> Kalau mail dikirim melalui list server (bukan mail server) cari di smtp-in
> log berdasar nama domain (tidak perlu mailbox@).
Pak Syafril,
Ini ternyata emailnya itu di kirim by aplikasi Pak ternyata
Barusan saya tes kirim email ke email lain (bukan mdaemon) itu masuk yang
kebetulan saya email tersebut sya multipop ke email mdaemon bmi saya
Berikut header emailnya
X-MDAV-Processed: bb.ptbmi.com, Wed, 08 Jun 2022 11:51:03 +0700
X-Spam-Processed: bb.ptbmi.com, Wed, 08 Jun 2022 11:51:02 +0700
Return-path:
<bounce-md_30346553.62a02a8e.v1-3098043a193846f8b0aab2f14571f...@mandrillapp.com>
X-Spam-Level: **
X-Spam-Status: No, score=2.4 required=5.0 tests=BAYES_50,
HTML_FONT_LOW_CONTRAST,HTML_MESSAGE,SPF_NEUTRAL,T_SCC_BODY_TEXT_LINE
shortcircuit=no autolearn=disabled version=3.4.4
X-Spam-Report:
* 1.6 BAYES_50 BODY: Bayes spam probability is 40 to 60%
* [score: 0.5000]
* 0.8 SPF_NEUTRAL SPF: sender does not match SPF record (neutral)
* 0.0 HTML_MESSAGE BODY: HTML included in message
* 0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or
* identical to background
* -0.0 T_SCC_BODY_TEXT_LINE No description available.
X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24)
Authentication-Results: bb.ptbmi.com;
spf=neutral
smtp.mailfrom=bounce-md_30346553.62a02a8e.v1-3098043a193846f8b0aab2f14571f...@mandrillapp.com;
dkim=pass (good signature) header.d=onlinemail.tableau.com
header.b=OAK87mxscS header.i=regh...@onlinemail.tableau.com;
dkim=pass (good signature) header.d=mandrillapp.com header.b=YTsw71N5Qm
header.i=@mandrillapp.com;
dmarc=pass header.from=onlinemail.tableau.com (p=reject sampling=20
pct=100);
iprev=pass policy.iprev=202.148.11.22 (PTR mxout6.dwp.net.id);
iprev=pass policy.iprev=202.148.11.22 (HELO mxout6.dwp.net.id);
iprev=fail reason="does not match" policy.iprev=202.148.11.22 (MAIL
bounce-md_30346553.62a02a8e.v1-3098043a193846f8b0aab2f14571f...@mandrillapp.com)
Received-SPF: neutral (bb.ptbmi.com: 202.148.11.22 is neither permitted
nor denied by domain mandrillapp.com)
receiver=bb.ptbmi.com; client-ip=202.148.11.22;
mechanism=default;
envelope-from="bounce-md_30346553.62a02a8e.v1-3098043a193846f8b0aab2f14571f...@mandrillapp.com";
helo=mxout6.dwp.net.id;
Received: from mxout6.dwp.net.id (mxout6.dwp.net.id [202.148.11.22]) by
bb.ptbmi.com (MDaemon PRO v21.5.2)
with ESMTPS id 11-md5001000131956.msg; Wed, 08 Jun 2022 11:51:02 +0700
X-MDOP-RefID:
str=0001.0A673433.62A02AB2.002D,ss=1,re=0.000,recu=0.000,reip=0.000,cl=1,cld=1,fgs=0
(_st=1 _vt=0 _iwf=0)
X-MDDKIM-Result: unapproved (bb.ptbmi.com)
X-MDSPF-Result: neutral (bb.ptbmi.com)
X-MDRemoteIP: 202.148.11.22
X-MDHelo: mxout6.dwp.net.id
X-MDArrival-Date: Wed, 08 Jun 2022 11:51:02 +0700
X-MDOrigin-Country: ID, AS
X-Rcpt-To: edp.r...@ptbmi.com
X-MDRcpt-To: edp.r...@ptbmi.com
X-Return-Path:
bounce-md_30346553.62a02a8e.v1-3098043a193846f8b0aab2f14571f...@mandrillapp.com
X-Envelope-From:
bounce-md_30346553.62a02a8e.v1-3098043a193846f8b0aab2f14571f...@mandrillapp.com
X-MDaemon-Deliver-To: edp.r...@ptbmi.com
Received: from smtp-serv1.dwp.net.id (smtp-serv1.dwp.net.id [202.148.11.241])
by mxout6.dwp.net.id (Postfix) with ESMTP id 12294DC0BF3
for <edp.r...@ptbmi.com>; Wed, 8 Jun 2022 11:50:55 +0700 (WIB)
