On 16/07/21 21.20, Slamet Raharjo via Mdaemon-L wrote:
Saya cek Record DMARC dengan penambahan aspf=s sudah aktif, namun test e-mail
yang menuju domain saya (aio.co.id) masih tembus ya.


Itu karena MDaemon mail.aio.co.id tidak melakukan DMARC Verification.

Kalau DMARC verification aktif maka akan direject kalau DMARC policy=reject atau di quarantine jika policy= quarantine.


Sat 2021-07-17 03:45:34.648: ----------

Sat 2021-07-17 03:45:31.237: [08871075] Session 08871075; child 0001

Sat 2021-07-17 03:45:31.237: [08871075] Accepting SMTP connection from 
185.41.28.109:14264 to 103.141.180.220:25

Sat 2021-07-17 03:45:31.237: [08871075] Location Screen says connection is from 
France, Europe

Sat 2021-07-17 03:45:31.238: [08871075] --> 220 dds30.dutaservisindo.co.id 
ESMTP MDaemon 21.0.2; Sat, 17 Jul 2021 03:45:31 +0700

Sat 2021-07-17 03:45:31.411: [08871075] <-- EHLO bi.d.mailin.fr

Sat 2021-07-17 03:45:32.334: [08871075] <-- MAIL 
FROM:<[email protected]>

Sat 2021-07-17 03:45:33.838: [08871075] --> 250 2.1.0 Sender OK

Sat 2021-07-17 03:45:34.011: [08871075] <-- RCPT TO:<[email protected]>

Sat 2021-07-17 03:45:34.840: [08871075] <-- DATA

Sat 2021-07-17 03:45:34.842: [08871075] --> 354 Enter mail, end with 
<CRLF>.<CRLF>

Sat 2021-07-17 03:45:35.016: [08871075] Message size: 8406 bytes

Sat 2021-07-17 03:45:35.019: [08871075] Performing DKIM verification

Sat 2021-07-17 03:45:35.019: [08871075] * File: 
f:\mdaemon\queues\temp\35\md5001000000545.tmp

Sat 2021-07-17 03:45:35.019: [08871075] * Message-ID: 
<[email protected]>

Sat 2021-07-17 03:45:35.052: [08871075] * DKIM-Signature 1: v=1; a=rsa-sha256; 
c=relaxed/relaxed; d=sendinblue.com; q=dns/txt; s=mail; b 
h=from:subject:date:mime-version:content-type:list-unsubscribe:x-csa-complaints:list-unsubscribe-post;
 <some tags are not logged>

Sat 2021-07-17 03:45:35.052: [08871075] * Verification result: good signature

Sat 2021-07-17 03:45:35.053: [08871075] * Result: pass

Sat 2021-07-17 03:45:35.053: [08871075] ---- End DKIM results

Sat 2021-07-17 03:45:35.060: [08871075] Performing DMARC processing

Sat 2021-07-17 03:45:35.060: [08871075] * File: 
f:\mdaemon\queues\temp\35\md5001000000545.tmp

Sat 2021-07-17 03:45:35.060: [08871075] * Message-ID: 
<[email protected]>

Sat 2021-07-17 03:45:35.060: [08871075] * Author domain: dutaint.co.id

Sat 2021-07-17 03:45:35.060: [08871075] * Organizational domain: dutaint.co.id

Sat 2021-07-17 03:45:35.060: [08871075] * Query domain: _dmarc.dutaint.co.id

Sat 2021-07-17 03:45:35.078: [08871075] * Policy record: v=DMARC1; p=reject; 
aspf=s; sp=none; rua=mailto:[email protected]; 
ruf=mailto:[email protected]; pct=100; fo=1;

Sat 2021-07-17 03:45:35.087: [08871075] * Checking authentication mechanisms 
for DMARC alignment

Sat 2021-07-17 03:45:35.087: [08871075] * SPF: domain "bi.d.mailin.fr" passed 
SPF check; but domain is not DMARC aligned

