[Mdaemon-L] Socket error 10054 - Connection was reset by the other side!

[Bambang Setiawan via Mdaemon-L]

Dear Pak Syafril,


Mohon bantuannya untuk log terlampir kenapa ya pak ?


Thu 2024-05-30 16:29:47.642: --
Thu 2024-05-30 16:23:28.422: [49631763] REMOTE message: pd3501001761996.msg
Thu 2024-05-30 16:23:28.422: [49631763] *  Session 49631763; child 0003
Thu 2024-05-30 16:23:28.423: [49631763] *  From: luhur.pramb...@persada.id
Thu 2024-05-30 16:23:28.423: [49631763] *  To: atok.nurul@huawei.com
Thu 2024-05-30 16:23:28.423: [49631763] *  Subject: 
PM_MARET_2024_16SBY0259_MSC SURABAYA2 HS_FM200_SOFTCOPY
Thu 2024-05-30 16:23:28.423: [49631763] *  Message-ID: 
<000e01dab271$f8a08950$e9e19bf0$@persada.id>
Thu 2024-05-30 16:23:28.423: [49631763] *  Size: 17669083; 


Thu 2024-05-30 16:23:28.423: [49631763] *  Route slip host: huawei.com
Thu 2024-05-30 16:23:28.424: [49631763] *  Route slip port: 25
Thu 2024-05-30 16:23:28.432: [49631763] Resolving MX record for 
huawei.com (DNS Server: 203.119.13.77)...
Thu 2024-05-30 16:23:28.435: [49631763] *  P=010 S=003 D=huawei.com 
TTL=(3) MX=[mx5.huawei.com]
Thu 2024-05-30 16:23:28.435: [49631763] *  P=020 S=001 D=huawei.com 
TTL=(3) MX=[mx8.his.huawei.com]
Thu 2024-05-30 16:23:28.435: [49631763] *  P=030 S=000 D=huawei.com 
TTL=(3) MX=[mx7.huawei.com]
Thu 2024-05-30 16:23:28.435: [49631763] *  P=030 S=002 D=huawei.com 
TTL=(3) MX=[mx9.his.huawei.com]
Thu 2024-05-30 16:23:28.435: [49631763] Attempting SMTP connection to 
mx5.huawei.com
Thu 2024-05-30 16:23:28.435: [49631763] Resolving A record for 
mx5.huawei.com (DNS Server: 203.119.13.77)...
Thu 2024-05-30 16:23:28.438: [49631763] *  D=mx5.huawei.com TTL=(3) 
A=[124.71.93.234]
Thu 2024-05-30 16:23:28.438: [49631763] Attempting SMTP connection to 
124.71.93.234:25

Thu 2024-05-30 16:23:28.438: [49631763] Waiting for socket connection...
Thu 2024-05-30 16:23:31.594: [49631763] *  Connection established 
103.150.114.155:50304 --> 124.71.93.234:25

Thu 2024-05-30 16:23:31.594: [49631763] Waiting for protocol to start...
Thu 2024-05-30 16:23:34.935: [49631763] <-- 220 Welcome to access Huawei 
SMTP service!

Thu 2024-05-30 16:23:34.937: [49631763] --> EHLO mail.persada.id
Thu 2024-05-30 16:23:35.091: [49631763] <-- 250-canpmsg-in
Thu 2024-05-30 16:23:35.091: [49631763] <-- 250-SIZE 41943040
Thu 2024-05-30 16:23:35.091: [49631763] <-- 250-STARTTLS
Thu 2024-05-30 16:23:35.091: [49631763] <-- 250-AUTH PLAIN LOGIN
Thu 2024-05-30 16:23:35.091: [49631763] <-- 250-ENHANCEDSTATUSCODES
Thu 2024-05-30 16:23:35.091: [49631763] <-- 250-8BITMIME
Thu 2024-05-30 16:23:35.091: [49631763] <-- 250 SMTPUTF8
Thu 2024-05-30 16:23:35.091: [49631763] --> STARTTLS
Thu 2024-05-30 16:23:35.246: [49631763] <-- 220 2.0.0 Ready to start TLS
Thu 2024-05-30 16:23:35.562: [49631763] SSL negotiation successful (TLS 
1.2, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384)
Thu 2024-05-30 16:23:35.566: [49631763] SSL certificate is not valid 
(not signed by recognized CA)

Thu 2024-05-30 16:23:35.566: [49631763] --> EHLO mail.persada.id
Thu 2024-05-30 16:23:38.612: [49631763] <-- 250-canpmsg-in
Thu 2024-05-30 16:23:38.612: [49631763] <-- 250-SIZE 41943040
Thu 2024-05-30 16:23:38.612: [49631763] <-- 250-AUTH PLAIN LOGIN
Thu 2024-05-30 16:23:38.612: [49631763] <-- 250-ENHANCEDSTATUSCODES
Thu 2024-05-30 16:23:38.612: [49631763] <-- 250-8BITMIME
Thu 2024-05-30 16:23:38.612: [49631763] <-- 250 SMTPUTF8
Thu 2024-05-30 16:23:38.612: [49631763] --> MAIL 
From: SIZE=17669083

Thu 2024-05-30 16:23:43.615: [49631763] <-- 250 2.1.0 Ok
Thu 2024-05-30 16:23:43.615: [49631763] --> RCPT 
To:

Thu 2024-05-30 16:27:27.435: [49631763] <-- 250 2.1.5 Ok
Thu 2024-05-30 16:27:27.435: [49631763] --> RCPT 
To:

Thu 2024-05-30 16:28:29.592: [49631763] <-- 250 2.1.5 Ok
Thu 2024-05-30 16:28:29.592: [49631763] --> DATA
Thu 2024-05-30 16:29:29.940: [49631763] <-- 354 End data with 
.
Thu 2024-05-30 16:29:29.940: [49631763] Sending 
 to [124.71.93.234]
Thu 2024-05-30 16:30:06.074: [49631763] *  Socket error 10054 - 
Connection was reset by the other side!

Thu 2024-05-30 16:30:06.074: [49631763] Error writing to socket
Thu 2024-05-30 16:30:06.074: [49631763] Socket connection closed by the 
other side (how rude!)
Thu 2024-05-30 16:30:06.074: [49631763] *  Socket error 10053 - 
Connection abort.

Thu 2024-05-30 16:30:06.074: [49631763] Connection closed
Thu 2024-05-30 16:30:06.075: [49631763] *  This message is 6 minutes 
old; it has 54 minutes left in this queue

Thu 2024-05-30 16:30:06.075: --


Atas bantuannya diucapkan terima kasih.


Salam.

--
--[mdaemon-l]--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.com
Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com
Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com
Versi terakhir: MDaemon 24.0.0, SecurityGateway 10.0.0

[Mdaemon-L] DNS server reports domain name unknown

[Bambang Setiawan via Mdaemon-L]

Dear Pak Sfaril,


Sebelumnya saya ucapkan Selamat hari Raya Idul Fitri, mohon maaf lahir 
dan bathin.


Mohon bantuannya untuk log berikut ya pak :


Thu 2024-04-18 21:10:06.028: --
Thu 2024-04-18 21:10:18.941: [48643531] Session 48643531; child 0001
Thu 2024-04-18 21:10:18.941: [48643531] Accepting SMTP connection from 
103.153.60.66:60750 to 103.150.114.155:25
Thu 2024-04-18 21:10:18.941: [48643531] Location Screen says connection 
is from Indonesia, Asia
Thu 2024-04-18 21:10:18.942: [48643531] --> 220 mail.persada.id ESMTP 
MDaemon 23.5.3; Thu, 18 Apr 2024 21:10:18 +0700

Thu 2024-04-18 21:10:18.945: [48643531] <-- EHLO mail.rajacorp.co.id
Thu 2024-04-18 21:10:18.945: [48643531] --> 250-mail.persada.id Hello 
mail.rajacorp.co.id [103.153.60.66], pleased to meet you

Thu 2024-04-18 21:10:18.945: [48643531] --> 250-ETRN
Thu 2024-04-18 21:10:18.945: [48643531] --> 250-8BITMIME
Thu 2024-04-18 21:10:18.945: [48643531] --> 250-ENHANCEDSTATUSCODES
Thu 2024-04-18 21:10:18.945: [48643531] --> 250-PIPELINING
Thu 2024-04-18 21:10:18.945: [48643531] --> 250-CHUNKING
Thu 2024-04-18 21:10:18.945: [48643531] --> 250-STARTTLS
Thu 2024-04-18 21:10:18.945: [48643531] --> 250 SIZE
Thu 2024-04-18 21:10:18.948: [48643531] <-- STARTTLS
Thu 2024-04-18 21:10:18.948: [48643531] --> 220 2.7.0 Ready to start TLS
Thu 2024-04-18 21:10:18.979: [48643531] SSL negotiation successful (TLS 
1.2, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384)

Thu 2024-04-18 21:10:18.982: [48643531] <-- EHLO mail.rajacorp.co.id
Thu 2024-04-18 21:10:18.982: [48643531] --> 250-mail.persada.id Hello 
mail.rajacorp.co.id [103.153.60.66], pleased to meet you

Thu 2024-04-18 21:10:18.982: [48643531] --> 250-ETRN
Thu 2024-04-18 21:10:18.982: [48643531] --> 250-8BITMIME
Thu 2024-04-18 21:10:18.982: [48643531] --> 250-ENHANCEDSTATUSCODES
Thu 2024-04-18 21:10:18.982: [48643531] --> 250-PIPELINING
Thu 2024-04-18 21:10:18.982: [48643531] --> 250-CHUNKING
Thu 2024-04-18 21:10:18.982: [48643531] --> 250-REQUIRETLS
Thu 2024-04-18 21:10:18.982: [48643531] --> 250 SIZE
Thu 2024-04-18 21:10:18.985: [48643531] <-- MAIL 
FROM: SIZE=71635
Thu 2024-04-18 21:10:18.997: [48643531] Performing PTR lookup 
(66.60.153.103.IN-ADDR.ARPA)
Thu 2024-04-18 21:10:19.092: [48643531] * D=66.60.153.103.IN-ADDR.ARPA 
TTL=(60) PTR=[mail.rajamebel.id]
Thu 2024-04-18 21:10:19.092: [48643531] * D=66.60.153.103.IN-ADDR.ARPA 
TTL=(60) PTR=[mail.kudogroup.id]
Thu 2024-04-18 21:10:19.092: [48643531] * D=66.60.153.103.IN-ADDR.ARPA 
TTL=(60) PTR=[mail.ayooportal.com]
Thu 2024-04-18 21:10:19.092: [48643531] * D=66.60.153.103.IN-ADDR.ARPA 
TTL=(60) PTR=[mail.hipmijakbar.org]
Thu 2024-04-18 21:10:19.092: [48643531] * D=66.60.153.103.IN-ADDR.ARPA 
TTL=(60) PTR=[mail.samuraigroup.co.id]
Thu 2024-04-18 21:10:19.092: [48643531] * D=66.60.153.103.IN-ADDR.ARPA 
TTL=(60) PTR=[mail.sinergicorp.co.id]
Thu 2024-04-18 21:10:19.092: [48643531] * D=66.60.153.103.IN-ADDR.ARPA 
TTL=(60) PTR=[mail.rajagrosir.co.id]
Thu 2024-04-18 21:10:19.092: [48643531] * D=66.60.153.103.IN-ADDR.ARPA 
TTL=(60) PTR=[mail.notarisirawan.com]
Thu 2024-04-18 21:10:19.092: [48643531] * D=66.60.153.103.IN-ADDR.ARPA 
TTL=(60) PTR=[mail.chickachick.id]
Thu 2024-04-18 21:10:19.092: [48643531] * D=66.60.153.103.IN-ADDR.ARPA 
TTL=(60) PTR=[mail.rantaimasgroup.co.id]
Thu 2024-04-18 21:10:19.092: [48643531] * D=66.60.153.103.IN-ADDR.ARPA 
TTL=(60) PTR=[mail.airmasgroup.co.id]
Thu 2024-04-18 21:10:19.092: [48643531] * D=66.60.153.103.IN-ADDR.ARPA 
TTL=(60) PTR=[mail.ayookopi.com]
Thu 2024-04-18 21:10:19.092: [48643531] * D=66.60.153.103.IN-ADDR.ARPA 
TTL=(60) PTR=[mail.tokotintaasli.com]
Thu 2024-04-18 21:10:19.092: [48643531] * D=66.60.153.103.IN-ADDR.ARPA 
TTL=(60) PTR=[mail.ammob.co.id]
Thu 2024-04-18 21:10:19.092: [48643531] * D=66.60.153.103.IN-ADDR.ARPA 
TTL=(60) PTR=[mail.rajakurir.co]
Thu 2024-04-18 21:10:19.092: [48643531] * D=66.60.153.103.IN-ADDR.ARPA 
TTL=(60) PTR=[mail.airmascorp.id]
Thu 2024-04-18 21:10:19.092: [48643531] * D=66.60.153.103.IN-ADDR.ARPA 
TTL=(60) PTR=[mail.pilarmasmegah.id]
Thu 2024-04-18 21:10:19.092: [48643531] * D=66.60.153.103.IN-ADDR.ARPA 
TTL=(60) PTR=[mail.kreasicorp.com]
Thu 2024-04-18 21:10:19.092: [48643531] * D=66.60.153.103.IN-ADDR.ARPA 
TTL=(60) PTR=[mail.rajastore.id]
Thu 2024-04-18 21:10:19.092: [48643531] * D=66.60.153.103.IN-ADDR.ARPA 
TTL=(60) PTR=[srv.airmasgroup.com]
Thu 2024-04-18 21:10:19.092: [48643531] * D=66.60.153.103.IN-ADDR.ARPA 
TTL=(60) PTR=[mail.rajatravel.id]
Thu 2024-04-18 21:10:19.092: [48643531] * D=66.60.153.103.IN-ADDR.ARPA 
TTL=(60) PTR=[mail.hutanmas.com]
Thu 2024-04-18 21:10:19.092: [48643531] * D=66.60.153.103.IN-ADDR.ARPA 
TTL=(60) PTR=[mail.smscorp.id]
Thu 2024-04-18 21:10:19.092: [48643531] * D=66.60.153.103.IN-ADDR.ARPA 
TTL=(60) PTR=[mail.rantaimasmebelindo.co.id]
Thu 2024-04-18 21:10:19.092: [48643531] * D=66.60.153.103.IN-ADDR.ARPA 
TTL=(60) PTR=[mail.airmasgroup.com]
Thu 2024-04-18 21:10:19.092: [48643531] * D=66.60.153.103.IN-ADDR.ARPA 
TTL=(60) PTR=[mail.amsol.id]
Thu 

[Mdaemon-L] Authentication does not match address found in FROM header

[Bambang Setiawan via Mdaemon-L]

Dear Pak Syafril,

 

Mohon bantuannya untuk error log terlampir pak.

 

Fri 2024-01-19 10:28:52.053: 01: --

Fri 2024-01-19 10:28:52.301: 05: [4614] Session 4614; child 0002

Fri 2024-01-19 10:28:52.301: 05: [4614] Accepting SMTP connection from
103.247.218.37:64464 to 103.150.114.155:587

Fri 2024-01-19 10:28:52.301: 07: [4614] Location Screen says connection
is from Indonesia, Asia

Fri 2024-01-19 10:28:52.303: 03: [4614] --> 220 mail.persada.id ESMTP
MSA MDaemon 23.5.1; Fri, 19 Jan 2024 10:28:52 +0700

Fri 2024-01-19 10:28:52.321: 02: [4614] <-- EHLO DESKTOPN00RCUV

Fri 2024-01-19 10:28:52.321: 03: [4614] --> 250-mail.persada.id Hello
DESKTOPN00RCUV [103.247.218.37], pleased to meet you

Fri 2024-01-19 10:28:52.321: 03: [4614] --> 250-8BITMIME

Fri 2024-01-19 10:28:52.321: 03: [4614] --> 250-ENHANCEDSTATUSCODES

Fri 2024-01-19 10:28:52.321: 03: [4614] --> 250-PIPELINING

Fri 2024-01-19 10:28:52.321: 03: [4614] --> 250-CHUNKING

Fri 2024-01-19 10:28:52.321: 03: [4614] --> 250-STARTTLS

Fri 2024-01-19 10:28:52.321: 03: [4614] --> 250 SIZE

Fri 2024-01-19 10:28:52.330: 02: [4614] <-- STARTTLS

Fri 2024-01-19 10:28:52.330: 03: [4614] --> 220 2.7.0 Ready to start TLS

Fri 2024-01-19 10:28:52.372: 01: [4614] SSL negotiation successful (TLS
1.2, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384)

Fri 2024-01-19 10:28:52.410: 02: [4614] <-- EHLO DESKTOPN00RCUV

Fri 2024-01-19 10:28:52.410: 03: [4614] --> 250-mail.persada.id Hello
DESKTOPN00RCUV [103.247.218.37], pleased to meet you

Fri 2024-01-19 10:28:52.410: 03: [4614] --> 250-AUTH LOGIN CRAM-MD5
PLAIN

Fri 2024-01-19 10:28:52.410: 03: [4614] --> 250-8BITMIME

Fri 2024-01-19 10:28:52.410: 03: [4614] --> 250-ENHANCEDSTATUSCODES

Fri 2024-01-19 10:28:52.410: 03: [4614] --> 250-PIPELINING

Fri 2024-01-19 10:28:52.410: 03: [4614] --> 250-CHUNKING

Fri 2024-01-19 10:28:52.410: 03: [4614] --> 250-REQUIRETLS

Fri 2024-01-19 10:28:52.410: 03: [4614] --> 250 SIZE

Fri 2024-01-19 10:28:52.420: 02: [4614] <-- AUTH LOGIN

Fri 2024-01-19 10:28:52.420: 03: [4614] --> 334 VXNlcm5hbWU6

Fri 2024-01-19 10:28:52.434: 02: [4614] <--
aGFycmlzLnB1cndhbnRvQHBlcnNhZGEuaWQ=

Fri 2024-01-19 10:28:52.434: 03: [4614] --> 334 UGFzc3dvcmQ6

Fri 2024-01-19 10:28:52.443: 02: [4614] <-- **

Fri 2024-01-19 10:28:52.444: 01: [4614] Authenticating
harris.purwa...@persada.id...

Fri 2024-01-19 10:28:52.448: 01: [4614] Authenticated as
harris.purwa...@persada.id

Fri 2024-01-19 10:28:52.449: 03: [4614] --> 235 2.7.0 Authentication
successful

Fri 2024-01-19 10:28:52.480: 02: [4614] <-- MAIL FROM:


Fri 2024-01-19 10:28:52.485: 03: [4614] --> 250 2.1.0 Sender OK

Fri 2024-01-19 10:28:52.497: 02: [4614] <-- RCPT TO:


Fri 2024-01-19 10:28:52.506: 03: [4614] --> 250 2.1.5 Recipient OK

Fri 2024-01-19 10:28:52.513: 02: [4614] <-- DATA

Fri 2024-01-19 10:28:52.514: 03: [4614] --> 354 Enter mail, end with
.

Fri 2024-01-19 10:28:52.601: 01: [4614] Message size: 17769 bytes

Fri 2024-01-19 10:28:52.607: 06: [4614] Passing message through
AntiVirus (Size: 17769)...

Fri 2024-01-19 10:28:52.630: 06: [4614] *  Recipient, sender or IP in
exclusion list

Fri 2024-01-19 10:28:52.630: 06: [4614]  End AntiVirus results

Fri 2024-01-19 10:28:52.631: 11: [4614] Outbreak Protection: Processing
skipped.  Authenticated connection.

Fri 2024-01-19 10:28:52.701: 01: [4614] Message creation successful:
c:\mdaemon\queues\inbound\md5001007512371.msg

Fri 2024-01-19 10:28:52.701: 03: [4614] --> 250 2.6.0 Ok, message saved
>

Fri 2024-01-19 10:28:52.709: 02: [4614] <-- MAIL FROM:


Fri 2024-01-19 10:28:52.713: 03: [4614] --> 250 2.1.0 Sender OK

Fri 2024-01-19 10:28:52.728: 02: [4614] <-- RCPT TO:


Fri 2024-01-19 10:28:52.740: 03: [4614] --> 250 2.1.5 Recipient OK

Fri 2024-01-19 10:28:52.750: 02: [4614] <-- RCPT TO:


Fri 2024-01-19 10:28:52.790: 03: [4614] --> 250 2.1.5 Recipient OK

Fri 2024-01-19 10:28:52.804: 02: [4614] <-- RCPT TO:


Fri 2024-01-19 10:28:52.815: 03: [4614] --> 250 2.1.5 Recipient OK

Fri 2024-01-19 10:28:52.829: 02: [4614] <-- RCPT TO:


Fri 2024-01-19 10:28:52.841: 03: [4614] --> 250 2.1.5 Recipient OK

Fri 2024-01-19 10:28:52.848: 02: [4614] <-- RCPT TO:


Fri 2024-01-19 10:28:52.860: 03: [4614] --> 250 2.1.5 Recipient OK

Fri 2024-01-19 10:28:52.869: 02: [4614] <-- RCPT TO:


Fri 2024-01-19 10:28:52.881: 03: [4614] --> 250 2.1.5 Recipient OK

Fri 2024-01-19 10:28:52.891: 02: [4614] <-- RCPT TO:


Fri 2024-01-19 10:28:52.905: 03: [4614] --> 250 2.1.5 Recipient OK

Fri 2024-01-19 10:28:52.919: 02: [4614] <-- DATA

Fri 2024-01-19 10:28:52.921: 03: [4614] --> 354 Enter mail, end with
.

Fri 2024-01-19 10:28:53.402: 01: [4614] Message size: 188122 bytes

Fri 2024-01-19 10:28:53.403: 03: [4614] --> 550 5.7.0 Authentication
rejected

[Mdaemon-L] Email dianggap spam oleh MDaemon

[Bambang Setiawan via Mdaemon-L]

Dear Pak Syafril,


Mohon bantuannya untuk analisa log sebagai berikut, penyebab email dari 
sender dianggap spam ini apa ya pak ?



Wed 2024-01-10 10:51:10.393: 01: --
Wed 2024-01-10 10:51:15.813: 05: [45941226] Session 45941226; child 0001
Wed 2024-01-10 10:51:15.813: 05: [45941226] Accepting SMTP connection 
from 40.107.255.92:31041 to 103.150.114.155:25
Wed 2024-01-10 10:51:15.813: 07: [45941226] Location Screen says 
connection is from South Korea, Asia
Wed 2024-01-10 10:51:15.814: 03: [45941226] --> 220 mail.persada.id 
ESMTP MDaemon 23.5.1; Wed, 10 Jan 2024 10:51:15 +0700
Wed 2024-01-10 10:51:15.911: 02: [45941226] <-- EHLO 
APC01-PSA-obe.outbound.protection.outlook.com
Wed 2024-01-10 10:51:15.912: 03: [45941226] --> 250-mail.persada.id 
Hello APC01-PSA-obe.outbound.protection.outlook.com [40.107.255.92], 
pleased to meet you

Wed 2024-01-10 10:51:15.912: 03: [45941226] --> 250-ETRN
Wed 2024-01-10 10:51:15.912: 07: [45941226] Location Screening hiding 
AUTH from country South Korea, Asia

Wed 2024-01-10 10:51:15.912: 03: [45941226] --> 250-8BITMIME
Wed 2024-01-10 10:51:15.912: 03: [45941226] --> 250-ENHANCEDSTATUSCODES
Wed 2024-01-10 10:51:15.912: 03: [45941226] --> 250-PIPELINING
Wed 2024-01-10 10:51:15.912: 03: [45941226] --> 250-CHUNKING
Wed 2024-01-10 10:51:15.912: 03: [45941226] --> 250-STARTTLS
Wed 2024-01-10 10:51:15.912: 03: [45941226] --> 250 SIZE
Wed 2024-01-10 10:51:16.009: 02: [45941226] <-- STARTTLS
Wed 2024-01-10 10:51:16.009: 03: [45941226] --> 220 2.7.0 Ready to start TLS
Wed 2024-01-10 10:51:16.218: 01: [45941226] SSL negotiation successful 
(TLS 1.2, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384)
Wed 2024-01-10 10:51:16.327: 02: [45941226] <-- EHLO 
APC01-PSA-obe.outbound.protection.outlook.com
Wed 2024-01-10 10:51:16.327: 03: [45941226] --> 250-mail.persada.id 
Hello APC01-PSA-obe.outbound.protection.outlook.com [40.107.255.92], 
pleased to meet you

Wed 2024-01-10 10:51:16.327: 03: [45941226] --> 250-ETRN
Wed 2024-01-10 10:51:16.327: 07: [45941226] Location Screening hiding 
AUTH from country South Korea, Asia

Wed 2024-01-10 10:51:16.327: 03: [45941226] --> 250-8BITMIME
Wed 2024-01-10 10:51:16.327: 03: [45941226] --> 250-ENHANCEDSTATUSCODES
Wed 2024-01-10 10:51:16.327: 03: [45941226] --> 250-PIPELINING
Wed 2024-01-10 10:51:16.327: 03: [45941226] --> 250-CHUNKING
Wed 2024-01-10 10:51:16.327: 03: [45941226] --> 250-REQUIRETLS
Wed 2024-01-10 10:51:16.327: 03: [45941226] --> 250 SIZE
Wed 2024-01-10 10:51:16.429: 02: [45941226] <-- MAIL 
FROM: SIZE=1195522
Wed 2024-01-10 10:51:16.445: 05: [45941226] Performing PTR lookup 
(92.255.107.40.IN-ADDR.ARPA)
Wed 2024-01-10 10:51:16.461: 05: [45941226] * 
D=92.255.107.40.IN-ADDR.ARPA TTL=(60) 
PTR=[mail-psaapc01on2092.outbound.protection.outlook.com]
Wed 2024-01-10 10:51:16.662: 05: [45941226] * 
D=mail-psaapc01on2092.outbound.protection.outlook.com TTL=(5) 
A=[40.107.255.92]

Wed 2024-01-10 10:51:16.662: 05: [45941226]  End PTR results
Wed 2024-01-10 10:51:16.665: 05: [45941226] Performing IP lookup 
(APC01-PSA-obe.outbound.protection.outlook.com)
Wed 2024-01-10 10:51:16.696: 05: [45941226] * 
D=APC01-PSA-obe.outbound.protection.outlook.com TTL=(3) A=[104.47.26.15]

Wed 2024-01-10 10:51:16.696: 05: [45941226]  End IP lookup results
Wed 2024-01-10 10:51:16.711: 05: [45941226] Performing IP lookup 
(iforte.co.id)
Wed 2024-01-10 10:51:16.745: 05: [45941226] *  D=iforte.co.id TTL=(240) 
A=[202.51.96.13]
Wed 2024-01-10 10:51:16.752: 05: [45941226] *  P=000 S=000 
D=iforte.co.id TTL=(60) MX=[iforte-co-id.mail.protection.outlook.com]
Wed 2024-01-10 10:51:16.787: 05: [45941226] * 
D=iforte-co-id.mail.protection.outlook.com TTL=(0) A=[52.101.137.2]
Wed 2024-01-10 10:51:16.787: 05: [45941226] * 
D=iforte-co-id.mail.protection.outlook.com TTL=(0) A=[52.101.132.28]
Wed 2024-01-10 10:51:16.787: 05: [45941226] * 
D=iforte-co-id.mail.protection.outlook.com TTL=(0) A=[52.101.132.30]
Wed 2024-01-10 10:51:16.787: 05: [45941226] * 
D=iforte-co-id.mail.protection.outlook.com TTL=(0) A=[52.101.137.0]

Wed 2024-01-10 10:51:16.787: 05: [45941226]  End IP lookup results
Wed 2024-01-10 10:51:16.813: 09: [45941226] Performing SPF lookup 
(APC01-PSA-obe.outbound.protection.outlook.com / 40.107.255.92)
Wed 2024-01-10 10:51:16.819: 09: [45941226] *  Policy: v=spf1 
include:spf.protection.outlook.com -all
Wed 2024-01-10 10:51:16.819: 09: [45941226] *  Evaluating 
include:spf.protection.outlook.com: performing lookup
Wed 2024-01-10 10:51:16.819: 09: [45941226] *    Policy (cache): v=spf1 
ip4:40.92.0.0/15 ip4:40.107.0.0/16 ip4:52.100.0.0/14 ip4:104.47.0.0/17 
ip6:2a01:111:f400::/48 ip6:2a01:111:f403::/49 
ip6:2a01:111:f403:8000::/50 ip6:2a01:111:f403:c000::/51 
ip6:2a01:111:f403:f000::/52 -all
Wed 2024-01-10 10:51:16.819: 09: [45941226] *    Evaluating 
ip4:40.92.0.0/15: no match
Wed 2024-01-10 10:51:16.819: 09: [45941226] *    Evaluating 
ip4:40.107.0.0/16: match
Wed 2024-01-10 10:51:16.819: 09: [45941226] *  Evaluating 
include:spf.protection.outlook.com: 

[Mdaemon-L] Quarantine Queue

[Bambang Setiawan via Mdaemon-L]

Dear Pak Syafril,


Mohon bantuannya, melanjutkan email saya sebelumnya tentang 
Heuristics.Limits.Exceeded.MaxScanSize pak,


saya sudah exlude file *.xlsb tersebut pada menu Antivirus -> Virus 
Scanning -> Configure Exclusions,


saya exclude di sender exclusions dan global file exclusions.

tetapi kenapa email-email ini masih masuk ke quarantine queue ya pak ?


Terima kasih.



--
--[mdaemon-l]--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.com
Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com
Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com
Versi terakhir: MDaemon 23.5.1, SecurityGateway 9.5.2

[Mdaemon-L] DMARC policy of reject

[Bambang Setiawan via Mdaemon-L]

Dear Pak Syafril,


Mohon bantuan untuk masalah pengiriman ke salah satu client kami 
terlampir pak,


kami mendapatkan bounceback sebagai berikut :


Reporting-MTA: dns;PSAPR02MB4727.apcprd02.prod.outlook.com

Received-From-MTA: dns;APC01-TYZ-obe.outbound.protection.outlook.com
Arrival-Date: Thu, 4 Jan 2024 09:05:25 +

Original-Recipient: rfc822;herry.sibar...@lintasarta.co.id
Final-Recipient: rfc822;herry.sibar...@lintasarta.co.id
Action: failed
Status: 5.7.509
Diagnostic-Code: smtp;550 5.7.509 Access denied, sending domain 
persada.id does not pass DMARC verification and has a DMARC policy of 
reject.

X-Display-Name: Herry Gunawan Sibarani


kami sebelumnya sudah merubah DMARC sesuai arahan Bapak ini.

"v=DMARC1; p=reject; sp=none; aspf=s; rua=mailto:dmarc-repo...@persada.id;


Terima kasih.


*Diagnostic information for administrators:*

Generating server: PSAPR02MB4727.apcprd02.prod.outlook.com

herry.sibar...@lintasarta.co.id
Remote server returned '550 5.7.509 Access denied, sending domain 
persada.id does not pass DMARC verification and has a DMARC policy of 
reject.'


Original message headers:

ARC-Seal: i=2; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=pass;

b=TNBIgpDPLeNgvlbDRqMoSGwK9Wltyl6aXDEZV1wRnw1h8PetMoz9Z8IPTFUoXxFLiTVAGblsY3cYBPpSAPyT1mKiNvYkFpgYYb0+LLeKstH6DpF0O4MiMNnAcZvyBqE/i0zgEOqabr7MN58OmHm5scPQqNhmfxygAh7WqIC8Bw+2UnasbMoq+1F2Z0lZLbAhTZBT3tOT6C+oIXAmI+bk+y09Man6jw3RMXD+Fmfwd+JBhKoIoUjA9sL41jjWZYr+/bD2LPmdPykHIdp7rGVP+eudxi24YX6P15Ad59LUUjNnCRlJXMMaPSTHzy82xY0Ax0eprLPE+Wi7Xzb36LW5bg==

ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; 
d=microsoft.com;


s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=6PR8mdwe60dTRcv9uu6kc/0tDvPKzjvF3cxvgX7Nb84=;

b=ncrdXT9eRA2kYIU08s/OCbT2QrtD6wefdxAWiBUsFpzF0E9hsJPtQ5sFBqSktZt/De86Mc3A3uMg1D+fbvNAN9CE4OKZf3/MfjrXvBX+o/1ml0h1ynX7i0QJae05TeIneTZsBOny4xwpn7h5k/lgWw5+ScJzi2kxkStupITQuLVlvmrIbbjjbXXmjklQVkfWlW9vZlMpn8myffcCwmh5rAII6bfiDBddKBL4aQgoUXZLZjV0dIMzfeglfhMxSzQZROstHq4bsCrdZfxtV9VqYzatZM7YBRRoQQKcPtUPuyfs7AfAbd0LV6RSI5mVJ3f/SvF8rHJTLWqhY1YQ0sN2Jg==

ARC-Authentication-Results: i=2; mx.microsoft.com 1; spf=fail (sender ip is

104.47.110.40) smtp.rcpttodomain=lintasarta.mail.onmicrosoft.com

smtp.mailfrom=persada.id; dmarc=fail (p=reject sp=none pct=100)

action=oreject header.from=persada.id; dkim=none (message not signed);

arc=pass (0 oda=0 ltdi=1)

Received: from SG2P153CA0027.APCP153.PROD.OUTLOOK.COM 
(2603:1096:4:c7::14) by


PSAPR02MB4727.apcprd02.prod.outlook.com (2603:1096:301:90::7) with Microsoft

SMTP Server (version=TLS1_2, 
cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id


15.20.7159.14; Thu, 4 Jan 2024 09:05:25 +

Received: from SG2PEPF000B66CE.apcprd03.prod.outlook.com

(2603:1096:4:c7:cafe::65) by SG2P153CA0027.outlook.office365.com

(2603:1096:4:c7::14) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7181.5 via Frontend

Transport; Thu, 4 Jan 2024 09:05:25 +

Authentication-Results: spf=fail (sender IP is 104.47.110.40)

smtp.mailfrom=persada.id; dkim=none (message not signed)

header.d=none;dmarc=fail action=oreject header.from=persada.id;compauth=fail

reason=000

Received-SPF: Fail (protection.outlook.com: domain of persada.id does not

designate 104.47.110.40 as permitted sender) 
receiver=protection.outlook.com;


client-ip=104.47.110.40; helo=APC01-TYZ-obe.outbound.protection.outlook.com;

Received: from APC01-TYZ-obe.outbound.protection.outlook.com (104.47.110.40)

by SG2PEPF000B66CE.mail.protection.outlook.com (10.167.240.21) with 
Microsoft


SMTP Server (version=TLS1_2, 
cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id


15.20.7159.9 via Frontend Transport; Thu, 4 Jan 2024 09:05:24 +

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=ElWePwK+hBuMdrDe/Pu/4CZlcnbPcxd3K0CC081Oo7Ag1U7cpHLQd4cFke7477+kmw5g1Rf1w4oWWDPfa4yDfYHjKVVIXOdD+txpqY3FOUnKS4b93i5FVelHBZZxifPf6Xht1yY/+wTaChFUQSDaZNmFevCadnaTIb1VraWy90eeVFLYGLP1AyyrPx5EvZvxwhwFqvohqZ++brOvdc9NDdvNfhYJ2iD491eixJcXnlbLtMPNpcMANgKvHO/ytYvJD+RGJqwUG+AoFP14nTxUFtD1SycVxxRnxdXdqU+azcWHEP8Uo4mfB2VFsZF7lFw4RGOTHtZSq9wQQGOss6i3hQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; 
d=microsoft.com;


s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=6PR8mdwe60dTRcv9uu6kc/0tDvPKzjvF3cxvgX7Nb84=;

b=E35xVkkqL//BefXNcIIogn9ZH3NEy72hdeoP75w5AkWe/jZYZvAFh2oX2rK0KFlbB7X/ifbj6VbdeMRc22TYNA4t5MtLZaqr8s4+dRBCqdhC5L+jwrKL2o2SsMVn5LL2qAXeT8h/WEIH3H9IsIlV6IsM8chX2JPwxYTLLl3kPzjZl337plpFKPIN9MQtF8TFAhTVZ7DDHvRIbU/DBjlynWkEaSFA9rneL7VX30RJO2mTgOTtEWgrX1BFXfYow8KZD8XoLHRNRrCVwE4ziRZUrleld03gREsBlBr81kGmQyzykTEtHkD7gYo9UY34aHFWPlkldcuLpwgFKgZtTpqfSA==

[Mdaemon-L] Email tidak masuk

[Bambang Setiawan via Mdaemon-L]

On 1/3/2024 2:20 PM, Syafril Hermansyah via Mdaemon-L wrote:


Coba diperbaiki DNS SPF recordnya agar serial number DNS jadi terupdate.




DMARC diperbaiki

Dua saran Bapak tersebut sudah kami lakukan pak, saya juga cek ke 
hostingnya, ternyata ada trouble di sisi mereka pak :-(


Menanggapi chat/pesan yang disampaikan, sebelumnya kami mohon maaf atas 
ketidaknyamanannya dan kami informasikan saat ini terdapat kendala pada 
layanan NEO Web Hosting dengan domain yang menggunakan ns1.neohosting.id 
atau ns2.neohosting.id, yang mana tidak dapat menerima pengiriman email 
dari microsoft outlook / 365 lebih lanjutnya untuk hal ini dapat dilihat 
melalui https://status.biznetgio.com


Jika seperti ini ada saran alternatif lain tidak ya pak selain menunggu 
problem solving biznet-nya ? karena sudah dari kemarin masalahnya dan 
sudah mengganggu komunikasi email kami.



Terima kasih.


--
--[mdaemon-l]--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.com
Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com
Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com
Versi terakhir: MDaemon 23.5.1, SecurityGateway 9.5.2

[Mdaemon-L] Email tidak masuk

[Bambang Setiawan via Mdaemon-L]

On 03/01/24 10.14, Syafril Hermansyah via Mdaemon-L wrote:



Yang kirim DSN/Bounce itu apakah mail hostingnya (office365)?
Bisa diberikan DSN/Bounce lengkapnya dengan cara forward mail bounce 
tersebut?


Iya pak, walaupun domain sendernya beda tapi dari yang hosting di 
office365 juga.



Kalau dari info yang cuma sepotong itu, mengindikasikan sender server 
tidak bisa resolve recipient domain (persada.id) yang membuat mail 
tidak jadi dikirim.
Jadi memang tidak akan ada transaksi yang tercatat di smtp-in log 
server mail.persada.id.


Saya belum dapat email bounce nya pak, tetapi saya diberikan seperti log 
sebagai berikut :


Date (UTC+07:00)    Event        Detail

1/3/2024, 11:28 AM     Receive     Message receive...
Message receieved by: KL1PR03MB5747.apcprd03.prod.outlook.com

1/3/2024, 11:28 AM     Submit         The message was...
The message was submitted.

1/3/2024, 11:30 AM     Defer         Reason:[{LED=45...
Reason:[{LED=450 4.4.312 DNS query failed 
[Message=ServerFailure][LastAttemptedServerName=persada.id][TYZAPC01FT046.eop-APC01.prod.protection.outlook.com 
2024-01-03T04:30:14.576Z 
08DC0B997F25045F]};{MSG=ServerFailure};{FQDN=persada.id};{IP=0.0.0.0};{LRT=1/3/2024 
4:28:50 AM}], OutboundProxyTargetHostName: persada.id



--
--[mdaemon-l]--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.com
Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com
Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com
Versi terakhir: MDaemon 23.5.1, SecurityGateway 9.5.2

[Mdaemon-L] Email tidak masuk

[Bambang Setiawan via Mdaemon-L]

On 1/2/2024 1:47 PM, Syafril Hermansyah via Mdaemon-L wrote:


Minta sender menanyakan ke mail hosternya (office365) pengiriman mail 
ke @persada.id kenapa tidak diteruskan ke MX host domain persada.id.



Baik Pak,


Mohon maaf pak, ada lagi dengan kasus yang sama tapi sendernya dari 
domain iforte.co.id,


ada DSN dari sendernya sebagai berikut :

Acep Hendra (acep.hen...@persada.id)
Your message couldn't be delivered. Despite repeated attempts to deliver 
your message, querying the Domain Name System (DNS) for the recipient's 
domain location information failed.


For more information and tips to fix this issue see this article,
https://go.microsoft.com/fwlink/?LinkId=389361


Untuk kasus ini masalah benar ada di DNS sender kan ya pak ?


Salam.


--
--[mdaemon-l]--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.com
Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com
Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com
Versi terakhir: MDaemon 23.5.1, SecurityGateway 9.5.2

[Mdaemon-L] Email tidak masuk

[Bambang Setiawan via Mdaemon-L]

On 1/2/2024 12:37 PM, Syafril Hermansyah via Mdaemon-L wrote:


Saya tidak baca gambar.

Baik Pak


 2. Menggunakan Remote Administration (Webadmin).

Berikut log yang terfilter pada smtp-in log dengan kata kunci 
sicepat.com pak


MDaemon-2024-01-02-SMTP-(in).log

Tue 2024-01-02 10:04:06.113: [45751648] <-- RCPT TO: 
Tue 2024-01-02 11:09:05.150: [45753271] <-- RCPT TO:
Tue 2024-01-02 11:09:05.161: [45753271] <-- RCPT TO:
Tue 2024-01-02 11:09:05.169: [45753271] <-- RCPT 
TO:


Tue 2024-01-02 11:09:05.179: [45753271] <-- RCPT 
TO:



Hanya ada log pengiriman, untuk penerimaan tidak ada.


Salam


--
--[mdaemon-l]--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.com
Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com
Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com
Versi terakhir: MDaemon 23.5.1, SecurityGateway 9.5.2

[Mdaemon-L] Email tidak masuk

[Bambang Setiawan via Mdaemon-L]

On 1/2/2024 12:37 PM, Syafril Hermansyah via Mdaemon-L wrote:



Saya tidak baca gambar.

Baik pak



 2. Menggunakan Remote Administration (Webadmin).

Remote Administration bisa diakses dari http://ip-address-mdaemon:1000.
Atau kalau sudah diubah bisa periksa portnya dari menu berikut


Berikut log yang terfilter pada smtp-in log pak

MDaemon-2024-01-02-SMTP-(in).log


Tue 2024-01-02 10:04:06.113: [45751648] <-- RCPT TO: 
Tue 2024-01-02 11:09:05.150: [45753271] <-- RCPT TO:
Tue 2024-01-02 11:09:05.161: [45753271] <-- RCPT TO:
Tue 2024-01-02 11:09:05.169: [45753271] <-- RCPT 
TO:
Tue 2024-01-02 11:09:05.179: [45753271] <-- RCPT 
TO:


hanya ada untuk pengiriman, penerimaan tidak ada.


Salam



--
--[mdaemon-l]--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.com
Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com
Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com
Versi terakhir: MDaemon 23.5.1, SecurityGateway 9.5.2

[Mdaemon-L] Email tidak masuk

[Bambang Setiawan via Mdaemon-L]

On 1/2/2024 12:03 PM, Syafril Hermansyah via Mdaemon-L wrote:



Dikirimnya tanggal berapa?


Dikirim hari ini jam 9.01 AM Pak



Cari di smtp-in log tanggal pengiriman mail dengan katakunci pencarian 
"sicepat.com".


Sesuai dengan SC terlampir, yang ada hanya log pengiriman ke 
"sicepat.com" pak, untuk penerimaan tidak ada.


Terima kasih

--
--[mdaemon-l]--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.com
Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com
Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com
Versi terakhir: MDaemon 23.5.1, SecurityGateway 9.5.2

[Mdaemon-L] Email hilang di mailbox

[Bambang Setiawan via Mdaemon-L]

Dear Pak Syafril,


Mohon bantuannya untuk kasus saya sebagai berikut ya pak.


Tue 2023-10-17 14:07:15.351: LOCAL message: pd3501013771697.msg
Tue 2023-10-17 14:07:15.351: *  From: "Yanti Ermayanti" 

Tue 2023-10-17 14:07:15.351: *  To: "'Bambang Setiawan'" 
, "'edwin aiman'" , 
"Edwin Aiman" 
Tue 2023-10-17 14:07:15.351: *  Subject: Risalah Rapat Komite Audit - 16 
Okt 2023
Tue 2023-10-17 14:07:15.351: *  Message-ID: 
<000201da00c7$86007600$92016200$@persada.id>
Tue 2023-10-17 14:07:15.351: *  Size: 315054; 


Tue 2023-10-17 14:07:15.351: --

Untuk email yang dikirim ini tidak ada di inbox saya, saya cek di folder 
server, file md5001000116663.msg tidak ada.



Wed 2023-10-18 09:13:29.122: LOCAL message: pd3501013778984.msg
Wed 2023-10-18 09:13:29.122: *  From: "Yanti Ermayanti" 

Wed 2023-10-18 09:13:29.122: *  To: "'Bambang Setiawan'" 

Wed 2023-10-18 09:13:29.122: *  Subject: FW: Risalah Rapat Komite Audit 
- 16 Okt 2023
Wed 2023-10-18 09:13:29.122: *  Message-ID: 
<000401da0168$6a29c5c0$3e7d5140$@persada.id>
Wed 2023-10-18 09:13:29.122: *  Size: 316143; 


Wed 2023-10-18 09:13:29.122: --

Di resend hari ini, email nya sampai ke saya pak.

Mohon petunjuknya untuk penyebab email tanggal 17 Okt 2023 itu hilang 
saya cek dari log apa ya pak.



Atas bantuannya diucapkan terima kasih.


Salam.

--
--[mdaemon-l]--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.com
Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com
Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com
Versi terakhir: MDaemon 23.5.0, SecurityGateway 9.0.3

[Mdaemon-L] Email tidak dapat masuk

[Bambang Setiawan via Mdaemon-L]

On 8/29/2023 11:32 AM, Syafril Hermansyah via Mdaemon-L wrote:


Baru ganti Name server ya.

maaf pak, ini kembali ke NS semula, ternyata beda produk dari biznet 
pengelolaan NS nya masing-masing.