Received: from localhost (localhost [127.0.0.1])
by smtp-serv1.dwp.net.id (Postfix) with ESMTP id C52597E02D
for <edp.r...@ptbmi.com>; Wed, 8 Jun 2022 11:50:54 +0700 (WIB)
X-Virus-Scanned: Debian amavisd-new at smtp-serv1.dwp.net.id
Received: from smtp-serv1.dwp.net.id ([127.0.0.1])
by localhost (smtp-serv1.dwp.net.id [127.0.0.1]) (amavisd-new, port
10024)
with ESMTP id z0KIuNL-6mGS for <edp.r...@ptbmi.com>;
Wed, 8 Jun 2022 11:50:44 +0700 (WIB)
Received: from cpanel1.dnetsurabaya.id (cpanel1.dnetsurabaya.id
[202.148.11.124])
by smtp-serv1.dwp.net.id (Postfix) with ESMTPS id C0AB280276
for <edp.r...@ptbmi.com>; Wed, 8 Jun 2022 11:50:44 +0700 (WIB)
Received: from mxin2.dwp.net.id ([202.148.11.222]:46274
helo=mxin-serv2.dwp.net.id)
by cpanel1.dnetsurabaya.id with esmtps (TLS1.2) tls
TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.95)
(envelope-from
<bounce-md_30346553.62a02a8e.v1-3098043a193846f8b0aab2f14571f...@mandrillapp.com>)
id 1nyneW-00CpNf-6W
for edp.r...@ptbmi.co.id;
Wed, 08 Jun 2022 11:50:44 +0700
Received: from localhost (unknown [127.0.0.1])
by mxin-serv2.dwp.net.id (Postfix) with ESMTP id 1029313B261
for <edp.r...@ptbmi.co.id>; Wed, 8 Jun 2022 11:50:44 +0700 (WIB)
X-Virus-Scanned: Debian amavisd-new at mxin-serv2.dwp.net.id
Received: from mxin-serv2.dwp.net.id ([127.0.0.1])
by localhost (mxin-serv2.dwp.net.id [127.0.0.1]) (amavisd-new, port
10024)
with ESMTP id XWAfBXul-dWR for <edp.r...@ptbmi.co.id>;
Wed, 8 Jun 2022 11:50:34 +0700 (WIB)
Received-SPF: Pass (mailfrom) identity=mailfrom; client-ip=198.2.136.29;
helo=mail136-29.atl41.mandrillapp.com;
envelope-from=bounce-md_30346553.62a02a8e.v1-3098043a193846f8b0aab2f14571f...@mandrillapp.com;
receiver=edp.r...@ptbmi.co.id
Received: from mail136-29.atl41.mandrillapp.com (unknown [198.2.136.29])
(using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits))
(No client certificate requested)
by mxin-serv2.dwp.net.id (Postfix) with ESMTPS id A971113B0BC
for <edp.r...@ptbmi.co.id>; Wed, 8 Jun 2022 11:50:26 +0700 (WIB)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=onlinemail.tableau.com; s=mandrill; t=1654663823; x=1654966223;
i=regh...@onlinemail.tableau.com;
bh=zN11yYeEbrCMNE1U7MmeseizWR+zIYQQBqShzEj6uTc=;
h=From:Subject:Reply-To:To:Feedback-ID:Message-Id:Date:MIME-Version:
Content-Type:CC:Date:Subject:From;
b=OAK87mxscSW6X0M28MsuxoA7jHrJz9kwxO5O2TAZKfJHAyxtwEYMKX+i/kWMlv3Ni
pVbtc3Zs7P90jnFpcZmeAx/HI8E8edtSaUvTsQMTTDcQ7z5rUDoiyI94+lWx9xSPjI
WhwltmR1wXqMQvlgZmfo0B69sa+kfMC7UuO1NCbs=
Received: from pmta11.mandrill.prod.atl01.rsglab.com (localhost [127.0.0.1])
by mail136-29.atl41.mandrillapp.com (Mailchimp) with ESMTP id
4LHvt74qZxz6CPyBL
for <edp.r...@ptbmi.co.id>; Wed, 8 Jun 2022 04:50:23 +0000 (GMT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mandrillapp.com;
i=@mandrillapp.com; q=dns/txt; s=mandrill; t=1654663822; h=From :
Subject : Reply-To : To : Message-Id : Date : MIME-Version :
Content-Type : From : Subject : Date : X-Mandrill-User :
List-Unsubscribe; bh=zN11yYeEbrCMNE1U7MmeseizWR+zIYQQBqShzEj6uTc=;
b=YTsw71N5Qm2ScAHGAe4jCxaTSQvNbCKX0r8Rbe05Hk7Mrbr5ttb/UkWRwhXDtYA6UUzlh1
VxzVlAqw3XIH8sU7q2KEQNKSqSOBmtfRV+TTCBv+8QM29D4dloIFA39ZYXYwwuVXZ1vLhksi
c50nuRkzZVQAYyluQXT+O4qDYiNHg=
