Selamat siang pak,

Saya sedang menunggu email dari Sectigo untuk aktivasi SSL yg baru yg dikirm 
ke akun [email protected]
Namun tenyata email tidak bisa masuk karena kena rejected DMARC Policy.

Berikut log nya :

Wed 2023-04-26 08:28:59.462: ----------
Wed 2023-04-26 08:29:16.754: [28287144] Session 28287144; child 0013
Wed 2023-04-26 08:29:16.754: [28287144] Accepting SMTP connection from 
91.209.196.133:49727 to 172.16.200.2:25
Wed 2023-04-26 08:29:16.754: [28287144] Location Screen says connection is 
from United Kingdom, Europe
Wed 2023-04-26 08:29:16.755: [28287144] --> 220 mail2.equity.id ESMTP 
MDaemon 23.0.1; Wed, 26 Apr 2023 08:29:16 +0700
Wed 2023-04-26 08:29:16.939: [28287144] <-- EHLO msmail6.mcr.dc.comodoca.net
Wed 2023-04-26 08:29:16.939: [28287144] --> 250-mail2.equity.id Hello 
msmail6.mcr.dc.comodoca.net [91.209.196.133], pleased to meet you
Wed 2023-04-26 08:29:16.939: [28287144] --> 250-ETRN
Wed 2023-04-26 08:29:16.939: [28287144] Location Screening hiding AUTH from 
country United Kingdom, Europe
Wed 2023-04-26 08:29:16.939: [28287144] --> 250-8BITMIME
Wed 2023-04-26 08:29:16.939: [28287144] --> 250-ENHANCEDSTATUSCODES
Wed 2023-04-26 08:29:16.939: [28287144] --> 250-PIPELINING
Wed 2023-04-26 08:29:16.939: [28287144] --> 250-CHUNKING
Wed 2023-04-26 08:29:16.939: [28287144] --> 250-STARTTLS
Wed 2023-04-26 08:29:16.940: [28287144] --> 250 SIZE 41943040
Wed 2023-04-26 08:29:17.124: [28287144] <-- STARTTLS
Wed 2023-04-26 08:29:17.124: [28287144] --> 220 2.7.0 Ready to start TLS
Wed 2023-04-26 08:29:17.532: [28287144] SSL negotiation successful (TLS 1.2, 
TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P521)
Wed 2023-04-26 08:29:17.716: [28287144] <-- EHLO msmail6.mcr.dc.comodoca.net
Wed 2023-04-26 08:29:17.716: [28287144] --> 250-mail2.equity.id Hello 
msmail6.mcr.dc.comodoca.net [91.209.196.133], pleased to meet you
Wed 2023-04-26 08:29:17.716: [28287144] --> 250-ETRN
Wed 2023-04-26 08:29:17.716: [28287144] Location Screening hiding AUTH from 
country United Kingdom, Europe
Wed 2023-04-26 08:29:17.716: [28287144] --> 250-8BITMIME
Wed 2023-04-26 08:29:17.716: [28287144] --> 250-ENHANCEDSTATUSCODES
Wed 2023-04-26 08:29:17.716: [28287144] --> 250-PIPELINING
Wed 2023-04-26 08:29:17.716: [28287144] --> 250-CHUNKING
Wed 2023-04-26 08:29:17.716: [28287144] --> 250-REQUIRETLS
Wed 2023-04-26 08:29:17.716: [28287144] --> 250 SIZE 41943040
Wed 2023-04-26 08:29:17.901: [28287144] <-- MAIL 
FROM:<[email protected]> SIZE=5536 BODY=8BITMIME
Wed 2023-04-26 08:29:17.914: [28287144] Performing PTR lookup 
(133.196.209.91.IN-ADDR.ARPA)
Wed 2023-04-26 08:29:19.410: [28287144] *  D=133.196.209.91.in-addr.arpa 
TTL=(1413) PTR=[opsmail.colo.comodo.com]
Wed 2023-04-26 08:29:19.412: [28287144] *  D=opsmail.colo.comodo.com TTL=(0) 
A=[91.209.196.133]
Wed 2023-04-26 08:29:19.412: [28287144] ---- End PTR results
Wed 2023-04-26 08:29:19.415: [28287144] Performing IP lookup 
(msmail6.mcr.dc.comodoca.net)
Wed 2023-04-26 08:29:19.416: [28287144] *  D=msmail6.mcr.dc.comodoca.net 
TTL=(40) A=[91.209.196.133]
Wed 2023-04-26 08:29:19.416: [28287144] ---- End IP lookup results
Wed 2023-04-26 08:29:19.422: [28287144] Performing IP lookup 
(trust-provider.com)
Wed 2023-04-26 08:29:19.424: [28287144] *  D=trust-provider.com TTL=(0) 
A=[91.199.212.148]
Wed 2023-04-26 08:29:19.425: [28287144] *  P=010 S=000 D=trust-provider.com 
TTL=(0) MX=[custmx.cscdns.net]
Wed 2023-04-26 08:29:19.426: [28287144] *  D=custmx.cscdns.net TTL=(453) 
A=[198.58.121.58]
Wed 2023-04-26 08:29:19.426: [28287144] ---- End IP lookup results
Wed 2023-04-26 08:29:19.427: [28287144] Performing SPF lookup 
(msmail6.mcr.dc.comodoca.net / 91.209.196.133)
Wed 2023-04-26 08:29:19.427: [28287144] *  Policy (cache): v=spf1 a 
wlinclude:relayhost.dutaint.com -all
Wed 2023-04-26 08:29:19.429: [28287144] *  Evaluating a: match
Wed 2023-04-26 08:29:19.429: [28287144] *  Result: pass
Wed 2023-04-26 08:29:19.429: [28287144] ---- End SPF results
Wed 2023-04-26 08:29:19.429: [28287144] Performing SPF lookup 
(trust-provider.com / 91.209.196.133)
Wed 2023-04-26 08:29:19.430: [28287144] *  Policy: v=spf1 mx 
ip4:91.199.212.141/32 ip4:91.199.212.133/32 ip4:91.212.12.133/32 
ip4:91.209.196.133/32 ip6:2a0e:ac00:211:8088::/64 
ip6:2a0e:ac00:231:8088::/64 ip6:2a0e:ac00:211:8083::/64 
ip6:2a0e:ac00:231:8083::/64 wlinclude:relayhost.dutai
Wed 2023-04-26 08:29:19.433: [28287144] *  Evaluating mx: no match
Wed 2023-04-26 08:29:19.433: [28287144] *  Evaluating ip4:91.199.212.141/32: 
no match
Wed 2023-04-26 08:29:19.433: [28287144] *  Evaluating ip4:91.199.212.133/32: 
no match
Wed 2023-04-26 08:29:19.433: [28287144] *  Evaluating ip4:91.212.12.133/32: 
no match
Wed 2023-04-26 08:29:19.433: [28287144] *  Evaluating ip4:91.209.196.133/32: 
match
Wed 2023-04-26 08:29:19.433: [28287144] *  Result: pass
Wed 2023-04-26 08:29:19.433: [28287144] ---- End SPF results
Wed 2023-04-26 08:29:19.433: [28287144] --> 250 2.1.0 Sender OK
Wed 2023-04-26 08:29:19.433: [28287144] <-- RCPT TO:<[email protected]>
Wed 2023-04-26 08:29:19.436: [28287144] Performing DNS-BL lookup 
(91.209.196.133 - connecting IP)
Wed 2023-04-26 08:29:19.771: [28287144] *  cbl.abuseat.org - passed
Wed 2023-04-26 08:29:19.992: [28287144] *  b.barracudacentral.org - passed
Wed 2023-04-26 08:29:20.034: [28287144] *  zen.spamhaus.org - passed
Wed 2023-04-26 08:29:20.034: [28287144] ---- End DNS-BL results
Wed 2023-04-26 08:29:20.036: [28287144] --> 250 2.1.5 Recipient OK
Wed 2023-04-26 08:29:20.220: [28287144] <-- DATA
Wed 2023-04-26 08:29:20.222: [28287144] --> 354 Enter mail, end with 
<CRLF>.<CRLF>
Wed 2023-04-26 08:29:20.590: [28287144] Message size: 5654 bytes
Wed 2023-04-26 08:29:20.591: [28287144] Performing DKIM verification
Wed 2023-04-26 08:29:20.591: [28287144] *  File: 
d:\mdaemon\queues\temp\51\md5001000000047.tmp
Wed 2023-04-26 08:29:20.591: [28287144] *  Message-ID: n/a
Wed 2023-04-26 08:29:20.838: [28287144] * DKIM-Signature 1: v=1; 
a=rsa-sha256; c=relaxed; d=trust-provider.com; s=smail; <some tags are not 
logged>
Wed 2023-04-26 08:29:20.838: [28287144] *    Verification result: good 
signature
Wed 2023-04-26 08:29:20.838: [28287144] *  Result: pass
Wed 2023-04-26 08:29:20.838: [28287144] ---- End DKIM results
Wed 2023-04-26 08:29:20.845: [28287144] Performing DMARC processing
Wed 2023-04-26 08:29:20.845: [28287144] *  File: 
d:\mdaemon\queues\temp\51\md5001000000047.tmp
Wed 2023-04-26 08:29:20.845: [28287144] *  Message-ID: n/a
Wed 2023-04-26 08:29:20.845: [28287144] *  Author domain: sectigo.com
Wed 2023-04-26 08:29:20.845: [28287144] *  Organizational domain: 
sectigo.com
Wed 2023-04-26 08:29:20.845: [28287144] *  Query domain: _dmarc.sectigo.com
Wed 2023-04-26 08:29:21.019: [28287144] *    Policy record: v=DMARC1; 
p=reject; 
rua=mailto:[email protected],mailto:[email protected];
 
ruf=mailto:[email protected]; fo=1;
Wed 2023-04-26 08:29:21.026: [28287144] *  Verifying report recipient: 
[email protected]
Wed 2023-04-26 08:29:21.026: [28287144] *  Query domain: 
sectigo.com._report._dmarc.comodoca.net
Wed 2023-04-26 08:29:23.954: [28287144] *    Policy record: v=DMARC1
Wed 2023-04-26 08:29:23.954: [28287144] *    Recipient 
[email protected] is verified
Wed 2023-04-26 08:29:23.961: [28287144] *  Verifying report recipient: 
[email protected]
Wed 2023-04-26 08:29:23.961: [28287144] *  Query domain: 
sectigo.com._report._dmarc.securemailanalytics.com
Wed 2023-04-26 08:29:24.310: [28287144] *    No DMARC policy record found; 
recipient discarded
Wed 2023-04-26 08:29:24.317: [28287144] *  Verifying report recipient: 
[email protected]
Wed 2023-04-26 08:29:24.317: [28287144] *  Query domain: 
sectigo.com._report._dmarc.securemailanalytics.com
Wed 2023-04-26 08:29:24.534: [28287144] *    No DMARC policy record found; 
recipient discarded
Wed 2023-04-26 08:29:24.534: [28287144] *  Checking authentication 
mechanisms for DMARC alignment
Wed 2023-04-26 08:29:24.540: [28287144] *    SPF: domain 
"trust-provider.com" passed SPF check; but domain is not DMARC aligned
Wed 2023-04-26 08:29:24.546: [28287144] *    DKIM: domain 
"trust-provider.com" (from d= of signature #1) verified; but domain is not 
DMARC aligned
Wed 2023-04-26 08:29:24.546: [28287144] *  Action taken: reject
Wed 2023-04-26 08:29:24.546: [28287144] *  Result: fail
Wed 2023-04-26 08:29:24.546: [28287144] ---- End DMARC results
Wed 2023-04-26 08:29:24.546: [28287144] --> 550 5.7.0 Message rejected per 
DMARC policy for sectigo.com
Wed 2023-04-26 08:29:24.547: [28287144] SMTP session terminated (Bytes 
in/out: 7143/4894)
Wed 2023-04-26 08:29:24.548: ----------

Mohon solusi nya atas kasus ini.


Salam,
ari
-- 
--[mdaemon-l]----------------------------------------------------------
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Berlangganan: Kirim mail ke [email protected]
Henti Langgan: Kirim mail ke [email protected]
Versi terakhir: MDaemon 23.0.1, SecurityGateway 9.0.2

Kirim email ke