[Mdaemon-L] Packet from DNS server was not valid
> Non aktifkan saja dulu EDNS0, karena tidak semua public DNS men set EDNS0. > Dan EDNS itu perlu mengaktifkan DNSSec. Error message 'Packet from DNS server was not valid' muncul saat saya sedang tidak mengaktifkan EDNS0 sedari awal pak, karena saat saya aktifkan masih menemui kendala. Apakah cukup saya biarkan saja atau saya perlu berkoordinasi dengan ISP terkait kendala DNS tersebut? Terima kasih. -- --[mdaemon-l]-- Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette Arsip: http://mdaemon-l.dutaint.com Dokumentasi : http://mdaemon.dutaint.co.id Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com Versi terakhir: MDaemon 21.5.1, SecurityGateway 8.0.4
[Mdaemon-L] Packet from DNS server was not valid
> Pakai Mdaemon versi berapa? Masih di W10 pro 32bit dengan MDaemon 21.5.1 32bit. > e-dns itu maksudnya EDNS0? Betul pak. Terima kasih. -- --[mdaemon-l]-- Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette Arsip: http://mdaemon-l.dutaint.com Dokumentasi : http://mdaemon.dutaint.co.id Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com Versi terakhir: MDaemon 21.5.1, SecurityGateway 8.0.4
[Mdaemon-L] Packet from DNS server was not valid
Selmat siang Pak Syafril, Mohon informasi dan arahannya terkait error message berikut: Mon 2022-01-17 13:49:57.034: 01: -- Mon 2022-01-17 13:45:27.291: 01: [01098986] REMOTE message: pd3501000268683.msg Mon 2022-01-17 13:45:27.291: 01: [01098986] * Session 01098986; child 0001 Mon 2022-01-17 13:45:27.292: 01: [01098986] * From: suli...@richtex.co.id Mon 2022-01-17 13:45:27.292: 01: [01098986] * To: ardian_...@bca.co.id Mon 2022-01-17 13:45:27.292: 01: [01098986] * Subject: Re: Pelunasan Time Loan Mon 2022-01-17 13:45:27.292: 01: [01098986] * Message-ID: Mon 2022-01-17 13:45:27.292: 01: [01098986] * Size: 69108; Mon 2022-01-17 13:45:27.293: 08: [01098986] Resolving TXT record for _mta-sts.bca.co.id (DNS Server: 202.152.0.2)... Mon 2022-01-17 13:45:27.314: 08: [01098986] No MTA-STS TXT record found Mon 2022-01-17 13:45:27.314: 05: [01098986] Resolving MX record for bca.co.id (DNS Server: 202.152.0.2)... Mon 2022-01-17 13:45:27.315: 04: [01098986] * Packet from DNS server was not valid Mon 2022-01-17 13:46:27.246: 04: [01098986] * DNS: 60 second wait for DNS response exceeded (DNS Server: 202.152.0.2) Mon 2022-01-17 13:46:27.246: 05: [01098986] Resolving MX record for bca.co.id (DNS Server: 8.8.8.8)... Mon 2022-01-17 13:46:27.248: 04: [01098986] * Packet from DNS server was not valid Mon 2022-01-17 13:47:27.343: 04: [01098986] * DNS: 60 second wait for DNS response exceeded (DNS Server: 8.8.8.8) Mon 2022-01-17 13:47:27.343: 05: [01098986] Resolving MX record for bca.co.id (DNS Server: 202.152.5.36)... Mon 2022-01-17 13:47:27.346: 04: [01098986] * Packet from DNS server was not valid Mon 2022-01-17 13:48:27.344: 04: [01098986] * DNS: 60 second wait for DNS response exceeded (DNS Server: 202.152.5.36) Mon 2022-01-17 13:48:27.344: 05: [01098986] Resolving MX record for bca.co.id (DNS Server: 4.2.2.6)... Mon 2022-01-17 13:48:27.346: 04: [01098986] * Packet from DNS server was not valid Mon 2022-01-17 13:49:27.344: 04: [01098986] * DNS: 60 second wait for DNS response exceeded (DNS Server: 4.2.2.6) Mon 2022-01-17 13:49:27.344: 05: [01098986] Resolving MX record for bca.co.id (DNS Server: 4.2.2.2)... Mon 2022-01-17 13:49:27.346: 04: [01098986] * Packet from DNS server was not valid Mon 2022-01-17 13:50:27.375: 04: [01098986] * DNS: 60 second wait for DNS response exceeded (DNS Server: 4.2.2.2) Mon 2022-01-17 13:50:27.375: 05: [01098986] Resolving MX record for bca.co.id (DNS Server: 1.1.1.1)... Mon 2022-01-17 13:50:27.377: 04: [01098986] * Packet from DNS server was not valid Mon 2022-01-17 13:51:27.407: 04: [01098986] * DNS: 60 second wait for DNS response exceeded (DNS Server: 1.1.1.1) Mon 2022-01-17 13:51:27.407: 08: [01098986] Resolving TXT record for _mta-sts.smtp-1.idola.net.id (DNS Server: 202.152.0.2)... Mon 2022-01-17 13:51:27.428: 08: [01098986] No MTA-STS TXT record found Mon 2022-01-17 13:51:27.428: 05: [01098986] Resolving MX record for smtp-1.idola.net.id (DNS Server: 202.152.0.2)... Mon 2022-01-17 13:51:27.444: 04: [01098986] * DNS server reports no valid records for the requested type found Mon 2022-01-17 13:51:27.444: 05: [01098986] Resolving MX record for smtp-1.idola.net.id (DNS Server: 8.8.8.8)... Mon 2022-01-17 13:51:27.462: 04: [01098986] * DNS server reports no valid records for the requested type found Mon 2022-01-17 13:51:27.462: 05: [01098986] Resolving MX record for smtp-1.idola.net.id (DNS Server: 202.152.5.36)... Mon 2022-01-17 13:51:27.477: 04: [01098986] * DNS server reports no valid records for the requested type found Mon 2022-01-17 13:51:27.477: 05: [01098986] Resolving MX record for smtp-1.idola.net.id (DNS Server: 4.2.2.6)... Mon 2022-01-17 13:51:27.496: 04: [01098986] * DNS server reports no valid records for the requested type found Mon 2022-01-17 13:51:27.496: 05: [01098986] Resolving MX record for smtp-1.idola.net.id (DNS Server: 4.2.2.2)... Mon 2022-01-17 13:51:27.514: 04: [01098986] * DNS server reports no valid records for the requested type found Mon 2022-01-17 13:51:27.514: 05: [01098986] Resolving MX record for smtp-1.idola.net.id (DNS Server: 1.1.1.1)... Mon 2022-01-17 13:51:27.529: 04: [01098986] * DNS server reports no valid records for the requested type found Mon 2022-01-17 13:51:27.530: 05: [01098986] Attempting to send message to smart host Mon 2022-01-17 13:51:27.530: 05: [01098986] Attempting SMTP connection to smtp-1.idola.net.id Mon 2022-01-17 13:51:27.530: 05: [01098986] Resolving A record for smtp-1.idola.net.id (DNS Server: 202.152.0.2)... Mon 2022-01-17 13:51:27.545: 05: [01098986] * D=smtp-1.idola.net.id TTL=(54) A=[202.152.0.51] Mon 2022-01-17 13:51:27.546: 05: [01098986] Attempting SMTP connection to 202.152.0.51:25 Mon 2022-01-17 13:51:27.546: 05: [01098986] Waiting for socket connection... Mon 2022-01-17 13:51:27.560: 05: [01098986] * Connection established 10.0.1.2:54761 --> 202.152.0.51:25 Mon 2022-01-17 13:51:27.560: 05: [01098986] Waiting for protocol to
[Mdaemon-L] Socket error 10040 - Message is too long
> SPF domain infornexus.com salah syntax sehingga tampil error begitu. > Tidak fatal, tetapi kalau ingin agar tidak tampil lagi error itu masukkan > sender > domain kedalam SPF whitelist. Noted pak. Ada beberapa domain yang menampilkan error yang sama, setelah saya random cek memang problem di spf mereka. Tindakan yang saya ambil hanya melakukan whitelist pada domain kolega kami yang rutin berkorespondensi. Terima kasih. -- --[mdaemon-l]-- Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette Arsip: http://mdaemon-l.dutaint.com Dokumentasi : http://mdaemon.dutaint.co.id Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com Versi terakhir: MDaemon 21.5.1, SecurityGateway 8.0.4
[Mdaemon-L] Socket error 10040 - Message is too long
Selamat siang Pak Syafril, Mohon informasi dan arahannya terkait error message sesuai log berikut: Mon 2022-01-17 13:14:43.785: 01: -- Mon 2022-01-17 13:17:18.116: 05: [01097993] Session 01097993; child 0001 Mon 2022-01-17 13:17:18.116: 05: [01097993] Accepting SMTP connection from 208.87.221.26:50294 to 10.0.1.2:25 Mon 2022-01-17 13:17:18.116: 07: [01097993] Location Screen says connection is from United States, North America Mon 2022-01-17 13:17:18.118: 03: [01097993] --> 220 mail.richtex.co.id ESMTP Mon, 17 Jan 2022 13:17:18 +0700 Mon 2022-01-17 13:17:18.424: 02: [01097993] <-- EHLO smtp2.gtnexus.com Mon 2022-01-17 13:17:18.432: 01: [01097993] EHLO/HELO response delayed 3 seconds Mon 2022-01-17 13:17:21.433: 03: [01097993] --> 250-mail.richtex.co.id Hello smtp2.gtnexus.com [208.87.221.26], pleased to meet you Mon 2022-01-17 13:17:21.433: 03: [01097993] --> 250-ETRN Mon 2022-01-17 13:17:21.433: 07: [01097993] Location Screening hiding AUTH from country United States, North America Mon 2022-01-17 13:17:21.433: 03: [01097993] --> 250-8BITMIME Mon 2022-01-17 13:17:21.433: 03: [01097993] --> 250-ENHANCEDSTATUSCODES Mon 2022-01-17 13:17:21.433: 03: [01097993] --> 250-PIPELINING Mon 2022-01-17 13:17:21.433: 03: [01097993] --> 250-CHUNKING Mon 2022-01-17 13:17:21.433: 03: [01097993] --> 250-STARTTLS Mon 2022-01-17 13:17:21.433: 03: [01097993] --> 250 SIZE 2048 Mon 2022-01-17 13:17:21.650: 02: [01097993] <-- STARTTLS Mon 2022-01-17 13:17:21.651: 03: [01097993] --> 220 2.7.0 Ready to start TLS Mon 2022-01-17 13:17:22.101: 01: [01097993] SSL negotiation successful (TLS 1.2, 384 bit key exchange, 256 bit AES encryption) Mon 2022-01-17 13:17:22.316: 02: [01097993] <-- EHLO smtp2.gtnexus.com Mon 2022-01-17 13:17:22.321: 03: [01097993] --> 250-mail.richtex.co.id Hello smtp2.gtnexus.com [208.87.221.26], pleased to meet you Mon 2022-01-17 13:17:22.321: 03: [01097993] --> 250-ETRN Mon 2022-01-17 13:17:22.321: 07: [01097993] Location Screening hiding AUTH from country United States, North America Mon 2022-01-17 13:17:22.321: 03: [01097993] --> 250-8BITMIME Mon 2022-01-17 13:17:22.321: 03: [01097993] --> 250-ENHANCEDSTATUSCODES Mon 2022-01-17 13:17:22.321: 03: [01097993] --> 250-PIPELINING Mon 2022-01-17 13:17:22.321: 03: [01097993] --> 250-CHUNKING Mon 2022-01-17 13:17:22.321: 03: [01097993] --> 250-REQUIRETLS Mon 2022-01-17 13:17:22.321: 03: [01097993] --> 250 SIZE 2048 Mon 2022-01-17 13:17:22.539: 02: [01097993] <-- MAIL FROM: SIZE=5047 Mon 2022-01-17 13:17:22.552: 09: [01097993] Performing SPF lookup (smtp2.gtnexus.com / 208.87.221.26) Mon 2022-01-17 13:17:22.659: 09: [01097993] * Result: none; no SPF record in DNS Mon 2022-01-17 13:17:22.659: 09: [01097993] End SPF results Mon 2022-01-17 13:17:22.659: 09: [01097993] Performing SPF lookup (infornexus.com / 208.87.221.26) Mon 2022-01-17 13:17:22.827: 04: [01097993] * Socket error 10040 - Message is too long. Mon 2022-01-17 13:17:22.828: 04: [01097993] * Socket error 10040 - Message is too long. Mon 2022-01-17 13:17:22.829: 04: [01097993] * Socket error 10040 - Message is too long. Mon 2022-01-17 13:17:22.830: 04: [01097993] * Socket error 10040 - Message is too long. Mon 2022-01-17 13:17:22.830: 04: [01097993] * Socket error 10040 - Message is too long. Mon 2022-01-17 13:17:22.831: 04: [01097993] * Socket error 10040 - Message is too long. Mon 2022-01-17 13:17:22.831: 09: [01097993] * Result: none; no SPF record in DNS Mon 2022-01-17 13:17:22.831: 09: [01097993] End SPF results Mon 2022-01-17 13:17:22.831: 03: [01097993] --> 250 2.1.0 Sender OK Mon 2022-01-17 13:17:23.074: 02: [01097993] <-- RCPT TO: Mon 2022-01-17 13:17:23.081: 05: [01097993] Performing DNS-BL lookup (208.87.221.26 - connecting IP) Mon 2022-01-17 13:17:23.110: 05: [01097993] * zen.spamhaus.org - passed Mon 2022-01-17 13:17:23.377: 05: [01097993] * b.barracudacentral.org - passed Mon 2022-01-17 13:17:23.474: 05: [01097993] * bl.spamcop.net - passed Mon 2022-01-17 13:17:23.732: 05: [01097993] * truncate.gbudb.net - passed Mon 2022-01-17 13:17:23.765: 05: [01097993] * cbl.abuseat.org - passed Mon 2022-01-17 13:17:23.991: 05: [01097993] * spam.dnsbl.sorbs.net - passed Mon 2022-01-17 13:17:24.202: 05: [01097993] * dnsbl-1.uceprotect.net - passed Mon 2022-01-17 13:17:24.202: 05: [01097993] End DNS-BL results Mon 2022-01-17 13:17:24.206: 03: [01097993] --> 250 2.1.5 Recipient OK Mon 2022-01-17 13:17:24.420: 02: [01097993] <-- DATA Mon 2022-01-17 13:17:24.424: 03: [01097993] --> 354 Enter mail, end with . Mon 2022-01-17 13:17:24.852: 01: [01097993] Message size: 6791 bytes Mon 2022-01-17 13:17:24.854: 10: [01097993] Performing DKIM verification Mon 2022-01-17 13:17:24.854: 10: [01097993] * File: d:\mdaemon\queues\temp\49\md500100019.tmp Mon 2022-01-17 13:17:24.854: 10: [01097993] * Message-ID: <1238337298.1642400215686.Mail.Server@TradeCard> Mon 2022-01-17 13:17:24.891: 10: [01097993] *
[Mdaemon-L] 451 your mailer sent a bare LF
Selamat pagi Pak Syafril, > Sampaikan seperti ini permintaannya, kira-kira: > Mohon kiranya agar outbound tcp port 25 server mail.richtex.co.id > [182.23.69.132] tidak difilter. Mengkonfirmasi, saat ini outbound tcp port 25 server mail.richtex.co.id sudah tidak di filter. telnet gmail-smtp-in.l.google.com 25 220 mx.google.com ESMTP q10si1745685pfj.374 - gsmtp ehlo mail.richtex.co.id 250-mx.google.com at your service, [182.23.69.132] 250-SIZE 157286400 250-8BITMIME 250-STARTTLS 250-ENHANCEDSTATUSCODES 250-PIPELINING 250-CHUNKING 250 SMTPUTF8 telnet obormachinery.com 25 220 piyabung.maintenis.com ESMTP ehlo mail.richtex.co.id 250-piyabung.maintenis.com 250-AUTH=LOGIN CRAM-MD5 PLAIN 250-AUTH LOGIN CRAM-MD5 PLAIN 250-STARTTLS 250-PIPELINING 250 8BITMIME Mungkin memang harus dijelaskan dengan rinci detail permasalahan beserta contoh-contoh yang relevan agar bisa ditemukan letak filtering outbound tcp port 25 oleh NOC lintasarta. Dengan ini permasaahan Bare LF sudah teratasi. Terima kasih atas bantuannya Pak Syafril. Terima kasih. -- --[mdaemon-l]-- Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette Arsip: http://mdaemon-l.dutaint.com Dokumentasi : http://mdaemon.dutaint.co.id Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com Versi terakhir: MDaemon 21.5.1, SecurityGateway 8.0.4
[Mdaemon-L] 451 your mailer sent a bare LF
Selamat siang Pak Syafril, > STARTTLS dan PIPELINING masih terfilter. > Harusnya seperti diatas. > > Apakah belum menghubungi ISP ISP (lintasarta.net.id alias > idola.net.id) untuk tidak difilter? Saya sudah sejak minggu kemarin menghubungi ISP dan open ticket ke idola jakarta, namun hingga saya kirim email ini masih tetap terfilter. Sepertinya tim teknis masih bingung dari sisi mana filter pipelining dan starttls yang dimaksud. Segala cara sudah saya sampaikan ke mereka termasuk memberikan link archive terkait permasalahan member milis di email saya sebelumnya. Namun hingga saat ini masih belum membuahkan hasil yang diinginkan. Bahkan sempat salah tuning yang mengakibatkan kita sama sekali tidak dapat mengirim/menerima email selama beberapa hari dan sangat mengganggu proses bisnis. > Untuk sementara, sebelum ISP berhasil menghapus filter terhadap smtp > port 25 server Anda bisa ubah deliverynya pakai fallback relay Saya sudah memberlakukan fallback relay, namun tempo hari IP smtp mereka terlist di zen spamhaus hingga semua email yang terpaksa menggunakan smarthost ke domain tertentu karena membutuhkan protokol pipelining atau starttls akhirnya tertolak. Sangat mengganggu sekali. Mohon bantuannya Pak Syafril agar saya dapat menyampaikan ke tim teknis dengan bahasa yang paling sederhana dan mudah dimengerti agar masalah ini dapat segera teratasi. Atau rekan-rekan milis yang sempat mengalami masalah yang sama dengan ISP yang sama (lintasarta) namun sudah solved agar dapat membantu saya, saya ucapkan terima kasih banyak sebelumnya. Terima kasih. -- --[mdaemon-l]-- Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette Arsip: http://mdaemon-l.dutaint.com Dokumentasi : http://mdaemon.dutaint.co.id Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com Versi terakhir: MDaemon 21.5.1, SecurityGateway 8.0.4
[Mdaemon-L] 451 your mailer sent a bare LF
> Minta ke ISP (lintasarta.net.id alias idola.net.id) untuk tidak memfilter > outbound smtp (tcp) port 25, khususnya untuk server mail.richtex.co.id > [182.23.69.132]. Port 25 saat ini sudah tidak terfilter pak. > Mestinya receiver itu mendukung SMTP protocol yang lain: STARTTLS, > PIPELINIG. > Yang karena smtp port 25 difilter membuat semua isi mail yang dikirim seolah > tidak tidak diakhiri dengan Line Feed Carried Return (CR LF) alias Bare LF. > > $ telnet 103.229.73.203 25 > Trying 103.229.73.203... > Connected to 103.229.73.203. > Escape character is '^]'. > 220 piyabung.maintenis.com ESMTP > ehlo office.dutaint.co.id > 250-piyabung.maintenis.com > 250-AUTH=LOGIN CRAM-MD5 PLAIN > 250-AUTH LOGIN CRAM-MD5 PLAIN > 250-STARTTLS > 250-PIPELINING > 250 8BITMIME Hingga hari ini masih tetap muncul error message yang sama saat kirim email ke obormachinery. Saat saya telnet hanya muncul ini saja tanpa ada protokol lain: 220 piyabung.maintenis.com ESMTP ehlo mail.richtex.co.id 250-piyabung.maintenis.com 250-AUTH=LOGIN CRAM-MD5 PLAIN 250-AUTH LOGIN CRAM-MD5 PLAIN 250 8BITMIME Dan pihak obor tetap menyarankan dari pihak richtex yang menyelesaikan hal ini sesuai arahan http://pobox.com/~djb/docs/smtplf.html, karena email dari obor dapat kita terima namun tidak sebaliknya dengan error message tersebut. Mohon pencerahannya pak. Terima kasih. -- --[mdaemon-l]-- Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette Arsip: http://mdaemon-l.dutaint.com Dokumentasi : http://mdaemon.dutaint.co.id Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com Versi terakhir: MDaemon 21.5.1, SecurityGateway 8.0.4
[Mdaemon-L] Socket connection closed by the other side (how rude!)
