[mdaemon-l] SPF policy

2018-08-29 Terurut Topik Syafril Hermansyah 
On 29/08/18 09:07, Rifki maulana (rifki.maul...@adhikarya.com) wrote:
> Saya masih menggunakan mdaemon v. 15.0.3, tapi sdh ada whitelist, apa bisa 
> dimasukan ke whitelist juga?
> Atau tetap harus disable jika masih dibawah v. 17?


Harus disable, karena MD dibawah 17.0.x SPF verification belum mendukung
whitelist by domain, hanya bisa per IP.
Padahal smarthost smtp.telkom.co.id punya banyak IP dan (bisa)
berganti-ganti terus.


-- 
syafril
---
Syafril Hermansyah
MDaemon-L Moderators, running MDaemon 18.5.0-64 bit Beta B
Harap tidak cc: atau kirim ke private mail untuk masalah MDaemon.

Education is the power to think clearly, the power to act well in the
world's work, and the power to appreciate life.
--- Brigham Young


-- 
--[mdaemon-l]--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com
Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com
Versi terakhir MD 18.0.2, SG 5.5.0

[mdaemon-l] SPF policy

2018-08-28 Terurut Topik Rifki maulana 
>On 28/08/18 12:31, Rifki maulana (rifki.maul...@adhikarya.com) wrote:
>> Mohon bantunnya untuk log terlampir.
>
>> Tue 2018-08-28 09:14:03.218: [997507] Performing SPF lookup
>> (cimbniaga.co.id / 180.250.119.27) Tue 2018-08-28 09:14:03.235:
>> [997507] *  Policy: v=spf1 ip4:202.152.60.7 ip4:202.152.60.114
>> ip4:202.152.60.115 ip4:103.28.178.71 ip4:103.28.178.72
>> ip4:103.28.178.73 ip4:103.28.178.85 ip4:103.28.178.86
>> ip4:103.28.178.95 ip4:139.255.103.99 include:ncapp02.com -all
>
>> Tue 2018-08-28 09:14:04.405: [997507] --> 550 5.7.0 Message rejected
>> per SPF policy
>
>
>Mail ditolak karena dikirim melalui server yang tidak masuk dalam daftar SPF
>host.
>
>Untuk bisa terima mail dari sender itu kedepannya dari sisi MDaemon perlu
>non aktifkan SPF verification check karena masih pakai MDaemon lama.
>
>http://mdaemon.dutaint.co.id/mdaemon/18.0/index.html?security--
>spf__sender_id.htm
>
>[ ] Enable SPF verification
>
>kalau sudah pakai MD 17.0 keatas maka bisa masukkan sender domain
>cimbniaga.co.id  kedalam SPF whitelist.


Saya masih menggunakan mdaemon v. 15.0.3, tapi sdh ada whitelist, apa bisa 
dimasukan ke whitelist juga?
Atau tetap harus disable jika masih dibawah v. 17?

Atas bantuannya diucapkan terimakasih,

Salam,

Rifki



--
--[mdaemon-l]--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com
Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com
Versi terakhir MD 18.0.2, SG 5.5.0

[mdaemon-l] SPF policy

2018-08-28 Terurut Topik Syafril Hermansyah 
On 28/08/18 18:00, Suzy Ariyani (s...@ptbmi.com) wrote:

---
Kalau reply lakukan penghapusan kutipan teks yang tidak sesuai dengan
konteks yang akan dijawab.
Tanpa penghapusan itu bottom posting sama buruknya dengan top posting.

http://daringfireball.net/2007/07/on_top

The fundamental source of poor email style is the practice of quoting
the entire message you’re replying to. If that’s what you do, then it
doesn’t matter whether you put your response at the top or bottom. In
fact, if you’re going to quote the entire message, top-posting probably
is better. But both are poor form.

Does it take more time to edit the portions of quoted text included in
your reply? Yes. So does spell-checking and proofreading. It also takes
time to shower and brush your teeth each day.

