> Kalau mail dikirim melalui list server (bukan mail server) cari di smtp-in
> log berdasar nama domain (tidak perlu mailbox@).
Pak Syafril,
Ini ternyata emailnya itu di kirim by aplikasi Pak ternyata
Barusan saya tes kirim email ke email lain (bukan mdaemon) itu masuk yang
kebetulan saya email tersebut sya multipop ke email mdaemon bmi saya
Berikut header emailnya
X-MDAV-Processed: bb.ptbmi.com, Wed, 08 Jun 2022 11:51:03 +0700
X-Spam-Processed: bb.ptbmi.com, Wed, 08 Jun 2022 11:51:02 +0700
Return-path:
<bounce-md_30346553.62a02a8e.v1-3098043a193846f8b0aab2f14571f...@mandrillapp.com>
X-Spam-Level: **
X-Spam-Status: No, score=2.4 required=5.0 tests=BAYES_50,
HTML_FONT_LOW_CONTRAST,HTML_MESSAGE,SPF_NEUTRAL,T_SCC_BODY_TEXT_LINE
shortcircuit=no autolearn=disabled version=3.4.4
X-Spam-Report:
* 1.6 BAYES_50 BODY: Bayes spam probability is 40 to 60%
* [score: 0.5000]
* 0.8 SPF_NEUTRAL SPF: sender does not match SPF record (neutral)
* 0.0 HTML_MESSAGE BODY: HTML included in message
* 0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or
* identical to background
* -0.0 T_SCC_BODY_TEXT_LINE No description available.
X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24)
Authentication-Results: bb.ptbmi.com;
spf=neutral
smtp.mailfrom=bounce-md_30346553.62a02a8e.v1-3098043a193846f8b0aab2f14571f...@mandrillapp.com;
dkim=pass (good signature) header.d=onlinemail.tableau.com
header.b=OAK87mxscS [email protected];
dkim=pass (good signature) header.d=mandrillapp.com header.b=YTsw71N5Qm
[email protected];
dmarc=pass header.from=onlinemail.tableau.com (p=reject sampling=20
pct=100);
iprev=pass policy.iprev=202.148.11.22 (PTR mxout6.dwp.net.id);
iprev=pass policy.iprev=202.148.11.22 (HELO mxout6.dwp.net.id);
iprev=fail reason="does not match" policy.iprev=202.148.11.22 (MAIL
bounce-md_30346553.62a02a8e.v1-3098043a193846f8b0aab2f14571f...@mandrillapp.com)
Received-SPF: neutral (bb.ptbmi.com: 202.148.11.22 is neither permitted
nor denied by domain mandrillapp.com)
receiver=bb.ptbmi.com; client-ip=202.148.11.22;
mechanism=default;
envelope-from="bounce-md_30346553.62a02a8e.v1-3098043a193846f8b0aab2f14571f...@mandrillapp.com";
helo=mxout6.dwp.net.id;
Received: from mxout6.dwp.net.id (mxout6.dwp.net.id [202.148.11.22]) by
bb.ptbmi.com (MDaemon PRO v21.5.2)
with ESMTPS id 11-md5001000131956.msg; Wed, 08 Jun 2022 11:51:02 +0700
X-MDOP-RefID:
str=0001.0A673433.62A02AB2.002D,ss=1,re=0.000,recu=0.000,reip=0.000,cl=1,cld=1,fgs=0
(_st=1 _vt=0 _iwf=0)
X-MDDKIM-Result: unapproved (bb.ptbmi.com)
X-MDSPF-Result: neutral (bb.ptbmi.com)
X-MDRemoteIP: 202.148.11.22
X-MDHelo: mxout6.dwp.net.id
X-MDArrival-Date: Wed, 08 Jun 2022 11:51:02 +0700
X-MDOrigin-Country: ID, AS
X-Rcpt-To: [email protected]
X-MDRcpt-To: [email protected]
X-Return-Path:
bounce-md_30346553.62a02a8e.v1-3098043a193846f8b0aab2f14571f...@mandrillapp.com
X-Envelope-From:
bounce-md_30346553.62a02a8e.v1-3098043a193846f8b0aab2f14571f...@mandrillapp.com
X-MDaemon-Deliver-To: [email protected]
Received: from smtp-serv1.dwp.net.id (smtp-serv1.dwp.net.id [202.148.11.241])
by mxout6.dwp.net.id (Postfix) with ESMTP id 12294DC0BF3
for <[email protected]>; Wed, 8 Jun 2022 11:50:55 +0700 (WIB)
Received: from localhost (localhost [127.0.0.1])
by smtp-serv1.dwp.net.id (Postfix) with ESMTP id C52597E02D
for <[email protected]>; Wed, 8 Jun 2022 11:50:54 +0700 (WIB)
X-Virus-Scanned: Debian amavisd-new at smtp-serv1.dwp.net.id
Received: from smtp-serv1.dwp.net.id ([127.0.0.1])
by localhost (smtp-serv1.dwp.net.id [127.0.0.1]) (amavisd-new, port