Selamat siang Pak Syafril, Saya ada 2 email terlampir yang nyangkut di retry queue, mohon pencerahannya pak. Fri 2021-12-31 14:42:10.984: -- Fri 2021-12-31 14:42:10.567: [00878727] REMOTE message: pd900100704.msg Fri 2021-12-31 14:42:10.567: [00878727] * Session 00878727; child 0003 Fri 2021-12-31 14:42:10.568: [00878727] * From: yuli.ikaw...@richtex.co.id Fri 2021-12-31 14:42:10.568: [00878727] * To: ridwans...@fpgins.co.id Fri 2021-12-31 14:42:10.568: [00878727] * Subject: RE: RENCANA KEDATANGAN || PT RICHTEX GARMINDO AWB 9980446991 Fri 2021-12-31 14:42:10.568: [00878727] * Message-ID: <00e601d7fd2f$ea75adf0$bf6109d0$@richtex.co.id> Fri 2021-12-31 14:42:10.568: [00878727] * Size: 124716; Fri 2021-12-31 14:42:10.581: [00878727] Resolving MX record for fpgins.co.id (DNS Server: 202.152.0.2)... Fri 2021-12-31 14:42:10.591: [00878727] * DNS server reports no valid records for the requested type found Fri 2021-12-31 14:42:10.593: [00878727] Resolving MX record for fpgins.co.id (DNS Server: 8.8.8.8)... Fri 2021-12-31 14:42:10.612: [00878727] * DNS server reports no valid records for the requested type found Fri 2021-12-31 14:42:10.614: [00878727] Resolving MX record for fpgins.co.id (DNS Server: 202.152.5.36)... Fri 2021-12-31 14:42:10.627: [00878727] * DNS server reports no valid records for the requested type found Fri 2021-12-31 14:42:10.627: [00878727] Resolving MX record for fpgins.co.id (DNS Server: 4.2.2.6)... Fri 2021-12-31 14:42:10.642: [00878727] * DNS server reports no valid records for the requested type found Fri 2021-12-31 14:42:10.642: [00878727] Resolving MX record for fpgins.co.id (DNS Server: 4.2.2.2)... Fri 2021-12-31 14:42:10.661: [00878727] * DNS server reports no valid records for the requested type found Fri 2021-12-31 14:42:10.662: [00878727] Resolving MX record for fpgins.co.id (DNS Server: 1.1.1.1)... Fri 2021-12-31 14:42:10.677: [00878727] * DNS server reports no valid records for the requested type found Fri 2021-12-31 14:42:10.677: [00878727] Attempting SMTP connection to fpgins.co.id Fri 2021-12-31 14:42:10.677: [00878727] Resolving A record for fpgins.co.id (DNS Server: 202.152.0.2)... Fri 2021-12-31 14:42:10.678: [00878727] * D=fpgins.co.id TTL=() A=[198.50.252.65] Fri 2021-12-31 14:42:10.678: [00878727] Attempting SMTP connection to 198.50.252.65:25 Fri 2021-12-31 14:42:10.678: [00878727] Waiting for socket connection... Fri 2021-12-31 14:42:10.694: [00878727] * Connection established 10.0.1.2:56695 --> 198.50.252.65:25 Fri 2021-12-31 14:42:10.694: [00878727] Waiting for protocol to start... Fri 2021-12-31 14:42:10.992: [00878727] Socket connection closed by the other side (how rude!) Fri 2021-12-31 14:42:10.992: [00878727] * This message is 1 days old; it has 1 days left to get delivered Fri 2021-12-31 14:42:10.993: [00878727] SMTP session terminated (Bytes in/out: 0/0) Fri 2021-12-31 14:42:10.993: -- Fri 2021-12-31 14:53:33.626: -- Fri 2021-12-31 14:53:31.079: [00879072] REMOTE message: pd900100705.msg Fri 2021-12-31 14:53:31.079: [00879072] * Session 00879072; child 0004 Fri 2021-12-31 14:53:31.080: [00879072] * From: wi...@richtex.co.id Fri 2021-12-31 14:53:31.080: [00879072] * To: m_...@cbn.net.id Fri 2021-12-31 14:53:31.080: [00879072] * Subject: RE: penawaran harga Fri 2021-12-31 14:53:31.080: [00879072] * Message-ID: <00e901d7fd43$d919c5a0$8b4d50e0$@richtex.co.id> Fri 2021-12-31 14:53:31.080: [00879072] * Size: 18135124; Fri 2021-12-31 14:53:31.094: [00879072] Resolving MX record for cbn.net.id (DNS Server: 202.152.0.2)... Fri 2021-12-31 14:53:31.095: [00879072] * P=010 S=000 D=cbn.net.id TTL=(300) MX=[mx1.emailsrvr.com] Fri 2021-12-31 14:53:31.095: [00879072] * P=020 S=001 D=cbn.net.id TTL=(300) MX=[mx2.emailsrvr.com] Fri 2021-12-31 14:53:31.095: [00879072] Attempting SMTP connection to mx1.emailsrvr.com Fri 2021-12-31 14:53:31.096: [00879072] Resolving A record for mx1.emailsrvr.com (DNS Server: 202.152.0.2)... Fri 2021-12-31 14:53:31.119: [00879072] * D=mx1.emailsrvr.com TTL=(4) A=[173.203.187.1] Fri 2021-12-31 14:53:31.120: [00879072] Attempting SMTP connection to 173.203.187.1:25 Fri 2021-12-31 14:53:31.120: [00879072] Waiting for socket connection... Fri 2021-12-31 14:53:31.132: [00879072] * Connection established 10.0.1.2:56872 --> 173.203.187.1:25 Fri 2021-12-31 14:53:31.132: [00879072] Waiting for protocol to start... Fri 2021-12-31 14:53:32.122: [00879072] <-- 220 mx1.emailsrvr.com ESMTP - VA Code Section 18.2-152.3:1 forbids sending spam through this system Fri 2021-12-31 14:53:32.124: [00879072] --> EHLO mail.richtex.co.id Fri 2021-12-31 14:53:32.382: [00879072] <-- 250-smtp13.gate.iad3a.rsapps.net says EHLO to 182.23.69.132:31701 Fri 2021-12-31 14:53:32.382: [00879072] <-- 250-SIZE 5120 Fri 2021-12-31 14:53:32.382: [00879072] <-- 250-8BITMIME Fri 2021-12-31 14:53:32.382: [00879072] <-- 250 ENHANCEDSTATUSCODES Fri 2021-12-31
[Mdaemon-L] 451 your mailer sent a bare LF
Selamat siang Pak Syafril, Mohon pencerahan untuk problem Line Feed. Berikut saya kutip dari cr.yp.t*/docs/smtplf.html, Your mailer is violating 822bis section 2.3, which specifically prohibits all bare LFs. Cara mengatasinya kira-kira bagaimana ya pak? Fri 2021-12-31 14:42:10.993: -- Fri 2021-12-31 14:42:10.559: [00878726] REMOTE message: pd900100703.del1640936323.msg Fri 2021-12-31 14:42:10.559: [00878726] * Session 00878726; child 0002 Fri 2021-12-31 14:42:10.560: [00878726] * From: wu...@richtex.co.id Fri 2021-12-31 14:42:10.560: [00878726] * To: be...@richtex.co.id Fri 2021-12-31 14:42:10.560: [00878726] * Subject: Re: PENAWARAN PANEL MESIN PASANG KANCING JUKI LK-1903BSS Fri 2021-12-31 14:42:10.560: [00878726] * Message-ID: Fri 2021-12-31 14:42:10.560: [00878726] * Size: 90577; Fri 2021-12-31 14:42:10.561: [00878726] * Route slip host: obormachinery.com Fri 2021-12-31 14:42:10.561: [00878726] * Route slip port: 25 Fri 2021-12-31 14:42:10.578: [00878726] Resolving MX record for obormachinery.com (DNS Server: 202.152.0.2)... Fri 2021-12-31 14:42:10.596: [00878726] * P=010 S=000 D=obormachinery.com TTL=(5) MX=[mail.obormachinery.com] Fri 2021-12-31 14:42:10.596: [00878726] Attempting SMTP connection to mail.obormachinery.com Fri 2021-12-31 14:42:10.596: [00878726] Resolving A record for mail.obormachinery.com (DNS Server: 202.152.0.2)... Fri 2021-12-31 14:42:10.612: [00878726] * D=mail.obormachinery.com TTL=(5) A=[103.229.73.203] Fri 2021-12-31 14:42:10.612: [00878726] Attempting SMTP connection to 103.229.73.203:25 Fri 2021-12-31 14:42:10.613: [00878726] Waiting for socket connection... Fri 2021-12-31 14:42:10.625: [00878726] * Connection established 10.0.1.2:56693 --> 103.229.73.203:25 Fri 2021-12-31 14:42:10.625: [00878726] Waiting for protocol to start... Fri 2021-12-31 14:42:11.150: [00878726] <-- 220 piyabung.maintenis.com ESMTP Fri 2021-12-31 14:42:11.151: [00878726] --> EHLO mail.richtex.co.id Fri 2021-12-31 14:42:11.165: [00878726] <-- 250-piyabung.maintenis.com Fri 2021-12-31 14:42:11.165: [00878726] <-- 250-AUTH=LOGIN CRAM-MD5 PLAIN Fri 2021-12-31 14:42:11.165: [00878726] <-- 250-AUTH LOGIN CRAM-MD5 PLAIN Fri 2021-12-31 14:42:11.165: [00878726] <-- 250 8BITMIME Fri 2021-12-31 14:42:11.166: [00878726] --> MAIL From: Fri 2021-12-31 14:42:11.182: [00878726] <-- 250 ok Fri 2021-12-31 14:42:11.182: [00878726] --> RCPT To: Fri 2021-12-31 14:42:11.206: [00878726] <-- 250 ok Fri 2021-12-31 14:42:11.206: [00878726] --> RCPT To: Fri 2021-12-31 14:42:11.226: [00878726] <-- 250 ok Fri 2021-12-31 14:42:11.226: [00878726] --> RCPT To: Fri 2021-12-31 14:42:11.246: [00878726] <-- 250 ok Fri 2021-12-31 14:42:11.246: [00878726] --> RCPT To: Fri 2021-12-31 14:42:11.270: [00878726] <-- 250 ok Fri 2021-12-31 14:42:11.270: [00878726] --> DATA Fri 2021-12-31 14:42:11.283: [00878726] <-- 354 end data with . Fri 2021-12-31 14:42:11.283: [00878726] Sending to [103.229.73.203] Fri 2021-12-31 14:42:11.324: [00878726] Transfer Complete Fri 2021-12-31 14:42:13.107: [00878726] <-- 451 See http://pobox.com/~djb/docs/smtplf.html. Fri 2021-12-31 14:42:13.107: [00878726] --> QUIT Fri 2021-12-31 14:42:13.124: [00878726] Socket connection closed by the other side (how rude!) Fri 2021-12-31 14:42:13.125: [00878726] * This message is 1 days old; it has 1 days left to get delivered Fri 2021-12-31 14:42:13.126: [00878726] SMTP session terminated (Bytes in/out: 264/90832) Fri 2021-12-31 14:42:13.126: -- Terima kasih. -- --[mdaemon-l]-- Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette Arsip: http://mdaemon-l.dutaint.com Dokumentasi : http://mdaemon.dutaint.co.id Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com Versi terakhir: MDaemon 21.5.1, SecurityGateway 8.0.4
[Mdaemon-L] 550 5.7.1 Sender unknown
Selamat sore Pak Syafril, Mohon dibuatkan pengecualian untuk host rekanan kami sesuai log berikut: Wed 2021-12-01 14:40:26.400: 01: -- Wed 2021-12-01 14:40:41.226: 05: [442714] Session 442714; child 0002 Wed 2021-12-01 14:40:41.227: 05: [442714] Accepting SMTP connection from 208.78.224.141:42660 to 10.0.1.2:25 Wed 2021-12-01 14:40:41.227: 03: [442714] --> 220 mail.richtex.co.id ESMTP Wed, 01 Dec 2021 14:40:41 +0700 Wed 2021-12-01 14:40:41.414: 02: [442714] <-- EHLO host.brothersindo.com Wed 2021-12-01 14:40:41.418: 03: [442714] --> 550 5.7.1 Sender unknown Wed 2021-12-01 14:40:41.418: 01: [442714] Host screening refused connection to 10.0.1.2:25 from host.brothersindo.com [208.78.224.141:42660] (matched to line "all host.brothersindo.com refuse") Wed 2021-12-01 14:40:41.422: 04: [442714] SMTP session terminated (Bytes in/out: 28/88) Wed 2021-12-01 14:40:41.423: 01: -- Terima kasih. -- --[mdaemon-l]-- Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette Arsip: http://mdaemon-l.dutaint.com Dokumentasi : http://mdaemon.dutaint.co.id Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com Versi terakhir: MDaemon 21.5.0, SecurityGateway 8.0.4
[Mdaemon-L] 501 5.7.0 Domain must resolve
> >> Pakai MDaemon versi berapa dan running di Windows OS apa sehingga > >> tidak bisa resolve host gateway34.websitewelcome.com? > > MDaemon Versi 18.5.1 32bit > > OS Windows 10 professional 32bit > Kenapa tidak pakai Win10 64 bit agar bisa pakai MDaemon 64 bit? Pertimbangan kami, user saat ini dibawah 100 dengan traffic cenderung medium selama pandemi dirasa masih sanggup untuk menangani hal tersebut. > MDaemon 32-bit akan phase out tahun 2022 yad. Noted pak. > > Terlihat IP 192.185.148.104 merespon di semua DNS diatas. > > Namun sender masih tertolak seperti sebelumnya dengan IP yang berbeda > > sesuai log berikut. > Itu artinya MDaemon yang digunakan belum mendukung DNS over TCP atau > EDNS sehingga tidak bisa resolve DNS record yang besar (lebih dari 512 byte). > > Diupgrade saja ke MDaemon versi 20.x keatas, atau yang terbaik diupgrade > ke MD 21.5.0. Dengan kata lain, hal ini hanya terbentur kendala versi MDaemon ya pak? Apakah sementara dapat disiasati dengan cara lain untuk masalah EDNS di MDaemon versi 18.5.1? Terima kasih. -- --[mdaemon-l]-- Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette Arsip: http://mdaemon-l.dutaint.com Dokumentasi : http://mdaemon.dutaint.co.id Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com Versi terakhir: MDaemon 21.5.0, SecurityGateway 8.0.4
[Mdaemon-L] 501 5.7.0 Domain must resolve
> Pakai MDaemon versi berapa dan running di Windows OS apa sehingga tidak > bisa resolve host gateway34.websitewelcome.com? MDaemon Versi 18.5.1 32bit OS Windows 10 professional 32bit > Coba di test dari DOS shell (Dos Prompt) server MDaemon. C:\Users\Admin>nslookup -q=a gateway34.websitewelcome.com 1.1.1.1 Server: one.one.one.one Address: 1.1.1.1 Non-authoritative answer: Name:gateway34.websitewelcome.com Addresses: 192.185.149.62 192.185.148.164 192.185.149.13 192.185.148.142 192.185.150.107 192.185.149.105 192.185.147.201 192.185.148.119 192.185.149.77 192.185.148.231 192.185.149.101 192.185.148.140 192.185.149.222 192.185.148.109 192.185.148.214 192.185.149.46 192.185.150.114 192.185.148.194 192.185.148.104 192.185.149.72 192.185.148.212 192.185.148.196 192.185.148.200 192.185.148.204 192.185.148.222 C:\Users\Admin>nslookup -q=a gateway34.websitewelcome.com 202.152.5.36 Server: ns1-ng.idola.net.id Address: 202.152.5.36 Non-authoritative answer: Name:gateway34.websitewelcome.com Addresses: 192.185.148.164 192.185.149.13 192.185.148.142 192.185.150.107 192.185.149.105 192.185.147.201 192.185.148.119 192.185.149.77 192.185.148.231 192.185.149.101 192.185.148.140 192.185.149.222 192.185.148.109 192.185.148.214 192.185.149.46 192.185.150.114 192.185.148.194 192.185.148.104 192.185.149.72 192.185.148.212 192.185.148.196 192.185.148.200 192.185.148.204 192.185.148.222 192.185.149.62 C:\Users\Admin>nslookup -q=a gateway34.websitewelcome.com 202.152.0.2 Server: ns2-ng.idola.net.id Address: 202.152.0.2 Non-authoritative answer: Name:gateway34.websitewelcome.com Addresses: 192.185.149.13 192.185.148.142 192.185.150.107 192.185.149.105 192.185.147.201 192.185.148.119 192.185.149.77 192.185.148.231 192.185.149.101 192.185.148.140 192.185.149.222 192.185.148.109 192.185.148.214 192.185.149.46 192.185.150.114 192.185.148.194 192.185.148.104 192.185.149.72 192.185.148.212 192.185.148.196 192.185.148.200 192.185.148.204 192.185.148.222 192.185.149.62 192.185.148.164 Terlihat IP 192.185.148.104 merespon di semua DNS diatas. Namun sender masih tertolak seperti sebelumnya dengan IP yang berbeda sesuai log berikut. Mon 2021-11-22 09:17:14.052: 01: -- Mon 2021-11-22 09:17:52.262: 05: [290490] Session 290490; child 0001 Mon 2021-11-22 09:17:52.262: 05: [290490] Accepting SMTP connection from 192.185.46.156:46018 to 10.0.1.2:25 Mon 2021-11-22 09:17:52.263: 03: [290490] --> 220 mail.richtex.co.id ESMTP Mon, 22 Nov 2021 09:17:52 +0700 Mon 2021-11-22 09:17:52.502: 02: [290490] <-- EHLO gateway22.websitewelcome.com Mon 2021-11-22 09:17:52.509: 01: [290490] EHLO/HELO response delayed 3 seconds Mon 2021-11-22 09:17:55.510: 03: [290490] --> 250-mail.richtex.co.id Hello gateway22.websitewelcome.com [192.185.46.156], pleased to meet you Mon 2021-11-22 09:17:55.510: 03: [290490] --> 250-ETRN Mon 2021-11-22 09:17:55.510: 07: [290490] Location Screening hiding AUTH from country United States Mon 2021-11-22 09:17:55.510: 03: [290490] --> 250-8BITMIME Mon 2021-11-22 09:17:55.510: 03: [290490] --> 250-ENHANCEDSTATUSCODES Mon 2021-11-22 09:17:55.510: 03: [290490] --> 250-STARTTLS Mon 2021-11-22 09:17:55.510: 03: [290490] --> 250 SIZE 2000 Mon 2021-11-22 09:17:55.746: 02: [290490] <-- STARTTLS Mon 2021-11-22 09:17:55.747: 03: [290490] --> 220 2.7.0 Ready to start TLS Mon 2021-11-22 09:17:57.251: 01: [290490] SSL negotiation successful (TLS 1.2, 384 bit key exchange, 256 bit AES encryption) Mon 2021-11-22 09:17:57.490: 02: [290490] <-- EHLO gateway22.websitewelcome.com Mon 2021-11-22 09:17:57.495: 03: [290490] --> 250-mail.richtex.co.id Hello gateway22.websitewelcome.com [192.185.46.156], pleased to meet you Mon 2021-11-22 09:17:57.495: 03: [290490] --> 250-ETRN Mon 2021-11-22 09:17:57.495: 07: [290490] Location Screening hiding AUTH from country United States Mon 2021-11-22 09:17:57.495: 03: [290490] --> 250-8BITMIME Mon 2021-11-22 09:17:57.495: 03: [290490] --> 250-ENHANCEDSTATUSCODES Mon 2021-11-22 09:17:57.495: 03: [290490] --> 250 SIZE 2000 Mon 2021-11-22 09:17:57.734: 02: [290490] <-- MAIL FROM: SIZE=2793 Mon 2021-11-22 09:17:57.742: 05: [290490] Performing PTR lookup (156.46.185.192.IN-ADDR.ARPA) Mon 2021-11-22 09:17:57.758: 05: [290490] * D=156.46.185.192.in-addr.arpa TTL=(1431)
[Mdaemon-L] 501 5.7.0 Domain must resolve
Selamat pagi Pak Syafril, Mohon diproses sesuai log berikut: Mon 2021-11-22 08:00:01.335: 01: -- Mon 2021-11-22 08:00:54.683: 05: [288792] Session 288792; child 0001 Mon 2021-11-22 08:00:54.683: 05: [288792] Accepting SMTP connection from 192.185.148.104:13358 to 10.0.1.2:25 Mon 2021-11-22 08:00:54.684: 03: [288792] --> 220 mail.richtex.co.id ESMTP Mon, 22 Nov 2021 08:00:54 +0700 Mon 2021-11-22 08:00:54.922: 02: [288792] <-- EHLO gateway34.websitewelcome.com Mon 2021-11-22 08:00:54.928: 01: [288792] EHLO/HELO response delayed 3 seconds Mon 2021-11-22 08:00:57.929: 03: [288792] --> 250-mail.richtex.co.id Hello gateway34.websitewelcome.com [192.185.148.104], pleased to meet you Mon 2021-11-22 08:00:57.929: 03: [288792] --> 250-ETRN Mon 2021-11-22 08:00:57.929: 07: [288792] Location Screening hiding AUTH from country United States Mon 2021-11-22 08:00:57.929: 03: [288792] --> 250-8BITMIME Mon 2021-11-22 08:00:57.929: 03: [288792] --> 250-ENHANCEDSTATUSCODES Mon 2021-11-22 08:00:57.929: 03: [288792] --> 250-STARTTLS Mon 2021-11-22 08:00:57.929: 03: [288792] --> 250 SIZE 2000 Mon 2021-11-22 08:00:58.167: 02: [288792] <-- STARTTLS Mon 2021-11-22 08:00:58.167: 03: [288792] --> 220 2.7.0 Ready to start TLS Mon 2021-11-22 08:00:58.673: 01: [288792] SSL negotiation successful (TLS 1.2, 384 bit key exchange, 256 bit AES encryption) Mon 2021-11-22 08:00:58.913: 02: [288792] <-- EHLO gateway34.websitewelcome.com Mon 2021-11-22 08:00:58.918: 03: [288792] --> 250-mail.richtex.co.id Hello gateway34.websitewelcome.com [192.185.148.104], pleased to meet you Mon 2021-11-22 08:00:58.918: 03: [288792] --> 250-ETRN Mon 2021-11-22 08:00:58.918: 07: [288792] Location Screening hiding AUTH from country United States Mon 2021-11-22 08:00:58.918: 03: [288792] --> 250-8BITMIME Mon 2021-11-22 08:00:58.918: 03: [288792] --> 250-ENHANCEDSTATUSCODES Mon 2021-11-22 08:00:58.918: 03: [288792] --> 250 SIZE 2000 Mon 2021-11-22 08:00:59.155: 02: [288792] <-- MAIL FROM: SIZE=2833 Mon 2021-11-22 08:00:59.163: 05: [288792] Performing PTR lookup (104.148.185.192.IN-ADDR.ARPA) Mon 2021-11-22 08:00:59.408: 05: [288792] * D=104.148.185.192.in-addr.arpa TTL=(1440) PTR=[gateway34.websitewelcome.com] Mon 2021-11-22 08:00:59.476: 05: [288792] * No A/ records found Mon 2021-11-22 08:00:59.476: 05: [288792] * MDaemon configured to drop connection on PTR record mismatch Mon 2021-11-22 08:00:59.476: 05: [288792] End PTR results Mon 2021-11-22 08:00:59.476: 03: [288792] --> 501 5.7.0 Domain must resolve Mon 2021-11-22 08:00:59.477: 04: [288792] SMTP session terminated (Bytes in/out: 853/4484) Mon 2021-11-22 08:00:59.477: 01: -- Terima kasih. -- --[mdaemon-l]-- Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette Arsip: http://mdaemon-l.dutaint.com Dokumentasi : http://mdaemon.dutaint.co.id Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com Versi terakhir: MDaemon 21.5.0, SecurityGateway 8.0.4
