUEJDQo2MjgxMTE5Nzg0OTcJIDI3LDI4MC4wMCAJTlNLIEFLUyBQUkVDSVNJT04gQkFMTCBJ TkRPTkVTSUEJDQo2MjgxMTg0NzQ4OQkgMTA1LDE1MS4wMCAJTlNLIEFLUyBQUkVDSVNJT04gQkFM TCBJTkRPTkVTSUEJDQo2MjgxMTg4NzgxOAkgODMsMTc2LjAwIAlOU0sgQUtTIFBSRUNJU0lPTiBC QUxMIElORE9ORVNJQQkNCjYyODExOTAwNjA3MwkgMiwxNzEsNDgzLjAwIAlOU0sgQUtTIFBSRUNJ U0lPTiBCQUxMIElORE9ORVNJQQkNCjYyODExOTAwNjA3NAkgMTczLDk2NS4wMCAJTlNLIEFLUyBQ UkVDSVNJT04gQkFMTCBJTkRPTkVTSUEJDQo2MjgxMTkwMDYwNzUJIDM4LDUwMC4wMCAJTlNLIEFL UyBQUkVDSVNJT04gQkFMTCBJTkRPTkVTSUEJDQo2MjgxMTkwMDYwODQJIDQxOCwwMDAuMDAgCU5T SyBBS1MgUFJFQ0lTSU9OIEJBTEwgSU5ET05FU0lBCQ0KNjI4MTE5MDA2MDg1CSAzMjcsMzExLjAw IAlOU0sgQUtTIFBSRUNJU0lPTiBCQUxMIElORE9ORVNJQQkNCjYyODExOTAwNjA4NgkgMTA0LDU2 Ni4wMCAJTlNLIEFLUyBQUkVDSVNJT04gQkFMTCBJTkRPTkVTSUEJDQo2MjgxMTkwMDYwODcJIDEx NCw2MzEuMDAgCU5TSyBBS1MgUFJFQ0lTSU9OIEJBTEwgSU5ET05FU0lBCQ0KNjI4MTE5MDA2MDg5 CSAyMjcsMzU2LjAwIAlOU0sgQUtTIFBSRUNJU0lPTiBCQUxMIElORE9ORVNJQQkNCjYyODExOTA3 OTUxCSAzMDEsMTgxLjAwIAlOU0sgQUtTIFBSRUNJU0lPTiBCQUxMIElORE9ORVNJQQkNCjYyODEx OTEwNTMwOQkgNjM5LDc4Mi4wMCAJTlNLIEFLUyBQUkVDSVNJT04gQkFMTCBJTkRPTkVTSUEJDQo2 MjgxMTk5OTkyNTUJIDcwLDI5MC4wMCAJTlNLIEFLUyBQUkVDSVNJT04gQkFMTCBJTkRPTkVTSUEJ DQo2MjgxMTk5OTkyNTYJIDMyLDQ2MS4wMCAJTlNLIEFLUyBQUkVDSVNJT04gQkFMTCBJTkRPTkVT SUEJDQo2MjgxMTk5OTkyNTgJIDE0NCwxNzkuMDAgCU5TSyBBS1MgUFJFQ0lTSU9OIEJBTEwgSU5E T05FU0lBCQ0KNjI4MTE5OTk5MjU5CSA3NiwxNTMuMDAgCU5TSyBBS1MgUFJFQ0lTSU9OIEJBTEwg SU5ET05FU0lBCQ0KNjI4MTE5OTk5MjYwCSAyNDIsMTgxLjAwIAlOU0sgQUtTIFBSRUNJU0lPTiBC QUxMIElORE9ORVNJQQkNCjYyODExOTk5OTI2MQkgMjcsMzkwLjAwIAlOU0sgQUtTIFBSRUNJU0lP TiBCQUxMIElORE9ORVNJQQkNCjYyODExOTk5OTI2MgkgMjAzLDI0MS4wMCAJTlNLIEFLUyBQUkVD SVNJT04gQkFMTCBJTkRPTkVTSUEJDQo2MjgxMTk5OTkyNjQJIDI2OCw3MjQuMDAgCU5TSyBBS1Mg UFJFQ0lTSU9OIEJBTEwgSU5ET05FU0lBCQ0KNjI4MTE5OTk5MjY2CSAxMTksNzY4LjAwIAlOU0sg QUtTIFBSRUNJU0lPTiBCQUxMIElORE9ORVNJQQkNCjYyODExOTk5OTI2NwkgMTE5LDk0OS4wMCAJ TlNLIEFLUyBQUkVDSVNJT04gQkFMTCBJTkRPTkVTSUEJDQo2MjgxMTk5OTkyNzAJIDU1LDAwMC4w MCAJTlNLIEFLUyBQUkVDSVNJT04gQkFMTCBJTkRPTkVTSUEJDQo2MjgxMTk5OTkyNzEJIDYyLDIy Ny4wMCAJTlNLIEFLUyBQUkVDSVNJT04gQkFMTCBJTkRPTkVTSUEJDQo2MjgxMTk5OTkyNzIJIDg3 LDg3OS4wMCAJTlNLIEFLUyBQUkVDSVNJT04gQkFMTCBJTkRPTkVTSUEJDQo2MjgxMTk5OTkyNzMJ IDQ2LDExMi4wMCAJTlNLIEFLUyBQUkVDSVNJT04gQkFMTCBJTkRPTkVTSUEJDQo2MjgxMTk5OTky NzQJIDMxLDE0Ni4wMCAJTlNLIEFLUyBQUkVDSVNJT04gQkFMTCBJTkRPTkVTSUEJDQo2MjgxMTk5 OTkyNzYJIDI1NiwyMzYuMDAgCU5TSyBBS1MgUFJFQ0lTSU9OIEJBTEwgSU5ET05FU0lBCQ0KNjI4 MTIxMDMyNzY0CSA4NSwxNzguMDAgCU5TSyBBS1MgUFJFQ0lTSU9OIEJBTEwgSU5ET05FU0lBCQ0K NjI4MTIxMDM3NzI3CSAzNTEsOTc1LjAwIAlOU0sgQUtTIFBSRUNJU0lPTiBCQUxMIElORE9ORVNJ QQkNCjYyODEyMTA0MzEwMAkgNDA3LDM3OS4wMCAJTlNLIEFLUyBQUkVDSVNJT04gQkFMTCBJTkRP TkVTSUEJDQo2MjgxMTE5NzE3NjAJIDEsMDk4LDk1OC4wMCAJTlNLIEFLUyBQUkVDSVNJT04gQkFM TCBJTkRPTkVTSUEJDQo2MjgxMTExNDYzNDgJIDEsNTAxLDM1MS4wMCAJTlNLIEFLUyBQUkVDSVNJ T04gQkFMTCBJTkRPTkVTSUEJDQo2MjgxMTExNDgwMTYJIDIsMzE0LDE2Ny4wMCAJTlNLIEFLUyBQ UkVDSVNJT04gQkFMTCBJTkRPTkVTSUEJIDE0LDQ5MiwyMzkuMDANCg0KDQoNClRlcmltYSBrYXNp aA0KICBSZWdhcmRzDQogICBQcml5YW50bw0KDQoNCi0tLS0tT3JpZ2luYWwgTWVzc2FnZS0tLS0t DQpGcm9tOiBZdXN0aW5hIFttYWlsdG86eXVzdGluYUBha3NiYWxsLmNvLmlkXSANClNlbnQ6IFdl ZG5lc2RheSwgQXByaWwgMTgsIDIwMTggMjozOSBQTQ0KVG86IEJla2FzaSBURUxLT01TRUxDT1JQ T1JBVEUgPHRzZWxjb3Jwb3JhdGViZWthc2lAaG90bWFpbC5jb20+OyBndW1pbGFyIDxndW1pbGFy QHRlbGtvbXNlbC5jby5pZD4NCkNjOiBUdXRpIEFLUyA8YWRtLmFrc0Bha3NiYWxsLmNvLmlkPg0K U3ViamVjdDogQnVrdGkgVHJhbnNmZXIgVGVsa29tc2VsDQoNCkRlYXIgQWxsLA0KDQpUZXJsYW1w aXIgYnVrdGkgdHJhbnNmZXIgJiByaW5jaWFuIHBlbWJheWFyYW4gcGVyaW9kZSBNYXJldCAyMDE4 Li4gbW9ob24gc2VnZXJhIGRpIGxvYWRpbmcNCg0KQmVzdCBSZWdhcmRzLA0KDQpZdXN0aW5hIElu ZHJpeWF0aQ0KUFQgQUtTIFByZWNpc2lvbiBCYWxsIEluZG9uZXNpYQ0KS2F3YXNhbiBJbmR1c3Ry aSBNTTIxMDANCkJsb2sgTjgtOSwgR2FuZGFtZWthcg0KQ2lrYXJhbmcgQmFyYXQg4oCTIEJla2Fz aSAxNzUyMA0KDQpUbHAgOiAwMjEg4oCTIDg5OTgyMjQ4DQpGYXg6IDAyMSAtIDg5OTgyMTAxIA0K DQoNCg0KDQo=
Wed 2018-04-18 14:41:45.417: 05: Session 016423; child 0001 Wed 2018-04-18 14:41:45.417: 05: Accepting SMTP connection from 104.47.124.104:10597 to 10.0.0.1:25 Wed 2018-04-18 14:41:45.421: 03: --> 220 aksball.co.id ESMTP Wed, 18 Apr 2018 14:41:45 +0700 Wed 2018-04-18 14:41:45.623: 02: <-- EHLO APC01-HK2-obe.outbound.protection.outlook.com Wed 2018-04-18 14:41:45.623: 09: Performing SPF lookup (APC01-HK2-obe.outbound.protection.outlook.com / 104.47.124.104) Wed 2018-04-18 14:41:45.735: 09: * Policy: v=spf1 include:spf.protection.outlook.com -all Wed 2018-04-18 14:41:45.735: 09: * Evaluating include:spf.protection.outlook.com: performing lookup Wed 2018-04-18 14:41:45.793: 09: * Policy: v=spf1 ip4:207.46.100.0/24 ip4:207.46.163.0/24 ip4:65.55.169.0/24 ip4:157.56.110.0/23 ip4:157.55.234.0/24 ip4:213.199.154.0/24 ip4:213.199.180.128/26 include:spfa.protection.outlook.com -all Wed 2018-04-18 14:41:45.793: 09: * Evaluating ip4:207.46.100.0/24: no match Wed 2018-04-18 14:41:45.793: 09: * Evaluating ip4:207.46.163.0/24: no match Wed 2018-04-18 14:41:45.793: 09: * Evaluating ip4:65.55.169.0/24: no match Wed 2018-04-18 14:41:45.793: 09: * Evaluating ip4:157.56.110.0/23: no match Wed 2018-04-18 14:41:45.793: 09: * Evaluating ip4:157.55.234.0/24: no match Wed 2018-04-18 14:41:45.793: 09: * Evaluating ip4:213.199.154.0/24: no match Wed 2018-04-18 14:41:45.793: 09: * Evaluating ip4:213.199.180.128/26: no match Wed 2018-04-18 14:41:45.793: 09: * Evaluating include:spfa.protection.outlook.com: performing lookup Wed 2018-04-18 14:41:45.852: 09: * Policy: v=spf1 ip4:157.56.112.0/24 ip4:207.46.51.64/26 ip4:64.4.22.64/26 ip4:40.92.0.0/14 ip4:40.107.0.0/17 ip4:40.107.128.0/17 ip4:134.170.140.0/24 include:spfb.protection.outlook.com ip6:2001:489a:2202::/48 -all Wed 2018-04-18 14:41:45.852: 09: * Evaluating ip4:157.56.112.0/24: no match Wed 2018-04-18 14:41:45.852: 09: * Evaluating ip4:207.46.51.64/26: no match Wed 2018-04-18 14:41:45.852: 09: * Evaluating ip4:64.4.22.64/26: no match Wed 2018-04-18 14:41:45.852: 09: * Evaluating ip4:40.92.0.0/14: no match Wed 2018-04-18 14:41:45.852: 09: * Evaluating ip4:40.107.0.0/17: no match Wed 2018-04-18 14:41:45.852: 09: * Evaluating ip4:40.107.128.0/17: no match Wed 2018-04-18 14:41:45.852: 09: * Evaluating ip4:134.170.140.0/24: no match Wed 2018-04-18 14:41:45.852: 09: * Evaluating include:spfb.protection.outlook.com: performing lookup Wed 2018-04-18 14:41:46.161: 09: * Policy: v=spf1 ip6:2a01:111:f400::/48 ip4:23.103.128.0/19 ip4:23.103.198.0/23 ip4:65.55.88.0/24 ip4:104.47.0.0/17 ip4:23.103.200.0/21 ip4:23.103.208.0/21 ip4:23.103.191.0/24 ip4:216.32.180.0/23 ip4:94.245.120.64/26 -all Wed 2018-04-18 14:41:46.161: 09: * Evaluating ip6:2a01:111:f400::/48: no match Wed 2018-04-18 14:41:46.161: 09: * Evaluating ip4:23.103.128.0/19: no match Wed 2018-04-18 14:41:46.161: 09: * Evaluating ip4:23.103.198.0/23: no match Wed 2018-04-18 14:41:46.161: 09: * Evaluating ip4:65.55.88.0/24: no match Wed 2018-04-18 14:41:46.161: 09: * Evaluating ip4:104.47.0.0/17: match Wed 2018-04-18 14:41:46.161: 09: * Evaluating include:spfb.protection.outlook.com: match Wed 2018-04-18 14:41:46.161: 09: * Evaluating include:spfa.protection.outlook.com: match Wed 2018-04-18 14:41:46.161: 09: * Evaluating include:spf.protection.outlook.com: match Wed 2018-04-18 14:41:46.161: 09: * Result: pass Wed 2018-04-18 14:41:46.161: 09: ---- End SPF results Wed 2018-04-18 14:41:46.161: 03: --> 250-aksball.co.id Hello APC01-HK2-obe.outbound.protection.outlook.com [104.47.124.104], pleased to meet you Wed 2018-04-18 14:41:46.161: 03: --> 250-ETRN Wed 2018-04-18 14:41:46.161: 03: --> 250-AUTH LOGIN PLAIN Wed 2018-04-18 14:41:46.161: 03: --> 250-8BITMIME Wed 2018-04-18 14:41:46.161: 03: --> 250-ENHANCEDSTATUSCODES Wed 2018-04-18 14:41:46.161: 03: --> 250 SIZE Wed 2018-04-18 14:41:46.424: 02: <-- MAIL FROM:<[email protected]> SIZE=13356 