From: "Tableau Online (regh...@onlinemail.tableau.com)"
<regh...@onlinemail.tableau.com>
Subject: You've Been Invited to Tableau Online
Received: from [35.160.92.113] by mandrillapp.com id
3098043a193846f8b0aab2f14571f6f0; Wed, 08 Jun 2022 04:50:22 +0000
Reply-To: regh...@onlinemail.tableau.com
To: edp.r...@ptbmi.co.id
X-Report-Abuse: Please forward a copy of this message, including all headers,
to ab...@mandrill.com
X-Report-Abuse: You can also report abuse here:
http://mandrillapp.com/contact/abuse?id=30346553.3098043a193846f8b0aab2f14571f6f0
X-Mandrill-User: md_30346553
Feedback-ID: 30346553:30346553.20220608:md
Message-Id:
<30346553.20220608045022.62a02a8e9bce98.80032...@mail136-29.atl41.mandrillapp.com>
Date: Wed, 08 Jun 2022 04:50:22 +0000
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="_av-XDUzQ7dARAg709cEk4wNfA"
X-MDArchived: bb.ptbmi.com, Wed, 08 Jun 2022 11:51:03 +0700
Dari header di atas, terlihat kalau email sender nya itu *@mandrill.app
Kemudian saya cari di log smtp nya ternyata betul menggunakan *@mandrill.app
Wed 2022-06-08 11:50:56.982: ----------
Wed 2022-06-08 11:50:58.421: [62257666] Session 62257666; child 0007
Wed 2022-06-08 11:50:58.421: [62257666] Accepting SMTP connection from
172.17.20.123:52006 to 172.16.0.6:587
Wed 2022-06-08 11:50:58.421: [62257666] --> 220 bb.ptbmi.com ESMTP MSA MDaemon
21.5.2; Wed, 08 Jun 2022 11:50:58 +0700
Wed 2022-06-08 11:50:58.424: [62257666] <-- EHLO EXIM13
Wed 2022-06-08 11:50:58.424: [62257666] --> 250-bb.ptbmi.com Hello EXIM13
[172.17.20.123], pleased to meet you
Wed 2022-06-08 11:50:58.424: [62257666] --> 250-AUTH LOGIN CRAM-MD5 PLAIN
Wed 2022-06-08 11:50:58.424: [62257666] --> 250-8BITMIME
Wed 2022-06-08 11:50:58.424: [62257666] --> 250-ENHANCEDSTATUSCODES
Wed 2022-06-08 11:50:58.424: [62257666] --> 250-PIPELINING
Wed 2022-06-08 11:50:58.424: [62257666] --> 250-CHUNKING
Wed 2022-06-08 11:50:58.424: [62257666] --> 250-STARTTLS
Wed 2022-06-08 11:50:58.424: [62257666] --> 250 SIZE 30720000
Wed 2022-06-08 11:50:58.425: [62257666] <-- AUTH LOGIN
Wed 2022-06-08 11:50:58.425: [62257666] --> 334 VXNlcm5hbWU6
Wed 2022-06-08 11:50:58.426: [62257666] <-- ZXhpbS5va2lAcHRibWkuY29t
Wed 2022-06-08 11:50:58.426: [62257666] --> 334 UGFzc3dvcmQ6
Wed 2022-06-08 11:50:58.426: [62257666] <-- ******
Wed 2022-06-08 11:50:58.426: [62257666] Authenticating exim....@ptbmi.com...
Wed 2022-06-08 11:50:58.428: [62257666] Authenticated as exim....@ptbmi.com
Wed 2022-06-08 11:50:58.428: [62257666] --> 235 2.7.0 Authentication successful
Wed 2022-06-08 11:50:58.429: [62257666] <-- MAIL FROM: <exim....@ptbmi.com>
Wed 2022-06-08 11:50:58.430: [62257666] --> 250 2.1.0 Sender OK
Wed 2022-06-08 11:50:58.431: [62257666] <-- RCPT TO: <exim.ron...@ptbmi.com>
Wed 2022-06-08 11:50:58.440: [62257666] --> 250 2.1.5 Recipient OK
Wed 2022-06-08 11:50:58.441: [62257666] <-- RCPT TO: <exim.sampu...@ptbmi.com>
Wed 2022-06-08 11:50:58.446: [62257666] --> 250 2.1.5 Recipient OK
Wed 2022-06-08 11:50:58.446: [62257666] <-- DATA
Wed 2022-06-08 11:50:58.447: [62257666] --> 354 Enter mail, end with
<CRLF>.<CRLF>
Wed 2022-06-08 11:50:58.465: [62257666] Message size: 6258 bytes
Wed 2022-06-08 11:50:58.476: [62257666] Passing message through AntiVirus
(Size: 6258)...