[Mdaemon-L] Host screening refused
Selamat sore Pak Syafril, Mohon dibantu untuk delist host sesuai log berikut ini: Thu 2021-10-14 15:50:33.670: 01: -- Thu 2021-10-14 15:50:46.833: 05: [794407] Session 794407; child 0001 Thu 2021-10-14 15:50:46.833: 05: [794407] Accepting SMTP connection from 208.78.224.141:47948 to 10.0.1.2:25 Thu 2021-10-14 15:50:46.834: 03: [794407] --> 220 mail.richtex.co.id ESMTP Thu, 14 Oct 2021 15:50:46 +0700 Thu 2021-10-14 15:50:47.023: 02: [794407] <-- EHLO host.brothersindo.com Thu 2021-10-14 15:50:47.027: 03: [794407] --> 550 5.7.1 Sender unknown Thu 2021-10-14 15:50:47.027: 01: [794407] Host screening refused connection to 10.0.1.2:25 from host.brothersindo.com [208.78.224.141:47948] (matched to line "all host.brothersindo.com refuse") Thu 2021-10-14 15:50:47.029: 04: [794407] SMTP session terminated (Bytes in/out: 28/88) Thu 2021-10-14 15:50:47.029: 01: -- Host/domain tersebut adalah rekanan kami yang valid. Terima kasih. -- --[mdaemon-l]-- Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette Arsip: http://mdaemon-l.dutaint.com Dokumentasi : http://mdaemon.dutaint.co.id Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com Versi terakhir: MDaemon 21.0.3, SecurityGateway 8.0.3
[Mdaemon-L] 501 5.7.0 Domain must resolve
> Bisa non aktifkan IPshield menu "Check FROM header address against IP > Shield" di server mail.richtex.co.id agar posting diri sendiri ke milis ini tidak > ditolak? > > http://mdaemon.dutaint.co.id/mdaemon/21.0.1/security--ip_shielding.html > > [ ] Check FROM header address against IP Shield Baik pak, akan saya nonaktifkan menu tersebut. - > Sudah diupdate ke > > http://ftp.dutaint.com/altn-mdaemon/miscl/ReverseXcpt.dat Terima kasih Pak Syafril. -- --[mdaemon-l]-- Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette Arsip: http://mdaemon-l.dutaint.com Dokumentasi : http://mdaemon.dutaint.co.id Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com Versi terakhir: MDaemon 21.0.3, SecurityGateway 8.0.3
[Mdaemon-L] 501 5.7.0 Domain must resolve
Selamat pagi Pak Syafril, Mohon diproses untuk log berikut: Fri 2021-09-24 09:09:20.856: 01: -- Fri 2021-09-24 09:09:21.456: 05: [504250] Session 504250; child 0001 Fri 2021-09-24 09:09:21.456: 05: [504250] Accepting SMTP connection from 203.166.161.135:49933 to 10.0.1.2:25 Fri 2021-09-24 09:09:21.458: 03: [504250] --> 220 mail.richtex.co.id ESMTP Fri, 24 Sep 2021 09:09:21 +0700 Fri 2021-09-24 09:09:21.755: 02: [504250] <-- HELO pop.zioyou.cn Fri 2021-09-24 09:09:21.760: 01: [504250] EHLO/HELO response delayed 3 seconds Fri 2021-09-24 09:09:24.761: 03: [504250] --> 250 mail.richtex.co.id Hello pop.zioyou.cn [203.166.161.135], pleased to meet you Fri 2021-09-24 09:09:25.044: 02: [504250] <-- MAIL From: Fri 2021-09-24 09:09:25.051: 05: [504250] Performing PTR lookup (135.161.166.203.IN-ADDR.ARPA) Fri 2021-09-24 09:09:25.053: 05: [504250] * D=135.161.166.203.in-addr.arpa TTL=(1402) PTR=[zioyou.cn] Fri 2021-09-24 09:09:25.054: 05: [504250] * D=zioyou.cn TTL=(9) A=[211.152.45.164] Fri 2021-09-24 09:09:25.054: 05: [504250] * MDaemon configured to drop connection on PTR record mismatch Fri 2021-09-24 09:09:25.054: 05: [504250] End PTR results Fri 2021-09-24 09:09:25.055: 03: [504250] --> 501 5.7.0 Domain must resolve Fri 2021-09-24 09:09:25.055: 04: [504250] SMTP session terminated (Bytes in/out: 48/176) Fri 2021-09-24 09:09:25.055: 01: -- Terima kasih. -- --[mdaemon-l]-- Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette Arsip: http://mdaemon-l.dutaint.com Dokumentasi : http://mdaemon.dutaint.co.id Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com Versi terakhir: MDaemon 21.0.3, SecurityGateway 8.0.3
[Mdaemon-L] 501 5.7.0 domain name unknown
Selamat pagi Pak Syafril, Mohon diproses untuk log berikut: Wed 2021-09-22 08:23:30.237: 01: -- Wed 2021-09-22 08:23:36.951: 05: [463842] Session 463842; child 0001 Wed 2021-09-22 08:23:36.951: 05: [463842] Accepting SMTP connection from 211.152.45.166:62535 to 10.0.1.2:25 Wed 2021-09-22 08:23:36.952: 03: [463842] --> 220 mail.richtex.co.id ESMTP Wed, 22 Sep 2021 08:23:36 +0700 Wed 2021-09-22 08:23:37.067: 02: [463842] <-- EHLO spam.zioyou.cn Wed 2021-09-22 08:23:37.071: 01: [463842] EHLO/HELO response delayed 3 seconds Wed 2021-09-22 08:23:40.072: 03: [463842] --> 250-mail.richtex.co.id Hello spam.zioyou.cn [211.152.45.166], pleased to meet you Wed 2021-09-22 08:23:40.072: 03: [463842] --> 250-ETRN Wed 2021-09-22 08:23:40.072: 07: [463842] Location Screening hiding AUTH from country China Wed 2021-09-22 08:23:40.072: 03: [463842] --> 250-8BITMIME Wed 2021-09-22 08:23:40.072: 03: [463842] --> 250-ENHANCEDSTATUSCODES Wed 2021-09-22 08:23:40.072: 03: [463842] --> 250-STARTTLS Wed 2021-09-22 08:23:40.072: 03: [463842] --> 250 SIZE 2000 Wed 2021-09-22 08:23:40.184: 02: [463842] <-- STARTTLS Wed 2021-09-22 08:23:40.184: 03: [463842] --> 220 2.7.0 Ready to start TLS Wed 2021-09-22 08:23:40.436: 01: [463842] SSL negotiation successful (TLS 1.2, 384 bit key exchange, 256 bit AES encryption) Wed 2021-09-22 08:23:40.552: 02: [463842] <-- EHLO spam.zioyou.cn Wed 2021-09-22 08:23:40.559: 03: [463842] --> 250-mail.richtex.co.id Hello spam.zioyou.cn [211.152.45.166], pleased to meet you Wed 2021-09-22 08:23:40.559: 03: [463842] --> 250-ETRN Wed 2021-09-22 08:23:40.559: 07: [463842] Location Screening hiding AUTH from country China Wed 2021-09-22 08:23:40.559: 03: [463842] --> 250-8BITMIME Wed 2021-09-22 08:23:40.559: 03: [463842] --> 250-ENHANCEDSTATUSCODES Wed 2021-09-22 08:23:40.559: 03: [463842] --> 250 SIZE 2000 Wed 2021-09-22 08:23:40.677: 02: [463842] <-- MAIL From: SIZE=355262 Wed 2021-09-22 08:23:40.684: 05: [463842] Performing PTR lookup (166.45.152.211.IN-ADDR.ARPA) Wed 2021-09-22 08:23:40.687: 04: [463842] * DNS server reports domain name unknown Wed 2021-09-22 08:23:40.687: 05: [463842] * MDaemon configured to drop connection when domain name unknown Wed 2021-09-22 08:23:40.687: 05: [463842] End PTR results Wed 2021-09-22 08:23:40.687: 03: [463842] --> 501 5.7.0 211.152.45.166 does not have valid PTR record Wed 2021-09-22 08:23:40.688: 04: [463842] SMTP session terminated (Bytes in/out: 522/4480) Wed 2021-09-22 08:23:40.688: 01: -- Wed 2021-09-22 08:25:56.771: 01: -- Wed 2021-09-22 08:27:15.079: 05: [463944] Session 463944; child 0001 Wed 2021-09-22 08:27:15.079: 05: [463944] Accepting SMTP connection from 211.152.45.165:55035 to 10.0.1.2:25 Wed 2021-09-22 08:27:15.085: 03: [463944] --> 220 mail.richtex.co.id ESMTP Wed, 22 Sep 2021 08:27:15 +0700 Wed 2021-09-22 08:27:15.208: 02: [463944] <-- EHLO pop.zioyou.cn Wed 2021-09-22 08:27:15.215: 01: [463944] EHLO/HELO response delayed 3 seconds Wed 2021-09-22 08:27:18.216: 03: [463944] --> 250-mail.richtex.co.id Hello pop.zioyou.cn [211.152.45.165], pleased to meet you Wed 2021-09-22 08:27:18.216: 03: [463944] --> 250-ETRN Wed 2021-09-22 08:27:18.216: 07: [463944] Location Screening hiding AUTH from country China Wed 2021-09-22 08:27:18.216: 03: [463944] --> 250-8BITMIME Wed 2021-09-22 08:27:18.216: 03: [463944] --> 250-ENHANCEDSTATUSCODES Wed 2021-09-22 08:27:18.216: 03: [463944] --> 250-STARTTLS Wed 2021-09-22 08:27:18.216: 03: [463944] --> 250 SIZE 2000 Wed 2021-09-22 08:27:18.371: 02: [463944] <-- MAIL From: SIZE=12821 Wed 2021-09-22 08:27:18.377: 05: [463944] Performing PTR lookup (165.45.152.211.IN-ADDR.ARPA) Wed 2021-09-22 08:27:19.205: 04: [463944] * DNS server reports domain name unknown Wed 2021-09-22 08:27:19.206: 05: [463944] * MDaemon configured to drop connection when domain name unknown Wed 2021-09-22 08:27:19.206: 05: [463944] End PTR results Wed 2021-09-22 08:27:19.206: 03: [463944] --> 501 5.7.0 211.152.45.165 does not have valid PTR record Wed 2021-09-22 08:27:19.206: 04: [463944] SMTP session terminated (Bytes in/out: 59/283) Wed 2021-09-22 08:27:19.206: 01: -- Terima kasih. -- --[mdaemon-l]-- Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette Arsip: http://mdaemon-l.dutaint.com Dokumentasi : http://mdaemon.dutaint.co.id Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com Versi terakhir: MDaemon 21.0.3, SecurityGateway 8.0.3
[Mdaemon-L] 501 5.7.0 Domain must resolve
Selamat Pagi Pak Syafril, Mohon di update untuk log terlampir. Terima kasih. Tue 2021-08-24 11:17:39.524: 01: -- Tue 2021-08-24 11:17:51.826: 05: [006330] Session 006330; child 0001 Tue 2021-08-24 11:17:51.826: 05: [006330] Accepting SMTP connection from 40.107.132.91:34974 to 10.0.1.2:25 Tue 2021-08-24 11:17:51.827: 03: [006330] --> 220 mail.richtex.co.id ESMTP Tue, 24 Aug 2021 11:17:51 +0700 Tue 2021-08-24 11:17:52.013: 02: [006330] <-- EHLO APC01-PU1-obe.outbound.protection.outlook.com Tue 2021-08-24 11:17:52.025: 01: [006330] EHLO/HELO response delayed 3 seconds Tue 2021-08-24 11:17:55.027: 03: [006330] --> 250-mail.richtex.co.id Hello APC01-PU1-obe.outbound.protection.outlook.com [40.107.132.91], pleased to meet you Tue 2021-08-24 11:17:55.027: 03: [006330] --> 250-ETRN Tue 2021-08-24 11:17:55.027: 07: [006330] Location Screening hiding AUTH from country United States Tue 2021-08-24 11:17:55.027: 03: [006330] --> 250-8BITMIME Tue 2021-08-24 11:17:55.027: 03: [006330] --> 250-ENHANCEDSTATUSCODES Tue 2021-08-24 11:17:55.027: 03: [006330] --> 250-STARTTLS Tue 2021-08-24 11:17:55.027: 03: [006330] --> 250 SIZE 2000 Tue 2021-08-24 11:17:55.113: 02: [006330] <-- STARTTLS Tue 2021-08-24 11:17:55.114: 03: [006330] --> 220 2.7.0 Ready to start TLS Tue 2021-08-24 11:17:55.319: 01: [006330] SSL negotiation successful (TLS 1.2, 384 bit key exchange, 256 bit AES encryption) Tue 2021-08-24 11:17:55.406: 02: [006330] <-- EHLO APC01-PU1-obe.outbound.protection.outlook.com Tue 2021-08-24 11:17:55.413: 03: [006330] --> 250-mail.richtex.co.id Hello APC01-PU1-obe.outbound.protection.outlook.com [40.107.132.91], pleased to meet you Tue 2021-08-24 11:17:55.413: 03: [006330] --> 250-ETRN Tue 2021-08-24 11:17:55.413: 07: [006330] Location Screening hiding AUTH from country United States Tue 2021-08-24 11:17:55.413: 03: [006330] --> 250-8BITMIME Tue 2021-08-24 11:17:55.413: 03: [006330] --> 250-ENHANCEDSTATUSCODES Tue 2021-08-24 11:17:55.413: 03: [006330] --> 250 SIZE 2000 Tue 2021-08-24 11:17:55.641: 02: [006330] <-- MAIL FROM: SIZE=1019927 Tue 2021-08-24 11:17:55.651: 05: [006330] Performing PTR lookup (91.132.107.40.IN-ADDR.ARPA) Tue 2021-08-24 11:17:55.673: 05: [006330] * D=91.132.107.40.in-addr.arpa TTL=(37) PTR=[mail-eopbgr1320091.outbound.protection.outlook.com] Tue 2021-08-24 11:17:56.042: 05: [006330] * No A/ records found Tue 2021-08-24 11:17:56.043: 05: [006330] * MDaemon configured to drop connection on PTR record mismatch Tue 2021-08-24 11:17:56.043: 05: [006330] End PTR results Tue 2021-08-24 11:17:56.043: 03: [006330] --> 501 5.7.0 Domain must resolve Tue 2021-08-24 11:17:56.043: 04: [006330] SMTP session terminated (Bytes in/out: 549/4518) Tue 2021-08-24 11:17:56.043: 01: -- Tue 2021-08-24 11:31:50.097: 01: -- Tue 2021-08-24 11:33:17.712: 05: [006841] Session 006841; child 0001 Tue 2021-08-24 11:33:17.712: 05: [006841] Accepting SMTP connection from 40.107.236.94:13441 to 10.0.1.2:25 Tue 2021-08-24 11:33:17.725: 03: [006841] --> 220 mail.richtex.co.id ESMTP Tue, 24 Aug 2021 11:33:17 +0700 Tue 2021-08-24 11:33:17.971: 02: [006841] <-- EHLO NAM11-BN8-obe.outbound.protection.outlook.com Tue 2021-08-24 11:33:17.988: 01: [006841] EHLO/HELO response delayed 3 seconds Tue 2021-08-24 11:33:20.989: 03: [006841] --> 250-mail.richtex.co.id Hello NAM11-BN8-obe.outbound.protection.outlook.com [40.107.236.94], pleased to meet you Tue 2021-08-24 11:33:20.989: 03: [006841] --> 250-ETRN Tue 2021-08-24 11:33:20.989: 07: [006841] Location Screening hiding AUTH from country United States Tue 2021-08-24 11:33:20.989: 03: [006841] --> 250-8BITMIME Tue 2021-08-24 11:33:20.989: 03: [006841] --> 250-ENHANCEDSTATUSCODES Tue 2021-08-24 11:33:20.990: 03: [006841] --> 250-STARTTLS Tue 2021-08-24 11:33:20.990: 03: [006841] --> 250 SIZE 2000 Tue 2021-08-24 11:33:21.237: 02: [006841] <-- STARTTLS Tue 2021-08-24 11:33:21.237: 03: [006841] --> 220 2.7.0 Ready to start TLS Tue 2021-08-24 11:33:21.772: 01: [006841] SSL negotiation successful (TLS 1.2, 384 bit key exchange, 256 bit AES encryption) Tue 2021-08-24 11:33:22.018: 02: [006841] <-- EHLO NAM11-BN8-obe.outbound.protection.outlook.com Tue 2021-08-24 11:33:22.030: 03: [006841] --> 250-mail.richtex.co.id Hello NAM11-BN8-obe.outbound.protection.outlook.com [40.107.236.94], pleased to meet you Tue 2021-08-24 11:33:22.030: 03: [006841] --> 250-ETRN Tue 2021-08-24 11:33:22.030: 07: [006841] Location Screening hiding AUTH from country United States Tue 2021-08-24 11:33:22.030: 03: [006841] --> 250-8BITMIME Tue 2021-08-24 11:33:22.030: 03: [006841] --> 250-ENHANCEDSTATUSCODES Tue 2021-08-24 11:33:22.030: 03: [006841] --> 250 SIZE 2000 Tue 2021-08-24 11:33:22.337: 02: [006841] <-- MAIL FROM: SIZE=179616 Tue 2021-08-24 11:33:22.347: 05: [006841] Performing PTR lookup (94.236.107.40.IN-ADDR.ARPA) Tue 2021-08-24 11:33:22.384: 05: [006841] * D=94.236.107.40.in-addr.arpa TTL=(60)
[Mdaemon-L] 501 5.7.0 Domain must resolve
Selamat siang Pak Syafril, Mohon di update untuk log terlampir. Terima kasih. --- Tue 2021-08-24 00:00:33.444: 05: [998668] Session 998668; child 0001 Tue 2021-08-24 00:00:33.444: 05: [998668] Accepting SMTP connection from 40.107.220.128:9249 to 10.0.1.2:25 Tue 2021-08-24 00:00:33.450: 03: [998668] --> 220 mail.richtex.co.id ESMTP Tue, 24 Aug 2021 00:00:33 +0700 Tue 2021-08-24 00:00:33.646: 02: [998668] <-- EHLO NAM11-CO1-obe.outbound.protection.outlook.com Tue 2021-08-24 00:00:33.655: 01: [998668] EHLO/HELO response delayed 3 seconds Tue 2021-08-24 00:00:36.656: 03: [998668] --> 250-mail.richtex.co.id Hello NAM11-CO1-obe.outbound.protection.outlook.com [40.107.220.128], pleased to meet you Tue 2021-08-24 00:00:36.656: 03: [998668] --> 250-ETRN Tue 2021-08-24 00:00:36.656: 07: [998668] Location Screening hiding AUTH from country United States Tue 2021-08-24 00:00:36.656: 03: [998668] --> 250-8BITMIME Tue 2021-08-24 00:00:36.656: 03: [998668] --> 250-ENHANCEDSTATUSCODES Tue 2021-08-24 00:00:36.657: 03: [998668] --> 250-STARTTLS Tue 2021-08-24 00:00:36.657: 03: [998668] --> 250 SIZE 2000 Tue 2021-08-24 00:00:36.850: 02: [998668] <-- STARTTLS Tue 2021-08-24 00:00:36.850: 03: [998668] --> 220 2.7.0 Ready to start TLS Tue 2021-08-24 00:00:37.274: 01: [998668] SSL negotiation successful (TLS 1.2, 384 bit key exchange, 256 bit AES encryption) Tue 2021-08-24 00:00:37.468: 02: [998668] <-- EHLO NAM11-CO1-obe.outbound.protection.outlook.com Tue 2021-08-24 00:00:37.475: 03: [998668] --> 250-mail.richtex.co.id Hello NAM11-CO1-obe.outbound.protection.outlook.com [40.107.220.128], pleased to meet you Tue 2021-08-24 00:00:37.475: 03: [998668] --> 250-ETRN Tue 2021-08-24 00:00:37.475: 07: [998668] Location Screening hiding AUTH from country United States Tue 2021-08-24 00:00:37.475: 03: [998668] --> 250-8BITMIME Tue 2021-08-24 00:00:37.475: 03: [998668] --> 250-ENHANCEDSTATUSCODES Tue 2021-08-24 00:00:37.475: 03: [998668] --> 250 SIZE 2000 Tue 2021-08-24 00:00:37.737: 02: [998668] <-- MAIL FROM: SIZE=231767 Tue 2021-08-24 00:00:37.747: 05: [998668] Performing PTR lookup (128.220.107.40.IN-ADDR.ARPA) Tue 2021-08-24 00:00:37.786: 05: [998668] * D=128.220.107.40.in-addr.arpa TTL=(60) PTR=[mail-co1nam11on2128.outbound.protection.outlook.com] Tue 2021-08-24 00:00:38.380: 05: [998668] * No A/ records found Tue 2021-08-24 00:00:38.380: 05: [998668] * MDaemon configured to drop connection on PTR record mismatch Tue 2021-08-24 00:00:38.380: 05: [998668] End PTR results Tue 2021-08-24 00:00:38.381: 03: [998668] --> 501 5.7.0 Domain must resolve Tue 2021-08-24 00:00:38.381: 04: [998668] SMTP session terminated (Bytes in/out: 557/4520) Tue 2021-08-24 00:00:38.381: 01: -- Tue 2021-08-24 00:26:22.149: 01: -- Tue 2021-08-24 00:26:31.240: 05: [998772] Session 998772; child 0001 Tue 2021-08-24 00:26:31.240: 05: [998772] Accepting SMTP connection from 40.107.96.121:9347 to 10.0.1.2:25 Tue 2021-08-24 00:26:31.241: 03: [998772] --> 220 mail.richtex.co.id ESMTP Tue, 24 Aug 2021 00:26:31 +0700 Tue 2021-08-24 00:26:31.465: 02: [998772] <-- EHLO NAM02-SN1-obe.outbound.protection.outlook.com Tue 2021-08-24 00:26:31.472: 01: [998772] EHLO/HELO response delayed 3 seconds Tue 2021-08-24 00:26:34.472: 03: [998772] --> 250-mail.richtex.co.id Hello NAM02-SN1-obe.outbound.protection.outlook.com [40.107.96.121], pleased to meet you Tue 2021-08-24 00:26:34.472: 03: [998772] --> 250-ETRN Tue 2021-08-24 00:26:34.472: 07: [998772] Location Screening hiding AUTH from country United States Tue 2021-08-24 00:26:34.472: 03: [998772] --> 250-8BITMIME Tue 2021-08-24 00:26:34.472: 03: [998772] --> 250-ENHANCEDSTATUSCODES Tue 2021-08-24 00:26:34.472: 03: [998772] --> 250-STARTTLS Tue 2021-08-24 00:26:34.472: 03: [998772] --> 250 SIZE 2000 Tue 2021-08-24 00:26:34.697: 02: [998772] <-- STARTTLS Tue 2021-08-24 00:26:34.697: 03: [998772] --> 220 2.7.0 Ready to start TLS Tue 2021-08-24 00:26:35.175: 01: [998772] SSL negotiation successful (TLS 1.2, 384 bit key exchange, 256 bit AES encryption) Tue 2021-08-24 00:26:35.401: 02: [998772] <-- EHLO NAM02-SN1-obe.outbound.protection.outlook.com Tue 2021-08-24 00:26:35.407: 03: [998772] --> 250-mail.richtex.co.id Hello NAM02-SN1-obe.outbound.protection.outlook.com [40.107.96.121], pleased to meet you Tue 2021-08-24 00:26:35.407: 03: [998772] --> 250-ETRN Tue 2021-08-24 00:26:35.407: 07: [998772] Location Screening hiding AUTH from country United States Tue 2021-08-24 00:26:35.407: 03: [998772] --> 250-8BITMIME Tue 2021-08-24 00:26:35.407: 03: [998772] --> 250-ENHANCEDSTATUSCODES Tue 2021-08-24 00:26:35.407: 03: [998772] --> 250 SIZE 2000 Tue 2021-08-24 00:26:35.660: 02: [998772] <-- MAIL FROM: SIZE=489469 Tue 2021-08-24 00:26:35.669: 05: [998772] Performing PTR lookup (121.96.107.40.IN-ADDR.ARPA) Tue 2021-08-24 00:26:35.747: 05: [998772] *
