On 11/5/24 16:19, mauritz devis wrote:
Mohon bantuannya pak, atas error 550 5.7.1 DMARC Alignment check failed.


Your message couldn't be delivered to multiple recipients.
mncgroup.com couldn't confirm that your message was sent from a trusted 
location.
suci    Office 365      Recipients
Action Required         Recipients
                                
SPF validation error

Error Details
Error:  550 5.7.23 The message was rejected because of Sender Policy Framework 
violation -> 550 5.7.1 DMARC Alignment check failed. Discarding message as per 
sender DMARC policy recommendation.


Ini misleading error.
Disampaikan bahwa mail ditolak karena DMARC alignment SPF sender domain musica-studios.co.id failed.

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass (sender ip is
 27.123.220.179) smtp.rcpttodomain=mncgroup.com
 smtp.mailfrom=musica-studios.co.id; dmarc=pass (p=reject sp=none pct=100)
 action=none header.from=musica-studios.co.id; dkim=fail (signature did not
 verify) header.d=musica-studios.co.id; arc=none (0)

Authentication-Results: spf=pass (sender IP is 27.123.220.179)
 smtp.mailfrom=musica-studios.co.id; dkim=fail (signature did not verify)
 header.d=musica-studios.co.id;dmarc=pass action=none
 header.from=musica-studios.co.id;compauth=pass reason=100


padahal yang failed itu DKIM bukan SPF.

Padahal DKIM signing dan DNS DKIM domain musica-studios.co.id ada dan valid, walau masih pakai versi 32-bit.

Coba test lagi SPF/DKIM/DMARC dengan kirim mail dari domain musica-studios.co.id kesini

https://www.appmaildev.com/en/dkim/

jika ternyata hasilnya OK, maka mungkin server ps2pr02ca0012.outlook.office365.com sedang error, jadi boleh saja dikirim ulang (resend).

Pilihan lain, upgrade DKIM key nya ke 64 bit dengan generate ulang DKIM key

https://mdaemon.dutaint.co.id/mdaemon/24.5.0/security--dkim_sign.html

dan update DNS DKIM record menggunakan \\mdaemon\PEM\MDaemon\dns_readme.txt







--
syafril
--------
Syafril Hermansyah
MDaemon-L Moderators, running MDaemon 24.5.1 Beta B
Harap tidak cc: atau kirim ke private mail untuk masalah MDaemon.

Tell me and I forget. Teach me and I remember. Involve me and I learn.
        --- Benjamin Franklin


--
--[mdaemon-l]----------------------------------------------------------
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.com
Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com
Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com
Versi terakhir: MDaemon 24.5.0, SecurityGateway 10.5.0



Kirim email ke