Saya cek dan tes beberapa email sudah bisa masuk Pak, contoh dari yahoo 
yang bisa masuk :


Tue 2023-08-29 13:10:46.990: --
Tue 2023-08-29 13:10:42.333: [42505875] Session 42505875; child 0002
Tue 2023-08-29 13:10:42.333: [42505875] Accepting SMTP connection from 
77.238.176.205:34393 to 103.150.114.155:25
Tue 2023-08-29 13:10:42.333: [42505875] Location Screen says connection 
is from Ireland, Europe
Tue 2023-08-29 13:10:42.334: [42505875] --> 220 mail.persada.id ESMTP 
MDaemon 23.0.1; Tue, 29 Aug 2023 13:10:42 +0700
Tue 2023-08-29 13:10:42.547: [42505875] <-- EHLO 
sonic306-19.consmr.mail.ir2.yahoo.com
Tue 2023-08-29 13:10:42.547: [42505875] --> 250-mail.persada.id Hello 
sonic306-19.consmr.mail.ir2.yahoo.com [77.238.176.205], pleased to meet you

Tue 2023-08-29 13:10:42.547: [42505875] --> 250-ETRN
Tue 2023-08-29 13:10:42.547: [42505875] Location Screening hiding AUTH 
from country Ireland, Europe

Tue 2023-08-29 13:10:42.547: [42505875] --> 250-8BITMIME
Tue 2023-08-29 13:10:42.547: [42505875] --> 250-ENHANCEDSTATUSCODES
Tue 2023-08-29 13:10:42.547: [42505875] --> 250-PIPELINING
Tue 2023-08-29 13:10:42.547: [42505875] --> 250-CHUNKING
Tue 2023-08-29 13:10:42.547: [42505875] --> 250-STARTTLS
Tue 2023-08-29 13:10:42.547: [42505875] --> 250 SIZE
Tue 2023-08-29 13:10:42.760: [42505875] <-- STARTTLS
Tue 2023-08-29 13:10:42.760: [42505875] --> 220 2.7.0 Ready to start TLS
Tue 2023-08-29 13:10:43.201: [42505875] SSL negotiation successful (TLS 
1.2, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384)
Tue 2023-08-29 13:10:43.610: [42505875] <-- EHLO 
sonic306-19.consmr.mail.ir2.yahoo.com
Tue 2023-08-29 13:10:43.610: [42505875] --> 250-mail.persada.id Hello 
sonic306-19.consmr.mail.ir2.yahoo.com [77.238.176.205], pleased to meet you

Tue 2023-08-29 13:10:43.610: [42505875] --> 250-ETRN
Tue 2023-08-29 13:10:43.610: [42505875] Location Screening hiding AUTH 
from country Ireland, Europe

Tue 2023-08-29 13:10:43.610: [42505875] --> 250-8BITMIME
Tue 2023-08-29 13:10:43.610: [42505875] --> 250-ENHANCEDSTATUSCODES
Tue 2023-08-29 13:10:43.610: [42505875] --> 250-PIPELINING
Tue 2023-08-29 13:10:43.610: [42505875] --> 250-CHUNKING
Tue 2023-08-29 13:10:43.610: [42505875] --> 250-REQUIRETLS
Tue 2023-08-29 13:10:43.610: [42505875] --> 250 SIZE
Tue 2023-08-29 13:10:43.822: [42505875] <-- MAIL 
FROM:
Tue 2023-08-29 13:10:43.844: [42505875] Performing PTR lookup 
(205.176.238.77.IN-ADDR.ARPA)
Tue 2023-08-29 13:10:43.940: [42505875] * D=205.176.238.77.IN-ADDR.ARPA 
TTL=(10) PTR=[sonic306-19.consmr.mail.ir2.yahoo.com]
Tue 2023-08-29 13:10:43.956: [42505875] * 
D=sonic306-19.consmr.mail.ir2.yahoo.com TTL=(30) A=[77.238.176.205]

Tue 2023-08-29 13:10:43.956: [42505875]  End PTR results
Tue 2023-08-29 13:10:43.959: [42505875] Performing IP lookup 
(sonic306-19.consmr.mail.ir2.yahoo.com)
Tue 2023-08-29 13:10:43.961: [42505875] * 
D=sonic306-19.consmr.mail.ir2.yahoo.com TTL=(30) A=[77.238.176.205]

Tue 2023-08-29 13:10:43.961: [42505875]  End IP lookup results
Tue 2023-08-29 13:10:43.971: [42505875] Performing IP lookup (yahoo.co.uk)
Tue 2023-08-29 13:10:44.068: [42505875] *  D=yahoo.co.uk TTL=(5) 
A=[74.6.231.14]
Tue 2023-08-29 13:10:44.068: [42505875] *  D=yahoo.co.uk TTL=(5) 
A=[74.6.143.18]
Tue 2023-08-29 13:10:44.068: [42505875] *  D=yahoo.co.uk TTL=(5) 
A=[202.165.107.57]
Tue 2023-08-29 13:10:44.068: [42505875] *  D=yahoo.co.uk TTL=(5) 
A=[87.248.100.208]
Tue 2023-08-29 13:10:44.068: [42505875] *  D=yahoo.co.uk TTL=(5) 
A=[98.137.11.157]
Tue 2023-08-29 13:10:44.068: [42505875] *  D=yahoo.co.uk TTL=(5) 
A=[180.222.102.156]
Tue 2023-08-29 13:10:44.070: [42505875] *  P=010 S=000 D=yahoo.co.uk 
TTL=(14) MX=[mx-eu.mail.am0.yahoodns.net]
Tue 2023-08-29 13:10:44.072: [42505875] * D=mx-eu.mail.am0.yahoodns.net 
TTL=(0) A=[188.125.72.74]
Tue 2023-08-29 13:10:44.072: [42505875] * D=mx-eu.mail.am0.yahoodns.net 
TTL=(0) A=[188.125.72.73]

Tue 2023-08-29 13:10:44.072: [42505875]  End IP lookup results
Tue 2023-08-29 13:10:44.076: [42505875] Performing SPF lookup 
(sonic306-19.consmr.mail.ir2.yahoo.com / 77.238.176.205)
Tue 2023-08-29 13:10:45.658: [42505875] *  Result: none; no SPF record 
in DNS

Tue 2023-08-29 13:10:45.658: [42505875]  End SPF results
Tue 2023-08-29 13:10:45.658: [42505875] Performing SPF lookup 
(yahoo.co.uk / 77.238.176.205)
Tue 2023-08-29 13:10:45.674: [42505875] *  Policy: v=spf1 
redirect=_spf.mail.yahoo.com
Tue 2023-08-29 13:10:45.674: [42505875] *  Evaluating 
redirect=_spf.mail.yahoo.com:
Tue 2023-08-29 13:10:45.674: [42505875] *  Evaluating 
redirect=_spf.mail.yahoo.com: performing lookup
Tue 2023-08-29 13:10:45.677: [42505875] *    Policy: v=spf1 
ptr:yahoo.com ptr:yahoo.net ?all

Tue 2023-08-29 13:10:45.681: [42505875] *    Evaluating ptr:yahoo.com: match
Tue 2023-08-29 13:10:45.681: [42505875] *  

[Mdaemon-L] Email tidak dapat masuk

[Bambang Setiawan via Mdaemon-L]

On 8/29/2023 9:02 AM, Syafril Hermansyah via Mdaemon-L wrote:



$ whois persada.id


Ini Sudah benar belum ya pak


% IANA WHOIS server
% for more information on IANA, visit http://www.iana.org
% This query returned 1 object
refer:    whois.id
domain:   ID
organisation: Perkumpulan Pengelola Nama Domain Internet Indonesia (PANDI)
address:  Icon Business Park, Unit L1-L2
address:  Jalan Raya Cisauk - LAPAN
address:  Tangerang Banten 15345
address:  Indonesia
contact:  administrative
name: Muhammad Neil El Himam
organisation: Perkumpulan Pengelola Nama Domain Internet Indonesia (PANDI)
address:  Icon Business Park, Unit L1-L2
address:  Jalan Raya Cisauk - LAPAN
address:  Tangerang Banten 15345
address:  Indonesia
phone:    +62 82111610360
fax-no:   +62 21 3005 5789
e-mail: ad...@pandi.id
contact:  technical
name: Aidil Chendramata
organisation: Perkumpulan Pengelola Nama Domain Internet Indonesia (PANDI)
address:  Icon Business Park, Unit L1-L2
address:  Jalan Raya Cisauk - LAPAN
address:  Tangerang Banten 15345
address:  Indonesia
phone:    +62 817758377
fax-no:   +62 21 3005 5789
e-mail: t...@pandi.id
nserver:  B.DNS.ID 103.19.179.179 2402:ee80:b:0:0:0:0:b
nserver:  C.DNS.ID 103.19.178.178 2402:ee80:c:0:0:0:0:c
nserver:  D.DNS.ID 2402:ee80:d:0:0:0:0:d 45.126.57.57
nserver:  E.DNS.ID 103.19.177.177 2001:df5:4000:4:0:0:0:4
nserver:  NS4.APNIC.NET 2001:dd8:12:0:0:0:0:53 202.12.31.53
ds-rdata: 26887 8 2 
28be22003a1afb1ed9a7bb82482274e2db5f09a6c50702c731e040d2257347ea

whois:    whois.id
status:   ACTIVE
remarks:  Registration information: https://pandi.id
created:  1993-02-27
changed:  2021-10-12
source:   IANA
# whois.id

ID ccTLD whois server
Please see 'whois -h whois.id help' for usage.
Domain ID: PANDI-DO352726
Domain Name: persada.id
Created On: 2014-12-10 00:09:12
Last Updated On: 2023-08-29 02:09:08
Expiration Date: 2024-12-10 00:09:12
Status: ok

Sponsoring Registrar Organization: PT Biznet Gio Nusantara
Sponsoring Registrar URL: www.biznetgio.com
Sponsoring Registrar Street: MidPlaza 1, LT 7  Jl Jenderal Sudirman Kav 
10-11

Sponsoring Registrar City: Jakarta Pusat
Sponsoring Registrar State/Province: DKI Jakarta
Sponsoring Registrar Postal Code: 10220
Sponsoring Registrar Country: ID
Sponsoring Registrar Phone: +62215714567
Sponsoring Registrar Email: regist...@biznetgio.com
Name Server: dua.neodns.id
Name Server: satu.neodns.id
DNSSEC: Unsigned
Abuse Domain Report https://pandi.id/domain-abuse-form/?lang=en
For more information on Whois status codes, please visit 
https://www.icann.org/resources/pages/epp-status-codes-2014-06-16-en

--
--[mdaemon-l]--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com
Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com
Versi terakhir: MDaemon 23.0.2, SecurityGateway 9.0.3

[Mdaemon-L] Email tidak dapat masuk

[Bambang Setiawan via Mdaemon-L]

Dear Pak Syafril,


Mohon bantuannya, hari ini email dari luar tidak dapat masuk ke 
mailserver (mail.persada.id) kami,


di SMTP In tidak ada transaksi yang bisa kami lihat. Kami harus cek 
darimana ya pak ?



Atas bantuannya diucapkan terima kasih


Salam

--
--[mdaemon-l]--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com
Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com
Versi terakhir: MDaemon 23.0.2, SecurityGateway 9.0.3

[Mdaemon-L] Gagal kirim ke domain outlook.com

[Bambang Setiawan via Mdaemon-L]

Dear Pak Syafril,


Mohon bantuannya untuk log sebagai berikut kenapa ya pak,

Email forwarding ke outlook.com gantung di bad queue, di cek IP kami di 
mxtoolbox.com dan talosintelligence.com alamat IP kami aman pak.



Atas bantuannya diucapkan terima kasih.


Thu 2023-08-24 08:13:51.432: --
Thu 2023-08-24 08:13:46.397: [42390235] REMOTE message: 
pd5001001600433.del1692839509.msg

Thu 2023-08-24 08:13:46.397: [42390235] *  Session 42390235; child 0013
Thu 2023-08-24 08:13:46.399: [42390235] *  Forwarded from: 
dispatc...@persada.id
Thu 2023-08-24 08:13:46.399: [42390235] *  From: 
noc.enterpr...@tower-bersama.com

Thu 2023-08-24 08:13:46.399: [42390235] *  To: dispatcherpers...@outlook.com
Thu 2023-08-24 08:13:46.399: [42390235] *  Subject: RE: [FLP_3rd_TBG] 
Trouble Ticket Open - Major - 16KDR0183(20KDR013)<> - DOWN - 
FLP-INC-20230824-4167
Thu 2023-08-24 08:13:46.399: [42390235] *  Message-ID: 
<06bd01d9d623$bf72ee00$3e58ca00$@tower-bersama.com>
Thu 2023-08-24 08:13:46.399: [42390235] *  Size: 787783; 

Thu 2023-08-24 08:13:46.405: [42390235] MTA-STS policy for outlook.com 
found in cache

Thu 2023-08-24 08:13:46.405: [42390235] *  version: STSv1
Thu 2023-08-24 08:13:46.405: [42390235] *  mode: enforce
Thu 2023-08-24 08:13:46.405: [42390235] *  mx: *.olc.protection.outlook.com
Thu 2023-08-24 08:13:46.405: [42390235] *  max_age: 604800
Thu 2023-08-24 08:13:46.488: [42390235] Resolving MX record for 
outlook.com (DNS Server: 203.119.13.77)...
Thu 2023-08-24 08:13:46.506: [42390235] *  P=005 S=000 D=outlook.com 
TTL=(0) MX=[outlook-com.olc.protection.outlook.com]
Thu 2023-08-24 08:13:46.506: [42390235] Attempting SMTP connection to 
outlook-com.olc.protection.outlook.com
Thu 2023-08-24 08:13:46.506: [42390235] Resolving A record for 
outlook-com.olc.protection.outlook.com (DNS Server: 203.119.13.77)...
Thu 2023-08-24 08:13:46.510: [42390235] *  DNS server reports no valid 
records for the requested type found
Thu 2023-08-24 08:13:46.515: [42390235] Attempting SMTP connection to 
outlook-com.olc.protection.outlook.com
Thu 2023-08-24 08:13:46.515: [42390235] Resolving A record for 
outlook-com.olc.protection.outlook.com (DNS Server: 1.0.0.1)...
Thu 2023-08-24 08:13:46.735: [42390235] *  DNS server reports no valid 
records for the requested type found
Thu 2023-08-24 08:13:46.736: [42390235] Attempting SMTP connection to 
outlook-com.olc.protection.outlook.com
Thu 2023-08-24 08:13:46.736: [42390235] Resolving A record for 
outlook-com.olc.protection.outlook.com (DNS Server: 203.119.13.78)...
Thu 2023-08-24 08:13:46.739: [42390235] *  DNS server reports no valid 
records for the requested type found
Thu 2023-08-24 08:13:46.740: [42390235] Attempting SMTP connection to 
outlook-com.olc.protection.outlook.com
Thu 2023-08-24 08:13:46.740: [42390235] Resolving A record for 
outlook-com.olc.protection.outlook.com (DNS Server: 8.8.4.4)...
Thu 2023-08-24 08:13:46.756: [42390235] * 
D=outlook-com.olc.protection.outlook.com TTL=(0) A=[104.47.56.161]
Thu 2023-08-24 08:13:46.756: [42390235] * 
D=outlook-com.olc.protection.outlook.com TTL=(0) A=[104.47.58.161]
Thu 2023-08-24 08:13:46.756: [42390235] Randomly picked 104.47.56.161 
from list of possible hosts
Thu 2023-08-24 08:13:46.756: [42390235] Attempting SMTP connection to 
104.47.56.161:25

Thu 2023-08-24 08:13:46.756: [42390235] Waiting for socket connection...
Thu 2023-08-24 08:13:46.931: [42390235] *  Connection established 
103.150.114.155:64488 --> 104.47.56.161:25

Thu 2023-08-24 08:13:46.931: [42390235] Waiting for protocol to start...
Thu 2023-08-24 08:13:47.107: [42390235] <-- 220 
CO1NAM11FT026.mail.protection.outlook.com Microsoft ESMTP MAIL Service 
ready at Thu, 24 Aug 2023 01:12:16 +

Thu 2023-08-24 08:13:47.109: [42390235] --> EHLO mail.persada.id
Thu 2023-08-24 08:13:47.284: [42390235] <-- 
250-CO1NAM11FT026.mail.protection.outlook.com Hello [103.150.114.155]

Thu 2023-08-24 08:13:47.284: [42390235] <-- 250-SIZE 49283072
Thu 2023-08-24 08:13:47.284: [42390235] <-- 250-PIPELINING
Thu 2023-08-24 08:13:47.284: [42390235] <-- 250-DSN
Thu 2023-08-24 08:13:47.284: [42390235] <-- 250-ENHANCEDSTATUSCODES
Thu 2023-08-24 08:13:47.284: [42390235] <-- 250-STARTTLS
Thu 2023-08-24 08:13:47.284: [42390235] <-- 250-8BITMIME
Thu 2023-08-24 08:13:47.284: [42390235] <-- 250-BINARYMIME
Thu 2023-08-24 08:13:47.284: [42390235] <-- 250-CHUNKING
Thu 2023-08-24 08:13:47.284: [42390235] <-- 250 SMTPUTF8
Thu 2023-08-24 08:13:47.284: [42390235] --> STARTTLS
Thu 2023-08-24 08:13:47.529: [42390235] <-- 220 2.0.0 SMTP server ready
Thu 2023-08-24 08:13:47.984: [42390235] SSL negotiation successful (TLS 
1.2, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384)
Thu 2023-08-24 08:13:47.984: [42390235] SSL certificate is valid 
(matches outlook-com.olc.protection.outlook.com and is signed by 
recognized CA)

Thu 2023-08-24 08:13:47.984: [42390235] MTA-STS success for outlook.com
Thu 2023-08-24 08:13:47.984: [42390235] TLS Reporting TXT record (from 
cache): 

[Mdaemon-L] Rejected for policy reasons

[Bambang Setiawan via Mdaemon-L]

Dear Pak Syafril,


Mohon bantuannya, untuk log sebagai berikut permasalahannya ada dimana 
ya pak,


sebelumnya domain ericsson.com sudah saya masukan ke SPF Verfification 
-> Exemp List



Fri 2023-08-18 11:34:46.919: --
Fri 2023-08-18 11:34:39.522: [42260016] REMOTE message: pd5001001596063.msg
Fri 2023-08-18 11:34:39.523: [42260016] *  Forwarded from: mak...@persada.id
Fri 2023-08-18 11:34:39.524: [42260016] *  From: 
operations-sd.applications.and.platfo...@ericsson.com

Fri 2023-08-18 11:34:39.524: [42260016] *  To: kayramak...@gmail.com
Fri 2023-08-18 11:34:39.524: [42260016] *  Subject: PLANNED CHANGE 
Communication: SD Applications & Platforms :: Intelligent Deployment : 
Front-end interface according to Ericsson Branding Update to the CMS-VLE 
Production (Phase-2)
Fri 2023-08-18 11:34:39.524: [42260016] *  Message-ID: 

Fri 2023-08-18 11:34:39.524: [42260016] *  Size: 26659; 

Fri 2023-08-18 11:34:39.530: [42260016] MTA-STS policy for gmail.com 
found in cache

Fri 2023-08-18 11:34:39.530: [42260016] *  version: STSv1
Fri 2023-08-18 11:34:39.530: [42260016] *  mode: enforce
Fri 2023-08-18 11:34:39.530: [42260016] *  mx: gmail-smtp-in.l.google.com
Fri 2023-08-18 11:34:39.530: [42260016] *  mx: *.gmail-smtp-in.l.google.com
Fri 2023-08-18 11:34:39.530: [42260016] *  max_age: 86400
Fri 2023-08-18 11:34:39.543: [42260016] Resolving MX record for 
gmail.com (DNS Server: 203.119.13.77)...
Fri 2023-08-18 11:34:39.548: [42260016] *  P=005 S=004 D=gmail.com 
TTL=(21) MX=[gmail-smtp-in.l.google.com]
Fri 2023-08-18 11:34:39.548: [42260016] *  P=010 S=003 D=gmail.com 
TTL=(21) MX=[alt1.gmail-smtp-in.l.google.com]
Fri 2023-08-18 11:34:39.548: [42260016] *  P=020 S=001 D=gmail.com 
TTL=(21) MX=[alt2.gmail-smtp-in.l.google.com]
Fri 2023-08-18 11:34:39.548: [42260016] *  P=030 S=000 D=gmail.com 
TTL=(21) MX=[alt3.gmail-smtp-in.l.google.com]
Fri 2023-08-18 11:34:39.548: [42260016] *  P=040 S=002 D=gmail.com 
TTL=(21) MX=[alt4.gmail-smtp-in.l.google.com]
Fri 2023-08-18 11:34:39.548: [42260016] Attempting SMTP connection to 
gmail-smtp-in.l.google.com
Fri 2023-08-18 11:34:39.548: [42260016] Resolving A record for 
gmail-smtp-in.l.google.com (DNS Server: 203.119.13.77)...
Fri 2023-08-18 11:34:39.577: [42260016] * D=gmail-smtp-in.l.google.com 
TTL=(4) A=[74.125.24.26]
Fri 2023-08-18 11:34:39.577: [42260016] Attempting SMTP connection to 
74.125.24.26:25
Fri 2023-08-18 11:34:39.577: [42260016] *  10 connections to 
74.125.24.26 currently in progress; skipping for now
Fri 2023-08-18 11:34:39.579: [42260016] Attempting SMTP connection to 
alt1.gmail-smtp-in.l.google.com
Fri 2023-08-18 11:34:39.579: [42260016] Resolving A record for 
alt1.gmail-smtp-in.l.google.com (DNS Server: 203.119.13.77)...
Fri 2023-08-18 11:34:39.600: [42260016] * 
D=alt1.gmail-smtp-in.l.google.com TTL=(1) A=[173.194.202.26]
Fri 2023-08-18 11:34:39.600: [42260016] Attempting SMTP connection to 
173.194.202.26:25

Fri 2023-08-18 11:34:39.600: [42260016] Waiting for socket connection...
Fri 2023-08-18 11:34:39.800: [42260016] *  Connection established 
103.150.114.155:49648 --> 173.194.202.26:25

Fri 2023-08-18 11:34:39.800: [42260016] Waiting for protocol to start...
Fri 2023-08-18 11:34:39.986: [42260016] <-- 220 mx.google.com ESMTP 
e11-20020a65678b00b00563d9ff5157si777325pgr.547 - gsmtp

Fri 2023-08-18 11:34:39.988: [42260016] --> EHLO mail.persada.id
Fri 2023-08-18 11:34:40.175: [42260016] <-- 250-mx.google.com at your 
service, [103.150.114.155]

Fri 2023-08-18 11:34:40.175: [42260016] <-- 250-SIZE 157286400
Fri 2023-08-18 11:34:40.175: [42260016] <-- 250-8BITMIME
Fri 2023-08-18 11:34:40.175: [42260016] <-- 250-STARTTLS
Fri 2023-08-18 11:34:40.175: [42260016] <-- 250-ENHANCEDSTATUSCODES
Fri 2023-08-18 11:34:40.175: [42260016] <-- 250-PIPELINING
Fri 2023-08-18 11:34:40.175: [42260016] <-- 250-CHUNKING
Fri 2023-08-18 11:34:40.175: [42260016] <-- 250 SMTPUTF8
Fri 2023-08-18 11:34:40.175: [42260016] --> STARTTLS
Fri 2023-08-18 11:34:41.393: [42260016] <-- 220 2.0.0 Ready to start TLS
Fri 2023-08-18 11:34:41.580: [42260016] SSL negotiation successful (TLS 
1.2, TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256)
Fri 2023-08-18 11:34:41.581: [42260016] SSL certificate is valid 
(matches alt1.gmail-smtp-in.l.google.com and is signed by recognized CA)

Fri 2023-08-18 11:34:41.581: [42260016] MTA-STS success for gmail.com
Fri 2023-08-18 11:34:41.582: [42260016] TLS Reporting TXT record (from 
cache): v=TLSRPTv1;rua=mailto:sts-repo...@google.com

Fri 2023-08-18 11:34:41.582: [42260016] --> EHLO mail.persada.id
Fri 2023-08-18 11:34:41.768: [42260016] <-- 250-mx.google.com at your 
service, [103.150.114.155]

Fri 2023-08-18 11:34:41.768: [42260016] <-- 250-SIZE 157286400
Fri 2023-08-18 11:34:41.768: [42260016] <-- 250-8BITMIME
Fri 2023-08-18 11:34:41.768: [42260016] <-- 250-ENHANCEDSTATUSCODES
Fri 2023-08-18 11:34:41.768: [42260016] <-- 250-PIPELINING
Fri 2023-08-18 11:34:41.768: [42260016] <-- 250-CHUNKING
Fri 2023-08-18 11:34:41.768: [42260016] <-- 250 

[Mdaemon-L] Socket error 10054

[Bambang Setiawan via Mdaemon-L]

Dear Pak Syafril,

Mohon bantuannya untuk log sebagai berikut yang bikin email nyangkut di 
retry queue pak.


Wed 2023-08-16 08:57:53.796: --
Wed 2023-08-16 08:57:24.145: [42217142] REMOTE message: pd900101459.msg
Wed 2023-08-16 08:57:24.145: [42217142] *  Session 42217142; child 0001
Wed 2023-08-16 08:57:24.146: [42217142] *  From: hoer.kusdiy...@persada.id
Wed 2023-08-16 08:57:24.146: [42217142] *  To: sa...@multitowers.com
Wed 2023-08-16 08:57:24.146: [42217142] *  Subject: Request Permit Mitra 
Multi Solusi Site 11TGN0033/281557_STCIKOYA_MR For Maintenance & 
Troubleshoot
Wed 2023-08-16 08:57:24.146: [42217142] *  Message-ID: 
<022f01d9ce72$6aca59a0$405f0ce0$@persada.id>
Wed 2023-08-16 08:57:24.146: [42217142] *  Size: 1234817; 


Wed 2023-08-16 08:57:24.146: [42217142] *  Route slip host: multitowers.com
Wed 2023-08-16 08:57:24.147: [42217142] *  Route slip port: 25
Wed 2023-08-16 08:57:24.167: [42217142] Resolving MX record for 
multitowers.com (DNS Server: 203.119.13.77)...
Wed 2023-08-16 08:57:25.190: [42217142] *  P=010 S=000 D=multitowers.com 
TTL=(60) MX=[park-mx.above.com]
Wed 2023-08-16 08:57:25.190: [42217142] Attempting SMTP connection to 
park-mx.above.com
Wed 2023-08-16 08:57:25.190: [42217142] Resolving A record for 
park-mx.above.com (DNS Server: 203.119.13.77)...
Wed 2023-08-16 08:57:25.193: [42217142] *  D=park-mx.above.com TTL=(0) 
A=[103.224.212.34]
Wed 2023-08-16 08:57:25.193: [42217142] Attempting SMTP connection to 
103.224.212.34:25

Wed 2023-08-16 08:57:25.193: [42217142] Waiting for socket connection...
Wed 2023-08-16 08:57:25.419: [42217142] *  Connection established 
103.150.114.155:59286 --> 103.224.212.34:25

Wed 2023-08-16 08:57:25.419: [42217142] Waiting for protocol to start...
Wed 2023-08-16 08:57:25.645: [42217142] <-- 220 localhost go-smtpd
Wed 2023-08-16 08:57:25.647: [42217142] --> EHLO mail.persada.id
Wed 2023-08-16 08:57:25.886: [42217142] <-- 250-localhost Hello 
103.150.114.155:59286

Wed 2023-08-16 08:57:25.886: [42217142] <-- 250-8BITMIME
Wed 2023-08-16 08:57:25.886: [42217142] <-- 250-PIPELINING
Wed 2023-08-16 08:57:25.886: [42217142] <-- 250 HELP
Wed 2023-08-16 08:57:25.886: [42217142] --> MAIL 
From:
Wed 2023-08-16 08:57:25.886: [42217142] --> RCPT 
To:

Wed 2023-08-16 08:57:25.886: [42217142] --> RCPT To:
Wed 2023-08-16 08:57:25.886: [42217142] --> RCPT To:
Wed 2023-08-16 08:57:25.886: [42217142] --> DATA
Wed 2023-08-16 08:57:26.113: [42217142] <-- 250 Okay, I'll believe you 
for now
Wed 2023-08-16 08:57:26.113: [42217142] <-- 250 Okay, I'll believe you 
for now
Wed 2023-08-16 08:57:26.113: [42217142] <-- 250 Okay, I'll believe you 
for now
Wed 2023-08-16 08:57:26.113: [42217142] <-- 250 Okay, I'll believe you 
for now

Wed 2023-08-16 08:57:26.113: [42217142] <-- 354 Send away
Wed 2023-08-16 08:57:26.113: [42217142] Sending 
 to [103.224.212.34]
Wed 2023-08-16 08:57:57.503: [42217142] *  Socket error 10054 - 
Connection was reset by the other side!

Wed 2023-08-16 08:57:57.503: [42217142] Error writing to socket
Wed 2023-08-16 08:57:57.503: [42217142] Socket connection closed by the 
other side (how rude!)
Wed 2023-08-16 08:57:57.503: [42217142] *  Socket error 10053 - 
Connection abort.

Wed 2023-08-16 08:57:57.503: [42217142] Connection closed
Wed 2023-08-16 08:57:57.503: [42217142] *  This message is 1 days old; 
it has 1 days left to get delivered

Wed 2023-08-16 08:57:57.503: --

Atas bantuannya diucapkan terima kasih.


Salam.

--
--[mdaemon-l]--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com
Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com
Versi terakhir: MDaemon 23.0.2, SecurityGateway 9.0.3

[Mdaemon-L] SSL Expired

[Bambang Setiawan via Mdaemon-L]

Dear Pak Syafril,

FYI Pak, sesuai dengan arahan dari team support, kami downgrade MD nya 
ke 23.0.1 Pak,


Alhamdulillah sepertinya sudah bisa jalan let's encrypt nya.

The script run is complete.

Salam

--
--[mdaemon-l]--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com
Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com
Versi terakhir: MDaemon 23.0.2, SecurityGateway 9.0.3

[Mdaemon-L] SSL Expired

[Bambang Setiawan via Mdaemon-L]

On 8/10/2023 11:33 AM, Syafril Hermansyah via Mdaemon-L wrote:


Maksudnya MD v23.0.2?


Betul Pak



Coba diubah menjadi

[x] HTTP and HTTPS

lalu jalankan let's encrypt lagi.



Sebelum saya jalankan lagi let's encrypt sudah saya rubah sesuai arahan 
Bapak, namun karena masih error saya kembalikan ke setting sesuai yang 
saya capture tersebut pak.


Saya sudah coba kembali dengan setting sbb

Tetapi masih error pak




Juga periksa setting webmail

http://mdaemon.dutaint.co.id/mdaemon/23.0.1/wc--web_server.html

Run Webmail server using this TCP port = 80


Ini sudah sesuai pak
Kalau posisi webmail sudah di ubah menjadi accept http dan https, maka 
webmail bisa diakses melalui http://mail.persada.id



Baik Pak
--
--[mdaemon-l]--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com
Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com
Versi terakhir: MDaemon 23.0.2, SecurityGateway 9.0.3

[Mdaemon-L] SSL Expired

[Bambang Setiawan via Mdaemon-L]

On 8/10/2023 10:45 AM, Syafril Hermansyah via Mdaemon-L wrote:


Pakai MDaemon versi berapa dan run di windows versi apa?


Kami menggunakan MDaemon v32.0.2 dan Windows Server 2019 Standard Pak



Posisi Webmail accept bagaimana?

http://mdaemon.dutaint.co.id/mdaemon/23.0.1/ssl_worldclient.html


Posisi webmail sebagai berikut pak


Kalau posisinyanya diubah menjadi "HTTP and HTTPS" lalu run let's 
encrypt script apakah bisa terbentuk SSL R3 yang baru?


http://mdaemon.dutaint.co.id/mdaemon/23.0.1/ssl_lets-encrypt.html


Saya sudah coba seperti ini tapi tetap masih error pak




Periksa letsecnrypt log untuk problem persisnya.

Kalau setelah melakun action diatas (run let's encrypt script) masih 
belum berhasil, kirimkan letsencrypt log file lengkap ke 
supp...@dutaint.co.id untuk diperiksa.




Baik Pak,

Btw solusi sementaranya sarannya bagaimana ya pak agar bisa seperti 
normal, karena untuk user saya yang memakai chrome ada yang laporan 
tidak bisa akses webmailnya.



Terima kasih


--
--[mdaemon-l]--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com
Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com
Versi terakhir: MDaemon 23.0.2, SecurityGateway 9.0.3

[Mdaemon-L] Error Retrieving Certificate

[Bambang Setiawan via Mdaemon-L]

On 12/07/2023 10:21, Syafril Hermansyah via Mdaemon-L wrote:


Periksa apakah webmail accept http dan https

Pilihan yang saya aktifkan ini pak

[x] HTTP redirect to HTTPS


kalau new SSL Certificate memang belum terbentuk


Ini sudah saya buat pak


run Let's Encrypt script

klik "Run Now"


Pada saat saya click run now, muncul kembali notifikasi email yang 
sebelumnya saya sampaikan dari postmaster pak



Salam

--
--[mdaemon-l]--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com
Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com
Versi terakhir: MDaemon 23.0.2, SecurityGateway 9.0.2

[Mdaemon-L] Error Retrieving Certificate

[Bambang Setiawan via Mdaemon-L]

Dear Pak Syafril.


Pagi ini saya mendapatkan email dari postmaster seperti ini :

An error occurred during the LetsEncrypt process. The error message is: 
Creating new certificate.



Mohon bantuan/arahan Bapak bagaimana saya harus melakukan pengecekannya.


Terima kasih

--
--[mdaemon-l]--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com
Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com
Versi terakhir: MDaemon 23.0.2, SecurityGateway 9.0.2

[Mdaemon-L] Does not have valid PTR record

[Bambang Setiawan via Mdaemon-L]

Dear Pak Syafril,


Mohon bantuan update untuk log sbb :


Sat 2023-05-20 12:55:45.682: --
Sat 2023-05-20 12:55:45.637: [40247272] Session 40247272; child 0001
Sat 2023-05-20 12:55:45.637: [40247272] Accepting SMTP connection from 
180.235.148.234:59954 to 103.150.114.155:25
Sat 2023-05-20 12:55:45.637: [40247272] Location Screen says connection 
is from Indonesia, Asia
Sat 2023-05-20 12:55:45.638: [40247272] --> 220 mail.persada.id ESMTP 
MDaemon 23.0.1; Sat, 20 May 2023 12:55:45 +0700

Sat 2023-05-20 12:55:45.641: [40247272] <-- EHLO server.elkomindo.co.id
Sat 2023-05-20 12:55:45.641: [40247272] --> 250-mail.persada.id Hello 
server.elkomindo.co.id [180.235.148.234], pleased to meet you

Sat 2023-05-20 12:55:45.641: [40247272] --> 250-ETRN
Sat 2023-05-20 12:55:45.641: [40247272] --> 250-8BITMIME
Sat 2023-05-20 12:55:45.641: [40247272] --> 250-ENHANCEDSTATUSCODES
Sat 2023-05-20 12:55:45.641: [40247272] --> 250-PIPELINING
Sat 2023-05-20 12:55:45.641: [40247272] --> 250-CHUNKING
Sat 2023-05-20 12:55:45.641: [40247272] --> 250-STARTTLS
Sat 2023-05-20 12:55:45.641: [40247272] --> 250 SIZE
Sat 2023-05-20 12:55:45.643: [40247272] <-- STARTTLS
Sat 2023-05-20 12:55:45.643: [40247272] --> 220 2.7.0 Ready to start TLS
Sat 2023-05-20 12:55:45.672: [40247272] SSL negotiation successful (TLS 
1.2, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384)

Sat 2023-05-20 12:55:45.675: [40247272] <-- EHLO server.elkomindo.co.id
Sat 2023-05-20 12:55:45.676: [40247272] --> 250-mail.persada.id Hello 
server.elkomindo.co.id [180.235.148.234], pleased to meet you

Sat 2023-05-20 12:55:45.676: [40247272] --> 250-ETRN
Sat 2023-05-20 12:55:45.676: [40247272] --> 250-8BITMIME
Sat 2023-05-20 12:55:45.676: [40247272] --> 250-ENHANCEDSTATUSCODES
Sat 2023-05-20 12:55:45.676: [40247272] --> 250-PIPELINING
Sat 2023-05-20 12:55:45.676: [40247272] --> 250-CHUNKING
Sat 2023-05-20 12:55:45.676: [40247272] --> 250-REQUIRETLS
Sat 2023-05-20 12:55:45.676: [40247272] --> 250 SIZE
Sat 2023-05-20 12:55:45.678: [40247272] <-- MAIL 
FROM: SIZE=4335
Sat 2023-05-20 12:55:45.689: [40247272] Performing PTR lookup 
(234.148.235.180.IN-ADDR.ARPA)
Sat 2023-05-20 12:55:46.648: [40247272] *  DNS server reports domain 
name unknown
Sat 2023-05-20 12:55:46.648: [40247272] *  MDaemon configured to drop 
connection when domain name unknown

Sat 2023-05-20 12:55:46.648: [40247272]  End PTR results
Sat 2023-05-20 12:55:46.648: [40247272] --> 501 5.7.0 180.235.148.234 
does not have valid PTR record
Sat 2023-05-20 12:55:46.648: [40247272] SMTP session terminated (Bytes 
in/out: 668/4296)

Sat 2023-05-20 12:55:46.649: --

Atas bantuannya diucapkan terima kasih


Salam

--
--[mdaemon-l]--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com
Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com
Versi terakhir: MDaemon 23.0.1, SecurityGateway 9.0.2

[Mdaemon-L] Rejected for policy reasons (6019E5646C14E842302)

[Bambang Setiawan via Mdaemon-L]

On 26/05/2023 15:04, Syafril Hermansyah via Mdaemon-L wrote:


Coba masukkan *@zendesk.com kedalam SPF whitelist.
Lihat/monitor hasilnya setelah ini.





SPF domain yahoo.com salah syntax, tetepi mestinya tidak masalah saat 
forward karena SPF hanya mencheck From  dari connecting server.


Apakah saat ini semua mail dari @yahoo.com yang di autoforward ditolak 
oleh gmail.com?
Jika ya, maka bisa masukkan @yahoo.com kedalam SPF whitelist lalu 
monitor beberapa hari kedepan.



Saya sudah masukan dua domain tersebut  dalam SPF Whitelist pak

Hari ini saya masih ada email yang diforward ke 
dispatcherpers...@outlook.com masuk ke bad queue pak


Tue 2023-05-30 16:20:17.526: --
Tue 2023-05-30 16:19:58.171: [40500195] REMOTE message: pd5001001527843.msg
Tue 2023-05-30 16:19:58.171: [40500195] *  Session 40500195; child 0004
Tue 2023-05-30 16:19:58.174: [40500195] *  Forwarded from: 
dispatc...@persada.id
Tue 2023-05-30 16:19:58.174: [40500195] *  From: 
ms.isat.noc@ericsson.com

Tue 2023-05-30 16:19:58.174: [40500195] *  To: dispatcherpers...@outlook.com
Tue 2023-05-30 16:19:58.174: [40500195] *  Subject: RE: [Escalate Alarm] 
Link Down Metro-E Fiberization Segment 
16BAT0014/IN_MALLBATU_MC/MLG-IMLL-OPT-H910C <> 
16BTU0069/TAWANG_ARGO_TB/MLG-TWAG-OPT-H910C <>
Tue 2023-05-30 16:19:58.174: [40500195] *  Message-ID: 

Tue 2023-05-30 16:19:58.174: [40500195] *  Size: 226030; 

Tue 2023-05-30 16:19:58.178: [40500195] MTA-STS policy for outlook.com 
found in cache

Tue 2023-05-30 16:19:58.178: [40500195] *  version: STSv1
Tue 2023-05-30 16:19:58.178: [40500195] *  mode: enforce
Tue 2023-05-30 16:19:58.178: [40500195] *  mx: *.olc.protection.outlook.com
Tue 2023-05-30 16:19:58.178: [40500195] *  max_age: 604800
Tue 2023-05-30 16:19:58.233: [40500195] Resolving MX record for 
outlook.com (DNS Server: 203.119.13.77)...
Tue 2023-05-30 16:19:58.249: [40500195] *  P=005 S=000 D=outlook.com 
TTL=(0) MX=[outlook-com.olc.protection.outlook.com]
Tue 2023-05-30 16:19:58.249: [40500195] Attempting SMTP connection to 
outlook-com.olc.protection.outlook.com
Tue 2023-05-30 16:19:58.250: [40500195] Resolving A record for 
outlook-com.olc.protection.outlook.com (DNS Server: 203.119.13.77)...
Tue 2023-05-30 16:19:58.253: [40500195] * 
D=outlook-com.olc.protection.outlook.com TTL=(0) A=[104.47.73.161]
Tue 2023-05-30 16:19:58.253: [40500195] * 
D=outlook-com.olc.protection.outlook.com TTL=(0) A=[104.47.74.33]
Tue 2023-05-30 16:19:58.253: [40500195] Randomly picked 104.47.74.33 
from list of possible hosts
Tue 2023-05-30 16:19:58.253: [40500195] Attempting SMTP connection to 
104.47.74.33:25

Tue 2023-05-30 16:19:58.253: [40500195] Waiting for socket connection...
Tue 2023-05-30 16:19:58.498: [40500195] *  Connection established 
103.150.114.155:50059 --> 104.47.74.33:25

Tue 2023-05-30 16:19:58.498: [40500195] Waiting for protocol to start...
Tue 2023-05-30 16:19:58.744: [40500195] <-- 220 
BN8NAM04FT047.mail.protection.outlook.com Microsoft ESMTP MAIL Service 
ready at Tue, 30 May 2023 09:20:02 +

Tue 2023-05-30 16:19:58.747: [40500195] --> EHLO mail.persada.id
Tue 2023-05-30 16:19:58.993: [40500195] <-- 
250-BN8NAM04FT047.mail.protection.outlook.com Hello [103.150.114.155]

Tue 2023-05-30 16:19:58.993: [40500195] <-- 250-SIZE 49283072
Tue 2023-05-30 16:19:58.993: [40500195] <-- 250-PIPELINING
Tue 2023-05-30 16:19:58.993: [40500195] <-- 250-DSN
Tue 2023-05-30 16:19:58.993: [40500195] <-- 250-ENHANCEDSTATUSCODES
Tue 2023-05-30 16:19:58.993: [40500195] <-- 250-STARTTLS
Tue 2023-05-30 16:19:58.993: [40500195] <-- 250-8BITMIME
Tue 2023-05-30 16:19:58.993: [40500195] <-- 250-BINARYMIME
Tue 2023-05-30 16:19:58.993: [40500195] <-- 250-CHUNKING
Tue 2023-05-30 16:19:58.993: [40500195] <-- 250 SMTPUTF8
Tue 2023-05-30 16:19:58.993: [40500195] --> STARTTLS
Tue 2023-05-30 16:19:59.237: [40500195] <-- 220 2.0.0 SMTP server ready
Tue 2023-05-30 16:19:59.772: [40500195] SSL negotiation successful (TLS 
1.2, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384)
Tue 2023-05-30 16:19:59.773: [40500195] SSL certificate is valid 
(matches outlook-com.olc.protection.outlook.com and is signed by 
recognized CA)

Tue 2023-05-30 16:19:59.773: [40500195] MTA-STS success for outlook.com
Tue 2023-05-30 16:19:59.773: [40500195] TLS Reporting TXT record (from 
cache): v=TLSRPTv1;rua=https://tlsrpt.azurewebsites.net/report

Tue 2023-05-30 16:19:59.773: [40500195] --> EHLO mail.persada.id
Tue 2023-05-30 16:20:00.019: [40500195] <-- 
250-BN8NAM04FT047.mail.protection.outlook.com Hello [103.150.114.155]

Tue 2023-05-30 16:20:00.019: [40500195] <-- 250-SIZE 49283072
Tue 2023-05-30 16:20:00.019: [40500195] <-- 250-PIPELINING
Tue 2023-05-30 16:20:00.019: [40500195] <-- 250-DSN
Tue 2023-05-30 16:20:00.019: [40500195] <-- 250-ENHANCEDSTATUSCODES
Tue 2023-05-30 16:20:00.019: [40500195] <-- 250-8BITMIME
Tue 2023-05-30 16:20:00.019: [40500195] <-- 250-BINARYMIME
Tue 2023-05-30 16:20:00.019: [40500195] <-- 250-CHUNKING
Tue 2023-05-30 16:20:00.019: [40500195] <-- 250 

[Mdaemon-L] Rejected for policy reasons (6019E5646C14E842302)

[Bambang Setiawan via Mdaemon-L]

On 26/05/2023 10:44, Syafril Hermansyah via Mdaemon-L 
(Mdaemon-L@dutaint.com) wrote:



Ini (aslinya) mail lama, di forward sebelum tanggal 2023-05-24?

yang email lama hanya yang dari ericsson itu pak, untuk yang dari 
@talentabymekari.zendesk.com memang emailnya di tanggal 2023-05-24 
diterimanya pak.


X-MDAV-Result: clean
X-MDAV-Processed: mail.persada.id, Wed, 24 May 2023 09:30:05 +0700
X-Spam-Processed: mail.persada.id, Wed, 24 May 2023 09:30:02 +0700
X-Spam-Level:
X-Spam-Status: No, score=-0.0 required=5.0 tests=HTML_FONT_LOW_CONTRAST,
    HTML_MESSAGE,SPF_PASS,T_SCC_BODY_TEXT_LINE shortcircuit=no
    autolearn=disabled version=3.4.4
X-Spam-Report:
    * -0.0 SPF_PASS SPF: sender matches SPF record
    *  0.0 HTML_MESSAGE BODY: HTML included in message
    *  0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or
    *  identical to background
    * -0.0 T_SCC_BODY_TEXT_LINE No description available.
X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24)
Authentication-Results: mail.persada.id;
    spf=pass smtp.mailfrom=supp...@talentabymekari.zendesk.com;
    dkim=pass (good signature) header.d=zendesk.com header.b=O8SqB3PDBa;
    dmarc=pass header.from=talentabymekari.zendesk.com (p=reject 
sampling=18 pct=100);
    iprev=pass policy.iprev=103.151.192.8 (PTR 
outbyoip8.pod25.apne1.zdsys.com);
    iprev=pass policy.iprev=103.151.192.8 (HELO 
outbyoip8.pod25.apne1.zdsys.com);
    iprev=fail reason="does not match" policy.iprev=103.151.192.8 (MAIL 
supp...@talentabymekari.zendesk.com)

Received-SPF: pass (mail.persada.id: domain talentabymekari.zendesk.com
    designates 103.151.192.8 as permitted sender)
    receiver=mail.persada.id; client-ip=103.151.192.8;
    mechanism=ip4:103.151.192.0/23; 
envelope-from="supp...@talentabymekari.zendesk.com";

    helo=outbyoip8.pod25.apne1.zdsys.com;
Received: from outbyoip8.pod25.apne1.zdsys.com 
(outbyoip8.pod25.apne1.zdsys.com [103.151.192.8])
    by mail.persada.id (103.150.114.155) (MDaemon PRO v23.0.1) with 
ESMTPS id md5001006661782.msg;

    Wed, 24 May 2023 09:30:00 +0700
X-MDDKIM-Result: unapproved (mail.persada.id)
X-MDSPF-Result: unapproved (mail.persada.id)
X-MDRemoteIP: 103.151.192.8
X-MDHelo: outbyoip8.pod25.apne1.zdsys.com
X-MDArrival-Date: Wed, 24 May 2023 09:30:00 +0700
X-MDOrigin-Country: AU, OC
X-Rcpt-To: juan...@persada.id
X-MDRcpt-To: juan...@persada.id
X-Envelope-From: supp...@talentabymekari.zendesk.com
Received: from zendesk.com (unknown [10.221.181.100])
    by outbyoip8.pod25.apne1.zdsys.com (Postfix) with ESMTP id 
4QQwBS4tG7z14K30

    for ; Wed, 24 May 2023 02:29:52 + (UTC)
Date: Wed, 24 May 2023 02:29:52 +
From: "Talenta (supp...@talentabymekari.zendesk.com)" 


Reply-To: Talenta 
To: JUANGTA 
Message-ID: <37q50km6200_646d76a011f5_4f4a9c483788_sp...@zendesk.com>
In-Reply-To: <37q50km6...@zendesk.com>
Subject: Talenta Re: Percakapan dengan JUANGTA
Mime-Version: 1.0
Content-Type: multipart/alternative;
 boundary="--==_mimepart_646d76a05c917_4f4a9c48386c";
 charset=utf-8
Content-Transfer-Encoding: 7bit
X-Delivery-Context: event-id-18841559276825
Auto-Submitted: auto-generated
X-Auto-Response-Suppress: All
X-Mailer: Zendesk Mailer
X-Zendesk-From-Account-Id: 9ce7179
X-Zendesk-Email-Id: 01H15SER9HYRR4FH0H3MAGVH24
DKIM-Signature:  v=1; a=rsa-sha256; c=relaxed/relaxed; d=zendesk.com;
 q=dns/txt; s=zendesk2; t=1684895392;
 bh=FdBBBE2WcptVpjiCQtrYZfBTmCAiuLiYAv7ogS2fB/Y=;
 
h=date:from:reply-to:to:message-id:in-reply-to:subject:mime-version:content-type:content-transfer-encoding;
 
b=O8SqB3PDBaNSdUqaZWWAOwxwTsPsqSZtH10rIvYgCrbUk5Vdm2Eg9NfTcYma1KumXYKV5e8fTB9S6TFu0+/mrxdHh1EH7eULkW9THtM0Iq1XOvUa/VJEahk0JG02IO7iA1kW268xa5muFDO3OWOLXolummvM8hTz2MjfTV/Q1+fwtGUCCtiTHZVRQA+r+w/iCs84fP9uyVyJ6URDj5kTXLZgTO1/h1NGXyiiqrYTsO9Qt961xZfReWC731hxl512Z1R1i+pTAegiExFDdBwwReFrCIwTUxmFsbu+mKKhUm0wrfnuZ0kFPmX+9YUlHpgp8ASiQ2OthhGgjZryFzEcuw==
X-MDRedirect: 1
X-MDRedirect_From: juan...@persada.id
X-Return-Path: 
X-MDaemon-Deliver-To: 
X-MDBadQueue-Reason: undeliverable forwarded message
X-MDBadQueue-Reason: undeliverable forwarded message
X-MDBadQueue-Reason: undeliverable forwarded message



Ini (aslinya) mail lama, di forward sebelum tanggal 2023-05-24?