[Mdaemon-L] 501 5.7.0 Domain must resolve
Selamat siang Pak Syafril, Mohon dibuatkan pengecualian untuk log berikut: Thu 2021-05-20 11:22:45.425: 01: -- Thu 2021-05-20 11:22:54.830: 05: [762601] Session 762601; child 0001 Thu 2021-05-20 11:22:54.830: 05: [762601] Accepting SMTP connection from 103.3.164.21:60875 to 10.0.1.2:25 Thu 2021-05-20 11:22:54.831: 03: [762601] --> 220 mail.richtex.co.id ESMTP Thu, 20 May 2021 11:22:54 +0700 Thu 2021-05-20 11:22:54.860: 02: [762601] <-- EHLO mx8.cleverspeed.com Thu 2021-05-20 11:22:54.864: 09: [762601] Performing SPF lookup (mx8.cleverspeed.com / 103.3.164.21) Thu 2021-05-20 11:22:55.152: 09: [762601] * Result: none; no SPF record in DNS Thu 2021-05-20 11:22:55.152: 09: [762601] End SPF results Thu 2021-05-20 11:22:55.152: 01: [762601] EHLO/HELO response delayed 3 seconds Thu 2021-05-20 11:22:58.153: 03: [762601] --> 250-mail.richtex.co.id Hello mx8.cleverspeed.com [103.3.164.21], pleased to meet you Thu 2021-05-20 11:22:58.153: 03: [762601] --> 250-ETRN Thu 2021-05-20 11:22:58.153: 07: [762601] Location Screening hiding AUTH from country Singapore Thu 2021-05-20 11:22:58.153: 03: [762601] --> 250-8BITMIME Thu 2021-05-20 11:22:58.153: 03: [762601] --> 250-ENHANCEDSTATUSCODES Thu 2021-05-20 11:22:58.153: 03: [762601] --> 250-STARTTLS Thu 2021-05-20 11:22:58.153: 03: [762601] --> 250 SIZE 2000 Thu 2021-05-20 11:22:58.183: 02: [762601] <-- STARTTLS Thu 2021-05-20 11:22:58.183: 03: [762601] --> 220 2.7.0 Ready to start TLS Thu 2021-05-20 11:22:58.273: 01: [762601] SSL negotiation successful (TLS 1.2, 384 bit key exchange, 256 bit AES encryption) Thu 2021-05-20 11:22:58.319: 02: [762601] <-- EHLO mx8.cleverspeed.com Thu 2021-05-20 11:22:58.325: 09: [762601] Performing SPF lookup (mx8.cleverspeed.com / 103.3.164.21) Thu 2021-05-20 11:22:58.577: 09: [762601] * Result: none; no SPF record in DNS Thu 2021-05-20 11:22:58.577: 09: [762601] End SPF results Thu 2021-05-20 11:22:58.577: 03: [762601] --> 250-mail.richtex.co.id Hello mx8.cleverspeed.com [103.3.164.21], pleased to meet you Thu 2021-05-20 11:22:58.577: 03: [762601] --> 250-ETRN Thu 2021-05-20 11:22:58.577: 07: [762601] Location Screening hiding AUTH from country Singapore Thu 2021-05-20 11:22:58.577: 03: [762601] --> 250-8BITMIME Thu 2021-05-20 11:22:58.577: 03: [762601] --> 250-ENHANCEDSTATUSCODES Thu 2021-05-20 11:22:58.577: 03: [762601] --> 250 SIZE 2000 Thu 2021-05-20 11:22:58.607: 02: [762601] <-- MAIL FROM: SIZE=489468 Thu 2021-05-20 11:22:58.614: 05: [762601] Performing PTR lookup (21.164.3.103.IN-ADDR.ARPA) Thu 2021-05-20 11:22:58.859: 05: [762601] * D=21.164.3.103.in-addr.arpa TTL=(240) PTR=[mx8.cleverspeed.com] Thu 2021-05-20 11:22:58.891: 05: [762601] * D=mx8.cleverspeed.com TTL=(60) A=[103.3.164.14] Thu 2021-05-20 11:22:58.891: 05: [762601] * MDaemon configured to drop connection on PTR record mismatch Thu 2021-05-20 11:22:58.891: 05: [762601] End PTR results Thu 2021-05-20 11:22:58.891: 03: [762601] --> 501 5.7.0 Domain must resolve Thu 2021-05-20 11:22:58.891: 04: [762601] SMTP session terminated (Bytes in/out: 614/4113) Thu 2021-05-20 11:22:58.892: 01: -- Terima kasih. -- --[mdaemon-l]-- Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette Arsip: http://mdaemon-l.dutaint.com Dokumentasi : http://mdaemon.dutaint.co.id Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com Versi terakhir: MDaemon 21.0.2, SecurityGateway 8.0.1
[Mdaemon-L] 501 5.7.0 Domain must resolve
Selamat pagi Pak Syafril, Mohon dibuatkan pengecualian untuk log berikut: Mon 2021-05-10 08:05:16.807: 01: -- Mon 2021-05-10 08:05:22.688: 05: [652995] Session 652995; child 0001 Mon 2021-05-10 08:05:22.688: 05: [652995] Accepting SMTP connection from 43.241.73.142:44572 to 10.0.1.2:25 Mon 2021-05-10 08:05:22.689: 03: [652995] --> 220 mail.richtex.co.id ESMTP Mon, 10 May 2021 08:05:22 +0700 Mon 2021-05-10 08:05:22.760: 02: [652995] <-- EHLO kt-spk-e406.pointdnshere.com Mon 2021-05-10 08:05:22.765: 09: [652995] Performing SPF lookup (kt-spk-e406.pointdnshere.com / 43.241.73.142) Mon 2021-05-10 08:05:23.035: 09: [652995] * Result: none; no SPF record in DNS Mon 2021-05-10 08:05:23.035: 09: [652995] End SPF results Mon 2021-05-10 08:05:23.036: 01: [652995] EHLO/HELO response delayed 3 seconds Mon 2021-05-10 08:05:26.037: 03: [652995] --> 250-mail.richtex.co.id Hello kt-spk-e406.pointdnshere.com [43.241.73.142], pleased to meet you Mon 2021-05-10 08:05:26.037: 03: [652995] --> 250-ETRN Mon 2021-05-10 08:05:26.037: 07: [652995] Location Screening hiding AUTH from country Hong Kong Mon 2021-05-10 08:05:26.037: 03: [652995] --> 250-8BITMIME Mon 2021-05-10 08:05:26.037: 03: [652995] --> 250-ENHANCEDSTATUSCODES Mon 2021-05-10 08:05:26.037: 03: [652995] --> 250-STARTTLS Mon 2021-05-10 08:05:26.037: 03: [652995] --> 250 SIZE 2000 Mon 2021-05-10 08:05:26.111: 02: [652995] <-- STARTTLS Mon 2021-05-10 08:05:26.111: 03: [652995] --> 220 2.7.0 Ready to start TLS Mon 2021-05-10 08:05:26.383: 01: [652995] SSL negotiation successful (TLS 1.2, 384 bit key exchange, 256 bit AES encryption) Mon 2021-05-10 08:05:26.450: 02: [652995] <-- EHLO kt-spk-e406.pointdnshere.com Mon 2021-05-10 08:05:26.455: 09: [652995] Performing SPF lookup (kt-spk-e406.pointdnshere.com / 43.241.73.142) Mon 2021-05-10 08:05:26.707: 09: [652995] * Result: none; no SPF record in DNS Mon 2021-05-10 08:05:26.707: 09: [652995] End SPF results Mon 2021-05-10 08:05:26.707: 03: [652995] --> 250-mail.richtex.co.id Hello kt-spk-e406.pointdnshere.com [43.241.73.142], pleased to meet you Mon 2021-05-10 08:05:26.707: 03: [652995] --> 250-ETRN Mon 2021-05-10 08:05:26.707: 07: [652995] Location Screening hiding AUTH from country Hong Kong Mon 2021-05-10 08:05:26.707: 03: [652995] --> 250-8BITMIME Mon 2021-05-10 08:05:26.707: 03: [652995] --> 250-ENHANCEDSTATUSCODES Mon 2021-05-10 08:05:26.707: 03: [652995] --> 250 SIZE 2000 Mon 2021-05-10 08:05:26.774: 02: [652995] <-- MAIL FROM: SIZE=100819 Mon 2021-05-10 08:05:26.782: 05: [652995] Performing PTR lookup (142.73.241.43.IN-ADDR.ARPA) Mon 2021-05-10 08:05:26.784: 05: [652995] * D=142.73.241.43.in-addr.arpa TTL=(234) PTR=[hkbn-spk-a218.pointdnshere.com] Mon 2021-05-10 08:05:26.785: 05: [652995] * D=hkbn-spk-a218.pointdnshere.com TTL=(54) A=[43.241.73.141] Mon 2021-05-10 08:05:26.785: 05: [652995] * MDaemon configured to drop connection on PTR record mismatch Mon 2021-05-10 08:05:26.785: 05: [652995] End PTR results Mon 2021-05-10 08:05:26.785: 03: [652995] --> 501 5.7.0 Domain must resolve Mon 2021-05-10 08:05:26.786: 04: [652995] SMTP session terminated (Bytes in/out: 635/4133) Mon 2021-05-10 08:05:26.786: 01: -- Terima kasih. -- --[mdaemon-l]-- Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette Arsip: http://mdaemon-l.dutaint.com Dokumentasi : http://mdaemon.dutaint.co.id Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com Versi terakhir: MDaemon 21.0.1, SecurityGateway 8.0.1
[mdaemon-l] 501 5.7.0 No A/AAAA records found & No PTR records found
Selamat siang Pak Syafril, Mohon diupdate untuk error log berikut: Wed 2021-01-27 11:16:44.710: 01: -- Wed 2021-01-27 11:19:55.651: 05: [423637] Session 423637; child 0001 Wed 2021-01-27 11:19:55.651: 05: [423637] Accepting SMTP connection from 124.9.9.173:17746 to 10.0.1.2:25 Wed 2021-01-27 11:19:55.651: 03: [423637] --> 220 mail.richtex.co.id ESMTP Wed, 27 Jan 2021 11:19:55 +0700 Wed 2021-01-27 11:19:55.731: 02: [423637] <-- EHLO taipei.makalot.com.tw Wed 2021-01-27 11:19:55.736: 09: [423637] Performing SPF lookup (taipei.makalot.com.tw / 124.9.9.173) Wed 2021-01-27 11:19:55.825: 09: [423637] * Result: none; no SPF record in DNS Wed 2021-01-27 11:19:55.825: 09: [423637] End SPF results Wed 2021-01-27 11:19:55.825: 01: [423637] EHLO/HELO response delayed 3 seconds Wed 2021-01-27 11:19:58.826: 03: [423637] --> 250-mail.richtex.co.id Hello taipei.makalot.com.tw [124.9.9.173], pleased to meet you Wed 2021-01-27 11:19:58.826: 03: [423637] --> 250-ETRN Wed 2021-01-27 11:19:58.826: 07: [423637] Location Screening hiding AUTH from country Taiwan Wed 2021-01-27 11:19:58.826: 03: [423637] --> 250-8BITMIME Wed 2021-01-27 11:19:58.826: 03: [423637] --> 250-ENHANCEDSTATUSCODES Wed 2021-01-27 11:19:58.826: 03: [423637] --> 250-STARTTLS Wed 2021-01-27 11:19:58.826: 03: [423637] --> 250 SIZE 2000 Wed 2021-01-27 11:19:58.907: 02: [423637] <-- MAIL FROM: SIZE=1334415 Wed 2021-01-27 11:19:58.914: 05: [423637] Performing PTR lookup (173.9.9.124.IN-ADDR.ARPA) Wed 2021-01-27 11:19:59.137: 05: [423637] * D=173.9.9.124.in-addr.arpa TTL=(1440) PTR=[taipei.makalot.com.tw] Wed 2021-01-27 11:19:59.141: 05: [423637] * No A/ records found Wed 2021-01-27 11:19:59.141: 05: [423637] * MDaemon configured to drop connection on PTR record mismatch Wed 2021-01-27 11:19:59.141: 05: [423637] End PTR results Wed 2021-01-27 11:19:59.141: 03: [423637] --> 501 5.7.0 Domain must resolve Wed 2021-01-27 11:19:59.141: 04: [423637] SMTP session terminated (Bytes in/out: 77/262) Wed 2021-01-27 11:19:59.141: 01: -- Wed 2021-01-27 18:28:49.188: 01: -- Wed 2021-01-27 18:31:36.591: 05: [433480] Session 433480; child 0001 Wed 2021-01-27 18:31:36.591: 05: [433480] Accepting SMTP connection from 40.107.131.80:19797 to 10.0.1.2:25 Wed 2021-01-27 18:31:36.597: 03: [433480] --> 220 mail.richtex.co.id ESMTP Wed, 27 Jan 2021 18:31:36 +0700 Wed 2021-01-27 18:31:36.626: 02: [433480] <-- EHLO APC01-SG2-obe.outbound.protection.outlook.com Wed 2021-01-27 18:31:36.634: 09: [433480] Performing SPF lookup (APC01-SG2-obe.outbound.protection.outlook.com / 40.107.131.80) Wed 2021-01-27 18:31:36.838: 09: [433480] * Result: none; no SPF record in DNS Wed 2021-01-27 18:31:36.838: 09: [433480] End SPF results Wed 2021-01-27 18:31:36.839: 01: [433480] EHLO/HELO response delayed 3 seconds Wed 2021-01-27 18:31:39.840: 03: [433480] --> 250-mail.richtex.co.id Hello APC01-SG2-obe.outbound.protection.outlook.com [40.107.131.80], pleased to meet you Wed 2021-01-27 18:31:39.840: 03: [433480] --> 250-ETRN Wed 2021-01-27 18:31:39.840: 07: [433480] Location Screening hiding AUTH from country United States Wed 2021-01-27 18:31:39.840: 03: [433480] --> 250-8BITMIME Wed 2021-01-27 18:31:39.840: 03: [433480] --> 250-ENHANCEDSTATUSCODES Wed 2021-01-27 18:31:39.840: 03: [433480] --> 250-STARTTLS Wed 2021-01-27 18:31:39.841: 03: [433480] --> 250 SIZE 2000 Wed 2021-01-27 18:31:39.870: 02: [433480] <-- STARTTLS Wed 2021-01-27 18:31:39.870: 03: [433480] --> 220 2.7.0 Ready to start TLS Wed 2021-01-27 18:31:39.956: 01: [433480] SSL negotiation successful (TLS 1.2, 384 bit key exchange, 256 bit AES encryption) Wed 2021-01-27 18:31:39.986: 02: [433480] <-- EHLO APC01-SG2-obe.outbound.protection.outlook.com Wed 2021-01-27 18:31:39.992: 09: [433480] Performing SPF lookup (APC01-SG2-obe.outbound.protection.outlook.com / 40.107.131.80) Wed 2021-01-27 18:31:39.998: 09: [433480] * Result: none; no SPF record in DNS Wed 2021-01-27 18:31:39.998: 09: [433480] End SPF results Wed 2021-01-27 18:31:39.998: 03: [433480] --> 250-mail.richtex.co.id Hello APC01-SG2-obe.outbound.protection.outlook.com [40.107.131.80], pleased to meet you Wed 2021-01-27 18:31:39.998: 03: [433480] --> 250-ETRN Wed 2021-01-27 18:31:39.998: 07: [433480] Location Screening hiding AUTH from country United States Wed 2021-01-27 18:31:39.998: 03: [433480] --> 250-8BITMIME Wed 2021-01-27 18:31:39.998: 03: [433480] --> 250-ENHANCEDSTATUSCODES Wed 2021-01-27 18:31:39.998: 03: [433480] --> 250 SIZE 2000 Wed 2021-01-27 18:31:40.064: 02: [433480] <-- MAIL FROM: SIZE=822905 Wed 2021-01-27 18:31:40.073: 05: [433480] Performing PTR lookup (80.131.107.40.IN-ADDR.ARPA) Wed 2021-01-27 18:31:40.120: 05: [433480] * No PTR records found Wed 2021-01-27 18:31:40.120: 05: [433480] * MDaemon configured to drop connection when no PTR records found Wed 2021-01-27 18:31:40.120: 05: [433480] End PTR results Wed 2021-01-27
[mdaemon-l] 501 5.7.0 Domain must resolve
Dear Pak Syafril, Mohon dibuatkan pengecualian berdasarkan log berikut: Mon 2020-12-21 13:23:12.701: -- Mon 2020-12-21 13:23:47.125: [031325] Session 031325; child 0001 Mon 2020-12-21 13:23:47.125: [031325] Accepting SMTP connection from 203.153.98.83:24990 to 10.0.1.2:25 Mon 2020-12-21 13:23:47.131: [031325] --> 220 mail.richtex.co.id ESMTP Mon, 21 Dec 2020 13:23:47 +0700 Mon 2020-12-21 13:23:47.147: [031325] <-- EHLO mx-ma.velo.net.id Mon 2020-12-21 13:23:47.152: [031325] Performing SPF lookup (mx-ma.velo.net.id / 203.153.98.83) Mon 2020-12-21 13:23:47.193: [031325] * Result: none; no SPF record in DNS Mon 2020-12-21 13:23:47.193: [031325] End SPF results Mon 2020-12-21 13:23:47.195: [031325] EHLO/HELO response delayed 3 seconds Mon 2020-12-21 13:23:50.195: [031325] --> 250-mail.richtex.co.id Hello mx-ma.velo.net.id [203.153.98.83], pleased to meet you Mon 2020-12-21 13:23:50.195: [031325] --> 250-ETRN Mon 2020-12-21 13:23:50.195: [031325] --> 250-AUTH LOGIN CRAM-MD5 PLAIN Mon 2020-12-21 13:23:50.195: [031325] --> 250-8BITMIME Mon 2020-12-21 13:23:50.195: [031325] --> 250-ENHANCEDSTATUSCODES Mon 2020-12-21 13:23:50.195: [031325] --> 250-STARTTLS Mon 2020-12-21 13:23:50.195: [031325] --> 250 SIZE 1600 Mon 2020-12-21 13:23:50.214: [031325] <-- MAIL FROM: SIZE=86632 BODY=7BIT Mon 2020-12-21 13:23:50.221: [031325] Performing PTR lookup (83.98.153.203.IN-ADDR.ARPA) Mon 2020-12-21 13:23:51.480: [031325] * D=83.98.153.203.in-addr.arpa TTL=(1440) PTR=[mxa.velo.net.id] Mon 2020-12-21 13:23:51.503: [031325] * No A/ records found Mon 2020-12-21 13:23:51.504: [031325] * MDaemon configured to drop connection on PTR record mismatch Mon 2020-12-21 13:23:51.504: [031325] End PTR results Mon 2020-12-21 13:23:51.504: [031325] --> 501 5.7.0 Domain must resolve Mon 2020-12-21 13:23:51.504: [031325] SMTP session terminated (Bytes in/out: 79/291) Mon 2020-12-21 13:23:51.504: -- Terima kasih. -- --[mdaemon-l]-- Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette Arsip: http://mdaemon-l.dutaint.com Dokumentasi : http://mdaemon.dutaint.co.id Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com Versi terakhir: MDaemon 20.0.3, SecurityGateway 7.0.2
[mdaemon-l] Host can't be resolved
> Bisa pakai wildcard atau CIDR (Classless Inter-Domain Routing), tidak bisa pakai > IP range. Apakah list IP berikut dapat diinputkan ke ReverseXcpt.dat dan atau HeloLookupWL.dat pak? # IPV4 # hostname can not be Resolve 40.92.0.0/15#spf.protection.outlook.com 40.107.0.0/16 #spf.protection.outlook.com 52.100.0.0/14 #spf.protection.outlook.com 104.47.0.0/17 #spf.protection.outlook.com 51.4.72.0/24#spfd.protection.outlook.com 51.5.72.0/24#spfd.protection.outlook.com 51.5.80.0/27#spfd.protection.outlook.com 51.4.80.0/27#spfd.protection.outlook.com # IPV6 2a01:111:f400::/48 #spf.protection.outlook.com 2a01:111:f403::/48 #spf.protection.outlook.com 2a01:4180:4051:0800::/64#spfd.protection.outlook.com 2a01:4180:4050:0800::/64#spfd.protection.outlook.com 2a01:4180:4051:0400::/64#spfd.protection.outlook.com 2a01:4180:4050:0400::/64#spfd.protection.outlook.com Mohon arahan dan koreksinya bila salah. Terima kasih. -- --[mdaemon-l]-- Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette Arsip: http://mdaemon-l.dutaint.com Dokumentasi : http://mdaemon.dutaint.co.id Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com Versi terakhir: MDaemon 20.0.0, SecurityGateway 6.5.2
[mdaemon-l] Host can't be resolved