Jika menggunakan inline/bottom reply maka teks kutipan (quote text)
menggunakan penanda (tag) > (atau |) didepan semua barisnya, hal itu
untuk memudahkan pembacaan oleh recipient.
lihat contohnya disini

https://wiki.openstack.org/wiki/MailingListEtiquette#Replies

Ganti email clientnya jika memang tidak bisa menggunakan internet quote
style, misalkan pakai MDaemon webmail atau lainnya

https://www.makeuseof.com/tag/5-of-the-best-desktop-email-clients-for-windows-that-dont-cost-a-dime/

atau installkan tambahan utility WlmQuoteFix dikombinasi dengan autohotkey.

http://www.dusko-lolic.from.hr/wlmquote/
---

>> Untuk bisa terima mail dari sender itu kedepannya dari sisi MDaemon
>> perlu non aktifkan SPF verification check karena masih pakai MDaemon lama.
>> 
>> http://mdaemon.dutaint.co.id/mdaemon/18.0/index.html?security--spf__sender_id.htm
>> 
>> 
>> [ ] Enable SPF verification

> Lalu
> [ ] Use Local address in SMTP envelope when forwarding message
> di-AKTIFKAN or not pak??
> krn default-nya DISABLE tapi recommanded MDaemon ENABLE


SPF forwarding tetap aktif.
Di MD 18.0 menu itu aktif di standard instalasi, penon aktifan SPF
verification tidak membuat menu itu otomatis disable.


-- 
syafril
---
Syafril Hermansyah
MDaemon-L Moderators, running MDaemon 18.5.0-64 bit Beta B
Harap tidak cc: atau kirim ke private mail untuk masalah MDaemon.

Anyone who stops learning is old, whether twenty or eighty. Anyone who
keeps learning stays young. The greatest thing you can do is keep your
mind young.
--- Mark Twain (1835 - 1910)

-- 
--[mdaemon-l]--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com
Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com
Versi terakhir MD 18.0.2, SG 5.5.0

[mdaemon-l] SPF policy

2018-08-28 Terurut Topik Suzy Ariyani 




-Original Message- 
From: Syafril Hermansyah

Sent: Tuesday, August 28, 2018 5:34 PM
To: mdaemon-l@dutaint.com
Subject: [mdaemon-l] SPF policy

On 28/08/18 12:31, Rifki maulana (rifki.maul...@adhikarya.com) wrote:

Mohon bantunnya untuk log terlampir.



Tue 2018-08-28 09:14:03.218: [997507] Performing SPF lookup
(cimbniaga.co.id / 180.250.119.27) Tue 2018-08-28 09:14:03.235:
[997507] *  Policy: v=spf1 ip4:202.152.60.7 ip4:202.152.60.114
ip4:202.152.60.115 ip4:103.28.178.71 ip4:103.28.178.72
ip4:103.28.178.73 ip4:103.28.178.85 ip4:103.28.178.86
ip4:103.28.178.95 ip4:139.255.103.99 include:ncapp02.com -all


Tue 2018-08-28 09:14:04.405: [997507] --> 550 5.7.0 Message rejected per 
SPF policy



Mail ditolak karena dikirim melalui server yang tidak masuk dalam daftar
SPF host.

Untuk bisa terima mail dari sender itu kedepannya dari sisi MDaemon
perlu non aktifkan SPF verification check karena masih pakai MDaemon lama.

http://mdaemon.dutaint.co.id/mdaemon/18.0/index.html?security--spf__sender_id.htm

[ ] Enable SPF verification

kalau sudah pakai MD 17.0 keatas maka bisa masukkan sender domain
cimbniaga.co.id  kedalam SPF whitelist.

Pertanyaan BMI
Lalu
[ ] Use Local address in SMTP envelope when forwarding message
di-AKTIFKAN or not pak??
krn default-nya DISABLE tapi recommanded MDaemon ENABLE

mohon pencerahan

thanks
Suzy 



--
--[mdaemon-l]--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com
Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com
Versi terakhir MD 18.0.2, SG 5.5.0

[mdaemon-l] SPF policy

2018-08-28 Terurut Topik Syafril Hermansyah 
On 28/08/18 12:31, Rifki maulana (rifki.maul...@adhikarya.com) wrote:
> Mohon bantunnya untuk log terlampir.