Sat 2021-07-17 03:45:35.087: [08871075] * DKIM: domain "sendinblue.com" (from 
d= of signature #1) verified; but domain is not DMARC aligned

Sat 2021-07-17 03:45:35.088: [08871075] * Action taken: reject

Sat 2021-07-17 03:45:35.088: [08871075] * Result: fail

Sat 2021-07-17 03:45:35.088: [08871075] ---- End DMARC results

Sat 2021-07-17 03:45:35.088: [08871075] --> 550 5.7.0 Message rejected per 
DMARC policy for dutaint.co.id

Sat 2021-07-17 03:45:35.090: [08871075] SMTP session terminated (Bytes in/out: 
9648/4212)

Sat 2021-07-17 03:45:35.090: ----------


Fri 2021-07-16 15:47:43.458: ----------

Fri 2021-07-16 15:46:13.182: [07527496] Session 07527496; child 0012

Fri 2021-07-16 15:46:13.182: [07527496] Accepting SMTP connection from 
185.41.28.109:16609 to 113.20.31.190:25

Fri 2021-07-16 15:46:13.182: [07527496] Location Screen says connection is from 
France, Europe

Fri 2021-07-16 15:46:13.184: [07527496] --> 220 dip34.dutaint.com ESMTP MDaemon 
21.0.2; Fri, 16 Jul 2021 15:46:13 +0700

Fri 2021-07-16 15:46:13.371: [07527496] <-- EHLO bi.d.mailin.fr

Fri 2021-07-16 15:46:14.289: [07527496] <-- MAIL 
FROM:<[email protected]>

Fri 2021-07-16 15:46:14.699: [07527496] <-- RCPT TO:<[email protected]>

Fri 2021-07-16 15:46:15.223: [07527496] <-- DATA

Fri 2021-07-16 15:46:15.224: [07527496] --> 354 Enter mail, end with 
<CRLF>.<CRLF>

Fri 2021-07-16 15:46:15.404: [07527496] Message size: 8391 bytes

Fri 2021-07-16 15:46:15.408: [07527496] Performing DKIM verification

Fri 2021-07-16 15:46:15.408: [07527496] * File: 
f:\mdaemon\queues\temp\31\md5001000001305.tmp

Fri 2021-07-16 15:46:15.408: [07527496] * Message-ID: 
<[email protected]>

Fri 2021-07-16 15:46:15.457: [07527496] * DKIM-Signature 1: v=1; a=rsa-sha256; 
c=relaxed/relaxed; d=sendinblue.com; q=dns/txt; s=mail; b 
h=from:subject:date:mime-version:content-type:list-unsubscribe:x-csa-complaints:list-unsubscribe-post;
 <some tags are not logged>

Fri 2021-07-16 15:46:15.457: [07527496] * Verification result: good signature

Fri 2021-07-16 15:46:15.458: [07527496] * Result: pass

Fri 2021-07-16 15:46:15.458: [07527496] ---- End DKIM results

Fri 2021-07-16 15:46:15.467: [07527496] Performing DMARC processing

Fri 2021-07-16 15:46:15.467: [07527496] * File: 
f:\mdaemon\queues\temp\31\md5001000001305.tmp

Fri 2021-07-16 15:46:15.467: [07527496] * Message-ID: 
<[email protected]>

Fri 2021-07-16 15:46:15.467: [07527496] * Author domain: dutaint.co.id

Fri 2021-07-16 15:46:15.467: [07527496] * Organizational domain: dutaint.co.id

Fri 2021-07-16 15:46:15.467: [07527496] * Query domain: _dmarc.dutaint.co.id

Fri 2021-07-16 15:46:15.467: [07527496] * Policy record (from cache): v=DMARC1; 
p=quarantine; aspf=s; sp=none; rua=mailto:[email protected]; 
ruf=mailto:[email protected]; pct=100; fo=1;

Fri 2021-07-16 15:46:15.476: [07527496] * Checking authentication mechanisms 
for DMARC alignment