Wed 2022-06-08 11:50:58.501: [62257666] * Message is clean (no viruses found)
scanned by (ClamAV)
Wed 2022-06-08 11:50:58.501: [62257666] ---- End AntiVirus results
Wed 2022-06-08 11:50:58.504: [62257666] Message creation successful:
d:\mdaemon\queues\inbound\12\md5001000131943.msg
Wed 2022-06-08 11:50:58.504: [62257666] --> 250 2.6.0 Ok, message saved
<Message-ID: <a876337b317943db8ee68704139be...@ptbmi.co.id>>
Wed 2022-06-08 11:50:58.504: [62257666] <-- QUIT
Wed 2022-06-08 11:50:58.504: [62257666] --> 221 2.0.0 See ya in cyberspace
Wed 2022-06-08 11:50:58.504: [62257666] SMTP session successful (Bytes in/out:
6445/581)
Wed 2022-06-08 11:50:58.505: ----------
Wed 2022-06-08 11:50:55.211: [62257658] Session 62257658; child 0006
Wed 2022-06-08 11:50:55.211: [62257658] Accepting SMTP connection from
202.148.11.22:55376 to 172.16.0.6:25
Wed 2022-06-08 11:50:55.211: [62257658] Location Screen says connection is from
Indonesia, Asia
Wed 2022-06-08 11:50:55.212: [62257658] --> 220 bb.ptbmi.com ESMTP MDaemon
21.5.2; Wed, 08 Jun 2022 11:50:55 +0700
Wed 2022-06-08 11:50:55.222: [62257658] <-- EHLO mxout6.dwp.net.id
Wed 2022-06-08 11:50:55.222: [62257658] --> 250-bb.ptbmi.com Hello
mxout6.dwp.net.id [202.148.11.22], pleased to meet you
Wed 2022-06-08 11:50:55.222: [62257658] --> 250-ETRN
Wed 2022-06-08 11:50:55.222: [62257658] --> 250-8BITMIME
Wed 2022-06-08 11:50:55.222: [62257658] --> 250-ENHANCEDSTATUSCODES
Wed 2022-06-08 11:50:55.222: [62257658] --> 250-PIPELINING
Wed 2022-06-08 11:50:55.222: [62257658] --> 250-CHUNKING
Wed 2022-06-08 11:50:55.222: [62257658] --> 250-STARTTLS
Wed 2022-06-08 11:50:55.222: [62257658] --> 250 SIZE 30720000
Wed 2022-06-08 11:50:55.228: [62257658] <-- STARTTLS
Wed 2022-06-08 11:50:55.228: [62257658] --> 220 2.7.0 Ready to start TLS
Wed 2022-06-08 11:50:55.289: [62257658] SSL negotiation successful (TLS 1.2,
521 bit key exchange, 256 bit AES encryption)
Wed 2022-06-08 11:50:55.323: [62257658] <-- EHLO mxout6.dwp.net.id
Wed 2022-06-08 11:50:55.324: [62257658] --> 250-bb.ptbmi.com Hello
mxout6.dwp.net.id [202.148.11.22], pleased to meet you
Wed 2022-06-08 11:50:55.324: [62257658] --> 250-ETRN
Wed 2022-06-08 11:50:55.324: [62257658] --> 250-8BITMIME
Wed 2022-06-08 11:50:55.324: [62257658] --> 250-ENHANCEDSTATUSCODES
Wed 2022-06-08 11:50:55.324: [62257658] --> 250-PIPELINING
Wed 2022-06-08 11:50:55.324: [62257658] --> 250-CHUNKING
Wed 2022-06-08 11:50:55.324: [62257658] --> 250-REQUIRETLS
Wed 2022-06-08 11:50:55.324: [62257658] --> 250 SIZE 30720000
Wed 2022-06-08 11:50:55.335: [62257658] <-- MAIL
FROM:<bounce-md_30346553.62a02a8e.v1-3098043a193846f8b0aab2f14571f...@mandrillapp.com>
SIZE=44481 BODY=7BIT
Wed 2022-06-08 11:50:55.340: [62257658] Performing PTR lookup
(22.11.148.202.IN-ADDR.ARPA)
Wed 2022-06-08 11:50:55.348: [62257658] * D=22.11.148.202.in-addr.arpa TTL=(3)
PTR=[mxout6.dwp.net.id]
Wed 2022-06-08 11:50:55.360: [62257658] * D=mxout6.dwp.net.id TTL=(28)
A=[202.148.11.22]
Wed 2022-06-08 11:50:55.360: [62257658] ---- End PTR results
Wed 2022-06-08 11:50:55.360: [62257658] Performing IP lookup (mxout6.dwp.net.id)
Wed 2022-06-08 11:50:55.366: [62257658] * D=mxout6.dwp.net.id TTL=(28)
A=[202.148.11.22]
Wed 2022-06-08 11:50:55.366: [62257658] ---- End IP lookup results
Wed 2022-06-08 11:50:55.369: [62257658] Performing IP lookup (mandrillapp.com)
Wed 2022-06-08 11:50:55.376: [62257658] * D=mandrillapp.com TTL=(0)
A=[13.229.229.215]
Wed 2022-06-08 11:50:55.376: [62257658] * D=mandrillapp.com TTL=(0)
A=[13.229.125.179]
Wed 2022-06-08 11:50:55.383: [62257658] * P=010 S=000 D=mandrillapp.com
TTL=(126) MX=[9656353.in1.mandrillapp.com]
Wed 2022-06-08 11:50:55.383: [62257658] * P=020 S=001 D=mandrillapp.com
TTL=(126) MX=[9656353.in2.mandrillapp.com]
Wed 2022-06-08 11:50:55.416: [62257658] * D=9656353.in1.mandrillapp.com
TTL=(1) A=[54.245.105.146]
Wed 2022-06-08 11:50:55.416: [62257658] * D=9656353.in1.mandrillapp.com
