[MDaemon-L] error yg aneh

[Syafril Hermansyah]

On 05/04/2012 09:26 AM, Tommy - IT wrote:
> Selamat pagi pak, saya hendak menanyakan perihal error ini, saya
> curiga email account saya ada yg bajak.

Coba cari di smtp-in log, siapa yang kirim mail dengan message-ID
mdaemon0185201204272122.aa2221...@yomart-minimarket.com atau mungkinkah
ada mail dari postmas...@gina-blonde.de?

> Trus pak, mohon infonya lagi (saya lupa), dimana fasilitas (dalam
> MDaemon) untuk mengaktifkan checking untuk error seperti ini ; (saya
> pikir ini domain abuse spammer)
> 
> Thu 2012-05-03 05:07:37: [8512:1] *  Name server has no valid records
> of the requested type for that domain 

Kalau yang ini sih DNS resolver yang jadi referensi MDaemon
(202.152.5.36) gagal meresponse query MX host.
DNS server saya sih berhasil resolve

$ dig mx gina-blonde.de @ns1.dutaint.com

gina-blonde.de. 1200IN  MX  10 mail.gina-blonde.de.
mail.gina-blonde.de.1200IN  A   95.211.10.14

Kalau ingin checking sender host (dan sender domain) gunakan reverse lookup.



tetapi untuk itu upgrade dulu MDaemon ke versi 12.5.x karena di MD 10.x
belum mendukung differed bounce sampai sender kirim MAIL FROM command.
Disamping itu versi spamassassin di MD 10.x masih banyak false postitive
(salah duga) dan rawan terhadap bayes poisoning (polusi terhadap
bayesian scoring system).

Upgrade ke MD 12.5.5 (latest version) dan aktifkan sesuai tips berikut



(baca thread lengkapnya, jangan halaman itu saja).

Dan ubah DNS yang jadi referensi MDaemon dengan melakukan DNS benchmark



-- 
syafril
---
Syafril Hermansyah
MDaemon-L Moderators, running MDaemon 12.5.6 Beta A
Harap tidak cc: atau kirim ke private mail untuk masalah MDaemon.


--[MDaemon-L]
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server.

Netiket: 
Arsip: 
Dokumentasi : 
Henti Langgan: Kirim mail ke MDaemon-L-unsubscribe [at] dutaint.com
Berlangganan: kirim mail ke MDaemon-L-subscribe [at] dutaint.com
Versi terakhir MD 12.5.5, SP 4.1.4, OC 2.2.9, SG 2.0.7, PP 2.0.0

[MDaemon-L] error yg aneh

[Tommy - IT]

Dear pa Syafril,

Selamat pagi pak, saya hendak menanyakan perihal error ini, saya curiga email 
account saya ada yg bajak. berikut log di mademonnya ;

Thu 2012-05-03 05:07:58: [8512:1] Session 8512; child 1
Thu 2012-05-03 05:07:37: [8512:1] Parsing message 

Thu 2012-05-03 05:07:37: [8512:1] *  From: postmas...@yomart-minimarket.com
Thu 2012-05-03 05:07:37: [8512:1] *  To: postmas...@gina-blonde.de
Thu 2012-05-03 05:07:37: [8512:1] *  Subject: RE: Please Read Carefully and 
Urgently Get back to me!!!
Thu 2012-05-03 05:07:37: [8512:1] *  Size (bytes): 1188
Thu 2012-05-03 05:07:37: [8512:1] *  Message-ID: 

Thu 2012-05-03 05:07:37: [8512:1] Attempting SMTP connection to [gina-blonde.de]
Thu 2012-05-03 05:07:37: [8512:1] Resolving MX records for [gina-blonde.de] 
(DNS Server: 202.152.5.36)...
Thu 2012-05-03 05:07:37: [8512:1] *  Name server has no valid records of the 
requested type for that domain
Thu 2012-05-03 05:07:37: [8512:1] Attempting SMTP connection to 
[gina-blonde.de:25]
Thu 2012-05-03 05:07:37: [8512:1] *  Cache hit on gina-blonde.de; IP = 
202.152.4.67
Thu 2012-05-03 05:07:37: [8512:1] Waiting for socket connection...
Thu 2012-05-03 05:07:58: [8512:1] *  Winsock Error 10065 The host is 
unreachable.  Are you connected to the network?
Thu 2012-05-03 05:07:58: [8512:1] *  gina-blonde.de added to connection failure 
cache for 1 minutes
Thu 2012-05-03 05:07:58: [8512:1] This message is 5 days old; it has 0 days 
left to get delivered
Thu 2012-05-03 05:07:58: [8512:1] nore...@yomart-minimarket.com will be 
informed that this delivery attempt failed
Thu 2012-05-03 05:07:58: [8512:1] Retry attempts exhausted; message removed 
from retry queue
Thu 2012-05-03 05:07:58: [8512:1] SMTP session terminated (Bytes in/out: 0/0)
Thu 2012-05-03 05:07:58: --

dan report error dari Mdemonnya saya attachkan. 

Trus pak, mohon infonya lagi (saya lupa), dimana fasilitas (dalam MDaemon) 
untuk mengaktifkan checking untuk error seperti ini ; (saya pikir ini domain 
abuse spammer)

Thu 2012-05-03 05:07:37: [8512:1] *  Name server has no valid records of the 
requested type for that domain

terima kasih atas saran dan masukannya.

tommy--- Begin Message ---
nore...@yomart-minimarket.com - no such user here.

Message was sent by nore...@yomart-minimarket.com.



md75000301987.eml
Description: Binary data
-
No virus found in this message.
Checked by AVG - www.avg.com
Version: 2012.0.1913 / Virus Database: 2411/4973 - Release Date: 05/02/12--- End Message ---