> Tue 2018-08-28 09:14:03.218: [997507] Performing SPF lookup
> (cimbniaga.co.id / 180.250.119.27) Tue 2018-08-28 09:14:03.235:
> [997507] *  Policy: v=spf1 ip4:202.152.60.7 ip4:202.152.60.114
> ip4:202.152.60.115 ip4:103.28.178.71 ip4:103.28.178.72
> ip4:103.28.178.73 ip4:103.28.178.85 ip4:103.28.178.86
> ip4:103.28.178.95 ip4:139.255.103.99 include:ncapp02.com -all

> Tue 2018-08-28 09:14:04.405: [997507] --> 550 5.7.0 Message rejected per SPF 
> policy


Mail ditolak karena dikirim melalui server yang tidak masuk dalam daftar
SPF host.

Untuk bisa terima mail dari sender itu kedepannya dari sisi MDaemon
perlu non aktifkan SPF verification check karena masih pakai MDaemon lama.

http://mdaemon.dutaint.co.id/mdaemon/18.0/index.html?security--spf__sender_id.htm

[ ] Enable SPF verification

kalau sudah pakai MD 17.0 keatas maka bisa masukkan sender domain
cimbniaga.co.id  kedalam SPF whitelist.





-- 
syafril
---
Syafril Hermansyah
MDaemon-L Moderators, running MDaemon 18.5.0-64 bit Beta B
Harap tidak cc: atau kirim ke private mail untuk masalah MDaemon.

Tugas anak muda adalah membuat sejarah, bukan menulis sejarah.
--- Anies Baswedan


-- 
--[mdaemon-l]--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com
Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com
Versi terakhir MD 18.0.2, SG 5.5.0

[mdaemon-l] SPF policy

2018-08-27 Terurut Topik Rifki maulana 
Dear Pak Syafril,

 

Mohon bantunnya untuk log terlampir.

 

Salam,

 