Ini diterima ditanggal 2023-05-26 pak

X-MDAV-Result: clean
X-MDAV-Processed: mail.persada.id, Fri, 26 May 2023 07:44:29 +0700
X-Spam-Processed: mail.persada.id, Fri, 26 May 2023 07:44:28 +0700
X-Spam-Level: *
X-Spam-Status: No, score=1.7 required=5.0 
tests=FREEMAIL_FROM,GMD_PDF_SQUARE,

    HTML_MESSAGE,MALFORMED_FREEMAIL,MISSING_HEADERS,SPF_PASS,
    T_FREEMAIL_DOC_PDF,T_SCC_BODY_TEXT_LINE shortcircuit=no
    autolearn=disabled version=3.4.4
X-Spam-Report:
    *  1.2 MISSING_HEADERS Missing To: header
    * -0.0 SPF_PASS SPF: sender matches SPF record
    *  0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
    *  provider
    *  [guntaraagum[at]yahoo.com]
    *  0.5 GMD_PDF_SQUARE BODY: Contains pdf 180-360 (high) x 180-360
    *  (wide)
    *  0.0 

[Mdaemon-L] Rejected for policy reasons (6019E5646C14E842302)

[Bambang Setiawan via Mdaemon-L]

On 24/05/2023 10:02, Syafril Hermansyah via Mdaemon-L wrote:


Coba di test untuk mail dari milis ini yang diterima di akun 
@persada.id di autofroward ke @gmail.com.


Untuk ini bisa pak,

Wed 2023-05-24 10:46:40.494: --
Wed 2023-05-24 10:46:38.736: [40345183] REMOTE message: pd5001001519320.msg
Wed 2023-05-24 10:46:38.736: [40345183] *  Session 40345183; child 0002
Wed 2023-05-24 10:46:38.738: [40345183] *  Forwarded from: 
bambang.setia...@persada.id

Wed 2023-05-24 10:46:38.738: [40345183] *  From: Mdaemon-L@dutaint.com
Wed 2023-05-24 10:46:38.738: [40345183] *  To: b3nkb...@gmail.com
Wed 2023-05-24 10:46:38.738: [40345183] *  Subject: [Mdaemon-L] Update 
PTR Record
Wed 2023-05-24 10:46:38.738: [40345183] *  Message-ID: 

Wed 2023-05-24 10:46:38.738: [40345183] *  Size: 65916; 

Wed 2023-05-24 10:46:38.742: [40345183] MTA-STS policy for gmail.com 
found in cache

Wed 2023-05-24 10:46:38.742: [40345183] *  version: STSv1
Wed 2023-05-24 10:46:38.742: [40345183] *  mode: enforce
Wed 2023-05-24 10:46:38.742: [40345183] *  mx: gmail-smtp-in.l.google.com
Wed 2023-05-24 10:46:38.742: [40345183] *  mx: *.gmail-smtp-in.l.google.com
Wed 2023-05-24 10:46:38.742: [40345183] *  max_age: 86400
Wed 2023-05-24 10:46:38.746: [40345183] Resolving MX record for 
gmail.com (DNS Server: 203.119.13.77)...
Wed 2023-05-24 10:46:38.748: [40345183] *  P=005 S=004 D=gmail.com 
TTL=(11) MX=[gmail-smtp-in.l.google.com]
Wed 2023-05-24 10:46:38.748: [40345183] *  P=010 S=000 D=gmail.com 
TTL=(11) MX=[alt1.gmail-smtp-in.l.google.com]
Wed 2023-05-24 10:46:38.748: [40345183] *  P=020 S=002 D=gmail.com 
TTL=(11) MX=[alt2.gmail-smtp-in.l.google.com]
Wed 2023-05-24 10:46:38.748: [40345183] *  P=030 S=003 D=gmail.com 
TTL=(11) MX=[alt3.gmail-smtp-in.l.google.com]
Wed 2023-05-24 10:46:38.749: [40345183] *  P=040 S=001 D=gmail.com 
TTL=(11) MX=[alt4.gmail-smtp-in.l.google.com]
Wed 2023-05-24 10:46:38.749: [40345183] Attempting SMTP connection to 
gmail-smtp-in.l.google.com
Wed 2023-05-24 10:46:38.749: [40345183] Resolving A record for 
gmail-smtp-in.l.google.com (DNS Server: 203.119.13.77)...
Wed 2023-05-24 10:46:38.751: [40345183] * D=gmail-smtp-in.l.google.com 
TTL=(3) A=[172.217.194.27]
Wed 2023-05-24 10:46:38.751: [40345183] Attempting SMTP connection to 
172.217.194.27:25

Wed 2023-05-24 10:46:38.751: [40345183] Waiting for socket connection...
Wed 2023-05-24 10:46:38.766: [40345183] *  Connection established 
103.150.114.155:63797 --> 172.217.194.27:25

Wed 2023-05-24 10:46:38.766: [40345183] Waiting for protocol to start...
Wed 2023-05-24 10:46:38.937: [40345183] <-- 220 mx.google.com ESMTP 
c9-20020a17090a8d0900b00246a5991cc6si331575pjo.162 - gsmtp

Wed 2023-05-24 10:46:38.939: [40345183] --> EHLO mail.persada.id
Wed 2023-05-24 10:46:39.112: [40345183] <-- 250-mx.google.com at your 
service, [103.150.114.155]

Wed 2023-05-24 10:46:39.112: [40345183] <-- 250-SIZE 157286400
Wed 2023-05-24 10:46:39.112: [40345183] <-- 250-8BITMIME
Wed 2023-05-24 10:46:39.112: [40345183] <-- 250-STARTTLS
Wed 2023-05-24 10:46:39.112: [40345183] <-- 250-ENHANCEDSTATUSCODES
Wed 2023-05-24 10:46:39.112: [40345183] <-- 250-PIPELINING
Wed 2023-05-24 10:46:39.112: [40345183] <-- 250-CHUNKING
Wed 2023-05-24 10:46:39.112: [40345183] <-- 250 SMTPUTF8
Wed 2023-05-24 10:46:39.112: [40345183] --> STARTTLS
Wed 2023-05-24 10:46:39.282: [40345183] <-- 220 2.0.0 Ready to start TLS
Wed 2023-05-24 10:46:39.298: [40345183] SSL negotiation successful (TLS 
1.2, TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256)
Wed 2023-05-24 10:46:39.300: [40345183] SSL certificate is valid 
(matches gmail-smtp-in.l.google.com and is signed by recognized CA)

Wed 2023-05-24 10:46:39.300: [40345183] MTA-STS success for gmail.com
Wed 2023-05-24 10:46:39.300: [40345183] TLS Reporting TXT record (from 
cache): v=TLSRPTv1;rua=mailto:sts-repo...@google.com

Wed 2023-05-24 10:46:39.300: [40345183] --> EHLO mail.persada.id
Wed 2023-05-24 10:46:39.470: [40345183] <-- 250-mx.google.com at your 
service, [103.150.114.155]

Wed 2023-05-24 10:46:39.470: [40345183] <-- 250-SIZE 157286400
Wed 2023-05-24 10:46:39.470: [40345183] <-- 250-8BITMIME
Wed 2023-05-24 10:46:39.470: [40345183] <-- 250-ENHANCEDSTATUSCODES
Wed 2023-05-24 10:46:39.470: [40345183] <-- 250-PIPELINING
Wed 2023-05-24 10:46:39.470: [40345183] <-- 250-CHUNKING
Wed 2023-05-24 10:46:39.470: [40345183] <-- 250 SMTPUTF8
Wed 2023-05-24 10:46:39.470: [40345183] --> MAIL 
From: SIZE=65916

Wed 2023-05-24 10:46:39.470: [40345183] --> RCPT To:
Wed 2023-05-24 10:46:39.470: [40345183] --> DATA
Wed 2023-05-24 10:46:39.640: [40345183] <-- 250 2.1.0 OK 
c9-20020a17090a8d0900b00246a5991cc6si331575pjo.162 - gsmtp
Wed 2023-05-24 10:46:39.735: [40345183] <-- 250 2.1.5 OK 
c9-20020a17090a8d0900b00246a5991cc6si331575pjo.162 - gsmtp
Wed 2023-05-24 10:46:39.735: [40345183] <-- 354  Go ahead 
c9-20020a17090a8d0900b00246a5991cc6si331575pjo.162 - gsmtp
Wed 2023-05-24 10:46:39.735: [40345183] Sending 
 to [172.217.194.27]

Wed 2023-05-24 10:46:39.768: [40345183] 

[Mdaemon-L] Update PTR Record

[Bambang Setiawan via Mdaemon-L]

Dear Pak Syafril,


Mohon bantuannya untuk update PTR Record berikut :

Wed 2023-05-17 12:10:24.621: --

Wed 2023-05-17 12:10:25.076: [40172708] Session 40172708; child 0002

Wed 2023-05-17 12:10:25.076: [40172708] Accepting SMTP connection from 
103.41.206.161:41036 to 103.150.114.155:25


Wed 2023-05-17 12:10:25.076: [40172708] Location Screen says connection 
is from Indonesia, Asia


Wed 2023-05-17 12:10:25.077: [40172708] --> 220 mail.persada.id ESMTP 
MDaemon 23.0.1; Wed, 17 May 2023 12:10:25 +0700


Wed 2023-05-17 12:10:25.080: [40172708] <-- EHLO ocistok.co.id

Wed 2023-05-17 12:10:25.080: [40172708] --> 250-mail.persada.id Hello 
ocistok.co.id [103.41.206.161], pleased to meet you


Wed 2023-05-17 12:10:25.080: [40172708] --> 250-ETRN

Wed 2023-05-17 12:10:25.080: [40172708] --> 250-8BITMIME

Wed 2023-05-17 12:10:25.080: [40172708] --> 250-ENHANCEDSTATUSCODES

Wed 2023-05-17 12:10:25.080: [40172708] --> 250-PIPELINING

Wed 2023-05-17 12:10:25.080: [40172708] --> 250-CHUNKING

Wed 2023-05-17 12:10:25.080: [40172708] --> 250-STARTTLS

Wed 2023-05-17 12:10:25.080: [40172708] --> 250 SIZE

Wed 2023-05-17 12:10:25.084: [40172708] <-- STARTTLS

Wed 2023-05-17 12:10:25.084: [40172708] --> 220 2.7.0 Ready to start TLS

Wed 2023-05-17 12:10:25.109: [40172708] SSL negotiation successful (TLS 
1.2, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384)


Wed 2023-05-17 12:10:25.112: [40172708] <-- EHLO ocistok.co.id

Wed 2023-05-17 12:10:25.113: [40172708] --> 250-mail.persada.id Hello 
ocistok.co.id [103.41.206.161], pleased to meet you


Wed 2023-05-17 12:10:25.113: [40172708] --> 250-ETRN

Wed 2023-05-17 12:10:25.113: [40172708] --> 250-8BITMIME

Wed 2023-05-17 12:10:25.113: [40172708] --> 250-ENHANCEDSTATUSCODES

Wed 2023-05-17 12:10:25.113: [40172708] --> 250-PIPELINING

Wed 2023-05-17 12:10:25.113: [40172708] --> 250-CHUNKING

Wed 2023-05-17 12:10:25.113: [40172708] --> 250-REQUIRETLS

Wed 2023-05-17 12:10:25.113: [40172708] --> 250 SIZE

Wed 2023-05-17 12:10:25.115: [40172708] <-- MAIL 
FROM: SIZE=46748


Wed 2023-05-17 12:10:25.124: [40172708] Performing PTR lookup 
(161.206.41.103.IN-ADDR.ARPA)


Wed 2023-05-17 12:10:25.242: [40172708] *D=161.206.41.103.IN-ADDR.ARPA 
TTL=(60) PTR=[ocistok.co.id]


Wed 2023-05-17 12:10:25.263: [40172708] *D=ocistok.co.id TTL=(5) 
A=[172.67.198.48]


Wed 2023-05-17 12:10:25.263: [40172708] *D=ocistok.co.id TTL=(5) 
A=[104.21.52.108]


Wed 2023-05-17 12:10:25.263: [40172708] *MDaemon configured to drop 
connection on PTR record mismatch


Wed 2023-05-17 12:10:25.263: [40172708]  End PTR results

Wed 2023-05-17 12:10:25.263: [40172708] --> 501 5.7.0 Domain must resolve

Wed 2023-05-17 12:10:25.263: [40172708] SMTP session terminated (Bytes 
in/out: 881/3734)


Wed 2023-05-17 12:10:25.263: --


Atas bantuannya diucapkan terima kasih.


Salam.

--
--[mdaemon-l]--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com
Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com
Versi terakhir: MDaemon 23.0.1, SecurityGateway 9.0.2

[Mdaemon-L] Rejected for policy reasons (6019E5646C14E842302)

[Bambang Setiawan via Mdaemon-L]

On 24/05/2023 07:21, Syafril Hermansyah via Mdaemon-L wrote:


Coba mail (compose) baru.


Jika new compose bisa masuk pak


Wed 2023-05-24 08:03:28.316: --
Wed 2023-05-24 08:03:28.297: [40339898] REMOTE message: pd3501001518889.msg
Wed 2023-05-24 08:03:28.297: [40339898] *  Session 40339898; child 0002
Wed 2023-05-24 08:03:28.298: [40339898] *  From: bambang.setia...@persada.id
Wed 2023-05-24 08:03:28.298: [40339898] *  To: dispatcherpers...@outlook.com
Wed 2023-05-24 08:03:28.298: [40339898] *  Subject: Tes
Wed 2023-05-24 08:03:28.298: [40339898] *  Message-ID: 
<001f01d98ddb$80f3dd00$82db9700$@persada.id>
Wed 2023-05-24 08:03:28.298: [40339898] *  Size: 5729; 

Wed 2023-05-24 08:03:28.302: [40339898] MTA-STS policy for outlook.com 
found in cache

Wed 2023-05-24 08:03:28.302: [40339898] *  version: STSv1
Wed 2023-05-24 08:03:28.302: [40339898] *  mode: enforce
Wed 2023-05-24 08:03:28.302: [40339898] *  mx: *.olc.protection.outlook.com
Wed 2023-05-24 08:03:28.302: [40339898] *  max_age: 604800
Wed 2023-05-24 08:03:28.306: [40339898] Resolving MX record for 
outlook.com (DNS Server: 203.119.13.77)...
Wed 2023-05-24 08:03:28.312: [40339898] *  P=005 S=000 D=outlook.com 
TTL=(0) MX=[outlook-com.olc.protection.outlook.com]
Wed 2023-05-24 08:03:28.312: [40339898] Attempting SMTP connection to 
outlook-com.olc.protection.outlook.com
Wed 2023-05-24 08:03:28.313: [40339898] Resolving A record for 
outlook-com.olc.protection.outlook.com (DNS Server: 203.119.13.77)...
Wed 2023-05-24 08:03:28.315: [40339898] * 
D=outlook-com.olc.protection.outlook.com TTL=(0) A=[104.47.17.161]
Wed 2023-05-24 08:03:28.315: [40339898] * 
D=outlook-com.olc.protection.outlook.com TTL=(0) A=[104.47.17.97]
Wed 2023-05-24 08:03:28.315: [40339898] Randomly picked 104.47.17.97 
from list of possible hosts
Wed 2023-05-24 08:03:28.315: [40339898] Attempting SMTP connection to 
104.47.17.97:25

Wed 2023-05-24 08:03:28.315: [40339898] Waiting for socket connection...
Wed 2023-05-24 08:03:28.485: [40339898] *  Connection established 
103.150.114.155:51819 --> 104.47.17.97:25

Wed 2023-05-24 08:03:28.485: [40339898] Waiting for protocol to start...
Wed 2023-05-24 08:03:28.656: [40339898] <-- 220 
DB8EUR05FT067.mail.protection.outlook.com Microsoft ESMTP MAIL Service 
ready at Wed, 24 May 2023 01:03:29 +

Wed 2023-05-24 08:03:28.657: [40339898] --> EHLO mail.persada.id
Wed 2023-05-24 08:03:28.828: [40339898] <-- 
250-DB8EUR05FT067.mail.protection.outlook.com Hello [103.150.114.155]

Wed 2023-05-24 08:03:28.828: [40339898] <-- 250-SIZE 49283072
Wed 2023-05-24 08:03:28.828: [40339898] <-- 250-PIPELINING
Wed 2023-05-24 08:03:28.828: [40339898] <-- 250-DSN
Wed 2023-05-24 08:03:28.828: [40339898] <-- 250-ENHANCEDSTATUSCODES
Wed 2023-05-24 08:03:28.828: [40339898] <-- 250-STARTTLS
Wed 2023-05-24 08:03:28.828: [40339898] <-- 250-8BITMIME
Wed 2023-05-24 08:03:28.828: [40339898] <-- 250-BINARYMIME
Wed 2023-05-24 08:03:28.828: [40339898] <-- 250-CHUNKING
Wed 2023-05-24 08:03:28.828: [40339898] <-- 250 SMTPUTF8
Wed 2023-05-24 08:03:28.828: [40339898] --> STARTTLS
Wed 2023-05-24 08:03:28.998: [40339898] <-- 220 2.0.0 SMTP server ready
Wed 2023-05-24 08:03:29.383: [40339898] SSL negotiation successful (TLS 
1.2, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384)
Wed 2023-05-24 08:03:29.385: [40339898] SSL certificate is valid 
(matches outlook-com.olc.protection.outlook.com and is signed by 
recognized CA)

Wed 2023-05-24 08:03:29.385: [40339898] MTA-STS success for outlook.com
Wed 2023-05-24 08:03:29.386: [40339898] Resolving TXT record for 
_smtp._tls.outlook.com (DNS Server: 203.119.13.77)...
Wed 2023-05-24 08:03:29.402: [40339898] TLS Reporting TXT record: 
v=TLSRPTv1;rua=https://tlsrpt.azurewebsites.net/report

Wed 2023-05-24 08:03:29.402: [40339898] --> EHLO mail.persada.id
Wed 2023-05-24 08:03:29.574: [40339898] <-- 
250-DB8EUR05FT067.mail.protection.outlook.com Hello [103.150.114.155]

Wed 2023-05-24 08:03:29.574: [40339898] <-- 250-SIZE 49283072
Wed 2023-05-24 08:03:29.574: [40339898] <-- 250-PIPELINING
Wed 2023-05-24 08:03:29.574: [40339898] <-- 250-DSN
Wed 2023-05-24 08:03:29.574: [40339898] <-- 250-ENHANCEDSTATUSCODES
Wed 2023-05-24 08:03:29.574: [40339898] <-- 250-8BITMIME
Wed 2023-05-24 08:03:29.574: [40339898] <-- 250-BINARYMIME
Wed 2023-05-24 08:03:29.574: [40339898] <-- 250-CHUNKING
Wed 2023-05-24 08:03:29.574: [40339898] <-- 250 SMTPUTF8
Wed 2023-05-24 08:03:29.575: [40339898] --> MAIL 
From: SIZE=5729
Wed 2023-05-24 08:03:29.575: [40339898] --> RCPT 
To:

Wed 2023-05-24 08:03:29.575: [40339898] --> DATA
Wed 2023-05-24 08:03:29.767: [40339898] <-- 250 2.1.0 Sender OK
Wed 2023-05-24 08:03:29.767: [40339898] <-- 250 2.1.5 Recipient OK
Wed 2023-05-24 08:03:29.767: [40339898] <-- 354 Start mail input; end 
with .
Wed 2023-05-24 08:03:29.767: [40339898] Sending 
 to [104.47.17.97]

Wed 2023-05-24 08:03:29.767: [40339898] Transfer Complete
Wed 2023-05-24 08:03:31.642: [40339898] <-- 250 2.6.0 
<001f01d98ddb$80f3dd00$82db9700$@persada.id> 

[Mdaemon-L] Rejected for policy reasons (6019E5646C14E842302)

[Bambang Setiawan via Mdaemon-L]

On 23/05/2023 18.47, Syafril Hermansyah via Mdaemon-L wrote:


Coba lagi  1 -2 jam setelah perubahan DNS record.

Saya coba release dari bad queue pagi ini yang dari domain ericsson 
hasilnya masih belum bisa pak,


Wed 2023-05-24 06:15:49.462: --
Wed 2023-05-24 06:15:38.748: [40337943] REMOTE message: pd5001001518771.msg
Wed 2023-05-24 06:15:38.748: [40337943] *  Session 40337943; child 0008
Wed 2023-05-24 06:15:38.752: [40337943] *  Forwarded from: 
dispatc...@persada.id

Wed 2023-05-24 06:15:38.752: [40337943] *  From: mse.noc.ip@ericsson.com
Wed 2023-05-24 06:15:38.752: [40337943] *  To: dispatcherpers...@outlook.com
Wed 2023-05-24 06:15:38.752: [40337943] *  Subject: Re: [Escalate Alarm] 
Link Down Metro-E Fiberization Segment 20GSK012/SEDAYU_GSK 
SBY-SUG-EN1-H8M08 <> 130761/130761_XL_SIDAYU_4G SBY-SIYU-OPT-H910D <> 
20GSK062 PASARUJUNGP_PL SBY-PAJU-OPT-H910D  [FLP BIT]
Wed 2023-05-24 06:15:38.752: [40337943] *  Message-ID: 

Wed 2023-05-24 06:15:38.752: [40337943] *  Size: 46996; 

Wed 2023-05-24 06:15:38.756: [40337943] MTA-STS policy for outlook.com 
found in cache

Wed 2023-05-24 06:15:38.756: [40337943] *  version: STSv1
Wed 2023-05-24 06:15:38.756: [40337943] *  mode: enforce
Wed 2023-05-24 06:15:38.756: [40337943] *  mx: *.olc.protection.outlook.com
Wed 2023-05-24 06:15:38.756: [40337943] *  max_age: 604800
Wed 2023-05-24 06:15:38.973: [40337943] Resolving MX record for 
outlook.com (DNS Server: 203.119.13.77)...
Wed 2023-05-24 06:15:39.033: [40337943] *  P=005 S=000 D=outlook.com 
TTL=(5) MX=[outlook-com.olc.protection.outlook.com]
Wed 2023-05-24 06:15:39.033: [40337943] Attempting SMTP connection to 
outlook-com.olc.protection.outlook.com
Wed 2023-05-24 06:15:39.033: [40337943] Resolving A record for 
outlook-com.olc.protection.outlook.com (DNS Server: 203.119.13.77)...
Wed 2023-05-24 06:15:39.051: [40337943] * 
D=outlook-com.olc.protection.outlook.com TTL=(0) A=[104.47.58.161]
Wed 2023-05-24 06:15:39.051: [40337943] * 
D=outlook-com.olc.protection.outlook.com TTL=(0) A=[104.47.56.161]
Wed 2023-05-24 06:15:39.051: [40337943] Randomly picked 104.47.58.161 
from list of possible hosts
Wed 2023-05-24 06:15:39.051: [40337943] Attempting SMTP connection to 
104.47.58.161:25

Wed 2023-05-24 06:15:39.051: [40337943] Waiting for socket connection...
Wed 2023-05-24 06:15:39.289: [40337943] *  Connection established 
103.150.114.155:62509 --> 104.47.58.161:25

Wed 2023-05-24 06:15:39.289: [40337943] Waiting for protocol to start...
Wed 2023-05-24 06:15:39.538: [40337943] <-- 220 
BN8NAM11FT053.mail.protection.outlook.com Microsoft ESMTP MAIL Service 
ready at Tue, 23 May 2023 23:15:39 +

Wed 2023-05-24 06:15:39.541: [40337943] --> EHLO mail.persada.id
Wed 2023-05-24 06:15:39.781: [40337943] <-- 
250-BN8NAM11FT053.mail.protection.outlook.com Hello [103.150.114.155]

Wed 2023-05-24 06:15:39.781: [40337943] <-- 250-SIZE 49283072
Wed 2023-05-24 06:15:39.781: [40337943] <-- 250-PIPELINING
Wed 2023-05-24 06:15:39.781: [40337943] <-- 250-DSN
Wed 2023-05-24 06:15:39.781: [40337943] <-- 250-ENHANCEDSTATUSCODES
Wed 2023-05-24 06:15:39.781: [40337943] <-- 250-STARTTLS
Wed 2023-05-24 06:15:39.781: [40337943] <-- 250-8BITMIME
Wed 2023-05-24 06:15:39.781: [40337943] <-- 250-BINARYMIME
Wed 2023-05-24 06:15:39.781: [40337943] <-- 250-CHUNKING
Wed 2023-05-24 06:15:39.781: [40337943] <-- 250 SMTPUTF8
Wed 2023-05-24 06:15:39.781: [40337943] --> STARTTLS
Wed 2023-05-24 06:15:40.212: [40337943] <-- 220 2.0.0 SMTP server ready
Wed 2023-05-24 06:15:40.909: [40337943] SSL negotiation successful (TLS 
1.2, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384)
Wed 2023-05-24 06:15:40.910: [40337943] SSL certificate is valid 
(matches outlook-com.olc.protection.outlook.com and is signed by 
recognized CA)

Wed 2023-05-24 06:15:40.910: [40337943] MTA-STS success for outlook.com
Wed 2023-05-24 06:15:40.910: [40337943] TLS Reporting TXT record (from 
cache): v=TLSRPTv1;rua=https://tlsrpt.azurewebsites.net/report

Wed 2023-05-24 06:15:40.910: [40337943] --> EHLO mail.persada.id
Wed 2023-05-24 06:15:41.170: [40337943] <-- 
250-BN8NAM11FT053.mail.protection.outlook.com Hello [103.150.114.155]

Wed 2023-05-24 06:15:41.170: [40337943] <-- 250-SIZE 49283072
Wed 2023-05-24 06:15:41.170: [40337943] <-- 250-PIPELINING
Wed 2023-05-24 06:15:41.170: [40337943] <-- 250-DSN
Wed 2023-05-24 06:15:41.170: [40337943] <-- 250-ENHANCEDSTATUSCODES
Wed 2023-05-24 06:15:41.170: [40337943] <-- 250-8BITMIME
Wed 2023-05-24 06:15:41.170: [40337943] <-- 250-BINARYMIME
Wed 2023-05-24 06:15:41.170: [40337943] <-- 250-CHUNKING
Wed 2023-05-24 06:15:41.170: [40337943] <-- 250 SMTPUTF8
Wed 2023-05-24 06:15:41.170: [40337943] --> MAIL 
From: SIZE=46996
Wed 2023-05-24 06:15:41.170: [40337943] --> RCPT 
To:

Wed 2023-05-24 06:15:41.170: [40337943] --> DATA
Wed 2023-05-24 06:15:41.441: [40337943] <-- 250 2.1.0 Sender OK
Wed 2023-05-24 06:15:41.441: [40337943] <-- 250 2.1.5 Recipient OK
Wed 2023-05-24 06:15:41.441: [40337943] <-- 354 Start mail input; end 
with .

[Mdaemon-L] Rejected for policy reasons (6019E5646C14E842302)

[Bambang Setiawan via Mdaemon-L]

On 23/05/2023 10:48, Syafril Hermansyah via Mdaemon-L wrote:


persada.id descriptive text "v=spf1 +a +mx +ip4:103.150.114.155 
+ip4:202.51.104.0/27 -all"


Saya sudah coba rubah SPF sesuai dengan ini Pak, tetapi tetap belum bisa 
terkirim juga, ditambah sekarang selain dari domain ericsson, dari 
domain sendiri (persada.id) juga bermasalah jika meneruskan email 
forwarding.


Log 1 :

Tue 2023-05-23 16:14:48.725: 01: --
Tue 2023-05-23 16:14:42.103: 01: [40324397] REMOTE message: 
pd5001001518213.msg

Tue 2023-05-23 16:14:42.103: 01: [40324397] *  Session 40324397; child 0030
Tue 2023-05-23 16:14:42.106: 01: [40324397] *  Forwarded from: 
dispatc...@persada.id
Tue 2023-05-23 16:14:42.106: 01: [40324397] *  From: 
mse.noc.ip@ericsson.com
Tue 2023-05-23 16:14:42.106: 01: [40324397] *  To: 
dispatcherpers...@outlook.com
Tue 2023-05-23 16:14:42.106: 01: [40324397] *  Subject: [Escalate Alarm] 
Link Down Metro-E Fiberization Segment 20TAG120 /DOROAMPEL_TB 
KDI-DRAM-OPT-H910C  <> 20TAG003 /GEDANGSEWU KDI-GDS-AN1-H8M14 <>  [FLP 
IFORTE TLP TBG]
Tue 2023-05-23 16:14:42.106: 01: [40324397] *  Message-ID: 

Tue 2023-05-23 16:14:42.106: 01: [40324397] *  Size: 25625; 

Tue 2023-05-23 16:14:42.110: 08: [40324397] MTA-STS policy for 
outlook.com found in cache

Tue 2023-05-23 16:14:42.110: 08: [40324397] *  version: STSv1
Tue 2023-05-23 16:14:42.110: 08: [40324397] *  mode: enforce
Tue 2023-05-23 16:14:42.110: 08: [40324397] *  mx: 
*.olc.protection.outlook.com

Tue 2023-05-23 16:14:42.110: 08: [40324397] *  max_age: 604800
Tue 2023-05-23 16:14:42.158: 05: [40324397] Resolving MX record for 
outlook.com (DNS Server: 203.119.13.77)...
Tue 2023-05-23 16:14:42.172: 05: [40324397] *  P=005 S=000 D=outlook.com 
TTL=(0) MX=[outlook-com.olc.protection.outlook.com]
Tue 2023-05-23 16:14:42.172: 05: [40324397] Attempting SMTP connection 
to outlook-com.olc.protection.outlook.com
Tue 2023-05-23 16:14:42.172: 05: [40324397] Resolving A record for 
outlook-com.olc.protection.outlook.com (DNS Server: 203.119.13.77)...
Tue 2023-05-23 16:14:42.181: 05: [40324397] * 
D=outlook-com.olc.protection.outlook.com TTL=(0) A=[104.47.57.161]
Tue 2023-05-23 16:14:42.181: 05: [40324397] * 
D=outlook-com.olc.protection.outlook.com TTL=(0) A=[104.47.56.161]
Tue 2023-05-23 16:14:42.181: 05: [40324397] Randomly picked 
104.47.56.161 from list of possible hosts
Tue 2023-05-23 16:14:42.181: 05: [40324397] Attempting SMTP connection 
to 104.47.56.161:25

Tue 2023-05-23 16:14:42.181: 05: [40324397] Waiting for socket connection...
Tue 2023-05-23 16:14:42.356: 05: [40324397] *  Connection established 
103.150.114.155:50195 --> 104.47.56.161:25

Tue 2023-05-23 16:14:42.356: 05: [40324397] Waiting for protocol to start...
Tue 2023-05-23 16:14:42.550: 02: [40324397] <-- 220 
CO1NAM11FT041.mail.protection.outlook.com Microsoft ESMTP MAIL Service 
ready at Tue, 23 May 2023 09:14:42 +

Tue 2023-05-23 16:14:42.554: 03: [40324397] --> EHLO mail.persada.id
Tue 2023-05-23 16:14:42.729: 02: [40324397] <-- 
250-CO1NAM11FT041.mail.protection.outlook.com Hello [103.150.114.155]

Tue 2023-05-23 16:14:42.729: 02: [40324397] <-- 250-SIZE 49283072
Tue 2023-05-23 16:14:42.729: 02: [40324397] <-- 250-PIPELINING
Tue 2023-05-23 16:14:42.729: 02: [40324397] <-- 250-DSN
Tue 2023-05-23 16:14:42.729: 02: [40324397] <-- 250-ENHANCEDSTATUSCODES
Tue 2023-05-23 16:14:42.729: 02: [40324397] <-- 250-STARTTLS
Tue 2023-05-23 16:14:42.729: 02: [40324397] <-- 250-8BITMIME
Tue 2023-05-23 16:14:42.729: 02: [40324397] <-- 250-BINARYMIME
Tue 2023-05-23 16:14:42.729: 02: [40324397] <-- 250-CHUNKING
Tue 2023-05-23 16:14:42.729: 02: [40324397] <-- 250 SMTPUTF8
Tue 2023-05-23 16:14:42.729: 03: [40324397] --> STARTTLS
Tue 2023-05-23 16:14:42.907: 02: [40324397] <-- 220 2.0.0 SMTP server ready
Tue 2023-05-23 16:14:43.294: 01: [40324397] SSL negotiation successful 
(TLS 1.2, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384)
Tue 2023-05-23 16:14:43.295: 01: [40324397] SSL certificate is valid 
(matches outlook-com.olc.protection.outlook.com and is signed by 
recognized CA)

Tue 2023-05-23 16:14:43.295: 08: [40324397] MTA-STS success for outlook.com
Tue 2023-05-23 16:14:43.295: 08: [40324397] TLS Reporting TXT record 
(from cache): v=TLSRPTv1;rua=https://tlsrpt.azurewebsites.net/report

Tue 2023-05-23 16:14:43.295: 03: [40324397] --> EHLO mail.persada.id
Tue 2023-05-23 16:14:43.601: 02: [40324397] <-- 
250-CO1NAM11FT041.mail.protection.outlook.com Hello [103.150.114.155]

Tue 2023-05-23 16:14:43.601: 02: [40324397] <-- 250-SIZE 49283072
Tue 2023-05-23 16:14:43.601: 02: [40324397] <-- 250-PIPELINING
Tue 2023-05-23 16:14:43.601: 02: [40324397] <-- 250-DSN
Tue 2023-05-23 16:14:43.601: 02: [40324397] <-- 250-ENHANCEDSTATUSCODES
Tue 2023-05-23 16:14:43.601: 02: [40324397] <-- 250-8BITMIME
Tue 2023-05-23 16:14:43.601: 02: [40324397] <-- 250-BINARYMIME
Tue 2023-05-23 16:14:43.601: 02: [40324397] <-- 250-CHUNKING
Tue 2023-05-23 16:14:43.601: 02: [40324397] <-- 250 SMTPUTF8
Tue 2023-05-23 16:14:43.602: 

[Mdaemon-L] Rejected for policy reasons (6019E5646C14E842302)

[Bambang Setiawan via Mdaemon-L]

Dear Pak Syafril,


Mohon bantuannya untuk error log sebagai berikut karena apa ya pak ?

Tue 2023-05-23 08:20:38.319: --
Tue 2023-05-23 08:20:32.975: [40309263] REMOTE message: pd5001001516771.msg
Tue 2023-05-23 08:20:32.975: [40309263] *  Session 40309263; child 0002
Tue 2023-05-23 08:20:32.978: [40309263] *  Forwarded from: 
dispatc...@persada.id

Tue 2023-05-23 08:20:32.978: [40309263] *  From: mse.noc.ip@ericsson.com
Tue 2023-05-23 08:20:32.978: [40309263] *  To: dispatcherpers...@outlook.com
Tue 2023-05-23 08:20:32.978: [40309263] *  Subject: [Escalate Alarm] 
Link Down Metro-E Fiberization Segment 20SDA164/MOJOSANTREN_SI 
SBY-MJST-EN1-H910D <> 20SDA050/KARANGPURI SBY-KRNP-EN1-H910D <> 20SDA414 
KWENI_SDA SBY-KWNI-EN1-910D [FLP BIT TLP STP]
Tue 2023-05-23 08:20:32.978: [40309263] *  Message-ID: 

Tue 2023-05-23 08:20:32.978: [40309263] *  Size: 26402; 

Tue 2023-05-23 08:20:32.983: [40309263] MTA-STS policy for outlook.com 
found in cache

Tue 2023-05-23 08:20:32.983: [40309263] *  version: STSv1
Tue 2023-05-23 08:20:32.983: [40309263] *  mode: enforce
Tue 2023-05-23 08:20:32.983: [40309263] *  mx: *.olc.protection.outlook.com
Tue 2023-05-23 08:20:32.983: [40309263] *  max_age: 604800
Tue 2023-05-23 08:20:32.992: [40309263] Resolving MX record for 
outlook.com (DNS Server: 203.119.13.77)...
Tue 2023-05-23 08:20:32.994: [40309263] *  P=005 S=000 D=outlook.com 
TTL=(0) MX=[outlook-com.olc.protection.outlook.com]
Tue 2023-05-23 08:20:32.994: [40309263] Attempting SMTP connection to 
outlook-com.olc.protection.outlook.com
Tue 2023-05-23 08:20:32.994: [40309263] Resolving A record for 
outlook-com.olc.protection.outlook.com (DNS Server: 203.119.13.77)...
Tue 2023-05-23 08:20:32.999: [40309263] * 
D=outlook-com.olc.protection.outlook.com TTL=(0) A=[104.47.73.161]
Tue 2023-05-23 08:20:32.999: [40309263] * 
D=outlook-com.olc.protection.outlook.com TTL=(0) A=[104.47.74.33]
Tue 2023-05-23 08:20:32.999: [40309263] Randomly picked 104.47.74.33 
from list of possible hosts
Tue 2023-05-23 08:20:32.999: [40309263] Attempting SMTP connection to 
104.47.74.33:25

Tue 2023-05-23 08:20:32.999: [40309263] Waiting for socket connection...
Tue 2023-05-23 08:20:33.236: [40309263] *  Connection established 
103.150.114.155:61823 --> 104.47.74.33:25

Tue 2023-05-23 08:20:33.236: [40309263] Waiting for protocol to start...
Tue 2023-05-23 08:20:33.475: [40309263] <-- 220 
BN8NAM04FT037.mail.protection.outlook.com Microsoft ESMTP MAIL Service 
ready at Tue, 23 May 2023 01:20:35 +

Tue 2023-05-23 08:20:33.478: [40309263] --> EHLO mail.persada.id
Tue 2023-05-23 08:20:33.717: [40309263] <-- 
250-BN8NAM04FT037.mail.protection.outlook.com Hello [103.150.114.155]

Tue 2023-05-23 08:20:33.717: [40309263] <-- 250-SIZE 49283072
Tue 2023-05-23 08:20:33.717: [40309263] <-- 250-PIPELINING
Tue 2023-05-23 08:20:33.717: [40309263] <-- 250-DSN
Tue 2023-05-23 08:20:33.717: [40309263] <-- 250-ENHANCEDSTATUSCODES
Tue 2023-05-23 08:20:33.717: [40309263] <-- 250-STARTTLS
Tue 2023-05-23 08:20:33.717: [40309263] <-- 250-8BITMIME
Tue 2023-05-23 08:20:33.717: [40309263] <-- 250-BINARYMIME
Tue 2023-05-23 08:20:33.717: [40309263] <-- 250-CHUNKING
Tue 2023-05-23 08:20:33.717: [40309263] <-- 250 SMTPUTF8
Tue 2023-05-23 08:20:33.717: [40309263] --> STARTTLS
Tue 2023-05-23 08:20:33.955: [40309263] <-- 220 2.0.0 SMTP server ready
Tue 2023-05-23 08:20:34.468: [40309263] SSL negotiation successful (TLS 
1.2, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384)
Tue 2023-05-23 08:20:34.473: [40309263] SSL certificate is valid 
(matches outlook-com.olc.protection.outlook.com and is signed by 
recognized CA)

Tue 2023-05-23 08:20:34.473: [40309263] MTA-STS success for outlook.com
Tue 2023-05-23 08:20:34.475: [40309263] Resolving TXT record for 
_smtp._tls.outlook.com (DNS Server: 203.119.13.77)...
Tue 2023-05-23 08:20:34.478: [40309263] TLS Reporting TXT record: 
v=TLSRPTv1;rua=https://tlsrpt.azurewebsites.net/report

Tue 2023-05-23 08:20:34.478: [40309263] --> EHLO mail.persada.id
Tue 2023-05-23 08:20:34.717: [40309263] <-- 
250-BN8NAM04FT037.mail.protection.outlook.com Hello [103.150.114.155]

Tue 2023-05-23 08:20:34.717: [40309263] <-- 250-SIZE 49283072
Tue 2023-05-23 08:20:34.717: [40309263] <-- 250-PIPELINING
Tue 2023-05-23 08:20:34.717: [40309263] <-- 250-DSN
Tue 2023-05-23 08:20:34.717: [40309263] <-- 250-ENHANCEDSTATUSCODES
Tue 2023-05-23 08:20:34.717: [40309263] <-- 250-8BITMIME
Tue 2023-05-23 08:20:34.717: [40309263] <-- 250-BINARYMIME
Tue 2023-05-23 08:20:34.717: [40309263] <-- 250-CHUNKING
Tue 2023-05-23 08:20:34.717: [40309263] <-- 250 SMTPUTF8
Tue 2023-05-23 08:20:34.718: [40309263] --> MAIL 
From: SIZE=26402
Tue 2023-05-23 08:20:34.718: [40309263] --> RCPT 
To:

Tue 2023-05-23 08:20:34.718: [40309263] --> DATA
Tue 2023-05-23 08:20:34.989: [40309263] <-- 250 2.1.0 Sender OK
Tue 2023-05-23 08:20:34.989: [40309263] <-- 250 2.1.5 Recipient OK
Tue 2023-05-23 08:20:34.990: [40309263] <-- 354 Start mail input; end 
with .
Tue 2023-05-23 08:20:34.990: 

[Mdaemon-L] Recipient address rejected: Failed recipient validation check

[Bambang Setiawan via Mdaemon-L]

Dear Pak Syafril,


Mohon bantuannya untuk part log failed ini kenapa ya pak ?

[39805572] --> RCPT To:
  [39805572] <-- 551 5.1.1 : Recipient address 
rejected: Failed recipient validation check.: host 127.0.0.1[127.0.0.1] 
said: 554 5.7.1 recipient verify from ldap failed (in reply to RCPT TO 
command)


Terlampir log lengkapnya.

[39805572] REMOTE message: pd35001494969.msg
  [39805572] *  Session 39805572; child 0001
  [39805572] *  From: jhon.sitin...@persada.id
  [39805572] *  To: ronny.parsaoran@huawei.com
  [39805572] *  Subject: Revisi Longlat site 11SRG0004_CIGABUSDALAM_TB
  [39805572] *  Message-ID: <004d01d97e42$f7a7c950$e6f75bf0$@persada.id>
  [39805572] *  Size: 918945; 
  [39805572] *  Route slip host: huawei.com
  [39805572] *  Route slip port: 25
  [39805572] Resolving MX record for huawei.com (DNS Server: 
203.119.13.77)...

  [39805572] *  P=010 S=003 D=huawei.com TTL=(2) MX=[mx5.huawei.com]
  [39805572] *  P=020 S=000 D=huawei.com TTL=(2) MX=[mx8.his.huawei.com]
  [39805572] *  P=030 S=001 D=huawei.com TTL=(2) MX=[mx7.huawei.com]
  [39805572] *  P=030 S=002 D=huawei.com TTL=(2) MX=[mx9.his.huawei.com]
  [39805572] Attempting SMTP connection to mx5.huawei.com
  [39805572] Resolving A record for mx5.huawei.com (DNS Server: 
203.119.13.77)...

  [39805572] *  D=mx5.huawei.com TTL=(2) A=[124.71.93.234]
  [39805572] Attempting SMTP connection to 124.71.93.234:25
  [39805572] Waiting for socket connection...
  [39805572] *  Connection established 103.150.114.155:56997 --> 
124.71.93.234:25

  [39805572] Waiting for protocol to start...
  [39805572] <-- 220 Welcome to access Huawei SMTP service!
  [39805572] --> EHLO mail.persada.id
  [39805572] <-- 250-canpmsg-in
  [39805572] <-- 250-SIZE 41943040
  [39805572] <-- 250-STARTTLS
  [39805572] <-- 250-AUTH PLAIN LOGIN
  [39805572] <-- 250-ENHANCEDSTATUSCODES
  [39805572] <-- 250-8BITMIME
  [39805572] <-- 250 SMTPUTF8
  [39805572] --> STARTTLS
  [39805572] <-- 220 2.0.0 Ready to start TLS
  [39805572] SSL negotiation successful (TLS 1.2, 
TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384)

  [39805572] SSL certificate is not valid (not signed by recognized CA)
  [39805572] --> EHLO mail.persada.id
  [39805572] <-- 250-canpmsg-in
  [39805572] <-- 250-SIZE 41943040
  [39805572] <-- 250-AUTH PLAIN LOGIN
  [39805572] <-- 250-ENHANCEDSTATUSCODES
  [39805572] <-- 250-8BITMIME
  [39805572] <-- 250 SMTPUTF8
  [39805572] --> MAIL From: 
SIZE=918945

  [39805572] <-- 250 2.1.0 Ok
  [39805572] --> RCPT To:
  [39805572] <-- 250 2.1.5 Ok
  [39805572] --> RCPT To:
  [39805572] <-- 250 2.1.5 Ok
  [39805572] --> RCPT To:
  [39805572] <-- 250 2.1.5 Ok
  [39805572] --> RCPT To:
  [39805572] <-- 551 5.1.1 : Recipient address 
rejected: Failed recipient validation check.: host 127.0.0.1[127.0.0.1] 
said: 554 5.7.1 recipient verify from ldap failed (in reply to RCPT TO 
command)

  [39805572] --> RCPT To:
  [39805572] <-- 250 2.1.5 Ok
  [39805572] --> RCPT To:
  [39805572] <-- 250 2.1.5 Ok
  [39805572] --> RCPT To:
  [39805572] <-- 250 2.1.5 Ok
  [39805572] --> RCPT To:
  [39805572] <-- 250 2.1.5 Ok
  [39805572] --> RCPT To:
  [39805572] <-- 250 2.1.5 Ok
  [39805572] --> RCPT To:
  [39805572] <-- 250 2.1.5 Ok
  [39805572] --> RCPT To:
  [39805572] <-- 250 2.1.5 Ok
  [39805572] --> RCPT To:
  [39805572] <-- 250 2.1.5 Ok
  [39805572] --> RCPT To:
  [39805572] <-- 250 2.1.5 Ok
  [39805572] --> DATA
  [39805572] <-- 354 End data with .
  [39805572] Sending  to 
[124.71.93.234]

  [39805572] Transfer Complete
  [39805572] <-- 250 2.0.0 Ok: queued as 4QBh7R0Wp4zB181G. elapsed time 
42.216s



Terima kasih

--
--[mdaemon-l]--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com
Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com
Versi terakhir: MDaemon 23.0.1, SecurityGateway 9.0.2

[Mdaemon-L] Email tidak diterima recipient

[Bambang Setiawan via Mdaemon-L]

Dear Pak Syafril,


Mohon bantuannya untuk log terlampir apakah ada masalah pak ?, 
transfernya complete tapi menurut sender recipient belum menerima emailnya.


Terima kasih.

