[mdaemon-l] Log perubahan account

[Hengga H.]

Pagi Pak Syafril,

Mau update saja, setelah ditelusuri kemungkinan karena ini :
> 4. salah authenticate beberapa kali
> 
> http://mdaemon.dutaint.co.id/mdaemon/19.5/index.html?dynamic-
> screening_auth-failure-tracking.htm
> 
> 
> yang ini akibat "Account Freezing Options" aktif atau belum di adjust 
> nilainya.
> 

Ada informasi terlampir dari Dynamic Screen, menginformasikan: ada yang 
berupaya sebagai akun postmaster konek ke server akan tetapi gagal (tercegat 
screening) sehingga auto frozen akun saya sebagai administratornya.

Terima kasih pak.

Salam,
Hengga


--
ANJ HealthCare

Disclaimer

This email contains confidential and privileged information for the sole use of 
the intended recipients. If you are not an intended recipient, you are hereby 
notified that any disclosure, copying, or distribution of this email, or taking 
any action based on its content, is strictly prohibited, and you should: (i) 
immediately delete this email and its attachments from your system, and (ii) 
inform the sender by reply email that you are not an intended recipient. The 
company of the sender does not accept any liability for its employee's 
communications that are contrary to the company's core values or outside the 
scope of employment.

--
--[mdaemon-l]--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com
Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com
Versi terakhir: MDaemon 20.0.0, SecurityGateway 6.5.2
--- Begin Message ---
Dynamic Screen: Blocked IP Address: 37.49.230.249
Address Range History
IP Address  DateTimeProtocolLogon Used  Notes   
Location
37.49.230.249   5/9/202016:25:31SMTP
postmas...@anjhealthcare.com
PTR: fail policy.iprev=37.49.230.249 reason="no records found" (PTR 
249.230.49.37.IN-ADDR.ARPA)

 Netherlands
37.49.230.249   5/9/202016:25:34SMTP
postmas...@anjhealthcare.com
PTR: fail policy.iprev=37.49.230.249 reason="no records found" (PTR 
249.230.49.37.IN-ADDR.ARPA)

 Netherlands
37.49.230.249   5/9/202016:25:37SMTP
postmas...@anjhealthcare.com
PTR: fail policy.iprev=37.49.230.249 reason="no records found" (PTR 
249.230.49.37.IN-ADDR.ARPA)

 Netherlands
37.49.230.249   5/9/202016:25:40SMTP
postmas...@anjhealthcare.com
PTR: fail policy.iprev=37.49.230.249 reason="no records found" (PTR 
249.230.49.37.IN-ADDR.ARPA)

 Netherlands
37.49.230.249   5/9/202016:25:43SMTP
postmas...@anjhealthcare.com
PTR: fail policy.iprev=37.49.230.249 reason="no records found" (PTR 
249.230.49.37.IN-ADDR.ARPA)

 Netherlands
37.49.230.249   5/9/202016:25:46SMTP
postmas...@anjhealthcare.com
PTR: fail policy.iprev=37.49.230.249 reason="no records found" (PTR 
249.230.49.37.IN-ADDR.ARPA)

 Netherlands
37.49.230.249   5/9/202016:25:49SMTP
postmas...@anjhealthcare.com
PTR: fail policy.iprev=37.49.230.249 reason="no records found" (PTR 
249.230.49.37.IN-ADDR.ARPA)

 Netherlands
37.49.230.249   5/9/202016:25:52SMTP
postmas...@anjhealthcare.com
PTR: fail policy.iprev=37.49.230.249 reason="no records found" (PTR 
249.230.49.37.IN-ADDR.ARPA)

 Netherlands
37.49.230.249   5/9/202016:25:56SMTP
postmas...@anjhealthcare.com
PTR: fail policy.iprev=37.49.230.249 reason="no records found" (PTR 
249.230.49.37.IN-ADDR.ARPA)

 Netherlands
37.49.230.249   5/9/202016:25:59SMTP
postmas...@anjhealthcare.com
PTR: fail policy.iprev=37.49.230.249 reason="no records found" (PTR 
249.230.49.37.IN-ADDR.ARPA)

 Netherlands
 
This IP Address range was added to the Dynamic Screening Blacklist for failing 
at least 10 authentication attempts over 60 minutes.

The blocking of this address range will expire at 4:25 PM on Sunday, May 10, 
2020 SE Asia Standard Time.
 
NOTE: The history above may list a range below your configured threshold due to 
a simultaneous attempt(s) at the time of this blocking action
 
You may remove the address range from the Blacklist prior to the expiration 
date/time by replying to this message.
 
Dynamic Screening (64bit) for MDaemon Messaging Server  18.0.2.9 / 18.0.2


--
ANJ HealthCare



Disclaimer 
This email contains confidential and privileged information for the sole use of 
the intended recipients. If you are not an intended recipient, you are hereby 
notified that any disclosure, copying, or distribution of this email, or taking 
any action based on its content, is strictly prohibited, and you should: (i) 
immediately delete this e

[mdaemon-l] Host can't be resolved

[Hengga H.]

Siang..

Saya coba dari dan ke klinikdiabetesnusantara.com sekarang sudah bisa.

Terima kasih pak.


> -Original Message-
> From: mdaemon-l@dutaint.com  On Behalf Of
> Syafril Hermansyah (syaf...@dutaint.co.id)
> Sent: Monday, March 16, 2020 12:55 PM
> To: mdaemon-l@dutaint.com
> Subject: [mdaemon-l] Host can't be resolved
> 
> On 16/03/20 12.24, Hengga H. (hengga.hitchc...@anjhealthcare.com) wrote:
> > Mohon bantuan analisanya kenapa email dari domain
> > klinikdiabetesnusantara.com tidak bisa ke anjhealthcare.com ya,
> > sebaliknya dari anjhealthcare.com ke klinikdiabetesnusantara.com bisa?
> 
> 
> > Mon 2020-03-16 11:05:14.875: --> 250-anjhealthcare.com Hello
> > mxserver16-out7.masterweb.net [103.25.223.198], pleased to meet you
> > Mon 2020-03-16 11:05:14.920: --> 501 5.7.0
> > mxserver16-out7.masterweb.net host can't be resolved
> 
> 
> Ditolak karena dikirim melalui server mail hoster yang identitas hostnya tidak
> terdaftar di internet.
> 
> Sudah dibuatkan pengecualian untuk sender host tersebut ke
> 
> ftp://ftp.dutaint.com/altn-mdaemon/miscl/ReverseXcpt.dat
> 
> 
> --
> syafril
> ---
> Syafril Hermansyah
> MDaemon-L Moderators, running MDaemon 20.0-64 bit Beta D Harap tidak cc:
> atau kirim ke private mail untuk masalah MDaemon.
> 
> Learning is not child's play; we cannot learn without pain
>   --- Aristotle
> 
> 
> --
> --[mdaemon-l]--
> Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia
> 
> Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
> Arsip: http://mdaemon-l.dutaint.com
> Dokumentasi : http://mdaemon.dutaint.co.id
> Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com Henti
> Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com Versi terakhir:
> MDaemon 19.5.4, SecurityGateway 6.5.1
> 



--
ANJ HealthCare

Disclaimer

This email contains confidential and privileged information for the sole use of 
the intended recipients. If you are not an intended recipient, you are hereby 
notified that any disclosure, copying, or distribution of this email, or taking 
any action based on its content, is strictly prohibited, and you should: (i) 
immediately delete this email and its attachments from your system, and (ii) 
inform the sender by reply email that you are not an intended recipient. The 
company of the sender does not accept any liability for its employee's 
communications that are contrary to the company's core values or outside the 
scope of employment.


--
--[mdaemon-l]--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com
Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com
Versi terakhir: MDaemon 19.5.4, SecurityGateway 6.5.1

[mdaemon-l] Host can't be resolved

[Hengga H.]

Siang Pak Syafril,

Mohon bantuan analisanya kenapa email dari domain
klinikdiabetesnusantara.com tidak bisa ke anjhealthcare.com ya, sebaliknya
dari anjhealthcare.com ke klinikdiabetesnusantara.com bisa?

Hasil dari log MDaemon:
Mon 2020-03-16 11:05:04.100: --
Mon 2020-03-16 11:05:13.134: Session 345377; child 0001
Mon 2020-03-16 11:05:13.135: Accepting SMTP connection from
103.25.223.198:48947 to 172.16.24.23:25
Mon 2020-03-16 11:05:14.681: Performing PTR lookup
(198.223.25.103.IN-ADDR.ARPA)
Mon 2020-03-16 11:05:14.704: *  D=198.223.25.103.in-addr.arpa TTL=(201)
PTR=[mxserver16-out7.masterweb.net]
Mon 2020-03-16 11:05:14.758: *  No A/ records found
Mon 2020-03-16 11:05:14.759:  End PTR results
Mon 2020-03-16 11:05:14.759: --> 220 anjhealthcare.com ESMTP Mon, 16 Mar
2020 11:05:14 +0700
Mon 2020-03-16 11:05:14.762: <-- EHLO mxserver16-out7.masterweb.net
Mon 2020-03-16 11:05:14.769: Performing SPF lookup
(mxserver16-out7.masterweb.net / 103.25.223.198)
Mon 2020-03-16 11:05:14.821: *  Result: none; no SPF record in DNS
Mon 2020-03-16 11:05:14.821:  End SPF results
Mon 2020-03-16 11:05:14.822: --> 250-anjhealthcare.com Hello
mxserver16-out7.masterweb.net [103.25.223.198], pleased to meet you
Mon 2020-03-16 11:05:14.823: --> 250-ETRN
Mon 2020-03-16 11:05:14.823: --> 250-AUTH LOGIN CRAM-MD5 PLAIN
Mon 2020-03-16 11:05:14.823: --> 250-8BITMIME
Mon 2020-03-16 11:05:14.823: --> 250-ENHANCEDSTATUSCODES
Mon 2020-03-16 11:05:14.823: --> 250-STARTTLS
Mon 2020-03-16 11:05:14.823: --> 250 SIZE
Mon 2020-03-16 11:05:14.826: <-- STARTTLS
Mon 2020-03-16 11:05:14.826: --> 220 2.7.0 Ready to start TLS
Mon 2020-03-16 11:05:14.840: SSL negotiation successful (TLS 1.2, 256 bit
key exchange, 256 bit AES encryption)
Mon 2020-03-16 11:05:14.844: <-- EHLO mxserver16-out7.masterweb.net
Mon 2020-03-16 11:05:14.851: Performing SPF lookup
(mxserver16-out7.masterweb.net / 103.25.223.198)
Mon 2020-03-16 11:05:14.875: *  Result: none; no SPF record in DNS
Mon 2020-03-16 11:05:14.875:  End SPF results
Mon 2020-03-16 11:05:14.875: --> 250-anjhealthcare.com Hello
mxserver16-out7.masterweb.net [103.25.223.198], pleased to meet you
Mon 2020-03-16 11:05:14.875: --> 250-ETRN
Mon 2020-03-16 11:05:14.875: --> 250-AUTH LOGIN CRAM-MD5 PLAIN
Mon 2020-03-16 11:05:14.875: --> 250-8BITMIME
Mon 2020-03-16 11:05:14.875: --> 250-ENHANCEDSTATUSCODES
Mon 2020-03-16 11:05:14.875: --> 250 SIZE
Mon 2020-03-16 11:05:14.879: <-- MAIL
FROM: SIZE=4903
Mon 2020-03-16 11:05:14.891: Performing IP lookup
(mxserver16-out7.masterweb.net)
Mon 2020-03-16 11:05:14.919: *  DNS server reports domain name unknown
Mon 2020-03-16 11:05:14.919:  End IP lookup results
Mon 2020-03-16 11:05:14.920: --> 501 5.7.0 mxserver16-out7.masterweb.net
host can't be resolved
Mon 2020-03-16 11:05:14.921: SMTP session terminated (Bytes in/out:
758/2262)
Mon 2020-03-16 11:05:14.921: --

Pesan error di user adalah sbb:
This message was created automatically by mail delivery software.

A message that you sent could not be delivered to one or more of its
recipients. This is a permanent error. The following address(es) failed:

  hengga.hitchc...@anjhealthcare.com
host mail.anjhealthcare.com [202.153.232.10]
SMTP error from remote mail server after MAIL
FROM: SIZE=4903:
501 5.7.0 mxserver16-out7.masterweb.net host can't be resolved

Mohon bantuannya.

Terima kasih.
Hengga 



--
ANJ HealthCare

Disclaimer

This email contains confidential and privileged information for the sole use of 
the intended recipients. If you are not an intended recipient, you are hereby 
notified that any disclosure, copying, or distribution of this email, or taking 
any action based on its content, is strictly prohibited, and you should: (i) 
immediately delete this email and its attachments from your system, and (ii) 
inform the sender by reply email that you are not an intended recipient. The 
company of the sender does not accept any liability for its employee's 
communications that are contrary to the company's core values or outside the 
scope of employment.


-- 
--[mdaemon-l]--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com
Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com
Versi terakhir: MDaemon 19.5.4, SecurityGateway 6.5.1

[mdaemon-l] Mencegah email seperti ini masuk

[Hengga H.]

Siang Pak Syafril,

Untuk mencegah email terlampir masuk, apa yang dapat dilakukan?

