[Mdaemon-L] SPF: domain did not pass SPF check

2023-01-19 Terurut Topik Syafril Hermansyah via Mdaemon-L 

On 1/20/23 10:49, Aribhawa Samudra via Mdaemon-L wrote:

Ada email nasabah yang tidak bisa masuk ke server kami.
Kami cek log smtp-in, didapat log seperti dibawah ini :




Thu 2023-01-19 14:04:32.861: [24815902] Performing SPF lookup (jagat.io / 
209.85.128.46)
Thu 2023-01-19 14:04:32.919: [24815902] *  Policy: v=spf1 include:spf.91edm.cn 
-all



Thu 2023-01-19 14:04:33.698: [24815902] *  Evaluating -all: match
Thu 2023-01-19 14:04:33.698: [24815902] *  Result: fail
Thu 2023-01-19 14:04:33.698: [24815902] Message will be rejected after DMARC 
processing.



Domain jagat.io baru pindah hosting ke google suite, tetapi lupa 
mengganti DNS SPF recordnya.


Masukkan sender domain kedalam SPF Exempt List.

http://mdaemon.dutaint.co.id/mdaemon/22.0/security--spf__sender_id.html


--
syafril

Syafril Hermansyah
MDaemon-L Moderators, running MDaemon 23.0 Beta RC3
Harap tidak cc: atau kirim ke private mail untuk masalah MDaemon.

Learning is not child's play; we cannot learn without pain
--- Aristotle


--
--[mdaemon-l]--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com
Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com
Versi terakhir: MDaemon 22.0.3, SecurityGateway 9.0

[Mdaemon-L] SPF: domain did not pass SPF check

2023-01-19 Terurut Topik Aribhawa Samudra via Mdaemon-L 
Selamat pagi pak Syahfril,

Ada email nasabah yang tidak bisa masuk ke server kami.
Kami cek log smtp-in, didapat log seperti dibawah ini :