Rifki

Tue 2018-08-28 09:14:02.994: --
Tue 2018-08-28 09:14:02.492: [997507] Session 997507; child 0015
Tue 2018-08-28 09:14:02.492: [997507] Accepting SMTP connection from 
180.250.119.27:38369 to 192.168.33.21:25
Tue 2018-08-28 09:14:02.503: [997507] --> 220 mail.adhikarya.com ESMTP MDaemon 
15.0.3; Tue, 28 Aug 2018 09:14:02 +0700
Tue 2018-08-28 09:14:02.507: [997507] <-- EHLO securemailgwjt1.telkom.co.id
Tue 2018-08-28 09:14:02.507: [997507] --> 250-mail.adhikarya.com Hello 
securemailgwjt1.telkom.co.id, pleased to meet you
Tue 2018-08-28 09:14:02.507: [997507] --> 250-ETRN
Tue 2018-08-28 09:14:02.507: [997507] --> 250-AUTH LOGIN CRAM-MD5 PLAIN
Tue 2018-08-28 09:14:02.507: [997507] --> 250-8BITMIME
Tue 2018-08-28 09:14:02.507: [997507] --> 250-ENHANCEDSTATUSCODES
Tue 2018-08-28 09:14:02.507: [997507] --> 250 SIZE
Tue 2018-08-28 09:14:02.511: [997507] <-- MAIL FROM:<14...@cimbniaga.co.id> 
SIZE=172873
Tue 2018-08-28 09:14:02.516: [997507] Performing PTR lookup 
(27.119.250.180.IN-ADDR.ARPA)
Tue 2018-08-28 09:14:02.563: [997507] *  D=27.119.250.180.IN-ADDR.ARPA 
TTL=(640) PTR=[securemailgwjt1.telkom.co.id]
Tue 2018-08-28 09:14:02.595: [997507] *  D=securemailgwjt1.telkom.co.id 
TTL=(1440) A=[180.250.119.27]
Tue 2018-08-28 09:14:02.595: [997507]  End PTR results
Tue 2018-08-28 09:14:02.601: [997507] Performing IP lookup 
(securemailgwjt1.telkom.co.id)
Tue 2018-08-28 09:14:02.619: [997507] *  D=securemailgwjt1.telkom.co.id 
TTL=(1440) A=[180.250.119.27]
Tue 2018-08-28 09:14:02.619: [997507]  End IP lookup results
Tue 2018-08-28 09:14:02.627: [997507] Performing IP lookup (cimbniaga.co.id)
Tue 2018-08-28 09:14:02.644: [997507] *  D=cimbniaga.co.id TTL=(2) 
A=[103.28.176.72]
Tue 2018-08-28 09:14:02.662: [997507] *  P=010 S=000 D=cimbniaga.co.id 
TTL=(618) MX=[mxmail2.cimbniaga.co.id]
Tue 2018-08-28 09:14:02.662: [997507] *  P=010 S=001 D=cimbniaga.co.id 
TTL=(618) MX=[mxmail.cimbniaga.co.id]
Tue 2018-08-28 09:14:02.662: [997507] *  P=010 S=002 D=cimbniaga.co.id 
TTL=(618) MX=[mxmail3.cimbniaga.co.id]
Tue 2018-08-28 09:14:02.662: [997507] *  P=010 S=003 D=cimbniaga.co.id 
TTL=(618) MX=[mxmail4.cimbniaga.co.id]
Tue 2018-08-28 09:14:03.073: [997507] *  D=mxmail2.cimbniaga.co.id TTL=(16) 
A=[103.28.178.89]
Tue 2018-08-28 09:14:03.089: [997507] *  D=mxmail.cimbniaga.co.id TTL=(596) 
A=[103.28.178.68]
Tue 2018-08-28 09:14:03.152: [997507] *  D=mxmail3.cimbniaga.co.id TTL=(60) 
A=[103.28.178.70]
Tue 2018-08-28 09:14:03.216: [997507] *  D=mxmail4.cimbniaga.co.id TTL=(7) 
A=[103.28.178.99]
Tue 2018-08-28 09:14:03.216: [997507]  End IP lookup results
Tue 2018-08-28 09:14:03.218: [997507] Performing SPF lookup (cimbniaga.co.id / 
180.250.119.27)
Tue 2018-08-28 09:14:03.235: [997507] *  Policy: v=spf1 ip4:202.152.60.7 
ip4:202.152.60.114 ip4:202.152.60.115 ip4:103.28.178.71 ip4:103.28.178.72 
ip4:103.28.178.73 ip4:103.28.178.85 ip4:103.28.178.86 ip4:103.28.178.95 
ip4:139.255.103.99 include:ncapp02.com -all
Tue 2018-08-28 09:14:03.235: [997507] *  Evaluating ip4:202.152.60.7: no match
Tue 2018-08-28 09:14:03.235: [997507] *  Evaluating ip4:202.152.60.114: no match
Tue 2018-08-28 09:14:03.235: [997507] *  Evaluating ip4:202.152.60.115: no match
Tue 2018-08-28 09:14:03.235: [997507] *  Evaluating ip4:103.28.178.71: no match
Tue 2018-08-28 09:14:03.235: [997507] *  Evaluating ip4:103.28.178.72: no match
Tue 2018-08-28 09:14:03.235: [997507] *  Evaluating ip4:103.28.178.73: no match
Tue 2018-08-28 09:14:03.235: [997507] *  Evaluating ip4:103.28.178.85: no match
Tue 2018-08-28 09:14:03.235: [997507] *  Evaluating ip4:103.28.178.86: no match
Tue 2018-08-28 09:14:03.235: [997507] *  Evaluating ip4:103.28.178.95: no match
Tue 2018-08-28 09:14:03.235: [997507] *  Evaluating ip4:139.255.103.99: no match
Tue 2018-08-28 09:14:03.235: [997507] *  Evaluating include:ncapp02.com: 
performing lookup
Tue 2018-08-28 09:14:03.253: [997507] *Policy: v=spf1 ip4:175.158.64.0/19 
ip4:150.129.232.0/24 ip4:192.241.190.48/32  ip4:45.55.220.59/32 
ip4:45.55.229.253/32 ip4:103.52.180.0/22 ip4:202.162.224.0/19  
ip4:107.170.75.52/32 ip4:103.66.104.0/22 include:sendeth.com ~all
Tue 2018-08-28 09:14:03.253: [997507] *Evaluating ip4:175.158.64.0/19: no 
match
Tue 2018-08-28 09:14:03.253: [997507] *Evaluating ip4:150.129.232.0/24: no 
match
Tue 2018-08-28 09:14:03.253: [997507] *Evaluating ip4:192.241.190.48/32: no 
match
Tue 2018-08-28 09:14:03.253: [997507] *Evaluating ip4:45.55.220.59/32: no 
match
Tue 2018-08-28 09:14:03.253: [997507] *Evaluating ip4:45.55.229.253/32: no 
match
Tue 2018-08-28 09:14:03.253: [997507] *Evaluating ip4:103.52.180.0/22: no 
match
Tue 2018-08-28 09:14:03.253: [997507] *Evaluating ip4:202.162.224.0/19: no 
match
Tue 2018-08-28 09:14:03.253: [997507] *Evaluating ip4:107.170.75.52/32: no 
match
Tue 2018-08-28 09:14:03.253: [997507] *Evaluating ip4:103.66.104.0/22: no 
match
Tue 2018-08-28