Berikut saya lampirkan header dari emailnya juga:
Return-path: 
Authentication-Results: anjhealthcare.com;
spf=pass smtp.mailfrom=herdiana.jess...@bfi.co.id;
dmarc=pass header.from=bfi.co.id (p=quarantine sampling=36 pct=5);
iprev=pass policy.iprev=117.102.79.20 reason="white listed" (HELO
edge.bfi.co.id);
iprev=pass policy.iprev=117.102.79.20 reason="white listed" (MAIL
herdiana.jess...@bfi.co.id)
Received-SPF: pass (anjhealthcare.com: domain bfi.co.id
designates 117.102.79.20 as permitted sender)
receiver=anjhealthcare.com; client-ip=117.102.79.20;
mechanism=ip4:117.102.79.0/27;
envelope-from="herdiana.jess...@bfi.co.id";
helo=edge.bfi.co.id;
Received: from edge.bfi.co.id [(117.102.79.20)] by anjhealthcare.com with
ESMTPS id md5298296.msg; 
Tue, 28 Jan 2020 06:55:22 +0700
X-Spam-Level: *
X-Spam-Status: No, score=1.30 required=5.0
X-Spam-Report:
*  0.0 HTML_MESSAGE BODY: HTML included in message
*  0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or
identical to
*   background
*  1.3 RDNS_NONE Delivered to internal network by a host with no
rDNS
X-Spam-Processed: anjhealthcare.com, Tue, 28 Jan 2020 06:55:22 +0700
(processed during SMTP session)
X-MDSPF-Result: unapproved (anjhealthcare.com)
X-MDRemoteIP: 117.102.79.20
X-MDHelo: edge.bfi.co.id
X-MDArrival-Date: Tue, 28 Jan 2020 06:55:22 +0700
X-Rcpt-To: hengga.hitchc...@anjhealthcare.com
X-MDRcpt-To: hengga.hitchc...@anjhealthcare.com
X-Return-Path: herdiana.jess...@bfi.co.id
X-Envelope-From: herdiana.jess...@bfi.co.id
X-MDaemon-Deliver-To: hengga.hitchc...@anjhealthcare.com
Received: from EXCCAS3.bfi.co.id (172.16.0.27) by mail.bfi.co.id
 (172.16.29.30) with Microsoft SMTP Server (TLS) id 14.3.468.0; Tue, 28 Jan
 2020 06:55:13 +0700
Received: from EXCMBX1.bfi.co.id ([fe80::5d02:c78b:2637:66f8]) by
 EXCCAS3.bfi.co.id ([fe80::68ae:1bdb:3f55:3f8%14]) with mapi id
 14.03.0468.000; Tue, 28 Jan 2020 06:55:13 +0700
From: "HC Branch Kalimantan 4 (Herdiana S Jessica)
(herdiana.jess...@bfi.co.id)" 
To: "no-re...@microsoft.net" 
Subject: Terdeteksi aktivitas yang salah, mohon konfirmasi akun Anda ke
 versi terbaru dalam waktu 24 jam untuk menghindari suspensi.
Thread-Topic: Terdeteksi aktivitas yang salah, mohon konfirmasi akun Anda ke
 versi terbaru dalam waktu 24 jam untuk menghindari suspensi.
Thread-Index: AdXVbTcbKdd3fmZsTbGW+1JKM/KPUg==
Date: Mon, 27 Jan 2020 23:55:13 +
Message-ID: 
Accept-Language: id-ID, en-US
Content-Language: id-ID
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-originating-ip: [196.171.120.22]
Content-Type: multipart/alternative;

boundary="_000_B5BB14B9223B704F85C25E4AC76D6B98395FDFEXCMBX1bficoid_"
MIME-Version: 1.0

Terima kasih.
Hengga



--
ANJ HealthCare

Disclaimer

This email contains confidential and privileged information for the sole use of 
the intended recipients. If you are not an intended recipient, you are hereby 
notified that any disclosure, copying, or distribution of this email, or taking 
any action based on its content, is strictly prohibited, and you should: (i) 
immediately delete this email and its attachments from your system, and (ii) 
inform the sender by reply email that you are not an intended recipient. The 
company of the sender does not accept any liability for its employee's 
communications that are contrary to the company's core values or outside the 
scope of employment.

-- 
--[mdaemon-l]--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com
Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com
Versi terakhir: MDaemon 19.5.3, SecurityGateway 6.5.1
--- Begin Message ---

PEMBERITAHUAN MICROSOFT URGENT

20 pesan masuk Anda telah ditangguhkan karena akun email Anda perlu
diverifikasi sekarang. 
Lakukan klik pada verifikasi di bawah untuk memverifikasi akun kotak surel
Anda sekarang.

  Verifikasi 

Catatan: jangan abaikan surel ini untuk menghindari penutupan akun Anda

  Terima kasih,

Tim Verifikasi Microsoft

Hak Cipta 2019 Surat! Inc. Co. Reg. No. 234507D) Semua hak Dicad.
































































































































































DISCLAIMER : This email is intended only for the use of the individual or
entity to which it is addressed and may contain information that is
confidential and may also be privileged. Any form of unauthorized use or
dissemination is strictly prohibited. If you are not the intended recipien

[mdaemon-l] Undelivered Mail Returned to Sender

[Hengga H.]

Selamat Siang Pak Syafril,

Ada keluhan dari management kami bahwa ketika mengirimkan email ke alamat
gmail.com dengan lampiran file .xlsx, dapat feedback berikut:

-Original Message-
From: Mail Delivery System [mailto:mailer-dae...@smtp-1.indo.net.id] 
Sent: 24 January 2020 16:41
To: prvs=12920d932e=yuni.ast...@anjhealthcare.com
Subject: Undelivered Mail Returned to Sender

This is the mail system at host smtp-1.indo.net.id.

I'm sorry to have to inform you that your message could not be delivered to
one or more recipients. It's attached below.

For further assistance, please send mail to postmaster.

If you do so, please include this problem report. You can delete your own
text from the attached returned message.

   The mail system

: host gmail-smtp-in.l.google.com[74.125.24.26]
said:
552-5.7.0 This message was blocked because its content presents a
potential
552-5.7.0 security issue. Please visit 552-5.7.0
https://support.google.com/mail/?p=BlockedMessage to review our 552
5.7.0
message content and attachment content guidelines. b20si3939874pgs.132 -
gsmtp (in reply to end of DATA command)

Berarti email yang dikirimkan tidak terkirim ya pak?
Apakah ada konfigurasi di MDaemon yang perlu dilakukan agar email ini dapat
terkirim sampai tujuan?

Saya juga lampirkan log yang ter-capture di Mdaemon berupa lampiran di email
ini.

Mohon saran dan informasinya.

Terima kasih pak.
Hengga



--
ANJ HealthCare

Disclaimer

This email contains confidential and privileged information for the sole use of 
the intended recipients. If you are not an intended recipient, you are hereby 
notified that any disclosure, copying, or distribution of this email, or taking 
any action based on its content, is strictly prohibited, and you should: (i) 
immediately delete this email and its attachments from your system, and (ii) 
inform the sender by reply email that you are not an intended recipient. The 
company of the sender does not accept any liability for its employee's 
communications that are contrary to the company's core values or outside the 
scope of employment.

-- 
--[mdaemon-l]--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com
Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com
Versi terakhir: MDaemon 19.5.3, SecurityGateway 6.5.1
Reporting-MTA: dns; smtp-1.indo.net.id
X-Postfix-Queue-ID: 5D9E828F8290
X-Postfix-Sender: rfc822; prvs=12920d932e=yuni.ast...@anjhealthcare.com
Arrival-Date: Fri, 24 Jan 2020 16:41:20 +0700 (WIB)

Final-Recipient: rfc822; sjakon.tah...@gmail.com
Original-Recipient: rfc822;sjakon.tah...@gmail.com
Action: failed
Status: 5.7.0
Remote-MTA: dns; gmail-smtp-in.l.google.com
Diagnostic-Code: smtp; 552-5.7.0 This message was blocked because its content
presents a potential 552-5.7.0 security issue. Please visit 552-5.7.0
https://support.google.com/mail/?p=BlockedMessage to review our 552 5.7.0
message content and attachment content guidelines. b20si3939874pgs.132 -
gsmtp


SMTP-out.log
Fri 2020-01-24 16:41:15.744: Session 140286; child 0001
Fri 2020-01-24 16:41:15.745: Parsing message 

Fri 2020-01-24 16:41:15.745: *  From: yuni.ast...@anjhealthcare.com
Fri 2020-01-24 16:41:15.745: *  To: sjakon.tah...@gmail.com
Fri 2020-01-24 16:41:15.745: *  Subject: Jadwal Jaga On Call SpM RS KMN 
Februari 2020
Fri 2020-01-24 16:41:15.745: *  Size (bytes): 26678
Fri 2020-01-24 16:41:15.745: *  Message-ID: 
<003b01d5d29a$6ab1ee60$4015cb20$@anjhealthcare.com>
Fri 2020-01-24 16:41:15.747: Attempting to send message to smart host
Fri 2020-01-24 16:41:15.747: Attempting SMTP connection to 
smtp-global.indo.net.id
Fri 2020-01-24 16:41:15.748: Resolving A record for smtp-global.indo.net.id 
(DNS Server: 202.159.32.2)...
Fri 2020-01-24 16:41:15.753: *  D=smtp.indo.net.id TTL=(60) A=[202.159.32.96]
Fri 2020-01-24 16:41:15.753: *  D=smtp.indo.net.id TTL=(60) A=[117.54.9.245]
Fri 2020-01-24 16:41:15.753: *  D=smtp.indo.net.id TTL=(60) A=[202.159.32.81]
Fri 2020-01-24 16:41:15.753: *  D=smtp.indo.net.id TTL=(60) A=[202.159.32.83]
Fri 2020-01-24 16:41:15.753: Randomly picked 117.54.9.245 from list of possible 
hosts
Fri 2020-01-24 16:41:15.753: Attempting SMTP connection to 117.54.9.245:25
Fri 2020-01-24 16:41:15.756: Waiting for socket connection...
Fri 2020-01-24 16:41:15.767: *  Connection established 172.16.24.23:52372 --> 
117.54.9.245:25
Fri 2020-01-24 16:41:15.767: Waiting for protocol to start...
Fri 2020-01-24 16:41:15.771: <-- 220 smtp.indo.net.id ESMTP, No Mass-Mailing 
Advertising Allowed. Pengiriman Iklan Massal email tidak diperbolehkan !!!
Fri 2020-01-24 16:41:15.772: --> EHLO anjhealthcare.com
Fri 2020-01-24 16:41:15.77

[mdaemon-l] Holding Queue

[Hengga H.]

> 

> MDspamD service down atau sibuk.

> 

Saya coba restart server Mdaemon dan melihat log systemnya:

Apakah error di system log ini berarti MDSpamD nya tidak jalan?

Agar running/process bagaimana ya?

 

Thu 2019-12-19 14:50:25.391: MDSPAMD.SEM semaphore file found and processed

Thu 2019-12-19 14:50:25.391: --

Thu 2019-12-19 14:50:30.286:  ALERT  Failed to start process 
["C:\MDaemon\SpamAssassin\MDSpamD.exe" 
--configpath="C:\MDaemon\SpamAssassin\default_rules" 
--siteconfigpath="C:\MDaemon\SpamAssassin\rules" --max-children=4 
--max-conn-per-child=20 --round-robin -p 783 -r spamd.pid]

Thu 2019-12-19 14:50:30.289: --

Thu 2019-12-19 14:50:35.392: MDSPAMD.SEM semaphore file found and processed

Thu 2019-12-19 14:50:35.392: --

Thu 2019-12-19 14:50:40.297:  ALERT  Failed to start process 
["C:\MDaemon\SpamAssassin\MDSpamD.exe" 
--configpath="C:\MDaemon\SpamAssassin\default_rules" 
--siteconfigpath="C:\MDaemon\SpamAssassin\rules" --max-children=4 
--max-conn-per-child=20 --round-robin -p 783 -r spamd.pid]

Thu 2019-12-19 14:50:40.305: --

Thu 2019-12-19 14:54:55.386: CFILTER.SEM semaphore file found and processed

Thu 2019-12-19 14:54:55.386: --

Thu 2019-12-19 14:54:55.387: MDSPAMD.SEM semaphore file found and processed

Thu 2019-12-19 14:54:55.387: --

Thu 2019-12-19 14:55:00.264:  ALERT  Failed to start process 
["C:\MDaemon\SpamAssassin\MDSpamD.exe" 
--configpath="C:\MDaemon\SpamAssassin\default_rules" 
--siteconfigpath="C:\MDaemon\SpamAssassin\rules" --max-children=4 
--max-conn-per-child=20 --round-robin -p 783 -r spamd.pid]

Thu 2019-12-19 14:55:00.273: --

 

> Coba periksa berapa besar nilai dari Maximum message processing threads dan

> Maximum TCP connections per thread.

> 

Saat ini saya coba ganti TCP connections menjadi 20, apakah baik pak?

 



 

 

> juga di Windows defender firewall/antivirus apakah

>   \\mdaemon\spamassassin\MDSpamD.exe 
> sudah masuk dalam daftar "trusted

> application".

> 

Sebelumnya sudah saya tambahkan MDSpamD ke dalam Kaspersky Trusted Application.

 



> serta DNS Availability = none

> 

Saya sudah sesuaikan DNS availability menjadi No barusan ini:

 



 

Terima kasih.

Hengga



--
ANJ HealthCare

Disclaimer

This email contains confidential and privileged information for the sole use of 
the intended recipients. If you are not an intended recipient, you are hereby 
notified that any disclosure, copying, or distribution of this email, or taking 
any action based on its content, is strictly prohibited, and you should: (i) 
immediately delete this email and its attachments from your system, and (ii) 
inform the sender by reply email that you are not an intended recipient. The 
company of the sender does not accept any liability for its employee's 
communications that are contrary to the company's core values or outside the 
scope of employment.

[mdaemon-l] Holding Queue

[Hengga H.]

Siang Pak,

> Periksa antivirus log dan antispam log.
> 
Ini beberapa hasil log antispam:
Thu 2019-12-19 12:10:11.459: c:\mdaemon\queues\temp\md5004170.tmp
Thu 2019-12-19 12:05:38.055: Spam Filter processing 
c:\mdaemon\queues\local\md5493959.msg...
Thu 2019-12-19 12:05:38.055: * Message return-path: ev...@intipesan.com
Thu 2019-12-19 12:05:38.055: * Message from: ev...@intipesan.com
Thu 2019-12-19 12:05:38.055: * Message to: yuni.ast...@anjhealthcare.com
Thu 2019-12-19 12:05:38.055: * Message subject: Indonesia Motivation Summit 2020
Thu 2019-12-19 12:05:38.055: * Message ID: 
<05ef37cb-43818-341b421255544@marketingip-pc>
Thu 2019-12-19 12:24:55.981: * MDSpamD Error:  could not process 
c:\mdaemon\queues\local\md5493959.msg Could not send file successfully.
Thu 2019-12-19 12:24:55.981: --
Thu 2019-12-19 12:10:16.401: Spam Filter processing 
c:\mdaemon\queues\local\md5494003.msg...
Thu 2019-12-19 12:10:16.401: * Message return-path: 
Thu 2019-12-19 12:10:16.401: * Message from: mailer-dae...@smtp.indo.net.id
Thu 2019-12-19 12:10:16.401: * Message to: f...@anjhealthcare.com
Thu 2019-12-19 12:10:16.401: * Message subject: Undelivered Mail Returned to 
Sender
Thu 2019-12-19 12:10:16.401: * Message ID: 
<20191219050951.92ce33a0...@smtp.indo.net.id>
Thu 2019-12-19 12:25:45.017: * MDSpamD Error:  could not process 
c:\mdaemon\queues\local\md5494003.msg Could not send file successfully.
Thu 2019-12-19 12:25:45.017: --
Thu 2019-12-19 12:10:12.168: Spam Filter processing 
c:\mdaemon\queues\local\md5493964.msg...
Thu 2019-12-19 12:10:12.168: * Message return-path: ac...@mid.accor-mail.com
Thu 2019-12-19 12:10:12.168: * Message from: news@accor-mail.com
Thu 2019-12-19 12:10:12.168: * Message to: dwi.indriy...@anjhealthcare.com
Thu 2019-12-19 12:10:12.168: * Message subject: dwi, begitu banyak yang dapat 
dinikmati di liburan akhir tahun ini dengan ALL.
Thu 2019-12-19 12:10:12.168: * Message ID: 