Selamat pagi Pak Syafril, Mohon diupdate host rekanan kami sesuai transkrip berikut: Fri 2020-08-14 09:03:52.830: 01: -- Fri 2020-08-14 09:06:42.987: 05: [26] Session 26; child 0001 Fri 2020-08-14 09:06:42.987: 05: [26] Accepting SMTP connection from 40.107.95.122:56993 to 10.0.1.2:25 Fri 2020-08-14 09:06:42.988: 03: [26] --> 220 mail.richtex.co.id ESMTP Fri, 14 Aug 2020 09:06:42 +0700 Fri 2020-08-14 09:06:43.210: 02: [26] <-- EHLO NAM02-DM3-obe.outbound.protection.outlook.com Fri 2020-08-14 09:06:43.217: 01: [26] EHLO/HELO response delayed 10 seconds Fri 2020-08-14 09:06:53.218: 03: [26] --> 250-mail.richtex.co.id Hello NAM02-DM3-obe.outbound.protection.outlook.com [40.107.95.122], pleased to meet you Fri 2020-08-14 09:06:53.218: 03: [26] --> 250-ETRN Fri 2020-08-14 09:06:53.218: 07: [26] Location Screening hiding AUTH from country United States Fri 2020-08-14 09:06:53.218: 03: [26] --> 250-8BITMIME Fri 2020-08-14 09:06:53.218: 03: [26] --> 250-ENHANCEDSTATUSCODES Fri 2020-08-14 09:06:53.218: 03: [26] --> 250-STARTTLS Fri 2020-08-14 09:06:53.218: 03: [26] --> 250 SIZE 1600 Fri 2020-08-14 09:06:53.441: 02: [26] <-- STARTTLS Fri 2020-08-14 09:06:53.441: 03: [26] --> 220 2.7.0 Ready to start TLS Fri 2020-08-14 09:06:53.912: 01: [26] SSL negotiation successful (TLS 1.2, 384 bit key exchange, 256 bit AES encryption) Fri 2020-08-14 09:06:54.135: 02: [26] <-- EHLO NAM02-DM3-obe.outbound.protection.outlook.com Fri 2020-08-14 09:06:54.142: 03: [26] --> 250-mail.richtex.co.id Hello NAM02-DM3-obe.outbound.protection.outlook.com [40.107.95.122], pleased to meet you Fri 2020-08-14 09:06:54.142: 03: [26] --> 250-ETRN Fri 2020-08-14 09:06:54.142: 07: [26] Location Screening hiding AUTH from country United States Fri 2020-08-14 09:06:54.142: 03: [26] --> 250-8BITMIME Fri 2020-08-14 09:06:54.142: 03: [26] --> 250-ENHANCEDSTATUSCODES Fri 2020-08-14 09:06:54.142: 03: [26] --> 250 SIZE 1600 Fri 2020-08-14 09:06:54.433: 02: [26] <-- MAIL FROM: SIZE=135247 Fri 2020-08-14 09:06:54.443: 05: [26] Performing PTR lookup (122.95.107.40.IN-ADDR.ARPA) Fri 2020-08-14 09:06:54.484: 05: [26] * D=122.95.107.40.in-addr.arpa TTL=(60) PTR=[mail-dm3nam07on2122.outbound.protection.outlook.com] Fri 2020-08-14 09:06:54.680: 05: [26] * D=mail-dm3nam07on2122.outbound.protection.outlook.com TTL=(60) A=[40.107.95.122] Fri 2020-08-14 09:06:54.680: 05: [26] * D=mail-dm3nam07on2122.outbound.protection.outlook.com TTL=(60) A=[40.93.23.122] Fri 2020-08-14 09:06:54.680: 05: [26] End PTR results Fri 2020-08-14 09:06:54.684: 05: [26] Performing IP lookup (NAM02-DM3-obe.outbound.protection.outlook.com) Fri 2020-08-14 09:06:54.876: 04: [26] * DNS server reports domain name unknown Fri 2020-08-14 09:06:54.876: 05: [26] End IP lookup results Fri 2020-08-14 09:06:54.876: 03: [26] --> 501 5.7.0 NAM02-DM3-obe.outbound.protection.outlook.com host can't be resolved Fri 2020-08-14 09:06:54.876: 04: [26] SMTP session terminated (Bytes in/out: 549/3799) Fri 2020-08-14 09:06:54.876: 01: -- Mohon ijin bertanya, untuk efieiensi, apakah HeloLookupWL.dat dapat menginput wildcard/range IP host atau saat ini hanya bisa per single IP address pak? Misal host *.protection.outlook.com : 40.92.0.0/15 40.107.0.0/16 52.100.0.0/14 104.47.0.0/17 Range tersebut jumlah IP address-nya banyak sekali hingga ratusan ribu. Mohon dikoreksi bila salah. Terima kasih. -- --[mdaemon-l]-- Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette Arsip: http://mdaemon-l.dutaint.com Dokumentasi : http://mdaemon.dutaint.co.id Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com Versi terakhir: MDaemon 20.0.0, SecurityGateway 6.5.2
[mdaemon-l] Host can't be resolved
Selamat siang Pak Syafril, Mohon diupdate host rekanan kami sesuai transkrip berikut: Fri 2020-08-07 14:15:40.673: 01: -- Fri 2020-08-07 14:15:30.209: 05: [565879] Session 565879; child 0001 Fri 2020-08-07 14:15:30.209: 05: [565879] Accepting SMTP connection from 40.107.101.54:46177 to 10.0.1.2:25 Fri 2020-08-07 14:15:30.210: 03: [565879] --> 220 mail.richtex.co.id ESMTP Fri, 07 Aug 2020 14:15:30 +0700 Fri 2020-08-07 14:15:30.399: 02: [565879] <-- EHLO NAM04-MW2-obe.outbound.protection.outlook.com Fri 2020-08-07 14:15:30.406: 01: [565879] EHLO/HELO response delayed 10 seconds Fri 2020-08-07 14:15:40.407: 03: [565879] --> 250-mail.richtex.co.id Hello NAM04-MW2-obe.outbound.protection.outlook.com [40.107.101.54], pleased to meet you Fri 2020-08-07 14:15:40.407: 03: [565879] --> 250-ETRN Fri 2020-08-07 14:15:40.407: 07: [565879] Location Screening hiding AUTH from country United States Fri 2020-08-07 14:15:40.407: 03: [565879] --> 250-8BITMIME Fri 2020-08-07 14:15:40.407: 03: [565879] --> 250-ENHANCEDSTATUSCODES Fri 2020-08-07 14:15:40.408: 03: [565879] --> 250-STARTTLS Fri 2020-08-07 14:15:40.408: 03: [565879] --> 250 SIZE 1600 Fri 2020-08-07 14:15:40.596: 02: [565879] <-- STARTTLS Fri 2020-08-07 14:15:40.596: 03: [565879] --> 220 2.7.0 Ready to start TLS Fri 2020-08-07 14:15:40.999: 01: [565879] SSL negotiation successful (TLS 1.2, 384 bit key exchange, 256 bit AES encryption) Fri 2020-08-07 14:15:41.254: 02: [565879] <-- EHLO NAM04-MW2-obe.outbound.protection.outlook.com Fri 2020-08-07 14:15:41.261: 03: [565879] --> 250-mail.richtex.co.id Hello NAM04-MW2-obe.outbound.protection.outlook.com [40.107.101.54], pleased to meet you Fri 2020-08-07 14:15:41.261: 03: [565879] --> 250-ETRN Fri 2020-08-07 14:15:41.261: 07: [565879] Location Screening hiding AUTH from country United States Fri 2020-08-07 14:15:41.261: 03: [565879] --> 250-8BITMIME Fri 2020-08-07 14:15:41.261: 03: [565879] --> 250-ENHANCEDSTATUSCODES Fri 2020-08-07 14:15:41.261: 03: [565879] --> 250 SIZE 1600 Fri 2020-08-07 14:15:41.472: 02: [565879] <-- MAIL FROM: SIZE=308883 Fri 2020-08-07 14:15:41.481: 05: [565879] Performing PTR lookup (54.101.107.40.IN-ADDR.ARPA) Fri 2020-08-07 14:15:41.523: 05: [565879] * D=54.101.107.40.in-addr.arpa TTL=(60) PTR=[mail-mw2nam08on2054.outbound.protection.outlook.com] Fri 2020-08-07 14:15:41.716: 05: [565879] * D=mail-mw2nam08on2054.outbound.protection.outlook.com TTL=(60) A=[40.107.101.54] Fri 2020-08-07 14:15:41.716: 05: [565879] End PTR results Fri 2020-08-07 14:15:41.720: 05: [565879] Performing IP lookup (NAM04-MW2-obe.outbound.protection.outlook.com) Fri 2020-08-07 14:15:41.724: 04: [565879] * DNS server reports domain name unknown Fri 2020-08-07 14:15:41.724: 05: [565879] End IP lookup results Fri 2020-08-07 14:15:41.725: 03: [565879] --> 501 5.7.0 NAM04-MW2-obe.outbound.protection.outlook.com host can't be resolved Fri 2020-08-07 14:15:41.725: 04: [565879] SMTP session terminated (Bytes in/out: 512/3799) Fri 2020-08-07 14:15:41.726: 01: -- Terima kasih. -- --[mdaemon-l]-- Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette Arsip: http://mdaemon-l.dutaint.com Dokumentasi : http://mdaemon.dutaint.co.id Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com Versi terakhir: MDaemon 20.0.0, SecurityGateway 6.5.2
[mdaemon-l] Dmarc Alignment
> Apakah DMARC Message Disposition diaktifkan "Filter messages which fail the > DMARC test into spam folders" > > http://mdaemon.dutaint.co.id/mdaemon/20.0/index.html?security-- > dmarc_verification.htm > > [ ] Filter messages which fail the DMARC test into spam folders Betul pak, saya aktifkan. Hal ini sangat membantu karena email yang masuk lebih valid dan bebas dari phising, karena karakter user kami yang terkadang kurang teliti atau sebenarnya tau namun tetap penasaran membuka bila mendapatkan email yang mengatasnamakan pihak tertentu yang rawan dijadikan subjek phising dan kebetulan lolos screening. Asumsi saya bila domain telah mengaktifkan DMARC dan menerapkan policy yang lebih ketat misal p=quarantine bahkan p=reject, saya anggap mereka benar-benar paham apa yang mereka lakukan dan harapkan. Namun terkadang bila terdapat perubahan detail konfigurasi dan telat memperbarui malah membuat blunder dan terjebak oleh policy mereka sendiri. Apakah ada cara lain yang tetap aman namun lebih efisien selain melakukan pengecualian terhadap domain-domain tersebut pak? Terima kasih. -- --[mdaemon-l]-- Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette Arsip: http://mdaemon-l.dutaint.com Dokumentasi : http://mdaemon.dutaint.co.id Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com Versi terakhir: MDaemon 20.0.0, SecurityGateway 6.5.2
[mdaemon-l] Dmarc Alignment
Selamat sore Pak Syafril,
Mohon analisa untuk log berikut:
Tue 2020-07-07 16:18:57.243: 01: --
Tue 2020-07-07 16:18:54.315: 05: [693775] Session 693775; child 0001
Tue 2020-07-07 16:18:54.315: 05: [693775] Accepting SMTP connection from
113.20.31.187:3766 to 10.0.1.2:25
Tue 2020-07-07 16:18:54.316: 03: [693775] --> 220 mail.richtex.co.id ESMTP
Tue, 07 Jul 2020 16:18:54 +0700
Tue 2020-07-07 16:18:54.336: 02: [693775] <-- EHLO dip31.dutaint.com
Tue 2020-07-07 16:18:54.340: 01: [693775] EHLO/HELO response delayed 10
seconds
Tue 2020-07-07 16:19:04.341: 03: [693775] --> 250-mail.richtex.co.id Hello
dip31.dutaint.com [113.20.31.187], pleased to meet you
Tue 2020-07-07 16:19:04.341: 03: [693775] --> 250-ETRN
Tue 2020-07-07 16:19:04.341: 03: [693775] --> 250-AUTH LOGIN PLAIN
Tue 2020-07-07 16:19:04.341: 03: [693775] --> 250-8BITMIME
Tue 2020-07-07 16:19:04.341: 03: [693775] --> 250-ENHANCEDSTATUSCODES
Tue 2020-07-07 16:19:04.341: 03: [693775] --> 250-STARTTLS
Tue 2020-07-07 16:19:04.341: 03: [693775] --> 250 SIZE 1600
Tue 2020-07-07 16:19:04.358: 02: [693775] <-- STARTTLS
Tue 2020-07-07 16:19:04.358: 03: [693775] --> 220 2.7.0 Ready to start TLS
Tue 2020-07-07 16:19:04.394: 01: [693775] SSL negotiation successful (TLS
1.2, 384 bit key exchange, 256 bit AES encryption)
Tue 2020-07-07 16:19:04.396: 02: [693775] <-- EHLO dip31.dutaint.com
Tue 2020-07-07 16:19:04.400: 03: [693775] --> 250-mail.richtex.co.id Hello
dip31.dutaint.com [113.20.31.187], pleased to meet you
Tue 2020-07-07 16:19:04.400: 03: [693775] --> 250-ETRN
Tue 2020-07-07 16:19:04.400: 03: [693775] --> 250-AUTH LOGIN PLAIN
Tue 2020-07-07 16:19:04.400: 03: [693775] --> 250-8BITMIME
Tue 2020-07-07 16:19:04.400: 03: [693775] --> 250-ENHANCEDSTATUSCODES
Tue 2020-07-07 16:19:04.400: 03: [693775] --> 250 SIZE 1600
Tue 2020-07-07 16:19:04.417: 02: [693775] <-- MAIL
From: SIZE=6041
Tue 2020-07-07 16:19:04.423: 05: [693775] Performing PTR lookup
(187.31.20.113.IN-ADDR.ARPA)
Tue 2020-07-07 16:19:04.426: 05: [693775] * D=187.31.20.113.in-addr.arpa
TTL=(203) PTR=[dip31.dutaint.com]
Tue 2020-07-07 16:19:04.429: 05: [693775] * D=dip31.dutaint.com TTL=(4283)
A=[113.20.31.187]
Tue 2020-07-07 16:19:04.429: 05: [693775] End PTR results
Tue 2020-07-07 16:19:04.432: 05: [693775] Performing IP lookup
(dip31.dutaint.com)
Tue 2020-07-07 16:19:04.435: 05: [693775] * D=dip31.dutaint.com TTL=(4283)
A=[113.20.31.187]
Tue 2020-07-07 16:19:04.435: 05: [693775] End IP lookup results
Tue 2020-07-07 16:19:04.443: 05: [693775] Performing IP lookup (dutaint.com)
Tue 2020-07-07 16:19:04.445: 05: [693775] * D=dutaint.com TTL=(143)
A=[113.20.31.132]
Tue 2020-07-07 16:19:04.448: 05: [693775] * P=010 S=000 D=dutaint.com
TTL=(143) MX=[list.dutaint.com] {113.20.31.187}
Tue 2020-07-07 16:19:04.448: 05: [693775] End IP lookup results
Tue 2020-07-07 16:19:04.452: 09: [693775] Performing SPF lookup
(dip31.dutaint.com / 113.20.31.187)
Tue 2020-07-07 16:19:04.452: 09: [693775] * Policy (cache): v=spf1
redirect=_spf.dutaint.com
Tue 2020-07-07 16:19:04.452: 09: [693775] * Evaluating
redirect=_spf.dutaint.com:
Tue 2020-07-07 16:19:04.452: 09: [693775] * Evaluating
redirect=_spf.dutaint.com: performing lookup
Tue 2020-07-07 16:19:04.452: 09: [693775] *Policy (cache): v=spf1
ip4:139.255.33.176/28 ip4:113.20.31.193/29 ip4:113.20.30.168/29
ip4:113.20.31.128/29 ip4:113.20.31.184/29 -all
Tue 2020-07-07 16:19:04.452: 09: [693775] *Evaluating
ip4:139.255.33.176/28: no match
Tue 2020-07-07 16:19:04.452: 09: [693775] *Evaluating
ip4:113.20.31.193/29: no match
Tue 2020-07-07 16:19:04.452: 09: [693775] *Evaluating
ip4:113.20.30.168/29: no match
Tue 2020-07-07 16:19:04.452: 09: [693775] *Evaluating
ip4:113.20.31.128/29: no match
Tue 2020-07-07 16:19:04.452: 09: [693775] *Evaluating
ip4:113.20.31.184/29: match
Tue 2020-07-07 16:19:04.452: 09: [693775] * Result: pass
Tue 2020-07-07 16:19:04.452: 09: [693775] End SPF results
Tue 2020-07-07 16:19:04.452: 09: [693775] Performing SPF lookup (dutaint.com
/ 113.20.31.187)
Tue 2020-07-07 16:19:04.452: 09: [693775] * Policy (cache): v=spf1
redirect=_spf.dutaint.com
Tue 2020-07-07 16:19:04.452: 09: [693775] * Evaluating
redirect=_spf.dutaint.com:
Tue 2020-07-07 16:19:04.452: 09: [693775] * Evaluating
redirect=_spf.dutaint.com: performing lookup
Tue 2020-07-07 16:19:04.453: 09: [693775] *Policy (cache): v=spf1
ip4:139.255.33.176/28 ip4:113.20.31.193/29 ip4:113.20.30.168/29
ip4:113.20.31.128/29 ip4:113.20.31.184/29 -all
Tue 2020-07-07 16:19:04.453: 09: [693775] *Evaluating
ip4:139.255.33.176/28: no match
Tue 2020-07-07 16:19:04.453: 09: [693775] *Evaluating
ip4:113.20.31.193/29: no match
Tue 2020-07-07 16:19:04.453: 09: [693775] *Evaluating
ip4:113.20.30.168/29: no match
Tue 2020-07-07 16:19:04.453: 09: [693775] *Evaluating
ip4:113.20.31.128/29: no match
Tue 2020-07-07 16:19:04.453: 09: [693775] *Evaluating
[mdaemon-l] 501 5.7.0 Domain must resolve
Selamat pagi Pak Syafril, Mohon ditambahkan pengecualian PTR untuk domain berikut: Mon 2020-07-06 09:23:18.115: 01: -- Mon 2020-07-06 09:23:07.975: 05: [658889] Session 658889; child 0005 Mon 2020-07-06 09:23:07.975: 05: [658889] Accepting SMTP connection from 103.25.223.48:43145 to 10.0.1.2:25 Mon 2020-07-06 09:23:07.976: 03: [658889] --> 220 mail.richtex.co.id ESMTP Mon, 06 Jul 2020 09:23:07 +0700 Mon 2020-07-06 09:23:07.991: 02: [658889] <-- EHLO mxserver4-out9.masterweb.com Mon 2020-07-06 09:23:07.996: 01: [658889] EHLO/HELO response delayed 10 seconds Mon 2020-07-06 09:23:17.997: 03: [658889] --> 250-mail.richtex.co.id Hello mxserver4-out9.masterweb.com [103.25.223.48], pleased to meet you Mon 2020-07-06 09:23:17.997: 03: [658889] --> 250-ETRN Mon 2020-07-06 09:23:17.997: 03: [658889] --> 250-AUTH LOGIN PLAIN Mon 2020-07-06 09:23:17.997: 03: [658889] --> 250-8BITMIME Mon 2020-07-06 09:23:17.997: 03: [658889] --> 250-ENHANCEDSTATUSCODES Mon 2020-07-06 09:23:17.997: 03: [658889] --> 250-STARTTLS Mon 2020-07-06 09:23:17.997: 03: [658889] --> 250 SIZE 1600 Mon 2020-07-06 09:23:18.013: 02: [658889] <-- STARTTLS Mon 2020-07-06 09:23:18.013: 03: [658889] --> 220 2.7.0 Ready to start TLS Mon 2020-07-06 09:23:18.072: 01: [658889] SSL negotiation successful (TLS 1.2, 384 bit key exchange, 256 bit AES encryption) Mon 2020-07-06 09:23:18.089: 02: [658889] <-- EHLO mxserver4-out9.masterweb.com Mon 2020-07-06 09:23:18.093: 03: [658889] --> 250-mail.richtex.co.id Hello mxserver4-out9.masterweb.com [103.25.223.48], pleased to meet you Mon 2020-07-06 09:23:18.093: 03: [658889] --> 250-ETRN Mon 2020-07-06 09:23:18.093: 03: [658889] --> 250-AUTH LOGIN PLAIN Mon 2020-07-06 09:23:18.093: 03: [658889] --> 250-8BITMIME Mon 2020-07-06 09:23:18.093: 03: [658889] --> 250-ENHANCEDSTATUSCODES Mon 2020-07-06 09:23:18.093: 03: [658889] --> 250 SIZE 1600 Mon 2020-07-06 09:23:18.110: 02: [658889] <-- MAIL FROM: SIZE=43847 Mon 2020-07-06 09:23:18.118: 05: [658889] Performing PTR lookup (48.223.25.103.IN-ADDR.ARPA) Mon 2020-07-06 09:23:18.119: 05: [658889] * D=48.223.25.103.in-addr.arpa TTL=(3) PTR=[mxserver4-out9.masterweb.com] Mon 2020-07-06 09:23:18.123: 05: [658889] * No A/ records found Mon 2020-07-06 09:23:18.123: 05: [658889] * MDaemon configured to drop connection on PTR record mismatch Mon 2020-07-06 09:23:18.123: 05: [658889] End PTR results Mon 2020-07-06 09:23:18.123: 03: [658889] --> 501 5.7.0 Domain must resolve Mon 2020-07-06 09:23:18.123: 04: [658889] SMTP session terminated (Bytes in/out: 627/4295) Mon 2020-07-06 09:23:18.123: 01: -- Domain tersebut juga tidak mempunyai SPF record untuk analisa lebih lanjut. Terima kasih. -- --[mdaemon-l]-- Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette Arsip: http://mdaemon-l.dutaint.com Dokumentasi : http://mdaemon.dutaint.co.id Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com Versi terakhir: MDaemon 20.0.0, SecurityGateway 6.5.2
[mdaemon-l] Spam Mailing List
> Set mailing listnya sebagai Private List (only member allow post) > http://mdaemon.dutaint.co.id/mdaemon/20.0/index.html?ml_options.htm > [x] Refuse messages from non list members Alamat tersebut memang untuk koordinasi antar divisi agar tidak mention 1by1 di listnya, jadi tidak bisa di terapkan langkah tersebut. > Bisa seperti itu, atau masukkan sender domain kedalam Mailing List > suppression (blacklist) > http://mdaemon.dutaint.co.id/mdaemon/20.0/index.html?ml_support_files.htm Apakah tidak ada solusi lain agar mencegah email serupa terulang kembali entah ke mailing list atau ke user privat pak? Karena user tersebut verified dan cukup bersih di konfigurasi saya, walaupun saat di cek blacklist ip tersebut listed di 4 RBL lain. Terima kasih. -- --[mdaemon-l]-- Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette Arsip: http://mdaemon-l.dutaint.com Dokumentasi : http://mdaemon.dutaint.co.id Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com Versi terakhir: MDaemon 20.0.0, SecurityGateway 6.5.2
[mdaemon-l] host can't be resolved