[MDaemon-L] spf policy

2017-09-18 Terurut Topik Syafril Hermansyah 
On 13/09/17 07:46, Syafril Hermansyah wrote:
>> Kalau domain, gunakan format
>>
>> from *@domain.tld
> 
> Maaf koreksi, yang diatas itu untuk DNS-BL whitelist.
> Format yang benar untuk SPF whitelist domain adalah
> 
> spf domain.tld
> 
> misalkan
> 
> spf nyomo.com


Koreksi lagi, maaf.

Untuk whitelist sender domain formatnya
*@domain.tld

Kalau server kita punya MX backup, maka untuk whitelist server MX backup gunakan
format

spf mxbackup.tld

atau

spf relayhost.tld

atau

spf smarthost.tld


Penjelasannya ada di Release note MD 16.5.0


ftp://ftp.dutaint.com/altn-mdaemon/archive/relnotes_en-1652.html


[17049] Ctrl+S|Sender Authentication|SPF Verification now allows domains in the
white list file to be included in SPF lookups. See descriptive text on that
screen for how it works.  Often you need to white list your backup MX
provider(s) from SPF lookups but you do not know or can not configure all of
their IPs.  To safely solve this problem you can now specify your backup MX
provider(s) by using a new "spf" tag to white list them and MDaemon will do the
required lookups in real-time. MDaemon does this by adding its own "wlinclude:"
tag to the actual SPF results for a queried domain. Although this "wlinclude"
data is logged it is important to realize that "wlinclude" tags are your
white-listed entries and are not actually part of the queried domain's SPF data
taken from DNS.



-- 
syafril
---
Syafril Hermansyah
MDaemon-L Moderators, running MDaemon 17.5.0-64 Beta RC2, SP 5.1-64
Harap tidak cc: atau kirim ke private mail untuk masalah MDaemon.

The more that you read, the more things you will know. The more that you learn,
the more places you'll go.
---  Dr. Seuss, I Can Read With My Eyes Shut!


-- 
--MDaemon-L--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server.

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com
Versi terakhir MD 17.0.3, SP 5.1.0, OC 4.5.1, SG 4.5.1

[MDaemon-L] spf policy

2017-09-13 Terurut Topik Agus Tarpindo 
YTH Pak Syafril
Siang Pak
 
> Hanya berlaku di MDaemon versi 16.5 keatas.
> Dibawah versi itu hanya bisa whitelist IP saja.
> 
> Berikut ini isi whitelist text di versi 16.5 keatas
>
Ohh ok, baik Pak. Terima kasih atas informasinya.

Best regards, 

Agus 



-- 
--MDaemon-L--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server.

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com
Versi terakhir MD 17.0.3, SP 5.1.0, OC 4.5.1, SG 4.5.1

[MDaemon-L] spf policy

2017-09-12 Terurut Topik Syafril Hermansyah 
On 13/09/17 09:08, Agus Tarpindo wrote:
>> spf nyomo.com
>>
> Maaf numpang nimbrung Pak, penulisan ini hanya berlaku untuk MD versi 14 ke 
> atas atau semua bersi MD Pak?


Hanya berlaku di MDaemon versi 16.5 keatas.
Dibawah versi itu hanya bisa whitelist IP saja.

