Dear Pak Syafril,
Mohon bantuannya. Email dari sender yang sama, kadang masuk, kadang di reject. Terima kasih. Fri 2023-01-27 09:12:15.746: [11784928] Session 11784928; child 0003 Fri 2023-01-27 09:12:15.746: [11784928] Accepting SMTP connection from 220.64.109.6:14940 to 192.168.0.4:25 Fri 2023-01-27 09:12:15.746: [11784928] Location Screen says connection is from South Korea, Asia Fri 2023-01-27 09:12:15.747: [11784928] --> 220 mail.ipsi.co.id ESMTP MDaemon 22.0.3; Fri, 27 Jan 2023 09:12:15 +0700 Fri 2023-01-27 09:12:15.879: [11784928] <-- EHLO dmail-prod-ay-sm1-worker14.mail.kakao.com Fri 2023-01-27 09:12:15.879: [11784928] --> 250-mail.ipsi.co.id Hello dmail-prod-ay-sm1-worker14.mail.kakao.com [220.64.109.6], pleased to meet you Fri 2023-01-27 09:12:15.879: [11784928] --> 250-ETRN Fri 2023-01-27 09:12:15.879: [11784928] Location Screening hiding AUTH from country South Korea, Asia Fri 2023-01-27 09:12:15.879: [11784928] --> 250-8BITMIME Fri 2023-01-27 09:12:15.879: [11784928] --> 250-ENHANCEDSTATUSCODES Fri 2023-01-27 09:12:15.879: [11784928] --> 250-PIPELINING Fri 2023-01-27 09:12:15.879: [11784928] --> 250-CHUNKING Fri 2023-01-27 09:12:15.879: [11784928] --> 250-STARTTLS Fri 2023-01-27 09:12:15.879: [11784928] --> 250 SIZE 10240000 Fri 2023-01-27 09:12:16.010: [11784928] <-- STARTTLS Fri 2023-01-27 09:12:16.011: [11784928] --> 220 2.7.0 Ready to start TLS Fri 2023-01-27 09:12:16.462: [11784928] SSL negotiation successful (TLS 1.2, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) Fri 2023-01-27 09:12:16.592: [11784928] <-- EHLO dmail-prod-ay-sm1-worker14.mail.kakao.com Fri 2023-01-27 09:12:16.593: [11784928] --> 250-mail.ipsi.co.id Hello dmail-prod-ay-sm1-worker14.mail.kakao.com [220.64.109.6], pleased to meet you Fri 2023-01-27 09:12:16.593: [11784928] --> 250-ETRN Fri 2023-01-27 09:12:16.593: [11784928] Location Screening hiding AUTH from country South Korea, Asia Fri 2023-01-27 09:12:16.593: [11784928] --> 250-8BITMIME Fri 2023-01-27 09:12:16.593: [11784928] --> 250-ENHANCEDSTATUSCODES Fri 2023-01-27 09:12:16.593: [11784928] --> 250-PIPELINING Fri 2023-01-27 09:12:16.593: [11784928] --> 250-CHUNKING Fri 2023-01-27 09:12:16.593: [11784928] --> 250-REQUIRETLS Fri 2023-01-27 09:12:16.593: [11784928] --> 250 SIZE 10240000 Fri 2023-01-27 09:12:16.725: [11784928] <-- MAIL FROM:<[email protected]> Fri 2023-01-27 09:12:16.737: [11784928] Performing PTR lookup (6.109.64.220.IN-ADDR.ARPA) Fri 2023-01-27 09:12:16.737: [11784928] * D=6.109.64.220.IN-ADDR.ARPA TTL=(199) PTR=[dmail-prod-ay-sm1-worker14.mail.kakao.com] Fri 2023-01-27 09:12:17.056: [11784928] * D=dmail-prod-ay-sm1-worker14.mail.kakao.com TTL=(9) A=[220.64.109.6] Fri 2023-01-27 09:12:17.056: [11784928] ---- End PTR results Fri 2023-01-27 09:12:17.065: [11784928] Performing IP lookup (dmail-prod-ay-sm1-worker14.mail.kakao.com) Fri 2023-01-27 09:12:17.066: [11784928] * D=dmail-prod-ay-sm1-worker14.mail.kakao.com