On 24/04/18 08:14, Syafril Hermansyah ([email protected]) wrote:
> Apa dampaknya jika tidak mengikuti rekomendasi diatas?


Jika tidak mengikuti rekomendasi SSLlabs tadi maka:

1. Transmisi data (transfer rate) pelan/lambat.
2. Sering error saat kirim/terima mail, mail delay.

akan terlihat di smtp-out log error macam ini

Mon 2018-04-23 20:39:00.774: [879998] --> STARTTLS
Mon 2018-04-23 20:39:00.778: [879998] <-- 220 2.7.0 Ready to start TLS
Mon 2018-04-23 20:39:00.782: [879998] Socket connection closed by the
other side (how rude!)

Mon 2018-04-23 21:21:05.460: [880617] <-- 220 2.7.0 Ready to start TLS
Mon 2018-04-23 21:21:05.468: [880617] *  SSL negotiation failed, error
code 0x80090331

Di smtp-in log ada banyak error macam ini

Mon 2018-04-16 13:31:46.009: [637121] --> 220 2.7.0 Ready to start TLS
Mon 2018-04-16 13:32:07.399: [637121] * SSL error 10060 A connection
attempt failed because the connected party did not properly respond
after a period of time, or established connection failed because
connected host has failed to respond.
Mon 2018-04-16 13:32:07.399: [637121] SMTP session terminated (Bytes
in/out: 249/1683)

Googlemail memberikan petunjuk

https://support.google.com/a/answer/2520500?hl=en

(TLS) connection

Transport Layer Security (TLS) is a security protocol that encrypts
email to protect its privacy. TLS is the successor to Secure Sockets
Layer (SSL).

Gmail uses TLS by default, but when a secure connection isn't available
(both sender and recipient need to use TLS to create a secure
connection), Gmail will deliver messages over non-secure connections.

However, you can configure your TLS setting to require a secure
connection for email to (or from) specific domains or email addresses
that you list.

What happens to email to (or from) domains that don't use TLS?

Outgoing mail   Mail won't be delivered and will bounce. You'll get a
non-delivery report (NDR). Only one send attempt is made (no retries).

Incoming mail   Mail is rejected without any notification to you,
although the sender will receive an NDR.

-- 
syafril
-------
Syafril Hermansyah
MDaemon-L Moderators, running MDaemon 18.0-64 bit
Harap tidak cc: atau kirim ke private mail untuk masalah MDaemon.

Education is the kindling of a flame, not the filling of a vessel.
        --- Socrates


-- 
--[mdaemon-l]----------------------------------------------------------
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Berlangganan: Kirim mail ke [email protected]
Henti Langgan: Kirim mail ke [email protected]
Versi terakhir MD 18.0 (all-in-one), SG 5.0.1


Kirim email ke