Fri 2021-07-16 15:46:15.476: [07527496] * SPF: domain "bi.d.mailin.fr" passed 
SPF check; but domain is not DMARC aligned

Fri 2021-07-16 15:46:15.476: [07527496] * DKIM: domain "sendinblue.com" (from 
d= of signature #1) verified; but domain is not DMARC aligned

Fri 2021-07-16 15:46:15.476: [07527496] * Action taken: quarantine

Fri 2021-07-16 15:46:15.476: [07527496] * Result: fail

Fri 2021-07-16 15:46:15.476: [07527496] ---- End DMARC results

Fri 2021-07-16 15:46:15.477: [07527496] Passing message through AntiVirus 
(Size: 8391)...

Fri 2021-07-16 15:46:15.667: [07527496] * Message is clean (no viruses found) 
scanned by (Cyren AV)

Fri 2021-07-16 15:46:15.667: [07527496] ---- End AntiVirus results

Fri 2021-07-16 15:46:15.809: [07527496] Passing message through Outbreak 
Protection...

Fri 2021-07-16 15:46:15.809: [07527496] * Message-ID: 
<[email protected]>

Fri 2021-07-16 15:46:15.809: [07527496] * Reference-ID: 
str=0001.0A67341C.60F14766.002E:SCGMA2613609,ss=1,re=-4.000,recu=0.000,reip=0.000,cl=1,cld=1,fgs=0

Fri 2021-07-16 15:46:15.809: [07527496] * Virus result: 0 - Clean

Fri 2021-07-16 15:46:15.809: [07527496] * Spam result: 1 - Clean

Fri 2021-07-16 15:46:15.809: [07527496] * IWF result: 0 - Clean

Fri 2021-07-16 15:46:15.809: [07527496] ---- End Outbreak Protection results

Fri 2021-07-16 15:46:15.809: [07527496] Passing message through Spam Filter 
(Size: 8391)...

Fri 2021-07-16 15:46:16.104: [07527496] * 0.2 HEADER_FROM_DIFFERENT_DOMAINS 
From and EnvelopeFrom 2nd level

Fri 2021-07-16 15:46:16.104: [07527496] * mail domains are different

Fri 2021-07-16 15:46:16.104: [07527496] * 0.0 HTML_MESSAGE BODY: HTML included 
in message

Fri 2021-07-16 15:46:16.104: [07527496] * 0.1 HTTPS_HTTP_MISMATCH BODY: No 
description available.

Fri 2021-07-16 15:46:16.104: [07527496] ---- End SpamAssassin results

Fri 2021-07-16 15:46:16.105: [07527496] Spam Filter score/req: 0.30/12.0

Fri 2021-07-16 15:46:16.327: [07527496] Message creation successful: 
f:\mdaemon\queues\inbound\49\md5001000020010.msg

Fri 2021-07-16 15:46:16.327: [07527496] --> 250 2.6.0 Ok, message saved <Message-ID: 
<[email protected]>>

Fri 2021-07-16 15:47:46.324: [07527496] Connection closed

Fri 2021-07-16 15:47:46.325: [07527496] SMTP session successful (Bytes in/out: 
9564/4137)

Fri 2021-07-16 15:47:47.393: ----------




--
syafril
--------
Syafril Hermansyah

MDaemon-L Moderator, run MDaemon 21.0.2 64bit
Mohon tidak kirim private mail (atau cc:) untuk masalah MDaemon.

Orang menilai org lain berdasarkan apa yg dikatakannya dan apa yg diperbuatnya,
org menilai diri sendiriberdasarkan apa yg dipikirkannya dan apa yg hendak 
dicobanya
        -- Comtesse Diane, 1829-1899



--
--[mdaemon-l]----------------------------------------------------------
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Berlangganan: Kirim mail ke [email protected]
Henti Langgan: Kirim mail ke [email protected]
Versi terakhir: MDaemon 21.0.2, SecurityGateway 8.0.1



Kirim email ke