Berikut ini isi whitelist text di versi 16.5 keatas

# This file lists IP addresses, email addresses, and domains which are exempt
# from SPF lookups.  Email addresses are compared against the SMTP envelope
# not the message From header). Domains are whitelisted by placing the word
# "spf" in front of the domain name. MDaemon will include that domain's
# SPF record in every SPF evaluation using an MDaemon specific
# "wlinclude:" tag. In this way you can have your backup MX provider
# treated as a valid SPF source for all senders.
#
# Wildcards and CIDR notation are supported. One entry per line please.
#
# Examples:
# 127.0.0.1
# 192.0.2.0/24
# ar...@altn.com
# spf altn.com

127.0.0.*
192.168.*.*
10.*.*.*
172.16.0.0/12
::1
FD00::/8
FEC0::/10
FE80::/64


-- 
syafril
---
Syafril Hermansyah
MDaemon-L Moderators, running MDaemon 17.5.0-64 Beta RC2, SP 5.1-64
Harap tidak cc: atau kirim ke private mail untuk masalah MDaemon.

Never give up on anything.
If you fail, try, try and try again.
You are learning the best ways of doing things.
--- Lailah Gifty Akita


-- 
--MDaemon-L--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server.

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com
Versi terakhir MD 17.0.3, SP 5.1.0, OC 4.5.1, SG 4.5.1

[MDaemon-L] spf policy

2017-09-12 Terurut Topik Agus Tarpindo 
YTH Pak Syafril
Pagi Pak..

> >> bagaimana cara melewatkan email yang terkena spf policy?
> > Masukkan sender  kedalam SPF whitelist.
> >
> > http://mdaemon.dutaint.co.id/mdaemon/17.0.1/index.html?security--
> spf__
> > sender_id.htm
> >
> > Kalau domain, gunakan format
> >
> > from *@domain.tld
> 
> 
> Maaf koreksi, yang diatas itu untuk DNS-BL whitelist.
> Format yang benar untuk SPF whitelist domain adalah
> 
> spf domain.tld
> 
> misalkan
> 
> spf nyomo.com
>
Maaf numpang nimbrung Pak, penulisan ini hanya berlaku untuk MD versi 14 ke 
atas atau semua bersi MD Pak?
Karena saya  lihat dari SPF white list ada tulisan "wildcard" Pak :

# SPF Exception List
#
# This file lists IP addresses and email addresses which exempt a message
# from SPF lookups.  Email addresses are compared against the SMTP envelope.
#
# Wildcards and CIDR notation are supported.
#
# Ex: 127.0.0.1 or 192.0.2.0/24 or ar...@altn.com, one entry per line.

Jadi wildcardnya pake "spf" (tanpa kutip) ya Pak? bukan * (bintang)?

Mohon pencerahannya, terima kasih sebelumnya Pak.

Best regards, 
Agus 



--
--MDaemon-L--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server.

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com
Versi terakhir MD 17.0.3, SP 5.1.0, OC 4.5.1, SG 4.5.1

[MDaemon-L] spf policy

2017-09-12 Terurut Topik Syafril Hermansyah 
On 09/09/17 17:05, Syafril Hermansyah wrote:
> 
> On September 9, 2017 3:54:48 PM GMT+07:00, "Sucipto ( BSSJ - IT )" 
>  wrote:
> 
>> bagaimana cara melewatkan email yang terkena spf policy?
> Masukkan sender  kedalam SPF whitelist.
> 
> http://mdaemon.dutaint.co.id/mdaemon/17.0.1/index.html?security--spf__sender_id.htm
> 
> Kalau domain, gunakan format
> 
> from *@domain.tld


Maaf koreksi, yang diatas itu untuk DNS-BL whitelist.
Format yang benar untuk SPF whitelist domain adalah

spf domain.tld

misalkan

spf nyomo.com





-- 
syafril
---
Syafril Hermansyah
MDaemon-L Moderators, running MDaemon 17.5.0-64 Beta RC2, SP 5.1-64
Harap tidak cc: atau kirim ke private mail untuk masalah MDaemon.

Competition is the keen cutting edge of business, always shaving away at
costs.
--- Henry Ford


-- 
--MDaemon-L--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server.

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com
Versi terakhir MD 17.0.3, SP 5.1.0, OC 4.5.1, SG 4.5.1

[MDaemon-L] spf policy

2017-09-09 Terurut Topik Syafril Hermansyah 


On September 9, 2017 3:54:48 PM GMT+07:00, "Sucipto ( BSSJ - IT )" 
 wrote:

>bagaimana cara melewatkan email yang terkena spf policy?