BODY=7BIT Wed 2018-04-18 14:41:46.437: 09: Performing SPF lookup (telkomsel.co.id / 104.47.124.104) Wed 2018-04-18 14:41:46.447: 09: * Policy: v=spf1 a:sts.telkomsel.co.id a:dmz-msgin01.telkomsel.co.id a:dmz-msgout01.telkomsel.co.id mx:mx5.telkomsel.co.id mx:mx6.telkomsel.co.id ip4:202.3.219.96 include:spf.protection.outlook.com ~all Wed 2018-04-18 14:41:46.459: 09: * Evaluating a:sts.telkomsel.co.id: no match Wed 2018-04-18 14:41:46.459: 09: * Evaluating a:dmz-msgin01.telkomsel.co.id: no match Wed 2018-04-18 14:41:46.459: 09: * Evaluating a:dmz-msgout01.telkomsel.co.id: no match Wed 2018-04-18 14:41:56.471: 04: * DNS: 10 second wait for DNS response exceeded (DNS Server: 10.0.0.254) Wed 2018-04-18 14:41:56.471: 09: * Evaluating mx:mx5.telkomsel.co.id: no match - zero 'mx' type records Wed 2018-04-18 14:42:06.483: 04: * DNS: 10 second wait for DNS response exceeded (DNS Server: 10.0.0.254) Wed 2018-04-18 14:42:06.483: 09: * Evaluating mx:mx6.telkomsel.co.id: no match - zero 'mx' type records Wed 2018-04-18 14:42:06.483: 09: * Result: permerror; too many void lookups Wed 2018-04-18 14:42:06.483: 09: ---- End SPF results Wed 2018-04-18 14:42:06.483: 03: --> 250 2.1.0 Sender OK Wed 2018-04-18 14:42:06.726: 02: <-- RCPT TO:<[email protected]> Wed 2018-04-18 14:42:06.730: 03: --> 250 2.1.5 Recipient OK Wed 2018-04-18 14:42:06.975: 02: <-- RCPT TO:<[email protected]> Wed 2018-04-18 14:42:06.978: 03: --> 250 2.1.5 Recipient OK Wed 2018-04-18 14:42:07.221: 02: <-- DATA Wed 2018-04-18 14:42:07.223: 01: Creating temp file (SMTP): d:\mdaemon\queues\temp\md50000006900.tmp Wed 2018-04-18 14:42:07.223: 03: --> 354 Enter mail, end with <CRLF>.<CRLF> Wed 2018-04-18 14:42:07.485: 01: Message size: 5864 bytes Wed 2018-04-18 14:42:07.486: 10: Performing DKIM lookup Wed 2018-04-18 14:42:07.486: 10: * File: d:\mdaemon\queues\temp\md50000006900.tmp Wed 2018-04-18 14:42:07.486: 10: * Message-ID: <pu1pr06mb2088ecb4dc2cab7a3580925efc...@pu1pr06mb2088.apcprd06.prod.outlook.com> Wed 2018-04-18 14:42:07.508: 10: * DKIM-Signature 1: v=1; a=rsa-sha256; c=relaxed/relaxed; d=365tsel.onmicrosoft.com; s=selector1-telkomsel-co-id; <some tags are not logged> Wed 2018-04-18 14:42:07.508: 10: * Verification result: good signature Wed 2018-04-18 14:42:07.508: 10: * Result: pass Wed 2018-04-18 14:42:07.508: 10: ---- End DKIM results Wed 2018-04-18 14:42:07.512: 19: Performing DMARC processing Wed 2018-04-18 14:42:07.512: 19: * File: d:\mdaemon\queues\temp\md50000006900.tmp Wed 2018-04-18 14:42:07.512: 19: * Message-ID: <pu1pr06mb2088ecb4dc2cab7a3580925efc...