[mdaemon-l] Backscatter Protection detected an invalid or expired email address
On 09/11/18 13.16, Suzy Ariyani (s...@ptbmi.com) wrote: > Fri 2018-11-09 12:41:52.929: [593448] <-- MAIL FROM:<> SIZE=3797 > Fri 2018-11-09 12:41:53.563: [593448] <-- RCPT TO: > Fri 2018-11-09 12:41:53.564: [593448] --> 550 5.1.1 Backscatter Protection > detected an invalid or expired email address > Bagaimana cara menanggulanginya Bukan untuk ditanggulangi, tetapi bersyukurlah bahwa anti backscatter (BATV) berjalan baik sehingga terhindar dari phising spam atau misdirected bounces. Null Sender <> digunakan oleh mail server untuk memberitahukan adanya masalah (teknis) ke postmaster (DSN) atau tolakkan (bounce) ke sender, terkadang disebut juga dengan nama Mail-MDaemon. Bounce itu ditujukan ke original sender, dalam hal ini ke j...@ptbmi.com, yang kemungkinan besar worm virus sender yang mengaku from addressnya j...@ptbmi.com sehingga bouncenya salah arah (backscatter). https://en.wikipedia.org/wiki/Backscatter_(email) Kalau mail asli dari j...@ptbmi.com akan ada Simple Private Signature karena diproteksi dengan BATV (Bounce Address Tag Validation) oleh MDaemon bb.ptbmi.com, menjadi seperti ini : prvs=tag-value=j...@ptbmi.com https://en.wikipedia.org/wiki/Bounce_Address_Tag_Validation -- syafril --- Syafril Hermansyah MDaemon-L Moderators, running MDaemon 18.5.1-64 bit Beta RC1 Harap tidak cc: atau kirim ke private mail untuk masalah MDaemon. The only thing that stands between you and your dream is the will to try and the belief that it is actually possible. --- Joel Brown -- --[mdaemon-l]-- Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette Arsip: http://mdaemon-l.dutaint.com Dokumentasi : http://mdaemon.dutaint.co.id Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com Versi terakhir MD 18.5.0, SG 5.5.0
[mdaemon-l] Backscatter Protection detected an invalid or expired email address
Smangat pagi Pak Syafril SMTP-(In).log ada log sbb: Fri 2018-11-09 12:41:51.978: [593448] Session 593448; child 0002 Fri 2018-11-09 12:41:51.978: [593448] Accepting SMTP connection from 72.164.201.176:44679 to 172.16.0.6:25 Fri 2018-11-09 12:41:51.979: [593448] --> 220 bb.ptbmi.com ESMTP MDaemon 18.0.2; Fri, 09 Nov 2018 12:41:51 +0700 Fri 2018-11-09 12:41:52.214: [593448] <-- EHLO mail.aquastar.com Fri 2018-11-09 12:41:52.214: [593448] Performing SPF lookup (mail.aquastar.com / 72.164.201.176) Fri 2018-11-09 12:41:52.696: [593448] * Result: none; no SPF record in DNS Fri 2018-11-09 12:41:52.696: [593448] End SPF results Fri 2018-11-09 12:41:52.696: [593448] --> 250-bb.ptbmi.com Hello mail.aquastar.com [72.164.201.176], pleased to meet you Fri 2018-11-09 12:41:52.696: [593448] --> 250-ETRN Fri 2018-11-09 12:41:52.696: [593448] --> 250-AUTH LOGIN PLAIN Fri 2018-11-09 12:41:52.696: [593448] --> 250-8BITMIME Fri 2018-11-09 12:41:52.696: [593448] --> 250-ENHANCEDSTATUSCODES Fri 2018-11-09 12:41:52.696: [593448] --> 250-STARTTLS Fri 2018-11-09 12:41:52.696: [593448] --> 250 SIZE 3584 Fri 2018-11-09 12:41:52.929: [593448] <-- MAIL FROM:<> SIZE=3797 Fri 2018-11-09 12:41:52.932: [593448] Performing PTR lookup (176.201.164.72.IN-ADDR.ARPA) Fri 2018-11-09 12:41:53.164: [593448] * D=176.201.164.72.in-addr.arpa TTL=(1440) PTR=[mail.aquastar.com] Fri 2018-11-09 12:41:53.210: [593448] * D=mail.aquastar.com TTL=(60) A=[72.164.201.176] Fri 2018-11-09 12:41:53.210: [593448] End PTR results Fri 2018-11-09 12:41:53.211: [593448] Performing IP lookup (mail.aquastar.com) Fri 2018-11-09 12:41:53.212: [593448] * D=mail.aquastar.com TTL=(60) A=[72.164.201.176] Fri 2018-11-09 12:41:53.212: [593448] End IP lookup results Fri 2018-11-09 12:41:53.213: [593448] Performing SPF lookup (mail.aquastar.com / 72.164.201.176) Fri 2018-11-09 12:41:53.335: [593448] * Result: none; no SPF record in DNS Fri 2018-11-09 12:41:53.335: [593448] End SPF results Fri 2018-11-09 12:41:53.335: [593448] --> 250 2.1.0 Sender OK Fri 2018-11-09 12:41:53.563: [593448] <-- RCPT TO: Fri 2018-11-09 12:41:53.563: [593448] Performing Backscatter Protection... Fri 2018-11-09 12:41:53.563: [593448] * Address: j...@ptbmi.com Fri 2018-11-09 12:41:53.563: [593448] * Verifier: Fri 2018-11-09 12:41:53.563: [593448] * Result: fail Fri 2018-11-09 12:41:53.564: [593448] * Reject: Yes Fri 2018-11-09 12:41:53.564: [593448] --- End Backscatter Protection Fri 2018-11-09 12:41:53.564: [593448] --> 550 5.1.1 Backscatter Protection detected an invalid or expired email address Fri 2018-11-09 12:41:58.931: [593448] <-- QUIT Fri 2018-11-09 12:41:58.931: [593448] --> 221 2.0.0 See ya in cyberspace Fri 2018-11-09 12:41:58.931: [593448] SMTP session terminated (Bytes in/out: 80/388) Fri 2018-11-09 12:41:58.933: -- Diketahui: Fri 2018-11-09 12:41:53.563: [593448] * Address: j...@ptbmi.com Fri 2018-11-09 12:41:53.563: [593448] * Verifier: Fri 2018-11-09 12:41:53.563: [593448] * Result: fail Fri 2018-11-09 12:41:53.564: [593448] * Reject: Yes Fri 2018-11-09 12:41:53.564: [593448] --- End Backscatter Protection Fri 2018-11-09 12:41:53.564: [593448] --> 550 5.1.1 Backscatter Protection detected an invalid or expired email address Bagaimana cara menanggulanginya? Mohon pencerahan.. thanks Suzy -- --[mdaemon-l]-- Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette Arsip: http://mdaemon-l.dutaint.com Dokumentasi : http://mdaemon.dutaint.co.id Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com Versi terakhir MD 18.5.0, SG 5.5.0
