[MDaemon-L] Email tidak bisa masuk

2016-08-01 Terurut Topik Syafril Hermansyah
On 02/08/16 10:45, agfirmans...@ptist.co.id -- Agus Firmansyah wrote:
> Ada saran pak untuk settingan greylisting yang baik (yang perlu di checklist
> dan tidak) ?


Aktifkan saja menu-2x berikut


[x] Don't greylist subsequent connections which pass SPF processing
[x] Don't greylist messages from mailing lists
[x] Don't greylist mail sent over authenticated sessions

masukkan kedalam whitelist sender host/IP/domain/address dari sender
domain yang sering berkorespondensi dengan user Anda.


>> Non aktifkan VBR check, yang di MD 11.x belum bisa mendeteksi apakah
>> sender domain menerapkan VBR protocol atau tidak --> menghabiskan
>> resources.
>>
>> http://mdaemon.dutaint.co.id/mdaemon/16.0.3/index.html?security--
>> certification.htm
>>
>> [ ] Enable VBR message certification
>>
> 
> MD kami masih MD 11.x


Iya, makanya belum ada menu

[ ] Perform VBR check even if incoming message lacks VBR-info header




-- 
syafril
---
Syafril Hermansyah
MDaemon-L Moderators, MDaemon 16.5-64 Beta A, SP 5.0.1-64
Harap tidak cc: atau kirim ke private mail untuk masalah MDaemon.

The only thing that stands between you and your dream is the will to try
and the belief that it is actually possible.
---  Joel Brown


-- 
--MDaemon-L--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server.

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Henti Langgan: Kirim mail ke MDaemon-L-unsubscribe [at] dutaint.com
Berlangganan: kirim mail ke MDaemon-L-subscribe [at] dutaint.com
Versi terakhir MD 16.0.4, SP 5.0.1, OC 3.6.0, SG 4.0.1





[MDaemon-L] Email tidak bisa masuk

2016-08-01 Terurut Topik Agus Firmansyah
Dear Pak Syafril,

> 
> Wait XX seconds for A/ responses
> 
> naikkan nilainya 6 kali.
> 

Baik, sudah saya naikkan sesuai saran

> 
> Non aktifkan PTR check.
> 
> > Tue 2016-08-02 08:15:16: *  Gathering A records...
> 
> No aktifkan HELO/EHLO check
> 
> 
> http://mdaemon.dutaint.co.id/mdaemon/16.0.3/index.html?security--
> reverse_lookup.htm
> 
> [ ] Perform PTR lookup on inbound SMTP connections
> 
> [ ] Perform lookup on HELO/EHLO domain
> 
> sebagai gantinya bisa aktifkan greylisting

Ada saran pak untuk settingan greylisting yang baik (yang perlu di checklist
dan tidak) ?

> http://mdaemon.dutaint.co.id/mdaemon/16.0.3/index.html?security--
> greylisting.htm
> 
> > Tue 2016-08-02 08:15:26: Performing VBR certification (Domain:
> > cmwindonesia.onmicrosoft.com, Auth: DKIM)
> 
> 
> Non aktifkan VBR check, yang di MD 11.x belum bisa mendeteksi apakah
> sender domain menerapkan VBR protocol atau tidak --> menghabiskan
> resources.
> 
> http://mdaemon.dutaint.co.id/mdaemon/16.0.3/index.html?security--
> certification.htm
> 
> [ ] Enable VBR message certification
> 

MD kami masih MD 11.x


Terima kasih,
Agus Firmansyah


-- 
--MDaemon-L--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server.

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Henti Langgan: Kirim mail ke MDaemon-L-unsubscribe [at] dutaint.com
Berlangganan: kirim mail ke MDaemon-L-subscribe [at] dutaint.com
Versi terakhir MD 16.0.4, SP 5.0.1, OC 3.6.0, SG 4.0.1





[MDaemon-L] Email tidak bisa masuk

2016-08-01 Terurut Topik Syafril Hermansyah
On 02/08/16 09:46, agfirmans...@ptist.co.id -- Agus Firmansyah wrote:
> Ada salah satu email dari luar yang tidak bisa diterima user kami, berikut
> lognya :


> Tue 2016-08-02 08:15:37: *  Winsock Error 10054 Connection was reset by the
> other side!

> Hal tersebut diatas kenapa ya ?

Sender time out sebelum menyelesaikan pengiriman mail data.