@pu1pr06mb2088.apcprd06.prod.outlook.com> Wed 2018-04-18 14:42:07.512: 19: * Author domain: telkomsel.co.id Wed 2018-04-18 14:42:07.512: 19: * Organizational domain: telkomsel.co.id Wed 2018-04-18 14:42:07.512: 19: * Query domain: _dmarc.telkomsel.co.id Wed 2018-04-18 14:42:17.524: 04: * DNS: 10 second wait for DNS response exceeded (DNS Server: 10.0.0.254) Wed 2018-04-18 14:42:17.524: 19: * No DMARC policy record found Wed 2018-04-18 14:42:17.524: 19: * Action taken: none Wed 2018-04-18 14:42:17.524: 19: * Result: none Wed 2018-04-18 14:42:17.524: 19: ---- End DMARC results Wed 2018-04-18 14:42:17.528: 06: Passing message through AntiVirus (Size: 5864)... Wed 2018-04-18 14:42:17.534: 06: * Message is clean (no viruses found) Wed 2018-04-18 14:42:17.534: 06: ---- End AntiVirus results Wed 2018-04-18 14:42:17.535: 11: Passing message through ClamAV Plugin (d:\mdaemon\queues\temp\md50000006900.tmp)... Wed 2018-04-18 14:42:17.535: 11: * Message-ID: <pu1pr06mb2088ecb4dc2cab7a3580925efc...@pu1pr06mb2088.apcprd06.prod.outlook.com> Wed 2018-04-18 14:42:17.548: 11: * Virus result: 0 - clean Wed 2018-04-18 14:42:17.725: 11: Passing message through Outbreak Protection... Wed 2018-04-18 14:42:17.725: 11: * Message-ID: <pu1pr06mb2088ecb4dc2cab7a3580925efc...@pu1pr06mb2088.apcprd06.prod.outlook.com> Wed 2018-04-18 14:42:17.725: 11: * Reference-ID: str=0001.0A150208.5AD6F6DB.0059,ss=1,re=0.000,recu=0.000,reip=0.000,cl=1,cld=1,fgs=0 Wed 2018-04-18 14:42:17.725: 11: * Virus result: 0 - Clean Wed 2018-04-18 14:42:17.725: 11: * Spam result: 1 - Clean Wed 2018-04-18 14:42:17.725: 11: * IWF result: 0 - Clean Wed 2018-04-18 14:42:17.725: 11: ---- End Outbreak Protection results Wed 2018-04-18 14:42:17.726: 07: Passing message through Spam Filter (Size: 5885)... Wed 2018-04-18 14:42:25.619: 07: * 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid Wed 2018-04-18 14:42:25.619: 07: * 1.3 RDNS_NONE Delivered to internal network by a host with no rDNS Wed 2018-04-18 14:42:25.619: 07: ---- End SpamAssassin results Wed 2018-04-18 14:42:25.619: 07: Spam Filter score/req: 1.30/12.0 Wed 2018-04-18 14:42:25.871: 01: Message creation successful: d:\mdaemon\queues\inbound\md50000046189.msg Wed 2018-04-18 14:42:25.871: 03: --> 250 2.6.0 Ok, message saved <Message-ID: <pu1pr06mb2088ecb4dc2cab7a3580925efc...@pu1pr06mb2088.apcprd06.prod.outlook.com>> Wed 2018-04-18 14:42:25.871: 04: * Socket error 10054 - Connection was reset by the other side! Wed 2018-04-18 14:42:25.875: 01: SMTP session successful (Bytes in/out: 6049/480)