10024)
with ESMTP id z0KIuNL-6mGS for <[email protected]>;
Wed, 8 Jun 2022 11:50:44 +0700 (WIB)
Received: from cpanel1.dnetsurabaya.id (cpanel1.dnetsurabaya.id
[202.148.11.124])
by smtp-serv1.dwp.net.id (Postfix) with ESMTPS id C0AB280276
for <[email protected]>; Wed, 8 Jun 2022 11:50:44 +0700 (WIB)
Received: from mxin2.dwp.net.id ([202.148.11.222]:46274
helo=mxin-serv2.dwp.net.id)
by cpanel1.dnetsurabaya.id with esmtps (TLS1.2) tls
TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.95)
(envelope-from
<bounce-md_30346553.62a02a8e.v1-3098043a193846f8b0aab2f14571f...@mandrillapp.com>)
id 1nyneW-00CpNf-6W
for [email protected];
Wed, 08 Jun 2022 11:50:44 +0700
Received: from localhost (unknown [127.0.0.1])
by mxin-serv2.dwp.net.id (Postfix) with ESMTP id 1029313B261
for <[email protected]>; Wed, 8 Jun 2022 11:50:44 +0700 (WIB)
X-Virus-Scanned: Debian amavisd-new at mxin-serv2.dwp.net.id
Received: from mxin-serv2.dwp.net.id ([127.0.0.1])
by localhost (mxin-serv2.dwp.net.id [127.0.0.1]) (amavisd-new, port
10024)
with ESMTP id XWAfBXul-dWR for <[email protected]>;
Wed, 8 Jun 2022 11:50:34 +0700 (WIB)
Received-SPF: Pass (mailfrom) identity=mailfrom; client-ip=198.2.136.29;
helo=mail136-29.atl41.mandrillapp.com;
envelope-from=bounce-md_30346553.62a02a8e.v1-3098043a193846f8b0aab2f14571f...@mandrillapp.com;
[email protected]
Received: from mail136-29.atl41.mandrillapp.com (unknown [198.2.136.29])
(using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits))
(No client certificate requested)
by mxin-serv2.dwp.net.id (Postfix) with ESMTPS id A971113B0BC
for <[email protected]>; Wed, 8 Jun 2022 11:50:26 +0700 (WIB)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=onlinemail.tableau.com; s=mandrill; t=1654663823; x=1654966223;
[email protected];
bh=zN11yYeEbrCMNE1U7MmeseizWR+zIYQQBqShzEj6uTc=;
h=From:Subject:Reply-To:To:Feedback-ID:Message-Id:Date:MIME-Version:
Content-Type:CC:Date:Subject:From;
b=OAK87mxscSW6X0M28MsuxoA7jHrJz9kwxO5O2TAZKfJHAyxtwEYMKX+i/kWMlv3Ni
pVbtc3Zs7P90jnFpcZmeAx/HI8E8edtSaUvTsQMTTDcQ7z5rUDoiyI94+lWx9xSPjI
WhwltmR1wXqMQvlgZmfo0B69sa+kfMC7UuO1NCbs=
Received: from pmta11.mandrill.prod.atl01.rsglab.com (localhost [127.0.0.1])
by mail136-29.atl41.mandrillapp.com (Mailchimp) with ESMTP id
4LHvt74qZxz6CPyBL
for <[email protected]>; Wed, 8 Jun 2022 04:50:23 +0000 (GMT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mandrillapp.com;
[email protected]; q=dns/txt; s=mandrill; t=1654663822; h=From :
Subject : Reply-To : To : Message-Id : Date : MIME-Version :
Content-Type : From : Subject : Date : X-Mandrill-User :
List-Unsubscribe; bh=zN11yYeEbrCMNE1U7MmeseizWR+zIYQQBqShzEj6uTc=;
b=YTsw71N5Qm2ScAHGAe4jCxaTSQvNbCKX0r8Rbe05Hk7Mrbr5ttb/UkWRwhXDtYA6UUzlh1
VxzVlAqw3XIH8sU7q2KEQNKSqSOBmtfRV+TTCBv+8QM29D4dloIFA39ZYXYwwuVXZ1vLhksi
c50nuRkzZVQAYyluQXT+O4qDYiNHg=
From: "Tableau Online ([email protected])"
<[email protected]>
Subject: You've Been Invited to Tableau Online
Received: from [35.160.92.113] by mandrillapp.com id
3098043a193846f8b0aab2f14571f6f0; Wed, 08 Jun 2022 04:50:22 +0000
Reply-To: [email protected]
To: [email protected]
X-Report-Abuse: Please forward a copy of this message, including all headers,
to [email protected]
X-Report-Abuse: You can also report abuse here:
http://mandrillapp.com/contact/abuse?id=30346553.3098043a193846f8b0aab2f14571f6f0
X-Mandrill-User: md_30346553
Feedback-ID: 30346553:30346553.20220608:md
Message-Id:
<30346553.20220608045022.62a02a8e9bce98.80032...@mail136-29.atl41.mandrillapp.com>
Date: Wed, 08 Jun 2022 04:50:22 +0000
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="_av-XDUzQ7dARAg709cEk4wNfA"
X-MDArchived: bb.ptbmi.com, Wed, 08 Jun 2022 11:51:03 +0700
Dari header di atas, terlihat kalau email sender nya itu *@mandrill.app
Kemudian saya cari di log smtp nya ternyata betul menggunakan *@mandrill.app
Wed 2022-06-08 11:50:56.982: ----------
Wed 2022-06-08 11:50:58.421: [62257666] Session 62257666; child 0007
Wed 2022-06-08 11:50:58.421: [62257666] Accepting SMTP connection from
172.17.20.123:52006 to 172.16.0.6:587
Wed 2022-06-08 11:50:58.421: [62257666] --> 220 bb.ptbmi.com ESMTP MSA MDaemon
21.5.2; Wed, 08 Jun 2022 11:50:58 +0700
Wed 2022-06-08 11:50:58.424: [62257666] <-- EHLO EXIM13
Wed 2022-06-08 11:50:58.424: [62257666] --> 250-bb.ptbmi.com Hello EXIM13
[172.17.20.123], pleased to meet you
Wed 2022-06-08 11:50:58.424: [62257666] --> 250-AUTH LOGIN CRAM-MD5 PLAIN
Wed 2022-06-08 11:50:58.424: [62257666] --> 250-8BITMIME
Wed 2022-06-08 11:50:58.424: [62257666] --> 250-ENHANCEDSTATUSCODES
Wed 2022-06-08 11:50:58.424: [62257666] --> 250-PIPELINING
Wed 2022-06-08 11:50:58.424: [62257666] --> 250-CHUNKING
Wed 2022-06-08 11:50:58.424: [62257666] --> 250-STARTTLS
Wed 2022-06-08 11:50:58.424: [62257666] --> 250 SIZE 30720000
Wed 2022-06-08 11:50:58.425: [62257666] <-- AUTH LOGIN
Wed 2022-06-08 11:50:58.425: [62257666] --> 334 VXNlcm5hbWU6
Wed 2022-06-08 11:50:58.426: [62257666] <-- ZXhpbS5va2lAcHRibWkuY29t
Wed 2022-06-08 11:50:58.426: [62257666] --> 334 UGFzc3dvcmQ6
Wed 2022-06-08 11:50:58.426: [62257666] <-- ******
Wed 2022-06-08 11:50:58.426: [62257666] Authenticating [email protected]...
Wed 2022-06-08 11:50:58.428: [62257666] Authenticated as [email protected]
Wed 2022-06-08 11:50:58.428: [62257666] --> 235 2.7.0 Authentication successful
Wed 2022-06-08 11:50:58.429: [62257666] <-- MAIL FROM: <[email protected]>
Wed 2022-06-08 11:50:58.430: [62257666] --> 250 2.1.0 Sender OK
Wed 2022-06-08 11:50:58.431: [62257666] <-- RCPT TO: <[email protected]>
Wed 2022-06-08 11:50:58.440: [62257666] --> 250 2.1.5 Recipient OK
Wed 2022-06-08 11:50:58.441: [62257666] <-- RCPT TO: <[email protected]>
Wed 2022-06-08 11:50:58.446: [62257666] --> 250 2.1.5 Recipient OK
Wed 2022-06-08 11:50:58.446: [62257666] <-- DATA
Wed 2022-06-08 11:50:58.447: [62257666] --> 354 Enter mail, end with
<CRLF>.<CRLF>
Wed 2022-06-08 11:50:58.465: [62257666] Message size: 6258 bytes
Wed 2022-06-08 11:50:58.476: [62257666] Passing message through AntiVirus
(Size: 6258)...
Wed 2022-06-08 11:50:58.501: [62257666] * Message is clean (no viruses found)
scanned by (ClamAV)
Wed 2022-06-08 11:50:58.501: [62257666] ---- End AntiVirus results
Wed 2022-06-08 11:50:58.504: [62257666] Message creation successful:
d:\mdaemon\queues\inbound\12\md5001000131943.msg
Wed 2022-06-08 11:50:58.504: [62257666] --> 250 2.6.0 Ok, message saved
<Message-ID: <[email protected]>>
Wed 2022-06-08 11:50:58.504: [62257666] <-- QUIT
Wed 2022-06-08 11:50:58.504: [62257666] --> 221 2.0.0 See ya in cyberspace
Wed 2022-06-08 11:50:58.504: [62257666] SMTP session successful (Bytes in/out:
6445/581)
Wed 2022-06-08 11:50:58.505: ----------
Wed 2022-06-08 11:50:55.211: [62257658] Session 62257658; child 0006
Wed 2022-06-08 11:50:55.211: [62257658] Accepting SMTP connection from
202.148.11.22:55376 to 172.16.0.6:25
Wed 2022-06-08 11:50:55.211: [62257658] Location Screen says connection is from
Indonesia, Asia
Wed 2022-06-08 11:50:55.212: [62257658] --> 220 bb.ptbmi.com ESMTP MDaemon
21.5.2; Wed, 08 Jun 2022 11:50:55 +0700
Wed 2022-06-08 11:50:55.222: [62257658] <-- EHLO mxout6.dwp.net.id
Wed 2022-06-08 11:50:55.222: [62257658] --> 250-bb.ptbmi.com Hello
mxout6.dwp.net.id [202.148.11.22], pleased to meet you
Wed 2022-06-08 11:50:55.222: [62257658] --> 250-ETRN
Wed 2022-06-08 11:50:55.222: [62257658] --> 250-8BITMIME
Wed 2022-06-08 11:50:55.222: [62257658] --> 250-ENHANCEDSTATUSCODES
Wed 2022-06-08 11:50:55.222: [62257658] --> 250-PIPELINING
Wed 2022-06-08 11:50:55.222: [62257658] --> 250-CHUNKING
Wed 2022-06-08 11:50:55.222: [62257658] --> 250-STARTTLS
Wed 2022-06-08 11:50:55.222: [62257658] --> 250 SIZE 30720000
Wed 2022-06-08 11:50:55.228: [62257658] <-- STARTTLS
Wed 2022-06-08 11:50:55.228: [62257658] --> 220 2.7.0 Ready to start TLS
Wed 2022-06-08 11:50:55.289: [62257658] SSL negotiation successful (TLS 1.2,
521 bit key exchange, 256 bit AES encryption)
Wed 2022-06-08 11:50:55.323: [62257658] <-- EHLO mxout6.dwp.net.id
Wed 2022-06-08 11:50:55.324: [62257658] --> 250-bb.ptbmi.com Hello
mxout6.dwp.net.id [202.148.11.22], pleased to meet you
Wed 2022-06-08 11:50:55.324: [62257658] --> 250-ETRN
Wed 2022-06-08 11:50:55.324: [62257658] --> 250-8BITMIME
Wed 2022-06-08 11:50:55.324: [62257658] --> 250-ENHANCEDSTATUSCODES
Wed 2022-06-08 11:50:55.324: [62257658] --> 250-PIPELINING
Wed 2022-06-08 11:50:55.324: [62257658] --> 250-CHUNKING
Wed 2022-06-08 11:50:55.324: [62257658] --> 250-REQUIRETLS
Wed 2022-06-08 11:50:55.324: [62257658] --> 250 SIZE 30720000
Wed 2022-06-08 11:50:55.335: [62257658] <-- MAIL
FROM:<bounce-md_30346553.62a02a8e.v1-3098043a193846f8b0aab2f14571f...@mandrillapp.com>
SIZE=44481 BODY=7BIT
Wed 2022-06-08 11:50:55.340: [62257658] Performing PTR lookup
(22.11.148.202.IN-ADDR.ARPA)
Wed 2022-06-08 11:50:55.348: [62257658] * D=22.11.148.202.in-addr.arpa TTL=(3)
PTR=[mxout6.dwp.net.id]
Wed 2022-06-08 11:50:55.360: [62257658] * D=mxout6.dwp.net.id TTL=(28)
A=[202.148.11.22]
Wed 2022-06-08 11:50:55.360: [62257658] ---- End PTR results
Wed 2022-06-08 11:50:55.360: [62257658] Performing IP lookup (mxout6.dwp.net.id)
Wed 2022-06-08 11:50:55.366: [62257658] * D=mxout6.dwp.net.id TTL=(28)
A=[202.148.11.22]
Wed 2022-06-08 11:50:55.366: [62257658] ---- End IP lookup results
Wed 2022-06-08 11:50:55.369: [62257658] Performing IP lookup (mandrillapp.com)
Wed 2022-06-08 11:50:55.376: [62257658] * D=mandrillapp.com TTL=(0)
A=[13.229.229.215]
Wed 2022-06-08 11:50:55.376: [62257658] * D=mandrillapp.com TTL=(0)
A=[13.229.125.179]
Wed 2022-06-08 11:50:55.383: [62257658] * P=010 S=000 D=mandrillapp.com
TTL=(126) MX=[9656353.in1.mandrillapp.com]
Wed 2022-06-08 11:50:55.383: [62257658] * P=020 S=001 D=mandrillapp.com
TTL=(126) MX=[9656353.in2.mandrillapp.com]
Wed 2022-06-08 11:50:55.416: [62257658] * D=9656353.in1.mandrillapp.com
TTL=(1) A=[54.245.105.146]
Wed 2022-06-08 11:50:55.416: [62257658] * D=9656353.in1.mandrillapp.com
TTL=(1) A=[54.245.105.162]
Wed 2022-06-08 11:50:55.454: [62257658] * D=9656353.in2.mandrillapp.com
TTL=(1) A=[54.245.105.146]
Wed 2022-06-08 11:50:55.454: [62257658] * D=9656353.in2.mandrillapp.com
TTL=(1) A=[54.245.105.162]
Wed 2022-06-08 11:50:55.454: [62257658] ---- End IP lookup results
Wed 2022-06-08 11:50:55.456: [62257658] Performing SPF lookup
(mxout6.dwp.net.id / 202.148.11.22)
Wed 2022-06-08 11:50:55.710: [62257658] * Result: none; no SPF record in DNS
Wed 2022-06-08 11:50:55.710: [62257658] ---- End SPF results
Wed 2022-06-08 11:50:55.711: [62257658] Performing SPF lookup (mandrillapp.com
/ 202.148.11.22)
Wed 2022-06-08 11:50:55.718: [62257658] * Policy: v=spf1
include:spf.mandrillapp.com wlinclude:gtrf.hsbc.com wlinclude:sucofindo.co.id
wlinclude:mcisurveyors.co.id ~all
Wed 2022-06-08 11:50:55.718: [62257658] * Evaluating
include:spf.mandrillapp.com: performing lookup
Wed 2022-06-08 11:50:55.729: [62257658] * Policy: v=spf1 ip4:198.2.128.0/24
ip4:198.2.132.0/22 ip4:198.2.136.0/23 ip4:198.2.145.0/24 ip4:198.2.186.0/23
ip4:205.201.131.128/25 ip4:205.201.134.128/25 ip4:205.201.136.0/23
ip4:205.201.139.0/24 ip4:198.2.177.0/24 ip4:198.2.178.0/23 ip4:
Wed 2022-06-08 11:50:55.729: [62257658] * Evaluating ip4:198.2.128.0/24: no
match
Wed 2022-06-08 11:50:55.729: [62257658] * Evaluating ip4:198.2.132.0/22: no
match
Wed 2022-06-08 11:50:55.729: [62257658] * Evaluating ip4:198.2.136.0/23: no
match
Wed 2022-06-08 11:50:55.729: [62257658] * Evaluating ip4:198.2.145.0/24: no
match
Wed 2022-06-08 11:50:55.730: [62257658] * Evaluating ip4:198.2.186.0/23: no
match
Wed 2022-06-08 11:50:55.730: [62257658] * Evaluating ip4:205.201.131.128/25:
no match
Wed 2022-06-08 11:50:55.730: [62257658] * Evaluating ip4:205.201.134.128/25:
no match
Wed 2022-06-08 11:50:55.730: [62257658] * Evaluating ip4:205.201.136.0/23:
no match
Wed 2022-06-08 11:50:55.730: [62257658] * Evaluating ip4:205.201.139.0/24:
no match
Wed 2022-06-08 11:50:55.730: [62257658] * Evaluating ip4:198.2.177.0/24: no
match
Wed 2022-06-08 11:50:55.730: [62257658] * Evaluating ip4:198.2.178.0/23: no
match
Wed 2022-06-08 11:50:55.730: [62257658] * Evaluating ip4:198.2.180.0/24: no
match
Wed 2022-06-08 11:50:55.730: [62257658] * Evaluating ~all: match
Wed 2022-06-08 11:50:55.730: [62257658] * Evaluating
include:spf.mandrillapp.com: no match
Wed 2022-06-08 11:50:55.730: [62257658] * Evaluating wlinclude:gtrf.hsbc.com:
performing lookup
Wed 2022-06-08 11:50:55.886: [62257658] * Policy: v=spf1 ip4:203.112.80.0/20
mx ~all
Wed 2022-06-08 11:50:55.886: [62257658] * Evaluating ip4:203.112.80.0/20: no
match
Wed 2022-06-08 11:50:56.479: [62257658] * Evaluating mx: no match
Wed 2022-06-08 11:50:56.480: [62257658] * Evaluating ~all: match
Wed 2022-06-08 11:50:56.480: [62257658] * Evaluating wlinclude:gtrf.hsbc.com:
no match
Wed 2022-06-08 11:50:56.480: [62257658] * Evaluating
wlinclude:sucofindo.co.id: performing lookup
Wed 2022-06-08 11:50:56.480: [62257658] * Policy (cache): v=spf1
ip4:222.124.12.245/32 ip4:222.124.12.242/32 ip4:222.124.12.243/32
ip4:222.124.12.251/32 -all
Wed 2022-06-08 11:50:56.480: [62257658] * Evaluating ip4:222.124.12.245/32:
no match
Wed 2022-06-08 11:50:56.480: [62257658] * Evaluating ip4:222.124.12.242/32:
no match
Wed 2022-06-08 11:50:56.480: [62257658] * Evaluating ip4:222.124.12.243/32:
no match
Wed 2022-06-08 11:50:56.480: [62257658] * Evaluating ip4:222.124.12.251/32:
no match
Wed 2022-06-08 11:50:56.480: [62257658] * Evaluating -all: match
Wed 2022-06-08 11:50:56.480: [62257658] * Evaluating
wlinclude:sucofindo.co.id: no match
Wed 2022-06-08 11:50:56.480: [62257658] * Evaluating
wlinclude:mcisurveyors.co.id: performing lookup
Wed 2022-06-08 11:50:56.958: [62257658] * Evaluating
wlinclude:mcisurveyors.co.id: none; no SPF record in DNS
Wed 2022-06-08 11:50:56.958: [62257658] * Result: neutral
Wed 2022-06-08 11:50:56.958: [62257658] ---- End SPF results
Wed 2022-06-08 11:50:56.958: [62257658] --> 250 2.1.0 Sender OK
Wed 2022-06-08 11:50:56.958: [62257658] <-- RCPT TO:<[email protected]>
Wed 2022-06-08 11:50:56.968: [62257658] Performing DNS-BL lookup (202.148.11.22
- connecting IP)
Wed 2022-06-08 11:50:57.016: [62257658] * cbl.abuseat.org - passed
Wed 2022-06-08 11:50:57.310: [62257658] * b.barracudacentral.org - passed
Wed 2022-06-08 11:50:57.345: [62257658] * zen.spamhaus.org - passed
Wed 2022-06-08 11:50:57.345: [62257658] ---- End DNS-BL results
Wed 2022-06-08 11:50:57.346: [62257658] --> 250 2.1.5 Recipient OK
Wed 2022-06-08 11:50:57.347: [62257658] <-- DATA
Wed 2022-06-08 11:50:57.348: [62257658] --> 354 Enter mail, end with
<CRLF>.<CRLF>
Wed 2022-06-08 11:50:57.382: [62257658] Message size: 44479 bytes
Wed 2022-06-08 11:50:57.384: [62257658] Performing DKIM verification
Wed 2022-06-08 11:50:57.384: [62257658] * File:
d:\mdaemon\queues\temp\16\md5001000000002.tmp
Wed 2022-06-08 11:50:57.384: [62257658] * Message-ID:
<30346553.20220608045022.62a02a8e9bce98.80032...@mail136-29.atl41.mandrillapp.com>
Wed 2022-06-08 11:50:57.403: [62257658] * DKIM-Signature 1: v=1; a=rsa-sha256;
c=relaxed/relaxed; d=onlinemail.tableau.com; s=mandrill; t=1654663823;
x=1654966223; [email protected]; b
h=From:Subject:Reply-To:To:Feedback-ID:Message-Id:Date:MIME-Version:
Content-Type:CC:
Wed 2022-06-08 11:50:57.403: [62257658] * Verification result: good signature
Wed 2022-06-08 11:50:57.403: [62257658] * DKIM-Signature 2: v=1; a=rsa-sha256;
c=relaxed/relaxed; d=mandrillapp.com; [email protected]; q=dns/txt;
s=mandrill; t=1654663822; <some tags are not logged>
Wed 2022-06-08 11:50:57.403: [62257658] * Verification result: good signature
Wed 2022-06-08 11:50:57.404: [62257658] * Result: pass
Wed 2022-06-08 11:50:57.404: [62257658] ---- End DKIM results
Wed 2022-06-08 11:50:57.408: [62257658] Performing DMARC processing
Wed 2022-06-08 11:50:57.408: [62257658] * File:
d:\mdaemon\queues\temp\16\md5001000000002.tmp
Wed 2022-06-08 11:50:57.408: [62257658] * Message-ID:
<30346553.20220608045022.62a02a8e9bce98.80032...@mail136-29.atl41.mandrillapp.com>
Wed 2022-06-08 11:50:57.408: [62257658] * Author domain: onlinemail.tableau.com
Wed 2022-06-08 11:50:57.408: [62257658] * Organizational domain: tableau.com
Wed 2022-06-08 11:50:57.408: [62257658] * Query domain:
_dmarc.onlinemail.tableau.com
Wed 2022-06-08 11:50:57.857: [62257658] * No DMARC policy record found
Wed 2022-06-08 11:50:57.857: [62257658] * Query domain: _dmarc.tableau.com
Wed 2022-06-08 11:50:57.890: [62257658] * Policy record: v=DMARC1; p=reject;
pct=100; sp=none; rua=mailto:[email protected];
ruf=mailto:[email protected]; fo=1; rf=afrf
Wed 2022-06-08 11:50:57.893: [62257658] * Verifying report recipient:
[email protected]
Wed 2022-06-08 11:50:57.893: [62257658] * Query domain:
tableau.com._report._dmarc.dmarc.250ok.net
Wed 2022-06-08 11:50:57.928: [62257658] * Policy record: v=DMARC1
Wed 2022-06-08 11:50:57.928: [62257658] * Recipient
[email protected] is verified
Wed 2022-06-08 11:50:57.931: [62257658] * Verifying report recipient:
[email protected]
Wed 2022-06-08 11:50:57.931: [62257658] * Query domain:
tableau.com._report._dmarc.dmarc.250ok.net
Wed 2022-06-08 11:50:57.937: [62257658] * Policy record: v=DMARC1
Wed 2022-06-08 11:50:57.937: [62257658] * Recipient [email protected]
is verified
Wed 2022-06-08 11:50:57.937: [62257658] * Checking authentication mechanisms
for DMARC alignment
Wed 2022-06-08 11:50:57.937: [62257658] * SPF: domain "mandrillapp.com" did
not pass SPF check
Wed 2022-06-08 11:50:57.938: [62257658] * DKIM: domain
"onlinemail.tableau.com" (from d= of signature #1) verified; and domain is
DMARC aligned
Wed 2022-06-08 11:50:57.938: [62257658] * Result: pass
Wed 2022-06-08 11:50:57.938: [62257658] ---- End DMARC results
Wed 2022-06-08 11:50:57.941: [62257658] Passing message through AntiVirus
(Size: 44479)...
Wed 2022-06-08 11:50:58.007: [62257658] * Message is clean (no viruses found)
scanned by (ClamAV)
Wed 2022-06-08 11:50:58.007: [62257658] ---- End AntiVirus results
Wed 2022-06-08 11:50:58.294: [62257658] Passing message through Outbreak
Protection...
Wed 2022-06-08 11:50:58.294: [62257658] * Message-ID:
<30346553.20220608045022.62a02a8e9bce98.80032...@mail136-29.atl41.mandrillapp.com>
Wed 2022-06-08 11:50:58.294: [62257658] * Reference-ID:
str=0001.0A673433.62A02AB2.002D,ss=1,re=0.000,recu=0.000,reip=0.000,cl=1,cld=1,fgs=0
Wed 2022-06-08 11:50:58.294: [62257658] * Virus result: 0 - Clean
Wed 2022-06-08 11:50:58.294: [62257658] * Spam result: 1 - Clean
Wed 2022-06-08 11:50:58.294: [62257658] * IWF result: 0 - Clean
Wed 2022-06-08 11:50:58.294: [62257658] ---- End Outbreak Protection results
Wed 2022-06-08 11:50:58.294: [62257658] Passing message through Spam Filter
(Size: 44479)...
Wed 2022-06-08 11:50:58.501: [62257658] * 1.6 BAYES_50 BODY: Bayes spam
probability is 40 to 60%
Wed 2022-06-08 11:50:58.501: [62257658] * [score: 0.5000]
Wed 2022-06-08 11:50:58.501: [62257658] * 0.3 HEADER_FROM_DIFFERENT_DOMAINS
From and EnvelopeFrom 2nd level
Wed 2022-06-08 11:50:58.501: [62257658] * mail domains are different
Wed 2022-06-08 11:50:58.501: [62257658] * 0.0 HTML_MESSAGE BODY: HTML included
in message
Wed 2022-06-08 11:50:58.501: [62257658] * 0.0 HTML_FONT_LOW_CONTRAST BODY:
HTML font color similar or
Wed 2022-06-08 11:50:58.501: [62257658] * identical to background
Wed 2022-06-08 11:50:58.501: [62257658] * -0.0 T_SCC_BODY_TEXT_LINE No
description available.
Wed 2022-06-08 11:50:58.501: [62257658] ---- End SpamAssassin results
Wed 2022-06-08 11:50:58.501: [62257658] Spam Filter score/req: 1.90/12.0
Wed 2022-06-08 11:50:58.512: [62257658] Message creation successful:
d:\mdaemon\queues\inbound\11\md5001000131956.msg
Wed 2022-06-08 11:50:58.512: [62257658] --> 250 2.6.0 Ok, message saved
<Message-ID:
<30346553.20220608045022.62a02a8e9bce98.80032...@mail136-29.atl41.mandrillapp.com>>
Wed 2022-06-08 11:50:58.512: [62257658] <-- QUIT
Wed 2022-06-08 11:50:58.512: [62257658] --> 221 2.0.0 See ya in cyberspace
Wed 2022-06-08 11:50:58.513: [62257658] SMTP session successful (Bytes in/out:
46546/4524)
Wed 2022-06-08 11:50:58.513: ----------
Dan saya cari lagi di log yang kemarin ke block emang ada log dari email tsb
Tue 2022-06-07 11:51:30.907: ----------
Tue 2022-06-07 11:51:29.606: [62126670] Session 62126670; child 0037
Tue 2022-06-07 11:51:29.606: [62126670] Accepting SMTP connection from
198.2.133.19:21001 to 172.16.0.6:25
Tue 2022-06-07 11:51:29.606: [62126670] Location Screen says connection is from
United States, North America
Tue 2022-06-07 11:51:29.606: [62126670] --> 220 bb.ptbmi.com ESMTP MDaemon
21.5.2; Tue, 07 Jun 2022 11:51:29 +0700
Tue 2022-06-07 11:51:29.895: [62126670] <-- EHLO
mail133-19.atl131.mandrillapp.com
Tue 2022-06-07 11:51:29.896: [62126670] --> 250-bb.ptbmi.com Hello
mail133-19.atl131.mandrillapp.com [198.2.133.19], pleased to meet you
Tue 2022-06-07 11:51:29.896: [62126670] --> 250-ETRN
Tue 2022-06-07 11:51:29.896: [62126670] Location Screening hiding AUTH from
country United States, North America
Tue 2022-06-07 11:51:29.896: [62126670] --> 250-8BITMIME
Tue 2022-06-07 11:51:29.896: [62126670] --> 250-ENHANCEDSTATUSCODES
Tue 2022-06-07 11:51:29.896: [62126670] --> 250-PIPELINING
Tue 2022-06-07 11:51:29.896: [62126670] --> 250-CHUNKING
Tue 2022-06-07 11:51:29.896: [62126670] --> 250-STARTTLS
Tue 2022-06-07 11:51:29.896: [62126670] --> 250 SIZE 30720000
Tue 2022-06-07 11:51:30.173: [62126670] <-- STARTTLS
Tue 2022-06-07 11:51:30.173: [62126670] --> 220 2.7.0 Ready to start TLS
Tue 2022-06-07 11:51:30.763: [62126670] SSL negotiation successful (TLS 1.2,
521 bit key exchange, 256 bit AES encryption)
Tue 2022-06-07 11:51:31.044: [62126670] <-- EHLO
mail133-19.atl131.mandrillapp.com
Tue 2022-06-07 11:51:31.044: [62126670] --> 250-bb.ptbmi.com Hello
mail133-19.atl131.mandrillapp.com [198.2.133.19], pleased to meet you
Tue 2022-06-07 11:51:31.044: [62126670] --> 250-ETRN
Tue 2022-06-07 11:51:31.044: [62126670] Location Screening hiding AUTH from
country United States, North America
Tue 2022-06-07 11:51:31.044: [62126670] --> 250-8BITMIME
Tue 2022-06-07 11:51:31.044: [62126670] --> 250-ENHANCEDSTATUSCODES
Tue 2022-06-07 11:51:31.044: [62126670] --> 250-PIPELINING
Tue 2022-06-07 11:51:31.044: [62126670] --> 250-CHUNKING
Tue 2022-06-07 11:51:31.044: [62126670] --> 250-REQUIRETLS
Tue 2022-06-07 11:51:31.044: [62126670] --> 250 SIZE 30720000
Tue 2022-06-07 11:51:31.325: [62126670] <-- MAIL
FROM:<bounce-md_30346553.629ed950.v1-d281f227e22644a2af8a5b9cc589f...@mandrillapp.com>
SIZE=41778
Tue 2022-06-07 11:51:31.334: [62126670] Performing PTR lookup
(19.133.2.198.IN-ADDR.ARPA)
Tue 2022-06-07 11:51:31.365: [62126670] * D=19.133.2.198.in-addr.arpa
TTL=(1440) PTR=[mail133-19.atl131.mandrillapp.com]
Tue 2022-06-07 11:51:31.399: [62126670] * D=mail133-19.atl131.mandrillapp.com
TTL=(1440) A=[198.2.133.19]
Tue 2022-06-07 11:51:31.399: [62126670] ---- End PTR results
Tue 2022-06-07 11:51:31.400: [62126670] Performing IP lookup
(mail133-19.atl131.mandrillapp.com)
Tue 2022-06-07 11:51:31.405: [62126670] * D=mail133-19.atl131.mandrillapp.com
TTL=(1440) A=[198.2.133.19]
Tue 2022-06-07 11:51:31.405: [62126670] ---- End IP lookup results
Tue 2022-06-07 11:51:31.409: [62126670] Performing IP lookup (mandrillapp.com)
Tue 2022-06-07 11:51:31.445: [62126670] * D=mandrillapp.com TTL=(1)
A=[13.229.229.215]
Tue 2022-06-07 11:51:31.445: [62126670] * D=mandrillapp.com TTL=(1)
A=[13.229.125.179]
Tue 2022-06-07 11:51:31.449: [62126670] * P=010 S=000 D=mandrillapp.com
TTL=(102) MX=[9656353.in1.mandrillapp.com]
Tue 2022-06-07 11:51:31.449: [62126670] * P=020 S=001 D=mandrillapp.com
TTL=(102) MX=[9656353.in2.mandrillapp.com]
Tue 2022-06-07 11:51:31.666: [62126670] * D=9656353.in1.mandrillapp.com
TTL=(1) A=[54.245.105.146]
Tue 2022-06-07 11:51:31.666: [62126670] * D=9656353.in1.mandrillapp.com
TTL=(1) A=[54.245.105.162]
Tue 2022-06-07 11:51:31.700: [62126670] * D=9656353.in2.mandrillapp.com
TTL=(1) A=[54.245.105.162]
Tue 2022-06-07 11:51:31.700: [62126670] * D=9656353.in2.mandrillapp.com
TTL=(1) A=[54.245.105.146]
Tue 2022-06-07 11:51:31.700: [62126670] ---- End IP lookup results
Tue 2022-06-07 11:51:31.700: [62126670] --> 550 5.7.1 Sender unknown
Tue 2022-06-07 11:51:31.700: [62126670] Mail from
bounce-md_30346553.629ed950.v1-d281f227e22644a2af8a5b9cc589f...@mandrillapp.com
refused (Sender Blacklist)
Tue 2022-06-07 11:51:31.701: [62126670] SMTP session terminated (Bytes in/out:
1163/4019)
Tue 2022-06-07 11:51:31.701: ----------
Ternyata masuk daftar blacklist
Ini sudah saya hapus dari daftar blacklist nya, Cuma setelah itu saya suruh
resend email, tetep tidak masuk dan tidak ada log email sama sekali baik dari
mandirillapp.com maupun onlinemail.tableau.com
Mohon pencerahannya Pak
Terima Kasih
Rievo
--
--[mdaemon-l]----------------------------------------------------------
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia
Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Berlangganan: Kirim mail ke [email protected]
Henti Langgan: Kirim mail ke [email protected]
Versi terakhir: MDaemon 22.0, SecurityGateway 8.5.2