Tue 2023-05-02 09:49:17.944: --
Tue 2023-05-02 09:48:55.419: [39735662] REMOTE message: pd35001491623.msg
Tue 2023-05-02 09:48:55.419: [39735662] *  Session 39735662; child 0001
Tue 2023-05-02 09:48:55.420: [39735662] *  From: andi.faturokh...@persada.id
Tue 2023-05-02 09:48:55.420: [39735662] *  To: irwan.p...@huawei.com
Tue 2023-05-02 09:48:55.420: [39735662] *  Subject: Battery Tycoon 
Implementation PERSADA-EJBN
Tue 2023-05-02 09:48:55.420: [39735662] *  Message-ID: 
<002b01d97ca0$65af7730$310e6590$@persada.id>
Tue 2023-05-02 09:48:55.420: [39735662] *  Size: 486275; 


Tue 2023-05-02 09:48:55.420: [39735662] *  Route slip host: huawei.com
Tue 2023-05-02 09:48:55.421: [39735662] *  Route slip port: 25
Tue 2023-05-02 09:48:55.430: [39735662] Resolving MX record for 
huawei.com (DNS Server: 203.119.13.77)...
Tue 2023-05-02 09:48:55.481: [39735662] *  P=010 S=001 D=huawei.com 
TTL=(10) MX=[mx5.huawei.com]
Tue 2023-05-02 09:48:55.481: [39735662] *  P=020 S=002 D=huawei.com 
TTL=(10) MX=[mx8.his.huawei.com]
Tue 2023-05-02 09:48:55.481: [39735662] *  P=030 S=000 D=huawei.com 
TTL=(10) MX=[mx7.huawei.com]
Tue 2023-05-02 09:48:55.481: [39735662] *  P=030 S=003 D=huawei.com 
TTL=(10) MX=[mx9.his.huawei.com]
Tue 2023-05-02 09:48:55.482: [39735662] Attempting SMTP connection to 
mx5.huawei.com
Tue 2023-05-02 09:48:55.482: [39735662] Resolving A record for 
mx5.huawei.com (DNS Server: 203.119.13.77)...
Tue 2023-05-02 09:48:55.484: [39735662] *  D=mx5.huawei.com TTL=(10) 
A=[124.71.93.234]
Tue 2023-05-02 09:48:55.484: [39735662] Attempting SMTP connection to 
124.71.93.234:25

Tue 2023-05-02 09:48:55.484: [39735662] Waiting for socket connection...
Tue 2023-05-02 09:48:55.725: [39735662] *  Connection established 
103.150.114.155:63167 --> 124.71.93.234:25

Tue 2023-05-02 09:48:55.726: [39735662] Waiting for protocol to start...
Tue 2023-05-02 09:49:00.285: [39735662] <-- 220 Welcome to access Huawei 
SMTP service!

Tue 2023-05-02 09:49:00.288: [39735662] --> EHLO mail.persada.id
Tue 2023-05-02 09:49:00.529: [39735662] <-- 250-canpmsg-in
Tue 2023-05-02 09:49:00.529: [39735662] <-- 250-SIZE 41943040
Tue 2023-05-02 09:49:00.529: [39735662] <-- 250-STARTTLS
Tue 2023-05-02 09:49:00.529: [39735662] <-- 250-AUTH PLAIN LOGIN
Tue 2023-05-02 09:49:00.529: [39735662] <-- 250-ENHANCEDSTATUSCODES
Tue 2023-05-02 09:49:00.529: [39735662] <-- 250-8BITMIME
Tue 2023-05-02 09:49:00.529: [39735662] <-- 250 SMTPUTF8
Tue 2023-05-02 09:49:00.529: [39735662] --> STARTTLS
Tue 2023-05-02 09:49:00.774: [39735662] <-- 220 2.0.0 Ready to start TLS
Tue 2023-05-02 09:49:01.703: [39735662] SSL negotiation successful (TLS 
1.2, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384)
Tue 2023-05-02 09:49:01.705: [39735662] SSL certificate is not valid 
(not signed by recognized CA)

Tue 2023-05-02 09:49:01.705: [39735662] --> EHLO mail.persada.id
Tue 2023-05-02 09:49:01.946: [39735662] <-- 250-canpmsg-in
Tue 2023-05-02 09:49:01.946: [39735662] <-- 250-SIZE 41943040
Tue 2023-05-02 09:49:01.946: [39735662] <-- 250-AUTH PLAIN LOGIN
Tue 2023-05-02 09:49:01.946: [39735662] <-- 250-ENHANCEDSTATUSCODES
Tue 2023-05-02 09:49:01.946: [39735662] <-- 250-8BITMIME
Tue 2023-05-02 09:49:01.946: [39735662] <-- 250 SMTPUTF8
Tue 2023-05-02 09:49:01.946: [39735662] --> MAIL 
From: SIZE=486275

Tue 2023-05-02 09:49:03.188: [39735662] <-- 250 2.1.0 Ok
Tue 2023-05-02 09:49:03.189: [39735662] --> RCPT 
To:

Tue 2023-05-02 09:49:03.431: [39735662] <-- 250 2.1.5 Ok
Tue 2023-05-02 09:49:03.431: [39735662] --> RCPT 
To:

Tue 2023-05-02 09:49:05.673: [39735662] <-- 250 2.1.5 Ok
Tue 2023-05-02 09:49:05.673: [39735662] --> RCPT To:
Tue 2023-05-02 09:49:05.915: [39735662] <-- 250 2.1.5 Ok
Tue 2023-05-02 09:49:05.915: [39735662] --> RCPT 
To:

Tue 2023-05-02 09:49:08.156: [39735662] <-- 250 2.1.5 Ok
Tue 2023-05-02 09:49:08.156: [39735662] --> RCPT 
To:

Tue 2023-05-02 09:49:08.398: [39735662] <-- 250 2.1.5 Ok
Tue 2023-05-02 09:49:08.398: [39735662] --> RCPT To:
Tue 2023-05-02 09:49:10.640: [39735662] <-- 250 2.1.5 Ok
Tue 2023-05-02 09:49:10.640: [39735662] --> RCPT 
To:

Tue 2023-05-02 09:49:10.883: [39735662] <-- 250 2.1.5 Ok
Tue 2023-05-02 09:49:10.883: [39735662] --> DATA
Tue 2023-05-02 09:49:13.173: [39735662] <-- 354 End data with 
.
Tue 2023-05-02 09:49:13.173: [39735662] Sending 
 to [124.71.93.234]

Tue 2023-05-02 09:49:17.494: [39735662] Transfer Complete
Tue 2023-05-02 09:49:20.129: [39735662] <-- 250 2.0.0 Ok: queued as 
4Q9Pf55fzCzGVpFf. elapsed time 14.940s

Tue 2023-05-02 09:49:20.132: [39735662] --> QUIT
Tue 2023-05-02 09:49:21.374: [39735662] <-- 221 2.0.0 Bye
Tue 2023-05-02 09:49:21.374: [39735662] SMTP session successful (Bytes 
in/out: 2989/490938)

Tue 2023-05-02 09:49:21.374: --

--
--[mdaemon-l]--
Milis ini untuk Diskusi antar 

[Mdaemon-L] Email tidak masuk di Inbox

[Bambang Setiawan via Mdaemon-L]

On 13/04/2023 09:18, Syafril Hermansyah via Mdaemon-L wrote:


Tidak bisa dilacak, karena catatan lognya tidak ada.

Baik Pak, saya coba monitor kembali log hari ini apakah sudah bisa 
lengkap atau belum.


Kenapa tidak mengaktifkan mail archive?

Boleh minta tolong di info pak, mail archive yang bapak maksud ini untuk 
kebutuhan saya seperti apa ?


Sebelumnya saya pernah aktifkan mail archive pak, untuk email yang masuk 
saja, tetapi karena kapasitas harddisk kami terbatas saya jadi tidak 
aktifkan pak.


Terima kasih

--
--[mdaemon-l]--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com
Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com
Versi terakhir: MDaemon 23.0.0, SecurityGateway 9.0.1

[Mdaemon-L] Email tidak masuk di Inbox

[Bambang Setiawan via Mdaemon-L]

On 12/04/2023 21:15, Syafril Hermansyah via Mdaemon-L wrote:


Masukkan juga cfilter.exe dalam process exception Antivirus.


Siap Pak, sudah saya tambahkan di exclusion.

Selanjutnya untuk mengetahui penyebab tidak masuknya email kami ini 
bagaimana ya pak ?


Karena email ini urgent (daily report) jadi sementara saya buat content 
filter jika ada email dari iohreport...@huawei.com lalu saya copy ke 
folder user yang ada di daftar penerima email tersebut pak, supaya saya 
tidak copy email dari mailbox delete.acco...@persada.id ke mailbox 
penerimanya.


Terima kasih



--
--[mdaemon-l]--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com
Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com
Versi terakhir: MDaemon 23.0.0, SecurityGateway 9.0.1

[Mdaemon-L] Email tidak masuk di Inbox

[Bambang Setiawan via Mdaemon-L]

On 12/04/2023 18.20, Syafril Hermansyah via Mdaemon-L wrote:


Windows Defender AV Realtime scanning aktif?

Iya ini aktif pak, tetapi saya sudah exclude untuk cfengine.exe, 
mdaemon.exe, mdalaunch.exe, mdupdater.exe, avupdate.exe, clamd.exe, 
clamsubmit.exe, freshclam.exe, spscanct.exe, mdspamd.exe, SA-learn.exe, 
SA-update.exe, WALaunch..exe, Webadmin.exe, Worldclient.exe, 
wcxmppserver.exe dan termasuk folder MDaemon.


Kalau akses/login ke windows dimana MDaemon terinstall apakah 
konsisten (selalu) pakai user Administrator (local)?


Iya pak, saya tidak membuat user lain selain Administrator, jadi kalo 
login ke server pasti pakai account Administrator (RDP).


Terima kasih

--
--[mdaemon-l]--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com
Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com
Versi terakhir: MDaemon 23.0.0, SecurityGateway 9.0.1

[Mdaemon-L] Email tidak masuk di Inbox

[Bambang Setiawan via Mdaemon-L]

On 12/04/2023 16:06, Syafril Hermansyah via Mdaemon-L wrote:


Apakah Windows defender antivirus aktif?

Windows Defender aktif Pak

Ada Antivirus for file/workstation yang terinstall di server MDaemon?


Ini tidak ada pak, kami hanya menggunakan mdaemon antivirus saja




--
--[mdaemon-l]--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com
Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com
Versi terakhir: MDaemon 23.0.0, SecurityGateway 9.0.1

[Mdaemon-L] Email tidak masuk di Inbox

[Bambang Setiawan via Mdaemon-L]

On 12/04/2023 15:09, Syafril Hermansyah via Mdaemon-L wrote:


Kalau hari ini apakah antivirus log dan Content filter log jalan normal?


Untuk hari ini ter-record sampai saya cek di jam 15.19 WIB

tetapi log antivirusnya kenapa terpotong seperti ini ya pak ? saya 
memang sempat stop mdaemonnya jam 11.15



Wed 2023-04-12 07:29:05.315: * Total attachments removed    : 0
Wed 2023-04-12 07:29:05.356: End of MDaemon AntiVirus results
Wed 2023-04-12 07:29:05.356: --
---
Server Shutdown  Wed, 12 Apr 2023 11:15:38 +0700
---


START Event Log / MDaemon PRO v23.0.0, AntiVirus log information
---
Event Time/Date Event Description
---
Wed 2023-04-12 11:16:04.276: MDaemon AntiVirus processing 
c:\mdaemon\queues\local\md35011763771.msg...
Wed 2023-04-12 11:16:04.276: * Message return-path: 
prvs=1466af48d4=rella.bas...@persada.id


Untuk log content filternya juga sama pak

Wed 2023-04-12 07:29:05.320: Start Content Filter results
Wed 2023-04-12 07:29:05.357: * Matched 0 of 32 active rules
Wed 2023-04-12 07:29:05.357: End of Content Filter results
Wed 2023-04-12 07:29:05.357: --
---
Server Shutdown  Wed, 12 Apr 2023 11:15:38 +0700
---


START Event Log / MDaemon PRO v23.0.0, Content Filter log information
---
Event Time/Date Event Description
---
Wed 2023-04-12 11:16:04.348: Content Filter processing 
c:\mdaemon\queues\local\md35011763771.msg...
Wed 2023-04-12 11:16:04.348: * Message return-path: 
prvs=1466af48d4=rella.bas...@persada.id

Wed 2023-04-12 11:16:04.348: * Message from: rella.bas...@persada.id


Mail Archival apakah diaktifkan sehingga bisa di restore dari situ.


Mohon maaf saya interupt ya pak,

untuk email dari iohreport...@huawei.com hari ini saya sampaikan log-nya 
sebagai berikut Pak :


SMTP In Log :

Wed 2023-04-12 10:47:13.246: --
Wed 2023-04-12 10:47:04.061: [39259586] Session 39259586; child 0005
Wed 2023-04-12 10:47:04.061: [39259586] Accepting SMTP connection from 
119.8.177.37:48931 to 103.150.114.155:25
Wed 2023-04-12 10:47:04.062: [39259586] --> 220 mail.persada.id ESMTP 
MDaemon 23.0.0; Wed, 12 Apr 2023 10:47:04 +0700

Wed 2023-04-12 10:47:04.079: [39259586] <-- EHLO sinmsgout02.his.huawei.com
Wed 2023-04-12 10:47:04.080: [39259586] --> 250-mail.persada.id Hello 
sinmsgout02.his.huawei.com [119.8.177.37], pleased to meet you

Wed 2023-04-12 10:47:04.080: [39259586] --> 250-ETRN
Wed 2023-04-12 10:47:04.080: [39259586] --> 250-8BITMIME
Wed 2023-04-12 10:47:04.080: [39259586] --> 250-ENHANCEDSTATUSCODES
Wed 2023-04-12 10:47:04.080: [39259586] --> 250-PIPELINING
Wed 2023-04-12 10:47:04.080: [39259586] --> 250-CHUNKING
Wed 2023-04-12 10:47:04.080: [39259586] --> 250-STARTTLS
Wed 2023-04-12 10:47:04.080: [39259586] --> 250 SIZE
Wed 2023-04-12 10:47:04.095: [39259586] <-- STARTTLS
Wed 2023-04-12 10:47:04.095: [39259586] --> 220 2.7.0 Ready to start TLS
Wed 2023-04-12 10:47:04.132: [39259586] SSL negotiation successful (TLS 
1.2, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384)

Wed 2023-04-12 10:47:04.191: [39259586] <-- EHLO sinmsgout02.his.huawei.com
Wed 2023-04-12 10:47:04.191: [39259586] --> 250-mail.persada.id Hello 
sinmsgout02.his.huawei.com [119.8.177.37], pleased to meet you

Wed 2023-04-12 10:47:04.191: [39259586] --> 250-ETRN
Wed 2023-04-12 10:47:04.191: [39259586] --> 250-8BITMIME
Wed 2023-04-12 10:47:04.191: [39259586] --> 250-ENHANCEDSTATUSCODES
Wed 2023-04-12 10:47:04.191: [39259586] --> 250-PIPELINING
Wed 2023-04-12 10:47:04.191: [39259586] --> 250-CHUNKING
Wed 2023-04-12 10:47:04.191: [39259586] --> 250-REQUIRETLS
Wed 2023-04-12 10:47:04.191: [39259586] --> 250 SIZE
Wed 2023-04-12 10:47:04.209: [39259586] <-- MAIL 
FROM: SIZE=35192760
Wed 2023-04-12 10:47:04.220: [39259586] Performing PTR lookup 
(37.177.8.119.IN-ADDR.ARPA)
Wed 2023-04-12 10:47:04.223: [39259586] * D=37.177.8.119.IN-ADDR.ARPA 
TTL=(0) PTR=[sinmsgout02.his.huawei.com]
Wed 2023-04-12 10:47:04.225: [39259586] * D=sinmsgout02.his.huawei.com 
TTL=(0) A=[119.8.177.37]

Wed 2023-04-12 10:47:04.225: [39259586]  End PTR results
Wed 2023-04-12 10:47:04.228: [39259586] Performing IP lookup 
(sinmsgout02.his.huawei.com)
Wed 2023-04-12 10:47:04.230: [39259586] * D=sinmsgout02.his.huawei.com 
TTL=(0) A=[119.8.177.37]

Wed 2023-04-12 10:47:04.230: [39259586]  End IP lookup results
Wed 2023-04-12 10:47:04.237: [39259586] Performing IP lookup (huawei.com)
Wed 2023-04-12 10:47:04.240: 

[Mdaemon-L] Email tidak masuk di Inbox

[Bambang Setiawan via Mdaemon-L]

On 12/04/2023 11:43, Syafril Hermansyah via Mdaemon-L wrote:


Bagaimana dengan quarantine queue?


quarantine queue juga kosong pak

Periksa ke antivirus log, contentfilter log.


Kami tidak bisa mencari di antivirus log karena file log nya cuma sampai 
jam 09.39 pak, kami cari di tanggal 12 juga tidak ada.


Content filter log juga sama statusnya pak, cuma sampai jam 09.39

sehingga dikedua log tersebut tidak bisa kami temukan log-nya :-(


Salam


--
--[mdaemon-l]--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com
Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com
Versi terakhir: MDaemon 23.0.0, SecurityGateway 9.0.1

[Mdaemon-L] Email tidak masuk di Inbox

[Bambang Setiawan via Mdaemon-L]

On 12/04/2023 10:12, Syafril Hermansyah via Mdaemon-L wrote:


Di local queue apakah ada messagenya (md50011747448.msg)?

Ini juga tidak ada pak, sebelumnya saya juga sudah cari di folder local 
queue nya langsung.



Salam

--
--[mdaemon-l]--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com
Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com
Versi terakhir: MDaemon 23.0.0, SecurityGateway 9.0.1

[Mdaemon-L] Email tidak masuk di Inbox

[Bambang Setiawan via Mdaemon-L]

On 11/04/2023 16:02, Syafril Hermansyah via Mdaemon-L wrote:


Apakah semua recipient berikut tidak terima?


saya cek di inbox semua recipient tidak ada yang menerima emailnya pak



Periksa ke routing log, contentfilter log dengan katakunci pencarian 
"d11e77cdff6c4a9e90645c779c158...@huawei.com" (tanpa tanda kutip).



Terlampir untuk routing log nya pak

Tue 2023-04-11 12:05:28.812: 12: --

Tue 2023-04-11 12:05:42.703: 17: INBOUND message: md50006363768.msg
Tue 2023-04-11 12:05:42.703: 17: *  From: IOHReporting1 

Tue 2023-04-11 12:05:42.703: 17: *  To: IOHReporting1 
, "liston.sipay...@pmt.co.id" 
, "andi.kus...@pmt.co.id" 
, 'Helpdesk Adyawinsa' 
, 'Herwin S Tarigan'
Tue 2023-04-11 12:05:42.703: 17: *  Subject: 
P1_ANOD_149_H3I_NetworkOperationDailyReport_IOHMS-20230411
Tue 2023-04-11 12:05:42.703: 17: *  Message-ID: 

Tue 2023-04-11 12:05:42.703: 17: *  Modified From: "IOHReporting1 
(iohreport...@huawei.com)" 
Tue 2023-04-11 12:05:42.703: 17: *  Size: 33492141; 


Tue 2023-04-11 12:05:42.703: 17: --


Salam

--
--[mdaemon-l]--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com
Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com
Versi terakhir: MDaemon 23.0.0, SecurityGateway 9.0.1

[Mdaemon-L] Email tidak masuk di Inbox

[Bambang Setiawan via Mdaemon-L]

Mohon maaf Pak, maksud saya selain yang statusnya "Sender attempted to 
deliver message to unknown address"



Terima kasih

On 11/04/2023 14:27, Bambang Setiawan via Mdaemon-L wrote:

Dear Pak Syafril,


Mohon bantuannya, jika email yang kami terima dengan log terlampir 
tidak masuk ke inbox user kami kenapa ya pak.


Atas bantuannya diucapkan terima kasih


Salam.



Tue 2023-04-11 12:05:25.656: --
Tue 2023-04-11 12:04:18.284: [39232236] Session 39232236; child 0007
Tue 2023-04-11 12:04:18.284: [39232236] Accepting SMTP connection from 
119.8.177.36:39927 to 103.150.114.155:25
Tue 2023-04-11 12:04:18.285: [39232236] --> 220 mail.persada.id ESMTP 
MDaemon 23.0.0; Tue, 11 Apr 2023 12:04:18 +0700
Tue 2023-04-11 12:04:18.301: [39232236] <-- EHLO 
sinmsgout01.his.huawei.com
Tue 2023-04-11 12:04:18.302: [39232236] --> 250-mail.persada.id Hello 
sinmsgout01.his.huawei.com [119.8.177.36], pleased to meet you

Tue 2023-04-11 12:04:18.302: [39232236] --> 250-ETRN
Tue 2023-04-11 12:04:18.302: [39232236] --> 250-8BITMIME
Tue 2023-04-11 12:04:18.302: [39232236] --> 250-ENHANCEDSTATUSCODES
Tue 2023-04-11 12:04:18.302: [39232236] --> 250-PIPELINING
Tue 2023-04-11 12:04:18.302: [39232236] --> 250-CHUNKING
Tue 2023-04-11 12:04:18.302: [39232236] --> 250-STARTTLS
Tue 2023-04-11 12:04:18.302: [39232236] --> 250 SIZE
Tue 2023-04-11 12:04:18.318: [39232236] <-- STARTTLS
Tue 2023-04-11 12:04:18.318: [39232236] --> 220 2.7.0 Ready to start TLS
Tue 2023-04-11 12:04:18.351: [39232236] SSL negotiation successful 
(TLS 1.2, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384)
Tue 2023-04-11 12:04:18.407: [39232236] <-- EHLO 
sinmsgout01.his.huawei.com
Tue 2023-04-11 12:04:18.408: [39232236] --> 250-mail.persada.id Hello 
sinmsgout01.his.huawei.com [119.8.177.36], pleased to meet you

Tue 2023-04-11 12:04:18.408: [39232236] --> 250-ETRN
Tue 2023-04-11 12:04:18.408: [39232236] --> 250-8BITMIME
Tue 2023-04-11 12:04:18.408: [39232236] --> 250-ENHANCEDSTATUSCODES
Tue 2023-04-11 12:04:18.408: [39232236] --> 250-PIPELINING
Tue 2023-04-11 12:04:18.408: [39232236] --> 250-CHUNKING
Tue 2023-04-11 12:04:18.408: [39232236] --> 250-REQUIRETLS
Tue 2023-04-11 12:04:18.408: [39232236] --> 250 SIZE
Tue 2023-04-11 12:04:18.424: [39232236] <-- MAIL 
FROM: SIZE=33490717
Tue 2023-04-11 12:04:18.435: [39232236] Performing PTR lookup 
(36.177.8.119.IN-ADDR.ARPA)
Tue 2023-04-11 12:04:18.437: [39232236] * D=36.177.8.119.IN-ADDR.ARPA 
TTL=(0) PTR=[sinmsgout01.his.huawei.com]
Tue 2023-04-11 12:04:18.440: [39232236] * D=sinmsgout01.his.huawei.com 
TTL=(0) A=[119.8.177.36]

Tue 2023-04-11 12:04:18.440: [39232236]  End PTR results
Tue 2023-04-11 12:04:18.443: [39232236] Performing IP lookup 
(sinmsgout01.his.huawei.com)
Tue 2023-04-11 12:04:18.444: [39232236] * D=sinmsgout01.his.huawei.com 
TTL=(0) A=[119.8.177.36]

Tue 2023-04-11 12:04:18.444: [39232236]  End IP lookup results
Tue 2023-04-11 12:04:18.452: [39232236] Performing IP lookup (huawei.com)
Tue 2023-04-11 12:04:18.453: [39232236] *  D=huawei.com TTL=(3) 
A=[121.37.49.12]
Tue 2023-04-11 12:04:18.507: [39232236] *  P=010 S=000 D=huawei.com 
TTL=(10) MX=[mx5.huawei.com]
Tue 2023-04-11 12:04:18.507: [39232236] *  P=020 S=001 D=huawei.com 
TTL=(10) MX=[mx8.his.huawei.com]
Tue 2023-04-11 12:04:18.507: [39232236] *  P=030 S=002 D=huawei.com 
TTL=(10) MX=[mx7.huawei.com]
Tue 2023-04-11 12:04:18.507: [39232236] *  P=030 S=003 D=huawei.com 
TTL=(10) MX=[mx9.his.huawei.com]
Tue 2023-04-11 12:04:18.509: [39232236] *  D=mx5.huawei.com TTL=(5) 
A=[124.71.93.234]
Tue 2023-04-11 12:04:18.511: [39232236] *  D=mx8.his.huawei.com 
TTL=(10) A=[119.8.177.45]
Tue 2023-04-11 12:04:18.513: [39232236] *  D=mx7.huawei.com TTL=(10) 
A=[119.8.89.70]
Tue 2023-04-11 12:04:18.515: [39232236] *  D=mx9.his.huawei.com 
TTL=(10) A=[14.137.139.134]

Tue 2023-04-11 12:04:18.515: [39232236]  End IP lookup results
Tue 2023-04-11 12:04:18.518: [39232236] Performing SPF lookup 
(sinmsgout01.his.huawei.com / 119.8.177.36)
Tue 2023-04-11 12:05:18.669: [39232236] *  DNS: 60 second wait for DNS 
response exceeded (DNS Server: 202.51.96.7)
Tue 2023-04-11 12:05:19.450: [39232236] *  Result: none; no SPF record 
in DNS

Tue 2023-04-11 12:05:19.450: [39232236]  End SPF results
Tue 2023-04-11 12:05:19.450: [39232236] Performing SPF lookup 
(huawei.com / 119.8.177.36)
Tue 2023-04-11 12:05:19.455: [39232236] *  Policy: v=spf1 
ip4:45.249.212.32 ip4:45.249.212.35 ip4:45.249.212.255 
ip4:45.249.212.187/29 ip4:45.249.212.191 ip4:168.195.93.47 
ip4:185.176.79.56 ip4:119.8.179.247 ip4:119.8.89.136/31 
ip4:119.8.89.135 ip4:119.8.177.36/31 ip4:119.8.177.38 -al
Tue 2023-04-11 12:05:19.455: [39232236] *  Evaluating 
ip4:45.249.212.32: no match
Tue 2023-04-11 12:05:19.455: [39232236] *  Evaluating 
ip4:45.249.212.35: no match
Tue 2023-04-11 12:05:19.455: [39232236] *  Evaluating 
ip4:45.249.212.255: no match
Tue 2023-04-11 12:05:19.455: [39232236] *  Evaluating 
ip4:45.24

[Mdaemon-L] Email tidak masuk di Inbox

[Bambang Setiawan via Mdaemon-L]

Dear Pak Syafril,


Mohon bantuannya, jika email yang kami terima dengan log terlampir tidak 
masuk ke inbox user kami kenapa ya pak.


Atas bantuannya diucapkan terima kasih


Salam.



Tue 2023-04-11 12:05:25.656: --
Tue 2023-04-11 12:04:18.284: [39232236] Session 39232236; child 0007
Tue 2023-04-11 12:04:18.284: [39232236] Accepting SMTP connection from 
119.8.177.36:39927 to 103.150.114.155:25
Tue 2023-04-11 12:04:18.285: [39232236] --> 220 mail.persada.id ESMTP 
MDaemon 23.0.0; Tue, 11 Apr 2023 12:04:18 +0700

Tue 2023-04-11 12:04:18.301: [39232236] <-- EHLO sinmsgout01.his.huawei.com
Tue 2023-04-11 12:04:18.302: [39232236] --> 250-mail.persada.id Hello 
sinmsgout01.his.huawei.com [119.8.177.36], pleased to meet you

Tue 2023-04-11 12:04:18.302: [39232236] --> 250-ETRN
Tue 2023-04-11 12:04:18.302: [39232236] --> 250-8BITMIME
Tue 2023-04-11 12:04:18.302: [39232236] --> 250-ENHANCEDSTATUSCODES
Tue 2023-04-11 12:04:18.302: [39232236] --> 250-PIPELINING
Tue 2023-04-11 12:04:18.302: [39232236] --> 250-CHUNKING
Tue 2023-04-11 12:04:18.302: [39232236] --> 250-STARTTLS
Tue 2023-04-11 12:04:18.302: [39232236] --> 250 SIZE
Tue 2023-04-11 12:04:18.318: [39232236] <-- STARTTLS
Tue 2023-04-11 12:04:18.318: [39232236] --> 220 2.7.0 Ready to start TLS
Tue 2023-04-11 12:04:18.351: [39232236] SSL negotiation successful (TLS 
1.2, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384)

Tue 2023-04-11 12:04:18.407: [39232236] <-- EHLO sinmsgout01.his.huawei.com
Tue 2023-04-11 12:04:18.408: [39232236] --> 250-mail.persada.id Hello 
sinmsgout01.his.huawei.com [119.8.177.36], pleased to meet you

Tue 2023-04-11 12:04:18.408: [39232236] --> 250-ETRN
Tue 2023-04-11 12:04:18.408: [39232236] --> 250-8BITMIME
Tue 2023-04-11 12:04:18.408: [39232236] --> 250-ENHANCEDSTATUSCODES
Tue 2023-04-11 12:04:18.408: [39232236] --> 250-PIPELINING
Tue 2023-04-11 12:04:18.408: [39232236] --> 250-CHUNKING
Tue 2023-04-11 12:04:18.408: [39232236] --> 250-REQUIRETLS
Tue 2023-04-11 12:04:18.408: [39232236] --> 250 SIZE
Tue 2023-04-11 12:04:18.424: [39232236] <-- MAIL 
FROM: SIZE=33490717
Tue 2023-04-11 12:04:18.435: [39232236] Performing PTR lookup 
(36.177.8.119.IN-ADDR.ARPA)
Tue 2023-04-11 12:04:18.437: [39232236] * D=36.177.8.119.IN-ADDR.ARPA 
TTL=(0) PTR=[sinmsgout01.his.huawei.com]
Tue 2023-04-11 12:04:18.440: [39232236] * D=sinmsgout01.his.huawei.com 
TTL=(0) A=[119.8.177.36]

Tue 2023-04-11 12:04:18.440: [39232236]  End PTR results
Tue 2023-04-11 12:04:18.443: [39232236] Performing IP lookup 
(sinmsgout01.his.huawei.com)
Tue 2023-04-11 12:04:18.444: [39232236] * D=sinmsgout01.his.huawei.com 
TTL=(0) A=[119.8.177.36]

Tue 2023-04-11 12:04:18.444: [39232236]  End IP lookup results
Tue 2023-04-11 12:04:18.452: [39232236] Performing IP lookup (huawei.com)
Tue 2023-04-11 12:04:18.453: [39232236] *  D=huawei.com TTL=(3) 
A=[121.37.49.12]
Tue 2023-04-11 12:04:18.507: [39232236] *  P=010 S=000 D=huawei.com 
TTL=(10) MX=[mx5.huawei.com]
Tue 2023-04-11 12:04:18.507: [39232236] *  P=020 S=001 D=huawei.com 
TTL=(10) MX=[mx8.his.huawei.com]
Tue 2023-04-11 12:04:18.507: [39232236] *  P=030 S=002 D=huawei.com 
TTL=(10) MX=[mx7.huawei.com]
Tue 2023-04-11 12:04:18.507: [39232236] *  P=030 S=003 D=huawei.com 
TTL=(10) MX=[mx9.his.huawei.com]
Tue 2023-04-11 12:04:18.509: [39232236] *  D=mx5.huawei.com TTL=(5) 
A=[124.71.93.234]
Tue 2023-04-11 12:04:18.511: [39232236] *  D=mx8.his.huawei.com TTL=(10) 
A=[119.8.177.45]
Tue 2023-04-11 12:04:18.513: [39232236] *  D=mx7.huawei.com TTL=(10) 
A=[119.8.89.70]
Tue 2023-04-11 12:04:18.515: [39232236] *  D=mx9.his.huawei.com TTL=(10) 
A=[14.137.139.134]

Tue 2023-04-11 12:04:18.515: [39232236]  End IP lookup results
Tue 2023-04-11 12:04:18.518: [39232236] Performing SPF lookup 
(sinmsgout01.his.huawei.com / 119.8.177.36)
Tue 2023-04-11 12:05:18.669: [39232236] *  DNS: 60 second wait for DNS 
response exceeded (DNS Server: 202.51.96.7)
Tue 2023-04-11 12:05:19.450: [39232236] *  Result: none; no SPF record 
in DNS

Tue 2023-04-11 12:05:19.450: [39232236]  End SPF results
Tue 2023-04-11 12:05:19.450: [39232236] Performing SPF lookup 
(huawei.com / 119.8.177.36)
Tue 2023-04-11 12:05:19.455: [39232236] *  Policy: v=spf1 
ip4:45.249.212.32 ip4:45.249.212.35 ip4:45.249.212.255 
ip4:45.249.212.187/29 ip4:45.249.212.191 ip4:168.195.93.47 
ip4:185.176.79.56 ip4:119.8.179.247 ip4:119.8.89.136/31 ip4:119.8.89.135 
ip4:119.8.177.36/31 ip4:119.8.177.38 -al
Tue 2023-04-11 12:05:19.455: [39232236] *  Evaluating ip4:45.249.212.32: 
no match
Tue 2023-04-11 12:05:19.455: [39232236] *  Evaluating ip4:45.249.212.35: 
no match
Tue 2023-04-11 12:05:19.455: [39232236] *  Evaluating 
ip4:45.249.212.255: no match
Tue 2023-04-11 12:05:19.455: [39232236] *  Evaluating 
ip4:45.249.212.187/29: no match
Tue 2023-04-11 12:05:19.455: [39232236] *  Evaluating 
ip4:45.249.212.191: no match
Tue 2023-04-11 12:05:19.455: [39232236] *  Evaluating ip4:168.195.93.47: 
no match
Tue 2023-04-11 12:05:19.455: [39232236] *  Evaluating ip4:185.176.79.56: 

[Mdaemon-L] 550 5.7.1 Sender unknown

[Bambang Setiawan via Mdaemon-L]

Dear Pak Syafril,


Mohon bantuannya untuk log terlampir kenapa ya pak.

Thu 2023-04-06 18:17:34.209: --
Thu 2023-04-06 18:17:33.196: [39097061] Session 39097061; child 0001
Thu 2023-04-06 18:17:33.196: [39097061] Accepting SMTP connection from 
168.245.118.232:60924 to 103.150.114.155:25
Thu 2023-04-06 18:17:33.197: [39097061] --> 220 mail.persada.id ESMTP 
MDaemon 23.0.0; Thu, 06 Apr 2023 18:17:33 +0700

Thu 2023-04-06 18:17:33.451: [39097061] <-- EHLO o1.ptr5115.jurnal.id
Thu 2023-04-06 18:17:33.451: [39097061] --> 250-mail.persada.id Hello 
o1.ptr5115.jurnal.id [168.245.118.232], pleased to meet you

Thu 2023-04-06 18:17:33.452: [39097061] --> 250-ETRN
Thu 2023-04-06 18:17:33.452: [39097061] --> 250-8BITMIME
Thu 2023-04-06 18:17:33.452: [39097061] --> 250-ENHANCEDSTATUSCODES
Thu 2023-04-06 18:17:33.452: [39097061] --> 250-PIPELINING
Thu 2023-04-06 18:17:33.452: [39097061] --> 250-CHUNKING
Thu 2023-04-06 18:17:33.452: [39097061] --> 250-STARTTLS
Thu 2023-04-06 18:17:33.452: [39097061] --> 250 SIZE
Thu 2023-04-06 18:17:33.706: [39097061] <-- STARTTLS
Thu 2023-04-06 18:17:33.706: [39097061] --> 220 2.7.0 Ready to start TLS
Thu 2023-04-06 18:17:34.257: [39097061] SSL negotiation successful (TLS 
1.2, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384)

Thu 2023-04-06 18:17:34.511: [39097061] <-- EHLO o1.ptr5115.jurnal.id
Thu 2023-04-06 18:17:34.512: [39097061] --> 250-mail.persada.id Hello 
o1.ptr5115.jurnal.id [168.245.118.232], pleased to meet you

Thu 2023-04-06 18:17:34.512: [39097061] --> 250-ETRN
Thu 2023-04-06 18:17:34.512: [39097061] --> 250-8BITMIME
Thu 2023-04-06 18:17:34.512: [39097061] --> 250-ENHANCEDSTATUSCODES
Thu 2023-04-06 18:17:34.512: [39097061] --> 250-PIPELINING
Thu 2023-04-06 18:17:34.512: [39097061] --> 250-CHUNKING
Thu 2023-04-06 18:17:34.512: [39097061] --> 250-REQUIRETLS
Thu 2023-04-06 18:17:34.512: [39097061] --> 250 SIZE
Thu 2023-04-06 18:17:34.780: [39097061] <-- MAIL 
FROM: BODY=8BITMIME

Thu 2023-04-06 18:17:34.788: [39097061] --> 550 5.7.1 Sender unknown
Thu 2023-04-06 18:17:34.788: [39097061] Mail from 
bounces+32950962-e8ea-herlina=persada...@sendgrid.net refused (Sender 
Block List)
Thu 2023-04-06 18:17:34.788: [39097061] SMTP session terminated (Bytes 
in/out: 628/4261)

Thu 2023-04-06 18:17:34.788: --


Atas bantuannya diucapkan terima kasih.


Salam

--
--[mdaemon-l]--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com
Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com
Versi terakhir: MDaemon 23.0.0, SecurityGateway 9.0.1

[Mdaemon-L] Rejected for policy reasons

[Bambang Setiawan via Mdaemon-L]

   On Tuesday, 21 March 2023 at 16:21:58 GMT+7, Syafril Hermansyah via 
Mdaemon-L  wrote:  
 

Apakah ini terjadi kalau original sendernya dari c saja?
Kalau original sender dari (misalkan) yahoo.com family atau dari 
gmail.com juga sama masalahnya?



Ini terjadi kalau original sendernya dari @ericsson.com saja atau juga 
dari sender lain?

dalam kasus kami selain dari @ericsson.com sementara ini ada dari 3 domain yang 
kasusnya sama pakdari @bpjs-kesehatan.go.id, @pandulogistics.com dan @gmail.com
terlampir log dari masing-masing :

Thu 2023-03-23 05:33:40.400: --
Thu 2023-03-23 05:33:30.674: [38664538] REMOTE message: pd50001449086.msg
Thu 2023-03-23 05:33:30.674: [38664538] *  Session 38664538; child 0001
Thu 2023-03-23 05:33:30.676: [38664538] *  Forwarded from: 
yeni.yuli...@persada.id
Thu 2023-03-23 05:33:30.676: [38664538] *  From: 
cindy.nata...@bpjs-kesehatan.go.id
Thu 2023-03-23 05:33:30.676: [38664538] *  To: yeni.pers...@gmail.com
Thu 2023-03-23 05:33:30.676: [38664538] *  Subject: Re: NON AKTIF - NON PHK PT 
PERSONEL ALIH DAYA TMT MARET 2023
Thu 2023-03-23 05:33:30.676: [38664538] *  Message-ID: 

Thu 2023-03-23 05:33:30.676: [38664538] *  Size: 174362; 

Thu 2023-03-23 05:33:30.680: [38664538] MTA-STS policy for gmail.com found in 
cache
Thu 2023-03-23 05:33:30.680: [38664538] *  version: STSv1
Thu 2023-03-23 05:33:30.680: [38664538] *  mode: enforce
Thu 2023-03-23 05:33:30.680: [38664538] *  mx: gmail-smtp-in.l.google.com
Thu 2023-03-23 05:33:30.680: [38664538] *  mx: *.gmail-smtp-in.l.google.com
Thu 2023-03-23 05:33:30.680: [38664538] *  max_age: 86400
Thu 2023-03-23 05:33:30.835: [38664538] Resolving MX record for gmail.com (DNS 
Server: 203.119.13.77)...
Thu 2023-03-23 05:33:30.878: [38664538] *  P=005 S=003 D=gmail.com TTL=(45) 
MX=[gmail-smtp-in.l.google.com]
Thu 2023-03-23 05:33:30.878: [38664538] *  P=010 S=004 D=gmail.com TTL=(45) 
MX=[alt1.gmail-smtp-in.l.google.com]
Thu 2023-03-23 05:33:30.878: [38664538] *  P=020 S=000 D=gmail.com TTL=(45) 
MX=[alt2.gmail-smtp-in.l.google.com]
Thu 2023-03-23 05:33:30.878: [38664538] *  P=030 S=002 D=gmail.com TTL=(45) 
MX=[alt3.gmail-smtp-in.l.google.com]
Thu 2023-03-23 05:33:30.878: [38664538] *  P=040 S=001 D=gmail.com TTL=(45) 
MX=[alt4.gmail-smtp-in.l.google.com]
Thu 2023-03-23 05:33:30.878: [38664538] Attempting SMTP connection to 
gmail-smtp-in.l.google.com
Thu 2023-03-23 05:33:30.878: [38664538] Resolving A record for 
gmail-smtp-in.l.google.com (DNS Server: 203.119.13.77)...
Thu 2023-03-23 05:33:30.899: [38664538] *  D=gmail-smtp-in.l.google.com TTL=(5) 
A=[172.217.194.27]
Thu 2023-03-23 05:33:30.899: [38664538] Attempting SMTP connection to 
172.217.194.27:25
Thu 2023-03-23 05:33:30.899: [38664538] Waiting for socket connection...
Thu 2023-03-23 05:33:30.913: [38664538] *  Connection established 
103.150.114.155:61544 --> 172.217.194.27:25
Thu 2023-03-23 05:33:30.913: [38664538] Waiting for protocol to start...
Thu 2023-03-23 05:33:31.090: [38664538] <-- 220 mx.google.com ESMTP 
r20-20020a63d91400b00508eeafc9ecsi16811091pgg.176 - gsmtp
Thu 2023-03-23 05:33:31.092: [38664538] --> EHLO mail.persada.id
Thu 2023-03-23 05:33:31.264: [38664538] <-- 250-mx.google.com at your service, 
[103.150.114.155]
Thu 2023-03-23 05:33:31.264: [38664538] <-- 250-SIZE 157286400
Thu 2023-03-23 05:33:31.264: [38664538] <-- 250-8BITMIME
Thu 2023-03-23 05:33:31.264: [38664538] <-- 250-STARTTLS
Thu 2023-03-23 05:33:31.264: [38664538] <-- 250-ENHANCEDSTATUSCODES
Thu 2023-03-23 05:33:31.264: [38664538] <-- 250-PIPELINING
Thu 2023-03-23 05:33:31.264: [38664538] <-- 250-CHUNKING
Thu 2023-03-23 05:33:31.264: [38664538] <-- 250 SMTPUTF8
Thu 2023-03-23 05:33:31.264: [38664538] --> STARTTLS
Thu 2023-03-23 05:33:31.433: [38664538] <-- 220 2.0.0 Ready to start TLS
Thu 2023-03-23 05:33:31.455: [38664538] SSL negotiation successful (TLS 1.2, 
TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256)
Thu 2023-03-23 05:33:31.456: [38664538] SSL certificate is valid (matches 
gmail-smtp-in.l.google.com and is signed by recognized CA)
Thu 2023-03-23 05:33:31.456: [38664538] MTA-STS success for gmail.com
Thu 2023-03-23 05:33:31.456: [38664538] Resolving TXT record for 
_smtp._tls.gmail.com (DNS Server: 203.119.13.77)...
Thu 2023-03-23 05:33:31.465: [38664538] TLS Reporting TXT record: 
v=TLSRPTv1;rua=mailto:sts-repo...@google.com
Thu 2023-03-23 05:33:31.465: [38664538] --> EHLO mail.persada.id
Thu 2023-03-23 05:33:31.635: [38664538] <-- 250-mx.google.com at your service, 
[103.150.114.155]
Thu 2023-03-23 05:33:31.635: [38664538] <-- 250-SIZE 157286400
Thu 2023-03-23 05:33:31.635: [38664538] <-- 250-8BITMIME
Thu 2023-03-23 05:33:31.635: [38664538] <-- 250-ENHANCEDSTATUSCODES
Thu 2023-03-23 05:33:31.635: [38664538] <-- 250-PIPELINING
Thu 2023-03-23 05:33:31.635: [38664538] <-- 250-CHUNKING
Thu 2023-03-23 05:33:31.635: [38664538] <-- 250 SMTPUTF8
Thu 2023-03-23 05:33:31.635: [38664538] --> MAIL 
From: SIZE=174362
Thu 2023-03-23 05:33:31.635: [38664538] --> RCPT To:
Thu 2023-03-23 

[Mdaemon-L] Rejected for policy reasons

[Bambang Setiawan via Mdaemon-L]

On 20/03/2023 18:42, Syafril Hermansyah via Mdaemon-L wrote:


Yang menolak masih server gmail.com dan iforte.net.id?


Iya pak


Tunggu 1 jam s.d 24 jam agar penyebaran perubahan DNS record merata di 
internet.

Lalu coba lagi.

Terlampir disampaikan log yang masih gagal setelah saya coba kembali 
hari ini jam 14:33 pak


Tue 2023-03-21 14:33:11.100: --
Tue 2023-03-21 14:33:01.974: [38629321] REMOTE message: pd5000144.msg
Tue 2023-03-21 14:33:01.974: [38629321] *  Session 38629321; child 0003
Tue 2023-03-21 14:33:01.976: [38629321] *  Forwarded from: 
m.tary...@persada.id
Tue 2023-03-21 14:33:01.976: [38629321] *  From: 
ms.isat.sparep...@ericsson.com

Tue 2023-03-21 14:33:01.976: [38629321] *  To: muhammadtaryad...@gmail.com
Tue 2023-03-21 14:33:01.976: [38629321] *  Subject: RE: Support Module 
Ericsson Recovery Stolen ==> 03BGR200/ 13BGR0050 CIMANGGUVILLA_MT
Tue 2023-03-21 14:33:01.976: [38629321] *  Message-ID: 

Tue 2023-03-21 14:33:01.976: [38629321] *  Size: 381866; 

Tue 2023-03-21 14:33:01.979: [38629321] MTA-STS policy for gmail.com 
found in cache

Tue 2023-03-21 14:33:01.979: [38629321] *  version: STSv1
Tue 2023-03-21 14:33:01.979: [38629321] *  mode: enforce
Tue 2023-03-21 14:33:01.979: [38629321] *  mx: gmail-smtp-in.l.google.com
Tue 2023-03-21 14:33:01.980: [38629321] *  mx: *.gmail-smtp-in.l.google.com
Tue 2023-03-21 14:33:01.980: [38629321] *  max_age: 86400
Tue 2023-03-21 14:33:02.024: [38629321] Resolving MX record for 
gmail.com (DNS Server: 203.119.13.77)...
Tue 2023-03-21 14:33:02.035: [38629321] *  P=005 S=003 D=gmail.com 
TTL=(43) MX=[gmail-smtp-in.l.google.com]
Tue 2023-03-21 14:33:02.035: [38629321] *  P=010 S=002 D=gmail.com 
TTL=(43) MX=[alt1.gmail-smtp-in.l.google.com]
Tue 2023-03-21 14:33:02.035: [38629321] *  P=020 S=000 D=gmail.com 
TTL=(43) MX=[alt2.gmail-smtp-in.l.google.com]
Tue 2023-03-21 14:33:02.035: [38629321] *  P=030 S=001 D=gmail.com 
TTL=(43) MX=[alt3.gmail-smtp-in.l.google.com]
Tue 2023-03-21 14:33:02.035: [38629321] *  P=040 S=004 D=gmail.com 
TTL=(43) MX=[alt4.gmail-smtp-in.l.google.com]
Tue 2023-03-21 14:33:02.035: [38629321] Attempting SMTP connection to 
gmail-smtp-in.l.google.com
Tue 2023-03-21 14:33:02.035: [38629321] Resolving A record for 
gmail-smtp-in.l.google.com (DNS Server: 203.119.13.77)...
Tue 2023-03-21 14:33:02.052: [38629321] * D=gmail-smtp-in.l.google.com 
TTL=(5) A=[172.217.194.27]
Tue 2023-03-21 14:33:02.052: [38629321] Attempting SMTP connection to 
172.217.194.27:25

Tue 2023-03-21 14:33:02.052: [38629321] Waiting for socket connection...
Tue 2023-03-21 14:33:02.067: [38629321] *  Connection established 
103.150.114.155:54996 --> 172.217.194.27:25

Tue 2023-03-21 14:33:02.067: [38629321] Waiting for protocol to start...
Tue 2023-03-21 14:33:02.238: [38629321] <-- 220 mx.google.com ESMTP 
l17-20020a170902f69100b001a179347bf6si13366189plg.474 - gsmtp

Tue 2023-03-21 14:33:02.241: [38629321] --> EHLO mail.persada.id
Tue 2023-03-21 14:33:02.414: [38629321] <-- 250-mx.google.com at your 
service, [103.150.114.155]

Tue 2023-03-21 14:33:02.414: [38629321] <-- 250-SIZE 157286400
Tue 2023-03-21 14:33:02.414: [38629321] <-- 250-8BITMIME
Tue 2023-03-21 14:33:02.414: [38629321] <-- 250-STARTTLS
Tue 2023-03-21 14:33:02.414: [38629321] <-- 250-ENHANCEDSTATUSCODES
Tue 2023-03-21 14:33:02.414: [38629321] <-- 250-PIPELINING
Tue 2023-03-21 14:33:02.414: [38629321] <-- 250-CHUNKING
Tue 2023-03-21 14:33:02.414: [38629321] <-- 250 SMTPUTF8
Tue 2023-03-21 14:33:02.414: [38629321] --> STARTTLS
Tue 2023-03-21 14:33:02.583: [38629321] <-- 220 2.0.0 Ready to start TLS
Tue 2023-03-21 14:33:02.599: [38629321] SSL negotiation successful (TLS 
1.2, TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256)
Tue 2023-03-21 14:33:02.601: [38629321] SSL certificate is valid 
(matches gmail-smtp-in.l.google.com and is signed by recognized CA)

Tue 2023-03-21 14:33:02.601: [38629321] MTA-STS success for gmail.com
Tue 2023-03-21 14:33:02.601: [38629321] Resolving TXT record for 
_smtp._tls.gmail.com (DNS Server: 203.119.13.77)...
Tue 2023-03-21 14:33:02.618: [38629321] TLS Reporting TXT record: 
v=TLSRPTv1;rua=mailto:sts-repo...@google.com

Tue 2023-03-21 14:33:02.618: [38629321] --> EHLO mail.persada.id
Tue 2023-03-21 14:33:02.790: [38629321] <-- 250-mx.google.com at your 
service, [103.150.114.155]

Tue 2023-03-21 14:33:02.790: [38629321] <-- 250-SIZE 157286400
Tue 2023-03-21 14:33:02.790: [38629321] <-- 250-8BITMIME
Tue 2023-03-21 14:33:02.790: [38629321] <-- 250-ENHANCEDSTATUSCODES
Tue 2023-03-21 14:33:02.790: [38629321] <-- 250-PIPELINING
Tue 2023-03-21 14:33:02.790: [38629321] <-- 250-CHUNKING
Tue 2023-03-21 14:33:02.790: [38629321] <-- 250 SMTPUTF8
Tue 2023-03-21 14:33:02.790: [38629321] --> MAIL 
From: SIZE=381866
Tue 2023-03-21 14:33:02.790: [38629321] --> RCPT 
To:

Tue 2023-03-21 14:33:02.790: [38629321] --> DATA
Tue 2023-03-21 14:33:02.960: [38629321] <-- 250 2.1.0 OK 
l17-20020a170902f69100b001a179347bf6si13366189plg.474 - gsmtp
Tue 2023-03-21 14:33:03.197: 

[Mdaemon-L] Rejected for policy reasons

[Bambang Setiawan via Mdaemon-L]

On 20/03/2023 09:46, Syafril Hermansyah via Mdaemon-L wrote:



Coba diganti SPF recordnya menjadi

persada.id descriptive text "v=spf1 +a +mx +ip4:103.150.114.155 
include:iforte.net.id -all"




Kami sudah mengganti SPF nya pak, tetapi email masih belum bisa terkirim.