Thu 2019-12-19 12:25:45.026: * MDSpamD Error:  could not process 
c:\mdaemon\queues\local\md5493964.msg Could not send file successfully.
Thu 2019-12-19 12:25:45.026: --
Thu 2019-12-19 12:36:31.550: c:\mdaemon\queues\temp\md5004242.tmp
Thu 2019-12-19 12:36:32.781: Spam Filter processing 
c:\mdaemon\queues\local\md5494020.msg...
Thu 2019-12-19 12:36:32.781: * Message return-path: 
bounce-684_html-234822759-2078442-137939...@bounce.hpnews.hp.com
Thu 2019-12-19 12:36:32.781: * Message from: crm-ccm.ap-...@newsgram.hp.com
Thu 2019-12-19 12:36:32.781: * Message to: hengga.hitchc...@anjhealthcare.com
Thu 2019-12-19 12:36:32.781: * Message subject: [Year End Sale] Save Up To Rp 1 
Million With HP!
Thu 2019-12-19 12:36:32.781: * Message ID: 
<70744809-a63d-40e8-bf5d-5a6e08daf...@las1s04mta911.xt.local>
Thu 2019-12-19 12:55:33.203: * MDSpamD Error:  could not process 
c:\mdaemon\queues\local\md5494020.msg Could not send file successfully.
Thu 2019-12-19 12:55:33.203: --
Thu 2019-12-19 12:55:35.460: c:\mdaemon\queues\temp\md5004301.tmp
Thu 2019-12-19 13:03:58.181: c:\mdaemon\queues\temp\md5004335.tmp
Thu 2019-12-19 13:03:58.659: c:\mdaemon\queues\temp\md5004336.tmp
Thu 2019-12-19 13:09:17.478: c:\mdaemon\queues\temp\md5004359.tmp
Thu 2019-12-19 13:11:22.270: c:\mdaemon\queues\temp\md5004363.tmp
Thu 2019-12-19 13:11:23.533: c:\mdaemon\queues\temp\md5004364.tmp

Ini log Antivirus:
Thu 2019-12-19 12:47:49.230: MDaemon AntiVirus processing 
c:\mdaemon\queues\local\md5494024.msg...
Thu 2019-12-19 12:47:49.230: * Message return-path: martyast...@kmneyecare.com
Thu 2019-12-19 12:47:49.230: * Message from: martyast...@kmneyecare.com
Thu 2019-12-19 12:47:49.230: * Message to: wisnu.sason...@anjhealthcare.com
Thu 2019-12-19 12:47:49.230: * Message subject: Daftar Pasien Puas KMY & PIK
Thu 2019-12-19 12:47:49.230: * Message ID: 
<01d5b62f$d52b4ac0$7f81e040$@kmneyecare.com>
Thu 2019-12-19 12:47:49.230: Start MDaemon AntiVirus results
Thu 2019-12-19 12:47:49.293: * Total attachments scanned: 4 (including 
multipart/alternatives and message body)
Thu 2019-12-19 12:47:49.293: * Total attachments infected   : 0
Thu 2019-12-19 12:47:49.293: * Total attachments disinfected: 0
Thu 2019-12-19 12:47:49.293: * Total errors while scanning  : 0
Thu 2019-12-19 12:47:49.293: * Total attachments removed: 0
Thu 2019-12-19 12:47:49.354: End of MDaemon AntiVirus results
Thu 2019-12-19 12:47:49.354: --
Thu 2019-12-19 12:58:39.133: MDaemon AntiVirus processing 
c:\mdaemon\queues\local\md5494026.msg...
Thu 2019-12-19 12:58:39.133: * Message return-path: 
prvs=1256201925=list-bounce+mdaemo...@dutaint.com
Thu 2019-12-19 12:58:39.133: * Message from: syaf...@dutaint.co.id
Thu 2019-12-19 12:58:39.133: * Message to: hengga.hitchc...@anjhealthcare.com
Thu 2019-12-19 12:58:39.133: * Message subject: [mdaemon-l] Holding Queue
Thu 2019-12-19 12:58:39.133: * Message ID: 

Thu 2019-12-19 12:58:39.133: Start MDaemon AntiVirus results
Thu 2019-12-19 12:5

[mdaemon-l] Holding Queue

[Hengga H.]

Selamat Siang Pak Syafril,

Dua hari ini banyak email yang masuk ke holding queue, ketika saya paksa
Release baru terkirim.
Untuk menyelidiki penyebab banyak email masuk ke holding queue, apa langkah
yang perlu saya cek?

Mohon info dan bantuannya.

Terima kasih.
Hengga



--
ANJ HealthCare

Disclaimer

This email contains confidential and privileged information for the sole use of 
the intended recipients. If you are not an intended recipient, you are hereby 
notified that any disclosure, copying, or distribution of this email, or taking 
any action based on its content, is strictly prohibited, and you should: (i) 
immediately delete this email and its attachments from your system, and (ii) 
inform the sender by reply email that you are not an intended recipient. The 
company of the sender does not accept any liability for its employee's 
communications that are contrary to the company's core values or outside the 
scope of employment.


-- 
--[mdaemon-l]--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com
Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com
Versi terakhir: MDaemon 19.5.2, SecurityGateway 6.5.1

[mdaemon-l] Auto-Thaw

[Hengga H.]

Selamat pagi,

Ada beberapa pertanyaan berikut pak... Mudah-mudahan saya jadi lebih paham
maksudnya.

> [x] Enable Location Screening
> 
> [x] Select all
> 
> lalu unselect untuk Asia/Indonesia.
> 
Ini artinya: apabila saya aktifkan Location Screening dengan unselect
Asia/Indonesia, semua percobaan akses dari lokasi selain Indonesia akan
ditolak?
Seandainya ada user yang mobile, misalkan direksi yang sering bepergian ke
luar negeri, ada caranya agar bisa diberi pengecualian?

> dan menu berikut aktif
> 
> [x] SMTP connections are accepted but authentication is blocked
> 
Apakah ini artinya user yang dikenal bisa sending email lewat server
anjhealthcare.com, akan tetapi apabila lokasi masuk di area screening, email
tidak bisa dibaca/receive?

> Tetapi kasus itu akan berulang bagi akun sutar...@anjhealthcare.com atau
akun
> lain jika setting MDaemon tidak diperbaiki.
> Dan jika akun-2x di domain anjhealthcare.com belum menggunakan "Strong
> Password"
> maka cepat atau lambat akan diketahui password (terkena hijack) dan
digunakan
> spammer dari seluruh dunia untuk broadcast phising spam yang pada akhirnya
> public IP mail.anjhealthcare.com diblock oleh banyak receiver dengan
alasan
> "Bad/Poor IP/MTA Reputation"

Terima kasih informasinya, berarti saya akan coba juga di sisi pemakaian
'strong password' ke user.
Akan saya schedulekan penggantian password semua user bertahap.

Salam,
Hengga


--
ANJ HealthCare

Disclaimer

This email contains confidential and privileged information for the sole use of 
the intended recipients. If you are not an intended recipient, you are hereby 
notified that any disclosure, copying, or distribution of this email, or taking 
any action based on its content, is strictly prohibited, and you should: (i) 
immediately delete this email and its attachments from your system, and (ii) 
inform the sender by reply email that you are not an intended recipient. The 
company of the sender does not accept any liability for its employee's 
communications that are contrary to the company's core values or outside the 
scope of employment.


-- 
--[mdaemon-l]--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com
Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com
Versi terakhir: MDaemon 19.5.2, SecurityGateway 6.5.1

[mdaemon-l] Auto-Thaw

[Hengga H.]

Selamat pagi Pak Syafril,

 

Saya baru pertama kali mendapatkan pesan berikut dari MDaemon, mohon
petunjuk dan info apakah artinya:

 

The following users accounts were automatically thawed after being frozen by
dynamic screening

1.Sutarsih 

These accounts were automatically thawed by Dynamic Screening because they
were still frozen at the end of your frozen account settings timeout period
and you have Auto-Thaw enabled.

 

Dynamic Screening (64bit) for MDaemon Messaging Server  18.0.2.9 / 18.0.2

 

---

 

Sesaat sebelumnya ada pesan berikut juga:

 


Dynamic Screen: Account Frozen


sutar...@anjhealthcare.com   - Sutarsih


IP Address

Date

Time

Protocol

Logon Used

Notes

Location


89.233.183.64

12/17/2019

0:24:23

IMAP

sutar...@anjhealthcare.com  

 

Czechia


124.41.211.251

12/17/2019

0:24:25

IMAP

sutar...@anjhealthcare.com  

 

Nepal


109.229.15.125

12/17/2019

0:24:26

IMAP

sutar...@anjhealthcare.com  

 

Ukraine


5.59.137.90

12/17/2019

0:24:28

IMAP

sutar...@anjhealthcare.com  

 

Russia


82.135.211.232

12/17/2019

0:24:28

IMAP

sutar...@anjhealthcare.com  

 

Republic of Lithuania


212.73.69.6

12/17/2019

0:24:30

IMAP

sutar...@anjhealthcare.com  

 

Armenia


195.9.25.42

12/17/2019

0:24:32

IMAP

sutar...@anjhealthcare.com  

 

Russia


178.48.68.53

12/17/2019

0:24:33

IMAP

sutar...@anjhealthcare.com  

 

Hungary


188.121.108.232

12/17/2019

0:24:35

IMAP

sutar...@anjhealthcare.com  

 

Iran


37.32.4.58

12/17/2019

0:24:37

IMAP

sutar...@anjhealthcare.com  

 

Iran

 

This account was frozen by dynamic screening for failing at least 10
authentication attempts over 30 minutes from or near IP Address 37.32.4.58.

 

At the time of this notifications, this account is scheduled to be
automatically thawed at 12:55 AM on Tuesday, December 17, 2019 SE Asia
Standard Time.

 

You may thaw this account prior to the expiration date/time by replying to
this message.

 

Dynamic Screening (64bit) for MDaemon Messaging Server  18.0.2.9 / 18.0.2





 

Saya cek di account manager, account sutar...@anjhealthcare.com
  tidak terlihat freeze:

 



 

Apakah account ini ada problem nantinya gara-gara status/informasi di atas?

Mohon petunjuknya.

 

Terima kasih.

Hengga

 



--
ANJ HealthCare

Disclaimer

This email contains confidential and privileged information for the sole use of 
the intended recipients. If you are not an intended recipient, you are hereby 
notified that any disclosure, copying, or distribution of this email, or taking 
any action based on its content, is strictly prohibited, and you should: (i) 
immediately delete this email and its attachments from your system, and (ii) 
inform the sender by reply email that you are not an intended recipient. The 
company of the sender does not accept any liability for its employee's 
communications that are contrary to the company's core values or outside the 
scope of employment.

[mdaemon-l] Host can't be resolved

[Hengga H.]

Pagi Pak,

> >
> >ftp://ftp.dutaint.com/altn-mdaemon/miscl/ReverseXcpt.dat
> 
> Sudah diupdate.
> 
Terima kasih pak.  Sudah di-download dan copy ke folder Mdaemon/apps.

Hengga


--
ANJ HealthCare

Disclaimer

This email contains confidential and privileged information for the sole use of 
the intended recipients. If you are not an intended recipient, you are hereby 
notified that any disclosure, copying, or distribution of this email, or taking 
any action based on its content, is strictly prohibited, and you should: (i) 
immediately delete this email and its attachments from your system, and (ii) 
inform the sender by reply email that you are not an intended recipient. The 
company of the sender does not accept any liability for its employee's 
communications that are contrary to the company's core values or outside the 
scope of employment.


-- 
--[mdaemon-l]--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com
Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com
Versi terakhir MD 19.5.1, SG 6.1.0

[mdaemon-l] Host can't be resolved

[Hengga H.]

Siang Pak Syafril,

> -Original Message-
> 
> Masukkan IP senderhost (3.213.93.38) kedalam reverselookup whitelist.
> 
> http://mdaemon.dutaint.co.id/mdaemon/19.5/security--reverse_lookup.htm
> 
Baik pak.  Terima kasih infonya.

> 
> Nanti saya juga akan update ke
> 
> ftp://ftp.dutaint.com/altn-mdaemon/miscl/ReverseXcpt.dat
> 
> saat sempat.
Siap.

> 
> Sekarang saya sedang dalam perjalanan, dan kacamata mata saya barusan
> pecah karena terjatuh ;-(
> 
Hati-hati di jalan pak.  Semoga segera diganti lensanya agar aman.

Terima kasih.
Hengga


--
ANJ HealthCare

Disclaimer

This email contains confidential and privileged information for the sole use of 
the intended recipients. If you are not an intended recipient, you are hereby 
notified that any disclosure, copying, or distribution of this email, or taking 
any action based on its content, is strictly prohibited, and you should: (i) 
immediately delete this email and its attachments from your system, and (ii) 
inform the sender by reply email that you are not an intended recipient. The 
company of the sender does not accept any liability for its employee's 
communications that are contrary to the company's core values or outside the 
scope of employment.


-- 
--[mdaemon-l]--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com
Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com
Versi terakhir MD 19.5.1, SG 6.1.0

[mdaemon-l] Host can't be resolved

[Hengga H.]

Pagi Pak Syafril,

Satu lagi pak, kalau log nya seperti berikut dimana ada informasi host can't
be resolved, apakah email ini diterima tujuan?  Atau direject ya?
Agar bisa diterima, perbaikannya dimanakah?