TTL=(9) A=[220.64.109.6] Fri 2023-01-27 09:12:17.066: [11784928] ---- End IP lookup results Fri 2023-01-27 09:12:17.080: [11784928] Performing IP lookup (hanmail.net) Fri 2023-01-27 09:12:17.384: [11784928] * D=hanmail.net TTL=(30) A=[121.53.224.15] Fri 2023-01-27 09:12:17.384: [11784928] * D=hanmail.net TTL=(30) A=[121.53.105.210] Fri 2023-01-27 09:12:17.512: [11784928] * P=010 S=000 D=hanmail.net TTL=(30) MX=[mx1.hanmail.net] {211.249.219.37} Fri 2023-01-27 09:12:17.512: [11784928] * P=010 S=001 D=hanmail.net TTL=(30) MX=[mx4.hanmail.net] {211.249.222.80} Fri 2023-01-27 09:12:17.512: [11784928] * P=010 S=002 D=hanmail.net TTL=(30) MX=[mx3.hanmail.net] {211.249.219.43} Fri 2023-01-27 09:12:17.512: [11784928] * P=010 S=003 D=hanmail.net TTL=(30) MX=[mx2.hanmail.net] {121.53.85.32} Fri 2023-01-27 09:12:17.512: [11784928] ---- End IP lookup results Fri 2023-01-27 09:12:17.515: [11784928] Performing SPF lookup (dmail-prod-ay-sm1-worker14.mail.kakao.com / 220.64.109.6) Fri 2023-01-27 09:12:17.743: [11784928] * Result: none; no SPF record in DNS Fri 2023-01-27 09:12:17.743: [11784928] ---- End SPF results Fri 2023-01-27 09:12:17.743: [11784928] Performing SPF lookup (hanmail.net / 220.64.109.6) Fri 2023-01-27 09:12:17.844: [11784928] * Policy: v=spf1 include:_spf.daum.net wlinclude:antispamcloud.com wlinclude:spamexpert.com ~all Fri 2023-01-27 09:12:17.844: [11784928] * Evaluating include:_spf.daum.net: performing lookup Fri 2023-01-27 09:12:17.967: [11784928] * Policy: v=spf1 ip4:220.64.110.0/24 ip4:220.64.111.0/24 ip4:211.43.197.0/24 ip4:175.126.189.0/24 ip4:203.133.180.0/24 ip4:211.110.62.0/24 ip4:211.110.63.0/24 ip4:203.133.181.0/24 ip4:222.231.34.38 ip4:211.231.106.0/24 ip4:220.64.108.0/24 ip4 Fri 2023-01-27 09:12:17.967: [11784928] * Evaluating ip4:220.64.110.0/24: no match Fri 2023-01-27 09:12:17.967: [11784928] * Evaluating ip4:220.64.111.0/24: no match Fri 2023-01-27 09:12:17.967: [11784928] * Evaluating ip4:211.43.197.0/24: no match Fri 2023-01-27 09:12:17.967: [11784928] * Evaluating ip4:175.126.189.0/24: no match Fri 2023-01-27 09:12:17.967: [11784928] * Evaluating ip4:203.133.180.0/24: no match Fri 2023-01-27 09:12:17.967: [11784928] * Evaluating ip4:211.110.62.0/24: no match Fri 2023-01-27 09:12:17.967: [11784928] * Evaluating ip4:211.110.63.0/24: no match Fri 2023-01-27 09:12:17.967: [11784928] * Evaluating ip4:203.133.181.0/24: no match Fri 2023-01-27 09:12:17.967: [11784928] * Evaluating ip4:222.231.34.38: no match Fri 2023-01-27 09:12:17.968: [11784928] * Evaluating ip4:211.231.106.0/24: no match Fri 2023-01-27 09:12:17.968: [11784928] * Evaluating ip4:220.64.108.0/24: no match Fri 2023-01-27 09:12:17.968: [11784928] * Evaluating ip4:220.64.109.0/24: match Fri 2023-01-27 09:12:17.968: [11784928] * Evaluating include:_spf.daum.net: match Fri 2023-01-27 09:12:17.968: [11784928] * Result: pass Fri 2023-01-27 09:12:17.968: [11784928] ---- End SPF results Fri 2023-01-27 09:12:17.968: [11784928] --> 250 2.1.0 Sender OK Fri 2023-01-27 09:12:18.100: [11784928] <-- RCPT TO:<[email protected]> Fri 2023-01-27 09:12:18.103: [11784928] Performing DNS-BL lookup (220.64.109.6 - connecting IP) Fri 2023-01-27 09:12:18.292: [11784928] * cbl.abuseat.org - passed Fri 2023-01-27 09:12:18.653: [11784928] * b.barracudacentral.org - passed Fri 2023-01-27 09:12:18.862: [11784928] * zen.spamhaus.org - passed Fri 2023-01-27 09:12:18.863: [11784928] ---- End DNS-BL results Fri 2023-01-27 09:12:18.863: [11784928] --> 250 2.1.5 Recipient OK Fri 2023-01-27 09:12:18.995: [11784928] <-- DATA Fri 2023-01-27 09:12:19.001: [11784928] --> 354 Enter mail, end with <CRLF>.<CRLF> Fri 2023-01-27 09:12:19.397: [11784928] Message size: 49884 bytes Fri 2023-01-27 09:12:19.398: [11784928] Performing DKIM verification Fri 2023-01-27 09:12:19.398: [11784928] * File: c:\mdaemon\queues\temp\54\md5001000000101.tmp Fri 2023-01-27 09:12:19.398: [11784928] * Message-ID: <[email protected]> Fri 2023-01-27 09:12:19.399: [11784928] * Result: neutral Fri 2023-01-27 09:12:19.399: [11784928] ---- End DKIM results Fri 2023-01-27 09:12:19.405: [11784928] Performing DMARC processing Fri 2023-01-27 09:12:19.405: [11784928] * File: c:\mdaemon\queues\temp\54\md5001000000101.tmp Fri 2023-01-27 09:12:19.405: [11784928] * Message-ID: <[email protected]> Fri 2023-01-27 09:12:19.405: [11784928] * Author domain: hanmail.net Fri 2023-01-27 09:12:19.405: [11784928] * Organizational domain: hanmail.net Fri 2023-01-27 09:12:19.405: [11784928] * Query domain: _dmarc.hanmail.net Fri 2023-01-27 09:12:19.518: [11784928] * Policy record: v=DMARC1; p=none; rua=mailto:[email protected]; ruf=mailto:[email protected] Fri 2023-01-27 09:12:19.525: [11784928] * Verifying report recipient: [email protected] Fri 2023-01-27 09:12:19.525: [11784928] * Query domain: hanmail.net._report._dmarc.kakaocorp.com Fri 2023-01-27 09:12:19.754: [11784928] * No DMARC policy record found; recipient discarded Fri 2023-01-27 09:12:19.761: [11784928] * Verifying report recipient: [email protected] Fri 2023-01-27 09:12:19.761: [11784928] * Query domain: hanmail.net._report._dmarc.kakaocorp.com Fri 2023-01-27 09:12:19.772: [11784928] * No DMARC policy record found; recipient discarded Fri 2023-01-27 09:12:19.772: [11784928] * Checking authentication mechanisms for DMARC alignment Fri 2023-01-27 09:12:19.772: [11784928] * SPF: domain "hanmail.net" passed SPF check; and domain is DMARC aligned Fri 2023-01-27 09:12:19.772: [11784928] * DKIM: no DKIM signatures found Fri 2023-01-27 09:12:19.772: [11784928] * Result: pass Fri 2023-01-27 09:12:19.772: [11784928] ---- End DMARC results Fri 2023-01-27 09:12:19.774: [11784928] Passing message through AntiVirus (Size: 49884)... Fri 2023-01-27 09:12:19.867: [11784928] * Message is clean (no viruses found) scanned by (ClamAV) Fri 2023-01-27 09:12:19.867: [11784928] ---- End AntiVirus results Fri 2023-01-27 09:12:20.382: [11784928] Passing