TTL=(1) A=[54.245.105.162]
Wed 2022-06-08 11:50:55.454: [62257658] * D=9656353.in2.mandrillapp.com
TTL=(1) A=[54.245.105.146]
Wed 2022-06-08 11:50:55.454: [62257658] * D=9656353.in2.mandrillapp.com
TTL=(1) A=[54.245.105.162]
Wed 2022-06-08 11:50:55.454: [62257658] ---- End IP lookup results
Wed 2022-06-08 11:50:55.456: [62257658] Performing SPF lookup
(mxout6.dwp.net.id / 202.148.11.22)
Wed 2022-06-08 11:50:55.710: [62257658] * Result: none; no SPF record in DNS
Wed 2022-06-08 11:50:55.710: [62257658] ---- End SPF results
Wed 2022-06-08 11:50:55.711: [62257658] Performing SPF lookup (mandrillapp.com
/ 202.148.11.22)
Wed 2022-06-08 11:50:55.718: [62257658] * Policy: v=spf1
include:spf.mandrillapp.com wlinclude:gtrf.hsbc.com wlinclude:sucofindo.co.id
wlinclude:mcisurveyors.co.id ~all
Wed 2022-06-08 11:50:55.718: [62257658] * Evaluating
include:spf.mandrillapp.com: performing lookup
Wed 2022-06-08 11:50:55.729: [62257658] * Policy: v=spf1 ip4:198.2.128.0/24
ip4:198.2.132.0/22 ip4:198.2.136.0/23 ip4:198.2.145.0/24 ip4:198.2.186.0/23
ip4:205.201.131.128/25 ip4:205.201.134.128/25 ip4:205.201.136.0/23
ip4:205.201.139.0/24 ip4:198.2.177.0/24 ip4:198.2.178.0/23 ip4:
Wed 2022-06-08 11:50:55.729: [62257658] * Evaluating ip4:198.2.128.0/24: no
match
Wed 2022-06-08 11:50:55.729: [62257658] * Evaluating ip4:198.2.132.0/22: no
match
Wed 2022-06-08 11:50:55.729: [62257658] * Evaluating ip4:198.2.136.0/23: no
match
Wed 2022-06-08 11:50:55.729: [62257658] * Evaluating ip4:198.2.145.0/24: no
match
Wed 2022-06-08 11:50:55.730: [62257658] * Evaluating ip4:198.2.186.0/23: no
match
Wed 2022-06-08 11:50:55.730: [62257658] * Evaluating ip4:205.201.131.128/25:
no match
Wed 2022-06-08 11:50:55.730: [62257658] * Evaluating ip4:205.201.134.128/25:
no match
Wed 2022-06-08 11:50:55.730: [62257658] * Evaluating ip4:205.201.136.0/23:
no match
Wed 2022-06-08 11:50:55.730: [62257658] * Evaluating ip4:205.201.139.0/24:
no match
Wed 2022-06-08 11:50:55.730: [62257658] * Evaluating ip4:198.2.177.0/24: no
match
Wed 2022-06-08 11:50:55.730: [62257658] * Evaluating ip4:198.2.178.0/23: no
match
Wed 2022-06-08 11:50:55.730: [62257658] * Evaluating ip4:198.2.180.0/24: no
match
Wed 2022-06-08 11:50:55.730: [62257658] * Evaluating ~all: match
Wed 2022-06-08 11:50:55.730: [62257658] * Evaluating
include:spf.mandrillapp.com: no match
Wed 2022-06-08 11:50:55.730: [62257658] * Evaluating wlinclude:gtrf.hsbc.com:
performing lookup
Wed 2022-06-08 11:50:55.886: [62257658] * Policy: v=spf1 ip4:203.112.80.0/20
mx ~all
Wed 2022-06-08 11:50:55.886: [62257658] * Evaluating ip4:203.112.80.0/20: no
match
Wed 2022-06-08 11:50:56.479: [62257658] * Evaluating mx: no match
Wed 2022-06-08 11:50:56.480: [62257658] * Evaluating ~all: match
Wed 2022-06-08 11:50:56.480: [62257658] * Evaluating wlinclude:gtrf.hsbc.com:
no match
Wed 2022-06-08 11:50:56.480: [62257658] * Evaluating
wlinclude:sucofindo.co.id: performing lookup
Wed 2022-06-08 11:50:56.480: [62257658] * Policy (cache): v=spf1
ip4:222.124.12.245/32 ip4:222.124.12.242/32 ip4:222.124.12.243/32
ip4:222.124.12.251/32 -all
Wed 2022-06-08 11:50:56.480: [62257658] * Evaluating ip4:222.124.12.245/32:
no match
Wed 2022-06-08 11:50:56.480: [62257658] * Evaluating ip4:222.124.12.242/32:
no match
Wed 2022-06-08 11:50:56.480: [62257658] * Evaluating ip4:222.124.12.243/32:
no match
Wed 2022-06-08 11:50:56.480: [62257658] * Evaluating ip4:222.124.12.251/32:
no match
Wed 2022-06-08 11:50:56.480: [62257658] * Evaluating -all: match
Wed 2022-06-08 11:50:56.480: [62257658] * Evaluating
wlinclude:sucofindo.co.id: no match
Wed 2022-06-08 11:50:56.480: [62257658] * Evaluating
wlinclude:mcisurveyors.co.id: performing lookup
Wed 2022-06-08 11:50:56.958: [62257658] * Evaluating
wlinclude:mcisurveyors.co.id: none; no SPF record in DNS
Wed 2022-06-08 11:50:56.958: [62257658] * Result: neutral
Wed 2022-06-08 11:50:56.958: [62257658] ---- End SPF results
Wed 2022-06-08 11:50:56.958: [62257658] --> 250 2.1.0 Sender OK