Fri 2019-11-08 13:03:58.520: Session 870325; child 0001
Fri 2019-11-08 13:03:58.520: Accepting SMTP connection from
3.213.93.38:32481 to 172.16.24.23:25
Fri 2019-11-08 13:04:00.053: Performing PTR lookup
(38.93.213.3.IN-ADDR.ARPA)
Fri 2019-11-08 13:04:00.073: *  D=38.93.213.3.IN-ADDR.ARPA TTL=(240)
PTR=[ALUS.Webmail1.Alcon.com]
Fri 2019-11-08 13:04:00.327: *  D=ALUS.Webmail1.Alcon.com TTL=(1440)
A=[3.213.93.38]
Fri 2019-11-08 13:04:00.327:  End PTR results
Fri 2019-11-08 13:04:00.327: --> 220 anjhealthcare.com ESMTP Fri, 08 Nov
2019 13:04:00 +0700
Fri 2019-11-08 13:04:00.576: <-- EHLO ALUSFW-PRDEDG32.alcon.net
Fri 2019-11-08 13:04:00.579: Performing SPF lookup
(ALUSFW-PRDEDG32.alcon.net / 3.213.93.38)
Fri 2019-11-08 13:04:00.603: *  Result: none; no SPF record in DNS
Fri 2019-11-08 13:04:00.603:  End SPF results
Fri 2019-11-08 13:04:00.603: --> 250-anjhealthcare.com Hello
ALUS.Webmail1.Alcon.com [3.213.93.38], pleased to meet you
Fri 2019-11-08 13:04:00.603: --> 250-ETRN
Fri 2019-11-08 13:04:00.603: --> 250-AUTH LOGIN CRAM-MD5 PLAIN
Fri 2019-11-08 13:04:00.603: --> 250-8BITMIME
Fri 2019-11-08 13:04:00.603: --> 250-ENHANCEDSTATUSCODES
Fri 2019-11-08 13:04:00.603: --> 250-STARTTLS
Fri 2019-11-08 13:04:00.603: --> 250 SIZE
Fri 2019-11-08 13:04:00.853: <-- STARTTLS
Fri 2019-11-08 13:04:00.853: --> 220 2.7.0 Ready to start TLS
Fri 2019-11-08 13:04:01.363: SSL negotiation successful (TLS 1.2, 256 bit
key exchange, 256 bit AES encryption)
Fri 2019-11-08 13:04:01.613: <-- EHLO ALUSFW-PRDEDG32.alcon.net
Fri 2019-11-08 13:04:01.617: Performing SPF lookup
(ALUSFW-PRDEDG32.alcon.net / 3.213.93.38)
Fri 2019-11-08 13:04:01.624: *  Result: none; no SPF record in DNS
Fri 2019-11-08 13:04:01.624:  End SPF results
Fri 2019-11-08 13:04:01.624: --> 250-anjhealthcare.com Hello
ALUS.Webmail1.Alcon.com [3.213.93.38], pleased to meet you
Fri 2019-11-08 13:04:01.624: --> 250-ETRN
Fri 2019-11-08 13:04:01.624: --> 250-AUTH LOGIN CRAM-MD5 PLAIN
Fri 2019-11-08 13:04:01.624: --> 250-8BITMIME
Fri 2019-11-08 13:04:01.624: --> 250-ENHANCEDSTATUSCODES
Fri 2019-11-08 13:04:01.624: --> 250 SIZE
Fri 2019-11-08 13:04:01.874: <-- MAIL FROM:
SIZE=365015
Fri 2019-11-08 13:04:01.877: Performing IP lookup
(ALUSFW-PRDEDG32.alcon.net)
Fri 2019-11-08 13:04:01.885: *  DNS server reports domain name unknown
Fri 2019-11-08 13:04:01.885:  End IP lookup results
Fri 2019-11-08 13:04:01.886: --> 501 5.7.0 ALUSFW-PRDEDG32.alcon.net host
can't be resolved
Fri 2019-11-08 13:04:01.887: SMTP session terminated (Bytes in/out:
639/2241)
Fri 2019-11-08 13:04:01.887: 
--

Terima kasih.
Hengga


--
ANJ HealthCare

Disclaimer

This email contains confidential and privileged information for the sole use of 
the intended recipients. If you are not an intended recipient, you are hereby 
notified that any disclosure, copying, or distribution of this email, or taking 
any action based on its content, is strictly prohibited, and you should: (i) 
immediately delete this email and its attachments from your system, and (ii) 
inform the sender by reply email that you are not an intended recipient. The 
company of the sender does not accept any liability for its employee's 
communications that are contrary to the company's core values or outside the 
scope of employment.


-- 
--[mdaemon-l]--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com
Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com
Versi terakhir MD 19.5.1, SG 6.1.0

[mdaemon-l] Passed SPF check; but domain is not DMARC aligned

[Hengga H.]

Pagi pak,

> -Original Message-
> Mail ini diterima dengan baik.
> Mail Command "250 2.6.0 Ok" artinya message accepted successful.
> 
Apakah berarti email messagenya adalah ini ya pak dilihat dari log akhirnya?
c:\mdaemon\queues\inbound\md5258222.msg

Untuk Socket error 10054 ini akibat setting mail saya atau problem dari mail 
server mereka?
Fri 2019-11-08 17:26:50.993: --> 250 2.6.0 Ok, message saved >
Fri 2019-11-08 17:26:50.993: *  Socket error 10054 - Connection was reset by 
the other side!
Fri 2019-11-08 17:26:50.995: SMTP session successful (Bytes in/out:
371333/2582)

Bagaimana cara memastikan bahwa email ini sampai ke user?  Apabila si user info 
bahwa tidak menerima email tersebut?

Mohon saran dan info nya.

Terima kasih.
Hengga


--
ANJ HealthCare

Disclaimer

This email contains confidential and privileged information for the sole use of 
the intended recipients. If you are not an intended recipient, you are hereby 
notified that any disclosure, copying, or distribution of this email, or taking 
any action based on its content, is strictly prohibited, and you should: (i) 
immediately delete this email and its attachments from your system, and (ii) 
inform the sender by reply email that you are not an intended recipient. The 
company of the sender does not accept any liability for its employee's 
communications that are contrary to the company's core values or outside the 
scope of employment.


--
--[mdaemon-l]--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com
Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com
Versi terakhir MD 19.5.1, SG 6.1.0

[mdaemon-l] Passed SPF check; but domain is not DMARC aligned

[Hengga H.]

Sore Pak Syafril,

Saya cek ada log berikut:
Fri 2019-11-08 17:26:34.335: Session 871633; child 0001
Fri 2019-11-08 17:26:34.335: Accepting SMTP connection from
40.107.76.54:9732 to 172.16.24.23:25
Fri 2019-11-08 17:26:35.877: Performing PTR lookup
(54.76.107.40.IN-ADDR.ARPA)
Fri 2019-11-08 17:26:35.896: *  D=54.76.107.40.IN-ADDR.ARPA TTL=(60)
PTR=[mail-eopbgr760054.outbound.protection.outlook.com]
Fri 2019-11-08 17:26:36.159: *
D=mail-eopbgr760054.outbound.protection.outlook.com TTL=(10)
A=[40.107.76.54]
Fri 2019-11-08 17:26:36.159:  End PTR results
Fri 2019-11-08 17:26:36.160: --> 220 anjhealthcare.com ESMTP Fri, 08 Nov
2019 17:26:36 +0700
Fri 2019-11-08 17:26:36.361: <-- EHLO
NAM02-CY1-obe.outbound.protection.outlook.com
Fri 2019-11-08 17:26:36.371: Performing SPF lookup
(NAM02-CY1-obe.outbound.protection.outlook.com / 40.107.76.54)
Fri 2019-11-08 17:26:36.427: *  Policy: v=spf1
include:spf.protection.outlook.com -all
Fri 2019-11-08 17:26:36.428: *  Evaluating
include:spf.protection.outlook.com: performing lookup
Fri 2019-11-08 17:26:36.433: *Policy: v=spf1 ip4:40.92.0.0/15
ip4:40.107.0.0/16 ip4:52.100.0.0/14 ip4:104.47.0.0/17 ip6:2a01:111:f400::/48
ip6:2a01:111:f403::/48 -all
Fri 2019-11-08 17:26:36.434: *Evaluating ip4:40.92.0.0/15: no match
Fri 2019-11-08 17:26:36.434: *Evaluating ip4:40.107.0.0/16: match
Fri 2019-11-08 17:26:36.434: *  Evaluating
include:spf.protection.outlook.com: match
Fri 2019-11-08 17:26:36.434: *  Result: pass
Fri 2019-11-08 17:26:36.434:  End SPF results
Fri 2019-11-08 17:26:36.436: --> 250-anjhealthcare.com Hello
mail-eopbgr760054.outbound.protection.outlook.com [40.107.76.54], pleased to
meet you
Fri 2019-11-08 17:26:36.437: --> 250-ETRN
Fri 2019-11-08 17:26:36.438: --> 250-AUTH LOGIN CRAM-MD5 PLAIN
Fri 2019-11-08 17:26:36.438: --> 250-8BITMIME
Fri 2019-11-08 17:26:36.438: --> 250-ENHANCEDSTATUSCODES
Fri 2019-11-08 17:26:36.438: --> 250-STARTTLS
Fri 2019-11-08 17:26:36.438: --> 250 SIZE
Fri 2019-11-08 17:26:36.639: <-- STARTTLS
Fri 2019-11-08 17:26:36.639: --> 220 2.7.0 Ready to start TLS
Fri 2019-11-08 17:26:37.055: SSL negotiation successful (TLS 1.2, 256 bit
key exchange, 256 bit AES encryption)
Fri 2019-11-08 17:26:37.250: <-- EHLO
NAM02-CY1-obe.outbound.protection.outlook.com
Fri 2019-11-08 17:26:37.265: Performing SPF lookup
(NAM02-CY1-obe.outbound.protection.outlook.com / 40.107.76.54)
Fri 2019-11-08 17:26:37.265: *  Policy (cache): v=spf1
include:spf.protection.outlook.com -all
Fri 2019-11-08 17:26:37.265: *  Evaluating
include:spf.protection.outlook.com: performing lookup
Fri 2019-11-08 17:26:37.265: *Policy (cache): v=spf1 ip4:40.92.0.0/15
ip4:40.107.0.0/16 ip4:52.100.0.0/14 ip4:104.47.0.0/17 ip6:2a01:111:f400::/48
ip6:2a01:111:f403::/48 -all
Fri 2019-11-08 17:26:37.265: *Evaluating ip4:40.92.0.0/15: no match
Fri 2019-11-08 17:26:37.265: *Evaluating ip4:40.107.0.0/16: match
Fri 2019-11-08 17:26:37.265: *  Evaluating
include:spf.protection.outlook.com: match
Fri 2019-11-08 17:26:37.265: *  Result: pass
Fri 2019-11-08 17:26:37.265:  End SPF results
Fri 2019-11-08 17:26:37.265: --> 250-anjhealthcare.com Hello
mail-eopbgr760054.outbound.protection.outlook.com [40.107.76.54], pleased to
meet you
Fri 2019-11-08 17:26:37.265: --> 250-ETRN
Fri 2019-11-08 17:26:37.265: --> 250-AUTH LOGIN CRAM-MD5 PLAIN
Fri 2019-11-08 17:26:37.265: --> 250-8BITMIME
Fri 2019-11-08 17:26:37.265: --> 250-ENHANCEDSTATUSCODES
Fri 2019-11-08 17:26:37.265: --> 250 SIZE
Fri 2019-11-08 17:26:37.483: <-- MAIL
FROM: SIZE=394443 AUTH=<>
Fri 2019-11-08 17:26:37.486: Performing IP lookup
(NAM02-CY1-obe.outbound.protection.outlook.com)
Fri 2019-11-08 17:26:37.540: *
D=NAM02-CY1-obe.outbound.protection.outlook.com TTL=(240) A=[207.46.163.47]
Fri 2019-11-08 17:26:37.540:  End IP lookup results
Fri 2019-11-08 17:26:37.550: Performing IP lookup (alcon365.com)
Fri 2019-11-08 17:26:40.216: *  P=010 S=000 D=alcon365.com TTL=(240)
MX=[mx07-0019ad02.pphosted.com]
Fri 2019-11-08 17:26:40.216: *  P=010 S=001 D=alcon365.com TTL=(240)
MX=[mx08-0019ad02.pphosted.com]
Fri 2019-11-08 17:26:40.216: *  P=010 S=002 D=alcon365.com TTL=(240)
MX=[mxa-0019ad02.gslb.pphosted.com]
Fri 2019-11-08 17:26:40.216: *  P=010 S=003 D=alcon365.com TTL=(240)
MX=[mxb-0019ad02.gslb.pphosted.com]
Fri 2019-11-08 17:26:40.222: *  D=mx07-0019ad02.pphosted.com TTL=(178)
A=[91.207.212.232]
Fri 2019-11-08 17:26:40.225: *  D=mx08-0019ad02.pphosted.com TTL=(228)
A=[62.209.51.238]
Fri 2019-11-08 17:26:40.231: *  D=mxa-0019ad02.gslb.pphosted.com TTL=(178)
A=[91.207.212.232]
Fri 2019-11-08 17:26:40.238: *  D=mxb-0019ad02.gslb.pphosted.com TTL=(178)
A=[62.209.51.238]
Fri 2019-11-08 17:26:40.238:  End IP lookup results
Fri 2019-11-08 17:26:40.245: Performing SPF lookup (alcon365.com /
40.107.76.54)
Fri 2019-11-08 17:26:40.516: *  Policy: v=spf1
include:spf.protection.outlook.com ip4:34.199.126.11 ip4:3.213.93.38
ip4:62.209.51.238 ip4:91.207.212.232 ~all
Fri 2019-11-08 17:26:40.517: *  Evaluating
include:spf.prote

[mdaemon-l] Blok email spam

[Hengga H.]

Pagi Pak,

> Yang baik pakai hostscreening
> 
> 
> masukkan host vps.palmasoft.com.br kedalamnya.
> 
[Hengga] 
Saya coba cek 3 header dari email dengan tipe yang sama, berikut adalah header 
email mereka yang saya dapatkan:

Email 1:

X-MDAV-Result: clean
X-MDAV-Processed: anjhealthcare.com, Thu, 31 Oct 2019 03:53:16 +0700
Return-path: 
Authentication-Results: anjhealthcare.com;
spf=pass smtp.mailfrom=contabili...@fitwell.com.do;
dkim=pass (good signature) header.d=fitwell.com.do 
header.b=Q/RPDGBJzy;
dmarc=pass header.from=fitwell.com.do (p=reject sampling=11 
pct=100);
iprev=pass policy.iprev=192.145.233.86 (PTR 
ded1761.inmotionhosting.com);
iprev=pass policy.iprev=192.145.233.86 (HELO 
ded1761.inmotionhosting.com);
iprev=pass policy.iprev=192.145.233.86 (MAIL 
contabili...@fitwell.com.do)
Received-SPF: pass (anjhealthcare.com: domain fitwell.com.do
designates 192.145.233.86 as permitted sender)
receiver=anjhealthcare.com; client-ip=192.145.233.86;
mechanism=ip4:192.145.233.86; 
envelope-from="contabili...@fitwell.com.do";
helo=ded1761.inmotionhosting.com;
Received: from ded1761.inmotionhosting.com (ded1761.inmotionhosting.com 
[192.145.233.86]) 
by anjhealthcare.com with ESMTPS id md5252032.msg; Thu, 31 Oct 
2019 03:53:16 +0700
X-Spam-Processed: anjhealthcare.com, Thu, 31 Oct 2019 03:53:16 +0700
(not processed: message size (350458) exceeds spam filter 
configured max size of (204800))
X-MDDKIM-Result: unapproved (anjhealthcare.com)
X-MDSPF-Result: unapproved (anjhealthcare.com)
X-MDRemoteIP: 192.145.233.86
X-MDHelo: ded1761.inmotionhosting.com
X-MDArrival-Date: Thu, 31 Oct 2019 03:53:16 +0700
X-Rcpt-To: sanny.tjandradj...@anjhealthcare.com
X-MDRcpt-To: sanny.tjandradj...@anjhealthcare.com
X-Return-Path: contabili...@fitwell.com.do
X-Envelope-From: contabili...@fitwell.com.do
X-MDaemon-Deliver-To: sanny.tjandradj...@anjhealthcare.com
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;
d=fitwell.com.do; s=default; 
h=Content-Type:MIME-Version:Subject:To:From:Date
:Sender:Reply-To:Message-ID:Cc:Content-Transfer-Encoding:Content-ID:

Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc

:Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:
List-Subscribe:List-Post:List-Owner:List-Archive;
bh=gC6ns73yFZzPVRCIxKhHcJPOfoUn9xxMV6+XRd+QwTc=; 
b=Q/RPDGBJzyXqm49sU9j21xdRxY
pee12Iiw6WRPm4iULmBRF5wV6sOVtZdFaD0x5TkeD3eYOtZCC+9aec7KJo2YJw4HOxiAsD5XcNjzK
hFRwLbJ8k0x6ELU79LrQ8qb+dcxq9qjY8Bdy5kbhVziLnrgGeJVDTrr5+R8JcIIWqf0o563ep
8C6wf44cANYgo+nkoNimmy4OhaR1aHk8DeTPWfO5p658r+qZq9f0BFNFLCbXa4WlXxjwO6VowWi+G
GaMwYYrV0DJuSZUUskYEGveSURPTbiv5SLGSqa799z8mRPEzzECoN96TqiwrJf279oi4QLBR766Hj
XDAGmsjA==;
Received: from [217.5.201.147] (port=56318)
by ded1761.inmotionhosting.com with esmtpsa 
(TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.92)
(envelope-from )
id 1iPuxi-0003AB-I5
for sanny.tjandradj...@anjhealthcare.com; Wed, 30 Oct 2019 16:53:03 
-0400
Date: Wed, 30 Oct 2019 21:53:00 +0100
From: "DOKU SUPPORT (contabili...@fitwell.com.do)" 
To: 
Subject: [EXTERNAL] INVOICE
MIME-Version: 1.0
Content-Type: multipart/mixed; 
boundary="=_Part_49096_3683297847.2734193493657035"
X-AntiAbuse: This header was added to track abuse, please include it with any 
abuse report
X-AntiAbuse: Primary Hostname - ded1761.inmotionhosting.com
X-AntiAbuse: Original Domain - anjhealthcare.com
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - fitwell.com.do
X-Get-Message-Sender-Via: ded1761.inmotionhosting.com: authenticated_id: 
contabili...@fitwell.com.do


Email 2:

X-MDAV-Result: clean
X-MDAV-Processed: anjhealthcare.com, Wed, 30 Oct 2019 19:08:24 +0700
Return-path: 
Authentication-Results: anjhealthcare.com;
spf=pass smtp.mailfrom=filipe.quintani...@lleng.com.br;
dmarc=none header.from=lleng.com.br (no DMARC record);
iprev=pass policy.iprev=138.128.176.187 (PTR vps.palmasoft.com.br);
iprev=pass policy.iprev=138.128.176.187 (HELO vps.palmasoft.com.br);
iprev=pass policy.iprev=138.128.176.187 (MAIL 
filipe.quintani...@lleng.com.br)
Received-SPF: pass (anjhealthcare.com: domain lleng.com.br
designates 138.128.176.187 as permitted sender)
receiver=anjhealthcare.com; client-ip=138.128.176.187;
mechanism=ip4:138.128.176.187; 
envelope-from="filipe.quintani...@lleng.com.br";
helo=vps.palmasoft.com.br;
Received: from vps.palmasoft.com.br (vps.palmasoft.com.br [138.128.176.187]) by 
anjhealthcare.com 
with ESMTPS id md5251955.msg; Wed, 30 Oct 2019 19:08:23 +0700
X-Spam-Processed: anjhealthcare.com, Wed, 30

[mdaemon-l] Blok email spam

[Hengga H.]

Selamat siang,

Ada user kami yang menerima email yang sama tiga kali dengan attachment yang
sama "Your Invoice.doc".
Tiga pengirimnya beda-beda domain dan kurang lebih isi email di body nya
sama seperti berikut:

-Original Message-
From: DOKU SUPPORT (filipe.quintani...@lleng.com.br)
[mailto:filipe.quintani...@lleng.com.br] 
Sent: Wednesday, October 30, 2019 3:47 PM
To: arfi.ya...@anjhealthcare.com
Subject: Re: DOKU SUPPORT

 Good Morning,

Here is the first month of invoices. It wasn't set up on until last week.

THANK YOU,

DOKU SUPPORT

e-Mail:supp...@doku.com


Pengirim yang lain dengan email berikut:
documenta...@inace.com.br
contabili...@fitwell.com.do

Salah satu isi dari header email adalah sbb:
X-MDAV-Result: clean
X-MDAV-Processed: anjhealthcare.com, Thu, 31 Oct 2019 06:17:59 +0700
Return-path: 
Authentication-Results: anjhealthcare.com;
spf=pass smtp.mailfrom=filipe.quintani...@lleng.com.br;
iprev=pass policy.iprev=138.128.176.187 (PTR
vps.palmasoft.com.br);
iprev=pass policy.iprev=138.128.176.187 (HELO
vps.palmasoft.com.br);
iprev=pass policy.iprev=138.128.176.187 (MAIL
filipe.quintani...@lleng.com.br)
Received-SPF: pass (anjhealthcare.com: domain lleng.com.br
designates 138.128.176.187 as permitted sender)
receiver=anjhealthcare.com; client-ip=138.128.176.187;
mechanism=ip4:138.128.176.187;
envelope-from="filipe.quintani...@lleng.com.br";
helo=vps.palmasoft.com.br;
Received: from vps.palmasoft.com.br (vps.palmasoft.com.br [138.128.176.187])
by anjhealthcare.com 
with ESMTPS id md5252036.msg; Thu, 31 Oct 2019 06:17:59
+0700
X-Spam-Processed: anjhealthcare.com, Thu, 31 Oct 2019 06:17:59 +0700
(not processed: message size (267605) exceeds spam filter
configured max size of (204800))
X-MDSPF-Result: unapproved (anjhealthcare.com)
X-MDRemoteIP: 138.128.176.187
X-MDHelo: vps.palmasoft.com.br
X-MDArrival-Date: Thu, 31 Oct 2019 06:17:59 +0700
X-Rcpt-To: arfi.ya...@anjhealthcare.com
X-MDRcpt-To: arfi.ya...@anjhealthcare.com
X-Return-Path: filipe.quintani...@lleng.com.br
X-Envelope-From: filipe.quintani...@lleng.com.br
X-MDaemon-Deliver-To: arfi.ya...@anjhealthcare.com
Received: from [78.188.101.132] (port=59581)
by vps.palmasoft.com.br with esmtpsa
(TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.92)
(envelope-from )
id 1iPjd2-0006jT-VK
for arfi.ya...@anjhealthcare.com; Wed, 30 Oct 2019 05:46:58
-0300
Date: Wed, 30 Oct 2019 11:46:55 +0300
From: "DOKU SUPPORT (filipe.quintani...@lleng.com.br)"

To: 
Subject: Re: DOKU SUPPORT
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="=_Part_1110_4141210342.8359320601363290393"
X-AntiAbuse: This header was added to track abuse, please include it with
any abuse report
X-AntiAbuse: Primary Hostname - vps.palmasoft.com.br
X-AntiAbuse: Original Domain - anjhealthcare.com
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - lleng.com.br
X-Get-Message-Sender-Via: vps.palmasoft.com.br: authenticated_id:
filipe.quintani...@lleng.com.br
X-Source: 
X-Source-Args: 
X-Source-Dir:

Boleh diinformasikan cara blok email seperti ini agar tidak masuk lagi
menggunakan metode apa ya?
Kalau blok per blacklisting sender tentu akan merepotkan apabila pengirimnya
beda-beda.

Mohon petunjuknya.

Terima kasih.
Hengga



--
ANJ HealthCare

Disclaimer

This email contains confidential and privileged information for the sole use of 
the intended recipients. If you are not an intended recipient, you are hereby 
notified that any disclosure, copying, or distribution of this email, or taking 
any action based on its content, is strictly prohibited, and you should: (i) 
immediately delete this email and its attachments from your system, and (ii) 
inform the sender by reply email that you are not an intended recipient. The 
company of the sender does not accept any liability for its employee's 
communications that are contrary to the company's core values or outside the 
scope of employment.


-- 
--[mdaemon-l]--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com
Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com
Versi terakhir MD 19.5.0, SG 6.1.0

[mdaemon-l] Socket error 10053 - Connection abort

[Hengga H.]

> Ya.
> 
> Apakah disk space di drive c:\ masih mencukupi?
[Hengga] masih free space sebesar 20GB

> 
> Lakukan sbb:
> 
> - stop Mdaemon service.
> - rename folder \\mdaemon\queues menjadi \\mdaemon\queues.temp
> - start kembali Mdaemon service dari windows service control panel.
[Hengga] saat ini kondisi sudah normal kembali, belum saya rename folder, 
karena user kantor sudah banyak yang pulang. Akibatnya antrian sudah normal.

> 
> Pakai MDaemon versi berapa?
[Hengga] Mdaemon v18.0.2

> Run di windows apa?
[Hengga] Windows Server 2008 R2 Std

> Ada antivirus for file yang aktif?
[Hengga] Selama ini kami gunakan Kaspersky EndPoint Business v11 juga di server

Terima kasih.
Hengga


--
ANJ HealthCare

Disclaimer

This email contains confidential and privileged information for the sole use of 
the intended recipients. If you are not an intended recipient, you are hereby 
notified that any disclosure, copying, or distribution of this email, or taking 
any action based on its content, is strictly prohibited, and you should: (i) 
immediately delete this email and its attachments from your system, and (ii) 
inform the sender by reply email that you are not an intended recipient. The 
company of the sender does not accept any liability for its employee's 
communications that are contrary to the company's core values or outside the 
scope of employment.


--
--[mdaemon-l]--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com
Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com
Versi terakhir MD 19.0.3, SG 6.1.0

[mdaemon-l] Socket error 10060 - The connection timed out

[Hengga H.]

Selamat siang Pak Syafril,

Apabila ditemukan log seperti berikut:

Fri 2019-10-18 14:28:10.695: Session 788442; child 0002
Fri 2019-10-18 14:28:10.695: Accepting SMTP connection from
40.107.131.42:38727 to 172.16.24.23:25
Fri 2019-10-18 14:28:25.709: Performing PTR lookup
(42.131.107.40.IN-ADDR.ARPA)
Fri 2019-10-18 14:28:25.768: *  D=42.131.107.40.IN-ADDR.ARPA TTL=(60)
PTR=[mail-eopbgr1310042.outbound.protection.outlook.com]
Fri 2019-10-18 14:28:25.830: *
D=mail-eopbgr1310042.outbound.protection.outlook.com TTL=(240)
A=[40.107.131.42]
Fri 2019-10-18 14:28:25.830:  End PTR results
Fri 2019-10-18 14:28:25.831: --> 220 anjhealthcare.com ESMTP Fri, 18 Oct
2019 14:28:25 +0700
Fri 2019-10-18 14:28:25.850: <-- EHLO
APC01-SG2-obe.outbound.protection.outlook.com
Fri 2019-10-18 14:28:25.854: Performing SPF lookup
(APC01-SG2-obe.outbound.protection.outlook.com / 40.107.131.42)
Fri 2019-10-18 14:28:25.865: *  Policy: v=spf1
include:spf.protection.outlook.com -all
Fri 2019-10-18 14:28:25.865: *  Evaluating
include:spf.protection.outlook.com: performing lookup
Fri 2019-10-18 14:28:25.881: *Policy: v=spf1 ip4:40.92.0.0/15
ip4:40.107.0.0/16 ip4:52.100.0.0/14 ip4:104.47.0.0/17 ip6:2a01:111:f400::/48
ip6:2a01:111:f403::/48 -all
Fri 2019-10-18 14:28:25.881: *Evaluating ip4:40.92.0.0/15: no match
Fri 2019-10-18 14:28:25.881: *Evaluating ip4:40.107.0.0/16: match
Fri 2019-10-18 14:28:25.881: *  Evaluating
include:spf.protection.outlook.com: match
Fri 2019-10-18 14:28:25.881: *  Result: pass
Fri 2019-10-18 14:28:25.881:  End SPF results
Fri 2019-10-18 14:28:25.884: --> 250-anjhealthcare.com Hello
mail-eopbgr1310042.outbound.protection.outlook.com [40.107.131.42], pleased
to meet you
Fri 2019-10-18 14:28:25.884: --> 250-ETRN
Fri 2019-10-18 14:28:25.884: --> 250-AUTH LOGIN CRAM-MD5 PLAIN
Fri 2019-10-18 14:28:25.884: --> 250-8BITMIME
Fri 2019-10-18 14:28:25.884: --> 250-ENHANCEDSTATUSCODES
Fri 2019-10-18 14:28:25.884: --> 250-STARTTLS
Fri 2019-10-18 14:28:25.884: --> 250 SIZE
Fri 2019-10-18 14:28:25.903: <-- STARTTLS
Fri 2019-10-18 14:28:25.903: --> 220 2.7.0 Ready to start TLS
Fri 2019-10-18 14:28:25.958: SSL negotiation successful (TLS 1.2, 256 bit
key exchange, 256 bit AES encryption)
Fri 2019-10-18 14:28:25.977: <-- EHLO
APC01-SG2-obe.outbound.protection.outlook.com
Fri 2019-10-18 14:28:25.977: Performing SPF lookup
(APC01-SG2-obe.outbound.protection.outlook.com / 40.107.131.42)
Fri 2019-10-18 14:28:25.977: *  Policy (cache): v=spf1
include:spf.protection.outlook.com -all
Fri 2019-10-18 14:28:25.977: *  Evaluating
include:spf.protection.outlook.com: performing lookup
Fri 2019-10-18 14:28:25.978: *Policy (cache): v=spf1 ip4:40.92.0.0/15
ip4:40.107.0.0/16 ip4:52.100.0.0/14 ip4:104.47.0.0/17 ip6:2a01:111:f400::/48
ip6:2a01:111:f403::/48 -all
Fri 2019-10-18 14:28:25.978: *Evaluating ip4:40.92.0.0/15: no match
Fri 2019-10-18 14:28:25.978: *Evaluating ip4:40.107.0.0/16: match
Fri 2019-10-18 14:28:25.978: *  Evaluating
include:spf.protection.outlook.com: match
Fri 2019-10-18 14:28:25.978: *  Result: pass
Fri 2019-10-18 14:28:25.978:  End SPF results
Fri 2019-10-18 14:28:25.978: --> 250-anjhealthcare.com Hello
mail-eopbgr1310042.outbound.protection.outlook.com [40.107.131.42], pleased
to meet you
Fri 2019-10-18 14:28:25.978: --> 250-ETRN
Fri 2019-10-18 14:28:25.978: --> 250-AUTH LOGIN CRAM-MD5 PLAIN
Fri 2019-10-18 14:28:25.978: --> 250-8BITMIME
Fri 2019-10-18 14:28:25.978: --> 250-ENHANCEDSTATUSCODES
Fri 2019-10-18 14:28:25.978: --> 250 SIZE
Fri 2019-10-18 14:28:25.996: <-- MAIL FROM:
SIZE=16689
Fri 2019-10-18 14:28:25.997: Performing IP lookup
(APC01-SG2-obe.outbound.protection.outlook.com)
Fri 2019-10-18 14:28:26.009: *
D=APC01-SG2-obe.outbound.protection.outlook.com TTL=(146) A=[104.47.125.44]
Fri 2019-10-18 14:28:26.009: *
D=APC01-SG2-obe.outbound.protection.outlook.com TTL=(146) A=[104.47.125.45]
Fri 2019-10-18 14:28:26.009: *
D=APC01-SG2-obe.outbound.protection.outlook.com TTL=(146) A=[104.47.125.40]
Fri 2019-10-18 14:28:26.009: *
D=APC01-SG2-obe.outbound.protection.outlook.com TTL=(146) A=[104.47.125.41]
Fri 2019-10-18 14:28:26.009: *
D=APC01-SG2-obe.outbound.protection.outlook.com TTL=(146) A=[104.47.125.48]
Fri 2019-10-18 14:28:26.009: *
D=APC01-SG2-obe.outbound.protection.outlook.com TTL=(146) A=[104.47.125.46]
Fri 2019-10-18 14:28:26.009: *
D=APC01-SG2-obe.outbound.protection.outlook.com TTL=(146) A=[104.47.125.43]
Fri 2019-10-18 14:28:26.009: *
D=APC01-SG2-obe.outbound.protection.outlook.com TTL=(146) A=[104.47.125.47]
Fri 2019-10-18 14:28:26.009: *
D=APC01-SG2-obe.outbound.protection.outlook.com TTL=(146) A=[104.47.125.49]
Fri 2019-10-18 14:28:26.010: *
D=APC01-SG2-obe.outbound.protection.outlook.com TTL=(146) A=[104.47.125.42]
Fri 2019-10-18 14:28:26.010:  End IP lookup results
Fri 2019-10-18 14:28:26.011: Performing IP lookup (tahijaenterprise.com)
Fri 2019-10-18 14:28:26.014: *  D=tahijaenterprise.com TTL=(262)
A=[202.152.1.88]
Fri 2019-10-18 14:28:26.762: *  P=000 S=000 D=tahija

[mdaemon-l] Undelivered Mail Returned to Sender

[Hengga H.]

Sore,

> Server smtp.indo.net.id pakai ClamAV engine dengan add-in YARA rules dan
> mengidentifikasi messagenya mengandung malware.
> 
> Check message lampiran aslinya ke sini untuk cari tahu apakah benar bervirus
> 
> https://www.virustotal.com/gui/home/upload

File PDF sudah coba di cek ke situs ini, dan dinyatakan aman.

> 
> kalau tidak bervirus, maka minta pengelola smarthost smtp.indo.net.id untuk
> whitelist domain anjhealthcare.com dari virus scanning, setidaknya untuk PDF
> attachment.

Baik. Saya coba request ke ISP kami.

Terima kasih.
 



--
ANJ HealthCare

Disclaimer

This email contains confidential and privileged information for the sole use of 
the intended recipients. If you are not an intended recipient, you are hereby 
notified that any disclosure, copying, or distribution of this email, or taking 
any action based on its content, is strictly prohibited, and you should: (i) 
immediately delete this email and its attachments from your system, and (ii) 
inform the sender by reply email that you are not an intended recipient. The 
company of the sender does not accept any liability for its employee's 
communications that are contrary to the company's core values or outside the 
scope of employment.


--
--[mdaemon-l]--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com
Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com
Versi terakhir MD 19.0.3, SG 6.0.3

[mdaemon-l] Undelivered Mail Returned to Sender

[Hengga H.]

Sore Pak Syafril,

Mohon bantuannya, ada user kami yang mengirimkan email yang berisikan
attachment .pdf tapi tidak dapat terkirim dengan pesan subject: Undelivered
Mail Returned to Sender.

Isi dari details.txt:
Reporting-MTA: dns; smtp.indo.net.id
X-Postfix-Queue-ID: 6401A7801E1
X-Postfix-Sender: rfc822; prvs=1103d4e20f=lily.surj...@anjhealthcare.com
Arrival-Date: Fri, 19 Jul 2019 15:06:54 +0700 (WIB)

Final-Recipient: rfc822; to...@kmneyecare.com
Original-Recipient: rfc822;to...@kmneyecare.com
Action: failed
Status: 5.0.0
Remote-MTA: dns; kmneyecare.com
Diagnostic-Code: smtp; 550-This message contains a virus or other harmful
content 550 (YARA.maldoc_indirect_function_call_3.UNOFFICIAL)

Isi dari Undelivered Message Headers.txt:
Return-Path: 
Received: from anjhealthcare.com (unknown [202.153.232.10])
by smtp.indo.net.id (Postfix) with ESMTPS id 6401A7801E1
for ; Fri, 19 Jul 2019 15:06:54 +0700 (WIB)
X-MDAV-Result: clean
X-MDAV-Processed: anjhealthcare.com, Fri, 19 Jul 2019 15:06:53 +0700
Received: from ANJHCFAD03 by anjhealthcare.com with ESMTPSA id
md5198223.msg; 
Fri, 19 Jul 2019 15:06:52 +0700
X-Spam-Processed: anjhealthcare.com, Fri, 19 Jul 2019 15:06:52 +0700
(not processed: message from trusted or authenticated source)
X-MDArrival-Date: Fri, 19 Jul 2019 15:06:52 +0700
X-Authenticated-Sender: lily.surj...@anjhealthcare.com
X-Return-Path: prvs=1103d4e20f=lily.surj...@anjhealthcare.com
X-Envelope-From: lily.surj...@anjhealthcare.com
X-MDaemon-Deliver-To: to...@kmneyecare.com
From: "Lily Surjadi" 
To: 
Subject: FW: IJIN RS KMN
Date: Fri, 19 Jul 2019 15:06:50 +0700
Message-ID: <003301d53e08$ebc42b20$c34c8160$@surj...@anjhealthcare.com>
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="=_NextPart_000_0034_01D53E43.98230320"
X-Mailer: Microsoft Office Outlook 12.0
Thread-Index: AdU+B3y0zC1WvnU1Q3OHFSJjm/8oywAAG4yA
Content-Language: en-us

Mohon bantuan analisanya.

Terima kasih.

Regards,
Hengga



--
ANJ HealthCare

Disclaimer

This email contains confidential and privileged information for the sole use of 
the intended recipients. If you are not an intended recipient, you are hereby 
notified that any disclosure, copying, or distribution of this email, or taking 
any action based on its content, is strictly prohibited, and you should: (i) 
immediately delete this email and its attachments from your system, and (ii) 
inform the sender by reply email that you are not an intended recipient. The 
company of the sender does not accept any liability for its employee's 
communications that are contrary to the company's core values or outside the 
scope of employment.


-- 
--[mdaemon-l]--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com
Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com
Versi terakhir MD 19.0.3, SG 6.0.3

[mdaemon-l] Email rejected

[Hengga H.]

Pagi Pak Syafril,

> Ada 2 pilihan:
> 
> 1. Aktifkan SPF verification.
> 
> http://mdaemon.dutaint.co.id/mdaemon/19.0/index.html?security--
> spf__sender_id.htm
> 
> [x] Enable SPF verification
> 
Saya aktifkan opsi 1, dan saat ini sudah berhasil terima email kembali dari 
mereka.

Terima kasih atas petunjuknya.

Salam,
Hengga



--
ANJ HealthCare

Disclaimer

This email contains confidential and privileged information for the sole use of 
the intended recipients. If you are not an intended recipient, you are hereby 
notified that any disclosure, copying, or distribution of this email, or taking 
any action based on its content, is strictly prohibited, and you should: (i) 
immediately delete this email and its attachments from your system, and (ii) 
inform the sender by reply email that you are not an intended recipient. The 
company of the sender does not accept any liability for its employee's 
communications that are contrary to the company's core values or outside the 
scope of employment.


--
--[mdaemon-l]--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com
Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com
Versi terakhir MD 19.0, SG 6.0

[mdaemon-l] Email rejected

[Hengga H.]

Sore pak Syafril,

> -Original Message-
> From: mdaemon-l@dutaint.com  On Behalf Of
> Syafril Hermansyah
> Sent: Tuesday, May 07, 2019 3:54 PM
> 
> Carikan transaksi tolakkannya di smtp-in log.
> Kirimkan kesini dalam format teks, bukan gambar.
> 

Semoga ini yang dimaksud:
Tue 2019-05-07 14:29:17.936: --
Tue 2019-05-07 14:29:29.373: Session 177894; child 0001
Tue 2019-05-07 14:29:29.373: Accepting SMTP connection from 
195.110.59.247:48628 to 172.16.24.23:25
Tue 2019-05-07 14:29:30.506: Performing PTR lookup (247.59.110.195.IN-ADDR.ARPA)
Tue 2019-05-07 14:29:30.893: *  D=247.59.110.195.IN-ADDR.ARPA TTL=(240) 
PTR=[mail.digitalsense.co.id]
Tue 2019-05-07 14:29:30.983: *  D=mail.digitalsense.co.id TTL=(70) 
A=[195.110.59.247]
Tue 2019-05-07 14:29:30.983:  End PTR results
Tue 2019-05-07 14:29:30.983: --> 220 anjhealthcare.com ESMTP Tue, 07 May 2019 
14:29:30 +0700
Tue 2019-05-07 14:29:31.185: <-- EHLO mail.digitalsense.co.id
Tue 2019-05-07 14:29:31.185: --> 250-anjhealthcare.com Hello 
mail.digitalsense.co.id [195.110.59.247], pleased to meet you
Tue 2019-05-07 14:29:31.185: --> 250-ETRN
Tue 2019-05-07 14:29:31.185: --> 250-AUTH LOGIN CRAM-MD5 PLAIN
Tue 2019-05-07 14:29:31.185: --> 250-8BITMIME
Tue 2019-05-07 14:29:31.185: --> 250-ENHANCEDSTATUSCODES
Tue 2019-05-07 14:29:31.185: --> 250-STARTTLS
Tue 2019-05-07 14:29:31.185: --> 250 SIZE
Tue 2019-05-07 14:29:31.388: <-- STARTTLS
Tue 2019-05-07 14:29:31.388: --> 220 2.7.0 Ready to start TLS
Tue 2019-05-07 14:29:31.826: SSL negotiation successful (TLS 1.2, 256 bit key 
exchange, 256 bit AES encryption)
Tue 2019-05-07 14:29:32.028: <-- EHLO mail.digitalsense.co.id
Tue 2019-05-07 14:29:32.028: --> 250-anjhealthcare.com Hello 
mail.digitalsense.co.id [195.110.59.247], pleased to meet you
Tue 2019-05-07 14:29:32.028: --> 250-ETRN
Tue 2019-05-07 14:29:32.028: --> 250-AUTH LOGIN CRAM-MD5 PLAIN
Tue 2019-05-07 14:29:32.028: --> 250-8BITMIME
Tue 2019-05-07 14:29:32.028: --> 250-ENHANCEDSTATUSCODES
Tue 2019-05-07 14:29:32.028: --> 250 SIZE
Tue 2019-05-07 14:29:32.231: <-- MAIL FROM: 
SIZE=357216
Tue 2019-05-07 14:29:32.231: Performing IP lookup (mail.digitalsense.co.id)
Tue 2019-05-07 14:29:32.232: *  D=mail.digitalsense.co.id TTL=(70) 
A=[195.110.59.247]
Tue 2019-05-07 14:29:32.232:  End IP lookup results
Tue 2019-05-07 14:29:32.234: Performing IP lookup (digitalsense.co.id)
Tue 2019-05-07 14:29:32.345: *  D=digitalsense.co.id TTL=(5) A=[104.27.142.67]
Tue 2019-05-07 14:29:32.345: *  D=digitalsense.co.id TTL=(5) A=[104.27.143.67]
Tue 2019-05-07 14:29:32.378: *  P=010 S=000 D=digitalsense.co.id TTL=(70) 
MX=[mail.digitalsense.co.id] {195.110.59.247}
Tue 2019-05-07 14:29:32.378:  End IP lookup results
Tue 2019-05-07 14:29:32.382: --> 250 2.1.0 Sender OK
Tue 2019-05-07 14:29:32.583: <-- RCPT TO:
Tue 2019-05-07 14:29:32.583: Performing DNS-BL lookup (195.110.59.247 - 
connecting IP)
Tue 2019-05-07 14:29:32.862: *  zen.spamhaus.org - passed
Tue 2019-05-07 14:29:33.117: *  bl.spamcop.net - passed
Tue 2019-05-07 14:29:33.117:  End DNS-BL results
Tue 2019-05-07 14:29:33.120: --> 250 2.1.5 Recipient OK
Tue 2019-05-07 14:29:33.323: <-- DATA
Tue 2019-05-07 14:29:33.341: Creating temp file (SMTP): 
c:\mdaemon\queues\temp\md5080519.tmp
Tue 2019-05-07 14:29:33.341: --> 354 Enter mail, end with .
Tue 2019-05-07 14:29:34.771: Message size: 356193 bytes
Tue 2019-05-07 14:29:34.782: Performing DKIM lookup
Tue 2019-05-07 14:29:34.782: *  File: c:\mdaemon\queues\temp\md5080519.tmp
Tue 2019-05-07 14:29:34.782: *  Message-ID: 
<000701d504a6$9686b330$c3941990$@co.id>
Tue 2019-05-07 14:29:34.782: *  Result: neutral
Tue 2019-05-07 14:29:34.782:  End DKIM results
Tue 2019-05-07 14:29:34.786: Performing DMARC processing
Tue 2019-05-07 14:29:34.786: *  File: c:\mdaemon\queues\temp\md5080519.tmp
Tue 2019-05-07 14:29:34.786: *  Message-ID: 
<000701d504a6$9686b330$c3941990$@co.id>
Tue 2019-05-07 14:29:34.786: *  Author domain: digitalsense.co.id
Tue 2019-05-07 14:29:34.786: *  Organizational domain: digitalsense.co.id
Tue 2019-05-07 14:29:34.786: *  Query domain: _dmarc.digitalsense.co.id
Tue 2019-05-07 14:29:34.941: *Policy record: v=DMARC1; p=reject; sp=none; 
rf=afrf; pct=100; ruf=mailto:ad...@digitalsense.co.id; ri=86400
Tue 2019-05-07 14:29:34.945: *  Checking authentication mechanisms for DMARC 
alignment
Tue 2019-05-07 14:29:34.945: *SPF: verification disabled by administrator
Tue 2019-05-07 14:29:34.945: *DKIM: no DKIM signatures found
Tue 2019-05-07 14:29:34.945: *  Action taken: reject
Tue 2019-05-07 14:29:34.945: *  Result: fail
Tue 2019-05-07 14:29:34.945:  End DMARC results
Tue 2019-05-07 14:29:34.945: --> 550 5.7.0 Message rejected per DMARC policy 
for digitalsense.co.id
Tue 2019-05-07 14:29:34.946: SMTP session terminated (Bytes in/out: 360282/2575)
Tue 2019-05-07 14:29:34.947: --

Terima kasih.

Salam,
Hengga



--
ANJ HealthCare

Disclaimer

This email contains confide

[mdaemon-l] Email rejected

[Hengga H.]

Selamat sore Pak Syafril,

 

Ada email dari vendor yang infonya gagal ketika sending emailnya ke kantor
kami.

 

Dia mengirimkan pesan error berikut ke saya:



 

Bisa diinformasikan problem ini karena apa dan solusinya mengatasinya?

 

Terima kasih.

 

Salam,

Hengga

 



--
ANJ HealthCare

Disclaimer

This email contains confidential and privileged information for the sole use of 
the intended recipients. If you are not an intended recipient, you are hereby 
notified that any disclosure, copying, or distribution of this email, or taking 
any action based on its content, is strictly prohibited, and you should: (i) 
immediately delete this email and its attachments from your system, and (ii) 
inform the sender by reply email that you are not an intended recipient. The 
company of the sender does not accept any liability for its employee's 
communications that are contrary to the company's core values or outside the 
scope of employment.