> Tue 2016-08-02 08:15:36: *  DNS: 10 second wait for DNS response exceeded 

Idle time out DNS query (lookup) terlalu singkat.


http://mdaemon.dutaint.co.id/mdaemon/16.0.3/index.html?default-domain-and-servers_timouts.htm

Wait XX seconds for A/ responses

naikkan nilainya 6 kali.


Non aktifkan saja filtering yang tidak perlu agar sender punya cukup
untuk kirim mail dengan sukses.


> Tue 2016-08-02 08:15:16: Performing PTR lookup (87.124.47.104.IN-ADDR.ARPA)

Non aktifkan PTR check.

> Tue 2016-08-02 08:15:16: *  Gathering A records...

No aktifkan HELO/EHLO check


http://mdaemon.dutaint.co.id/mdaemon/16.0.3/index.html?security--reverse_lookup.htm

[ ] Perform PTR lookup on inbound SMTP connections

[ ] Perform lookup on HELO/EHLO domain

sebagai gantinya bisa aktifkan greylisting


http://mdaemon.dutaint.co.id/mdaemon/16.0.3/index.html?security--greylisting.htm

> Tue 2016-08-02 08:15:26: Performing VBR certification (Domain:
> cmwindonesia.onmicrosoft.com, Auth: DKIM)


Non aktifkan VBR check, yang di MD 11.x belum bisa mendeteksi apakah
sender domain menerapkan VBR protocol atau tidak --> menghabiskan resources.

http://mdaemon.dutaint.co.id/mdaemon/16.0.3/index.html?security--certification.htm

[ ] Enable VBR message certification








-- 
syafril
---
Syafril Hermansyah
MDaemon-L Moderators, MDaemon 16.5-64 Beta A, SP 5.0.1-64
Harap tidak cc: atau kirim ke private mail untuk masalah MDaemon.

Change is the end result of all true learning.
--- Leo Buscaglia


-- 
--MDaemon-L--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server.

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Henti Langgan: Kirim mail ke MDaemon-L-unsubscribe [at] dutaint.com
Berlangganan: kirim mail ke MDaemon-L-subscribe [at] dutaint.com
Versi terakhir MD 16.0.4, SP 5.0.1, OC 3.6.0, SG 4.0.1





[MDaemon-L] Blok Email sender yang selalu berubah

2016-08-01 Terurut Topik Syafril Hermansyah
On 02/08/16 09:26, dedetsapu...@kobexindo.com -- Dedet Saputra wrote:
> Sudah dimasukan ke ip/host screening, tapi hari ini ada yang masuk lagi
> ke beberapa email pak dengan subject dan isi yang sama, berikut log nya :
> 
> Tue 2016-08-02 00:39:59: --> 220 Begin TLS negotiation
> Tue 2016-08-02 00:39:59: SSL negotiation successful (TLS 1.0, 1024 bit
> key exchange, 256 bit AES encryption)
> Tue 2016-08-02 00:40:00: <-- EHLO u15281465.onlinehome-server.com

Ulangi memasukkan ip kedalam dynamic screening dan bayesian learning
system spam.

-- 
syafril
---
Syafril Hermansyah
MDaemon-L Moderators, MDaemon 16.5-64 Beta A, SP 5.0.1-64
Harap tidak cc: atau kirim ke private mail untuk masalah MDaemon.

Anda jangan memuji org krn nampaknya besar, atau memandang rendah org
krn kelihatannya kecil. Krn lebah tms kecil dikalangan binatang
bersayap, namun dialah yg menghasilkan madu termanis
-- Jezus Sirach, 11.


-- 
--MDaemon-L--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server.

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Henti Langgan: Kirim mail ke MDaemon-L-unsubscribe [at] dutaint.com
Berlangganan: kirim mail ke MDaemon-L-subscribe [at] dutaint.com
Versi terakhir MD 16.0.4, SP 5.0.1, OC 3.6.0, SG 4.0.1





[MDaemon-L] email tidak masuk

2016-08-01 Terurut Topik Syafril Hermansyah
On 02/08/16 09:31, ir...@mandau.id -- Irwan R Jazir wrote:
> Ada email dari domain customer yang beberapa tidak masuk ke kami pak. salah
> satu log emailnya.


> Mon 2016-08-01 17:57:49: Socket error sending response to DATA
> 
> Mon 2016-08-01 17:57:49: *  Winsock Error 10060 The connection timed out.


Kok sendernya sama semua?
Dan errornya masih sama dengan yl, sender time out sebelum sempat kirim
mail data dengan lengkap.