Terima kasih.


--
--[mdaemon-l]--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com
Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com
Versi terakhir: MDaemon 23.0.0, SecurityGateway 9.0.1

[Mdaemon-L] Rejected for policy reasons

[Bambang Setiawan via Mdaemon-L]

Dear Pak Syafril,


Mohon bantuannya jika ada email yang di forward ke gmail dan di tolak 
oleh gmail ini karena policy yang seperti apa ya pak.



Terima kasih


Log sbb :

Mon 2023-03-20 09:13:02.685: --
Mon 2023-03-20 09:12:54.861: [38590241] REMOTE message: pd50001445626.msg
Mon 2023-03-20 09:12:54.861: [38590241] *  Session 38590241; child 0004
Mon 2023-03-20 09:12:54.863: [38590241] *  Forwarded from: 
m.tary...@persada.id
Mon 2023-03-20 09:12:54.863: [38590241] *  From: 
aditya.hardians...@ericsson.com

Mon 2023-03-20 09:12:54.863: [38590241] *  To: muhammadtaryad...@gmail.com
Mon 2023-03-20 09:12:54.863: [38590241] *  Subject: Re: Support Module 
Ericsson Recovery Stolen ==> 03BGR200/ 13BGR0050 CIMANGGUVILLA_MT
Mon 2023-03-20 09:12:54.863: [38590241] *  Message-ID: 

Mon 2023-03-20 09:12:54.863: [38590241] *  Size: 1165934; 

Mon 2023-03-20 09:12:54.867: [38590241] MTA-STS policy for gmail.com 
found in cache

Mon 2023-03-20 09:12:54.867: [38590241] *  version: STSv1
Mon 2023-03-20 09:12:54.867: [38590241] *  mode: enforce
Mon 2023-03-20 09:12:54.867: [38590241] *  mx: gmail-smtp-in.l.google.com
Mon 2023-03-20 09:12:54.867: [38590241] *  mx: *.gmail-smtp-in.l.google.com
Mon 2023-03-20 09:12:54.867: [38590241] *  max_age: 86400
Mon 2023-03-20 09:12:54.915: [38590241] Resolving MX record for 
gmail.com (DNS Server: 203.119.13.77)...
Mon 2023-03-20 09:12:54.938: [38590241] *  P=005 S=002 D=gmail.com 
TTL=(14) MX=[gmail-smtp-in.l.google.com]
Mon 2023-03-20 09:12:54.938: [38590241] *  P=010 S=003 D=gmail.com 
TTL=(14) MX=[alt1.gmail-smtp-in.l.google.com]
Mon 2023-03-20 09:12:54.938: [38590241] *  P=020 S=000 D=gmail.com 
TTL=(14) MX=[alt2.gmail-smtp-in.l.google.com]
Mon 2023-03-20 09:12:54.938: [38590241] *  P=030 S=004 D=gmail.com 
TTL=(14) MX=[alt3.gmail-smtp-in.l.google.com]
Mon 2023-03-20 09:12:54.938: [38590241] *  P=040 S=001 D=gmail.com 
TTL=(14) MX=[alt4.gmail-smtp-in.l.google.com]
Mon 2023-03-20 09:12:54.938: [38590241] Attempting SMTP connection to 
gmail-smtp-in.l.google.com
Mon 2023-03-20 09:12:54.939: [38590241] Resolving A record for 
gmail-smtp-in.l.google.com (DNS Server: 203.119.13.77)...
Mon 2023-03-20 09:12:54.947: [38590241] * D=gmail-smtp-in.l.google.com 
TTL=(2) A=[172.217.194.27]
Mon 2023-03-20 09:12:54.947: [38590241] Attempting SMTP connection to 
172.217.194.27:25

Mon 2023-03-20 09:12:54.947: [38590241] Waiting for socket connection...
Mon 2023-03-20 09:12:54.962: [38590241] *  Connection established 
103.150.114.155:64030 --> 172.217.194.27:25

Mon 2023-03-20 09:12:54.962: [38590241] Waiting for protocol to start...
Mon 2023-03-20 09:12:55.144: [38590241] <-- 220 mx.google.com ESMTP 
bs124-20020a63288200b004fbcff506c5si3776454pgb.346 - gsmtp

Mon 2023-03-20 09:12:55.147: [38590241] --> EHLO mail.persada.id
Mon 2023-03-20 09:12:55.323: [38590241] <-- 250-mx.google.com at your 
service, [103.150.114.155]

Mon 2023-03-20 09:12:55.323: [38590241] <-- 250-SIZE 157286400
Mon 2023-03-20 09:12:55.323: [38590241] <-- 250-8BITMIME
Mon 2023-03-20 09:12:55.323: [38590241] <-- 250-STARTTLS
Mon 2023-03-20 09:12:55.323: [38590241] <-- 250-ENHANCEDSTATUSCODES
Mon 2023-03-20 09:12:55.323: [38590241] <-- 250-PIPELINING
Mon 2023-03-20 09:12:55.323: [38590241] <-- 250-CHUNKING
Mon 2023-03-20 09:12:55.323: [38590241] <-- 250 SMTPUTF8
Mon 2023-03-20 09:12:55.323: [38590241] --> STARTTLS
Mon 2023-03-20 09:12:55.497: [38590241] <-- 220 2.0.0 Ready to start TLS
Mon 2023-03-20 09:12:55.513: [38590241] SSL negotiation successful (TLS 
1.2, TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256)
Mon 2023-03-20 09:12:55.515: [38590241] SSL certificate is valid 
(matches gmail-smtp-in.l.google.com and is signed by recognized CA)

Mon 2023-03-20 09:12:55.515: [38590241] MTA-STS success for gmail.com
Mon 2023-03-20 09:12:55.515: [38590241] TLS Reporting TXT record (from 
cache): v=TLSRPTv1;rua=mailto:sts-repo...@google.com

Mon 2023-03-20 09:12:55.515: [38590241] --> EHLO mail.persada.id
Mon 2023-03-20 09:12:55.689: [38590241] <-- 250-mx.google.com at your 
service, [103.150.114.155]

Mon 2023-03-20 09:12:55.689: [38590241] <-- 250-SIZE 157286400
Mon 2023-03-20 09:12:55.689: [38590241] <-- 250-8BITMIME
Mon 2023-03-20 09:12:55.689: [38590241] <-- 250-ENHANCEDSTATUSCODES
Mon 2023-03-20 09:12:55.689: [38590241] <-- 250-PIPELINING
Mon 2023-03-20 09:12:55.689: [38590241] <-- 250-CHUNKING
Mon 2023-03-20 09:12:55.689: [38590241] <-- 250 SMTPUTF8
Mon 2023-03-20 09:12:55.689: [38590241] --> MAIL 
From: SIZE=1165934
Mon 2023-03-20 09:12:55.689: [38590241] --> RCPT 
To:

Mon 2023-03-20 09:12:55.689: [38590241] --> DATA
Mon 2023-03-20 09:12:55.862: [38590241] <-- 250 2.1.0 OK 
bs124-20020a63288200b004fbcff506c5si3776454pgb.346 - gsmtp
Mon 2023-03-20 09:12:55.937: [38590241] <-- 250 2.1.5 OK 
bs124-20020a63288200b004fbcff506c5si3776454pgb.346 - gsmtp
Mon 2023-03-20 09:12:55.937: [38590241] <-- 354  Go ahead 
bs124-20020a63288200b004fbcff506c5si3776454pgb.346 - gsmtp
Mon 2023-03-20 09:12:55.937: [38590241] 

[Mdaemon-L] Dynamic screening refused connection

[Bambang Setiawan via Mdaemon-L]

On 14/03/2023 20:03, Syafril Hermansyah via Mdaemon-L wrote:


Kelihatnya ini koneksi mail firewall antivirus yang berbasis MTA Exim 
yang sering pakai protocol yang tidak standard Internet Mail (RFC 
standard).
Coba periksa di smtp-in log 2023-03-14 sebelum jam 14:03 server 
168.245.118.232 identitas hostnya apa 


Identitas hostnya ini pak o1.ptr5115.jurnal.id [168.245.118.232]


dan kirim mail dari sender mana ke recipient mana saja (mungkin lebih 
dari 101 recipient)


untuk sender-nya 
bounces+11642051-f070-6211202288=persada...@em2413.talenta.co


dikirimnya memang ke banyak email alias kami pak (SC terlampir)


Jangan pakai trusted host/trusted IP, itu berkaitan dengan "mail 
relaying" dan bypass antispam/antivirus.



Baik Pak



Kelihatannya SMTP screening diaktifkan ya.
Coba periksa berapa besar nilainya.


Benar Pak, untuk SMTP Screening aktif dan nilainya adalah sbb :

Blok IPs that connect more than 100 times in 3 minutes

Tapi sepertinya mulai jam 17.04 sudah bisa masuk kembali pak.

Tue 2023-03-14 17:04:10.342: 05: [38437446] Session 38437446; child 0002
Tue 2023-03-14 17:04:10.342: 05: [38437446] Accepting SMTP connection 
from 168.245.118.232:33966 to 103.150.114.155:25
Tue 2023-03-14 17:04:10.342: 07: [38437446] Location Screen says 
connection is from United States, North America
Tue 2023-03-14 17:04:10.343: 03: [38437446] --> 220 mail.persada.id 
ESMTP MDaemon 23.0.0; Tue, 14 Mar 2023 17:04:10 +0700

Tue 2023-03-14 17:04:10.567: 02: [38437446] <-- EHLO o1.ptr5115.jurnal.id
Tue 2023-03-14 17:04:10.568: 03: [38437446] --> 250-mail.persada.id 
Hello o1.ptr5115.jurnal.id [168.245.118.232], pleased to meet you

Tue 2023-03-14 17:04:10.568: 03: [38437446] --> 250-ETRN
Tue 2023-03-14 17:04:10.568: 07: [38437446] Location Screening hiding 
AUTH from country United States, North America

Tue 2023-03-14 17:04:10.568: 03: [38437446] --> 250-8BITMIME
Tue 2023-03-14 17:04:10.568: 03: [38437446] --> 250-ENHANCEDSTATUSCODES
Tue 2023-03-14 17:04:10.568: 03: [38437446] --> 250-PIPELINING
Tue 2023-03-14 17:04:10.568: 03: [38437446] --> 250-CHUNKING
Tue 2023-03-14 17:04:10.568: 03: [38437446] --> 250-STARTTLS
Tue 2023-03-14 17:04:10.568: 03: [38437446] --> 250 SIZE
Tue 2023-03-14 17:04:10.793: 02: [38437446] <-- STARTTLS
Tue 2023-03-14 17:04:10.793: 03: [38437446] --> 220 2.7.0 Ready to start TLS
Tue 2023-03-14 17:04:11.290: 01: [38437446] SSL negotiation successful 
(TLS 1.2, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384)

Tue 2023-03-14 17:04:11.515: 02: [38437446] <-- EHLO o1.ptr5115.jurnal.id
Tue 2023-03-14 17:04:11.515: 03: [38437446] --> 250-mail.persada.id 
Hello o1.ptr5115.jurnal.id [168.245.118.232], pleased to meet you

Tue 2023-03-14 17:04:11.515: 03: [38437446] --> 250-ETRN
Tue 2023-03-14 17:04:11.515: 07: [38437446] Location Screening hiding 
AUTH from country United States, North America

Tue 2023-03-14 17:04:11.515: 03: [38437446] --> 250-8BITMIME
Tue 2023-03-14 17:04:11.515: 03: [38437446] --> 250-ENHANCEDSTATUSCODES
Tue 2023-03-14 17:04:11.515: 03: [38437446] --> 250-PIPELINING
Tue 2023-03-14 17:04:11.515: 03: [38437446] --> 250-CHUNKING
Tue 2023-03-14 17:04:11.515: 03: [38437446] --> 250-REQUIRETLS
Tue 2023-03-14 17:04:11.515: 03: [38437446] --> 250 SIZE
Tue 2023-03-14 17:04:11.756: 02: [38437446] <-- MAIL 
FROM: 
BODY=8BITMIME
Tue 2023-03-14 17:04:11.763: 05: [38437446] Performing PTR lookup 
(232.118.245.168.IN-ADDR.ARPA)
Tue 2023-03-14 17:04:11.778: 05: [38437446] * 
D=232.118.245.168.IN-ADDR.ARPA TTL=(13) PTR=[o1.ptr5115.jurnal.id]
Tue 2023-03-14 17:04:11.793: 05: [38437446] * D=o1.ptr5115.jurnal.id 
TTL=(5) A=[168.245.118.232]

Tue 2023-03-14 17:04:11.793: 05: [38437446]  End PTR results
Tue 2023-03-14 17:04:11.796: 05: [38437446] Performing IP lookup 
(o1.ptr5115.jurnal.id)
Tue 2023-03-14 17:04:11.798: 05: [38437446] * D=o1.ptr5115.jurnal.id 
TTL=(5) A=[168.245.118.232]

Tue 2023-03-14 17:04:11.798: 05: [38437446]  End IP lookup results
Tue 2023-03-14 17:04:11.804: 05: [38437446] Performing IP lookup 
(em2413.talenta.co)
Tue 2023-03-14 17:04:12.188: 05: [38437446] *  P=020 S=001 
D=u11642051.wl052.sendgrid.net TTL=(30) MX=[mx.sendgrid.net]
Tue 2023-03-14 17:04:12.190: 05: [38437446] *  D=mx.sendgrid.net 
TTL=(20) A=[167.89.123.50]
Tue 2023-03-14 17:04:12.190: 05: [38437446] *  D=mx.sendgrid.net 
TTL=(20) A=[167.89.118.48]

Tue 2023-03-14 17:04:12.190: 05: [38437446]  End IP lookup results
Tue 2023-03-14 17:04:12.199: 09: [38437446] Performing SPF lookup 
(o1.ptr5115.jurnal.id / 168.245.118.232)
Tue 2023-03-14 17:04:12.331: 09: [38437446] *  Result: none; no SPF 
record in DNS

Tue 2023-03-14 17:04:12.331: 09: [38437446]  End SPF results
Tue 2023-03-14 17:04:12.331: 09: [38437446] Performing SPF lookup 
(em2413.talenta.co / 168.245.118.232)
Tue 2023-03-14 17:04:12.352: 09: [38437446] *  Policy: v=spf1 
ip4:168.245.118.232 -all
Tue 2023-03-14 17:04:12.352: 09: [38437446] *  Evaluating 
ip4:168.245.118.232: match

Tue 2023-03-14 17:04:12.352: 09: [38437446] *  Result: pass

[Mdaemon-L] Dynamic screening refused connection

[Bambang Setiawan via Mdaemon-L]

Maaf terlampir tambahan log-nya ya pak
Tue 2023-03-14 18:02:15.303: --
Tue 2023-03-14 18:02:15.534: [38439287] Session 38439287; child 0004
Tue 2023-03-14 18:02:15.534: [38439287] Accepting SMTP connection from 
168.245.118.232:35380 to 103.150.114.155:25
Tue 2023-03-14 18:02:15.534: [38439287] Location Screen says connection is from 
United States, North America
Tue 2023-03-14 18:02:15.535: [38439287] --> 220 mail.persada.id ESMTP MDaemon 
23.0.0; Tue, 14 Mar 2023 18:02:15 +0700
Tue 2023-03-14 18:02:15.789: [38439287] <-- EHLO o1.ptr5115.jurnal.id
Tue 2023-03-14 18:02:15.790: [38439287] --> 250-mail.persada.id Hello 
o1.ptr5115.jurnal.id [168.245.118.232], pleased to meet you
Tue 2023-03-14 18:02:15.790: [38439287] --> 250-ETRN
Tue 2023-03-14 18:02:15.790: [38439287] Location Screening hiding AUTH from 
country United States, North America
Tue 2023-03-14 18:02:15.790: [38439287] --> 250-8BITMIME
Tue 2023-03-14 18:02:15.790: [38439287] --> 250-ENHANCEDSTATUSCODES
Tue 2023-03-14 18:02:15.790: [38439287] --> 250-PIPELINING
Tue 2023-03-14 18:02:15.790: [38439287] --> 250-CHUNKING
Tue 2023-03-14 18:02:15.790: [38439287] --> 250-STARTTLS
Tue 2023-03-14 18:02:15.790: [38439287] --> 250 SIZE
Tue 2023-03-14 18:02:16.055: [38439287] <-- STARTTLS
Tue 2023-03-14 18:02:16.055: [38439287] --> 220 2.7.0 Ready to start TLS
Tue 2023-03-14 18:02:16.617: [38439287] SSL negotiation successful (TLS 1.2, 
TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384)
Tue 2023-03-14 18:02:16.871: [38439287] <-- EHLO o1.ptr5115.jurnal.id
Tue 2023-03-14 18:02:16.871: [38439287] --> 250-mail.persada.id Hello 
o1.ptr5115.jurnal.id [168.245.118.232], pleased to meet you
Tue 2023-03-14 18:02:16.871: [38439287] --> 250-ETRN
Tue 2023-03-14 18:02:16.871: [38439287] Location Screening hiding AUTH from 
country United States, North America
Tue 2023-03-14 18:02:16.871: [38439287] --> 250-8BITMIME
Tue 2023-03-14 18:02:16.871: [38439287] --> 250-ENHANCEDSTATUSCODES
Tue 2023-03-14 18:02:16.871: [38439287] --> 250-PIPELINING
Tue 2023-03-14 18:02:16.871: [38439287] --> 250-CHUNKING
Tue 2023-03-14 18:02:16.871: [38439287] --> 250-REQUIRETLS
Tue 2023-03-14 18:02:16.871: [38439287] --> 250 SIZE
Tue 2023-03-14 18:02:17.140: [38439287] <-- MAIL 
FROM: 
BODY=8BITMIME
Tue 2023-03-14 18:02:17.159: [38439287] Performing PTR lookup 
(232.118.245.168.IN-ADDR.ARPA)
Tue 2023-03-14 18:02:17.161: [38439287] *  D=232.118.245.168.IN-ADDR.ARPA 
TTL=(4) PTR=[o1.ptr5115.jurnal.id]
Tue 2023-03-14 18:02:17.163: [38439287] *  D=o1.ptr5115.jurnal.id TTL=(4) 
A=[168.245.118.232]
Tue 2023-03-14 18:02:17.163: [38439287]  End PTR results
Tue 2023-03-14 18:02:17.166: [38439287] Performing IP lookup 
(o1.ptr5115.jurnal.id)
Tue 2023-03-14 18:02:17.168: [38439287] *  D=o1.ptr5115.jurnal.id TTL=(4) 
A=[168.245.118.232]
Tue 2023-03-14 18:02:17.168: [38439287]  End IP lookup results
Tue 2023-03-14 18:02:17.175: [38439287] Performing IP lookup (sendgrid.net)
Tue 2023-03-14 18:02:17.177: [38439287] *  D=sendgrid.net TTL=(0) 
A=[167.89.115.56]
Tue 2023-03-14 18:02:17.177: [38439287] *  D=sendgrid.net TTL=(0) 
A=[167.89.123.54]
Tue 2023-03-14 18:02:17.177: [38439287] *  D=sendgrid.net TTL=(0) 
A=[167.89.115.120]
Tue 2023-03-14 18:02:17.177: [38439287] *  D=sendgrid.net TTL=(0) 
A=[167.89.123.124]
Tue 2023-03-14 18:02:17.181: [38439287] *  P=010 S=000 D=sendgrid.net TTL=(0) 
MX=[mx.sendgrid.net]
Tue 2023-03-14 18:02:17.181: [38439287] *  P=020 S=001 D=sendgrid.net TTL=(0) 
MX=[mx2.sendgrid.net]
Tue 2023-03-14 18:02:17.184: [38439287] *  D=mx.sendgrid.net TTL=(20) 
A=[167.89.118.48]
Tue 2023-03-14 18:02:17.184: [38439287] *  D=mx.sendgrid.net TTL=(20) 
A=[167.89.123.50]
Tue 2023-03-14 18:02:17.186: [38439287] *  D=mx2.sendgrid.net TTL=(2) 
A=[167.89.123.50]
Tue 2023-03-14 18:02:17.186: [38439287] *  D=mx2.sendgrid.net TTL=(2) 
A=[167.89.118.48]
Tue 2023-03-14 18:02:17.186: [38439287]  End IP lookup results
Tue 2023-03-14 18:02:17.189: [38439287] --> 550 5.7.1 Sender unknown
Tue 2023-03-14 18:02:17.189: [38439287] Mail from 
bounces+32950962-4877-agung.oktaviansyah=persada...@sendgrid.net refused 
(Sender Block List)
Tue 2023-03-14 18:02:17.189: [38439287] SMTP session terminated (Bytes in/out: 
639/4261)
Tue 2023-03-14 18:02:17.189: --

Terima kasih

 

    On Tuesday, 14 March 2023 at 18:34:04 GMT+7, Bambang Setiawan via Mdaemon-L 
 wrote:  
 
 Dear Pak Syafril,
Jika salah satu sender ter-refused connectionnya karena hal di bawah ini, saya 
harus setting dimana ya pak, supaya tidak terulang di refused oleh mail server 
kami.
Sebelumnya saya sudah masukan sebagai trusted hosts tetapi masih terjadi hal 
ini.

Tue 2023-03-14 14:03:32.345: --Tue 2023-03-14 14:04:00.028: SMTP 
screening added 168.245.118.232; connected 101 times within 3 minutes
Tue 2023-03-14 14:04:00.029: --
Tue 2023-03-14 14:04:00.031: Dynamic screening refused connection to 
103.150.114.155:25 from 168.245.118.232; 180 mi

[Mdaemon-L] Dynamic screening refused connection

[Bambang Setiawan via Mdaemon-L]

Dear Pak Syafril,
Jika salah satu sender ter-refused connectionnya karena hal di bawah ini, saya 
harus setting dimana ya pak, supaya tidak terulang di refused oleh mail server 
kami.
Sebelumnya saya sudah masukan sebagai trusted hosts tetapi masih terjadi hal 
ini.

Tue 2023-03-14 14:03:32.345: --Tue 2023-03-14 14:04:00.028: SMTP 
screening added 168.245.118.232; connected 101 times within 3 minutes
Tue 2023-03-14 14:04:00.029: --
Tue 2023-03-14 14:04:00.031: Dynamic screening refused connection to 
103.150.114.155:25 from 168.245.118.232; 180 minutes remain
Tue 2023-03-14 14:04:00.032: --

Atas bantuannya diucapkan terima kasih.


Bambang Setiawan

PERSADA

-- 
--[mdaemon-l]--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com
Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com
Versi terakhir: MDaemon 23.0.0, SecurityGateway 9.0.1

[Mdaemon-L] IPs were throttled by recipient server

[Bambang Setiawan via Mdaemon-L]

On 23/02/2023 21:44, Syafril Hermansyah via Mdaemon-L wrote:



Tindakan yang baik bukan menonaktifkan dynamic screening, tetapi reset 
dynamic screening block list.


siap pak, saya non aktifin dynamic screening memang sementara saja untuk 
meyakinkan apakah benar dynamic screening yang blok karena di smtp in 
log-nya tidak ada, setelah saya hapus/reset, dynamic screening langsung 
saya aktifkan kembali.


Setelah itu cari tahu kenapa IP itu masuk dalam dynamic block list.


untuk ini saya nge-trace nya kemana lagi ya pak

Terima kasih.

--
--[mdaemon-l]--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com
Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com
Versi terakhir: MDaemon 23.0.0, SecurityGateway 9.0.1

[Mdaemon-L] Account sering ter-freeze

[Bambang Setiawan via Mdaemon-L]

Dear Pak Syafril,


Mohon bantuan satu lagi Pak,

User email kami hari ini sering ke freeze dengan notification sbb :

Account frozen: "Ismi Ayu Mulia" ismi.mu...@persada.id

This account was frozen by Hijack Detection for sending too many 
messages, sending from too many different IPs, or causing too many RCPT 
failures within too short a time.



Jika saya cek melalui queue/stats manager, account yang bersangkutan 
tidak terlihat mengirimkan banyak email, saya harus cek dimana lagi ya pak.



Terima kasih

--
--[mdaemon-l]--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com
Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com
Versi terakhir: MDaemon 23.0.0, SecurityGateway 9.0.1

[Mdaemon-L] IPs were throttled by recipient server

[Bambang Setiawan via Mdaemon-L]

On 23/02/2023 16:45, Syafril Hermansyah via Mdaemon-L wrote:


Apakah bandwidth throttling diaktifkan 



http://mdaemon.dutaint.co.id/mdaemon/23.0/bandwidth_throttling_tab.html


bandwidth throttling tidak aktif pak



Apakah transaksinya ditemukan di smtp-in log atau screening log?

Memang dynamic screening yang refused pak, karena saya coba non aktifkan 
email bisa masuk.


Thu 2023-02-23 00:09:27.895: Dynamic screening refused connection to 
103.150.114.155:25 from 168.245.118.232; 1429 minutes remain



Terima kasih

--
--[mdaemon-l]--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com
Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com
Versi terakhir: MDaemon 23.0.0, SecurityGateway 9.0.1

[Mdaemon-L] IPs were throttled by recipient server

[Bambang Setiawan via Mdaemon-L]

Dear Pak Syafril,
Mohon bantuannya, email salah satu sender kami tidak dapat kami terima karena 
"IPs were throttled by recipient server" (SC terlampir), setting yang harus 
kami adjust dibagian mana ya pak.
Atas bantuannya diucapkan terima kasih.
Salam.  


Bambang Setiawan

PERSADA

--
--[mdaemon-l]--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com
Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com
Versi terakhir: MDaemon 23.0.0, SecurityGateway 9.0.1

[Mdaemon-L] Update PTR Record

[Bambang Setiawan via Mdaemon-L]

Dear Pak Syafril,


Mohon bantuannya untuk update PTR Record berikut,


Tue 2023-02-21 12:23:27.007: --
Tue 2023-02-21 12:23:25.932: [37808762] Session 37808762; child 0003
Tue 2023-02-21 12:23:25.932: [37808762] Accepting SMTP connection from 
36.94.85.125:2056 to 103.150.114.155:25
Tue 2023-02-21 12:23:25.932: [37808762] Location Screen says connection 
is from Indonesia, Asia
Tue 2023-02-21 12:23:25.933: [37808762] --> 220 mail.persada.id ESMTP 
MDaemon 23.0.0; Tue, 21 Feb 2023 12:23:25 +0700

Tue 2023-02-21 12:23:25.940: [37808762] <-- EHLO webmail.bankneo.co.id
Tue 2023-02-21 12:23:25.940: [37808762] --> 250-mail.persada.id Hello 
webmail.bankneo.co.id [36.94.85.125], pleased to meet you

Tue 2023-02-21 12:23:25.940: [37808762] --> 250-ETRN
Tue 2023-02-21 12:23:25.940: [37808762] --> 250-8BITMIME
Tue 2023-02-21 12:23:25.940: [37808762] --> 250-ENHANCEDSTATUSCODES
Tue 2023-02-21 12:23:25.940: [37808762] --> 250-PIPELINING
Tue 2023-02-21 12:23:25.940: [37808762] --> 250-CHUNKING
Tue 2023-02-21 12:23:25.940: [37808762] --> 250-STARTTLS
Tue 2023-02-21 12:23:25.940: [37808762] --> 250 SIZE
Tue 2023-02-21 12:23:25.946: [37808762] <-- STARTTLS
Tue 2023-02-21 12:23:25.946: [37808762] --> 220 2.7.0 Ready to start TLS
Tue 2023-02-21 12:23:25.975: [37808762] SSL negotiation successful (TLS 
1.2, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384)

Tue 2023-02-21 12:23:25.981: [37808762] <-- EHLO webmail.bankneo.co.id
Tue 2023-02-21 12:23:25.982: [37808762] --> 250-mail.persada.id Hello 
webmail.bankneo.co.id [36.94.85.125], pleased to meet you

Tue 2023-02-21 12:23:25.982: [37808762] --> 250-ETRN
Tue 2023-02-21 12:23:25.982: [37808762] --> 250-8BITMIME
Tue 2023-02-21 12:23:25.982: [37808762] --> 250-ENHANCEDSTATUSCODES
Tue 2023-02-21 12:23:25.982: [37808762] --> 250-PIPELINING
Tue 2023-02-21 12:23:25.982: [37808762] --> 250-CHUNKING
Tue 2023-02-21 12:23:25.982: [37808762] --> 250-REQUIRETLS
Tue 2023-02-21 12:23:25.982: [37808762] --> 250 SIZE
Tue 2023-02-21 12:23:25.988: [37808762] <-- MAIL 
FROM: SIZE=16359
Tue 2023-02-21 12:23:25.999: [37808762] Performing PTR lookup 
(125.85.94.36.IN-ADDR.ARPA)
Tue 2023-02-21 12:23:27.112: [37808762] *  DNS server reports domain 
name unknown
Tue 2023-02-21 12:23:27.112: [37808762] *  MDaemon configured to drop 
connection when domain name unknown

Tue 2023-02-21 12:23:27.112: [37808762]  End PTR results
Tue 2023-02-21 12:23:27.112: [37808762] --> 501 5.7.0 36.94.85.125 does 
not have valid PTR record
Tue 2023-02-21 12:23:27.113: [37808762] SMTP session terminated (Bytes 
in/out: 607/3774)

Tue 2023-02-21 12:23:27.113: --

Atas bantuannya diucapkan terima kasih.


Salam.

--
--[mdaemon-l]--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com
Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com
Versi terakhir: MDaemon 23.0.0, SecurityGateway 9.0.1

[Mdaemon-L] MDaemon configured to drop connection when domain name unknown

[Bambang Setiawan via Mdaemon-L]

Dear Pak Syafril,


Mohon bantuan untuk kasus log terlampir, atas bantuannya diucapkan 
terima kasih


Log 1

Wed 2023-01-25 09:16:31.442: --
Wed 2023-01-25 09:16:29.910: [36802377] Session 36802377; child 0015
Wed 2023-01-25 09:16:29.910: [36802377] Accepting SMTP connection from 
103.23.117.29:13358 to 103.150.114.155:25
Wed 2023-01-25 09:16:29.910: [36802377] Location Screen says connection 
is from Indonesia, Asia
Wed 2023-01-25 09:16:29.911: [36802377] --> 220 mail.persada.id ESMTP 
MDaemon 22.0.3; Wed, 25 Jan 2023 09:16:29 +0700

Wed 2023-01-25 09:16:29.918: [36802377] <-- EHLO mail.bankbsi.co.id
Wed 2023-01-25 09:16:29.919: [36802377] --> 250-mail.persada.id Hello 
mail.bankbsi.co.id [103.23.117.29], pleased to meet you

Wed 2023-01-25 09:16:29.919: [36802377] --> 250-ETRN
Wed 2023-01-25 09:16:29.919: [36802377] --> 250-8BITMIME
Wed 2023-01-25 09:16:29.919: [36802377] --> 250-ENHANCEDSTATUSCODES
Wed 2023-01-25 09:16:29.919: [36802377] --> 250-PIPELINING
Wed 2023-01-25 09:16:29.919: [36802377] --> 250-CHUNKING
Wed 2023-01-25 09:16:29.919: [36802377] --> 250-STARTTLS
Wed 2023-01-25 09:16:29.919: [36802377] --> 250 SIZE
Wed 2023-01-25 09:16:29.925: [36802377] <-- STARTTLS
Wed 2023-01-25 09:16:29.925: [36802377] --> 220 2.7.0 Ready to start TLS
Wed 2023-01-25 09:16:29.974: [36802377] SSL negotiation successful (TLS 
1.2, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384)

Wed 2023-01-25 09:16:29.981: [36802377] <-- EHLO mail.bankbsi.co.id
Wed 2023-01-25 09:16:29.981: [36802377] --> 250-mail.persada.id Hello 
mail.bankbsi.co.id [103.23.117.29], pleased to meet you

Wed 2023-01-25 09:16:29.981: [36802377] --> 250-ETRN
Wed 2023-01-25 09:16:29.981: [36802377] --> 250-8BITMIME
Wed 2023-01-25 09:16:29.981: [36802377] --> 250-ENHANCEDSTATUSCODES
Wed 2023-01-25 09:16:29.981: [36802377] --> 250-PIPELINING
Wed 2023-01-25 09:16:29.981: [36802377] --> 250-CHUNKING
Wed 2023-01-25 09:16:29.981: [36802377] --> 250-REQUIRETLS
Wed 2023-01-25 09:16:29.981: [36802377] --> 250 SIZE
Wed 2023-01-25 09:16:29.987: [36802377] <-- MAIL 
FROM: SIZE=17312
Wed 2023-01-25 09:16:29.998: [36802377] Performing PTR lookup 
(29.117.23.103.IN-ADDR.ARPA)
Wed 2023-01-25 09:16:31.845: [36802377] *  DNS server reports domain 
name unknown
Wed 2023-01-25 09:16:31.845: [36802377] *  MDaemon configured to drop 
connection when domain name unknown

Wed 2023-01-25 09:16:31.845: [36802377]  End PTR results
Wed 2023-01-25 09:16:31.845: [36802377] --> 501 5.7.0 103.23.117.29 does 
not have valid PTR record
Wed 2023-01-25 09:16:31.845: [36802377] SMTP session terminated (Bytes 
in/out: 873/3767)

Wed 2023-01-25 09:16:31.845: --


Log 2

Wed 2023-01-25 10:58:57.046: --
Wed 2023-01-25 10:58:57.150: [36807530] Session 36807530; child 0008
Wed 2023-01-25 10:58:57.150: [36807530] Accepting SMTP connection from 
103.190.28.220:52758 to 103.150.114.155:25
Wed 2023-01-25 10:58:57.150: [36807530] Location Screen says connection 
is from Indonesia, Asia
Wed 2023-01-25 10:58:57.151: [36807530] --> 220 mail.persada.id ESMTP 
MDaemon 22.0.3; Wed, 25 Jan 2023 10:58:57 +0700

Wed 2023-01-25 10:58:57.157: [36807530] <-- EHLO mta.kopindosat.co.id
Wed 2023-01-25 10:58:57.158: [36807530] --> 250-mail.persada.id Hello 
mta.kopindosat.co.id [103.190.28.220], pleased to meet you

Wed 2023-01-25 10:58:57.158: [36807530] --> 250-ETRN
Wed 2023-01-25 10:58:57.158: [36807530] --> 250-8BITMIME
Wed 2023-01-25 10:58:57.158: [36807530] --> 250-ENHANCEDSTATUSCODES
Wed 2023-01-25 10:58:57.158: [36807530] --> 250-PIPELINING
Wed 2023-01-25 10:58:57.158: [36807530] --> 250-CHUNKING
Wed 2023-01-25 10:58:57.158: [36807530] --> 250-STARTTLS
Wed 2023-01-25 10:58:57.158: [36807530] --> 250 SIZE
Wed 2023-01-25 10:58:57.162: [36807530] <-- STARTTLS
Wed 2023-01-25 10:58:57.162: [36807530] --> 220 2.7.0 Ready to start TLS
Wed 2023-01-25 10:58:57.198: [36807530] SSL negotiation successful (TLS 
1.1, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA)

Wed 2023-01-25 10:58:57.201: [36807530] <-- EHLO mta.kopindosat.co.id
Wed 2023-01-25 10:58:57.202: [36807530] --> 250-mail.persada.id Hello 
mta.kopindosat.co.id [103.190.28.220], pleased to meet you

Wed 2023-01-25 10:58:57.202: [36807530] --> 250-ETRN
Wed 2023-01-25 10:58:57.202: [36807530] --> 250-8BITMIME
Wed 2023-01-25 10:58:57.202: [36807530] --> 250-ENHANCEDSTATUSCODES
Wed 2023-01-25 10:58:57.202: [36807530] --> 250-PIPELINING
Wed 2023-01-25 10:58:57.202: [36807530] --> 250-CHUNKING
Wed 2023-01-25 10:58:57.202: [36807530] --> 250-REQUIRETLS
Wed 2023-01-25 10:58:57.202: [36807530] --> 250 SIZE
Wed 2023-01-25 10:58:57.206: [36807530] <-- MAIL 
FROM: SIZE=105800
Wed 2023-01-25 10:58:57.218: [36807530] Performing PTR lookup 
(220.28.190.103.IN-ADDR.ARPA)
Wed 2023-01-25 10:58:57.851: [36807530] *  DNS server reports domain 
name unknown
Wed 2023-01-25 10:58:57.851: [36807530] *  MDaemon configured to drop 
connection when domain name unknown

Wed 2023-01-25 10:58:57.851: [36807530]  End PTR results
Wed 2023-01-25 10:58:57.851: [36807530] --> 

[Mdaemon-L] Socket error 10053 - Connection abort

[Bambang Setiawan via Mdaemon-L]

Dear Pak Syafril,
Mohon bantuan analisanya untuk log email kami terlampir ya pak,
Wed 2023-01-04 06:29:44.006: --Wed 2023-01-04 06:27:33.602: [36031233] 
REMOTE message: pd5001001335765.msg
Wed 2023-01-04 06:27:33.602: [36031233] *  Session 36031233; child 0001
Wed 2023-01-04 06:27:33.603: [36031233] *  From: fariz.fadil...@persada.id
Wed 2023-01-04 06:27:33.603: [36031233] *  To: sari.jul...@ericssson.com
Wed 2023-01-04 06:27:33.603: [36031233] *  Subject: RE: Site Access Request 
20230102)-(BOGOR)-(Indosat/EID)-(01)-(Corrective and Preventive maintenance)_EBT
Wed 2023-01-04 06:27:33.603: [36031233] *  Message-ID: 
<002801d91f48$9d1844a0$d748cde0$@persada.id>
Wed 2023-01-04 06:27:33.603: [36031233] *  Size: 8757382; 

Wed 2023-01-04 06:27:33.612: [36031233] Resolving MX record for ericssson.com 
(DNS Server: 203.119.13.77)...
Wed 2023-01-04 06:28:33.123: [36031233] *  DNS: 60 second wait for DNS response 
exceeded (DNS Server: 203.119.13.77)
Wed 2023-01-04 06:28:33.125: [36031233] Resolving MX record for ericssson.com 
(DNS Server: 1.0.0.1)...
Wed 2023-01-04 06:28:33.321: [36031233] *  P=010 S=000 D=ericssson.com TTL=(10) 
MX=[park-mx.above.com]
Wed 2023-01-04 06:28:33.321: [36031233] Attempting SMTP connection to 
park-mx.above.com
Wed 2023-01-04 06:28:33.322: [36031233] Resolving A record for 
park-mx.above.com (DNS Server: 1.0.0.1)...
Wed 2023-01-04 06:28:33.325: [36031233] *  D=park-mx.above.com TTL=(3) 
A=[103.224.212.34]
Wed 2023-01-04 06:28:33.326: [36031233] Attempting SMTP connection to 
103.224.212.34:25
Wed 2023-01-04 06:28:33.326: [36031233] Waiting for socket connection...
Wed 2023-01-04 06:28:33.520: [36031233] *  Connection established 
103.150.114.155:52619 --> 103.224.212.34:25
Wed 2023-01-04 06:28:33.520: [36031233] Waiting for protocol to start...
Wed 2023-01-04 06:28:33.714: [36031233] <-- 220 localhost go-smtpd
Wed 2023-01-04 06:28:33.716: [36031233] --> EHLO mail.persada.id
Wed 2023-01-04 06:28:33.909: [36031233] <-- 250-localhost Hello 
103.150.114.155:52619
Wed 2023-01-04 06:28:33.909: [36031233] <-- 250-8BITMIME
Wed 2023-01-04 06:28:33.909: [36031233] <-- 250-PIPELINING
Wed 2023-01-04 06:28:33.909: [36031233] <-- 250 HELP
Wed 2023-01-04 06:28:33.909: [36031233] --> MAIL 
From:
Wed 2023-01-04 06:28:33.909: [36031233] --> RCPT To:
Wed 2023-01-04 06:28:33.909: [36031233] --> DATA
Wed 2023-01-04 06:28:34.104: [36031233] <-- 250 Okay, I'll believe you for now
Wed 2023-01-04 06:28:34.104: [36031233] <-- 250 Okay, I'll believe you for now
Wed 2023-01-04 06:28:34.104: [36031233] <-- 354 Send away
Wed 2023-01-04 06:28:34.104: [36031233] Sending 
 to [103.224.212.34]
Wed 2023-01-04 06:32:22.495: [36031233] *  Socket error 10054 - Connection was 
reset by the other side!
Wed 2023-01-04 06:32:22.495: [36031233] Error writing to socket
Wed 2023-01-04 06:32:22.495: [36031233] Socket connection closed by the other 
side (how rude!)
Wed 2023-01-04 06:32:22.495: [36031233] *  Socket error 10053 - Connection 
abort.
Wed 2023-01-04 06:32:22.495: [36031233] Connection closed
Wed 2023-01-04 06:32:22.496: [36031233] *  This message is 14 minutes old; it 
has 46 minutes left in this queue
Wed 2023-01-04 06:32:22.496: --

Terima kasih.


Bambang Setiawan

PERSADA

--
--[mdaemon-l]--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com
Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com
Versi terakhir: MDaemon 22.0.3, SecurityGateway 8.5.3

[Mdaemon-L] Update PTR Record

[Bambang Setiawan via Mdaemon-L]

Dear Pak Syafril,


Mohon bantuannya untuk update PTR Record terlampir.

Mon 2022-12-19 12:53:30.489: 01: --
Mon 2022-12-19 12:53:44.662: 05: [35500677] Session 35500677; child 0005
Mon 2022-12-19 12:53:44.662: 05: [35500677] Accepting SMTP connection 
from 202.51.96.12:44775 to 103.150.114.155:25
Mon 2022-12-19 12:53:44.662: 07: [35500677] Location Screen says 
connection is from Indonesia, Asia
Mon 2022-12-19 12:53:44.663: 03: [35500677] --> 220 mail.persada.id 
ESMTP MDaemon 22.0.3; Mon, 19 Dec 2022 12:53:44 +0700

Mon 2022-12-19 12:53:44.666: 02: [35500677] <-- EHLO webhosting.m-wifo.com
Mon 2022-12-19 12:53:44.670: 03: [35500677] --> 250-mail.persada.id 
Hello webhosting.m-wifo.com [202.51.96.12], pleased to meet you

Mon 2022-12-19 12:53:44.670: 03: [35500677] --> 250-ETRN
Mon 2022-12-19 12:53:44.670: 03: [35500677] --> 250-8BITMIME
Mon 2022-12-19 12:53:44.670: 03: [35500677] --> 250-ENHANCEDSTATUSCODES
Mon 2022-12-19 12:53:44.670: 03: [35500677] --> 250-PIPELINING
Mon 2022-12-19 12:53:44.670: 03: [35500677] --> 250-CHUNKING
Mon 2022-12-19 12:53:44.670: 03: [35500677] --> 250-STARTTLS
Mon 2022-12-19 12:53:44.670: 03: [35500677] --> 250 SIZE
Mon 2022-12-19 12:53:44.672: 02: [35500677] <-- STARTTLS
Mon 2022-12-19 12:53:44.672: 03: [35500677] --> 220 2.7.0 Ready to start TLS
Mon 2022-12-19 12:53:44.726: 01: [35500677] SSL negotiation successful 
(TLS 1.2, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384)

Mon 2022-12-19 12:53:44.728: 02: [35500677] <-- EHLO webhosting.m-wifo.com
Mon 2022-12-19 12:53:44.728: 03: [35500677] --> 250-mail.persada.id 
Hello webhosting.m-wifo.com [202.51.96.12], pleased to meet you

Mon 2022-12-19 12:53:44.728: 03: [35500677] --> 250-ETRN
Mon 2022-12-19 12:53:44.728: 03: [35500677] --> 250-8BITMIME
Mon 2022-12-19 12:53:44.728: 03: [35500677] --> 250-ENHANCEDSTATUSCODES
Mon 2022-12-19 12:53:44.728: 03: [35500677] --> 250-PIPELINING
Mon 2022-12-19 12:53:44.728: 03: [35500677] --> 250-CHUNKING
Mon 2022-12-19 12:53:44.728: 03: [35500677] --> 250-REQUIRETLS
Mon 2022-12-19 12:53:44.728: 03: [35500677] --> 250 SIZE
Mon 2022-12-19 12:53:44.730: 02: [35500677] <-- MAIL 
FROM: SIZE=2116456
Mon 2022-12-19 12:53:44.740: 05: [35500677] Performing PTR lookup 
(12.96.51.202.IN-ADDR.ARPA)
Mon 2022-12-19 12:53:44.745: 05: [35500677] * 
D=12.96.51.202.IN-ADDR.ARPA TTL=(5) PTR=[webhosting.m-wifo.com]
Mon 2022-12-19 12:53:44.752: 05: [35500677] * D=webhosting.m-wifo.com 
TTL=(240) A=[202.51.96.13]
Mon 2022-12-19 12:53:44.752: 05: [35500677] *  MDaemon configured to 
drop connection on PTR record mismatch

Mon 2022-12-19 12:53:44.752: 05: [35500677]  End PTR results
Mon 2022-12-19 12:53:44.752: 03: [35500677] --> 501 5.7.0 Domain must 
resolve
Mon 2022-12-19 12:53:44.753: 04: [35500677] SMTP session terminated 
(Bytes in/out: 787/4262)


Mon 2022-12-19 12:53:44.753: 01: --


Atas bantuannya diucapkan terima kasih


Salam.