Wed 2022-06-08 11:50:56.958: [62257658] <-- RCPT TO:<edp.r...@ptbmi.com>
Wed 2022-06-08 11:50:56.968: [62257658] Performing DNS-BL lookup (202.148.11.22
- connecting IP)
Wed 2022-06-08 11:50:57.016: [62257658] * cbl.abuseat.org - passed
Wed 2022-06-08 11:50:57.310: [62257658] * b.barracudacentral.org - passed
Wed 2022-06-08 11:50:57.345: [62257658] * zen.spamhaus.org - passed
Wed 2022-06-08 11:50:57.345: [62257658] ---- End DNS-BL results
Wed 2022-06-08 11:50:57.346: [62257658] --> 250 2.1.5 Recipient OK
Wed 2022-06-08 11:50:57.347: [62257658] <-- DATA
Wed 2022-06-08 11:50:57.348: [62257658] --> 354 Enter mail, end with
<CRLF>.<CRLF>
Wed 2022-06-08 11:50:57.382: [62257658] Message size: 44479 bytes
Wed 2022-06-08 11:50:57.384: [62257658] Performing DKIM verification
Wed 2022-06-08 11:50:57.384: [62257658] * File:
d:\mdaemon\queues\temp\16\md5001000000002.tmp
Wed 2022-06-08 11:50:57.384: [62257658] * Message-ID:
<30346553.20220608045022.62a02a8e9bce98.80032...@mail136-29.atl41.mandrillapp.com>
Wed 2022-06-08 11:50:57.403: [62257658] * DKIM-Signature 1: v=1; a=rsa-sha256;
c=relaxed/relaxed; d=onlinemail.tableau.com; s=mandrill; t=1654663823;
x=1654966223; i=regh...@onlinemail.tableau.com; b
h=From:Subject:Reply-To:To:Feedback-ID:Message-Id:Date:MIME-Version:
Content-Type:CC:
Wed 2022-06-08 11:50:57.403: [62257658] * Verification result: good signature
Wed 2022-06-08 11:50:57.403: [62257658] * DKIM-Signature 2: v=1; a=rsa-sha256;
c=relaxed/relaxed; d=mandrillapp.com; i=@mandrillapp.com; q=dns/txt;
s=mandrill; t=1654663822; <some tags are not logged>
Wed 2022-06-08 11:50:57.403: [62257658] * Verification result: good signature
Wed 2022-06-08 11:50:57.404: [62257658] * Result: pass
Wed 2022-06-08 11:50:57.404: [62257658] ---- End DKIM results
Wed 2022-06-08 11:50:57.408: [62257658] Performing DMARC processing
Wed 2022-06-08 11:50:57.408: [62257658] * File:
d:\mdaemon\queues\temp\16\md5001000000002.tmp
Wed 2022-06-08 11:50:57.408: [62257658] * Message-ID:
<30346553.20220608045022.62a02a8e9bce98.80032...@mail136-29.atl41.mandrillapp.com>
Wed 2022-06-08 11:50:57.408: [62257658] * Author domain: onlinemail.tableau.com
Wed 2022-06-08 11:50:57.408: [62257658] * Organizational domain: tableau.com
Wed 2022-06-08 11:50:57.408: [62257658] * Query domain:
_dmarc.onlinemail.tableau.com
Wed 2022-06-08 11:50:57.857: [62257658] * No DMARC policy record found
Wed 2022-06-08 11:50:57.857: [62257658] * Query domain: _dmarc.tableau.com
Wed 2022-06-08 11:50:57.890: [62257658] * Policy record: v=DMARC1; p=reject;
pct=100; sp=none; rua=mailto:dmarc_...@dmarc.250ok.net;
ruf=mailto:dmarc...@dmarc.250ok.net; fo=1; rf=afrf
Wed 2022-06-08 11:50:57.893: [62257658] * Verifying report recipient:
dmarc_...@dmarc.250ok.net
Wed 2022-06-08 11:50:57.893: [62257658] * Query domain:
tableau.com._report._dmarc.dmarc.250ok.net
Wed 2022-06-08 11:50:57.928: [62257658] * Policy record: v=DMARC1
Wed 2022-06-08 11:50:57.928: [62257658] * Recipient
dmarc_...@dmarc.250ok.net is verified
Wed 2022-06-08 11:50:57.931: [62257658] * Verifying report recipient:
dmarc...@dmarc.250ok.net
Wed 2022-06-08 11:50:57.931: [62257658] * Query domain:
tableau.com._report._dmarc.dmarc.250ok.net
Wed 2022-06-08 11:50:57.937: [62257658] * Policy record: v=DMARC1
Wed 2022-06-08 11:50:57.937: [62257658] * Recipient dmarc...@dmarc.250ok.net
is verified
Wed 2022-06-08 11:50:57.937: [62257658] * Checking authentication mechanisms
for DMARC alignment
Wed 2022-06-08 11:50:57.937: [62257658] * SPF: domain "mandrillapp.com" did
not pass SPF check
Wed 2022-06-08 11:50:57.938: [62257658] * DKIM: domain
"onlinemail.tableau.com" (from d= of signature #1) verified; and domain is
DMARC aligned
Wed 2022-06-08 11:50:57.938: [62257658] * Result: pass
Wed 2022-06-08 11:50:57.938: [62257658] ---- End DMARC results
Wed 2022-06-08 11:50:57.941: [62257658] Passing message through AntiVirus
(Size: 44479)...