Dear pak Syafril, Mohon diupdate untuk host yang digunakan oleh rekanan sesuai transkrip berikut: Fri 2020-03-13 10:42:53.800: 01: -- Fri 2020-03-13 10:42:49.166: 05: [609547] Session 609547; child 0002 Fri 2020-03-13 10:42:49.166: 05: [609547] Accepting SMTP connection from 203.205.250.57:53375 to 10.0.1.2:25 Fri 2020-03-13 10:42:49.168: 03: [609547] --> 220 mail.richtex.co.id ESMTP Fri, 13 Mar 2020 10:42:49 +0700 Fri 2020-03-13 10:42:49.233: 02: [609547] <-- EHLO smtpbg.qq.com Fri 2020-03-13 10:42:49.238: 01: [609547] EHLO/HELO response delayed 10 seconds Fri 2020-03-13 10:42:59.239: 03: [609547] --> 250-mail.richtex.co.id Hello smtpbg.qq.com [203.205.250.57], pleased to meet you Fri 2020-03-13 10:42:59.239: 03: [609547] --> 250-ETRN Fri 2020-03-13 10:42:59.239: 03: [609547] --> 250-AUTH LOGIN PLAIN Fri 2020-03-13 10:42:59.239: 03: [609547] --> 250-8BITMIME Fri 2020-03-13 10:42:59.239: 03: [609547] --> 250-ENHANCEDSTATUSCODES Fri 2020-03-13 10:42:59.239: 03: [609547] --> 250-STARTTLS Fri 2020-03-13 10:42:59.239: 03: [609547] --> 250 SIZE Fri 2020-03-13 10:42:59.302: 02: [609547] <-- STARTTLS Fri 2020-03-13 10:42:59.302: 03: [609547] --> 220 2.7.0 Ready to start TLS Fri 2020-03-13 10:42:59.458: 01: [609547] SSL negotiation successful (TLS 1.2, 384 bit key exchange, 256 bit AES encryption) Fri 2020-03-13 10:42:59.520: 02: [609547] <-- EHLO smtpbg.qq.com Fri 2020-03-13 10:42:59.524: 03: [609547] --> 250-mail.richtex.co.id Hello smtpbg.qq.com [203.205.250.57], pleased to meet you Fri 2020-03-13 10:42:59.524: 03: [609547] --> 250-ETRN Fri 2020-03-13 10:42:59.524: 03: [609547] --> 250-AUTH LOGIN PLAIN Fri 2020-03-13 10:42:59.524: 03: [609547] --> 250-8BITMIME Fri 2020-03-13 10:42:59.524: 03: [609547] --> 250-ENHANCEDSTATUSCODES Fri 2020-03-13 10:42:59.524: 03: [609547] --> 250 SIZE Fri 2020-03-13 10:42:59.587: 02: [609547] <-- MAIL FROM: Fri 2020-03-13 10:42:59.593: 05: [609547] Performing PTR lookup (57.250.205.203.IN-ADDR.ARPA) Fri 2020-03-13 10:43:00.640: 05: [609547] * D=57.250.205.203.in-addr.arpa TTL=(120) PTR=[smtpbg503.qq.com] Fri 2020-03-13 10:43:01.223: 05: [609547] * D=smtpbg503.qq.com TTL=(10) A=[203.205.250.57] Fri 2020-03-13 10:43:01.223: 05: [609547] End PTR results Fri 2020-03-13 10:43:01.226: 05: [609547] Performing IP lookup (smtpbg.qq.com) Fri 2020-03-13 10:43:01.601: 04: [609547] * DNS server reports domain name unknown Fri 2020-03-13 10:43:01.601: 05: [609547] End IP lookup results Fri 2020-03-13 10:43:01.602: 03: [609547] --> 501 5.7.0 smtpbg.qq.com host can't be resolved Fri 2020-03-13 10:43:01.603: 04: [609547] SMTP session terminated (Bytes in/out: 609/3728) Fri 2020-03-13 10:43:01.603: 01: -- Terima kasih. -- --[mdaemon-l]-- Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette Arsip: http://mdaemon-l.dutaint.com Dokumentasi : http://mdaemon.dutaint.co.id Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com Versi terakhir: MDaemon 19.5.4, SecurityGateway 6.5.1
[mdaemon-l] Host screening refused
Dear pak Syafril, Mohon diupdate untuk host rekanan sesuai transkrip berikut: Wed 2020-03-11 13:14:51.264: 01: -- Wed 2020-03-11 13:16:05.703: 05: [564887] Session 564887; child 0001 Wed 2020-03-11 13:16:05.703: 05: [564887] Accepting SMTP connection from 202.134.61.50:57830 to 10.0.1.2:25 Wed 2020-03-11 13:16:05.709: 03: [564887] --> 220 mail.richtex.co.id ESMTP Wed, 11 Mar 2020 13:16:05 +0700 Wed 2020-03-11 13:16:05.776: 02: [564887] <-- EHLO sm9.hostedexchange.asia Wed 2020-03-11 13:16:05.783: 01: [564887] EHLO/HELO response delayed 10 seconds Wed 2020-03-11 13:16:15.784: 03: [564887] --> 250-mail.richtex.co.id Hello sm9.hostedexchange.asia [202.134.61.50], pleased to meet you Wed 2020-03-11 13:16:15.784: 03: [564887] --> 250-ETRN Wed 2020-03-11 13:16:15.784: 03: [564887] --> 250-AUTH LOGIN PLAIN Wed 2020-03-11 13:16:15.784: 03: [564887] --> 250-8BITMIME Wed 2020-03-11 13:16:15.784: 03: [564887] --> 250-ENHANCEDSTATUSCODES Wed 2020-03-11 13:16:15.784: 03: [564887] --> 250-STARTTLS Wed 2020-03-11 13:16:15.784: 03: [564887] --> 250 SIZE Wed 2020-03-11 13:16:15.853: 02: [564887] <-- MAIL FROM: SIZE=852613 Wed 2020-03-11 13:16:15.860: 05: [564887] Performing PTR lookup (50.61.134.202.IN-ADDR.ARPA) Wed 2020-03-11 13:16:16.560: 05: [564887] * D=50.61.134.202.in-addr.arpa TTL=(60) PTR=[sm9.hostedexchange.asia] Wed 2020-03-11 13:16:16.560: 05: [564887] * D=50.61.134.202.in-addr.arpa TTL=(60) PTR=[sm9.azurance.com] Wed 2020-03-11 13:16:16.670: 05: [564887] * D=sm9.hostedexchange.asia TTL=(60) A=[202.134.61.50] Wed 2020-03-11 13:16:17.240: 05: [564887] * D=sm9.azurance.com TTL=(20) A=[202.134.61.50] Wed 2020-03-11 13:16:17.240: 05: [564887] End PTR results Wed 2020-03-11 13:16:17.244: 05: [564887] Performing IP lookup (sm9.hostedexchange.asia) Wed 2020-03-11 13:16:17.245: 05: [564887] * D=sm9.hostedexchange.asia TTL=(60) A=[202.134.61.50] Wed 2020-03-11 13:16:17.245: 05: [564887] End IP lookup results Wed 2020-03-11 13:16:17.247: 03: [564887] --> 550 5.7.1 Sender unknown Wed 2020-03-11 13:16:17.247: 01: [564887] Host screening refused connection to 10.0.1.2:25 from sm9.azurance.com [202.134.61.50:57830] (matched to line "all *.azurance.com refuse") Wed 2020-03-11 13:16:17.251: 04: [564887] SMTP session terminated (Bytes in/out: 77/274) Wed 2020-03-11 13:16:17.251: 01: -- Terima kasih. -- --[mdaemon-l]-- Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette Arsip: http://mdaemon-l.dutaint.com Dokumentasi : http://mdaemon.dutaint.co.id Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com Versi terakhir: MDaemon 19.5.4, SecurityGateway 6.5.1
[mdaemon-l] Phising Email
> Yakin mail ini phising spam? Sangat yakin pak, karena detail subject dan konten tidak valid dengan company kita. > Kalau memang isinya tidak sesuai dengan subject, kemungkinan sender salah > content (sering terjadi pada email client Office outlook) atau karena akun itu > terhijack (banyak kasusnya sejak awal tahun 2018 yl). Kebetulan kita terakhir kontak dengan domain tersebut adalah tahun 2018. Apabila sender memang salah content maka content tersebut fatal untuk ukuran domain tersebut. > Jika memang domain sgs.com *bukan* rekan korespondensi domain > richtex.co.id maka bisa masukkan host mail- > vi1eur05on2117.outbound.protection.outlook.com dalam hostscreening. > Tetapi jika domain sgs.com adalah rekan korespondensi domain richtex.co.id > maka masukkan IP 40.107.21.117 kedalam dynamic blacklist for 2 -3 days. Saat ini ip dimasukkan ke dalam dynamic blacklist, namun apabila masih berlanjut dalam minggu ini host akan di oper kedalam hostscreening. Terima kasih pak. -- --[mdaemon-l]-- Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette Arsip: http://mdaemon-l.dutaint.com Dokumentasi : http://mdaemon.dutaint.co.id Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com Versi terakhir: MDaemon 19.5.3, SecurityGateway 6.5.1
[mdaemon-l] Phising Email
Dear Pak Syafril, Mohon bantuan analisa dan pencerahan untuk header dan log berikut: X-MDAV-Result: clean X-MDAV-Processed: mail.richtex.co.id, Wed, 22 Jan 2020 10:32:33 +0700 Return-path: Authentication-Results: mail.richtex.co.id; spf=pass smtp.mailfrom=hanif.alkat...@sgs.com; dkim=pass (good signature) header.d=sgs.com header.b=jyHd3KHZ0P; dmarc=pass header.from=sgs.com (p=reject sampling=97 pct=100); iprev=pass policy.iprev=40.107.21.117 (PTR mail-vi1eur05on2117.outbound.protection.outlook.com); iprev=fail policy.iprev=40.107.21.117 reason="does not match" (HELO EUR05-VI1-obe.outbound.protection.outlook.com); iprev=fail policy.iprev=40.107.21.117 reason="does not match" (MAIL hanif.alkat...@sgs.com) Received-SPF: pass (mail.richtex.co.id: domain sgs.com designates 40.107.21.117 as permitted sender) receiver=mail.richtex.co.id; client-ip=40.107.21.117; mechanism=ip4:40.107.0.0/16; envelope-from="hanif.alkat...@sgs.com"; helo=EUR05-VI1-obe.outbound.protection.outlook.com; Received: by mail.richtex.co.id with ESMTPS id 60-md5006101.msg; Wed, 22 Jan 2020 10:32:30 +0700 X-Spam-Processed: mail.richtex.co.id, Wed, 22 Jan 2020 10:32:30 +0700 (not processed: message size (2342367) exceeds spam filter max message size of (2097152)) X-MDDKIM-Result: unapproved (mail.richtex.co.id) X-MDSPF-Result: unapproved (mail.richtex.co.id) X-MDRemoteIP: 40.107.21.117 X-MDHelo: EUR05-VI1-obe.outbound.protection.outlook.com X-MDArrival-Date: Wed, 22 Jan 2020 10:32:30 +0700 X-Rcpt-To: rich...@richtex.co.id X-MDRcpt-To: rich...@richtex.co.id X-Return-Path: hanif.alkat...@sgs.com X-Envelope-From: hanif.alkat...@sgs.com X-MDaemon-Deliver-To: rich...@richtex.co.id X-CAV-Result: clean ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=k22X8jAOZ5x/l0cqlPNegNghpEiTGj9vXysLt0SRxzfpFgqBKfeFOTkvawbJnCT8eMDQpD5o+a O9TCQub5FbkP+hTtQ9eaoCVSM6DGwTdVBG38yNix7hH1Gha25itGPIB5HYd8BgnApH5ltiTiRMnp r9SiqklKUXkrlyw6rFWxvF4UxH3leCI2jnxjRcSWpMhIX2eMGHFPQmnhVKHi8nJ7ww/19TB6Z07I tbmG4/pyyzf79B1hAm+sLFpKGoLd322yZWVVvRTZVKico9WI6nhuQ/IvBPJb5DKev/kVWmjd/0+Q eu70nuN+5Sr+INY3e4Om6rM8M16gOLj7osMMrnlA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-Sende rADCheck; bh=KIlC4Yc4V6tZ18AFrt9VDZqiouQ2c75k2k7zeyJCf3Q=; b=P+hguKEj8wYgeSoxWB5aGZVslrIWcXf50tBBipfQQfZvUfqcE1a3Cm81aixg6iMjxCWCBVJ7k1 MPf+xzKGp4TpcG7doDYbcs5Udud3nPc5VJ0qKXQYPeY7LL7/7axdLJRxF7rZrG+9a25xvGNxXbHw xbs4s7rMre8arj6MAs/egEqJJbKOUYdMTW1AHGZCMZv8wBmbJKc7AdbmkRtq5U00LavuNiQ2Ivc5 ao55qwkbDWhSOXWzJGmrm8u148FsPiQcs73pgJdTgdmzvxqZ9LnzpvPwlHynicVLD7TiExvuWmrP xCFeqeo/smdUODOLZJ1/k1lKk+23hhztbN0v+5qw== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=sgs.com; dmarc=pass action=none header.from=sgs.com; dkim=pass header.d=sgs.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sgs.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-Sende rADCheck; bh=KIlC4Yc4V6tZ18AFrt9VDZqiouQ2c75k2k7zeyJCf3Q=; b=jyHd3KHZ0PE0Nd9EtpzyWoAJDShA1PU+itI7ey4K2d7Zs5ZwmNTW9ASiZqgOxT8Qs8Xvb0qdkQ ZFsaO73vyKjS6rPS/NuyNbMaa1jFC/HMCG50stRbgNGXTicJXCfdcjiv0pIW6AW0i90V3vNXTXuL o56leV94/tHhoHT8btNY0= Received: from VI1PR0502MB3085.eurprd05.prod.outlook.com (10.175.20.11) by VI1PR0502MB4078.eurprd05.prod.outlook.com (52.134.13.31) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2644.24; Wed, 22 Jan 2020 03:31:43 + Received: from VI1PR0502MB3085.eurprd05.prod.outlook.com ([fe80::4892:7432:1143:35f6]) by VI1PR0502MB3085.eurprd05.prod.outlook.com ([fe80::4892:7432:1143:35f6%7]) with mapi id 15.20.2644.027; Wed, 22 Jan 2020 03:31:43 + From: "Alkatiri, Hanif (Jakarta) (hanif.alkat...@sgs.com)" To: "rich...@richtex.co.id" , "e...@richtex.co.id" CC: "Putri, Hanum (Jakarta)" Subject: Re :New Export Procedures/ Regulation to Middle East & Africa; PT Richtex MutiaraBusana Thread-Topic: Re :New Export Procedures/ Regulation to Middle East & Africa; PT Richtex MutiaraBusana Thread-Index: AdXQ1EM7izyf62TmQvWJa62Xj4HYJg== Date: Wed, 22 Jan 2020 03:31:43 + Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: yes X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=hanif.alkat...@sgs.com; x-originating-ip: [165.225.112.210] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 82df9aeb-14ee-4d7f-b160-08d79eeb9a0b x-ms-traffictypediagnostic: VI1PR0502MB4078: x-ms-exchange-transport-forked: True x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:5797; x-forefront-prvs: 029097202E x-forefront-antispam-report: SFV:NSPM;SFS:(10019020)(4636009)(346002)(366004)(396003)(3986042)(136003
[mdaemon-l] 421 service not available (connection refused, generic failure)
> Coba perlihatkan transkrip smtp-out log saat kirim mail ke milis ini. Thu 2020-01-16 13:04:10.094: 01: -- Thu 2020-01-16 13:05:50.565: 05: [414671] Session 414671; child 0001 Thu 2020-01-16 13:05:50.565: 01: [414671] Parsing message Thu 2020-01-16 13:05:50.566: 01: [414671] * From: s_adi...@richtex.co.id Thu 2020-01-16 13:05:50.566: 01: [414671] * To: mdaemon-l@dutaint.com Thu 2020-01-16 13:05:50.566: 01: [414671] * Subject: [mdaemon-l] 421 service not available (connection refused, generic failure) Thu 2020-01-16 13:05:50.566: 01: [414671] * Size (bytes): 2453 Thu 2020-01-16 13:05:50.566: 01: [414671] * Message-ID: <000901d5cc33$4ca667b0$e5f33710$@richtex.co.id> Thu 2020-01-16 13:05:50.568: 05: [414671] Resolving MX record for dutaint.com (DNS Server: 202.152.5.36)... Thu 2020-01-16 13:05:50.584: 05: [414671] * P=010 S=000 D=dutaint.com TTL=(179) MX=[list.dutaint.com] Thu 2020-01-16 13:05:50.584: 05: [414671] Attempting SMTP connection to list.dutaint.com Thu 2020-01-16 13:05:50.585: 05: [414671] Resolving A record for list.dutaint.com (DNS Server: 202.152.5.36)... Thu 2020-01-16 13:05:50.603: 05: [414671] * D=list.dutaint.com TTL=(4319) A=[113.20.31.187] Thu 2020-01-16 13:05:50.603: 05: [414671] Attempting SMTP connection to 113.20.31.187:25 Thu 2020-01-16 13:05:50.605: 05: [414671] Waiting for socket connection... Thu 2020-01-16 13:05:50.620: 05: [414671] * Connection established 10.0.1.2:50715 --> 113.20.31.187:25 Thu 2020-01-16 13:05:50.620: 05: [414671] Waiting for protocol to start... Thu 2020-01-16 13:05:50.640: 02: [414671] <-- 421 service not available (connection refused, generic failure) Thu 2020-01-16 13:05:50.641: 03: [414671] --> QUIT Thu 2020-01-16 13:05:50.643: 05: [414671] Attempting to send message to smart host Thu 2020-01-16 13:05:50.643: 05: [414671] Attempting SMTP connection to smtp2.idola.net.id Thu 2020-01-16 13:05:50.644: 05: [414671] Resolving A record for smtp2.idola.net.id (DNS Server: 202.152.5.36)... Thu 2020-01-16 13:05:50.660: 05: [414671] * D=smtp2.idola.net.id TTL=(22) A=[202.152.0.51] Thu 2020-01-16 13:05:50.660: 05: [414671] * D=smtp2.idola.net.id TTL=(22) A=[202.152.0.53] Thu 2020-01-16 13:05:50.660: 05: [414671] Randomly picked 202.152.0.53 from list of possible hosts Thu 2020-01-16 13:05:50.660: 05: [414671] Attempting SMTP connection to 202.152.0.53:25 Thu 2020-01-16 13:05:50.661: 05: [414671] Waiting for socket connection... Thu 2020-01-16 13:05:50.676: 05: [414671] * Connection established 10.0.1.2:50716 --> 202.152.0.53:25 Thu 2020-01-16 13:05:50.676: 05: [414671] Waiting for protocol to start... Thu 2020-01-16 13:05:50.700: 02: [414671] <-- 220 smtp-2.idola.net.id ESMTP Smtpd; Thu, 16 Jan 2020 13:05:50 +0700 Thu 2020-01-16 13:05:50.702: 03: [414671] --> EHLO mail.richtex.co.id Thu 2020-01-16 13:05:50.717: 02: [414671] <-- 250-smtp-2.idola.net.id Hello mail.richtex.co.id [182.23.69.132], pleased to meet you Thu 2020-01-16 13:05:50.717: 02: [414671] <-- 250-ENHANCEDSTATUSCODES Thu 2020-01-16 13:05:50.717: 02: [414671] <-- 250-PIPELINING Thu 2020-01-16 13:05:50.717: 02: [414671] <-- 250-8BITMIME Thu 2020-01-16 13:05:50.717: 02: [414671] <-- 250-SIZE 5120 Thu 2020-01-16 13:05:50.717: 02: [414671] <-- 250-DSN Thu 2020-01-16 13:05:50.717: 02: [414671] <-- 250-STARTTLS Thu 2020-01-16 13:05:50.717: 02: [414671] <-- 250-DELIVERBY Thu 2020-01-16 13:05:50.717: 02: [414671] <-- 250 HELP Thu 2020-01-16 13:05:50.718: 03: [414671] --> MAIL From: SIZE=2453 Thu 2020-01-16 13:05:50.734: 02: [414671] <-- 250 2.1.0 ... Sender ok Thu 2020-01-16 13:05:50.734: 03: [414671] --> RCPT To: Thu 2020-01-16 13:05:50.752: 02: [414671] <-- 250 2.1.5 ... Recipient ok Thu 2020-01-16 13:05:50.752: 03: [414671] --> DATA Thu 2020-01-16 13:05:50.768: 02: [414671] <-- 354 Enter mail, end with "." on a line by itself Thu 2020-01-16 13:05:50.768: 01: [414671] Sending to [202.152.0.53] Thu 2020-01-16 13:05:50.769: 01: [414671] Transfer Complete Thu 2020-01-16 13:05:51.455: 02: [414671] <-- 250 2.0.0 00G65okQ029128-00G65okR029128 Message accepted for delivery Thu 2020-01-16 13:05:51.456: 03: [414671] --> QUIT Thu 2020-01-16 13:05:51.471: 02: [414671] <-- 221 2.0.0 smtp-2.idola.net.id closing connection Thu 2020-01-16 13:05:51.471: 01: [414671] SMTP session successful (Bytes in/out: 631/2596) Thu 2020-01-16 13:05:51.471: 01: -- > c:\telnet mx2.c3int.net 25 421 service not available (connection refused, generic failure) Connection to host lost. > c:\ telnet list.dutaint.com 25 421 service not available (connection refused, generic failure) Connection to host lost. Jadi kesimpulannya ini problem dari ISP ya pak? Karena saya tidak melakukan perubahan config apapun dalam 2 hari ini. -- --[mdaemon-l]-- Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette Arsip: http://mdaemon-l.dutaint.com Dokumentasi
[mdaemon-l] 421 service not available (connection refused, generic failure)
> Server penerima sedang sibuk atau down. Sebagai tambahan, setiap kali email keluar mengalami kondisi sebagai berikut: - 421 service not available (connection refused, generic failure). (sebagian besar) - 451 Please try again later (sesekali setelah transfer complete lalu diambil alih smarthost) - 554 5.7.1 Message refused by Dictionary check,.This email from IP 182.23.69.132 has been rejected. The email message was detected as spam. (delivery oleh smarthost, hanya beberapa domain tertentu) - Hanya sebagian kecil email yang berhasil direct delivery. - Saat ini bisa dikatakan bahwa mail delivery sangat bergantung pada performa smarthost. Dulu pernah terjadi seperti ini, namun saya agak lupa apakah normal dengan sendirinya atau ada hal lain. Restart mdaemon service maupun device hasilnya masih sama. Problem sudah berjalan 2 hari ini. Apakah akar masalahnya dari konfigurasi mdaemon saya atau ada kaitannya dengan performa ISP? Blacklist check mxtoolbox bersih 0, untuk email masuk dan service lain berjalan normal. Mohon pencerahannya pak. Terima kasih. -- --[mdaemon-l]-- Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette Arsip: http://mdaemon-l.dutaint.com Dokumentasi : http://mdaemon.dutaint.co.id Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com Versi terakhir: MDaemon 19.5.3, SecurityGateway 6.5.1
[mdaemon-l] 421 service not available (connection refused, generic failure)
Dear Pak Syafril,
Mohon informasi dan pencerahan dari smtp out log berikut:
Thu 2020-01-16 07:54:37.787: 01: --
Thu 2020-01-16 07:54:34.089: 05: [399776] Session 399776; child 0001
Thu 2020-01-16 07:54:34.089: 01: [399776] Parsing message
Thu 2020-01-16 07:54:34.091: 01: [399776] * From: v...@richtex.co.id
Thu 2020-01-16 07:54:34.091: 01: [399776] * To: ve...@arotamashk.com.hk
Thu 2020-01-16 07:54:34.091: 01: [399776] * Subject: RE: FELT FABRIC
APPLIQUE IN IVORY COL FOR AW JL20
Thu 2020-01-16 07:54:34.091: 01: [399776] * Size (bytes): 391968
Thu 2020-01-16 07:54:34.091: 01: [399776] * Message-ID:
<003201d5cc07$8184a950$848dfbf0$@richtex.co.id>
Thu 2020-01-16 07:54:34.095: 05: [399776] Resolving MX record for
arotamashk.com.hk (DNS Server: 202.152.5.36)...