--
--[mdaemon-l]--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com
Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com
Versi terakhir: MDaemon 22.0.3, SecurityGateway 8.5.3

[Mdaemon-L] Log tidak tercatat

[Bambang Setiawan via Mdaemon-L]

On 06/12/2022 16:55, Syafril Hermansyah via Mdaemon-L wrote:


Periksa ke screening log 2022-11-28, apakah ada tolakkan terhadap ip 
berikut




Ada penolakan dari IP ini pak 119.8.179.247

contohnya sbb :

Mon 2022-11-28 08:28:39.737: Dynamic screening refused connection to 
103.150.114.155:25 from 119.8.179.247; 1805 minutes remain


--
--[mdaemon-l]--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com
Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com
Versi terakhir: MDaemon 22.0.3, SecurityGateway 8.5.3

[Mdaemon-L] Log tidak tercatat

[Bambang Setiawan via Mdaemon-L]

On 06/12/2022 16:36, Bambang Setiawan via Mdaemon-L wrote:


Alamat lengkap sender sbb : ellenora.sir...@huawei.com

ditujukan ke :dian.nofi...@persada.id cc ke 
harris.purwa...@persada.id, yulliana.d...@persada.id, 
ade.hary...@persada.id, agung.susa...@persada.id, 
adya.pramesw...@persada.id


Demikian informasinya pak


Maaf terlewat, kejadiannya tanggal 28 Nopember 2022 Jam 12.39 Pak


Salam

--
--[mdaemon-l]--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com
Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com
Versi terakhir: MDaemon 22.0.3, SecurityGateway 8.5.3

[Mdaemon-L] Log tidak tercatat

[Bambang Setiawan via Mdaemon-L]

On 06/12/2022 14:02, Syafril Hermansyah via Mdaemon-L wrote:



Gambarnya tidak jelas, tidak bisa dijadikan rujukan untuk di analisis 
(telaah).


Gambar (picture) memang hampir selalu tidak bisa memberikan informasi 
yang lengkap, akan lebih baik jika pakai mail forward atau 
tangkaplayar PDF.



Mohon maaf pak, yang saya terima seperti itu


Daripada kirim gambar,  lebih bernilai informasinya jika disampaikan 
sendernya siapa (alamat email lengkap), ditujukan ke mana (alamat 
email lengkap) dan terjadinya (kirim) tanggal berapa.



Alamat lengkap sender sbb : ellenora.sir...@huawei.com

ditujukan ke :dian.nofi...@persada.id cc ke harris.purwa...@persada.id, 
yulliana.d...@persada.id, ade.hary...@persada.id, 
agung.susa...@persada.id, adya.pramesw...@persada.id


Demikian informasinya pak

--
--[mdaemon-l]--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com
Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com
Versi terakhir: MDaemon 22.0.3, SecurityGateway 8.5.3

[Mdaemon-L] 450 Throttled

[Bambang Setiawan via Mdaemon-L]

Dear Pak Syafril,
Mohon informasinya, jika log seperti ini maksudnya apa ya pak, nyangkut di 
retry queue terus soalnya pak :-)
Wed 2022-11-16 21:36:18.005: --
Wed 2022-11-16 21:34:57.076: [34339782] REMOTE message: 
pd900101359.del1668595121.msg
Wed 2022-11-16 21:34:57.076: [34339782] *  Session 34339782; child 0003
Wed 2022-11-16 21:34:57.077: [34339782] *  From: ratna.lest...@persada.id
Wed 2022-11-16 21:34:57.077: [34339782] *  To: sari.jul...@ericssson.com
Wed 2022-11-16 21:34:57.077: [34339782] *  Subject: RE: (Site Access Request 
20221114)-(JAKARTA UTARA)-(Indosat/EID/Persada)-(02)-(Corrective and Preventive 
maintenance)_Gametraco
Wed 2022-11-16 21:34:57.077: [34339782] *  Message-ID: 
<009901d8f8b6$34e9bf20$9ebd3d60$@persada.id>
Wed 2022-11-16 21:34:57.077: [34339782] *  Size: 2086904; 

Wed 2022-11-16 21:34:57.191: [34339782] Resolving MX record for ericssson.com 
(DNS Server: 203.119.13.77)...
Wed 2022-11-16 21:34:57.541: [34339782] *  P=010 S=000 D=ericssson.com TTL=(60) 
MX=[park-mx.above.com]
Wed 2022-11-16 21:34:57.541: [34339782] Attempting SMTP connection to 
park-mx.above.com
Wed 2022-11-16 21:34:57.541: [34339782] Resolving A record for 
park-mx.above.com (DNS Server: 203.119.13.77)...
Wed 2022-11-16 21:34:57.544: [34339782] *  D=park-mx.above.com TTL=(6) 
A=[103.224.212.34]
Wed 2022-11-16 21:34:57.545: [34339782] Attempting SMTP connection to 
103.224.212.34:25
Wed 2022-11-16 21:34:57.545: [34339782] Waiting for socket connection...
Wed 2022-11-16 21:34:57.786: [34339782] *  Connection established 
103.150.114.155:51965 --> 103.224.212.34:25
Wed 2022-11-16 21:34:57.786: [34339782] Waiting for protocol to start...
Wed 2022-11-16 21:34:58.028: [34339782] <-- 220 localhost go-smtpd
Wed 2022-11-16 21:34:58.032: [34339782] --> EHLO mail.persada.id
Wed 2022-11-16 21:34:58.272: [34339782] <-- 250-localhost Hello 
103.150.114.155:51965
Wed 2022-11-16 21:34:58.272: [34339782] <-- 250-8BITMIME
Wed 2022-11-16 21:34:58.272: [34339782] <-- 250-PIPELINING
Wed 2022-11-16 21:34:58.272: [34339782] <-- 250 HELP
Wed 2022-11-16 21:34:58.272: [34339782] --> MAIL 
From:
Wed 2022-11-16 21:34:58.272: [34339782] --> RCPT To:
Wed 2022-11-16 21:34:58.272: [34339782] --> DATA
Wed 2022-11-16 21:34:58.514: [34339782] <-- 250 Okay, I'll believe you for now
Wed 2022-11-16 21:34:58.515: [34339782] <-- 250 Okay, I'll believe you for now
Wed 2022-11-16 21:34:58.515: [34339782] <-- 354 Send away
Wed 2022-11-16 21:34:58.515: [34339782] Sending 
 to 
[103.224.212.34]
Wed 2022-11-16 21:36:18.243: [34339782] Transfer Complete
Wed 2022-11-16 21:36:19.209: [34339782] <-- 450 Throttled
Wed 2022-11-16 21:36:19.209: [34339782] --> QUIT
Wed 2022-11-16 21:36:19.450: [34339782] <-- 221 Goodbye
Wed 2022-11-16 21:36:19.451: [34339782] *  This message is 0 days old; it has 2 
days left to get delivered
Wed 2022-11-16 21:36:19.452: [34339782] SMTP session terminated (Bytes in/out: 
222/2087051)
Wed 2022-11-16 21:36:19.452: --

Terima kasih



--
--[mdaemon-l]--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com
Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com
Versi terakhir: MDaemon 22.0.3, SecurityGateway 8.5.3

[Mdaemon-L] Menaikan level reputation email

[Bambang Setiawan via Mdaemon-L]

On 11/11/2022 12:45, Syafril Hermansyah via Mdaemon-L wrote:


Untuk sementara diganti pakai 103.150.114.155?
Apakah IP 103.150.114.156 dishare dengan aplikasi proxy yang digunakan 
LAN user untuk akses Internet?



benar pak,, IP saya rubah menjadi 103.150.114.155,

untuk IP 103.150.114.156 sebelumnya hanya dipergunakan untuk mailserver pak.



Hijack detection valuenya kenapa dikecilkan jumlah messagenya?
Mestinya yang dikecilkan adalah time rangenya, agar berfungsi (catch 
dengan benar).

Coba diubah sesuai saran saya kemarin.


Saya rubah seperti ini pak




Notification failure/frozen/blocking aktif ya?


Betul Pak, notofikasi aktif semua.



Terima spam tidak berkaitan dengan IP/domain reputation.


X-Spam-Report:
    *  2.5 MDAEMON_OP_SPAM_HIGH MDaemon: spam/phish



Iya pak


Kenapa OP scorenya masih 2.5, bukankah sudah pernah saya kasih saran 
pakai +10.0 keatas?


http://mdaemon.dutaint.co.id/mdaemon/22.0/sp_outbreak_protection.html

Spam should be...

[x] accepted for filtering Score: +10.0


*  0.0 SPF_NONE SPF: sender does not publish an SPF Record


Ini saya juga agak heran pak, saya sudah sesuaikan seperti arahan Bapak 
seperti SC terlampir, apakah IWF Content nya juga harus saya rubah ke 
angka +10.0 pak ?





Domain yang tidak mengaktifkan SPF record atau SPF nya masih pakai 
SOFTFAIL memang banyak kirim spam.


Diblock saja sender domain @chase.pk di antispam block list.

http://mdaemon.dutaint.co.id/mdaemon/22.0/sf_black_list.html

saya sudah block PTR host host.chase.pk dan diunggah ke

http://ftp.dutaint.com/altn-mdaemon/miscl/HostScreen.dat

Sebelumnya juga saya sudah blok pak, tetapi kalo domain sendernya banyak 
dan selalu banyak yang baru kami jadi repot karena banyak sekali yang 
harus dimasukan untuk di blok pak



Terima kasih.





--
--[mdaemon-l]--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com
Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com
Versi terakhir: MDaemon 22.0.3, SecurityGateway 8.5.3

[Mdaemon-L] Menaikan level reputation email

[Bambang Setiawan via Mdaemon-L]

Mohon maaf saya paralel action ya pak,Saya cek account yang ke hijack dari menu 
queue and Statistic Manageraccount yang kirim email spam sudah saya disabled 
sementarahanya saya cek reputasi malah menjadi poor pak :-(saya ngeceknya 
darimana lagi ya pak untuk tau account mana lagi yang masih kirim spam.
Terima kasih


Bambang Setiawan

PERSADA
 

On Thursday, 10 November 2022 at 15:40:36 GMT+7, Syafril Hermansyah via 
Mdaemon-L  wrote:  
 
 On 11/10/22 14:33, Bambang Setiawan via Mdaemon-L wrote:
> Mohon petunjuknya, saat ini level reputation dari email kami menjadi 
> netral dan spam level menjadi high akibat dari beberapa account email 
> kami terkena hijack, akibatnya beberapa mailserver menolak untuk 
> menerima email kami. 


IP reputation dan domain reputation memang tidak bisa di delisting 
seperti DNSBL, perlu waktu berkisar 3 - 7 hari tidak broadcast spam ke 
internet.

> Kami agak susah mengontrol user-user ini karena 
> mereka ada di lapangan dan tersebar di banyak kota.


> Ada trik-nya nggak ya pak, supaya kalaupun terkena hijack account ini 
> tidak bisa mengirimkan banyak email keluar dan bagaimana cara 
> mempercepat level reputation email kami menjadi good kembali.


Terapkan Maximum messages sent per day di akun disamping lakukan 
pengubahan nilai Hijack Detection dan lakukan monitoring dan diubah 
nilainya secara berkala atau saat diperlukan.

http://mdaemon.dutaint.co.id/mdaemon/22.0/ae_quotas.html

misalkan sebagai permulaan

Maximum messages sent per day = 50

untuk akun-2x yang masih pakai Weak Password.


http://mdaemon.dutaint.co.id/mdaemon/22.0/security--hijack_detection.html

misalkan sebagai permulaan

Limit messages sent from all other IPs to 100 msgs in 1 minutes
Limit access to 100 connections from differing IPs in 1 minutes

[x] Send 5XX when limit is reached (otherwise 4XX)
[x] Freeze accounts when limit is reached

If an account causes 5 5xx RCPT errors within 5 minutes
[x] Freeze accounts when limit is reached

kosongkan isi "Exempt List".

Itu semua untuk pencegahan setelah akun terkena hijack.

Kalau pencegahan terhadap akun terhijack adalah

1. Penerapan strong password

http://mdaemon.dutaint.co.id/mdaemon/22.0/passwords.html

diterapkan seperti di mail yang lalu.

https://www.mail-archive.com/mdaemon-l@dutaint.com/msg48965.html

Kalau perlu minta semua user mengganti passwordnya untuk memastikan 
mereka semua sudah pakai strong password.

Klik menu "Force weak passwords to change"

atau secara berkala diminta ganti password.

https://www.mail-archive.com/mdaemon-l@dutaint.com/msg42271.html
https://www.mail-archive.com/mdaemon-l@dutaint.com/msg42286.html

2. Non aktifkan authentication di smtp port 25 dan keharusan pakai 
SSL/TLS connection

https://www.mail-archive.com/mdaemon-l@dutaint.com/msg47878.html

3. Ubah DNS SPF record policy ke p=FAILED (-all).

$ host -t txt persada.id
persada.id descriptive text "v=spf1 +a +mx +ip4:103.150.114.156 
include:smtp.iforte.net.id ~all"

4. yang lain bisa lihat di arsip

https://www.mail-archive.com/mdaemon-l@dutaint.com/msg44530.html
https://www.mail-archive.com/mdaemon-l@dutaint.com/msg44532.html
https://www.mail-archive.com/mdaemon-l@dutaint.com/msg44536.html



-- 
syafril

Syafril Hermansyah
MDaemon-L Moderators, running MDaemon 22.5.0 Beta RC1
Harap tidak cc: atau kirim ke private mail untuk masalah MDaemon.

The only way to do great work is to love what you do. If you haven’t 
found it yet, keep looking. Don’t settle.
    --- Steve Jobs


-- 
--[mdaemon-l]--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com
Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com
Versi terakhir: MDaemon 22.0.3, SecurityGateway 8.5.3



  
--
--[mdaemon-l]--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com
Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com
Versi terakhir: MDaemon 22.0.3, SecurityGateway 8.5.3

[Mdaemon-L] Menaikan level reputation email

[Bambang Setiawan via Mdaemon-L]

Dear Pak Syafril,


Mohon petunjuknya, saat ini level reputation dari email kami menjadi 
netral dan spam level menjadi high akibat dari beberapa account email 
kami terkena hijack, akibatnya beberapa mailserver menolak untuk 
menerima email kami. Kami agak susah mengontrol user-user ini karena 
mereka ada di lapangan dan tersebar di banyak kota.



Ada trik-nya nggak ya pak, supaya kalaupun terkena hijack account ini 
tidak bisa mengirimkan banyak email keluar dan bagaimana cara 
mempercepat level reputation email kami menjadi good kembali.



Atas perhatiannya diucapkan terima kasih.


Salam.

--
--[mdaemon-l]--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com
Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com
Versi terakhir: MDaemon 22.0.3, SecurityGateway 8.5.3

[Mdaemon-L] Rejected for policy reasons

[Bambang Setiawan via Mdaemon-L]

Dear Pak Syafril,


Mohon bantuannya jika email kami ter-reject oleh mailserver penerima 
sesuai dengan log terlampir ini kenapa ya pak ?



Thu 2022-11-03 11:04:56.838: --
Thu 2022-11-03 11:04:53.380: [33824356] REMOTE message: pd3501001229611.msg
Thu 2022-11-03 11:04:53.380: [33824356] *  Session 33824356; child 0001
Thu 2022-11-03 11:04:53.381: [33824356] *  From: arfianoz.mur...@persada.id
Thu 2022-11-03 11:04:53.381: [33824356] *  To: i...@yesnet.net.id
Thu 2022-11-03 11:04:53.381: [33824356] *  Subject: RE: Job Desc and 
Requirement
Thu 2022-11-03 11:04:53.381: [33824356] *  Message-ID: 
<002201d8ef39$2afc9400$80f5bc00$@persada.id>
Thu 2022-11-03 11:04:53.381: [33824356] *  Size: 90087; 


Thu 2022-11-03 11:04:53.381: [33824356] *  Route slip host: yesnet.net.id
Thu 2022-11-03 11:04:53.382: [33824356] *  Route slip port: 25
Thu 2022-11-03 11:04:53.387: [33824356] Resolving MX record for 
yesnet.net.id (DNS Server: 203.119.13.77)...
Thu 2022-11-03 11:04:53.390: [33824356] *  DNS server reports domain 
name unknown
Thu 2022-11-03 11:04:53.390: [33824356] Resolving MX record for 
yesnet.net.id (DNS Server: 1.0.0.1)...
Thu 2022-11-03 11:04:53.396: [33824356] *  DNS server reports domain 
name unknown
Thu 2022-11-03 11:04:53.396: [33824356] Resolving MX record for 
yesnet.net.id (DNS Server: 203.119.13.78)...
Thu 2022-11-03 11:04:53.398: [33824356] *  DNS server reports domain 
name unknown
Thu 2022-11-03 11:04:53.398: [33824356] Resolving MX record for 
yesnet.net.id (DNS Server: 8.8.4.4)...
Thu 2022-11-03 11:04:54.045: [33824356] *  DNS server reports domain 
name unknown
Thu 2022-11-03 11:04:54.045: [33824356] Resolving MX record for 
yesnet.net.id (DNS Server: 9.9.9.10)...
Thu 2022-11-03 11:04:54.061: [33824356] *  DNS server reports domain 
name unknown
Thu 2022-11-03 11:04:54.061: [33824356] Resolving MX record for 
yesnet.net.id (DNS Server: 202.51.96.7)...
Thu 2022-11-03 11:04:54.074: [33824356] *  DNS server reports domain 
name unknown
Thu 2022-11-03 11:04:54.074: [33824356] Resolving MX record for 
yesnet.net.id (DNS Server: 202.51.102.118)...
Thu 2022-11-03 11:04:54.092: [33824356] *  DNS server reports domain 
name unknown
Thu 2022-11-03 11:04:54.092: [33824356] Attempting to send message to 
smart host
Thu 2022-11-03 11:04:54.092: [33824356] Attempting SMTP connection to 
smtp.iforte.net.id
Thu 2022-11-03 11:04:54.092: [33824356] Resolving A record for 
smtp.iforte.net.id (DNS Server: 203.119.13.77)...
Thu 2022-11-03 11:04:54.094: [33824356] *  D=smtp.iforte.net.id TTL=(56) 
A=[202.51.104.5]
Thu 2022-11-03 11:04:54.094: [33824356] Attempting SMTP connection to 
202.51.104.5:25

Thu 2022-11-03 11:04:54.094: [33824356] Waiting for socket connection...
Thu 2022-11-03 11:04:54.096: [33824356] *  Connection established 
103.150.114.156:52716 --> 202.51.104.5:25

Thu 2022-11-03 11:04:54.096: [33824356] Waiting for protocol to start...
Thu 2022-11-03 11:04:54.127: [33824356] <-- 220 smtp.iforte.net.id ESMTP 
IFORTE

Thu 2022-11-03 11:04:54.130: [33824356] --> EHLO mail.persada.id
Thu 2022-11-03 11:04:54.131: [33824356] <-- 250-smtp.iforte.net.id
Thu 2022-11-03 11:04:54.131: [33824356] <-- 250-PIPELINING
Thu 2022-11-03 11:04:54.131: [33824356] <-- 250-SIZE 3200
Thu 2022-11-03 11:04:54.131: [33824356] <-- 250-VRFY
Thu 2022-11-03 11:04:54.131: [33824356] <-- 250-ETRN
Thu 2022-11-03 11:04:54.131: [33824356] <-- 250-STARTTLS
Thu 2022-11-03 11:04:54.131: [33824356] <-- 250-ENHANCEDSTATUSCODES
Thu 2022-11-03 11:04:54.131: [33824356] <-- 250-8BITMIME
Thu 2022-11-03 11:04:54.131: [33824356] <-- 250-DSN
Thu 2022-11-03 11:04:54.131: [33824356] <-- 250-SMTPUTF8
Thu 2022-11-03 11:04:54.131: [33824356] <-- 250 CHUNKING
Thu 2022-11-03 11:04:54.131: [33824356] --> MAIL 
From: SIZE=90087

Thu 2022-11-03 11:04:54.131: [33824356] --> RCPT To:
Thu 2022-11-03 11:04:54.131: [33824356] --> RCPT To:
Thu 2022-11-03 11:04:54.131: [33824356] --> DATA
Thu 2022-11-03 11:04:54.135: [33824356] <-- 250 2.1.0 Ok
Thu 2022-11-03 11:04:54.135: [33824356] <-- 250 2.1.5 Ok
Thu 2022-11-03 11:04:54.135: [33824356] <-- 250 2.1.5 Ok
Thu 2022-11-03 11:04:54.135: [33824356] <-- 354 End data with 
.
Thu 2022-11-03 11:04:54.135: [33824356] Sending 
 to [202.51.104.5]

Thu 2022-11-03 11:04:54.142: [33824356] Transfer Complete
Thu 2022-11-03 11:04:58.769: [33824356] <-- 554 5.7.1 Rejected for 
policy reasons (809E88F63633DE62F415)

Thu 2022-11-03 11:04:58.769: [33824356] --> QUIT
Thu 2022-11-03 11:04:58.779: [33824356] Creating delivery failure DSN...
Thu 2022-11-03 11:04:58.779: [33824356] *  Recipient: 
arfianoz.mur...@persada.id

Thu 2022-11-03 11:04:58.779: [33824356] *  Session-ID: 33824356
Thu 2022-11-03 11:04:58.779: [33824356] *  Queue-ID: pd3501001229611.msg
Thu 2022-11-03 11:04:58.779: [33824356] *  Message-ID: 
002201d8ef39$2afc9400$80f5bc00$@persada.id

Thu 2022-11-03 11:04:58.779: [33824356] --- End DSN message creation
Thu 2022-11-03 11:04:58.780: [33824356] <-- 221 2.0.0 Bye
Thu 2022-11-03 11:04:58.780: [33824356] 

[Mdaemon-L] Socket error 10053 - Connection abort

[Bambang Setiawan via Mdaemon-L]

Dear Pak Syafril,


Mohon bantuan analisanya untuk pengiriman email kami ini kenapa ya pak.

Thu 2022-10-13 12:15:05.283: --
Thu 2022-10-13 12:14:56.462: [32971781] REMOTE message: pd5001001196407.msg
Thu 2022-10-13 12:14:56.462: [32971781] *  Session 32971781; child 0003
Thu 2022-10-13 12:14:56.463: [32971781] *  From: bd.market...@persada.id
Thu 2022-10-13 12:14:56.463: [32971781] *  To: try.rah...@mncgroup.com
Thu 2022-10-13 12:14:56.463: [32971781] *  Subject: Re: Legalitas PT 
Personel Alih Daya
Thu 2022-10-13 12:14:56.463: [32971781] *  Message-ID: 

Thu 2022-10-13 12:14:56.463: [32971781] *  Size: 23076319; 

Thu 2022-10-13 12:14:56.471: [32971781] Resolving MX record for 
mncgroup.com (DNS Server: 203.119.13.77)...
Thu 2022-10-13 12:14:56.474: [32971781] *  P=015 S=000 D=mncgroup.com 
TTL=(0) MX=[smtp11.mncgroup.com]
Thu 2022-10-13 12:14:56.474: [32971781] *  P=015 S=002 D=mncgroup.com 
TTL=(0) MX=[smtp12.mncgroup.com]
Thu 2022-10-13 12:14:56.474: [32971781] *  P=025 S=001 D=mncgroup.com 
TTL=(0) MX=[smtp22.mncgroup.com]
Thu 2022-10-13 12:14:56.474: [32971781] *  P=025 S=003 D=mncgroup.com 
TTL=(0) MX=[smtp21.mncgroup.com]
Thu 2022-10-13 12:14:56.474: [32971781] Attempting SMTP connection to 
smtp11.mncgroup.com
Thu 2022-10-13 12:14:56.474: [32971781] Resolving A record for 
smtp11.mncgroup.com (DNS Server: 203.119.13.77)...
Thu 2022-10-13 12:14:56.478: [32971781] *  D=smtp11.mncgroup.com TTL=(5) 
A=[202.147.201.99]
Thu 2022-10-13 12:14:56.478: [32971781] Attempting SMTP connection to 
202.147.201.99:25

Thu 2022-10-13 12:14:56.478: [32971781] Waiting for socket connection...
Thu 2022-10-13 12:14:56.482: [32971781] *  Connection established 
103.150.114.156:60926 --> 202.147.201.99:25

Thu 2022-10-13 12:14:56.482: [32971781] Waiting for protocol to start...
Thu 2022-10-13 12:14:56.485: [32971781] <-- 220 smtp11.mncgroup.com 
ESMTP smtp50.mncgroup.com

Thu 2022-10-13 12:14:56.486: [32971781] --> EHLO mail.persada.id
Thu 2022-10-13 12:14:56.489: [32971781] <-- 250-smtp11.mncgroup.com
Thu 2022-10-13 12:14:56.489: [32971781] <-- 250-8BITMIME
Thu 2022-10-13 12:14:56.489: [32971781] <-- 250-ENHANCEDSTATUSCODES
Thu 2022-10-13 12:14:56.489: [32971781] <-- 250-DSN
Thu 2022-10-13 12:14:56.489: [32971781] <-- 250-STARTTLS
Thu 2022-10-13 12:14:56.489: [32971781] <-- 250 SIZE 5400
Thu 2022-10-13 12:14:56.489: [32971781] --> MAIL 
From: SIZE=23076319

Thu 2022-10-13 12:14:56.493: [32971781] <-- 250 2.1.0 MAIL ok
Thu 2022-10-13 12:14:56.493: [32971781] --> RCPT 
To:
Thu 2022-10-13 12:14:56.496: [32971781] <-- 250 2.1.5 
 ok

Thu 2022-10-13 12:14:56.496: [32971781] --> DATA
Thu 2022-10-13 12:14:56.502: [32971781] <-- 354 3.0.0 End Data with 
.
Thu 2022-10-13 12:14:56.502: [32971781] Sending 
 to [202.147.201.99]
Thu 2022-10-13 12:15:05.300: [32971781] *  Socket error 10054 - 
Connection was reset by the other side!

Thu 2022-10-13 12:15:05.300: [32971781] Error writing to socket
Thu 2022-10-13 12:15:05.300: [32971781] Socket connection closed by the 
other side (how rude!)
Thu 2022-10-13 12:15:05.300: [32971781] *  Socket error 10053 - 
Connection abort.

Thu 2022-10-13 12:15:05.300: [32971781] Connection closed
Thu 2022-10-13 12:15:05.301: [32971781] *  This message is 12 minutes 
old; it has 48 minutes left in this queue

Thu 2022-10-13 12:15:05.301: --

Terima kasih

--
--[mdaemon-l]--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com
Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com
Versi terakhir: MDaemon 22.0.3, SecurityGateway 8.5.3

[Mdaemon-L] Masuk Spam

[Bambang Setiawan via Mdaemon-L]

On 15/09/2022 16.47, Syafril Hermansyah via Mdaemon-L wrote:


Perbaiki setting Outbreak Protection.

http://mdaemon.dutaint.co.id/mdaemon/22.0/sp_outbreak_protection.html

boleh di set

Spam should be...

[x] blocked in real time

atau naikkkan scorenya ke +10.2

[x] accepted for filtering   with Score =+10.2

https://www.mail-archive.com/mdaemon-l@dutaint.com/msg47240.html


Setting awal mail server kami sudah seperti yang Bapak sampaikan pak 
(sesuai SC terlampir).


Terima kasih

--
--[mdaemon-l]--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com
Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com
Versi terakhir: MDaemon 22.0.3, SecurityGateway 8.5.3

[Mdaemon-L] Masuk Spam

[Bambang Setiawan via Mdaemon-L]

Dear Pak Syafril,


Mohon bantuan analisa Bapak, hari ini ada satu user kami yang menerima 
spam cukup banyak ( 8 email ),


untuk sample mail header-nya terlampir pak. terima kasih

Mail Header 1

Received: from std.eul.edu.tr ([127.0.0.1])
by localhost (std.eul.edu.tr [127.0.0.1]) (amavisd-new, port 10026)
with ESMTP id iJzwgkiHVoCn; Wed, 14 Sep 2022 22:57:07 +0300 (EEST)
Received: from ukiqiw (unknown [136.169.211.152])
by std.eul.edu.tr (Postfix) with ESMTPSA id 5E705368CD65;
Wed, 14 Sep 2022 22:57:03 +0300 (EEST)
Received: from std.eul.edu.tr (std.eul.edu.tr [212.108.143.155]) by 
mail.persada.id (103.150.114.156) (MDaemon PRO v22.0.3)
with ESMTP id md5001004463640.msg; Thu, 15 Sep 2022 03:56:00 +0700
Received: from localhost (localhost [127.0.0.1])
by std.eul.edu.tr (Postfix) with ESMTP id 2EF3D368CD66;
Wed, 14 Sep 2022 22:57:25 +0300 (EEST)
Received: from std.eul.edu.tr ([127.0.0.1])
by localhost (std.eul.edu.tr [127.0.0.1]) (amavisd-new, port 10032)
with ESMTP id jLAY1te8wIat; Wed, 14 Sep 2022 22:57:07 +0300 (EEST)
Received: from localhost (localhost [127.0.0.1])
by std.eul.edu.tr (Postfix) with ESMTP id 904F9368CD68;
Wed, 14 Sep 2022 22:57:07 +0300 (EEST)
From:<21120...@std.eul.edu.tr>
Subject: real girls profiles
Date: Thu, 15 Sep 2022 02:56:48 +0700
Message-ID:<86e7cd6692567c7754fa03a85c98a18aa901d08...@std.eul.edu.tr>
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="=_NextPart_000_0041_01D8C8F7.7CCC49F0"
X-Mailer: Microsoft Outlook 16.0
X-MDAV-Result: clean
X-MDAV-Processed: mail.persada.id, Thu, 15 Sep 2022 03:56:01 +0700
X-Spam-Processed: mail.persada.id, Thu, 15 Sep 2022 03:56:00 +0700
X-Spam-Level: *
X-Spam-Status: Yes, score=5.7 required=5.0 tests=HTML_FONT_LOW_CONTRAST,
HTML_MESSAGE,MDAEMON_OP_SPAM_HIGH,MISSING_HEADERS,PDS_OTHER_BAD_TLD,
SPF_PASS,T_SCC_BODY_TEXT_LINE shortcircuit=no autolearn=disabled
version=3.4.4
X-Spam-Report: *  2.5 MDAEMON_OP_SPAM_HIGH MDaemon: spam/phish
*  2.0 PDS_OTHER_BAD_TLD Untrustworthy TLDs
*  [URI: losiposi.xyz (xyz)]
* -0.0 SPF_PASS SPF: sender matches SPF record
*  1.2 MISSING_HEADERS Missing To: header
*  0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or
*  identical to background
*  0.0 HTML_MESSAGE BODY: HTML included in message
* -0.0 T_SCC_BODY_TEXT_LINE No description available.
X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24)
Authentication-Results: mail.persada.id;
spf=passsmtp.mailfrom=21120...@std.eul.edu.tr;
dkim=fail (DKIM_SUBJECT_NOT_SIGNED) header.d=std.eul.edu.tr 
header.b=YGkrl+JmWy;
iprev=pass policy.iprev=212.108.143.155 (PTR std.eul.edu.tr);
iprev=pass policy.iprev=212.108.143.155 (HELO std.eul.edu.tr);
iprev=pass policy.iprev=212.108.143.155 (mail21120...@std.eul.edu.tr)
X-MDSPF-Result: unapproved (mail.persada.id)
X-MDRemoteIP: 212.108.143.155
X-MDHelo: std.eul.edu.tr
X-MDArrival-Date: Thu, 15 Sep 2022 03:56:00 +0700
X-MDOrigin-Country: CY, EU
X-Rcpt-To:raynaldi.herd...@persada.id
X-MDRcpt-To:raynaldi.herd...@persada.id
X-Return-Path:21120...@std.eul.edu.tr
X-Envelope-From:21120...@std.eul.edu.tr
X-MDaemon-Deliver-To:raynaldi.herd...@persada.id
Thread-Index: AQGRP9fIrXJmlZ3sBrNRYTlB9nHgmw==
X-MDOP-RefID: 
str=0001.0A67340E.63220AE4.003C,ss=4,sh,re=0.000,recu=0.000,reip=0.000,cl=4,cld=1,fgs=0
 (_st=4 _vt=0 _iwf=0)
X-Virus-Scanned: amavisd-new at std.eul.edu.tr
X-Spam-Flag: YES
List-Unsubscribe:
X-OlkEid: 
DEA0072C09862A4BAA2298EB05E581930700C3B68E10F77511CEB4CD00AA00BBB6E6000BDA4F1E2088DCB645A5CFF07188B108701048C181FD4386621E48B7D949BEA6C7F15C

Mail Header 2 :

Received: from IND01-MAX-obe.outbound.protection.outlook.com 
(mail-maxind01hn2205.outbound.protection.outlook.com [52.100.218.205])
by mail.persada.id (103.150.114.156) (MDaemon PRO v22.0.3) with ESMTP 
id md5001004463585.msg;
Thu, 15 Sep 2022 03:08:15 +0700
Received: from MAZPR01MB7261.INDPRD01.PROD.OUTLOOK.COM (2603:1096:a01:5b::9)
 by PNXPR01MB7306.INDPRD01.PROD.OUTLOOK.COM (2603:1096:c01:a1::9) with
 Microsoft SMTP Server (version=TLS1_2,
 cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.5612.22; Wed, 14 Sep
 2022 20:08:06 +
Received: from MAZPR01MB7261.INDPRD01.PROD.OUTLOOK.COM
 ([fe80::c976:5a63:c8f4:58f2]) by MAZPR01MB7261.INDPRD01.PROD.OUTLOOK.COM
 ([fe80::c976:5a63:c8f4:58f2%4]) with mapi id 15.20.5612.022; Wed, 14 Sep 2022
 20:08:06 +
From:
To: 
Subject: otichny option had fun today
Date: Thu, 15 Sep 2022 03:07:31 +0700
Message-ID:<8ab1f853a7634946a50f46ed0aeec4cdc1e...@pdpu.ac.in>
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="=_NextPart_000_0048_01D8C8F7.7E77FE20"
X-Mailer: Microsoft Outlook 16.0
X-MDAV-Result: clean
X-MDAV-Processed: mail.persada.id, Thu, 15 Sep 

[Mdaemon-L] OOT : Outlook vs Thunderbird lewat jaringan Indihome

[Bambang Setiawan via Mdaemon-L]

Dear Pak Syafril,

 

Maaf sebelumnya jika out of topik dari Mdaemon pak,

Googling masalah ini belum menemui solusinya 

 

Terkait dengan masalah pengiriman email melalui jaringan indihome untuk user 
yang akses ke mailserver dari luar kantor,

masalahnya dengan settingan yang sama untuk pengiriman email ( port 587 ), jika 
menggunakan outlook itu pasti gagal / tertahan di folder outbox, 

namun jika menggunakan email client thunderbird atau aplikasi mail-nya OSX 
tidak ada masalah/berhasil kirim,

 

Apakah Bapak mengetahui solusinya Pak ? karena hampir semua user untuk aplikasi 
mail client nya mengunakan outlook.

 

Atas perhatiannya diucapkan terima kasih

 

Salam.

 

Bambang Setiawan 



-- 


 


CONFIDENTIALITY NOTICE

"This e-mail message including any attachment(s) is from PT. Personel Alih Daya 
(Persada). It may contain confidential and/or privileged information. Unless 
you are the intended recipient (or authorized to receive for the intended 
recipient) you may not read, print, retain, use, copy, distribute or disclose 
to anyone the message or any information contained in the message herein. If 
you have received this communication in error, please advise the sender by 
reply e-mail and destroy all copies (including any attachments) of the original 
message. PT. Personel Alih Daya (Persada) is neither liable for the proper and 
complete transmission of the information contained in this communication nor 
for any delay in its receipt."
--
--[mdaemon-l]--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com
Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com
Versi terakhir: MDaemon 22.0.3, SecurityGateway 8.5.3

[Mdaemon-L] Email tidak diterima

[Bambang Setiawan via Mdaemon-L]

Dear Pak Syafril,


Mohon bantuannya untuk log terlampir, emailnya sebenarnya diterima oleh 
mailserver kami atau tidak ya pak


Soalnya recipient tidak menerima email tersebut.

Terima kasih

Log 1

Tue 2022-07-12 16:44:27.840: INBOUND message: md5001003977845.msg
Tue 2022-07-12 16:44:27.840: *  From: "Siska Agustiningsih (A)" 

Tue 2022-07-12 16:44:27.840: *  To: Adya Prameswari 


Tue 2022-07-12 16:44:27.840: *  Subject: SPE Huawei - Bakti MS USO Project
Tue 2022-07-12 16:44:27.840: *  Message-ID: 
<92990b5a41c049ddbb208efaad950...@huawei.com>
Tue 2022-07-12 16:44:27.840: *  Modified From: "Siska Agustiningsih (A) 
(siska.a...@huawei.com)" 
Tue 2022-07-12 16:44:27.840: *  Size: 34006575; 



Log 2

Tue 2022-07-12 16:44:12.129: [27886621] Session 27886621; child 0005
Tue 2022-07-12 16:44:12.129: [27886621] Accepting SMTP connection from 
119.8.177.36:41271 to 103.150.114.156:25
Tue 2022-07-12 16:44:12.129: [27886621] Location Screen says connection 
is from Singapore, Asia
Tue 2022-07-12 16:44:12.130: [27886621] --> 220 mail.persada.id ESMTP 
MDaemon 22.0.1; Tue, 12 Jul 2022 16:44:12 +0700

Tue 2022-07-12 16:44:12.147: [27886621] <-- EHLO sinmsgout01.his.huawei.com
Tue 2022-07-12 16:44:12.147: [27886621] --> 250-mail.persada.id Hello 
sinmsgout01.his.huawei.com [119.8.177.36], pleased to meet you

Tue 2022-07-12 16:44:12.147: [27886621] --> 250-ETRN
Tue 2022-07-12 16:44:12.147: [27886621] --> 250-AUTH LOGIN CRAM-MD5 PLAIN
Tue 2022-07-12 16:44:12.147: [27886621] --> 250-8BITMIME
Tue 2022-07-12 16:44:12.147: [27886621] --> 250-ENHANCEDSTATUSCODES
Tue 2022-07-12 16:44:12.147: [27886621] --> 250-PIPELINING
Tue 2022-07-12 16:44:12.147: [27886621] --> 250-CHUNKING
Tue 2022-07-12 16:44:12.147: [27886621] --> 250 SIZE
Tue 2022-07-12 16:44:12.164: [27886621] <-- MAIL 
FROM: SIZE=34005109
Tue 2022-07-12 16:44:12.178: [27886621] Performing PTR lookup 
(36.177.8.119.IN-ADDR.ARPA)
Tue 2022-07-12 16:44:12.194: [27886621] * D=36.177.8.119.IN-ADDR.ARPA 
TTL=(10) PTR=[sinmsgout01.his.huawei.com]
Tue 2022-07-12 16:44:12.249: [27886621] * D=sinmsgout01.his.huawei.com 
TTL=(10) A=[119.8.177.36]

Tue 2022-07-12 16:44:12.249: [27886621]  End PTR results
Tue 2022-07-12 16:44:12.252: [27886621] Performing IP lookup 
(sinmsgout01.his.huawei.com)
Tue 2022-07-12 16:44:12.254: [27886621] * D=sinmsgout01.his.huawei.com 
TTL=(10) A=[119.8.177.36]

Tue 2022-07-12 16:44:12.254: [27886621]  End IP lookup results
Tue 2022-07-12 16:44:12.262: [27886621] Performing IP lookup (huawei.com)
Tue 2022-07-12 16:44:12.265: [27886621] *  D=huawei.com TTL=(4) 
A=[121.37.49.12]
Tue 2022-07-12 16:44:12.267: [27886621] *  P=010 S=001 D=huawei.com 
TTL=(0) MX=[mx5.huawei.com]
Tue 2022-07-12 16:44:12.267: [27886621] *  P=020 S=000 D=huawei.com 
TTL=(0) MX=[mx7.huawei.com]
Tue 2022-07-12 16:44:12.267: [27886621] *  P=030 S=002 D=huawei.com 
TTL=(0) MX=[mx8.his.huawei.com]
Tue 2022-07-12 16:44:12.267: [27886621] *  P=030 S=003 D=huawei.com 
TTL=(0) MX=[mx9.his.huawei.com]
Tue 2022-07-12 16:44:12.271: [27886621] *  D=mx5.huawei.com TTL=(0) 
A=[124.71.93.234]
Tue 2022-07-12 16:44:12.276: [27886621] *  D=mx7.huawei.com TTL=(0) 
A=[119.8.89.70]
Tue 2022-07-12 16:44:12.331: [27886621] *  D=mx8.his.huawei.com TTL=(10) 
A=[119.8.177.45]
Tue 2022-07-12 16:44:12.334: [27886621] *  D=mx9.his.huawei.com TTL=(10) 
A=[14.137.139.134]

Tue 2022-07-12 16:44:12.334: [27886621]  End IP lookup results
Tue 2022-07-12 16:44:12.335: [27886621] Performing SPF lookup 
(sinmsgout01.his.huawei.com / 119.8.177.36)
Tue 2022-07-12 16:44:13.042: [27886621] *  Result: none; no SPF record 
in DNS

Tue 2022-07-12 16:44:13.042: [27886621]  End SPF results
Tue 2022-07-12 16:44:13.042: [27886621] Performing SPF lookup 
(huawei.com / 119.8.177.36)
Tue 2022-07-12 16:44:13.098: [27886621] *  Policy: v=spf1 
ip4:45.249.212.32 ip4:45.249.212.35 ip4:45.249.212.255 
ip4:45.249.212.187/29 ip4:45.249.212.191 ip4:168.195.93.47 
ip4:185.176.79.56 ip4:119.8.179.247 ip4:119.8.89.136/31 ip4:119.8.89.135 
ip4:119.8.177.36/31 ip4:119.8.177.38 -al
Tue 2022-07-12 16:44:13.099: [27886621] *  Evaluating ip4:45.249.212.32: 
no match
Tue 2022-07-12 16:44:13.099: [27886621] *  Evaluating ip4:45.249.212.35: 
no match
Tue 2022-07-12 16:44:13.099: [27886621] *  Evaluating 
ip4:45.249.212.255: no match
Tue 2022-07-12 16:44:13.099: [27886621] *  Evaluating 
ip4:45.249.212.187/29: no match
Tue 2022-07-12 16:44:13.099: [27886621] *  Evaluating 
ip4:45.249.212.191: no match
Tue 2022-07-12 16:44:13.099: [27886621] *  Evaluating ip4:168.195.93.47: 
no match
Tue 2022-07-12 16:44:13.099: [27886621] *  Evaluating ip4:185.176.79.56: 
no match
Tue 2022-07-12 16:44:13.099: [27886621] *  Evaluating ip4:119.8.179.247: 
no match
Tue 2022-07-12 16:44:13.099: [27886621] *  Evaluating 
ip4:119.8.89.136/31: no match
Tue 2022-07-12 16:44:13.099: [27886621] *  Evaluating ip4:119.8.89.135: 
no match
Tue 2022-07-12 16:44:13.099: [27886621] *  Evaluating 
ip4:119.8.177.36/31: match

Tue 2022-07-12 16:44:13.099: [27886621] 

[Mdaemon-L] Tes email periksa DKIM

[Bambang Setiawan via Mdaemon-L]

On 22/07/2022 16.32, Syafril Hermansyah via Mdaemon-L wrote:


Hmm... apakah ada external firewall atau antivirus for network yang 
melakuan filter terhadap smtp port 25?

tidak ada firewall / antivirus pak, koneksi mailserver langsung ke internet


Coba begini saja, built ulang DKIM key dan update ke Name Server 
(authoritative DNS server) domain persada.id.
DKIM yang lama masih 1024 bit, kalau MD baru mestinya akan generate 
DKIM 2048 bit.


Saya sudah built ulang pak, saya tes lagi tapi malah permanent error 
DKIM nya.


Terlampir disampaikan file hasil test, dan dkim record yang saya 
tambahkan di NS,


karena dkim key nya tidak bisa saya masukan sekaligus maka saya 
tambahkan seperti di scrren capture.



Terima kasih.


--
--[mdaemon-l]--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com
Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com
Versi terakhir: MDaemon 22.0.1, SecurityGateway 8.5.2


This is SPF/DKIM/DMARC/RBL report generated by a test tool provided 
by AdminSystem Software Limited.

Any problem, please contact supp...@emailarchitect.net

Report-Id: 440b2f71
Sender: 
Header-From: 
HELO-Domain: mail.persada.id
Source-IP: 103.150.114.156
SSL/TLS: unencrypted
Validator-Version: 1.11

Original email header:

x-sender: prvs=120582129e=bambang.setia...@persada.id
x-receiver: test-440b2...@appmaildev.com
Received: from mail.persada.id ([103.150.114.156]) by appmaildev.com with 
Microsoft SMTPSVC(8.5.9600.16384);
 Mon, 25 Jul 2022 02:23:17 +
DKIM-Signature: v=1; a=rsa-sha256; c=simple; d=persada.id;
s=MDaemon; t=1658715797; x=1659320597;
i=bambang.setia...@persada.id; q=dns/txt; h=From:To:Subject:Date:
Organization:Message-ID:MIME-Version:Content-Type:Thread-Index:
Content-Language; bh=fobibbuErxhXgQnekN0KxytZW7FgGSKhz6CGBoPpbVs
=; b=sQezvbfBv8tdB4gBOXrxFSO/g7ZBzZZaSSc5arslNaVvGY3PLVcUJFMzUTQ
dG3jKvZKj1Bd4x+5ABQ/xfLjzL033cy/eBrUvRWCKyZQawNMQezfjSLaEd5ma7ST
mi6G4zRUtBbmuknPE39UZOi5ciURjWu19pNUBRE4GEsDzYuyw06hM6EtuwhBzdLX
Xnd6bS2U6vicc9cUgLpotd420Rf5PmhvBMkoF6VLpA5hym/cEvsRgLRFonb1FgTP
nJRei6HHdSYQNJfFix35zdl2S7/QFLT0wn1cLN4ZKrvGliyjXkA04BpqpUvZBE2i
SLd8yvlIEQ5rA80sYdGBO0KxC3Q==
X-MDAV-Result: clean
X-MDAV-Processed: mail.persada.id, Mon, 25 Jul 2022 09:23:17 +0700
Received: from benkbenk by mail.persada.id (103.150.114.156) (MDaemon PRO 
v22.0.1) 
with ESMTPA id pp5001004071039.msg; Mon, 25 Jul 2022 09:23:17 +0700
X-Spam-Processed: mail.persada.id, Mon, 25 Jul 2022 09:23:17 +0700
(not processed: message from trusted or authenticated source)
X-MDArrival-Date: Mon, 25 Jul 2022 09:23:17 +0700
X-Authenticated-Sender: bambang.setia...@persada.id
X-Return-Path: prvs=120582129e=bambang.setia...@persada.id
X-Envelope-From: bambang.setia...@persada.id
X-MDaemon-Deliver-To: test-440b2...@appmaildev.com
From: "Bambang Setiawan" 
To: 
Subject: 
Date: Mon, 25 Jul 2022 09:21:11 +0700
Organization: PT. Personel Alih Daya (Persero) Tbk
Message-ID: <01d89fcd$3505bc30$9f113490$@persada.id>
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="=_NextPart_000_0001_01D8A007.E164BB40"
X-Mailer: Microsoft Outlook 16.0
Thread-Index: AdifzTTFTnzl8DVRSkiTBCPt11d2jQ==
Content-Language: id
X-MDCFSigsAdded: persada.id
Return-Path: prvs=120582129e=bambang.setia...@persada.id
X-OriginalArrivalTime: 25 Jul 2022 02:23:17.0906 (UTC) 
FILETIME=[806B5720:01D89FCD]


SPF: Pass


SPF-Record: v=spf1 +a +mx +ip4:103.150.114.156 include:smtp.iforte.net.id ~all
Sender-IP: 103.150.114.156
Sender-Domain-Helo-Domain: persada.id

Query TEXT record from DNS server for: persada.id
[TXT]: v=spf1 +a +mx +ip4:103.150.114.156 include:smtp.iforte.net.id ~all
Parsing SPF record: v=spf1 +a +mx +ip4:103.150.114.156 
include:smtp.iforte.net.id ~all

Mechanisms: v=spf1

Mechanisms: +a
Testing mechanism a
Query A record from DNS server for: persada.id
[A]: 103.150.114.157
Testing CIDR: source=103.150.114.156;  103.150.114.157/128

Mechanisms: +mx
Testing mechanism mx
Query MX record from DNS server for: persada.id
[MX]: mail.persada.id
Testing mechanism A:mail.persada.id/128
Query A record from DNS server for: mail.persada.id
[A]: 103.150.114.156
Testing CIDR: source=103.150.114.156;  103.150.114.156/128
mx hit, Qualifier: +

[Mdaemon-L] Memperbaiki DKIM

[Bambang Setiawan via Mdaemon-L]

On 08/07/2022 06.35, Syafril Hermansyah via Mdaemon-L wrote:



Tidak lengkap prosesnya.
Setelah tampil response dari receiver ketikkan "EHLO mail.persada.id" 
.