9 14:04:19.176: --
Thu 2023-01-19 14:04:30.895: [24815902] Session 24815902; child 0009
Thu 2023-01-19 14:04:30.895: [24815902] Accepting SMTP connection from 
209.85.128.46:42673 to 172.16.200.2:25
Thu 2023-01-19 14:04:30.895: [24815902] Location Screen says connection is 
from United States, North America
Thu 2023-01-19 14:04:30.896: [24815902] --> 220 mail2.equity.id ESMTP 
MDaemon 22.0.3; Thu, 19 Jan 2023 14:04:30 +0700
Thu 2023-01-19 14:04:31.204: [24815902] <-- EHLO mail-wm1-f46.google.com
Thu 2023-01-19 14:04:31.204: [24815902] --> 250-mail2.equity.id Hello 
mail-wm1-f46.google.com [209.85.128.46], pleased to meet you
Thu 2023-01-19 14:04:31.204: [24815902] --> 250-ETRN
Thu 2023-01-19 14:04:31.204: [24815902] Location Screening hiding AUTH from 
country United States, North America
Thu 2023-01-19 14:04:31.204: [24815902] --> 250-8BITMIME
Thu 2023-01-19 14:04:31.204: [24815902] --> 250-ENHANCEDSTATUSCODES
Thu 2023-01-19 14:04:31.204: [24815902] --> 250-PIPELINING
Thu 2023-01-19 14:04:31.204: [24815902] --> 250-CHUNKING
Thu 2023-01-19 14:04:31.204: [24815902] --> 250-STARTTLS
Thu 2023-01-19 14:04:31.204: [24815902] --> 250 SIZE 20971520
Thu 2023-01-19 14:04:31.513: [24815902] <-- STARTTLS
Thu 2023-01-19 14:04:31.513: [24815902] --> 220 2.7.0 Ready to start TLS
Thu 2023-01-19 14:04:32.140: [24815902] SSL negotiation successful (TLS 1.2, 
TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA_P384)
Thu 2023-01-19 14:04:32.448: [24815902] <-- EHLO mail-wm1-f46.google.com
Thu 2023-01-19 14:04:32.449: [24815902] --> 250-mail2.equity.id Hello 
mail-wm1-f46.google.com [209.85.128.46], pleased to meet you
Thu 2023-01-19 14:04:32.449: [24815902] --> 250-ETRN
Thu 2023-01-19 14:04:32.449: [24815902] Location Screening hiding AUTH from 
country United States, North America
Thu 2023-01-19 14:04:32.449: [24815902] --> 250-8BITMIME
Thu 2023-01-19 14:04:32.449: [24815902] --> 250-ENHANCEDSTATUSCODES
Thu 2023-01-19 14:04:32.449: [24815902] --> 250-PIPELINING
Thu 2023-01-19 14:04:32.449: [24815902] --> 250-CHUNKING
Thu 2023-01-19 14:04:32.449: [24815902] --> 250-REQUIRETLS
Thu 2023-01-19 14:04:32.449: [24815902] --> 250 SIZE 20971520
Thu 2023-01-19 14:04:32.757: [24815902] <-- MAIL 
FROM: SIZE=515103
Thu 2023-01-19 14:04:32.770: [24815902] Performing PTR lookup 
(46.128.85.209.IN-ADDR.ARPA)
Thu 2023-01-19 14:04:32.784: [24815902] *  D=46.128.85.209.IN-ADDR.ARPA 
TTL=(60) PTR=[mail-wm1-f46.google.com]
Thu 2023-01-19 14:04:32.798: [24815902] *  D=mail-wm1-f46.google.com 
TTL=(60) A=[209.85.128.46]
Thu 2023-01-19 14:04:32.798: [24815902]  End PTR results
Thu 2023-01-19 14:04:32.803: [24815902] Performing IP lookup 
(mail-wm1-f46.google.com)
Thu 2023-01-19 14:04:32.804: [24815902] *  D=mail-wm1-f46.google.com 
TTL=(60) A=[209.85.128.46]
Thu 2023-01-19 14:04:32.804: [24815902]  End IP lookup results
Thu 2023-01-19 14:04:32.813: [24815902] Performing SPF lookup 
(mail-wm1-f46.google.com / 209.85.128.46)
Thu 2023-01-19 14:04:32.860: [24815902] *  Result: none; no SPF record in 
DNS
Thu 2023-01-19 14:04:32.860: [24815902]  End SPF results
Thu 2023-01-19 14:04:32.861: [24815902] Performing SPF lookup (jagat.io / 
209.85.128.46)
Thu 2023-01-19 14:04:32.919: [24815902] *  Policy: v=spf1 
include:spf.91edm.cn -all
Thu 2023-01-19 14:04:32.919: [24815902] *  Evaluating include:spf.91edm.cn: 
performing lookup
Thu 2023-01-19 14:04:33.110: [24815902] *Policy: v=spf1 
include:spf.bossedm.com -all
Thu 2023-01-19 14:04:33.110: [24815902] *Evaluating 
include:spf.bossedm.com: performing lookup
Thu 2023-01-19 14:04:33.207: [24815902] *  Policy: v=spf1 
include:n1.bossedm.com include:n2.bossedm.com include:n3.bossedm.com 
include:n4.bossedm.com include:n5.bossedm.com include:n6.bossedm.com -all
Thu 2023-01-19 14:04:33.207: [24815902] *  Evaluating 
include:n1.bossedm.com: performing lookup
Thu 2023-01-19 14:04:33.276: [24815902] *Policy: v=spf1 
ip4:67.216.198.131 ip4:137.175.66.60 ip4:137.175.19.83 ip4:198.200.51.171 
ip4:104.206.242.40 ip4:168.235.94.55 ip4:218.5.79.0/24 ip4:137.175.30.239 
ip4:137.175.30.199 ip4:192.74.254.226 ip4:107.148.200.165 -all
Thu 2023-01-19 14:04:33.276: [24815902] *Evaluating 
ip4:67.216.198.131: no match
Thu 2023-01-19 14:04:33.276: [24815902] *Evaluating 
ip4:137.175.66.60: no match
Thu 2023-01-19 14:04:33.276: [24815902] *Evaluating 
ip4:137.175.19.83: no match
Thu 2023-01-19 14:04:33.276: [24815902] *Evaluating 
ip4:198.200.51.171: no match
Thu 2023-01-19 14:04:33.276: [24815902] *Evaluating 
ip4:104.206.242.40: no match
Thu 2023-01-19 14:04:33.276: [24815902] *Evaluating 
ip4:168.235.94.55: no match
Thu 2023-01-19 14:04:33.276: [24815902] *Evaluating 
ip4:218.5.79.0/24: no match
Thu 2023-01-19 14:04:33.276: [24815902] *Evaluating 
ip4:137.175.30.239: no match
Thu 2023-01-19