message through Outbreak Protection... Fri 2023-01-27 09:12:20.382: [11784928] * Message-ID: <[email protected]> Fri 2023-01-27 09:12:20.382: [11784928] * Reference-ID: str=0001.0A673433.63D33305.0030,ss=3,re=0.000,recu=0.000,reip=0.000,cl=3,cld =1,fgs=0 Fri 2023-01-27 09:12:20.382: [11784928] * Virus result: 0 - Clean Fri 2023-01-27 09:12:20.382: [11784928] * Spam result: 3 - Spam (bulk) Fri 2023-01-27 09:12:20.382: [11784928] * IWF result: 0 - Clean Fri 2023-01-27 09:12:20.382: [11784928] ---- End Outbreak Protection results Fri 2023-01-27 09:12:20.383: [11784928] Passing message through Spam Filter (Size: 49884)... Fri 2023-01-27 09:12:21.055: [11784928] * 10 MDAEMON_OP_SPAM_HIGH MDaemon: spam/phish Fri 2023-01-27 09:12:21.055: [11784928] * 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail Fri 2023-01-27 09:12:21.055: [11784928] * provider Fri 2023-01-27 09:12:21.055: [11784928] * [dohakkim[at]hanmail.net] Fri 2023-01-27 09:12:21.055: [11784928] * 0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts Fri 2023-01-27 09:12:21.055: [11784928] * 0.0 HTML_MESSAGE BODY: HTML included in message Fri 2023-01-27 09:12:21.055: [11784928] * 0.0 SPOOFED_FREEMAIL No description available. Fri 2023-01-27 09:12:21.055: [11784928] * 0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal Fri 2023-01-27 09:12:21.055: [11784928] * information Fri 2023-01-27 09:12:21.055: [11784928] ---- End SpamAssassin results Fri 2023-01-27 09:12:21.069: [11784928] Spam Filter score/req: 10.20/10.0 Fri 2023-01-27 09:12:21.069: [11784928] Message refused because spam score is too high Fri 2023-01-27 09:12:21.069: [11784928] --> 550-10 MDAEMON_OP_SPAM_HIGH MDaemon: spam/phish Fri 2023-01-27 09:12:21.069: [11784928] --> 550-0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail Fri 2023-01-27 09:12:21.069: [11784928] --> 550-provider Fri 2023-01-27 09:12:21.069: [11784928] --> 550-[dohakkim[at]hanmail.net] Fri 2023-01-27 09:12:21.069: [11784928] --> 550-0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts Fri 2023-01-27 09:12:21.069: [11784928] --> 550-0.0 HTML_MESSAGE BODY: HTML included in message Fri 2023-01-27 09:12:21.069: [11784928] --> 550-0.0 SPOOFED_FREEMAIL No description available. Fri 2023-01-27 09:12:21.069: [11784928] --> 550-0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal Fri 2023-01-27 09:12:21.069: [11784928] --> 550-information Fri 2023-01-27 09:12:21.070: [11784928] --> 550 5.6.0 Sorry, message looks like SPAM to me Fri 2023-01-27 09:12:21.070: [11784928] SMTP session terminated (Bytes in/out: 50808/4681) Salam, RUSNADI -- --[mdaemon-l]---------------------------------------------------------- Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette Arsip: http://mdaemon-l.dutaint.com Dokumentasi : http://mdaemon.dutaint.co.id Berlangganan: Kirim mail ke [email protected] Henti Langgan: Kirim mail ke [email protected] Versi terakhir: MDaemon 22.0.3, SecurityGateway 9.0