Maaf menyambung email saya sebelumnya pak, terlampir hasil telnet-nya pak

220 mx.google.com ESMTP 
ik15-20020a170902ab0f00b0016d12c2eb15si1495331plb.209 - gsmtp


ehlo mail.persada.id
250-mx.google.com at your service, [103.150.114.156]
250-SIZE 157286400
250-8BITMIME
250-STARTTLS
250-ENHANCEDSTATUSCODES
250-PIPELINING
250-CHUNKING
250 SMTPUTF8
quit
221 2.0.0 closing connection 
ik15-20020a170902ab0f00b0016d12c2eb15si1495331plb.209 - gsmtp



Connection to host lost.




--
--[mdaemon-l]--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com
Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com
Versi terakhir: MDaemon 22.0.1, SecurityGateway 8.5.2

[Mdaemon-L] Access Denied Rubah Password di Webmin

[Bambang Setiawan via Mdaemon-L]

On 11/07/2022 21.27, Syafril Hermansyah via Mdaemon-L wrote:


Sudah dibuatkan patch oleh MDaemon Developer.


Baik Pak, terima kasih informasinya
--
--[mdaemon-l]--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com
Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com
Versi terakhir: MDaemon 22.0.1, SecurityGateway 8.5.2

[Mdaemon-L] MDaemon 2 Koneksi

[Bambang Setiawan via Mdaemon-L]

On Wednesday, 6 July 2022 at 16:00:18 GMT+7, Syafril Hermansyah via 
Mdaemon-L  wrote: 

Itu cara kuno dan mestinya tidak akan jalan benar karena 1 host hanya 
boleh punya 1 gateway address saja, harusnya ikuti yang ini

https://www.mail-archive.com/mdaemon-l@dutaint.com/msg44086.html

Untuk langkah 1 berarti saya pindahkan mailserver dari directline ke bawah 
router/firewall ya pak.

Tidak benar.
Koneksi HSP mestinya akan dapat/pakai Public IP yang berbeda dengan line 
koneksi Iforte, jadi PTR recordnya harus menyesuaikan.

Lihat link diatas.
Ini memang berbeda pak IP Publicnya pak, 

-- 
syafril

Syafril Hermansyah
MDaemon-L Moderators, running MDaemon 22.0.1
Harap tidak cc: atau kirim ke private mail untuk masalah MDaemon.

You have to learn the rules of the game. And then you have to play 
better than anyone else.
    --- Albert Einstein


-- 
--[mdaemon-l]--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com
Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com
Versi terakhir: MDaemon 22.0.1, SecurityGateway 8.5.2



  
--
--[mdaemon-l]--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com
Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com
Versi terakhir: MDaemon 22.0.1, SecurityGateway 8.5.2

[Mdaemon-L] MDaemon 2 Koneksi

[Bambang Setiawan via Mdaemon-L]

Dear Pak Syafril,
Mohon bantuannya untuk implementasi koneksi 2 ISP dengan 1 mailserver, 
tujuannya jika 1 link down maka akan diambil alih oleh link backup
ISP yang saya pergunakan Iforte ( link utama ) dan HSP ( link backup )
Mailserver ada 3 nic, 1 NIC -> Direct ke ISP Iforte, 1 NIC -> Direct ke ISP HSP 
dan 1 NIC lagi untuk DMZ
Untuk yang Iforte sebelumnya sudah berjalan normal, namun ada kendala FO Cut 
sehingga saya ingin buat komunikasi email diambil alih oleh link backup
Saya sudah ikuti petunjuk Bapak di link ini [MDaemon-L] 2 ISP 1 Email server
Untuk langkah kedua
Jika sebelumnya saya sudah minta buat PTR Record di Iforte sebagai berikut

| 156.114.150.103.in-addr.arpa  |  PTR  |  mail.persada.id.  |  21600  |


berarti saya meminta ke HSP untuk membuatkan PTR Record sebagai berikut ya pak
|




| 130.201.116.103.in-addr.arpa  |  PTR | 
 | 
 | 
 | 
 | mail.persada.id.  | 14400
 |


Terima kasih  

--
--[mdaemon-l]--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com
Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com
Versi terakhir: MDaemon 22.0.1, SecurityGateway 8.5.2

[Mdaemon-L] Memperbaiki DKIM

[Bambang Setiawan via Mdaemon-L]

   On Wednesday, 6 July 2022 at 10:09:47 GMT+7, Syafril Hermansyah via 
Mdaemon-L  wrote:  
 
 Coba perlihatkan setting DKIM sign settignya seperti apa?

http://mdaemon.dutaint.co.id/mdaemon/22.0/security--dkim_options.html

Apakah yang aktif sesuai gambar dimenu itu?
Setting DKIM mailserver kami sbb pak.



Juga lakukan test telnet dari MDaemon server sbb:

C:\ telnet gmail-smtp-in.l.google.com 25

untuk telnet terlampir pak




-- 
syafril

Syafril Hermansyah
MDaemon-L Moderators, running MDaemon 22.0.1
Harap tidak cc: atau kirim ke private mail untuk masalah MDaemon.

If your actions inspire others to dream more, learn more, do more and 
become more, you are a leader.
    --- John Quincy Adams


-- 
--[mdaemon-l]--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com
Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com
Versi terakhir: MDaemon 22.0.1, SecurityGateway 8.5.2



  
--
--[mdaemon-l]--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com
Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com
Versi terakhir: MDaemon 22.0.1, SecurityGateway 8.5.2

[Mdaemon-L] Memperbaiki DKIM

[Bambang Setiawan via Mdaemon-L]

On 05/07/2022 12.29, Bambang Setiawan via Mdaemon-L wrote:


On 05/07/2022 10.55, Syafril Hermansyah via Mdaemon-L wrote:



Bisa diberikan salinan report-b9389d2a.txt lengkapnya kesini?
Terlampir disampaikan salinan report dengan percobaan yang baru pak, 
karena yang sebelumnya saya tidak download.



Mohon Maaf terlewat attachment-nya Pak
--
--[mdaemon-l]--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com
Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com
Versi terakhir: MDaemon 22.0, SecurityGateway 8.5.2


This is SPF/DKIM/DMARC/RBL report generated by a test tool provided 
by AdminSystem Software Limited.

Any problem, please contact supp...@emailarchitect.net

Report-Id: 939db702
Sender: 
Header-From: 
HELO-Domain: mail.persada.id
Source-IP: 103.150.114.156
SSL/TLS: TLS secured
Validator-Version: 1.11

Original email header:

x-sender: prvs=11852aec90=bambang.setia...@persada.id
x-receiver: test-939db...@appmaildev.com
Received: from mail.persada.id ([103.150.114.156]) by appmaildev.com over TLS 
secured channel with Microsoft SMTPSVC(8.5.9600.16384);
 Tue, 5 Jul 2022 05:27:07 +
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=persada.id; s=MDaemon; t=1656998826; x=1657603626;
i=bambang.setia...@persada.id; h=From:To:Cc:Subject:Date:
Message-ID:MIME-Version:Content-Type:Thread-Index:
Content-Language; z=Received:=20from=20benkbenk=20by=20mail.pers
ada.id=20(103.150.114.156)=20(MDaemon=20PRO=20v22.0.0)=20=0D=0A=
09with=20ESMTPA=20id=20pp5001003927271.msg=3B=20Tue,=2005=20Jul=
202022=2012=3A27=3A05=20+0700|From:=20"Bambang=20Setiawan"=20|To:=20|
Cc:=20|Subject:=20tes=20dkim=20domain=20p
ersada.id|Date:=20Tue,=205=20Jul=202022=2012=3A25=3A33=20+0700|M
essage-ID:=20<005001d8902f$a67ea550$f37beff0$@persada.id>|MIME-V
ersion:=201.0|Content-Type:=20multipart/alternative=3B=0D=0A=09b
oundary=3D"=3D_NextPart_000_0051_01D8906A.52DDF280"|Thread-I
ndex:=20AdiQL6Y1DQrYdxwjRVqDxsRKwyts0Q=3D=3D|Content-Language:=2
0id; bh=Q+Wb4HXBpddYtRyDLuzu62f3/c/lR3CwhRKi0wWG5gs=; b=CaCn3V3R
c3yJngzM+kAzW2wKtc04yErEXYh8Y53E8HV23F2VmUbYCsyBi1ZhSnsnA2etVV3m
CXabSGXIKbTx+P/+xQlLP2TdvndQ9UDhavS7PkTwikayIkWTxwMGN7b0Zu1GVNsq
RF/1mbZl6qfMGBWnWSiyJuPXa0JE+sGmq50gR7htRkVyUXwou1O1gyPd3x3w685t
fEbee0y50HiPBhYyzN1YAeK69r7tcG1vGa8HVkTIRtNJ891qWg59BU353yCnfPtx
OSQ0a6RbxjFen38XQySZx6ZxnhE+w10jSwI8yjUyNzZUqbMYJUbj1GFmQXz0K8qW
+Sqfn/KyJTAcyw==
X-MDAV-Result: clean
X-MDAV-Processed: mail.persada.id, Tue, 05 Jul 2022 12:27:06 +0700
Received: from benkbenk by mail.persada.id (103.150.114.156) (MDaemon PRO 
v22.0.0) 
with ESMTPA id pp5001003927271.msg; Tue, 05 Jul 2022 12:27:05 +0700
X-Spam-Processed: mail.persada.id, Tue, 05 Jul 2022 12:27:05 +0700
(not processed: message from trusted or authenticated source)
X-MDArrival-Date: Tue, 05 Jul 2022 12:27:05 +0700
X-Authenticated-Sender: bambang.setia...@persada.id
X-Return-Path: prvs=11852aec90=bambang.setia...@persada.id
X-Envelope-From: bambang.setia...@persada.id
X-MDaemon-Deliver-To: test-939db...@appmaildev.com
From: "Bambang Setiawan" 
To: 
Cc: 
Subject: tes dkim domain persada.id
Date: Tue, 5 Jul 2022 12:25:33 +0700
Message-ID: <005001d8902f$a67ea550$f37beff0$@persada.id>
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="=_NextPart_000_0051_01D8906A.52DDF280"
X-Mailer: Microsoft Outlook 16.0
Thread-Index: AdiQL6Y1DQrYdxwjRVqDxsRKwyts0Q==
Content-Language: id
X-MDCFSigsAdded: persada.id
Return-Path: prvs=11852aec90=bambang.setia...@persada.id
X-OriginalArrivalTime: 05 Jul 2022 05:27:07.0231 (UTC) 
FILETIME=[DE25C6F0:01D8902F]


SPF: Pass


SPF-Record: v=spf1 +a +mx +ip4:103.150.114.156 include:smtp.iforte.net.id ~all
Sender-IP: 103.150.114.156
Sender-Domain-Helo-Domain: persada.id

Query TEXT record from DNS server for: persada.id
[TXT]: v=spf1 +a +mx +ip4:103.150.114.156 include:smtp.iforte.net.id ~all
Parsing SPF record: v=spf1 +a +mx +ip4:103.150.114.156 
include:smtp.iforte.net.id ~all

Mechanisms: v=spf1

Mechanisms: +a
Testing mechanism a
Query A record from DNS server for: persada.id
[A]: 103.150.114.157
Testing CIDR: source=103.150.114.156;  10

[Mdaemon-L] Memperbaiki DKIM

[Bambang Setiawan via Mdaemon-L]

On 05/07/2022 10.55, Syafril Hermansyah via Mdaemon-L wrote:



Bisa diberikan salinan report-b9389d2a.txt lengkapnya kesini?
Terlampir disampaikan salinan report dengan percobaan yang baru pak, 
karena yang sebelumnya saya tidak download.


Atau baik juga jika saat kirim mail DKIM test ke @appmaildev.com di 
cc: kan kesini, setelah itu kirim reportnya kesini.



sudah saya lakukan dari percobaan yang diatas ya pak.


Terima kasih

--
--[mdaemon-l]--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com
Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com
Versi terakhir: MDaemon 22.0, SecurityGateway 8.5.2

[Mdaemon-L] Memperbaiki DKIM

[Bambang Setiawan via Mdaemon-L]

Dear Pak Syafril,


Mohon info untuk penyebab DKIM saya failed ini kenapa ya pak dan 
bagaimana cara memperbaikinya pak ?


DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=persada.id; s=MDaemon; t=1656988929; x=1657593729;

i=bambang.setia...@persada.id; h=MIME-Version:To:From:Subject:

Date:Importance:Content-Type:Message-ID; z=Received:=20from=20[I

Pv6=3A=3A=3A=3A10.9.0.184]=20[(103.150.114.157)]=20by=20mail

.persada.id=20(MDaemon=20PRO=20v22.0.0)=20=0D=0A=09with=20ESMTPA

=20id=20pp5001003925888.msg=3B=20Tue,=2005=20Jul=202022=2009=3A4

2=3A08=20+0700|MIME-Version:=201.0|To:=20"test-b9389d2a@appmaild 
ev.com"=20test-b9389...@appmaildev.com|From:=20Bambang=20Setia

wan=20bambang.setia...@persada.id|Subject:=20|Date:=20Tue,=205

=20Jul=202022=2009=3A40=3A54=20+0700|Importance:=20normal|Conten

t-Type:=20multipart/alternative=3B=0D=0A=09boundary=3D"_C698BC6E

-EEE5-4F9A-8EC2-24E4BCFF765F_"|Message-ID:=20MDAEMON-F202207050

940.aa4052961md500100...@mail.persada.id; bh=HsJ8bovLMJCFfG

CSzJ6AldXgV6zMJZ0TRBfjFVddvb4=; b=RovI/h6mYEhslil2pkUDPCoJYA5V47

+prUWes/zmixuysu1eP+u9Hs0zTx/DqV41hGMy8T52RN4L9NwR2xTtbSZXL0OnXE

+Hv1iBVK7ixsKNvP9EzUKsWHnRwapoQoO4NuYqlkoaODj7nUR5v6miDFBtuGjkvY

ja+FUpyt7t+0C5EMIiEdSQdGMzSHqXeSqKgp20wY/xX1j0H+g28O4bDaPb6J4Wsw

ur5T2EdUsmXDp9osXX/VK/IVQIZT38/VjIc7NsAsgvKFDeGcrwi8OLlv29u9+xpr

SpwFqsQXcJC7HN9mxpjhf12iWp6qROWNc9JoQ0TuBf0SjdUSUG09d2HQ==

Signed-by:bambang.setia...@persada.id

Expected-Body-Hash: HsJ8bovLMJCFfGCSzJ6AldXgV6zMJZ0TRBfjFVddvb4=

Public-Key: v=DKIM1; 
p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQD4Df1j6sfzt22e9yf0PoqsYuNrcajjDxpWeFZKMm9bxK1fgX1Aoa67EnhFefKd6jF0NfT68+MKnFvtgJVQcoi5JbYgwNbzeXUSb2gWHOAJCI6j8I9QucGkC5yPHQHoSbeRGulG5OYb+un6z3kjOmlv+x1buXeldv0umHNK1cTGPQIDAQAB;



DKIM-Result: fail (bad signature)

Atas bantuannya diucapkan terima kasih.

Salam

--
--[mdaemon-l]--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com
Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com
Versi terakhir: MDaemon 22.0, SecurityGateway 8.5.2

[Mdaemon-L] Sorry, virus detected within message (in reply to end of DATA, command)

[Bambang Setiawan via Mdaemon-L]

Dear Pak Syafril,

Sebelumnya saya ucapkan selamat hari raya idul fitri, mohon maaf lahir 
dan bathin.



Mohon bantuannya untuk bouncing email terlampir pak, saya scan file yang 
kirim sebagai attachment tidak bervirus.


This is the mail system at host smtp.iforte.net.id.

I'm sorry to have to inform you that your message could not
be delivered to one or more recipients. It's attached below.

For further assistance, please send mail to postmaster.

If you do so, please include this problem report. You can
delete your own text from the attached returned message.

   The mail system

: host relayhost.dutaint.com[103.141.180.220]
    said: 550 5.6.0 Sorry, virus detected within message (in reply to 
end of

    DATA command)

: host relayhost.dutaint.com[103.141.180.220] 
said: 550

    5.6.0 Sorry, virus detected within message (in reply to end of DATA
    command)

SMTP Log terlampir apakah email yang dikirimkan ini berhasil diterima 
oleh recipients pak ? terima kasih.


Mon 2022-05-09 16:15:59.675: --
Mon 2022-05-09 16:15:39.637: [25468166] REMOTE message: pd3501000977714.msg
Mon 2022-05-09 16:15:39.637: [25468166] *  Session 25468166; child 0003
Mon 2022-05-09 16:15:39.638: [25468166] *  From: r...@persada.id
Mon 2022-05-09 16:15:39.638: [25468166] *  To: edy.suwars...@madhani.co.id
Mon 2022-05-09 16:15:39.638: [25468166] *  Subject: RE: Tagihan Jasa 
April 2022 & Lembur Maret 2022 ((Barito Selatan)
Mon 2022-05-09 16:15:39.638: [25468166] *  Message-ID: 
<001501d86385$2d3e7de0$87bb79a0$@persada.id>
Mon 2022-05-09 16:15:39.638: [25468166] *  Size: 1371460; 


Mon 2022-05-09 16:15:39.638: [25468166] *  Route slip host: madhani.co.id
Mon 2022-05-09 16:15:39.639: [25468166] *  Route slip port: 25
Mon 2022-05-09 16:15:39.642: [25468166] Resolving MX record for 
madhani.co.id (DNS Server: 203.119.13.77)...
Mon 2022-05-09 16:15:39.646: [25468166] *  P=005 S=000 D=madhani.co.id 
TTL=(216) MX=[relayhost.dutaint.com]
Mon 2022-05-09 16:15:39.646: [25468166] Attempting SMTP connection to 
relayhost.dutaint.com
Mon 2022-05-09 16:15:39.646: [25468166] Resolving A record for 
relayhost.dutaint.com (DNS Server: 203.119.13.77)...
Mon 2022-05-09 16:15:39.648: [25468166] *  D=relayhost.dutaint.com 
TTL=(15) A=[113.20.31.190]
Mon 2022-05-09 16:15:39.648: [25468166] *  D=relayhost.dutaint.com 
TTL=(15) A=[103.141.180.220]
Mon 2022-05-09 16:15:39.648: [25468166] Randomly picked 113.20.31.190 
from list of possible hosts
Mon 2022-05-09 16:15:39.649: [25468166] Attempting SMTP connection to 
113.20.31.190:25

Mon 2022-05-09 16:15:39.649: [25468166] Waiting for socket connection...
Mon 2022-05-09 16:15:39.653: [25468166] *  Connection established 
103.150.114.156:60387 --> 113.20.31.190:25

Mon 2022-05-09 16:15:39.653: [25468166] Waiting for protocol to start...
Mon 2022-05-09 16:15:42.248: [25468166] <-- 220 dip34.dutaint.com ESMTP 
MDaemon 22.0.0rc2; Mon, 09 May 2022 16:15:41 +0700

Mon 2022-05-09 16:15:42.250: [25468166] --> EHLO mail.persada.id
Mon 2022-05-09 16:15:42.257: [25468166] <-- 250-dip34.dutaint.com Hello 
mail.persada.id [103.150.114.156], pleased to meet you

Mon 2022-05-09 16:15:42.257: [25468166] <-- 250-ETRN
Mon 2022-05-09 16:15:42.257: [25468166] <-- 250-8BITMIME
Mon 2022-05-09 16:15:42.257: [25468166] <-- 250-ENHANCEDSTATUSCODES
Mon 2022-05-09 16:15:42.257: [25468166] <-- 250-PIPELINING
Mon 2022-05-09 16:15:42.257: [25468166] <-- 250-CHUNKING
Mon 2022-05-09 16:15:42.257: [25468166] <-- 250-STARTTLS
Mon 2022-05-09 16:15:42.257: [25468166] <-- 250 SIZE 41943040
Mon 2022-05-09 16:15:42.257: [25468166] --> STARTTLS
Mon 2022-05-09 16:15:42.260: [25468166] <-- 220 2.7.0 Ready to start TLS
Mon 2022-05-09 16:15:42.287: [25468166] SSL negotiation successful (TLS 
1.2, 384 bit key exchange, 256 bit AES encryption)
Mon 2022-05-09 16:15:42.383: [25468166] SSL certificate is not valid 
(does not match relayhost.dutaint.com)

Mon 2022-05-09 16:15:42.383: [25468166] --> EHLO mail.persada.id
Mon 2022-05-09 16:15:42.387: [25468166] <-- 250-dip34.dutaint.com Hello 
mail.persada.id [103.150.114.156], pleased to meet you

Mon 2022-05-09 16:15:42.387: [25468166] <-- 250-ETRN
Mon 2022-05-09 16:15:42.387: [25468166] <-- 250-8BITMIME
Mon 2022-05-09 16:15:42.387: [25468166] <-- 250-ENHANCEDSTATUSCODES
Mon 2022-05-09 16:15:42.387: [25468166] <-- 250-PIPELINING
Mon 2022-05-09 16:15:42.387: [25468166] <-- 250-CHUNKING
Mon 2022-05-09 16:15:42.387: [25468166] <-- 250-REQUIRETLS
Mon 2022-05-09 16:15:42.387: [25468166] <-- 250 SIZE 41943040
Mon 2022-05-09 16:15:42.387: [25468166] --> MAIL 
From: SIZE=1371460
Mon 2022-05-09 16:15:42.387: [25468166] --> RCPT 
To:

Mon 2022-05-09 16:15:42.387: [25468166] --> RCPT To:
Mon 2022-05-09 16:15:42.387: [25468166] --> DATA
Mon 2022-05-09 16:15:45.289: [25468166] <-- 250 2.1.0 Sender OK
Mon 2022-05-09 16:15:51.107: [25468166] <-- 250 2.1.5 Recipient OK
Mon 2022-05-09 16:15:52.404: [25468166] <-- 250 2.1.5 Recipient OK
Mon 2022-05-09 16:15:52.412: [25468166] <-- 354 Enter 

[Mdaemon-L] Email Spam

[Bambang Setiawan via Mdaemon-L]

Dear Pak Syafril,


Mohon bantuan Bapak, hari ini mailserver kami menerima banyak email spam 
dengan lampiran file xlsm dan sender yang berubah-rubah.


terlampir contoh dari header email tersebut, sementara ini saya buat 
content filter untuk mencegah email-email tersebut masuk ke mailbox user 
kami.


X-MDAV-Result: infected
X-MDAV-Infected: password-protected
X-MDAV-Processed: mail.persada.id, Wed, 02 Mar 2022 13:45:13 +0700
X-Spam-Processed: mail.persada.id, Wed, 02 Mar 2022 13:45:13 +0700
Return-path: 
X-Spam-Flag: YES
X-Spam-Level: *
X-Spam-Status: Yes, score=5.2 required=5.0 tests=DATE_IN_FUTURE_12_24,
    HTML_MESSAGE,MDAEMON_OP_SPAM_HIGH,MIME_HTML_ONLY,SPF_NONE,
    T_SCC_BODY_TEXT_LINE,URI_HEX shortcircuit=no autolearn=disabled
    version=3.4.4
X-Spam-Report:
    *  2.5 MDAEMON_OP_SPAM_HIGH MDaemon: spam/phish
    *  0.0 SPF_NONE SPF: sender does not publish an SPF Record
    *  2.5 DATE_IN_FUTURE_12_24 Date: is 12 to 24 hours after Received:
    *  date
    *  0.1 URI_HEX URI: URI hostname has long hexadecimal sequence
    *  0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
    *  0.0 HTML_MESSAGE BODY: HTML included in message
    * -0.0 T_SCC_BODY_TEXT_LINE No description available.
X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24)
Authentication-Results: mail.persada.id;
    spf=none smtp.mailfrom=rmuje...@leabridge.co.zw;
    dmarc=none header.from=leabridge.co.zw (no DMARC record);
    iprev=pass policy.iprev=198.23.61.111 (PTR kosmostechnologies.org);
    iprev=pass policy.iprev=198.23.61.111 (HELO kosmostechnologies.org);
    iprev=pass policy.iprev=198.23.61.111 (MAIL rmuje...@leabridge.co.zw)
Received: from kosmostechnologies.org (kosmostechnologies.org 
[198.23.61.111]) by mail.persada.id (103.150.114.156) (MDaemon PRO v21.5.2)

    with ESMTP id md5001002977706.msg; Wed, 02 Mar 2022 13:45:12 +0700
X-MDOP-RefID: 
str=0001.0A67342B.621F1277.00C8,ss=1,re=0.000,recu=0.000,reip=0.000,vtr=str,vl=0,pt=R_967809,cl=4,cld=1,fgs=0 
(_st=4 _vt=0 _iwf=0)

X-MDRemoteIP: 198.23.61.111
X-MDHelo: kosmostechnologies.org
X-MDArrival-Date: Wed, 02 Mar 2022 13:45:12 +0700
X-MDOrigin-Country: US, NA
X-Rcpt-To: deviana.purw...@persada.id
X-MDRcpt-To: deviana.purw...@persada.id
X-Return-Path: rmuje...@leabridge.co.zw
X-Envelope-From: rmuje...@leabridge.co.zw
X-MDaemon-Deliver-To: deviana.purw...@persada.id
Received: from [122.2.22.242] (port=63503)
    by altar45.supremepanel45.com with esmtpsa  (TLS1.2) tls 
TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

    (Exim 4.94.2)
    (envelope-from )
    id 1nPIjO-0002No-Ni
    for deviana.purw...@persada.id; Wed, 02 Mar 2022 06:45:01 +
Date: Wed, 02 Mar 2022 14:45:01 -0800
From: " wulan.ut...@persada.id 
(rmuje...@leabridge.co.zw)" 

To: "" 
Subject: RE: deviana.purw...@persada.id
MIME-Version: 1.0
Content-Type: multipart/mixed; 
boundary="=_NextPart_00136_2072_139952479.3020957578"
X-AntiAbuse: This header was added to track abuse, please include it 
with any abuse report

X-AntiAbuse: Primary Hostname - altar45.supremepanel45.com
X-AntiAbuse: Original Domain - persada.id
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - leabridge.co.zw
X-Get-Message-Sender-Via: altar45.supremepanel45.com: authenticated_id: 
rmuje...@leabridge.co.zw

X-Source:
X-Source-Args:
X-Source-Dir:
Message-ID: 
X-MDBadQueue-Reason: CF Rule "Xlsm"

--=_NextPart_00136_2072_139952479.3020957578
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable







Hi ,


=0DSee attached



DATA 8082396.zip
zip password: 089



Thank you,


APRILLIA WULAN UTARI
wulan.ut...@persada.id





Atas bantuannya diucapkan terima kasih.


Salam

--
--[mdaemon-l]--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com
Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com
Versi terakhir: MDaemon 21.5.2, SecurityGateway 8.5.0

[Mdaemon-L] Session used too many RSET commands

[Bambang Setiawan via Mdaemon-L]

On 02/02/2022 14.52, Syafril Hermansyah via Mdaemon-L wrote:


Naikkan nilai RSET command menjadi 35.


baik pak


Di reply saja mail notification ini agar IP 202.152.161.232 
[interscan.indosat.com] dihapus dari dynamic blacklist.



sudah saya hapus dari dynamic blacklist pak


Kenapa Max Rcpt commandnya tinggi sekali?
5 kali diatas standard.

sepertinya ini saya dulu pernah coba rubah settingnya tetapi lupa 
dikembalikan ke nilai defaultnya pak, berarti saya rubah ke angka 100 di 
Max Rcpt ini ya pak ?



Terima kasih.

--
--[mdaemon-l]--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com
Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com
Versi terakhir: MDaemon 21.5.1, SecurityGateway 8.0.4

[Mdaemon-L] Session used too many RSET commands

[Bambang Setiawan via Mdaemon-L]

Dear Pak Syafril,


Mohon bantuan kembali untuk masalah penolakan email sebagai berikut;

*Blocked via SMTP Screen: 202.152.161.232 ( ***

*Asia, Indonesia***

*): session used too many RSET commands***

This IP Address range was added to the Dynamic Screening Blacklist via 
SMTP Screen.


The blocking of this address range will expire at 4:06 PM on Wednesday, 
February 2, 2022 SE Asia Standard Time.


*You may remove the address range from the Blacklist prior to the 
expiration date/time by replying to this message.*


Dynamic Screening (64bit) for MDaemon Messaging Server  21.5.1.1 / 21.5.1

Screening Log :

Wed 2022-02-02 13:56:22.527: Dynamic screening refused connection to 
103.150.114.156:25 from 202.152.161.232; 130 minutes remain


Terlampir SC untuk mail server kami pak.

Terima kasih


--
--[mdaemon-l]--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com
Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com
Versi terakhir: MDaemon 21.5.1, SecurityGateway 8.0.4

[Mdaemon-L] Blok Spam

[Bambang Setiawan via Mdaemon-L]

On 02/02/2022 10.11, Syafril Hermansyah via Mdaemon-L wrote:


Perbaiki setting Antispam content filteringnya mengikuti tips berikut

Sekalian diupgrade versi MDaemon ke v21.5.1


Baik Pak




Bukan transkrip routing log, yang perlu saya lihat transkrip smtp-in 
log dari spam mail tersebut.



Terlampir sample smtp log dari email tersebut pak

Wed 2022-02-02 08:25:48.244: 01: --
Wed 2022-02-02 08:25:47.866: 05: [21974619] Session 21974619; child 0002
Wed 2022-02-02 08:25:47.866: 05: [21974619] Accepting SMTP connection 
from 218.188.222.2:55920 to 103.150.114.156:25
Wed 2022-02-02 08:25:47.866: 07: [21974619] Location Screen says 
connection is from Hong Kong, Asia
Wed 2022-02-02 08:25:47.867: 03: [21974619] --> 220 mail.persada.id 
ESMTP MDaemon 21.5.0; Wed, 02 Feb 2022 08:25:47 +0700
Wed 2022-02-02 08:25:47.922: 02: [21974619] <-- EHLO 
avas.intranet.tsss.edu.hk
Wed 2022-02-02 08:25:47.922: 03: [21974619] --> 250-mail.persada.id 
Hello avas.intranet.tsss.edu.hk [218.188.222.2], pleased to meet you

Wed 2022-02-02 08:25:47.922: 03: [21974619] --> 250-ETRN
Wed 2022-02-02 08:25:47.922: 07: [21974619] Location Screening hiding 
AUTH from country Hong Kong, Asia

Wed 2022-02-02 08:25:47.922: 03: [21974619] --> 250-8BITMIME
Wed 2022-02-02 08:25:47.922: 03: [21974619] --> 250-ENHANCEDSTATUSCODES
Wed 2022-02-02 08:25:47.922: 03: [21974619] --> 250-PIPELINING
Wed 2022-02-02 08:25:47.922: 03: [21974619] --> 250-CHUNKING
Wed 2022-02-02 08:25:47.922: 03: [21974619] --> 250 SIZE
Wed 2022-02-02 08:25:47.975: 02: [21974619] <-- MAIL 
FROM: SIZE=2897
Wed 2022-02-02 08:25:47.987: 05: [21974619] Performing PTR lookup 
(2.222.188.218.IN-ADDR.ARPA)
Wed 2022-02-02 08:25:47.991: 05: [21974619] * 
D=2.222.188.218.IN-ADDR.ARPA TTL=(1406) 
PTR=[static-bbs-2-222-188-218-on-nets.com]

Wed 2022-02-02 08:25:48.044: 05: [21974619] *  No A/ records found
Wed 2022-02-02 08:25:48.044: 05: [21974619]  End PTR results
Wed 2022-02-02 08:25:48.047: 05: [21974619] Performing IP lookup 
(avas.intranet.tsss.edu.hk)
Wed 2022-02-02 08:25:48.566: 04: [21974619] *  DNS server refuses to 
honor queries from this location

Wed 2022-02-02 08:25:48.566: 05: [21974619]  End IP lookup results
Wed 2022-02-02 08:25:48.575: 05: [21974619] Performing IP lookup 
(intranet.tsss.edu.hk)
Wed 2022-02-02 08:25:48.578: 05: [21974619] * D=intranet.tsss.edu.hk 
TTL=(0) A=[218.188.222.4]
Wed 2022-02-02 08:25:48.581: 05: [21974619] *  P=020 S=000 
D=intranet.tsss.edu.hk TTL=(0) MX=[intranet.tsss.edu.hk]
Wed 2022-02-02 08:25:48.584: 05: [21974619] * D=intranet.tsss.edu.hk 
TTL=(0) A=[218.188.222.4]

Wed 2022-02-02 08:25:48.585: 05: [21974619]  End IP lookup results
Wed 2022-02-02 08:25:48.585: 09: [21974619] Performing SPF lookup 
(avas.intranet.tsss.edu.hk / 218.188.222.2)
Wed 2022-02-02 08:25:48.756: 09: [21974619] *  Result: none; no SPF 
record in DNS

Wed 2022-02-02 08:25:48.756: 09: [21974619]  End SPF results
Wed 2022-02-02 08:25:48.757: 09: [21974619] Performing SPF lookup 
(intranet.tsss.edu.hk / 218.188.222.2)
Wed 2022-02-02 08:25:48.807: 09: [21974619] *  Policy: v=spf1 a mx 
ip4:218.188.222.2 ip4:218.188.222.4 include:spf.eclasscloud.hk ~all

Wed 2022-02-02 08:25:48.811: 09: [21974619] *  Evaluating a: no match
Wed 2022-02-02 08:25:48.818: 09: [21974619] *  Evaluating mx: no match
Wed 2022-02-02 08:25:48.818: 09: [21974619] *  Evaluating 
ip4:218.188.222.2: match

Wed 2022-02-02 08:25:48.818: 09: [21974619] *  Result: pass
Wed 2022-02-02 08:25:48.818: 09: [21974619]  End SPF results
Wed 2022-02-02 08:25:48.818: 03: [21974619] --> 250 2.1.0 Sender OK
Wed 2022-02-02 08:25:48.818: 02: [21974619] <-- RCPT 
TO:
Wed 2022-02-02 08:25:48.854: 05: [21974619] Performing DNS-BL lookup 
(218.188.222.2 - connecting IP)

Wed 2022-02-02 08:25:48.859: 05: [21974619] *  zen.spamhaus.org - passed
Wed 2022-02-02 08:25:48.948: 05: [21974619] *  bl.spamcop.net - passed
Wed 2022-02-02 08:25:48.948: 05: [21974619]  End DNS-BL results
Wed 2022-02-02 08:25:48.950: 03: [21974619] --> 250 2.1.5 Recipient OK
Wed 2022-02-02 08:25:48.950: 02: [21974619] <-- DATA
Wed 2022-02-02 08:25:48.953: 03: [21974619] --> 354 Enter mail, end with 
.

Wed 2022-02-02 08:25:49.057: 01: [21974619] Message size: 2896 bytes
Wed 2022-02-02 08:25:49.058: 10: [21974619] Performing DKIM verification
Wed 2022-02-02 08:25:49.058: 10: [21974619] *  File: 
c:\mdaemon\queues\temp\md500103402.tmp
Wed 2022-02-02 08:25:49.058: 10: [21974619] *  Message-ID: 
<09366151611591.7v10716...@intranet.tsss.edu.hk>

Wed 2022-02-02 08:25:49.058: 10: [21974619] *  Result: neutral
Wed 2022-02-02 08:25:49.058: 10: [21974619]  End DKIM results
Wed 2022-02-02 08:25:49.065: 19: [21974619] Performing DMARC processing
Wed 2022-02-02 08:25:49.065: 19: [21974619] *  File: 
c:\mdaemon\queues\temp\md500103402.tmp
Wed 2022-02-02 08:25:49.065: 19: [21974619] *  Message-ID: 
<09366151611591.7v10716...@intranet.tsss.edu.hk>
Wed 2022-02-02 08:25:49.065: 19: [21974619] *  Author domain: 

[Mdaemon-L] Blok Spam

[Bambang Setiawan via Mdaemon-L]

Dear Pak Syafril,

Mohon bantuan Bapak, hari ini beberapa user kami menerima email spam sebagai 
berikut,

Contoh mail header,

X-MDAV-Result: clean
X-MDAV-Processed: mail.persada.id, Wed, 02 Feb 2022 08:41:08 +0700
X-Spam-Processed: mail.persada.id, Wed, 02 Feb 2022 08:41:08 +0700
Return-path:
X-Spam-Level: ***
X-Spam-Status: No, score=3.0 required=5.0 tests=MDAEMON_OP_SPAM_HIGH,
PDS_BTC_ID,SPF_NONE shortcircuit=no autolearn=disabled version=3.4.4
X-Spam-Report:
*  2.5 MDAEMON_OP_SPAM_HIGH MDaemon: spam/phish
*  0.0 SPF_NONE SPF: sender does not publish an SPF Record
*  0.5 PDS_BTC_ID FP reduced Bitcoin ID
X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24)
Authentication-Results: mail.persada.id;
spf=nonesmtp.mailfrom=xianglan@advancision.cn;
dmarc=none header.from=advancision.cn (no DMARC record);
iprev=pass policy.iprev=112.5.130.252 (PTR mail.advancision.cn);
iprev=pass policy.iprev=112.5.130.252 (HELO mail.advancision.cn);
iprev=pass policy.iprev=112.5.130.252 (mailxianglan@advancision.cn)
Received: from mail.advancision.cn (mail.advancision.cn [112.5.130.252]) by 
mail.persada.id (103.150.114.156) (MDaemon PRO v21.5.0)
with ESMTP id md5001002761046.msg; Wed, 02 Feb 2022 08:41:07 +0700
X-MDOP-RefID: 
str=0001.0A67340D.61F9D6FC.0052,ss=3,sh,re=0.000,recu=0.000,reip=0.000,cl=3,cld=1,fgs=0
 (_st=3 _vt=0 _iwf=0)
X-MDRemoteIP: 112.5.130.252
X-MDHelo: mail.advancision.cn
X-MDArrival-Date: Wed, 02 Feb 2022 08:41:07 +0700
X-MDOrigin-Country: CN, AS
X-Rcpt-To:quality.assura...@persada.id
X-MDRcpt-To:quality.assura...@persada.id
X-Return-Path:xianglan@advancision.cn
X-Envelope-From:xianglan@advancision.cn
X-MDaemon-Deliver-To:quality.assura...@persada.id
Received: from [127.0.0.1] ([103.237.57.252])
by mail.advancision.cn ([192.168.132.20]);
Wed, 2 Feb 2022 09:41:02 +0800
Date: Wed, 2 Feb 2022 04:40:58 +0300
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain; charset=UTF-8
Message-ID:<02762619589021.7702x59...@advancision.cn>
Subject: Peringatan terakhir! Data Anda dalam bahaya!  Login berhasil.
From: Kate Pacheco
To:quality.assura...@persada.id
X-Report-Abuse:ab...@advancision.cn
X-SG-ID: 2859
Errors-To:ab...@liqqbsise.advancision.cn

Salam pembuka.
Sistem Anda telah disusupi oleh virus Trojan.
Itu masuk ke perangkat Anda melalui portal dewasa yang Anda kunjungi.
Beberapa video cabul memiliki kode berbahaya yang aktif setelah dihidu=
pkan. Semua data telah disalin ke server saya.


Saya memiliki kendali penuh atas perangkat yang Anda gunakan untuk men=
gakses Internet.
Saya bisa melihat layar Anda, menggunakan mikrofon dan kamera Anda. An=
da tidak akan menyadarinya.

Saya sudah membuat rekaman layar.
Saya telah mengedit video video porno yang Anda tonton saat itu dan vi=
deo masturbasi Anda.
Wajahnya terlihat sempurna. Menurut saya konten semacam itu tidak baik=
 untuk reputasi Anda.

Saya memiliki akses penuh ke kontak dan profil Anda di jejaring sosial=
=2E Saya dapat mengirim video ini dari email atau messenger Anda.

Jika Anda tidak ingin ini terjadi, Anda hanya perlu mengambil langkah =
sederhana.
Anda hanya perlu mentransfer 17202000 IDR (indonesian rupiah)=20

ke dompet bitcoin Anda: bc1q33ncyywqj7ghw03f728xdd7zhmz4ern86m6shr

(dalam ekuivalen bitcoin dengan nilai tukar pada saat transfer)
Anda akan menemukan petunjuk tentang cara melakukannya di Google.

Setelah pembayaran, saya akan menghapus video dan virus dari perangkat=
 Anda. Setelah itu, tidak ada yang akan mengganggu Anda lagi.
Jika saya tidak menerima pembayaran setelah periode ini, semua data An=
da dan video akan menjadi publik.

Saya memberi Anda 2 hari kerja.



Saya akan diberitahu ketika saya telah membaca email.
Sebuah timer diaktifkan segera.
Tidak ada gunanya mengeluh di mana pun, bahkan ke polisi. Dompet saya =
dan kantor pos tidak bisa dilacak.

Jika saya mengetahui bahwa Anda telah membagikan pesan ini kepada oran=
g lain, video akan segera didistribusikan.
Saya akan merusak reputasi Anda selamanya dan semua data Anda akan dip=
ublikasikan.

Seluruh dunia akan tahu tentang hasrat Anda untuk situs porno dan bany=
ak lagi. Mengubah kata sandi tidak akan ada gunanya, karena semua data=
 sudah ada di server saya.


Jangan lupa bahwa reputasi sangat penting dan masuk akal.


Contoh Routing Log

Wed 2022-02-02 07:20:36.607: --
Wed 2022-02-02 07:20:36.634: INBOUND message: md5001002759928.msg
Wed 2022-02-02 07:20:36.634: *  From: Dorothy
Wed 2022-02-02 07:20:36.634: *  To:supa...@persada.id
Wed 2022-02-02 07:20:36.634: *  Subject: Peringatan terakhir! Data Anda dalam 
bahaya!  Login berhasil.
Wed 2022-02-02 07:20:36.634: *  
Message-ID:<1.0.1q.503.3r146g95rqb170...@cccf.or.kr>
Wed 2022-02-02 07:20:36.634: *  Size: 3922; 

Wed 2022-02-02 07:20:36.634: --

Wed 2022-02-02 06:37:37.690: --
Wed 2022-02-02 06:37:37.690: *  0.0 HTML_MESSAGE BODY: HTML included in message
Wed 2022-02-02 

[Mdaemon-L] Transfer Domain/Hosting dan Ganti ISP

[Bambang Setiawan via Mdaemon-L]

On 25/11/2021 18.46, Syafril Hermansyah via Mdaemon-L wrote:
Ya, tetapi cukup diisi default smarthostnya = smtp.iforte.net.id saja, 
karena sudah otomatis pakai port 25.


Tetapi sebelum melakukan itu, perbaiki dulu SPF domain persada.id 
untuk "...include:smtp.iforte.net.id -all".


Sudah saya sesuaikan pak,  tetapi kalo saya aktifkan sepertinya yang ke 
smarthost malah bermasalah pak


Thu 2021-11-25 22:00:44.755: --
Thu 2021-11-25 22:00:28.385: [19916680] REMOTE message: pd900101112.msg
Thu 2021-11-25 22:00:28.387: [19916680] *  From: gita.rism...@persada.id
Thu 2021-11-25 22:00:28.387: [19916680] *  To: resty.apri...@ericsson.com
Thu 2021-11-25 22:00:28.387: [19916680] *  Subject: RE: Request GR SPE 
PMCM RAN & DG Oct 21 40%
Thu 2021-11-25 22:00:28.387: [19916680] *  Message-ID: 

Thu 2021-11-25 22:00:28.387: [19916680] *  Size: 3122568; 


Thu 2021-11-25 22:00:28.388: [19916680] *  Route slip host: ericsson.com
Thu 2021-11-25 22:00:28.389: [19916680] *  Route slip port: 25
Thu 2021-11-25 22:00:28.414: [19916680] Resolving MX record for 
ericsson.com (DNS Server: 10.0.0.100)...
Thu 2021-11-25 22:00:28.419: [19916680] *  P=080 S=000 D=ericsson.com 
TTL=(0) MX=[ericsson-com.mail.protection.outlook.com]
Thu 2021-11-25 22:00:28.419: [19916680] Attempting SMTP connection to 
ericsson-com.mail.protection.outlook.com
Thu 2021-11-25 22:00:28.420: [19916680] Resolving A record for 
ericsson-com.mail.protection.outlook.com (DNS Server: 10.0.0.100)...
Thu 2021-11-25 22:00:28.429: [19916680] * 
D=ericsson-com.mail.protection.outlook.com TTL=(0) A=[104.47.4.36]
Thu 2021-11-25 22:00:28.429: [19916680] * 
D=ericsson-com.mail.protection.outlook.com TTL=(0) A=[104.47.6.36]
Thu 2021-11-25 22:00:28.429: [19916680] Randomly picked 104.47.4.36 from 
list of possible hosts
Thu 2021-11-25 22:00:28.430: [19916680] Attempting SMTP connection to 
104.47.4.36:25

Thu 2021-11-25 22:00:28.431: [19916680] Waiting for socket connection...
Thu 2021-11-25 22:00:28.603: [19916680] *  Connection established 
103.150.114.156:56163 --> 104.47.4.36:25

Thu 2021-11-25 22:00:28.603: [19916680] Waiting for protocol to start...
Thu 2021-11-25 22:00:28.841: [19916680] <-- 220 
AM5EUR02FT034.mail.protection.outlook.com Microsoft ESMTP MAIL Service 
ready at Thu, 25 Nov 2021 15:00:28 +

Thu 2021-11-25 22:00:28.844: [19916680] --> EHLO mail.persada.id
Thu 2021-11-25 22:00:29.026: [19916680] <-- 
250-AM5EUR02FT034.mail.protection.outlook.com Hello [103.150.114.156]

Thu 2021-11-25 22:00:29.026: [19916680] <-- 250-SIZE 157286400
Thu 2021-11-25 22:00:29.026: [19916680] <-- 250-PIPELINING
Thu 2021-11-25 22:00:29.026: [19916680] <-- 250-DSN
Thu 2021-11-25 22:00:29.026: [19916680] <-- 250-ENHANCEDSTATUSCODES
Thu 2021-11-25 22:00:29.026: [19916680] <-- 250-STARTTLS
Thu 2021-11-25 22:00:29.026: [19916680] <-- 250-8BITMIME
Thu 2021-11-25 22:00:29.026: [19916680] <-- 250-BINARYMIME
Thu 2021-11-25 22:00:29.026: [19916680] <-- 250-CHUNKING
Thu 2021-11-25 22:00:29.026: [19916680] <-- 250 SMTPUTF8
Thu 2021-11-25 22:00:29.026: [19916680] --> STARTTLS
Thu 2021-11-25 22:00:29.200: [19916680] <-- 220 2.0.0 SMTP server ready
Thu 2021-11-25 22:00:29.610: [19916680] SSL negotiation successful (TLS 
1.2, 384 bit key exchange, 256 bit AES encryption)
Thu 2021-11-25 22:00:29.612: [19916680] SSL certificate is valid 
(matches ericsson-com.mail.protection.outlook.com and is signed by 
recognized CA)

Thu 2021-11-25 22:00:29.612: [19916680] --> EHLO mail.persada.id
Thu 2021-11-25 22:00:29.830: [19916680] <-- 
250-AM5EUR02FT034.mail.protection.outlook.com Hello [103.150.114.156]

Thu 2021-11-25 22:00:29.830: [19916680] <-- 250-SIZE 157286400
Thu 2021-11-25 22:00:29.830: [19916680] <-- 250-PIPELINING
Thu 2021-11-25 22:00:29.830: [19916680] <-- 250-DSN
Thu 2021-11-25 22:00:29.830: [19916680] <-- 250-ENHANCEDSTATUSCODES
Thu 2021-11-25 22:00:29.830: [19916680] <-- 250-8BITMIME
Thu 2021-11-25 22:00:29.830: [19916680] <-- 250-BINARYMIME
Thu 2021-11-25 22:00:29.830: [19916680] <-- 250-CHUNKING
Thu 2021-11-25 22:00:29.830: [19916680] <-- 250 SMTPUTF8
Thu 2021-11-25 22:00:29.830: [19916680] --> MAIL 
From: SIZE=3122568
Thu 2021-11-25 22:00:29.830: [19916680] --> RCPT 
To:
Thu 2021-11-25 22:00:29.830: [19916680] --> RCPT 
To:
Thu 2021-11-25 22:00:29.830: [19916680] --> RCPT 
To:
Thu 2021-11-25 22:00:29.830: [19916680] --> RCPT 
To:

Thu 2021-11-25 22:00:29.830: [19916680] --> DATA
Thu 2021-11-25 22:00:30.007: [19916680] <-- 250 2.1.0 Sender OK
Thu 2021-11-25 22:00:30.253: [19916680] <-- 250 2.1.5 Recipient OK
Thu 2021-11-25 22:00:30.254: [19916680] <-- 452 4.5.3 Too many 
recipients (AS780090) [AM5EUR02FT034.eop-EUR02.prod.protection.outlook.com]
Thu 2021-11-25 22:00:30.256: [19916680] <-- 452 4.5.3 Too many 
recipients (AS780090) [AM5EUR02FT034.eop-EUR02.prod.protection.outlook.com]
Thu 2021-11-25 22:00:30.258: [19916680] <-- 452 4.5.3 Too many 
recipients (AS780090) [AM5EUR02FT034.eop-EUR02.prod.protection.outlook.com]
Thu 2021-11-25 22:00:30.260: [19916680] <-- 

[Mdaemon-L] Transfer Domain/Hosting dan Ganti ISP

[Bambang Setiawan via Mdaemon-L]

On 25/11/2021 15.53, Syafril Hermansyah via Mdaemon-L wrote:


Ini normal, MDaemon akan otomatis retry to send.