Thu 2020-01-16 07:54:34.095: 05: [399776] Match to MXCACHE.DAT file:
Thu 2020-01-16 07:54:34.095: 05: [399776] * P=010 D=arotamashk.com.hk
TTL=(0) MX=[mail.arotamashk.com.hk] {202.181.178.189}
Thu 2020-01-16 07:54:34.095: 05: [399776] * P=030 D=arotamashk.com.hk
TTL=(0) MX=[mx2.c3int.net] {220.241.233.102}
Thu 2020-01-16 07:54:34.095: 05: [399776] Attempting SMTP connection to
202.181.178.189:25
Thu 2020-01-16 07:54:34.104: 05: [399776] Waiting for socket connection...
Thu 2020-01-16 07:54:34.118: 05: [399776] * Connection established
10.0.1.2:50044 --> 202.181.178.189:25
Thu 2020-01-16 07:54:34.118: 05: [399776] Waiting for protocol to start...
Thu 2020-01-16 07:54:34.135: 02: [399776] <-- 421 service not available
(connection refused, generic failure)
Thu 2020-01-16 07:54:34.136: 03: [399776] --> QUIT
Thu 2020-01-16 07:54:34.136: 05: [399776] Attempting SMTP connection to
220.241.233.102:25
Thu 2020-01-16 07:54:34.136: 05: [399776] Waiting for socket connection...
Thu 2020-01-16 07:54:34.150: 05: [399776] * Connection established
10.0.1.2:50045 --> 220.241.233.102:25
Thu 2020-01-16 07:54:34.150: 05: [399776] Waiting for protocol to start...
Thu 2020-01-16 07:54:34.169: 02: [399776] <-- 421 service not available
(connection refused, generic failure)
Thu 2020-01-16 07:54:34.169: 03: [399776] --> QUIT
Thu 2020-01-16 07:54:34.171: 05: [399776] Attempting to send message to
smart host
Thu 2020-01-16 07:54:34.171: 05: [399776] Attempting SMTP connection to
smtp2.idola.net.id
Thu 2020-01-16 07:54:34.171: 05: [399776] Resolving A record for
smtp2.idola.net.id (DNS Server: 202.152.5.36)...
Thu 2020-01-16 07:54:34.188: 05: [399776] * D=smtp2.idola.net.id TTL=(46)
A=[202.152.0.51]
Thu 2020-01-16 07:54:34.188: 05: [399776] * D=smtp2.idola.net.id TTL=(46)
A=[202.152.0.53]
Thu 2020-01-16 07:54:34.188: 05: [399776] Randomly picked 202.152.0.53 from
list of possible hosts
Thu 2020-01-16 07:54:34.188: 05: [399776] Attempting SMTP connection to
202.152.0.53:25
Thu 2020-01-16 07:54:34.188: 05: [399776] Waiting for socket connection...
Thu 2020-01-16 07:54:34.204: 05: [399776] * Connection established
10.0.1.2:50047 --> 202.152.0.53:25
Thu 2020-01-16 07:54:34.204: 05: [399776] Waiting for protocol to start...
Thu 2020-01-16 07:54:34.228: 02: [399776] <-- 220 smtp-2.idola.net.id ESMTP
Smtpd; Thu, 16 Jan 2020 07:54:33 +0700
Thu 2020-01-16 07:54:34.229: 03: [399776] --> EHLO mail.richtex.co.id
Thu 2020-01-16 07:54:34.244: 02: [399776] <-- 250-smtp-2.idola.net.id Hello
mail.richtex.co.id [182.23.69.132], pleased to meet you
Thu 2020-01-16 07:54:34.244: 02: [399776] <-- 250-ENHANCEDSTATUSCODES
Thu 2020-01-16 07:54:34.244: 02: [399776] <-- 250-PIPELINING
Thu 2020-01-16 07:54:34.244: 02: [399776] <-- 250-8BITMIME
Thu 2020-01-16 07:54:34.244: 02: [399776] <-- 250-SIZE 5120
Thu 2020-01-16 07:54:34.244: 02: [399776] <-- 250-DSN
Thu 2020-01-16 07:54:34.244: 02: [399776] <-- 250-STARTTLS
Thu 2020-01-16 07:54:34.244: 02: [399776] <-- 250-DELIVERBY
Thu 2020-01-16 07:54:34.244: 02: [399776] <-- 250 HELP
Thu 2020-01-16 07:54:34.244: 03: [399776] --> MAIL
From: SIZE=391968
Thu 2020-01-16 07:54:34.261: 02: [399776] <-- 250 2.1.0
... Sender ok
Thu 2020-01-16 07:54:34.262: 03: [399776] --> RCPT
To:
Thu 2020-01-16 07:54:34.278: 02: [399776] <-- 250 2.1.5
... Recipient ok
Thu 2020-01-16 07:54:34.278: 03: [399776] --> DATA
Thu 2020-01-16 07:54:34.293: 02: [399776] <-- 354 Enter mail, end with "."
on a line by itself
Thu 2020-01-16 07:54:34.294: 01: [399776] Sending
to [202.152.0.53]
Thu 2020-01-16 07:54:34.486: 01: [399776] Transfer Complete
Thu 2020-01-16 07:54:37.772: 02: [399776] <-- 250 2.0.0
00G0sXVQ024838-00G0sXVR024838 Message accepted for delivery
Thu 2020-01-16 07:54:37.773: 03: [399776] --> QUIT
Thu 2020-01-16 07:54:37.788: 02: [399776] <-- 221 2.0.0 smtp-2.idola.net.id
closing connection
Thu 2020-01-16 07:54:37.788: 01: [399776] SMTP session successful (Bytes
in/out: 694/392135)
Thu 2020-01-16 07:54:37.788: 01: --
Terima kasih..
--
--[mdaemon-l]--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia
Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip:
[mdaemon-l] Threading Message ( was Re: Update PTR Record)
Noted pak, Maaf saya baru benar2 paham di penjelasan terakhir. Saya terbalik-balik definisi compose new mail hanya saat menyampaikan masalah baru atau terbatas dalam artian start new thread. Ternyata compose new mail berlaku untuk semuanya baik saat start new thread maupun reply thread berkenaan dengan tambahan header subject Re: di outlook. Mohon maaf jadi banyak keluar topik. Akan saya baca-baca netiket mailing-list dan perbaiki di email selanjutnya. Thank you. Regards, Sony Aditya -- This email has been checked for viruses by Avast antivirus software. https://www.avast.com/antivirus -- --[mdaemon-l]-- Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette Arsip: http://mdaemon-l.dutaint.com Dokumentasi : http://mdaemon.dutaint.co.id Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com Versi terakhir MD 19.5.0, SG 6.1.0
[mdaemon-l] Update PTR Record
> Periksa file \\mdaemon\app\xtra\logfile.txt [Sony Aditya] Log tsb tidak ada masalah pak, maksud saya, sender masih tertolak dengan menimpa ReverseXcpt.dat dan restart Mdaemon. Lalu saya ulang dengan run midnight.bat dan restart Mdaemon, masih sama, hingga saya list di trusted host/ip. Yang saya tahu, harusnya dengan cara menimpa atau run midnight.bat lalu restart bisa resolved seperti biasa. > Apa alamat email sendernya? [Sony Aditya] cathyh...@texwinca.com Thank you. Regards, Sony Aditya -- This email has been checked for viruses by Avast antivirus software. https://www.avast.com/antivirus -- --[mdaemon-l]-- Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette Arsip: http://mdaemon-l.dutaint.com Dokumentasi : http://mdaemon.dutaint.co.id Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com Versi terakhir MD 19.5.0, SG 6.1.0
[mdaemon-l] Update PTR Record
Pak Syafril, mohon masukannya, kedepan untuk email valid namun dengan PTR problem, lebih efisien mana antara saya whitelist atau update ke ReverseXcpt.dat? Atau ada rule/cara yang lebih universal tidak setting 1 by 1 / per case? Saya sering menemui email supplier/buyer yang seperti ini, dan ketika mereka saya confirm untuk repair/ add smtp banner/ A/AAA record/apapun yang problem dari sisi mereka, seringnya tidak direspon dengan alasan "email ke yang lain tidak ada masalah, hanya ke user saya saja yang bermasalah". Saat ini seringnya saya whitelist karena user terganggu dan perlu segera untuk produksi, dan email adalah evidence untuk setiap transaksi. Apabila saya kurangi rule tsb, maka spam/phising mail akan lebih banyak masuk dan user juga lebih terganggu. Saya juga ingin mengubah dns record/dmarc policy namun tidak dapat berbuat banyak karena hosting down dan web sedang di develop. Terima kasih dan mohon maaf sebelumnya. Berikut contoh problem terbaru: Mon 2019-11-04 19:45:54.848: 01: -- Mon 2019-11-04 19:46:15.365: 05: [907021] Session 907021; child 0001 Mon 2019-11-04 19:46:15.365: 05: [907021] Accepting SMTP connection from 101.78.211.90:56327 to 10.0.1.2:25 Mon 2019-11-04 19:46:15.366: 03: [907021] --> 220 mail.richtex.co.id ESMTP Mon, 04 Nov 2019 19:46:15 +0700 Mon 2019-11-04 19:46:15.432: 02: [907021] <-- EHLO ns1.advancloud.com Mon 2019-11-04 19:46:15.436: 03: [907021] --> 250-mail.richtex.co.id Hello ns1.advancloud.com [101.78.211.90], pleased to meet you Mon 2019-11-04 19:46:15.436: 03: [907021] --> 250-ETRN Mon 2019-11-04 19:46:15.436: 03: [907021] --> 250-AUTH LOGIN PLAIN Mon 2019-11-04 19:46:15.436: 03: [907021] --> 250-8BITMIME Mon 2019-11-04 19:46:15.436: 03: [907021] --> 250-ENHANCEDSTATUSCODES Mon 2019-11-04 19:46:15.436: 03: [907021] --> 250-STARTTLS Mon 2019-11-04 19:46:15.436: 03: [907021] --> 250 SIZE Mon 2019-11-04 19:46:15.503: 02: [907021] <-- STARTTLS Mon 2019-11-04 19:46:15.503: 03: [907021] --> 220 2.7.0 Ready to start TLS Mon 2019-11-04 19:46:15.692: 01: [907021] SSL negotiation successful (TLS 1.2, 384 bit key exchange, 256 bit AES encryption) Mon 2019-11-04 19:46:15.758: 02: [907021] <-- EHLO ns1.advancloud.com Mon 2019-11-04 19:46:15.761: 03: [907021] --> 250-mail.richtex.co.id Hello ns1.advancloud.com [101.78.211.90], pleased to meet you Mon 2019-11-04 19:46:15.761: 03: [907021] --> 250-ETRN Mon 2019-11-04 19:46:15.761: 03: [907021] --> 250-AUTH LOGIN PLAIN Mon 2019-11-04 19:46:15.761: 03: [907021] --> 250-8BITMIME Mon 2019-11-04 19:46:15.761: 03: [907021] --> 250-ENHANCEDSTATUSCODES Mon 2019-11-04 19:46:15.761: 03: [907021] --> 250 SIZE Mon 2019-11-04 19:46:15.827: 02: [907021] <-- MAIL FROM: SIZE=16262 Mon 2019-11-04 19:46:15.833: 05: [907021] Performing PTR lookup (90.211.78.101.IN-ADDR.ARPA) Mon 2019-11-04 19:46:15.931: 05: [907021] * D=90.211.78.101.in-addr.arpa TTL=(15) PTR=[smtp2.neweva.com] Mon 2019-11-04 19:46:16.367: 05: [907021] * No A/ records found Mon 2019-11-04 19:46:16.368: 05: [907021] * MDaemon configured to drop connection on PTR record mismatch Mon 2019-11-04 19:46:16.368: 05: [907021] End PTR results Mon 2019-11-04 19:46:16.368: 03: [907021] --> 501 5.7.0 Domain must resolve Mon 2019-11-04 19:46:16.368: 04: [907021] SMTP session terminated (Bytes in/out: 574/4168) Mon 2019-11-04 19:46:16.368: 01: -- Thank you. Regards, Sony Aditya -- This email has been checked for viruses by Avast antivirus software. https://www.avast.com/antivirus -- --[mdaemon-l]-- Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette Arsip: http://mdaemon-l.dutaint.com Dokumentasi : http://mdaemon.dutaint.co.id Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com Versi terakhir MD 19.5.0, SG 6.1.0
[mdaemon-l] Update PTR Record
> Kalau menyampaikan masalah baru selalu gunakan compose new mail agar > membuat thread baru. > Bukan dengan mereply mail lama dari milis. > > Hal itu untuk mempermudah pembacaan di recipient yang menggunakan > email client yang mendukung threading mode (discussion mode). [Sony Aditya] Maaf pak Syafril, saya kemarin sudah menggunakan compose new mail, namun kesalahan saya tidak search judul thread/subject. Saya tidak sengaja menggunakan subject yang kebetulan sama persis dengan thread sebelum-sebelumnya sehingga terlihat seperti me-reply thread lama. Mohon dikoreksi bila saya salah dan mohon maaf sebelumnya.. > Sudah diupdate ke > ftp://ftp.dutaint.com/altn-mdaemon/miscl/ReverseXcpt.dat [Sony Aditya] Saya sudah coba menggunakan updated ReverseXcpt.dat namun kemarin tidak berhasil pak, jadi saya list ke trusted host/IP nya untuk sementara. Mungkin ada konfigurasi saya yang salah. Sekarang email dari sender sudah normal. Mungkin nanti akan saya coba lepas dari list trusted host/IP. > Tidak lengkapnya log transkript bisa karena tcp filtering dari > firewall/antivirus, tetapi bisa juga karena lognya ter/di potong. [Sony Aditya] Saya sudah cek dari belasan email yang di re-send dari sender tersebut, log yang tampil seperti itu semua pak. > Jika log terpotong karena sessionnya yang panjang dan server sedang sibuk > akan dapat dibantu dengan mengaktifkan session-id. [Sony Aditya] Baik pak, sudah saya aktifkan Session-Id untuk transkrip log selanjutnya. Thank you. Regards, Sony Aditya -- This email has been checked for viruses by Avast antivirus software. https://www.avast.com/antivirus -- --[mdaemon-l]-- Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette Arsip: http://mdaemon-l.dutaint.com Dokumentasi : http://mdaemon.dutaint.co.id Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com Versi terakhir MD 19.5.0, SG 6.1.0
[mdaemon-l] Update PTR Record
Dear Pak Syafril, Tambahan update log berikut: Fri 2019-11-01 12:57:28.075: 01: -- Fri 2019-11-01 12:57:27.625: 05: Session 863055; child 0003 Fri 2019-11-01 12:57:27.625: 05: Accepting SMTP connection from 61.160.45.108:65449 to 10.0.1.2:25 Fri 2019-11-01 12:57:27.626: 03: --> 220 mail.richtex.co.id ESMTP Fri, 01 Nov 2019 12:57:27 +0700 Fri 2019-11-01 12:57:27.838: 02: <-- EHLO pop.zioyou.cn Fri 2019-11-01 12:57:27.841: 03: --> 250-mail.richtex.co.id Hello pop.zioyou.cn [61.160.45.108], pleased to meet you Fri 2019-11-01 12:57:27.841: 03: --> 250-ETRN Fri 2019-11-01 12:57:27.841: 03: --> 250-AUTH LOGIN PLAIN Fri 2019-11-01 12:57:27.841: 03: --> 250-8BITMIME Fri 2019-11-01 12:57:27.841: 03: --> 250-ENHANCEDSTATUSCODES Fri 2019-11-01 12:57:27.841: 03: --> 250-STARTTLS Fri 2019-11-01 12:57:27.841: 03: --> 250 SIZE Fri 2019-11-01 12:57:28.056: 02: <-- MAIL From: SIZE=1704512 Fri 2019-11-01 12:57:28.061: 05: Performing PTR lookup (108.45.160.61.IN-ADDR.ARPA) Fri 2019-11-01 12:57:28.064: 05: * D=108.45.160.61.in-addr.arpa TTL=(1177) PTR=[mail.zioyou.cn] Fri 2019-11-01 12:57:28.468: 05: * D=mail.zioyou.cn TTL=(10) A=[58.241.12.11] Fri 2019-11-01 12:57:28.469: 05: * MDaemon configured to drop connection on PTR record mismatch Fri 2019-11-01 12:57:28.469: 05: End PTR results Fri 2019-11-01 12:57:28.469: 03: --> 501 5.7.0 Domain must resolve Fri 2019-11-01 12:57:28.469: 04: SMTP session terminated (Bytes in/out: 61/269) Fri 2019-11-01 12:57:28.469: 01: -- Thank you. Regards, Sony Aditya -- This email has been checked for viruses by Avast antivirus software. https://www.avast.com/antivirus -- --[mdaemon-l]-- Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette Arsip: http://mdaemon-l.dutaint.com Dokumentasi : http://mdaemon.dutaint.co.id Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com Versi terakhir MD 19.5.0, SG 6.1.0 Fri 2019-11-01 12:57:28.075: 01: -- Fri 2019-11-01 12:57:27.625: 05: Session 863055; child 0003 Fri 2019-11-01 12:57:27.625: 05: Accepting SMTP connection from 61.160.45.108:65449 to 10.0.1.2:25 Fri 2019-11-01 12:57:27.626: 03: --> 220 mail.richtex.co.id ESMTP Fri, 01 Nov 2019 12:57:27 +0700 Fri 2019-11-01 12:57:27.838: 02: <-- EHLO pop.zioyou.cn Fri 2019-11-01 12:57:27.841: 03: --> 250-mail.richtex.co.id Hello pop.zioyou.cn [61.160.45.108], pleased to meet you Fri 2019-11-01 12:57:27.841: 03: --> 250-ETRN Fri 2019-11-01 12:57:27.841: 03: --> 250-AUTH LOGIN PLAIN Fri 2019-11-01 12:57:27.841: 03: --> 250-8BITMIME Fri 2019-11-01 12:57:27.841: 03: --> 250-ENHANCEDSTATUSCODES Fri 2019-11-01 12:57:27.841: 03: --> 250-STARTTLS Fri 2019-11-01 12:57:27.841: 03: --> 250 SIZE Fri 2019-11-01 12:57:28.056: 02: <-- MAIL From: SIZE=1704512 Fri 2019-11-01 12:57:28.061: 05: Performing PTR lookup (108.45.160.61.IN-ADDR.ARPA) Fri 2019-11-01 12:57:28.064: 05: * D=108.45.160.61.in-addr.arpa TTL=(1177) PTR=[mail.zioyou.cn] Fri 2019-11-01 12:57:28.468: 05: * D=mail.zioyou.cn TTL=(10) A=[58.241.12.11] Fri 2019-11-01 12:57:28.469: 05: * MDaemon configured to drop connection on PTR record mismatch Fri 2019-11-01 12:57:28.469: 05: End PTR results Fri 2019-11-01 12:57:28.469: 03: --> 501 5.7.0 Domain must resolve Fri 2019-11-01 12:57:28.469: 04: SMTP session terminated (Bytes in/out: 61/269) Fri 2019-11-01 12:57:28.469: 01: --
[mdaemon-l] Backscatter From <>
Dear Pak Syafril, Saya tidak dapat menerima email dari milis dan mendapatkan log sebagai berikut: Fri 2019-11-01 00:43:07.351: 05: Session 847964; child 0001 Fri 2019-11-01 00:43:07.351: 05: Accepting SMTP connection from 113.20.31.187:17125 to 10.0.1.2:25 Fri 2019-11-01 00:43:07.355: 05: Performing PTR lookup (187.31.20.113.IN-ADDR.ARPA) Fri 2019-11-01 00:43:07.368: 05: * D=187.31.20.113.in-addr.arpa TTL=(239) PTR=[dip31.dutaint.com] Fri 2019-11-01 00:43:07.369: 05: * D=dip31.dutaint.com TTL=(742) A=[113.20.31.187] Fri 2019-11-01 00:43:07.369: 05: End PTR results Fri 2019-11-01 00:43:07.370: 03: --> 220 mail.richtex.co.id ESMTP Fri, 01 Nov 2019 00:43:07 +0700 Fri 2019-11-01 00:43:07.398: 02: <-- EHLO dip31.dutaint.com Fri 2019-11-01 00:43:07.401: 03: --> 250-mail.richtex.co.id Hello dip31.dutaint.com [113.20.31.187], pleased to meet you Fri 2019-11-01 00:43:07.401: 03: --> 250-ETRN Fri 2019-11-01 00:43:07.401: 03: --> 250-AUTH LOGIN PLAIN Fri 2019-11-01 00:43:07.401: 03: --> 250-8BITMIME Fri 2019-11-01 00:43:07.401: 03: --> 250-ENHANCEDSTATUSCODES Fri 2019-11-01 00:43:07.401: 03: --> 250-STARTTLS Fri 2019-11-01 00:43:07.401: 03: --> 250 SIZE Fri 2019-11-01 00:43:07.429: 02: <-- STARTTLS Fri 2019-11-01 00:43:07.429: 03: --> 220 2.7.0 Ready to start TLS Fri 2019-11-01 00:43:07.526: 01: SSL negotiation successful (TLS 1.2, 384 bit key exchange, 256 bit AES encryption) Fri 2019-11-01 00:43:07.582: 02: <-- EHLO dip31.dutaint.com Fri 2019-11-01 00:43:07.585: 03: --> 250-mail.richtex.co.id Hello dip31.dutaint.com [113.20.31.187], pleased to meet you Fri 2019-11-01 00:43:07.585: 03: --> 250-ETRN Fri 2019-11-01 00:43:07.585: 03: --> 250-AUTH LOGIN PLAIN Fri 2019-11-01 00:43:07.585: 03: --> 250-8BITMIME Fri 2019-11-01 00:43:07.585: 03: --> 250-ENHANCEDSTATUSCODES Fri 2019-11-01 00:43:07.585: 03: --> 250 SIZE Fri 2019-11-01 00:43:07.611: 02: <-- MAIL From:<> SIZE=785 Fri 2019-11-01 00:43:07.617: 05: Performing IP lookup (dip31.dutaint.com) Fri 2019-11-01 00:43:07.619: 05: * D=dip31.dutaint.com TTL=(742) A=[113.20.31.187] Fri 2019-11-01 00:43:07.619: 05: End IP lookup results Fri 2019-11-01 00:43:07.622: 09: Performing SPF lookup (dip31.dutaint.com / 113.20.31.187) Fri 2019-11-01 00:43:07.622: 09: * Policy (cache): v=spf1 redirect=_spf.dutaint.com Fri 2019-11-01 00:43:07.622: 09: * Evaluating redirect=_spf.dutaint.com: Fri 2019-11-01 00:43:07.622: 09: * Evaluating redirect=_spf.dutaint.com: performing lookup Fri 2019-11-01 00:43:07.636: 09: *Policy: v=spf1 ip4:139.255.33.176/28 ip4:113.20.31.193/29 ip4:113.20.30.168/29 ip4:113.20.31.128/29 ip4:113.20.31.184/29 -all Fri 2019-11-01 00:43:07.636: 09: *Evaluating ip4:139.255.33.176/28: no match Fri 2019-11-01 00:43:07.636: 09: *Evaluating ip4:113.20.31.193/29: no match Fri 2019-11-01 00:43:07.636: 09: *Evaluating ip4:113.20.30.168/29: no match Fri 2019-11-01 00:43:07.636: 09: *Evaluating ip4:113.20.31.128/29: no match Fri 2019-11-01 00:43:07.636: 09: *Evaluating ip4:113.20.31.184/29: match Fri 2019-11-01 00:43:07.636: 09: * Result: pass Fri 2019-11-01 00:43:07.636: 09: End SPF results Fri 2019-11-01 00:43:07.636: 03: --> 250 2.1.0 Sender OK Fri 2019-11-01 00:43:07.660: 02: <-- RCPT To: Fri 2019-11-01 00:43:07.660: 01: Performing Backscatter Protection... Fri 2019-11-01 00:43:07.660: 01: * Address: s_adi...@richtex.co.id Fri 2019-11-01 00:43:07.660: 01: * Verifier: Fri 2019-11-01 00:43:07.660: 01: * Result: fail Fri 2019-11-01 00:43:07.661: 01: * Reject: Yes Fri 2019-11-01 00:43:07.661: 01: --- End Backscatter Protection Fri 2019-11-01 00:43:07.661: 03: --> 550 5.1.1 Backscatter Protection detected an invalid or expired email address Fri 2019-11-01 00:43:07.694: 02: <-- QUIT Fri 2019-11-01 00:43:07.694: 03: --> 221 2.0.0 See ya in cyberspace Fri 2019-11-01 00:43:07.695: 04: SMTP session terminated (Bytes in/out: 569/3790) Apakah ada kesalahan di konfigurasi saya? Saat ini domain milis saya whitelist. Thank you. Regards, Sony Aditya -- This email has been checked for viruses by Avast antivirus software. https://www.avast.com/antivirus -- --[mdaemon-l]-- Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette Arsip: http://mdaemon-l.dutaint.com Dokumentasi : http://mdaemon.dutaint.co.id Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com Versi terakhir MD 19.5.0, SG 6.1.0