Non aktifkan saja filtering yang tidak perlu agar sender punya cukup
untuk kirim mail dengan sukses.

antara lain

> Mon 2016-08-01 17:56:51: Performing PTR lookup (55.168.59.202.IN-ADDR.ARPA)

Non aktifkan PTR check, karena MD 10.0 memang belum cukup fiturnya untuk
diaktifkan PTR check dengan rejection karena akan terkena ke user sendiri.

http://mdaemon.dutaint.co.id/mdaemon/16.0.3/index.html?security--reverse_lookup.htm

[ ] Perform PTR lookup on inbound SMTP connections


> Mon 2016-08-01 17:56:51: <-- EHLO jktmmavgw01.hutch.co.id
> 
> Mon 2016-08-01 17:56:51: Performing IP lookup (jktmmavgw01.hutch.co.id)

Non aktifkan HELO/EHLO check, dengan alasan yang sama dengan diatas.


[ ] Perform lookup on HELO/EHLO domain

sebagai gantinya bisa diaktifkan greylisting

http://mdaemon.dutaint.co.id/mdaemon/16.0.3/index.html?security--greylisting.htm


> Mon 2016-08-01 17:56:52: *Querying:
> three.co.id._vouch.vbr.emailcertification.org ...


Non aktifkan VBR check, yang di MD 10.x belum bisa mendeteksi apakah
sender domain menerapkan VBR protocol atau tidak --> menghabiskan resources.

http://mdaemon.dutaint.co.id/mdaemon/16.0.3/index.html?security--certification.htm

[ ] Enable VBR message certification


> Mon 2016-08-01 17:56:52: Passing message through Spam Filter (Size:
> 14012)...
> 
> Mon 2016-08-01 17:56:52: *  1.0 URIBL_RHS_AHBL Contains an URI listed in
> rhsbl.ahbl.org.


Non aktifkan URI-BL check yang banyak makan resources juga.

http://mdaemon.dutaint.co.id/mdaemon/16.0.3/index.html?sf_options.htm

Is DNS service available? = No












-- 
syafril
---
Syafril Hermansyah
MDaemon-L Moderators, MDaemon 16.5-64 Beta A, SP 5.0.1-64
Harap tidak cc: atau kirim ke private mail untuk masalah MDaemon.

Semua hal atau semua kesulitan dan semua pemborosan sebetulnya bisa kita
atasi, kalau mau. Jadi permasalahannya adalah bukan bisa atau tidak
bisa, tapi mau atau tidak mau.
--- Dahlan Iskan


-- 
--MDaemon-L--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server.

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Henti Langgan: Kirim mail ke MDaemon-L-unsubscribe [at] dutaint.com
Berlangganan: kirim mail ke MDaemon-L-subscribe [at] dutaint.com
Versi terakhir MD 16.0.4, SP 5.0.1, OC 3.6.0, SG 4.0.1





[MDaemon-L] Email tidak bisa masuk

2016-08-01 Terurut Topik Agus Firmansyah
Dear Pak Syafril,

Ada salah satu email dari luar yang tidak bisa diterima user kami, berikut
lognya :