[mdaemon-l] Recipient Address Rejected

[Hengga H.]

Malam Pak Syafril,

Maaf email malam-malam ke milis.
Mau menanyakan mengenai email dari saya yang sepertinya ke-reject dengan
informasi berikut:

This is the mail system at host smtp.indo.net.id.

I'm sorry to have to inform you that your message could not be delivered to
one or more recipients. It's attached below.

For further assistance, please send mail to postmaster.

If you do so, please include this problem report. You can delete your own
text from the attached returned message.

   The mail system

: host
microsoft-com.mail.protection.outlook.com[23.103.156.74] said: 550 5.4.1
[v-ans...@microsoft.com]: Recipient address rejected: Access denied
[DM3NAM06FT015.Eop-nam06.prod.protection.outlook.com] (in reply to RCPT
TO
command)


Reporting-MTA: dns; smtp.indo.net.id
X-Postfix-Queue-ID: DCDC4780071
X-Postfix-Sender: rfc822; prvs=17771d41c9=hengga.hitchc...@anjhealthcare.com
Arrival-Date: Mon, 27 Aug 2018 19:38:53 +0700 (WIB)

Final-Recipient: rfc822; v-ans...@microsoft.com
Original-Recipient: rfc822;v-ans...@microsoft.com
Action: failed
Status: 5.4.1
Remote-MTA: dns; microsoft-com.mail.protection.outlook.com
Diagnostic-Code: smtp; 550 5.4.1 [v-ans...@microsoft.com]: Recipient address
rejected: Access denied
[DM3NAM06FT015.Eop-nam06.prod.protection.outlook.com]


-
Return-Path: 
Received: from anjhealthcare.com (unknown [202.153.232.10])
by smtp.indo.net.id (Postfix) with ESMTPS id DCDC4780071
for ; Mon, 27 Aug 2018 19:38:53 +0700 (WIB)
X-MDAV-Result: clean
X-MDAV-Processed: anjhealthcare.com, Mon, 27 Aug 2018 19:37:26 +0700
Received: from HenggaE460 by anjhealthcare.com with ESMTPSA id
md5021770.msg; 
Mon, 27 Aug 2018 19:37:26 +0700
X-Spam-Processed: anjhealthcare.com, Mon, 27 Aug 2018 19:37:26 +0700
(not processed: message from trusted or authenticated source)
X-MDArrival-Date: Mon, 27 Aug 2018 19:37:26 +0700
X-Authenticated-Sender: hengga.hitchc...@anjhealthcare.com
X-Return-Path: prvs=17771d41c9=hengga.hitchc...@anjhealthcare.com
X-Envelope-From: hengga.hitchc...@anjhealthcare.com
X-MDaemon-Deliver-To: v-ans...@microsoft.com
From: "Hengga H." 
To: 
Subject: Inquiry mengenai lisensi
Date: Mon, 27 Aug 2018 19:37:22 +0700
Message-ID: <00a801d43e02$b4322970$1c967c50$@anjhealthcare.com>
MIME-Version: 1.0
Content-Type: multipart/related;
boundary="=_NextPart_000_00A9_01D43E3D.60919DB0"
X-Mailer: Microsoft Outlook 16.0
Content-Language: en-us
Thread-Index: AdQ+ATxa9PWwiOMzThezq+l8i33lbg==
---

Mohon masukannya kenapa hal ini terjadi?

Terima kasih sebelumnya.
Hengga
-
IT Head of Network and Operation Dept.



--
ANJ HealthCare
Pelayanan Ramah Sepenuh Hati

Disclaimer

This email contains confidential and privileged information for the sole use of 
the intended recipients. If you are not an intended recipient, you are hereby 
notified that any disclosure, copying, or distribution of this email, or taking 
any action based on its content, is strictly prohibited, and you should: (i) 
immediately delete this email and its attachments from your system, and (ii) 
inform the sender by reply email that you are not an intended recipient. The 
company of the sender does not accept any liability for its employee's 
communications that are contrary to the company's core values or outside the 
scope of employment.


-- 
--[mdaemon-l]--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com
Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com
Versi terakhir MD 18.0.2, SG 5.5.0

[mdaemon-l] Training Center MDaemon

[Hengga H.]

Malam,

> Kami Duta Integrasi yang menyelenggarakannya sejak tahun 2010 yl setiap
> kuartal s/d akhir 2016 (atau awal 2017, lupa persisnya).
> Tahun ini (2018) training out-host kami hentikan dulu, kecuali untuk in-house
> training.
> 
> > Silabus dan biayanya saya bisa dapatkan dimana?
> 
> Hubungi sa...@dutaservisindo.co.id yang menangani training.

Terima kasih atas informasinya Pak Syafril.

> 
> 
> 
> --
> syafril
> ---
> Syafril Hermansyah
> MDaemon-L Moderators, running MDaemon 18.0.2-64 bit Harap tidak cc: atau
> kirim ke private mail untuk masalah MDaemon.
> 
> We do not remember days, we remember moments.
>   --- Cesare Pavese


--
ANJ HealthCare
Pelayanan Ramah Sepenuh Hati

Disclaimer

This email contains confidential and privileged information for the sole use of 
the intended recipients. If you are not an intended recipient, you are hereby 
notified that any disclosure, copying, or distribution of this email, or taking 
any action based on its content, is strictly prohibited, and you should: (i) 
immediately delete this email and its attachments from your system, and (ii) 
inform the sender by reply email that you are not an intended recipient. The 
company of the sender does not accept any liability for its employee's 
communications that are contrary to the company's core values or outside the 
scope of employment.


--
--[mdaemon-l]--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com
Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com
Versi terakhir MD 18.0.2, SG 5.5.0

[mdaemon-l] Training Center MDaemon

[Hengga H.]

Selamat siang Pak Syafril,

 

Apakah sekarang ini masih ada training center untuk Mdaemon dan semua
fitur-fiturnya di Jakarta?

Silabus dan biayanya saya bisa dapatkan dimana?

 

Terima kasih.

 

Regards,

Hengga

-

IT Head of Network and Operation Dept.

 



--
ANJ HealthCare
Pelayanan Ramah Sepenuh Hati

Disclaimer

This email contains confidential and privileged information for the sole use of 
the intended recipients. If you are not an intended recipient, you are hereby 
notified that any disclosure, copying, or distribution of this email, or taking 
any action based on its content, is strictly prohibited, and you should: (i) 
immediately delete this email and its attachments from your system, and (ii) 
inform the sender by reply email that you are not an intended recipient. The 
company of the sender does not accept any liability for its employee's 
communications that are contrary to the company's core values or outside the 
scope of employment.

-- 
--[mdaemon-l]--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com
Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com
Versi terakhir MD 18.0.2, SG 5.5.0

[mdaemon-l] Email Session

[Hengga H.]

Siang,

> > Mon 2018-08-13 14:38:32.203: Accepting SMTP connection from
> > 172.16.22.12:49441 to 172.16.24.23:25
> >
> > Mon 2018-08-13 14:48:26.318: Connection timed out!
> 
> 
> Bukankah IP 172.16.22.12 itu adalah IP firewall?
IP ini adalah salah satu client email kami pak.

> Internet NIC di MDaemon overload/congestion sehingga perlu restart windows.
> 
Setelah saya restart server Mdaemon, email baru terkirim normal.  Sebelumnya 
coba stop dan service Mdaemon, masih belum bisa.

> Perbaiki setting firewallnya, dari NAT menjadi PAT agar semua antispam dan
> antirelay di MDaemon berfungsi benar.
> 
> https://www.mail-archive.com/mdaemon-l@dutaint.com/msg36387.html
> 
Baik pak Syafril.
Akan coba saya pelajari NAT menjadi PAT ini.  Setelah itu akan saya request ke 
team router.

Terima kasih atas informasinya.

Salam,
Hengga



--
ANJ HealthCare
Pelayanan Ramah Sepenuh Hati

Disclaimer

This email contains confidential and privileged information for the sole use of 
the intended recipients. If you are not an intended recipient, you are hereby 
notified that any disclosure, copying, or distribution of this email, or taking 
any action based on its content, is strictly prohibited, and you should: (i) 
immediately delete this email and its attachments from your system, and (ii) 
inform the sender by reply email that you are not an intended recipient. The 
company of the sender does not accept any liability for its employee's 
communications that are contrary to the company's core values or outside the 
scope of employment.


--
--[mdaemon-l]--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com
Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com
Versi terakhir MD 18.0.2, SG 5.5.0

[mdaemon-l] Email Session

[Hengga H.]

Selamat Siang,

 

Mau tanya barusan kejadian email Mdaemon saya lihat ada session yang tidak
seperti biasanya.

Sending email di user tiba-tiba tidak bisa.  Setelah saya cek banyak session
queue di email server:

 



 

Dan di Log Mail SMTP (in):

Mon 2018-08-13 14:50:46.227: --

Mon 2018-08-13 14:38:32.203: Session 171710; child 0050

Mon 2018-08-13 14:38:32.203: Accepting SMTP connection from
172.16.22.12:49441 to 172.16.24.23:25

Mon 2018-08-13 14:48:26.318: Connection timed out!

Mon 2018-08-13 14:51:01.235: --> 220 anjhealthcare.com ESMTP Mon, 13 Aug
2018 14:51:01 +0700

Mon 2018-08-13 14:51:01.235: SMTP session terminated (Bytes in/out: 0/0)

Mon 2018-08-13 14:51:01.236: --

Mon 2018-08-13 14:38:52.363: Session 171712; child 0050

Mon 2018-08-13 14:38:52.363: Accepting SMTP connection from
172.16.20.40:59119 to 172.16.24.23:25

Mon 2018-08-13 14:48:46.319: Connection timed out!

Mon 2018-08-13 14:51:16.228: --> 220 anjhealthcare.com ESMTP Mon, 13 Aug
2018 14:51:16 +0700

Mon 2018-08-13 14:51:16.228: SMTP session terminated (Bytes in/out: 0/0)

Mon 2018-08-13 14:51:16.228: --

Mon 2018-08-13 14:39:02.630: Session 171713; child 0050

Mon 2018-08-13 14:39:02.630: Accepting SMTP connection from
181.214.206.200:31166 to 172.16.24.23:25

Mon 2018-08-13 14:48:57.316: Connection timed out!

Mon 2018-08-13 14:51:31.238: Performing PTR lookup
(200.206.214.181.IN-ADDR.ARPA)

Mon 2018-08-13 14:51:31.241: SMTP session terminated (Bytes in/out: 0/0)

Mon 2018-08-13 14:51:31.241: --

Mon 2018-08-13 14:39:20.053: Session 171714; child 0050

Mon 2018-08-13 14:39:20.053: Accepting SMTP connection from
172.16.26.34:57624 to 172.16.24.23:25

Mon 2018-08-13 14:49:14.317: Connection timed out!

Mon 2018-08-13 14:51:46.247: --> 220 anjhealthcare.com ESMTP Mon, 13 Aug
2018 14:51:46 +0700

Mon 2018-08-13 14:51:46.248: SMTP session terminated (Bytes in/out: 0/0)

Mon 2018-08-13 14:51:46.248: --

Mon 2018-08-13 14:39:31.702: Session 171718; child 0050

Mon 2018-08-13 14:39:31.702: Accepting SMTP connection from
181.214.206.18:63040 to 172.16.24.23:25

Mon 2018-08-13 14:49:26.316: Connection timed out!

Mon 2018-08-13 14:52:01.243: Performing PTR lookup
(18.206.214.181.IN-ADDR.ARPA)

Mon 2018-08-13 14:52:01.250: SMTP session terminated (Bytes in/out: 0/0)

Mon 2018-08-13 14:52:01.250: --

Mon 2018-08-13 14:39:47.795: Session 171719; child 0050

Mon 2018-08-13 14:39:47.795: Accepting SMTP connection from
172.18.1.32:50731 to 172.16.24.23:25

Mon 2018-08-13 14:49:42.315: Connection timed out!

Mon 2018-08-13 14:52:16.255: --> 220 anjhealthcare.com ESMTP Mon, 13 Aug
2018 14:52:16 +0700

Mon 2018-08-13 14:52:16.256: SMTP session terminated (Bytes in/out: 0/0)

Mon 2018-08-13 14:52:16.256: --

 

Banyak Connection timed out.

 

Mohon bantuan analisanya.

 

Terima kasih.

 

Regards,

Hengga

 

-

IT Head of Network and Operation Dept.

 



--
ANJ HealthCare
Pelayanan Ramah Sepenuh Hati

Disclaimer

This email contains confidential and privileged information for the sole use of 
the intended recipients. If you are not an intended recipient, you are hereby 
notified that any disclosure, copying, or distribution of this email, or taking 
any action based on its content, is strictly prohibited, and you should: (i) 
immediately delete this email and its attachments from your system, and (ii) 
inform the sender by reply email that you are not an intended recipient. The 
company of the sender does not accept any liability for its employee's 
communications that are contrary to the company's core values or outside the 
scope of employment.

[mdaemon-l] Cara mengecek email yang tidak masuk

[Hengga H.]

Dear Pak Syafril,
 
> ---
> Mohon tidak posting dengan top posting style di milis ini.
> Gunakan inline style replies seperti ini
> 
> https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
> 
> Untuk kemudahan melakukannya maka uabh sedikit setting email client sbb:
> 
> https://www.slipstick.com/outlook/email/to-use-internet-style-quoting/
> 
Terima kasih atas koreksi dan informasinya untuk standar pengiriman email di 
sini.