Masukkan sender  kedalam SPF whitelist.

http://mdaemon.dutaint.co.id/mdaemon/17.0.1/index.html?security--spf__sender_id.htm

Kalau domain, gunakan format

from *@domain.tld




-- 
syafril
--
Syafril Hermansyah

Sent from my Android device with K-9 Mail. Please excuse any typo and my 
brevity.

--
--MDaemon-L--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server.

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com
Versi terakhir MD 17.0.3, SP 5.1.0, OC 4.5.1, SG 4.5.1

[MDaemon-L] spf policy

2017-09-09 Terurut Topik Sucipto ( BSSJ - IT ) 
dear Mr.Syafril,

bagaimana cara melewatkan email yang terkena spf policy?

Thu 2017-09-07 13:57:33.289: --
Thu 2017-09-07 13:57:30.100: Session 462899; child 0002
Thu 2017-09-07 13:57:30.100: Accepting SMTP connection from 
209.85.216.182:38801 to 10.0.1.60:25
Thu 2017-09-07 13:57:30.100: --> 220 mail.bintangsaudara.com ESMTP MDaemon 
17.0.2; Thu, 07 Sep 2017 13:57:30 +0700
Thu 2017-09-07 13:57:30.333: <-- EHLO mail-qt0-f182.google.com
Thu 2017-09-07 13:57:30.335: --> 250-mail.bintangsaudara.com Hello 
mail-qt0-f182.google.com [209.85.216.182], pleased to meet you
Thu 2017-09-07 13:57:30.335: --> 250-ETRN
Thu 2017-09-07 13:57:30.335: --> 250-AUTH LOGIN CRAM-MD5 PLAIN
Thu 2017-09-07 13:57:30.335: --> 250-8BITMIME
Thu 2017-09-07 13:57:30.335: --> 250-ENHANCEDSTATUSCODES
Thu 2017-09-07 13:57:30.335: --> 250-STARTTLS
Thu 2017-09-07 13:57:30.335: --> 250 SIZE
Thu 2017-09-07 13:57:30.568: <-- STARTTLS
Thu 2017-09-07 13:57:30.568: --> 220 2.7.0 Ready to start TLS
Thu 2017-09-07 13:57:31.042: SSL negotiation successful (TLS 1.2, 256 bit key 
exchange, 256 bit AES encryption)
Thu 2017-09-07 13:57:31.275: <-- EHLO mail-qt0-f182.google.com
Thu 2017-09-07 13:57:31.277: --> 250-mail.bintangsaudara.com Hello 
mail-qt0-f182.google.com [209.85.216.182], pleased to meet you
Thu 2017-09-07 13:57:31.277: --> 250-ETRN
Thu 2017-09-07 13:57:31.277: --> 250-AUTH LOGIN CRAM-MD5 PLAIN
Thu 2017-09-07 13:57:31.277: --> 250-8BITMIME
Thu 2017-09-07 13:57:31.277: --> 250-ENHANCEDSTATUSCODES
Thu 2017-09-07 13:57:31.277: --> 250 SIZE
Thu 2017-09-07 13:57:31.510: <-- MAIL FROM: SIZE=7193
Thu 2017-09-07 13:57:31.516: Performing PTR lookup (182.216.85.209.IN-ADDR.ARPA)
Thu 2017-09-07 13:57:31.529: *  D=182.216.85.209.IN-ADDR.ARPA TTL=(1440) 
PTR=[mail-qt0-f182.google.com]
Thu 2017-09-07 13:57:31.554: *  D=mail-qt0-f182.google.com TTL=(1440) 
A=[209.85.216.182]
Thu 2017-09-07 13:57:31.554:  End PTR results
Thu 2017-09-07 13:57:31.559: Performing IP lookup (mail-qt0-f182.google.com)
Thu 2017-09-07 13:57:31.560: *  D=mail-qt0-f182.google.com TTL=(1440) 
A=[209.85.216.182]
Thu 2017-09-07 13:57:31.560:  End IP lookup results
Thu 2017-09-07 13:57:31.567: Performing IP lookup (nyomo.com)