Wed 2022-06-08 11:50:58.007: [62257658] * Message is clean (no viruses found)
scanned by (ClamAV)
Wed 2022-06-08 11:50:58.007: [62257658] ---- End AntiVirus results
Wed 2022-06-08 11:50:58.294: [62257658] Passing message through Outbreak
Protection...
Wed 2022-06-08 11:50:58.294: [62257658] * Message-ID:
<30346553.20220608045022.62a02a8e9bce98.80032...@mail136-29.atl41.mandrillapp.com>
Wed 2022-06-08 11:50:58.294: [62257658] * Reference-ID:
str=0001.0A673433.62A02AB2.002D,ss=1,re=0.000,recu=0.000,reip=0.000,cl=1,cld=1,fgs=0
Wed 2022-06-08 11:50:58.294: [62257658] * Virus result: 0 - Clean
Wed 2022-06-08 11:50:58.294: [62257658] * Spam result: 1 - Clean
Wed 2022-06-08 11:50:58.294: [62257658] * IWF result: 0 - Clean
Wed 2022-06-08 11:50:58.294: [62257658] ---- End Outbreak Protection results
Wed 2022-06-08 11:50:58.294: [62257658] Passing message through Spam Filter
(Size: 44479)...
Wed 2022-06-08 11:50:58.501: [62257658] * 1.6 BAYES_50 BODY: Bayes spam
probability is 40 to 60%
Wed 2022-06-08 11:50:58.501: [62257658] * [score: 0.5000]
Wed 2022-06-08 11:50:58.501: [62257658] * 0.3 HEADER_FROM_DIFFERENT_DOMAINS
From and EnvelopeFrom 2nd level
Wed 2022-06-08 11:50:58.501: [62257658] * mail domains are different
Wed 2022-06-08 11:50:58.501: [62257658] * 0.0 HTML_MESSAGE BODY: HTML included
in message
Wed 2022-06-08 11:50:58.501: [62257658] * 0.0 HTML_FONT_LOW_CONTRAST BODY:
HTML font color similar or
Wed 2022-06-08 11:50:58.501: [62257658] * identical to background
Wed 2022-06-08 11:50:58.501: [62257658] * -0.0 T_SCC_BODY_TEXT_LINE No
description available.
Wed 2022-06-08 11:50:58.501: [62257658] ---- End SpamAssassin results
Wed 2022-06-08 11:50:58.501: [62257658] Spam Filter score/req: 1.90/12.0
Wed 2022-06-08 11:50:58.512: [62257658] Message creation successful:
d:\mdaemon\queues\inbound\11\md5001000131956.msg
Wed 2022-06-08 11:50:58.512: [62257658] --> 250 2.6.0 Ok, message saved
<Message-ID:
<30346553.20220608045022.62a02a8e9bce98.80032...@mail136-29.atl41.mandrillapp.com>>
Wed 2022-06-08 11:50:58.512: [62257658] <-- QUIT
Wed 2022-06-08 11:50:58.512: [62257658] --> 221 2.0.0 See ya in cyberspace
Wed 2022-06-08 11:50:58.513: [62257658] SMTP session successful (Bytes in/out:
46546/4524)
Wed 2022-06-08 11:50:58.513: ----------
Dan saya cari lagi di log yang kemarin ke block emang ada log dari email tsb
Tue 2022-06-07 11:51:30.907: ----------
Tue 2022-06-07 11:51:29.606: [62126670] Session 62126670; child 0037
Tue 2022-06-07 11:51:29.606: [62126670] Accepting SMTP connection from
198.2.133.19:21001 to 172.16.0.6:25
Tue 2022-06-07 11:51:29.606: [62126670] Location Screen says connection is from
United States, North America
Tue 2022-06-07 11:51:29.606: [62126670] --> 220 bb.ptbmi.com ESMTP MDaemon
21.5.2; Tue, 07 Jun 2022 11:51:29 +0700
Tue 2022-06-07 11:51:29.895: [62126670] <-- EHLO
mail133-19.atl131.mandrillapp.com
Tue 2022-06-07 11:51:29.896: [62126670] --> 250-bb.ptbmi.com Hello
mail133-19.atl131.mandrillapp.com [198.2.133.19], pleased to meet you
Tue 2022-06-07 11:51:29.896: [62126670] --> 250-ETRN
Tue 2022-06-07 11:51:29.896: [62126670] Location Screening hiding AUTH from
country United States, North America
Tue 2022-06-07 11:51:29.896: [62126670] --> 250-8BITMIME
Tue 2022-06-07 11:51:29.896: [62126670] --> 250-ENHANCEDSTATUSCODES
Tue 2022-06-07 11:51:29.896: [62126670] --> 250-PIPELINING
Tue 2022-06-07 11:51:29.896: [62126670] --> 250-CHUNKING
Tue 2022-06-07 11:51:29.896: [62126670] --> 250-STARTTLS
Tue 2022-06-07 11:51:29.896: [62126670] --> 250 SIZE 30720000
Tue 2022-06-07 11:51:30.173: [62126670] <-- STARTTLS
Tue 2022-06-07 11:51:30.173: [62126670] --> 220 2.7.0 Ready to start TLS
Tue 2022-06-07 11:51:30.763: [62126670] SSL negotiation successful (TLS 1.2,
521 bit key exchange, 256 bit AES encryption)
Tue 2022-06-07 11:51:31.044: [62126670] <-- EHLO
mail133-19.atl131.mandrillapp.com
Tue 2022-06-07 11:51:31.044: [62126670] --> 250-bb.ptbmi.com Hello
mail133-19.atl131.mandrillapp.com [198.2.133.19], pleased to meet you
Tue 2022-06-07 11:51:31.044: [62126670] --> 250-ETRN
Tue 2022-06-07 11:51:31.044: [62126670] Location Screening hiding AUTH from
country United States, North America
Tue 2022-06-07 11:51:31.044: [62126670] --> 250-8BITMIME
Tue 2022-06-07 11:51:31.044: [62126670] --> 250-ENHANCEDSTATUSCODES
Tue 2022-06-07 11:51:31.044: [62126670] --> 250-PIPELINING
Tue 2022-06-07 11:51:31.044: [62126670] --> 250-CHUNKING
Tue 2022-06-07 11:51:31.044: [62126670] --> 250-REQUIRETLS
Tue 2022-06-07 11:51:31.044: [62126670] --> 250 SIZE 30720000
Tue 2022-06-07 11:51:31.325: [62126670] <-- MAIL
FROM:<bounce-md_30346553.629ed950.v1-d281f227e22644a2af8a5b9cc589f...@mandrillapp.com>
SIZE=41778
Tue 2022-06-07 11:51:31.334: [62126670] Performing PTR lookup
(19.133.2.198.IN-ADDR.ARPA)
Tue 2022-06-07 11:51:31.365: [62126670] * D=19.133.2.198.in-addr.arpa
TTL=(1440) PTR=[mail133-19.atl131.mandrillapp.com]
Tue 2022-06-07 11:51:31.399: [62126670] * D=mail133-19.atl131.mandrillapp.com
TTL=(1440) A=[198.2.133.19]
Tue 2022-06-07 11:51:31.399: [62126670] ---- End PTR results
Tue 2022-06-07 11:51:31.400: [62126670] Performing IP lookup
(mail133-19.atl131.mandrillapp.com)
Tue 2022-06-07 11:51:31.405: [62126670] * D=mail133-19.atl131.mandrillapp.com
TTL=(1440) A=[198.2.133.19]
Tue 2022-06-07 11:51:31.405: [62126670] ---- End IP lookup results
Tue 2022-06-07 11:51:31.409: [62126670] Performing IP lookup (mandrillapp.com)
Tue 2022-06-07 11:51:31.445: [62126670] * D=mandrillapp.com TTL=(1)
A=[13.229.229.215]
Tue 2022-06-07 11:51:31.445: [62126670] * D=mandrillapp.com TTL=(1)
A=[13.229.125.179]
Tue 2022-06-07 11:51:31.449: [62126670] * P=010 S=000 D=mandrillapp.com
TTL=(102) MX=[9656353.in1.mandrillapp.com]
Tue 2022-06-07 11:51:31.449: [62126670] * P=020 S=001 D=mandrillapp.com
TTL=(102) MX=[9656353.in2.mandrillapp.com]
Tue 2022-06-07 11:51:31.666: [62126670] * D=9656353.in1.mandrillapp.com
TTL=(1) A=[54.245.105.146]
Tue 2022-06-07 11:51:31.666: [62126670] * D=9656353.in1.mandrillapp.com
TTL=(1) A=[54.245.105.162]
Tue 2022-06-07 11:51:31.700: [62126670] * D=9656353.in2.mandrillapp.com
TTL=(1) A=[54.245.105.162]
Tue 2022-06-07 11:51:31.700: [62126670] * D=9656353.in2.mandrillapp.com
TTL=(1) A=[54.245.105.146]
Tue 2022-06-07 11:51:31.700: [62126670] ---- End IP lookup results
Tue 2022-06-07 11:51:31.700: [62126670] --> 550 5.7.1 Sender unknown
Tue 2022-06-07 11:51:31.700: [62126670] Mail from
bounce-md_30346553.629ed950.v1-d281f227e22644a2af8a5b9cc589f...@mandrillapp.com
refused (Sender Blacklist)
Tue 2022-06-07 11:51:31.701: [62126670] SMTP session terminated (Bytes in/out:
1163/4019)
Tue 2022-06-07 11:51:31.701: ----------
Ternyata masuk daftar blacklist
Ini sudah saya hapus dari daftar blacklist nya, Cuma setelah itu saya suruh
resend email, tetep tidak masuk dan tidak ada log email sama sekali baik dari
mandirillapp.com maupun onlinemail.tableau.com
Mohon pencerahannya Pak
Terima Kasih
Rievo
--
--[mdaemon-l]----------------------------------------------------------
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia
Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com
Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com
Versi terakhir: MDaemon 22.0, SecurityGateway 8.5.2