> Maaf, saya tidak mau analisis log palsu atau yang sudah diotak-atik.
> Sampaikan log apa adanya (asli).
> 
Berikut adalah log aslinya:
Thu 2018-05-24 14:55:00: Session 229818; child 0001
Thu 2018-05-24 14:55:00: Accepting SMTP connection from [40.107.5.119:48784] to 
[192.168.13.4:25]
Thu 2018-05-24 14:55:00: Performing PTR lookup (119.5.107.40.IN-ADDR.ARPA)
Thu 2018-05-24 14:55:00: *  D=119.5.107.40.IN-ADDR.ARPA TTL=(60) 
PTR=[mail-eopbgr50119.outbound.protection.outlook.com]
Thu 2018-05-24 14:55:00: *  Gathering A records...
Thu 2018-05-24 14:55:00: *  D=mail-eopbgr50119.outbound.protection.outlook.com 
TTL=(19) A=[40.107.5.119]
Thu 2018-05-24 14:55:00:  End PTR results
Thu 2018-05-24 14:55:00: --> 220 anjhealthcare.com ESMTP MDaemon 13.5.5; Thu, 
24 May 2018 14:55:00 +0700
Thu 2018-05-24 14:55:00: <-- EHLO EUR03-VE1-obe.outbound.protection.outlook.com
Thu 2018-05-24 14:55:00: --> 250-anjhealthcare.com Hello 
mail-eopbgr50119.outbound.protection.outlook.com, pleased to meet you
Thu 2018-05-24 14:55:00: --> 250-ETRN
Thu 2018-05-24 14:55:00: --> 250-AUTH LOGIN CRAM-MD5 PLAIN
Thu 2018-05-24 14:55:00: --> 250-8BITMIME
Thu 2018-05-24 14:55:00: --> 250-STARTTLS
Thu 2018-05-24 14:55:00: --> 250 SIZE
Thu 2018-05-24 14:55:00: <-- STARTTLS
Thu 2018-05-24 14:55:00: --> 220 Begin TLS negotiation
Thu 2018-05-24 14:55:01: SSL negotiation successful (TLS 1.0, 1024 bit key 
exchange, 128 bit  encryption)
Thu 2018-05-24 14:55:01: <-- EHLO EUR03-VE1-obe.outbound.protection.outlook.com
Thu 2018-05-24 14:55:01: --> 250-anjhealthcare.com Hello 
mail-eopbgr50119.outbound.protection.outlook.com, pleased to meet you
Thu 2018-05-24 14:55:01: --> 250-ETRN
Thu 2018-05-24 14:55:01: --> 250-AUTH LOGIN CRAM-MD5 PLAIN
Thu 2018-05-24 14:55:01: --> 250-8BITMIME
Thu 2018-05-24 14:55:01: --> 250 SIZE
Thu 2018-05-24 14:55:01: <-- MAIL FROM: SIZE=49053
Thu 2018-05-24 14:55:01: Performing IP lookup 
(EUR03-VE1-obe.outbound.protection.outlook.com)
Thu 2018-05-24 14:55:02: *  D=EUR03-VE1-obe.outbound.protection.outlook.com 
TTL=(10) A=[213.199.154.143]
Thu 2018-05-24 14:55:02:  End IP lookup results
Thu 2018-05-24 14:55:02: Performing IP lookup (ommax.de)
Thu 2018-05-24 14:55:02: *  D=ommax.de TTL=(1439) A=[46.30.57.13]
Thu 2018-05-24 14:55:03: *  P=010 S=000 D=ommax.de TTL=(1440) 
MX=[ommax-de.mail.protection.outlook.com] {213.199.154.234}
Thu 2018-05-24 14:55:03:  End IP lookup results
Thu 2018-05-24 14:55:03: --> 250 , Sender ok
Thu 2018-05-24 14:55:03: <-- RCPT TO:
Thu 2018-05-24 14:55:03: Performing DNS-BL lookup (40.107.5.119 - connecting IP)
Thu 2018-05-24 14:55:03: *  zen.spamhaus.org - passed
Thu 2018-05-24 14:55:03:  End DNS-BL results
Thu 2018-05-24 14:55:03: --> 250 , Recipient ok
Thu 2018-05-24 14:55:04: <-- RCPT TO:
Thu 2018-05-24 14:55:04: --> 250 , Recipient ok
Thu 2018-05-24 14:55:04: <-- DATA
Thu 2018-05-24 14:55:04: Creating temp file (SMTP): 
c:\mdaemon\queues\temp\md5005396.tmp
Thu 2018-05-24 14:55:04: --> 354 Enter mail, end with .
Thu 2018-05-24 14:55:05: Message size: 43134 bytes
Thu 2018-05-24 14:55:05: Performing DKIM lookup
Thu 2018-05-24 14:55:05: *  File: c:\mdaemon\queues\temp\md5005396.tmp
Thu 2018-05-24 14:55:05: *  Message-ID: 
am5pr0602mb2929a2a39db891d6cd5c41b09c...@am5pr0602mb2929.eurprd06.prod.outlook.com
Thu 2018-05-24 14:55:05: * Signature (1): 
;v=1;a=rsa-sha256;c=relaxed/relaxed;d=Acanthos.onmicrosoft.com;s=selector1-ommax-de;b
 h=;
Thu 2018-05-24 14:55:05: *Verification result: [0] good
Thu 2018-05-24 14:55:05: *  Result: pass
Thu 2018-05-24 14:55:05:  End DKIM results
Thu 2018-05-24 14:55:05: Performing VBR certification (Domain: 
Acanthos.onmicrosoft.com, Auth: DKIM)
Thu 2018-05-24 14:55:05: *  File: c:\mdaemon\queues\temp\md5005396.tmp
Thu 2018-05-24 14:55:05: *  Message-ID: 
am5pr0602mb2929a2a39db891d6cd5c41b09c...@am5pr0602mb2929.eurprd06.prod.outlook.com
Thu 2018-05-24 14:55:05: *  Certifier (trusted): vbr.emailcertification.org ...
Thu 2018-05-24 14:55:05: *Querying: 
Acanthos.onmicrosoft.com._vouch.vbr.emailcertification.org ...
Thu 2018-05-24 14:55:15: *  DNS: 10 second wait for DNS response exceeded (DNS 
Server: 202.159.33.3)
Thu 2018-05-24 14:55:15: *Certifier does not recognize that domain
Thu 2018-05-24 14:55:15: *  Certification result: message not certified
Thu 2018-05-24 14:55:15:  End VBR results
Thu 2018-05-24 14:55:15: Passing message through AntiVirus (Size: 43134)...
Thu 2018-05-24 14:55:15: *  Message is clean (no viruses found)
Thu 2018-05-24 14:55:15:  End AntiVirus results
Thu 2018-05-24 14:55

[mdaemon-l] Cara mengecek email yang tidak masuk

[Hengga H.]

t.com] On Behalf Of
Syafril Hermansyah
Sent: Thursday, May 24, 2018 7:24 PM
To: mdaemon-l@dutaint.com
Subject: [mdaemon-l] Cara mengecek email yang tidak masuk

On 2018-05-24 18:37, Hengga H. (hengga.hitchc...@anjhealthcare.com) wrote:
> Saya ditugaskan untuk mencari tahu email yang tidak sampai ke direksi 
> dari salah satu vendor, bagaimana mengetahui email yang tidak masuk 
> tersebut di server kita ya?


Dari smtp-in log.

> Thu 2018-05-24 14:55:15: --> 250 Ok, message saved   d.outlook.com>>

> Apa artinya ya dari log ini?

Mail diterima dengan baik.

> Apakah Winsock Error tersebut yang mengakibatkan email gagal ke user email
saya?


Tidak.
Error itu akibat sender langsung memutus koneksi tanpa menunggu response
lanjutan dari receiver.
Error itu tidak fatal, karena mail data memang sudah diterima (response
"250 ok...".

Kalau recipient tidak menerimanya di inbox foldernya periksa ke routing log.
Gunakan kata kunci pencarian
"am5pr0602mb2929a2a39db891d6cd5c41b09c...@am5pr0602mb2929.eurprd06.prod.outl
ook.com"
(tanpa tanda kutip).
Message-ID adalah unik, sehingga paling cocok digunakan untuk mencari
message.

https://en.wikipedia.org/wiki/Message-ID
https://www.accelo.com/resources/blog/whats-an-email-message-id-and-how-do-i
-find-it/




--
syafril
---
Syafril Hermansyah
MDaemon-L Moderators, MDaemon 18.0.2-64 Beta A Harap tidak cc: atau kirim ke
private mail untuk masalah MDaemon.

You cannot unify everyone's thoughts, but you can unify everyone through a
common goal.
-- Jack Ma



--
--[mdaemon-l]--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com Henti Langgan:
Kirim mail ke mdaemon-l-unsubscr...@dutaint.com Versi terakhir MD 18.0.1, SG
5.5.0




--
ANJ HealthCare
Pelayanan Ramah Sepenuh Hati

Disclaimer

This email contains confidential and privileged information for the sole use of 
the intended recipients.  If you are not an intended recipient, you are hereby 
notified that any disclosure, copying, or distribution of this email, or taking 
any action based on its content, is strictly prohibited, and you should: (i) 
immediately delete this email and its attachments from your system, and (ii) 
inform the sender by reply email that you are not an intended recipient.  The 
company of the sender does not accept any liability for its employee's 
communications that are contrary to the company's core values or outside the 
scope of employment.


-- 
--[mdaemon-l]--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com
Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com
Versi terakhir MD 18.0.1, SG 5.5.0

[mdaemon-l] Cara mengecek email yang tidak masuk

[Hengga H.]

Selamat malam Pak Syafril,

 

Saya ditugaskan untuk mencari tahu email yang tidak sampai ke direksi dari
salah satu vendor, bagaimana mengetahui email yang tidak masuk tersebut di
server kita ya?

Diinformasikan bahwa ada email dari lxxx.mxxx...@ommax.de pada tanggal 24
Mei 2018 jam 2.54pm.

 

Saya coba cek log: Mdaemon20180524-all.old dan ketemu log berikut:

Thu 2018-05-24 14:55:00: Session 229818; child 0001

Thu 2018-05-24 14:55:00: Accepting SMTP connection from [40.107.5.119:48784]
to [192.168.13.4:25]

Thu 2018-05-24 14:55:00: Performing PTR lookup (119.5.107.40.IN-ADDR.ARPA)

Thu 2018-05-24 14:55:00: *  D=119.5.107.40.IN-ADDR.ARPA TTL=(60)
PTR=[mail-eopbgr50119.outbound.protection.outlook.com]

Thu 2018-05-24 14:55:00: *  Gathering A records...

Thu 2018-05-24 14:55:00: *
D=mail-eopbgr50119.outbound.protection.outlook.com TTL=(19) A=[40.107.5.119]

Thu 2018-05-24 14:55:00:  End PTR results

Thu 2018-05-24 14:55:00: --> 220 anjhealthcare.com ESMTP MDaemon 13.5.5;
Thu, 24 May 2018 14:55:00 +0700

Thu 2018-05-24 14:55:00: <-- EHLO
EUR03-VE1-obe.outbound.protection.outlook.com

Thu 2018-05-24 14:55:00: --> 250-anjhealthcare.com Hello
mail-eopbgr50119.outbound.protection.outlook.com, pleased to meet you

Thu 2018-05-24 14:55:00: --> 250-ETRN

Thu 2018-05-24 14:55:00: --> 250-AUTH LOGIN CRAM-MD5 PLAIN

Thu 2018-05-24 14:55:00: --> 250-8BITMIME

Thu 2018-05-24 14:55:00: --> 250-STARTTLS

Thu 2018-05-24 14:55:00: --> 250 SIZE

Thu 2018-05-24 14:55:00: <-- STARTTLS

Thu 2018-05-24 14:55:00: --> 220 Begin TLS negotiation

Thu 2018-05-24 14:55:01: SSL negotiation successful (TLS 1.0, 1024 bit key
exchange, 128 bit  encryption)

Thu 2018-05-24 14:55:01: <-- EHLO
EUR03-VE1-obe.outbound.protection.outlook.com

Thu 2018-05-24 14:55:01: --> 250-anjhealthcare.com Hello
mail-eopbgr50119.outbound.protection.outlook.com, pleased to meet you

Thu 2018-05-24 14:55:01: --> 250-ETRN

Thu 2018-05-24 14:55:01: --> 250-AUTH LOGIN CRAM-MD5 PLAIN

Thu 2018-05-24 14:55:01: --> 250-8BITMIME

Thu 2018-05-24 14:55:01: --> 250 SIZE

Thu 2018-05-24 14:55:01: <-- MAIL FROM:< Lxxx.Mxx @ommax.de> SIZE=49053

Thu 2018-05-24 14:55:01: Performing IP lookup
(EUR03-VE1-obe.outbound.protection.outlook.com)

Thu 2018-05-24 14:55:02: *  D=EUR03-VE1-obe.outbound.protection.outlook.com
TTL=(10) A=[213.199.154.143]

Thu 2018-05-24 14:55:02:  End IP lookup results

Thu 2018-05-24 14:55:02: Performing IP lookup (ommax.de)

Thu 2018-05-24 14:55:02: *  D=ommax.de TTL=(1439) A=[46.30.57.13]

Thu 2018-05-24 14:55:03: *  P=010 S=000 D=ommax.de TTL=(1440)
MX=[ommax-de.mail.protection.outlook.com] {213.199.154.234}

Thu 2018-05-24 14:55:03:  End IP lookup results

Thu 2018-05-24 14:55:03: --> 250 < Lxxx.Mxx @ommax.de>, Sender ok

Thu 2018-05-24 14:55:03: <-- RCPT TO:

Thu 2018-05-24 14:55:03: Performing DNS-BL lookup (40.107.5.119 - connecting
IP)

Thu 2018-05-24 14:55:03: *  zen.spamhaus.org - passed

Thu 2018-05-24 14:55:03:  End DNS-BL results

Thu 2018-05-24 14:55:03: --> 250 < r.w @anjhealthcare.com>,
Recipient ok

Thu 2018-05-24 14:55:04: <-- RCPT TO:

Thu 2018-05-24 14:55:04: --> 250 , Recipient ok

Thu 2018-05-24 14:55:04: <-- DATA

Thu 2018-05-24 14:55:04: Creating temp file (SMTP):
c:\mdaemon\queues\temp\md5005396.tmp

Thu 2018-05-24 14:55:04: --> 354 Enter mail, end with .

Thu 2018-05-24 14:55:05: Message size: 43134 bytes

Thu 2018-05-24 14:55:05: Performing DKIM lookup

Thu 2018-05-24 14:55:05: *  File: c:\mdaemon\queues\temp\md5005396.tmp

Thu 2018-05-24 14:55:05: *  Message-ID:
am5pr0602mb2929a2a39db891d6cd5c41b09c...@am5pr0602mb2929.eurprd06.prod.outlo
ok.com

Thu 2018-05-24 14:55:05: * Signature (1):
;v=1;a=rsa-sha256;c=relaxed/relaxed;d=Acanthos.onmicrosoft.com;s=selector1-o
mmax-de;b h=;

Thu 2018-05-24 14:55:05: *Verification result: [0] good

Thu 2018-05-24 14:55:05: *  Result: pass

Thu 2018-05-24 14:55:05:  End DKIM results

Thu 2018-05-24 14:55:05: Performing VBR certification (Domain:
Acanthos.onmicrosoft.com, Auth: DKIM)

Thu 2018-05-24 14:55:05: *  File: c:\mdaemon\queues\temp\md5005396.tmp

Thu 2018-05-24 14:55:05: *  Message-ID:
am5pr0602mb2929a2a39db891d6cd5c41b09c...@am5pr0602mb2929.eurprd06.prod.outlo
ok.com

Thu 2018-05-24 14:55:05: *  Certifier (trusted): vbr.emailcertification.org
...

Thu 2018-05-24 14:55:05: *Querying:
Acanthos.onmicrosoft.com._vouch.vbr.emailcertification.org ...

Thu 2018-05-24 14:55:15: *  DNS: 10 second wait for DNS response exceeded
(DNS Server: 202.159.33.3)

Thu 2018-05-24 14:55:15: *Certifier does not recognize that domain

Thu 2018-05-24 14:55:15: *  Certification result: message not certified

Thu 2018-05-24 14:55:15:  End VBR results

Thu 2018-05-24 14:55:15: Passing message through AntiVirus (Size: 43134)...

Thu 2018-05-24 14:55:15: *  Message is clean (no viruses found)

Thu 2018-05-24 14:55:15:  End AntiVirus results

Thu 2018-05-24 14:55:15: Message creation successful:
c:\mdaemon\queues\inbound\md50001901146.msg

Th