[mdaemon-l] Update PTR Record
Dear Pak Syafril, Mohon di update PTR Record berikut: Fri 2019-11-01 01:52:24.909: 05: Session 848002; child 0001 Fri 2019-11-01 01:52:24.909: 05: Accepting SMTP connection from 113.28.41.188:56219 to 10.0.1.2:25 Fri 2019-11-01 01:52:24.913: 05: Performing PTR lookup (188.41.28.113.IN-ADDR.ARPA) Fri 2019-11-01 01:52:24.915: 05: * D=188.41.28.113.in-addr.arpa TTL=(826) PTR=[nicedyeing.com.mo] Fri 2019-11-01 01:52:24.915: 05: * D=188.41.28.113.in-addr.arpa TTL=(826) PTR=[texwinca.com] Fri 2019-11-01 01:52:24.915: 05: * D=188.41.28.113.in-addr.arpa TTL=(826) PTR=[nicedyeing.com] Fri 2019-11-01 01:52:24.916: 05: * D=nicedyeing.com.mo TTL=(827) A=[58.177.206.20] Fri 2019-11-01 01:52:25.164: 05: * D=texwinca.com TTL=(120) A=[113.28.41.187] Fri 2019-11-01 01:52:25.604: 05: * D=nicedyeing.com TTL=(120) A=[113.28.41.187] Fri 2019-11-01 01:52:25.604: 05: * MDaemon configured to drop connection on PTR record mismatch Fri 2019-11-01 01:52:25.604: 05: End PTR results Fri 2019-11-01 01:52:25.604: 03: --> 501 5.7.0 Domain must resolve Fri 2019-11-01 01:52:25.605: 04: SMTP session terminated (Bytes in/out: 0/31) Thank you. Regards, Sony Aditya -- This email has been checked for viruses by Avast antivirus software. https://www.avast.com/antivirus -- --[mdaemon-l]-- Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette Arsip: http://mdaemon-l.dutaint.com Dokumentasi : http://mdaemon.dutaint.co.id Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com Versi terakhir MD 19.5.0, SG 6.1.0
[mdaemon-l] Mail Spoofing
> Cara lain, aktifkan Content Filter Rule "External Message warning" > > http://mdaemon.dutaint.co.id/mdaemon/19.5/index.html?cf_content_filter_ > editor.htm > > sehingga mail dari non-local domain akan ada tambahan text di upper body > dalam format HTML. > > - > CAUTION: This email originated from outside of the organization. Do not click > links or open attachments unless you recognize the sender and know the > content is safe. > - > Kalau untuk mencegah spam mail macam itu masuk (lagi), maka masukkan > sender address (nguyen@tamsonfashion.com) kedalam Sender Blacklist > dan atau masukkan sender host (mail.hanoia.com) kedalam host screening. > > http://mdaemon.dutaint.co.id/mdaemon/19.5/index.html?security--sender- > blacklist.htm > > > http://mdaemon.dutaint.co.id/mdaemon/19.5/index.html?security-- > host_screening.htm [Sony Aditya] Apakah ada cara yang efisien agar setiap email dengan fake mail address semacam itu direject langsung pak? Atau contoh parameter content filter yang efisien dan minim false positif? Thank you. Regards, Sony Aditya -- This email has been checked for viruses by Avast antivirus software. https://www.avast.com/antivirus -- --[mdaemon-l]-- Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette Arsip: http://mdaemon-l.dutaint.com Dokumentasi : http://mdaemon.dutaint.co.id Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com Versi terakhir MD 19.5.0, SG 6.1.0
[mdaemon-l] Mail Spoofing
> Kalau dari log semua itu spam mail biasa saja. > Coba perlihatkan message header dari spam mail yang dianggap phising > mail tersebut kesini. > > Cara melihat message header dari webmail MDaemon > > - pilih messagenya. > - dari Right Mouse Click menu pilih "view source". [Sony Aditya] Terlampir header dari ketiga email tersebut. Thank you. Regards, Sony Aditya -- This email has been checked for viruses by Avast antivirus software. https://www.avast.com/antivirus -- --[mdaemon-l]-- Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette Arsip: http://mdaemon-l.dutaint.com Dokumentasi : http://mdaemon.dutaint.co.id Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com Versi terakhir MD 19.5.0, SG 6.1.0 X-MDAV-Result: clean X-MDAV-Processed: mail.richtex.co.id, Wed, 23 Oct 2019 21:56:20 +0700 Return-path: Authentication-Results: mail.richtex.co.id; spf=none smtp.mailfrom=nguyen@tamsonfashion.com; dkim=pass (good signature) header.d=tamsonfashion.com header.b=jgNFl3S9UR; iprev=pass policy.iprev=210.245.26.76 (PTR mail.hanoia.com); iprev=pass policy.iprev=210.245.26.76 (HELO mail.openasiagroup.com); iprev=pass policy.iprev=210.245.26.76 (MAIL nguyen@tamsonfashion.com) Received-SPF: none (mail.richtex.co.id: tamsonfashion.com does not designate permitted sender hosts) receiver=mail.richtex.co.id; client-ip=210.245.26.76; mechanism=default; envelope-from="nguyen@tamsonfashion.com"; helo=mail.openasiagroup.com; Received: by mail.richtex.co.id with ESMTPS id 23-md5005495.msg; Wed, 23 Oct 2019 21:56:19 +0700 X-Spam-Level: X-Spam-Status: No, score=0.40 required=5.0 X-Spam-Report: * 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. * See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block * for more information. * [URIs: carters.com] * 0.4 KHOP_HELO_FCRDNS Relay HELO differs from its IP's reverse DNS X-Spam-Processed: mail.richtex.co.id, Wed, 23 Oct 2019 21:56:19 +0700 (processed during SMTP session) X-MDDKIM-Result: unapproved (mail.richtex.co.id) X-MDSPF-Result: none (mail.richtex.co.id) X-MDRemoteIP: 210.245.26.76 X-MDHelo: mail.openasiagroup.com X-MDArrival-Date: Wed, 23 Oct 2019 21:56:19 +0700 X-Rcpt-To: he...@richtex.co.id X-MDRcpt-To: he...@richtex.co.id X-Return-Path: nguyen@tamsonfashion.com X-Envelope-From: nguyen@tamsonfashion.com X-MDaemon-Deliver-To: he...@richtex.co.id X-CAV-Result: clean Received: from localhost (localhost [127.0.0.1]) by mail.openasiagroup.com (Postfix) with ESMTP id ED300182112EBE for ; Wed, 23 Oct 2019 21:56:34 +0700 (+07) Received: from mail.openasiagroup.com ([127.0.0.1]) by localhost (mail.openasiagroup.com [127.0.0.1]) (amavisd-new, port 10032) with ESMTP id bnqI872DqY13 for ; Wed, 23 Oct 2019 21:56:34 +0700 (+07) Received: from localhost (localhost [127.0.0.1]) by mail.openasiagroup.com (Postfix) with ESMTP id 94C21182112EB3 for ; Wed, 23 Oct 2019 21:56:34 +0700 (+07) DKIM-Filter: OpenDKIM Filter v2.9.2 mail.openasiagroup.com 94C21182112EB3 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=tamsonfashion.com; s=21667010-5AB0-11E6-8762-9982288776CE; t=1571842594; bh=QBOqiS9OCLpEkBp6KVMs9qZJK1tSY5S7XheSQD+zkdA=; h=Date:From:To:Subject:MIME-Version:Content-Type:Message-Id; b=jgNFl3S9URacFHN+fi2H8fVerPUohNw8ubO+Bh9bM1HrAlfKlRSTJQR26g7NHGtYX 7N2SF7uoW4GuhsbJK+H2P7jsTB1hQMNcCyWqAfHkVyl3q+bzbDbgmc8ZpPI3b7ytuB EN2ZlL80UAdjY7ITh8UHGUwjiO7dfE9PlJ2g2/uI= X-Virus-Scanned: amavisd-new at openasiagroup.com Received: from mail.openasiagroup.com ([127.0.0.1]) by localhost (mail.openasiagroup.com [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id YMf8f2VZx6qP for ; Wed, 23 Oct 2019 21:56:34 +0700 (+07) Received: from [63.143.96.146] (unknown [63.143.96.146]) by mail.openasiagroup.com (Postfix) with SMTP id 17250182112EBD for ; Wed, 23 Oct 2019 21:56:31 +0700 (+07) Date: Wed, 23 Oct 2019 09:56:08 -0500 From: "Hung, Catherine (nguyen@tamsonfashion.com)" To: Subject: MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="=_Part_14372_2088912106.4114768257830844090" Message-Id: <20191023145633.17250182112...@mail.openasiagroup.com> --=_Part_14372_2088912106.4114768257830844090 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Hi, =0DAttached is your Service report. Please print and file this report in yo= ur folder, ensuring you review each report and take any corrective =0Dactio= ns recommended. =0D Ki
[mdaemon-l] Mail Spoofing
03: --> 354 Enter mail, end with . Wed 2019-10-23 21:56:16.381: 01: Message size: 259250 bytes Wed 2019-10-23 21:56:16.383: 10: Performing DKIM lookup Wed 2019-10-23 21:56:16.383: 10: * File: d:\mdaemon\queues\temp\36\md521.tmp Wed 2019-10-23 21:56:16.383: 10: * Message-ID: <20191023145633.17250182112...@mail.openasiagroup.com> Wed 2019-10-23 21:56:16.390: 10: * DKIM-Signature 1: v=1; a=rsa-sha256; c=relaxed/relaxed; d=tamsonfashion.com; s=21667010-5AB0-11E6-8762-9982288776CE; t=1571842594; b h=Date:From:To:Subject:MIME-Version:Content-Type:Message-Id; Wed 2019-10-23 21:56:16.390: 10: *Verification result: good signature Wed 2019-10-23 21:56:16.391: 10: * Result: pass Wed 2019-10-23 21:56:16.391: 10: End DKIM results Wed 2019-10-23 21:56:16.396: 11: Passing message through ClamAV Plugin (d:\mdaemon\queues\temp\36\md521.tmp)... Wed 2019-10-23 21:56:16.396: 11: * Message-ID: <20191023145633.17250182112...@mail.openasiagroup.com> Wed 2019-10-23 21:56:16.427: 11: * Virus result: 0 - clean Wed 2019-10-23 21:56:16.429: 07: Passing message through Spam Filter (Size: 259271)... Wed 2019-10-23 21:56:16.656: 07: * 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. Wed 2019-10-23 21:56:16.656: 07: * See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block Wed 2019-10-23 21:56:16.656: 07: * for more information. Wed 2019-10-23 21:56:16.656: 07: * [URIs: carters.com] Wed 2019-10-23 21:56:16.656: 07: * 0.4 KHOP_HELO_FCRDNS Relay HELO differs from its IP's reverse DNS Wed 2019-10-23 21:56:16.656: 07: End SpamAssassin results Wed 2019-10-23 21:56:16.657: 07: Spam Filter score/req: 0.40/12.0 Wed 2019-10-23 21:56:16.660: 01: Message creation successful: d:\mdaemon\queues\inbound\23\md5005495.msg Wed 2019-10-23 21:56:16.660: 03: --> 250 2.6.0 Ok, message saved > Wed 2019-10-23 21:56:16.729: 02: <-- QUIT Wed 2019-10-23 21:56:16.729: 03: --> 221 2.0.0 See ya in cyberspace Wed 2019-10-23 21:56:16.730: 01: SMTP session successful (Bytes in/out: 262104/3895) -- Fyi, kami masih menggunakan Mdaemon v18.5.1, mohon pencerahannya. Thank you. Regards, Sony Aditya -- This email has been checked for viruses by Avast antivirus software. https://www.avast.com/antivirus -- --[mdaemon-l]-- Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette Arsip: http://mdaemon-l.dutaint.com Dokumentasi : http://mdaemon.dutaint.co.id Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com Versi terakhir MD 19.5.0, SG 6.1.0
[mdaemon-l] file midnight.bat hilang dan tidak dapat melakukan remote administration
Dear pak Syafril, 1. Saya baru menyadari bahwa dalam 1 bulan ini mailserver tidak menjalankan sync ReverseXcpt.dat, saya cari file midnight.bat ternyata tidak ada. Kemungkinan terkena false detection dari av, namun saya cari di log maupun di virus chestnya tidak ketemu ditambah saya tidak punya backupnya. apakah saya bisa mendownload/create file midnight.bat tersebut? 2. Saya tidak dapat menjalankan remote administration via web, namun webmail dapat dibuka dengan normal, sudah saya cek port maupun konfigurasinya namun tetap tidak dapat diakses atau tidak menemukan solusinya. Apakah ada dampak file/config file yang hilang seperti poin nomor 1 pak? Mohon pencerahannya pak. Thank you. Regards, Sony Aditya --- This email has been checked for viruses by Avast antivirus software. https://www.avast.com/antivirus -- --[mdaemon-l]-- Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette Arsip: http://mdaemon-l.dutaint.com Dokumentasi : http://mdaemon.dutaint.co.id Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com Versi terakhir MD 19.0.3, SG 6.1.0
[mdaemon-l] Input string was not in a correct format.
> Yang menolak kirim mail data adalah sender server, bukan receiver. > Jadi kalau sender tidak mau atau tidak bisa melakukan perbaikkan di email > clientnya maka perbaikkan harus dilakukan di sender server > (ttsenmta1.ttasia.com [59.188.18.148], di set agar lebih adaptif. Noted pak, akan saya infokan ke sender agar menghubungi ttsenmta1.ttasia.com untuk solusinya. Thank you. Regards, Sony Aditya -- --[mdaemon-l]-- Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette Arsip: http://mdaemon-l.dutaint.com Dokumentasi : http://mdaemon.dutaint.co.id Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com Versi terakhir MD 19.0.3, SG 6.0.3
[mdaemon-l] Input string was not in a correct format.
> Ini problem di sisi sender, formatnya email addressnya tidak standard, > ada huruf/charcter <_ , harusnya pakai character < > untuk Mail From > Maaf pak Syafril, apakah ada cara untuk 'allow' atau 'exception' message dari domain tsb apabila sender masih tetap menggunakan input string yang sama? Resiko apa yang akan saya hadapi apabila meng'allow' hal tsb? Sender kesulitan dalam memecahkan masalahnya, sementara kita butuh komunikasi dari sender. Sedangkan dalam cc mail terdapat kolega kita yang beda domain/country, namun domain lain dapat menerima email dari sender tsb. Thank you. Regards, Sony Aditya -- --[mdaemon-l]-- Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette Arsip: http://mdaemon-l.dutaint.com Dokumentasi : http://mdaemon.dutaint.co.id Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com Versi terakhir MD 19.0.3, SG 6.0.3
[mdaemon-l] Input string was not in a correct format.
> Ini problem di sisi sender, formatnya email addressnya tidak standard, ada > huruf/charcter <_ , harusnya pakai character < > untuk Mail From [Sony Aditya] Benar pak, saya juga kurang teliti saat melihat delivery log dari mereka, malah sibuk melihat dan mengubah konfigurasi dari sisi server berdasar log yang muncul saat mereka mengirim email. > Minta sender crystalw...@ss-intl.com perbaiki setting account profile di > email clientnya atau ganti eamil client yang mengikuti kaidah internet mail. [Sony Aditya] Sudah saya infokan ke sender penyebab masalah dan solusinya sesuai arahan pak Syafril. Terima kasih pak. Thank you. Regards, Sony Aditya -- --[mdaemon-l]-- Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette Arsip: http://mdaemon-l.dutaint.com Dokumentasi : http://mdaemon.dutaint.co.id Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com Versi terakhir MD 19.0.3, SG 6.0.3
[mdaemon-l] Input string was not in a correct format.
Dear pak Syafril, Terlampir log dari server. Server tidak dapat menerima email dari ss-intl.com dan berikut detail log dari mereka. Delivery Log Date Time Command Response Destination IP Address 24/07/2019 09:43:28 Connection 2 RECEIVE:220 mail.richtex.co.id ESMTP Wed, 24 Jul 2019 08:43:28 +0700 182.23.69.132 24/07/2019 09:43:28 Connection 0 SEND:EHLO ttsenmta1.ttasia.com 182.23.69.132 24/07/2019 09:43:28 Connection 2 RECEIVE:250-mail.richtex.co.id Hello ttsenmta1.ttasia.com [59.188.18.148], pleased to meet you 250-ETRN 250-AUTH LOGIN PLAIN 250-8BITMIME 250-ENHANCEDSTATUSCODES 250 182.23.69.132 24/07/2019 09:43:28 mailfrom-Resp 0 SEND:MAIL FROM:=crystalw...@ss-intl.com> 182.23.69.132 24/07/2019 09:43:28 mailfrom-Resp 4 Input string was not in a correct format. 182.23.69.132 24/07/2019 09:48:03 Connection 2 RECEIVE:220 mail.richtex.co.id ESMTP Wed, 24 Jul 2019 08:48:03 +0700 182.23.69.132 24/07/2019 09:48:03 Connection 0 SEND:EHLO ttsenmta1.ttasia.com 182.23.69.132 24/07/2019 09:48:03 Connection 2 RECEIVE:250-mail.richtex.co.id Hello ttamail1.ttasia.com [59.188.18.148], pleased to meet you 250-ETRN 250-AUTH LOGIN PLAIN 250-8BITMIME 250-ENHANCEDSTATUSCODES 250 182.23.69.132 24/07/2019 09:48:03 mailfrom-Resp 0 SEND:MAIL FROM:=crystalw...@ss-intl.com> 182.23.69.132 24/07/2019 09:48:03 mailfrom-Resp 4 Input string was not in a correct format. 182.23.69.132 Tidak ada masalah sebelum hari rabu tanggal 24 Juli 2019. Sudah saya masukan domain ke dalam whitelist, approved list dan bahkan trusted IP namun masih tidak dapat menerima email dari domain mereka. Mohon masukan dan arahannya. Thank you. Regards, Sony Aditya 27 Juli 2019.log Description: Binary data 24 Juli 2019.log Description: Binary data