Ok pak


Itu yang kirim user sendiri atau spammer?


User sendiri yang kirim pak, saya akan coba trace kembali pak.

Mohon maaf saya terus-terusan ini emailnya ya pak :-),

Ada 2 hal lagi pak :

1. ISP memberikan alamat smarthost yang bisa dipergunakan dengan 
informasi sebagai berikut :


smtp.iforte.net.id
Port  : 25

Auth : OFF

saya masukin di setting default smarthostnya apakah jadi seperti ini pak 
smtp.iforte.net.id:25 ?



2. Terjadi temporarily deferred due to unexpected volume or user 
complaints ke yahoo


saya sudah rubah setting seperti yang ada di arsip sbb :

Maximum simultaneous connections to any single IP = 10

[x] Use multiple RCPT commands when sending mail

dan

Retry sending undeliverable mail once every 240 minutes

Untuk selanjutnya saya tinggal nunggu aja ya pak ?


Thu 2021-11-25 15:46:09.707: --
Thu 2021-11-25 15:46:03.701: [19909682] REMOTE message: 
pd3501000699336.del1637829853.msg

Thu 2021-11-25 15:46:03.701: [19909682] *  Session 19909682; child 0008
Thu 2021-11-25 15:46:03.702: [19909682] *  From: suwig...@persada.id
Thu 2021-11-25 15:46:03.702: [19909682] *  To: agusc.bask...@yahoo.com
Thu 2021-11-25 15:46:03.702: [19909682] *  Subject: RE: Penawaran biaya 
(notaris)
Thu 2021-11-25 15:46:03.702: [19909682] *  Message-ID: 
<000c01d7e1d7$68365b50$38a311f0$@persada.id>
Thu 2021-11-25 15:46:03.702: [19909682] *  Size: 12684; 

Thu 2021-11-25 15:46:03.703: [19909682] MTA-STS policy for yahoo.com 
found in cache

Thu 2021-11-25 15:46:03.703: [19909682] *  version: STSv1
Thu 2021-11-25 15:46:03.703: [19909682] *  mode: testing
Thu 2021-11-25 15:46:03.703: [19909682] *  mx: *.am0.yahoodns.net
Thu 2021-11-25 15:46:03.703: [19909682] *  mx: *.mail.gm0.yahoodns.net
Thu 2021-11-25 15:46:03.703: [19909682] *  mx: *.mail.am0.yahoodns.net
Thu 2021-11-25 15:46:03.703: [19909682] *  max_age: 86400
Thu 2021-11-25 15:46:03.748: [19909682] Resolving MX record for 
yahoo.com (DNS Server: 10.0.0.100)...
Thu 2021-11-25 15:46:03.774: [19909682] *  P=001 S=000 D=yahoo.com 
TTL=(16) MX=[mta5.am0.yahoodns.net]
Thu 2021-11-25 15:46:03.774: [19909682] *  P=001 S=001 D=yahoo.com 
TTL=(16) MX=[mta6.am0.yahoodns.net]
Thu 2021-11-25 15:46:03.774: [19909682] *  P=001 S=002 D=yahoo.com 
TTL=(16) MX=[mta7.am0.yahoodns.net]
Thu 2021-11-25 15:46:03.774: [19909682] Attempting SMTP connection to 
mta5.am0.yahoodns.net
Thu 2021-11-25 15:46:03.774: [19909682] Resolving A record for 
mta5.am0.yahoodns.net (DNS Server: 10.0.0.100)...
Thu 2021-11-25 15:46:03.775: [19909682] *  D=mta5.am0.yahoodns.net 
TTL=(0) A=[67.195.228.109]
Thu 2021-11-25 15:46:03.775: [19909682] *  D=mta5.am0.yahoodns.net 
TTL=(0) A=[98.136.96.76]
Thu 2021-11-25 15:46:03.775: [19909682] *  D=mta5.am0.yahoodns.net 
TTL=(0) A=[67.195.228.94]
Thu 2021-11-25 15:46:03.775: [19909682] *  D=mta5.am0.yahoodns.net 
TTL=(0) A=[67.195.204.77]
Thu 2021-11-25 15:46:03.775: [19909682] *  D=mta5.am0.yahoodns.net 
TTL=(0) A=[67.195.204.74]
Thu 2021-11-25 15:46:03.775: [19909682] *  D=mta5.am0.yahoodns.net 
TTL=(0) A=[67.195.204.72]
Thu 2021-11-25 15:46:03.775: [19909682] *  D=mta5.am0.yahoodns.net 
TTL=(0) A=[67.195.228.110]
Thu 2021-11-25 15:46:03.775: [19909682] *  D=mta5.am0.yahoodns.net 
TTL=(0) A=[98.136.96.77]
Thu 2021-11-25 15:46:03.775: [19909682] Randomly picked 98.136.96.76 
from list of possible hosts
Thu 2021-11-25 15:46:03.776: [19909682] Attempting SMTP connection to 
98.136.96.76:25

Thu 2021-11-25 15:46:03.776: [19909682] Waiting for socket connection...
Thu 2021-11-25 15:46:04.017: [19909682] *  Connection established 
103.150.114.156:50584 --> 98.136.96.76:25

Thu 2021-11-25 15:46:04.017: [19909682] Waiting for protocol to start...
Thu 2021-11-25 15:46:05.257: [19909682] <-- 220 
mtaproxy402.free.mail.ne1.yahoo.com ESMTP ready

Thu 2021-11-25 15:46:05.259: [19909682] --> EHLO mail.persada.id
Thu 2021-11-25 15:46:05.499: [19909682] <-- 
250-mtaproxy402.free.mail.ne1.yahoo.com

Thu 2021-11-25 15:46:05.499: [19909682] <-- 250-PIPELINING
Thu 2021-11-25 15:46:05.499: [19909682] <-- 250-SIZE 41943040
Thu 2021-11-25 15:46:05.499: [19909682] <-- 250-8BITMIME
Thu 2021-11-25 15:46:05.499: [19909682] <-- 250 STARTTLS
Thu 2021-11-25 15:46:05.499: [19909682] --> STARTTLS
Thu 2021-11-25 15:46:05.757: [19909682] <-- 220 Ready for TLS
Thu 2021-11-25 15:46:06.244: [19909682] SSL negotiation successful (TLS 
1.2, 255 bit key exchange, 128 bit AES encryption)
Thu 2021-11-25 15:46:06.245: [19909682] SSL certificate is valid 
(matches mta5.am0.yahoodns.net and is signed by recognized CA)

Thu 2021-11-25 15:46:06.245: [19909682] MTA-STS success for yahoo.com
Thu 2021-11-25 15:46:06.245: [19909682] --> EHLO mail.persada.id
Thu 2021-11-25 15:46:06.486: [19909682] <-- 
250-mtaproxy402.free.mail.ne1.yahoo.com

Thu 2021-11-25 15:46:06.486: [19909682] <-- 250-PIPELINING
Thu 2021-11-25 15:46:06.486: [19909682] <-- 250-SIZE 41943040
Thu 2021-11-25 

[Mdaemon-L] Transfer Domain/Hosting dan Ganti ISP

[Bambang Setiawan via Mdaemon-L]

On 25/11/2021 14.51, Syafril Hermansyah via Mdaemon-L wrote:



Pindah ISP itu mirip pindah rumah, banyak yang harus dikerjakan :-)


Benar pak, apalagi ini layanan ISP lama tiba tiba harus di stop :-(



Sudah OK.
Server mail.persada.id sudah resmi dapat KTP baru sesuai alamat IP 
yang baru :-)



Siap pak, terima kasih.


Berdasarkan monitoring saya masih terdapat beberapa kasus sebagai 
berikut pak :


1. Masih terjadi server busy terutama untuk email yang dikirim ke domain 
ericsson.com, log smtp terlampir :


Thu 2021-11-25 15:17:31.254: 01: [19908911] REMOTE message: 
pd900101080.del1637828232.msg

Thu 2021-11-25 15:17:31.254: 01: [19908911] *  Session 19908911; child 0008
Thu 2021-11-25 15:17:31.255: 01: [19908911] *  From: 
yulliana.d...@persada.id
Thu 2021-11-25 15:17:31.255: 01: [19908911] *  To: 
tania.dwihard...@ericsson.com
Thu 2021-11-25 15:17:31.255: 01: [19908911] *  Subject: RE: PSD EJBN 
June-Aug No Price Available.xlsx
Thu 2021-11-25 15:17:31.255: 01: [19908911] *  Message-ID: 
<000801d7e1ca$dc50b880$94f22980$@persada.id>
Thu 2021-11-25 15:17:31.255: 01: [19908911] *  Size: 47507; 

Thu 2021-11-25 15:17:31.293: 05: [19908911] Resolving MX record for 
ericsson.com (DNS Server: 10.0.0.100)...
Thu 2021-11-25 15:17:31.378: 05: [19908911] *  P=080 S=000 
D=ericsson.com TTL=(0) MX=[ericsson-com.mail.protection.outlook.com]
Thu 2021-11-25 15:17:31.378: 05: [19908911] Attempting SMTP connection 
to ericsson-com.mail.protection.outlook.com
Thu 2021-11-25 15:17:31.378: 05: [19908911] Resolving A record for 
ericsson-com.mail.protection.outlook.com (DNS Server: 10.0.0.100)...
Thu 2021-11-25 15:17:31.381: 05: [19908911] * 
D=ericsson-com.mail.protection.outlook.com TTL=(0) A=[104.47.6.36]
Thu 2021-11-25 15:17:31.381: 05: [19908911] * 
D=ericsson-com.mail.protection.outlook.com TTL=(0) A=[104.47.4.36]
Thu 2021-11-25 15:17:31.381: 05: [19908911] Randomly picked 104.47.6.36 
from list of possible hosts
Thu 2021-11-25 15:17:31.382: 05: [19908911] Attempting SMTP connection 
to 104.47.6.36:25

Thu 2021-11-25 15:17:31.382: 05: [19908911] Waiting for socket connection...
Thu 2021-11-25 15:17:31.556: 05: [19908911] *  Connection established 
103.150.114.156:65067 --> 104.47.6.36:25

Thu 2021-11-25 15:17:31.556: 05: [19908911] Waiting for protocol to start...
Thu 2021-11-25 15:17:31.750: 02: [19908911] <-- 220 
VE1EUR02FT042.mail.protection.outlook.com Microsoft ESMTP MAIL Service 
ready at Thu, 25 Nov 2021 08:17:30 +

Thu 2021-11-25 15:17:31.753: 03: [19908911] --> EHLO mail.persada.id
Thu 2021-11-25 15:17:31.935: 02: [19908911] <-- 
250-VE1EUR02FT042.mail.protection.outlook.com Hello [103.150.114.156]

Thu 2021-11-25 15:17:31.935: 02: [19908911] <-- 250-SIZE 157286400
Thu 2021-11-25 15:17:31.935: 02: [19908911] <-- 250-PIPELINING
Thu 2021-11-25 15:17:31.935: 02: [19908911] <-- 250-DSN
Thu 2021-11-25 15:17:31.935: 02: [19908911] <-- 250-ENHANCEDSTATUSCODES
Thu 2021-11-25 15:17:31.935: 02: [19908911] <-- 250-STARTTLS
Thu 2021-11-25 15:17:31.935: 02: [19908911] <-- 250-8BITMIME
Thu 2021-11-25 15:17:31.935: 02: [19908911] <-- 250-BINARYMIME
Thu 2021-11-25 15:17:31.935: 02: [19908911] <-- 250-CHUNKING
Thu 2021-11-25 15:17:31.935: 02: [19908911] <-- 250 SMTPUTF8
Thu 2021-11-25 15:17:31.935: 03: [19908911] --> STARTTLS
Thu 2021-11-25 15:17:32.108: 02: [19908911] <-- 220 2.0.0 SMTP server ready
Thu 2021-11-25 15:17:32.475: 01: [19908911] SSL negotiation successful 
(TLS 1.2, 384 bit key exchange, 256 bit AES encryption)
Thu 2021-11-25 15:17:32.476: 01: [19908911] SSL certificate is valid 
(matches ericsson-com.mail.protection.outlook.com and is signed by 
recognized CA)

Thu 2021-11-25 15:17:32.476: 03: [19908911] --> EHLO mail.persada.id
Thu 2021-11-25 15:17:32.650: 02: [19908911] <-- 
250-VE1EUR02FT042.mail.protection.outlook.com Hello [103.150.114.156]

Thu 2021-11-25 15:17:32.650: 02: [19908911] <-- 250-SIZE 157286400
Thu 2021-11-25 15:17:32.650: 02: [19908911] <-- 250-PIPELINING
Thu 2021-11-25 15:17:32.650: 02: [19908911] <-- 250-DSN
Thu 2021-11-25 15:17:32.650: 02: [19908911] <-- 250-ENHANCEDSTATUSCODES
Thu 2021-11-25 15:17:32.650: 02: [19908911] <-- 250-8BITMIME
Thu 2021-11-25 15:17:32.650: 02: [19908911] <-- 250-BINARYMIME
Thu 2021-11-25 15:17:32.650: 02: [19908911] <-- 250-CHUNKING
Thu 2021-11-25 15:17:32.650: 02: [19908911] <-- 250 SMTPUTF8
Thu 2021-11-25 15:17:32.650: 03: [19908911] --> MAIL 
From: SIZE=47507
Thu 2021-11-25 15:17:32.650: 03: [19908911] --> RCPT 
To:

Thu 2021-11-25 15:17:32.650: 03: [19908911] --> DATA
Thu 2021-11-25 15:17:32.867: 02: [19908911] <-- 250 2.1.0 Sender OK
Thu 2021-11-25 15:17:33.080: 02: [19908911] <-- 250 2.1.5 Recipient OK
Thu 2021-11-25 15:17:33.080: 02: [19908911] <-- 354 Start mail input; 
end with .
Thu 2021-11-25 15:17:33.080: 01: [19908911] Sending 
 to 
[104.47.6.36]

Thu 2021-11-25 15:17:33.431: 01: [19908911] Transfer Complete
Thu 2021-11-25 15:17:33.605: 02: [19908911] <-- 451 4.7.500 Server busy. 
Please try again later from [103.150.114.156]. 

[Mdaemon-L] Transfer Domain/Hosting dan Ganti ISP

[Bambang Setiawan via Mdaemon-L]

On 25/11/2021 09.45, Syafril Hermansyah via Mdaemon-L wrote:



Bukan.
Anda yang sibuk sehingga tidak juga minta ke ISP membuatkan PTR record 
untuk IP 103.150.114.156 yang sesuai dengan HELO FQDN host 
mail.persada.id (lihat diatas).


Mohon maaf pak terlewat minta Pak, untuk solusi buka port 25 saja ISP 
nya butuh waktu lama :-)





tanpa PTR record yang valid (PTR record name harus sama dengan HELO 
Identity host [FQDN host] ), maka banyak receiving domain akan menolak 
terima, atau bisa diterima tetapi mail yang masuk dianggap spam (punya 
spam score tinggi) sehingga dialihkan ke spam folder.



Berikut DNS Record yang sudah minta dibuatkan Pak

% host 103.150.114.156 1.1.1.1

Using domain server:

Name: 1.1.1.1

Address: 1.1.1.1#53

Aliases:


156.114.150.103.in-addr.arpa domain name pointer mail.persada.id.

Apakah sudah sesuai pak ? terima kasih
--
--[mdaemon-l]--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com
Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com
Versi terakhir: MDaemon 21.5.0, SecurityGateway 8.0.4

[Mdaemon-L] Transfer Domain/Hosting dan Ganti ISP

[Bambang Setiawan via Mdaemon-L]

   On Thursday, 25 November 2021, 07:47:49 GMT+7, Bambang Setiawan via 
Mdaemon-L  wrote:  
 ups maaf pak, maksudnya di remote queue numpuknya pak
 
  
-- 
--[mdaemon-l]--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com
Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com
Versi terakhir: MDaemon 21.5.0, SecurityGateway 8.0.4

[Mdaemon-L] Transfer Domain/Hosting dan Ganti ISP

[Bambang Setiawan via Mdaemon-L]

On 24/11/2021 20.05, Syafril Hermansyah via Mdaemon-L wrote:
Tanya ke ISP, karena mungkin Anda belum mendaftarkan bahwa IP 
103.150.114.156 digunakan sebagai mail server sehingga outbound tcp 
port 25 belum di open/allow di firewall/routernya serta belum 
dibuatkan DNS PTR record untuk IP itu pointing ke mail.persada.id.



Untuk pengiriman sudah bisa keluar pak saat ini, terima kasih

Ada beberapa email yang masih gantung di retry queue pak, kalo saya 
proses queuenya, SMTP Out log-nya sebagai berikut :


Thu 2021-11-25 07:40:02.922: --
Thu 2021-11-25 07:39:57.600: [19895942] REMOTE message: 
pd5001000697993.del1637800684.msg

Thu 2021-11-25 07:39:57.600: [19895942] *  Session 19895942; child 0004
Thu 2021-11-25 07:39:57.601: [19895942] *  From: andi.faturokh...@persada.id
Thu 2021-11-25 07:39:57.601: [19895942] *  To: henry.sutri...@persada.id
Thu 2021-11-25 07:39:57.601: [19895942] *  Subject: RE: REQUEST_MS 
ISAT_FOSO 9.8 SFP + 1.4KM 1310nm_BANDARA_JUANDA_DOMESTIK_NSN
Thu 2021-11-25 07:39:57.601: [19895942] *  Message-ID: 
<012701d7e18a$177c2f70$46748e50$@persada.id>
Thu 2021-11-25 07:39:57.601: [19895942] *  Size: 674891; 


Thu 2021-11-25 07:39:57.602: [19895942] *  Route slip host: ericsson.com
Thu 2021-11-25 07:39:57.603: [19895942] *  Route slip port: 25
Thu 2021-11-25 07:39:57.631: [19895942] Resolving MX record for 
ericsson.com (DNS Server: 10.0.0.100)...
Thu 2021-11-25 07:39:57.922: [19895942] *  P=080 S=000 D=ericsson.com 
TTL=(1) MX=[ericsson-com.mail.protection.outlook.com]
Thu 2021-11-25 07:39:57.922: [19895942] Attempting SMTP connection to 
ericsson-com.mail.protection.outlook.com
Thu 2021-11-25 07:39:57.923: [19895942] Resolving A record for 
ericsson-com.mail.protection.outlook.com (DNS Server: 10.0.0.100)...
Thu 2021-11-25 07:39:57.924: [19895942] * 
D=ericsson-com.mail.protection.outlook.com TTL=(0) A=[104.47.6.36]
Thu 2021-11-25 07:39:57.924: [19895942] * 
D=ericsson-com.mail.protection.outlook.com TTL=(0) A=[104.47.4.36]
Thu 2021-11-25 07:39:57.924: [19895942] Randomly picked 104.47.4.36 from 
list of possible hosts
Thu 2021-11-25 07:39:57.924: [19895942] Attempting SMTP connection to 
104.47.4.36:25

Thu 2021-11-25 07:39:57.924: [19895942] Waiting for socket connection...
Thu 2021-11-25 07:39:58.099: [19895942] *  Connection established 
103.150.114.156:58576 --> 104.47.4.36:25

Thu 2021-11-25 07:39:58.099: [19895942] Waiting for protocol to start...
Thu 2021-11-25 07:39:58.291: [19895942] <-- 220 
AM5EUR02FT037.mail.protection.outlook.com Microsoft ESMTP MAIL Service 
ready at Thu, 25 Nov 2021 00:39:58 +

Thu 2021-11-25 07:39:58.293: [19895942] --> EHLO mail.persada.id
Thu 2021-11-25 07:39:58.468: [19895942] <-- 
250-AM5EUR02FT037.mail.protection.outlook.com Hello [103.150.114.156]

Thu 2021-11-25 07:39:58.468: [19895942] <-- 250-SIZE 157286400
Thu 2021-11-25 07:39:58.468: [19895942] <-- 250-PIPELINING
Thu 2021-11-25 07:39:58.468: [19895942] <-- 250-DSN
Thu 2021-11-25 07:39:58.468: [19895942] <-- 250-ENHANCEDSTATUSCODES
Thu 2021-11-25 07:39:58.468: [19895942] <-- 250-STARTTLS
Thu 2021-11-25 07:39:58.468: [19895942] <-- 250-8BITMIME
Thu 2021-11-25 07:39:58.468: [19895942] <-- 250-BINARYMIME
Thu 2021-11-25 07:39:58.468: [19895942] <-- 250-CHUNKING
Thu 2021-11-25 07:39:58.468: [19895942] <-- 250 SMTPUTF8
Thu 2021-11-25 07:39:58.468: [19895942] --> STARTTLS
Thu 2021-11-25 07:39:58.642: [19895942] <-- 220 2.0.0 SMTP server ready
Thu 2021-11-25 07:39:59.012: [19895942] SSL negotiation successful (TLS 
1.2, 384 bit key exchange, 256 bit AES encryption)
Thu 2021-11-25 07:39:59.013: [19895942] SSL certificate is valid 
(matches ericsson-com.mail.protection.outlook.com and is signed by 
recognized CA)

Thu 2021-11-25 07:39:59.013: [19895942] --> EHLO mail.persada.id
Thu 2021-11-25 07:39:59.188: [19895942] <-- 
250-AM5EUR02FT037.mail.protection.outlook.com Hello [103.150.114.156]

Thu 2021-11-25 07:39:59.188: [19895942] <-- 250-SIZE 157286400
Thu 2021-11-25 07:39:59.188: [19895942] <-- 250-PIPELINING
Thu 2021-11-25 07:39:59.188: [19895942] <-- 250-DSN
Thu 2021-11-25 07:39:59.188: [19895942] <-- 250-ENHANCEDSTATUSCODES
Thu 2021-11-25 07:39:59.188: [19895942] <-- 250-8BITMIME
Thu 2021-11-25 07:39:59.188: [19895942] <-- 250-BINARYMIME
Thu 2021-11-25 07:39:59.188: [19895942] <-- 250-CHUNKING
Thu 2021-11-25 07:39:59.188: [19895942] <-- 250 SMTPUTF8
Thu 2021-11-25 07:39:59.188: [19895942] --> MAIL 
From: SIZE=674891
Thu 2021-11-25 07:39:59.188: [19895942] --> RCPT 
To:
Thu 2021-11-25 07:39:59.188: [19895942] --> RCPT 
To:

Thu 2021-11-25 07:39:59.188: [19895942] --> DATA
Thu 2021-11-25 07:39:59.368: [19895942] <-- 250 2.1.0 Sender OK
Thu 2021-11-25 07:39:59.583: [19895942] <-- 250 2.1.5 Recipient OK
Thu 2021-11-25 07:39:59.583: [19895942] <-- 452 4.5.3 Too many 
recipients (AS780090) [AM5EUR02FT037.eop-EUR02.prod.protection.outlook.com]
Thu 2021-11-25 07:39:59.585: [19895942] <-- 354 Start mail input; end 
with .
Thu 2021-11-25 07:39:59.585: [19895942] Sending 
 to 
[104.47.4.36]

[Mdaemon-L] Transfer Domain/Hosting dan Ganti ISP

[Bambang Setiawan via Mdaemon-L]

On 24/11/2021 18.22, Syafril Hermansyah via Mdaemon-L wrote:

Ini outbound tcp port 25 belum diopen atau terfilter atau salah pointing.

Periksa public IP yang digunakan MDaemon dengan akses ke http://ip4.me


Terlampir hasilnya pak
**

*This page shows your IPv4 or IPv6 address*

You are connecting with an IPv4 Address of:*
*

103.150.114.156*
*


Lalu test apakah outbound tcp port sudah di open/allow dengan telnet

c:\ telnet 52.47.209.216 25

atau

c:\ telnet gmail-smtp-in.l.google.com 25


Cek dari telnet failed pak

C:\>telnet gmail-smtp-in.l.google.com 25
Connecting To gmail-smtp-in.l.google.com...Could not open connection to 
the host, on port 25: Connect failed


C:\>telnet 52.47.209.216 25
Connecting To 52.47.209.216...Could not open connection to the host, on 
port 25: Connect failed


Terlampir saya sampaikan juga capture untuk outbond rules di server pak, 
port 25 sudah di allow connection,


di sisi server saya nggak merubah apapun kecuali setting IP ISP baru pak 
dan topologinya juga masih sama client->mailserver->internet.


Kalo masalah pointing ini di sisi mana ya pak ?


Terima kasih.


--
--[mdaemon-l]--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com
Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com
Versi terakhir: MDaemon 21.5.0, SecurityGateway 8.0.4

[Mdaemon-L] Transfer Domain/Hosting dan Ganti ISP

[Bambang Setiawan via Mdaemon-L]

Dear Pak Syafril,

Mohon bantuannya, saat ini kami sedang melakukan perpindahan ISP dan 
Domain dengan kondisi sbb :

ISP dari IM2 ke IFORTE
Webhosting dari IM2 ke Biznet
Domain Registrar dari IM2 ke Biznet

yang sudah saya lakukan di cpanel webhosting biznet adalah sbb ;
1. Rubah NS dari ns1.panelhosting.indosatm2.com dan 
ns2.panelhosting.indosatm2.com ke ns1.neohosting.id dan ns2.neohosting.id

2. A Pointer = mail.persada.id.    14400    A    103.150.114.156
3. MX Record = 0 persada.id
3. mdaemon._domainkey.persada.id.    14400    IN    TXT v=DKIM1; 
p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQD4Df1j6sfzt22e9yf0PoqsYuNrcajjDxpWeFZKMm9bxK1fgX1Aoa67EnhFefKd6jF0NfT68+MKnFvtgJVQcoi5JbYgwNbzeXUSb2gWHOAJCI6j8I9QucGkC5yPHQHoSbeRGulG5OYb+un6z3kjOmlv+x1buXeldv0umHNK1cTGPQIDAQAB

4. _domainkey.persada.id.    14400    IN    TXT    o=~
5. _dmarc.persada.id.    14400    IN    TXT    v=DMARC1; p=none

Untuk DNS di mdaemon saya setting Use Windows DNS Server.
Saya belum rubah/hapus apapun di cpanel ISP sebelumnya.

Saat ini saya belum bisa terima/kirim email untuk log di smtp out sbb :

Wed 2021-11-24 17:27:02.336: --
Wed 2021-11-24 17:25:16.818: [19871100] REMOTE message: pd5001000697622.msg
Wed 2021-11-24 17:25:16.818: [19871100] *  Session 19871100; child 0015
Wed 2021-11-24 17:25:16.819: [19871100] *  Forwarded from: 
lia.fitri...@persada.id

Wed 2021-11-24 17:25:16.819: [19871100] *  From: dea.rezek...@persada.id
Wed 2021-11-24 17:25:16.819: [19871100] *  To: yaya.persad...@gmail.com
Wed 2021-11-24 17:25:16.819: [19871100] *  Subject: REVISI DISKET ERATEL SSA
Wed 2021-11-24 17:25:16.819: [19871100] *  Message-ID: 
<004f01d7e11b$f9250b00$eb6f2100$@persada.id>
Wed 2021-11-24 17:25:16.819: [19871100] *  Size: 14151; 

Wed 2021-11-24 17:25:16.820: [19871100] MTA-STS policy for gmail.com 
found in cache

Wed 2021-11-24 17:25:16.820: [19871100] *  version: STSv1
Wed 2021-11-24 17:25:16.820: [19871100] *  mode: enforce
Wed 2021-11-24 17:25:16.820: [19871100] *  mx: gmail-smtp-in.l.google.com
Wed 2021-11-24 17:25:16.820: [19871100] *  mx: *.gmail-smtp-in.l.google.com
Wed 2021-11-24 17:25:16.820: [19871100] *  max_age: 86400
Wed 2021-11-24 17:25:16.885: [19871100] Resolving MX record for 
gmail.com (DNS Server: 10.0.0.100)...
Wed 2021-11-24 17:25:16.929: [19871100] *  P=005 S=003 D=gmail.com 
TTL=(9) MX=[gmail-smtp-in.l.google.com]
Wed 2021-11-24 17:25:16.929: [19871100] *  P=010 S=000 D=gmail.com 
TTL=(9) MX=[alt1.gmail-smtp-in.l.google.com]
Wed 2021-11-24 17:25:16.929: [19871100] *  P=020 S=002 D=gmail.com 
TTL=(9) MX=[alt2.gmail-smtp-in.l.google.com]
Wed 2021-11-24 17:25:16.929: [19871100] *  P=030 S=001 D=gmail.com 
TTL=(9) MX=[alt3.gmail-smtp-in.l.google.com]
Wed 2021-11-24 17:25:16.929: [19871100] *  P=040 S=004 D=gmail.com 
TTL=(9) MX=[alt4.gmail-smtp-in.l.google.com]
Wed 2021-11-24 17:25:16.929: [19871100] Attempting SMTP connection to 
gmail-smtp-in.l.google.com
Wed 2021-11-24 17:25:16.929: [19871100] Resolving A record for 
gmail-smtp-in.l.google.com (DNS Server: 10.0.0.100)...
Wed 2021-11-24 17:25:16.952: [19871100] * D=gmail-smtp-in.l.google.com 
TTL=(5) A=[142.251.10.26]
Wed 2021-11-24 17:25:16.953: [19871100] Attempting SMTP connection to 
142.251.10.26:25

Wed 2021-11-24 17:25:16.953: [19871100] Waiting for socket connection...
Wed 2021-11-24 17:25:37.963: [19871100] *  Socket error 10060 - The 
connection timed out.
Wed 2021-11-24 17:25:37.963: [19871100] Attempting SMTP connection to 
alt1.gmail-smtp-in.l.google.com
Wed 2021-11-24 17:25:37.963: [19871100] Resolving A record for 
alt1.gmail-smtp-in.l.google.com (DNS Server: 10.0.0.100)...
Wed 2021-11-24 17:25:37.969: [19871100] * 
D=alt1.gmail-smtp-in.l.google.com TTL=(4) A=[173.194.202.26]
Wed 2021-11-24 17:25:37.970: [19871100] Attempting SMTP connection to 
173.194.202.26:25

Wed 2021-11-24 17:25:37.970: [19871100] Waiting for socket connection...
Wed 2021-11-24 17:25:58.977: [19871100] *  Socket error 10060 - The 
connection timed out.
Wed 2021-11-24 17:25:58.977: [19871100] Attempting SMTP connection to 
alt2.gmail-smtp-in.l.google.com
Wed 2021-11-24 17:25:58.977: [19871100] Resolving A record for 
alt2.gmail-smtp-in.l.google.com (DNS Server: 10.0.0.100)...
Wed 2021-11-24 17:25:58.981: [19871100] * 
D=alt2.gmail-smtp-in.l.google.com TTL=(4) A=[142.250.141.26]
Wed 2021-11-24 17:25:58.981: [19871100] Attempting SMTP connection to 
142.250.141.26:25

Wed 2021-11-24 17:25:58.982: [19871100] Waiting for socket connection...
Wed 2021-11-24 17:26:19.996: [19871100] *  Socket error 10060 - The 
connection timed out.
Wed 2021-11-24 17:26:19.996: [19871100] Attempting SMTP connection to 
alt3.gmail-smtp-in.l.google.com
Wed 2021-11-24 17:26:19.996: [19871100] Resolving A record for 
alt3.gmail-smtp-in.l.google.com (DNS Server: 10.0.0.100)...
Wed 2021-11-24 17:26:20.003: [19871100] * 
D=alt3.gmail-smtp-in.l.google.com TTL=(3) A=[142.250.115.26]
Wed 2021-11-24 17:26:20.004: [19871100] Attempting SMTP connection to 
142.250.115.26:25

Wed 2021-11-24 

[Mdaemon-L] Agar Account tidak ter-Freeze

[Bambang Setiawan via Mdaemon-L]

Dear Pak Syafril,


Mohon bantuan tips untuk kebutuhan saya sebagai berikut.

Saya memiliki account yang dipergunakan untuk mengirimkan notifikasi 
email ( absensi ) ke banyak user / karyawan,


saat ini account yang saya buat itu kadang-kadang ter-freeze karena 
mengirimkan terlalu banyak email, terutama pada saat jam datang 07:00 - 
09:00 WIB dan jam pulang sekitar jam 16.00 - 18:00 WIB, mohon bantuannya 
pak, untuk kebutuhan saya tersebut saya harus melakukan setting seperti 
apa di MDaemon.



Atas bantuannya diucapkan terima kasih.


Salam.


--
--[mdaemon-l]--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com
Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com
Versi terakhir: MDaemon 21.5.3, SecurityGateway 8.0.4

[Mdaemon-L] Does not have valid PTR record

[Bambang Setiawan via Mdaemon-L]

On 15/10/2021 12.05, Syafril Hermansyah via Mdaemon-L wrote:



Sudah ok.


Tadi malam saya monitor itu ada beberapa log seperti ini Pak, akhirnya 
saya pakai kembali pakai DNS Resolvernya Windows ( punya IndosatM2 ) 
sampai sekarang.


Fri 2021-10-15 00:25:01.504: --
Fri 2021-10-15 00:05:55.267: [18148372] Session 18148372; child 0027
Fri 2021-10-15 00:05:55.267: [18148372] Accepting SMTP connection from 
202.155.90.28:42972 to 124.81.84.135:25
Fri 2021-10-15 00:05:55.267: [18148372] Location Screen says connection 
is from Indonesia, Asia
Fri 2021-10-15 00:05:55.268: [18148372] --> 220 mail.persada.id ESMTP 
MDaemon 21.0.3; Fri, 15 Oct 2021 00:05:55 +0700

Fri 2021-10-15 00:05:55.270: [18148372] <-- EHLO sophos.indosatm2.com
Fri 2021-10-15 00:05:55.270: [18148372] --> 250-mail.persada.id Hello 
sophos.indosatm2.com [202.155.90.28], pleased to meet you

Fri 2021-10-15 00:05:55.270: [18148372] --> 250-ETRN
Fri 2021-10-15 00:05:55.270: [18148372] --> 250-AUTH LOGIN CRAM-MD5 PLAIN
Fri 2021-10-15 00:05:55.270: [18148372] --> 250-8BITMIME
Fri 2021-10-15 00:05:55.270: [18148372] --> 250-ENHANCEDSTATUSCODES
Fri 2021-10-15 00:05:55.270: [18148372] --> 250 SIZE
Fri 2021-10-15 00:05:55.272: [18148372] <-- MAIL FROM:<> SIZE=7780
Fri 2021-10-15 00:05:55.282: [18148372] Performing PTR lookup 
(28.90.155.202.IN-ADDR.ARPA)
Fri 2021-10-15 00:06:55.281: [18148372] *  DNS: 60 second wait for DNS 
response exceeded (DNS Server: 203.119.13.77)
Fri 2021-10-15 00:07:55.282: [18148372] *  DNS: 60 second wait for DNS 
response exceeded (DNS Server: 1.0.0.1)
Fri 2021-10-15 00:08:55.283: [18148372] *  DNS: 60 second wait for DNS 
response exceeded (DNS Server: 203.119.13.78)
Fri 2021-10-15 00:09:55.285: [18148372] *  DNS: 60 second wait for DNS 
response exceeded (DNS Server: 8.8.4.4)
Fri 2021-10-15 00:10:55.286: [18148372] *  DNS: 60 second wait for DNS 
response exceeded (DNS Server: 9.9.9.10)
Fri 2021-10-15 00:10:55.287: [18148372] * D=28.90.155.202.IN-ADDR.ARPA 
TTL=(149) PTR=[sophos.indosatm2.com]
Fri 2021-10-15 00:10:55.287: [18148372] * D=28.90.155.202.IN-ADDR.ARPA 
TTL=(149) PTR=[corp-in.indosat.net.id]
Fri 2021-10-15 00:10:55.287: [18148372] * D=28.90.155.202.IN-ADDR.ARPA 
TTL=(149) PTR=[smtp.indosat.net.id]
Fri 2021-10-15 00:11:55.287: [18148372] *  DNS: 60 second wait for DNS 
response exceeded (DNS Server: 203.119.13.77)
Fri 2021-10-15 00:11:56.901: [18148372] *  D=sophos.indosatm2.com 
TTL=(8) A=[202.155.90.28]
Fri 2021-10-15 00:11:59.092: [18148372] * D=corp-in.indosat.net.id 
TTL=(1140) A=[202.155.90.28]
Fri 2021-10-15 00:12:59.093: [18148372] *  DNS: 60 second wait for DNS 
response exceeded (DNS Server: 203.119.13.77)
Fri 2021-10-15 00:13:59.093: [18148372] *  DNS: 60 second wait for DNS 
response exceeded (DNS Server: 1.0.0.1)
Fri 2021-10-15 00:14:59.093: [18148372] *  DNS: 60 second wait for DNS 
response exceeded (DNS Server: 203.119.13.78)
Fri 2021-10-15 00:15:59.094: [18148372] *  DNS: 60 second wait for DNS 
response exceeded (DNS Server: 8.8.4.4)
Fri 2021-10-15 00:16:59.094: [18148372] *  DNS: 60 second wait for DNS 
response exceeded (DNS Server: 9.9.9.10)
Fri 2021-10-15 00:16:59.095: [18148372] *  D=smtp.indosat.net.id 
TTL=(1040) A=[202.155.90.28]

Fri 2021-10-15 00:16:59.095: [18148372]  End PTR results
Fri 2021-10-15 00:16:59.098: [18148372] Performing IP lookup 
(sophos.indosatm2.com)
Fri 2021-10-15 00:17:59.101: [18148372] *  DNS: 60 second wait for DNS 
response exceeded (DNS Server: 203.119.13.77)
Fri 2021-10-15 00:18:59.102: [18148372] *  DNS: 60 second wait for DNS 
response exceeded (DNS Server: 1.0.0.1)
Fri 2021-10-15 00:19:59.103: [18148372] *  DNS: 60 second wait for DNS 
response exceeded (DNS Server: 203.119.13.78)
Fri 2021-10-15 00:20:59.103: [18148372] *  DNS: 60 second wait for DNS 
response exceeded (DNS Server: 8.8.4.4)
Fri 2021-10-15 00:21:00.048: [18148372] *  D=sophos.indosatm2.com 
TTL=(10) A=[202.155.90.28]

Fri 2021-10-15 00:21:00.048: [18148372]  End IP lookup results
Fri 2021-10-15 00:21:00.054: [18148372] Performing SPF lookup 
(sophos.indosatm2.com / 202.155.90.28)
Fri 2021-10-15 00:22:00.054: [18148372] *  DNS: 60 second wait for DNS 
response exceeded (DNS Server: 203.119.13.77)
Fri 2021-10-15 00:23:01.097: [18148372] *  DNS: 60 second wait for DNS 
response exceeded (DNS Server: 203.119.13.78)
Fri 2021-10-15 00:24:01.989: [18148372] *  DNS: 60 second wait for DNS 
response exceeded (DNS Server: 9.9.9.10)
Fri 2021-10-15 00:25:01.990: [18148372] *  DNS: 60 second wait for DNS 
response exceeded (DNS Server: 202.155.0.15)
Fri 2021-10-15 00:25:01.990: [18148372] *  Result: none; no SPF record 
in DNS

Fri 2021-10-15 00:25:01.990: [18148372]  End SPF results
Fri 2021-10-15 00:25:01.990: [18148372] --> 250 2.1.0 Sender OK
Fri 2021-10-15 00:25:01.990: [18148372] Connection closed
Fri 2021-10-15 00:25:01.990: [18148372] SMTP session terminated (Bytes 
in/out: 51/271)

Fri 2021-10-15 00:25:01.990: --

Fri 2021-10-15 00:24:06.839: --
Fri 

[Mdaemon-L] Does not have valid PTR record

[Bambang Setiawan via Mdaemon-L]

On 14/10/2021 16.33, Syafril Hermansyah via Mdaemon-L wrote:



Kelihatannya belum mengikuti saran berikut?

https://www.mail-archive.com/mdaemon-l@dutaint.com/msg47689.html


Saya sudah set seperti ini apakah sudah sesuai pak ?

C:\>netsh firewall show config


Domain profile configuration:
---
Operational mode  = Disable
Exception mode    = Enable
Multicast/broadcast response mode = Enable
Notification mode = Disable

Service configuration for Domain profile:
Mode Customized  Name
---
Enable   No  Remote Desktop

Allowed programs configuration for Domain profile:
Mode Traffic direction    Name / Program
---
Disable  Inbound  ClamAV - clamsubmit / 
C:\MDaemon\SecurityPlus\ClamAVPlugin\clamsubmit.exe
Disable  Inbound  ClamAV - freshclam / 
C:\MDaemon\SecurityPlus\ClamAVPlugin\freshclam.exe
Disable  Inbound  ClamAV - clamd / 
C:\MDaemon\SecurityPlus\ClamAVPlugin\clamd.exe
Disable  Inbound  SPScanCT / 
C:\MDaemon\SecurityPlus\SPScanCT.exe
Disable  Inbound  AVUpdate.exe / 
C:\MDaemon\SecurityPlus\AVUpdate.exe
Disable  Inbound  MDaemon's XMPP Server / 
C:\MDaemon\XMPPServer\WCXMPPServer.exe
Disable  Inbound  WDaemon Server / 
C:\MDaemon\WorldClient\WorldClient.exe

Disable  Inbound  WALaunch / C:\MDaemon\WebAdmin\WALaunch.exe
Disable  Inbound  WDaemon Server / 
C:\MDaemon\WebAdmin\WebAdmin.exe
Disable  Inbound  SA-Learn / 
C:\MDaemon\SpamAssassin\SA-Learn.exe
Disable  Inbound  SA-Update / 
C:\MDaemon\SpamAssassin\SA-Update.exe
Disable  Inbound  MDaemon's Spam Daemon / 
C:\MDaemon\SpamAssassin\MDSpamD.exe

Disable  Inbound  CFEngine / C:\MDaemon\App\CFEngine.exe
Disable  Inbound  MDUpdater MFC Application / 
C:\MDaemon\App\MDUpdater.exe

Disable  Inbound  MDLaunch / C:\MDaemon\App\MDLaunch.exe

Port configuration for Domain profile:
Port   Protocol  Mode    Traffic direction Name
---
2104   TCP   Enable  Inbound   RDP

Standard profile configuration (current):
---
Operational mode  = Disable
Exception mode    = Enable
Multicast/broadcast response mode = Enable
Notification mode = Disable

Service configuration for Standard profile:
Mode Customized  Name
---
Enable   No  File and Printer Sharing
Enable   Yes Network Discovery
Enable   No  Remote Desktop

Allowed programs configuration for Standard profile:
Mode Traffic direction    Name / Program
---
Enable   Inbound  ClamAV - clamsubmit / 
C:\MDaemon\SecurityPlus\ClamAVPlugin\clamsubmit.exe
Enable   Inbound  ClamAV - freshclam / 
C:\MDaemon\SecurityPlus\ClamAVPlugin\freshclam.exe
Enable   Inbound  ClamAV - clamd / 
C:\MDaemon\SecurityPlus\ClamAVPlugin\clamd.exe
Enable   Inbound  SPScanCT / 
C:\MDaemon\SecurityPlus\SPScanCT.exe
Enable   Inbound  AVUpdate.exe / 
C:\MDaemon\SecurityPlus\AVUpdate.exe
Enable   Inbound  MDaemon's XMPP Server / 
C:\MDaemon\XMPPServer\WCXMPPServer.exe
Enable   Inbound  WDaemon Server / 
C:\MDaemon\WorldClient\WorldClient.exe

Enable   Inbound  WALaunch / C:\MDaemon\WebAdmin\WALaunch.exe
Enable   Inbound  WDaemon Server / 
C:\MDaemon\WebAdmin\WebAdmin.exe
Enable   Inbound  SA-Learn / 
C:\MDaemon\SpamAssassin\SA-Learn.exe
Enable   Inbound  SA-Update / 
C:\MDaemon\SpamAssassin\SA-Update.exe
Enable   Inbound  MDaemon's Spam Daemon / 
C:\MDaemon\SpamAssassin\MDSpamD.exe

Enable   Inbound  CFEngine / C:\MDaemon\App\CFEngine.exe
Enable   Inbound  MDUpdater MFC Application / 
C:\MDaemon\App\MDUpdater.exe

Enable   Inbound  MDLaunch / C:\MDaemon\App\MDLaunch.exe
Enable   Inbound  Microsoft Lync UcMapi / C:\Program Files 
(x86)\Microsoft Office\root\Office16\UcMapi.exe
Enable   Inbound  Microsoft Lync / C:\Program Files 
(x86)\Microsoft Office\root\Office16\Lync.exe
Enable   Inbound  Firefox (C:\Program Files\Mozilla Firefox) 
/ C:\Program Files\Mozilla Firefox\firefox.exe


Port configuration for Standard profile:
Port   Protocol  Mode    Traffic direction Name
---
2104   TCP   Enable  Inbound   RDP

Log configuration: