On 8/16/24 16:06, Bambang Setiawan via Mdaemon-L wrote:
Mohon bantuannya jika pengiriman email bouncing seperti ini terjadi
masalah dimana ya pak ?
This is the mail system at host pmg.iforte.net.id.
<[email protected]>: host relayhost.dutaint.com[180.235.150.140] said:
550 5.7.0 Message rejected per DMARC policy for persada.id (in
reply to end
of DATA command)
Menurut smarthost pmg.iforte.net.id mail ditolak karena tidak sesuai
dengan DMARC policy domain persada.id.
<[email protected]>: host relayhost.dutaint.com[103.242.180.171] said:
550-0.2 BAYES_999 BODY: Bayes spam probability is 99.9 to 100% 550-[score:
1.0000] 550-5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
550-[score: 1.0000] 550-7.0 MDAEMON_OP_SPAM_HIGH MDaemon: spam/phish
550-0.0 HTML_MESSAGE BODY: HTML included in message 550-1.0
MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars 550--0.0
T_SCC_BODY_TEXT_LINE No description available. 550 5.6.0 Sorry, message
looks like SPAM to me (in reply to end of DATA command)
Tetapi tolakkan aslinya bukan karena DMARC melainkan (ditolak) karena
Spam Scorenya tinggi.
Sesuai dengan log di server relayhost.dutaint.com[103.242.180.171].
Sudah saya masukkan sender [email protected] kedalam antispam allow list by
sender.
Bisa minta sender resend mail yang ditolak tersebut.
Fri 2024-08-16 16:02:01.973: ----------
Fri 2024-08-16 16:01:50.356: [97716579] Session 97716579; child 0015
Fri 2024-08-16 16:01:50.356: [97716579] Accepting SMTP connection from
202.51.104.22:48447 to 103.242.180.171:25
Fri 2024-08-16 16:01:50.356: [97716579] Location Screen says connection is from
Indonesia, Asia
Fri 2024-08-16 16:01:50.356: [97716579] --> 220 dip71.dutaint.com ESMTP MDaemon
24.0.2; Fri, 16 Aug 2024 16:01:50 +0700
Fri 2024-08-16 16:01:50.364: [97716579] <-- EHLO pmg.iforte.net.id
Fri 2024-08-16 16:01:50.369: [97716579] --> 250-dip71.dutaint.com Hello
pmg.iforte.net.id [202.51.104.22], pleased to meet you
Fri 2024-08-16 16:01:50.369: [97716579] --> 250-ETRN
Fri 2024-08-16 16:01:50.369: [97716579] --> 250-8BITMIME
Fri 2024-08-16 16:01:50.369: [97716579] --> 250-ENHANCEDSTATUSCODES
Fri 2024-08-16 16:01:50.369: [97716579] --> 250-PIPELINING
Fri 2024-08-16 16:01:50.369: [97716579] --> 250-CHUNKING
Fri 2024-08-16 16:01:50.369: [97716579] --> 250-STARTTLS
Fri 2024-08-16 16:01:50.369: [97716579] --> 250 SIZE 41943040
Fri 2024-08-16 16:01:50.377: [97716579] <-- STARTTLS
Fri 2024-08-16 16:01:50.377: [97716579] --> 220 2.7.0 Ready to start TLS
Fri 2024-08-16 16:01:50.407: [97716579] SSL negotiation successful (TLS 1.2,
TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384)
Fri 2024-08-16 16:01:50.413: [97716579] <-- EHLO pmg.iforte.net.id
Fri 2024-08-16 16:01:50.415: [97716579] --> 250-dip71.dutaint.com Hello
pmg.iforte.net.id [202.51.104.22], pleased to meet you
Fri 2024-08-16 16:01:50.416: [97716579] --> 250-ETRN
Fri 2024-08-16 16:01:50.416: [97716579] --> 250-8BITMIME
Fri 2024-08-16 16:01:50.416: [97716579] --> 250-ENHANCEDSTATUSCODES
Fri 2024-08-16 16:01:50.416: [97716579] --> 250-PIPELINING
Fri 2024-08-16 16:01:50.416: [97716579] --> 250-CHUNKING
Fri 2024-08-16 16:01:50.416: [97716579] --> 250-REQUIRETLS
Fri 2024-08-16 16:01:50.416: [97716579] --> 250 SIZE 41943040
Fri 2024-08-16 16:01:50.420: [97716579] <-- MAIL
FROM:<[email protected]> SIZE=408319 BODY=8BITMIME
Fri 2024-08-16 16:01:50.436: [97716579] Performing PTR lookup
(22.104.51.202.IN-ADDR.ARPA)
Fri 2024-08-16 16:01:50.736: [97716579] * D=22.104.51.202.IN-ADDR.ARPA TTL=(60)
PTR=[pmg22.iforte.net.id]
Fri 2024-08-16 16:01:50.742: [97716579] * D=pmg22.iforte.net.id TTL=(60)
A=[202.51.104.22]
Fri 2024-08-16 16:01:50.742: [97716579] ---- End PTR results
Fri 2024-08-16 16:01:50.746: [97716579] Performing IP lookup (pmg.iforte.net.id)
Fri 2024-08-16 16:01:50.751: [97716579] * D=pmg.iforte.net.id TTL=(60)
A=[202.51.104.19]
Fri 2024-08-16 16:01:50.751: [97716579] ---- End IP lookup results
Fri 2024-08-16 16:01:50.764: [97716579] Performing IP lookup (persada.id)
Fri 2024-08-16 16:01:50.766: [97716579] * D=persada.id TTL=(221)
A=[103.150.114.157]
Fri 2024-08-16 16:01:50.767: [97716579] * P=000 S=000 D=persada.id TTL=(56)
MX=[mail.persada.id] {103.150.114.155}
Fri 2024-08-16 16:01:50.767: [97716579] ---- End IP lookup results
Fri 2024-08-16 16:01:50.770: [97716579] Performing SPF lookup (persada.id /
202.51.104.22)
Fri 2024-08-16 16:01:50.770: [97716579] * Policy (cache): v=spf1 +a +mx
+ip4:103.58.102.50 +a:mail.persada.id +ip4:103.150.114.155 +ip4:202.51.104.0/27
-all
Fri 2024-08-16 16:01:50.772: [97716579] * Evaluating +a: no match
Fri 2024-08-16 16:01:50.775: [97716579] * Evaluating +mx: no match
Fri 2024-08-16 16:01:50.775: [97716579] * Evaluating +ip4:103.58.102.50: no
match
Fri 2024-08-16 16:01:50.776: [97716579] * Evaluating +a:mail.persada.id: no
match
Fri 2024-08-16 16:01:50.776: [97716579] * Evaluating +ip4:103.150.114.155: no
match
Fri 2024-08-16 16:01:50.776: [97716579] * Evaluating +ip4:202.51.104.0/27: match
Fri 2024-08-16 16:01:50.776: [97716579] * Result: pass
Fri 2024-08-16 16:01:50.776: [97716579] ---- End SPF results
Fri 2024-08-16 16:01:50.776: [97716579] --> 250 2.1.0 Sender OK
Fri 2024-08-16 16:01:50.776: [97716579] <-- RCPT TO:<[email protected]>
Fri 2024-08-16 16:01:50.839: [97716579] * Gateway lookup
(mail.madhani.co.id:4069 for [email protected]) Result: 5 (email address
exists)
Fri 2024-08-16 16:01:50.840: [97716579] Performing DNS-BL lookup (202.51.104.22
- connecting IP)
Fri 2024-08-16 16:01:51.100: [97716579] * b.barracudacentral.org - passed
Fri 2024-08-16 16:01:59.948: [97716579] *
cf284322d6d1cd797b781cfdd4ad08b5.combined.mail.abusix.zone - passed
Fri 2024-08-16 16:01:59.948: [97716579] ---- End DNS-BL results
Fri 2024-08-16 16:01:59.956: [97716579] --> 250 2.1.5 Recipient OK
Fri 2024-08-16 16:01:59.956: [97716579] <-- DATA
Fri 2024-08-16 16:01:59.957: [97716579] --> 354 Enter mail, end with
<CRLF>.<CRLF>
Fri 2024-08-16 16:02:00.085: [97716579] Message size: 408318 bytes
Fri 2024-08-16 16:02:00.088: [97716579] Performing DKIM verification
Fri 2024-08-16 16:02:00.088: [97716579] * File:
f:\mdaemon\queues\temp\11\md5001000001378.tmp
Fri 2024-08-16 16:02:00.088: [97716579] * Message-ID:
<[email protected]>
Fri 2024-08-16 16:02:00.093: [97716579] * DKIM-Signature 1: v=1; a=rsa-sha256;
c=simple; d=persada.id; s=MDaemon; t=1723799317; x=1724404117; [email protected];
q=dns/txt; <some tags are not logged>
Fri 2024-08-16 16:02:00.093: [97716579] * Verification result:
DKIM_SELECTOR_DNS_PERM_FAILURE
Fri 2024-08-16 16:02:00.093: [97716579] * Result: neutral
Fri 2024-08-16 16:02:00.093: [97716579] ---- End DKIM results
Fri 2024-08-16 16:02:00.093: [97716579] Performing ARC verification
Fri 2024-08-16 16:02:00.093: [97716579] * File:
f:\mdaemon\queues\temp\11\md5001000001378.tmp
Fri 2024-08-16 16:02:00.093: [97716579] * Message-ID:
<[email protected]>
Fri 2024-08-16 16:02:00.093: [97716579] * ARC result: none
Fri 2024-08-16 16:02:00.093: [97716579] ---- End ARC results
Fri 2024-08-16 16:02:00.103: [97716579] Performing DMARC processing
Fri 2024-08-16 16:02:00.103: [97716579] * File:
f:\mdaemon\queues\temp\11\md5001000001378.tmp
Fri 2024-08-16 16:02:00.103: [97716579] * Message-ID:
<[email protected]>
Fri 2024-08-16 16:02:00.103: [97716579] * Author domain: persada.id
Fri 2024-08-16 16:02:00.103: [97716579] * Organizational domain: persada.id
Fri 2024-08-16 16:02:00.103: [97716579] * Query domain: _dmarc.persada.id
Fri 2024-08-16 16:02:00.104: [97716579] * Policy record (from cache): v=DMARC1;
p=reject; sp=none; aspf=s; rua=mailto:[email protected]
Fri 2024-08-16 16:02:00.115: [97716579] * Checking authentication mechanisms
for DMARC alignment
Fri 2024-08-16 16:02:00.115: [97716579] * SPF: domain "persada.id" passed SPF
check; and domain is DMARC aligned
Fri 2024-08-16 16:02:00.118: [97716579] * DKIM: domain "persada.id" (from d= of
signature #1) failed verification
Fri 2024-08-16 16:02:00.118: [97716579] * Result: pass
Fri 2024-08-16 16:02:00.118: [97716579] ---- End DMARC results
Fri 2024-08-16 16:02:00.120: [97716579] Passing message through AntiVirus
(Size: 408318)...
Fri 2024-08-16 16:02:00.569: [97716579] * Message is clean (no viruses found)
scanned by (IKARUS: clean (0.21701s))
Fri 2024-08-16 16:02:00.569: [97716579] ---- End AntiVirus results
Fri 2024-08-16 16:02:01.371: [97716579] Passing message through Outbreak
Protection...
Fri 2024-08-16 16:02:01.371: [97716579] * Message-ID:
<[email protected]>
Fri 2024-08-16 16:02:01.371: [97716579] * Reference-ID:
str=0001.0A682F24.66BF1033.0087,ss=4,sh,re=0.000,recu=0.000,reip=0.000,cl=4,cld=1,fgs=8
Fri 2024-08-16 16:02:01.371: [97716579] * Virus result: 0 - Clean
Fri 2024-08-16 16:02:01.371: [97716579] * Spam result: 4 - Spam (confirmed)
Fri 2024-08-16 16:02:01.371: [97716579] * IWF result: 0 - Clean
Fri 2024-08-16 16:02:01.371: [97716579] ---- End Outbreak Protection results
Fri 2024-08-16 16:02:01.372: [97716579] Passing message through Spam Filter
(Size: 408318)...