Thu 2017-09-07 13:57:31.813: *  D=nyomo.com TTL=(240) A=[128.199.84.228]
Thu 2017-09-07 13:57:31.815: *  P=000 S=002 D=nyomo.com TTL=(233) 
MX=[aspmx.l.google.com]
Thu 2017-09-07 13:57:31.815: *  P=005 S=003 D=nyomo.com TTL=(233) 
MX=[alt2.aspmx.l.google.com]
Thu 2017-09-07 13:57:31.815: *  P=005 S=004 D=nyomo.com TTL=(233) 
MX=[alt1.aspmx.l.google.com]
Thu 2017-09-07 13:57:31.815: *  P=010 S=000 D=nyomo.com TTL=(233) 
MX=[alt3.aspmx.l.google.com]
Thu 2017-09-07 13:57:31.815: *  P=010 S=001 D=nyomo.com TTL=(233) 
MX=[alt4.aspmx.l.google.com]
Thu 2017-09-07 13:57:31.816: *  D=aspmx.l.google.com TTL=(4) A=[74.125.68.27]
Thu 2017-09-07 13:57:31.818: *  D=alt2.aspmx.l.google.com TTL=(1) 
A=[74.125.198.27]
Thu 2017-09-07 13:57:31.820: *  D=alt1.aspmx.l.google.com TTL=(1) 
A=[74.125.28.26]
Thu 2017-09-07 13:57:31.821: *  D=alt3.aspmx.l.google.com TTL=(1) 
A=[64.233.182.26]
Thu 2017-09-07 13:57:31.823: *  D=alt4.aspmx.l.google.com TTL=(2) 
A=[173.194.219.26]
Thu 2017-09-07 13:57:31.823:  End IP lookup results
Thu 2017-09-07 13:57:31.827: Performing SPF lookup (nyomo.com / 209.85.216.182)
Thu 2017-09-07 13:57:32.073: *  Policy: v=spf1 a mx 
include:spf.braintreegateway.com -all
Thu 2017-09-07 13:57:32.075: *  Evaluating a: no match
Thu 2017-09-07 13:57:32.083: *  Evaluating mx: no match
Thu 2017-09-07 13:57:32.083: *  Evaluating include:spf.braintreegateway.com: 
performing lookup
Thu 2017-09-07 13:57:32.096: *Policy: v=spf1 +ip4:63.146.102.40 
+ip4:184.105.251.240 +ip4:205.219.64.40 +ip4:209.117.187.240 -all
Thu 2017-09-07 13:57:32.096: *Evaluating +ip4:63.146.102.40: no match
Thu 2017-09-07 13:57:32.096: *Evaluating +ip4:184.105.251.240: no match
Thu 2017-09-07 13:57:32.097: *Evaluating +ip4:205.219.64.40: no match
Thu 2017-09-07 13:57:32.097: *Evaluating +ip4:209.117.187.240: no match
Thu 2017-09-07 13:57:32.097: *Evaluating -all: match
Thu 2017-09-07 13:57:32.097: *  Evaluating include:spf.braintreegateway.com: no 
match
Thu 2017-09-07 13:57:32.097: *  Evaluating -all: match
Thu 2017-09-07 13:57:32.097: *  Result: fail
Thu 2017-09-07 13:57:32.097: Message will be rejected after DMARC processing.
Thu 2017-09-07 13:57:32.097:  End SPF results
Thu 2017-09-07 13:57:32.097: --> 250 2.1.0 Sender OK
Thu 2017-09-07 13:57:32.330: <-- RCPT TO:
Thu 2017-09-07 13:57:32.340: Performing DNS-BL lookup (209.85.216.182 - 
connecting IP)
Thu 2017-09-07 13:57:32.576: *  zen.spamhaus.org - passed
Thu 2017-09-07 13:57:32.576:  End DNS-BL results
Thu 2017-09-07 13:57:32.576: --> 250 2.1.5 Recipient OK
Thu 2017-09-07 13:57:32.810: <-- DATA
Thu 2017-09-07 13:57:32.811: Creating temp file (SMTP): 
c:\mdaemon\queues\temp\md5002826.tmp
Thu 2017-09-07 13:57:32.811: --> 354 Enter mail, end