Fri 2024-08-16 16:02:01.978: [97716579] * 0.2 BAYES_999 BODY: Bayes spam
probability is 99.9 to 100%
Fri 2024-08-16 16:02:01.978: [97716579] * [score: 1.0000]
Fri 2024-08-16 16:02:01.978: [97716579] * 5.0 BAYES_99 BODY: Bayes spam
probability is 99 to 100%
Fri 2024-08-16 16:02:01.978: [97716579] * [score: 1.0000]
Fri 2024-08-16 16:02:01.978: [97716579] * 7.0 MDAEMON_OP_SPAM_HIGH MDaemon:
spam/phish
Fri 2024-08-16 16:02:01.978: [97716579] * 0.0 HTML_MESSAGE BODY: HTML included
in message
Fri 2024-08-16 16:02:01.978: [97716579] * 1.0 MIME_QP_LONG_LINE RAW:
Quoted-printable line longer than 76 chars
Fri 2024-08-16 16:02:01.978: [97716579] * -0.0 T_SCC_BODY_TEXT_LINE No
description available.
Fri 2024-08-16 16:02:01.978: [97716579] * 1.0 KHOP_HELO_FCRDNS Relay HELO
differs from its IP's reverse DNS
Fri 2024-08-16 16:02:01.978: [97716579] ---- End SpamAssassin results
Fri 2024-08-16 16:02:01.978: [97716579] Spam Filter score/req: 14.20/12.0
Fri 2024-08-16 16:02:01.978: [97716579] Message refused because spam score is
too high
Fri 2024-08-16 16:02:01.979: [97716579] --> 550-0.2 BAYES_999 BODY: Bayes spam
probability is 99.9 to 100%
Fri 2024-08-16 16:02:01.979: [97716579] --> 550-[score: 1.0000]
Fri 2024-08-16 16:02:01.979: [97716579] --> 550-5.0 BAYES_99 BODY: Bayes spam
probability is 99 to 100%
Fri 2024-08-16 16:02:01.979: [97716579] --> 550-[score: 1.0000]
Fri 2024-08-16 16:02:01.979: [97716579] --> 550-7.0 MDAEMON_OP_SPAM_HIGH
MDaemon: spam/phish
Fri 2024-08-16 16:02:01.979: [97716579] --> 550-0.0 HTML_MESSAGE BODY: HTML
included in message
Fri 2024-08-16 16:02:01.979: [97716579] --> 550-1.0 MIME_QP_LONG_LINE RAW:
Quoted-printable line longer than 76 chars
Fri 2024-08-16 16:02:01.979: [97716579] --> 550--0.0 T_SCC_BODY_TEXT_LINE No
description available.
Fri 2024-08-16 16:02:01.979: [97716579] --> 550-1.0 KHOP_HELO_FCRDNS Relay HELO
differs from its IP's reverse DNS
Fri 2024-08-16 16:02:01.980: [97716579] --> 550 5.6.0 Sorry, message looks like
SPAM to me
Fri 2024-08-16 16:02:01.981: [97716579] SMTP session terminated (Bytes in/out:
411261/4664)
Fri 2024-08-16 16:02:01.982: ----------
--
syafril
--------
Syafril Hermansyah
MDaemon-L Moderators, running MDaemon 24.0.2
Harap tidak cc: atau kirim ke private mail untuk masalah MDaemon.
We do not remember days, we remember moments.
--- Cesare Pavese
--
--[mdaemon-l]----------------------------------------------------------
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia
Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.com
Berlangganan: Kirim mail ke [email protected]
Henti Langgan: Kirim mail ke [email protected]
Versi terakhir: MDaemon 24.0.2, SecurityGateway 10.0.3