Tue 2016-08-02 08:15:16: Session 2876; child 1; thread 0
Tue 2016-08-02 08:15:16: Accepting SMTP connection from
[104.47.124.87:27787] to [192.168.0.251:25]
Tue 2016-08-02 08:15:16: --> 220 mail.ptist.co.id ESMTP MDaemon 11.0.1; Tue,
02 Aug 2016 08:15:16 +0700
Tue 2016-08-02 08:15:16: <-- EHLO
APC01-HK2-obe.outbound.protection.outlook.com
Tue 2016-08-02 08:15:16: --> 250-mail.ptist.co.id Hello
APC01-HK2-obe.outbound.protection.outlook.com, pleased to meet you
Tue 2016-08-02 08:15:16: --> 250-ETRN
Tue 2016-08-02 08:15:16: --> 250-AUTH=LOGIN
Tue 2016-08-02 08:15:16: --> 250-AUTH LOGIN CRAM-MD5
Tue 2016-08-02 08:15:16: --> 250-8BITMIME
Tue 2016-08-02 08:15:16: --> 250 SIZE 1500
Tue 2016-08-02 08:15:16: <-- MAIL FROM: SIZE=26662
Tue 2016-08-02 08:15:16: Performing PTR lookup (87.124.47.104.IN-ADDR.ARPA)
Tue 2016-08-02 08:15:16: *  D=87.124.47.104.IN-ADDR.ARPA TTL=(60)
PTR=[mail-hk2apc01on0087.outbound.protection.outlook.com]
Tue 2016-08-02 08:15:16: *  Gathering A records...
Tue 2016-08-02 08:15:16: *
D=mail-hk2apc01on0087.outbound.protection.outlook.com TTL=(10)
A=[104.47.124.87]
Tue 2016-08-02 08:15:16:  End PTR results
Tue 2016-08-02 08:15:16: Performing IP lookup
(APC01-HK2-obe.outbound.protection.outlook.com)
Tue 2016-08-02 08:15:17: *  D=APC01-HK2-obe.outbound.protection.outlook.com
TTL=(10) A=[104.47.124.43]
Tue 2016-08-02 08:15:17: *  D=APC01-HK2-obe.outbound.protection.outlook.com
TTL=(10) A=[104.47.124.44]
Tue 2016-08-02 08:15:17: *  D=APC01-HK2-obe.outbound.protection.outlook.com
TTL=(10) A=[104.47.124.45]
Tue 2016-08-02 08:15:17: *  D=APC01-HK2-obe.outbound.protection.outlook.com
TTL=(10) A=[104.47.124.46]
Tue 2016-08-02 08:15:17: *  D=APC01-HK2-obe.outbound.protection.outlook.com
TTL=(10) A=[104.47.124.47]
Tue 2016-08-02 08:15:17: *  D=APC01-HK2-obe.outbound.protection.outlook.com
TTL=(10) A=[104.47.124.48]
Tue 2016-08-02 08:15:17: *  D=APC01-HK2-obe.outbound.protection.outlook.com
TTL=(10) A=[104.47.124.49]
Tue 2016-08-02 08:15:17: *  D=APC01-HK2-obe.outbound.protection.outlook.com
TTL=(10) A=[65.55.88.207]
Tue 2016-08-02 08:15:17: *  D=APC01-HK2-obe.outbound.protection.outlook.com
TTL=(10) A=[104.47.124.40]
Tue 2016-08-02 08:15:17: *  D=APC01-HK2-obe.outbound.protection.outlook.com
TTL=(10) A=[104.47.124.41]
Tue 2016-08-02 08:15:17: *  D=APC01-HK2-obe.outbound.protection.outlook.com
TTL=(10) A=[104.47.124.42]
Tue 2016-08-02 08:15:17:  End IP lookup results
Tue 2016-08-02 08:15:17: Performing IP lookup (cmwi.co.id)
Tue 2016-08-02 08:15:17: *  D=cmwi.co.id TTL=(480) A=[128.199.119.158]
Tue 2016-08-02 08:15:17: *  P=000 S=000 D=cmwi.co.id TTL=(60)
MX=[cmwi-co-id.mail.protection.outlook.com]
Tue 2016-08-02 08:15:17: *  D=cmwi.co.id TTL=(480) A=[128.199.119.158]
Tue 2016-08-02 08:15:17:  End IP lookup results
Tue 2016-08-02 08:15:17: --> 250 , Sender ok
Tue 2016-08-02 08:15:17: <-- RCPT TO:
Tue 2016-08-02 08:15:17: --> 250 , Recipient ok
Tue 2016-08-02 08:15:17: <-- RCPT TO:
Tue 2016-08-02 08:15:17: --> 250 , Recipient ok
Tue 2016-08-02 08:15:17: <-- DATA
Tue 2016-08-02 08:15:17: Creating temp file (SMTP):
d:\mdaemon\queues\temp\md5000367.tmp
Tue 2016-08-02 08:15:17: --> 354 Enter mail, end with .
Tue 2016-08-02 08:15:17: Message size: 20854 bytes
Tue 2016-08-02 08:15:17: Performing DKIM lookup
Tue 2016-08-02 08:15:17: *  File: d:\mdaemon\queues\temp\md5000367.tmp
Tue 2016-08-02 08:15:17: *  Message-ID:
kl1pr01mb134910416095deb4d1188c918e...@kl1pr01mb1349.apcprd01.prod.exchangel
abs.com
Tue 2016-08-02 08:15:26: * Signature (1):
;v=1;a=rsa-sha256;c=relaxed/relaxed;d=cmwindonesia.onmicrosoft.com;s=selecto
r1-cmwi-co-id;b h=;
Tue 2016-08-02 08:15:26: *Verification result: [0] good
Tue 2016-08-02 08:15:26: *  Result: pass
Tue 2016-08-02 08:15:26:  End DKIM results
Tue 2016-08-02 08:15:26: Performing VBR certification (Domain:
cmwindonesia.onmicrosoft.com, Auth: DKIM)
Tue 2016-08-02 08:15:26: *  File: d:\mdaemon\queues\temp\md5000367.tmp
Tue 2016-08-02 08:15:26: *  Message-ID:
kl1pr01mb134910416095deb4d1188c918e...@kl1pr01mb1349.apcprd01.prod.exchangel
abs.com
Tue 2016-08-02 08:15:26: *  Certifier (trusted): vbr.emailcertification.org
...
Tue 2016-08-02 08:15:26: *Querying:
cmwindonesia.onmicrosoft.com._vouch.vbr.emailcertification.org ...
Tue 2016-08-02 08:15:36: *  DNS: 10 second wait for DNS response exceeded 
Tue 2016-08-02 08:15:36: *
D=cmwindonesia.onmicrosoft.com._vouch.vbr.emailcertification.org TTL=(5)
A=[36.86.63.180]
Tue 2016-08-02 08:15:36: *Certification record: 
Tue 2016-08-02 08:15:36: *  Certification result: message not certified
Tue 2016-08-02 08:15:36:  End VBR results
Tue 2016-08-02 08:15:36: Passing message through AntiVirus (Size: 20854)...
Tue 2016-08-02 08:15:36: *  Message is clean (no viruses found)
Tue 2016-08-02 08:15:36:  End AntiVirus results
Tue 2016-08-02 08:15:37: Socket error sending response to DATA
Tue 2016-08-02 08:

[MDaemon-L] Blok Email sender yang selalu berubah

2016-08-01 Terurut Topik Dedet Saputra

On 2016-08-01 1:18 PM, Syafril Hermansyah wrote:


Sebenarnya lebih cocok dimasukkan ke  Bayesian Learning system kalau
IP/host sender berubah-ubah.
Memasukkan ke Ip/host screening untuk mempercepat saja.


Sudah dimasukan ke ip/host screening, tapi hari ini ada yang masuk lagi 
ke beberapa email pak dengan subject dan isi yang sama, berikut log nya :


Tue 2016-08-02 00:39:59: --> 220 Begin TLS negotiation
Tue 2016-08-02 00:39:59: SSL negotiation successful (TLS 1.0, 1024 bit 
key exchange, 256 bit AES encryption)

Tue 2016-08-02 00:40:00: <-- EHLO u15281465.onlinehome-server.com
Tue 2016-08-02 00:40:00: --> 250-mailhub.kobexindo.com Hello 
u15281465.onlinehome-server.com, pleased to meet you

Tue 2016-08-02 00:40:00: --> 250-ETRN
Tue 2016-08-02 00:40:00: --> 250-AUTH LOGIN CRAM-MD5 PLAIN
Tue 2016-08-02 00:40:00: --> 250-8BITMIME
Tue 2016-08-02 00:40:00: --> 250 SIZE
Tue 2016-08-02 00:40:00: <-- MAIL FROM: 
SIZE=53058

Tue 2016-08-02 00:40:00: Performing PTR lookup (163.14.208.74.IN-ADDR.ARPA)
Tue 2016-08-02 00:40:00: *  D=163.14.208.74.IN-ADDR.ARPA TTL=(1390) 
PTR=[u15281465.onlinehome-server.com]

Tue 2016-08-02 00:40:00: *  Gathering A records...
Tue 2016-08-02 00:40:00: *  D=u15281465.onlinehome-server.com TTL=(1311) 
A=[74.208.14.163]

Tue 2016-08-02 00:40:00:  End PTR results
Tue 2016-08-02 00:40:00: Performing IP lookup 
(u15281465.onlinehome-server.com)
Tue 2016-08-02 00:40:00: *  D=u15281465.onlinehome-server.com TTL=(1311) 
A=[74.208.14.163]

Tue 2016-08-02 00:40:00:  End IP lookup results
Tue 2016-08-02 00:40:00: Performing IP lookup (cottagegardener.com)
Tue 2016-08-02 00:40:00: *  D=cottagegardener.com TTL=(1311) 
A=[74.208.14.163]

Tue 2016-08-02 00:40:00:  End IP lookup results
Tue 2016-08-02 00:40:00: Performing SPF lookup (cottagegardener.com / 
74.208.14.163)
Tue 2016-08-02 00:40:00: *  cottagegardener.com 74.208.14.163; matched 
to SPF cache

Tue 2016-08-02 00:40:00: *  Result: pass
Tue 2016-08-02 00:40:00:  End SPF results
Tue 2016-08-02 00:40:00: --> 250 , Sender ok
Tue 2016-08-02 00:40:00: <-- RCPT TO:
Tue 2016-08-02 00:40:00: Performing DNS-BL lookup (74.208.14.163 - 
connecting IP)

Tue 2016-08-02 00:40:00: *  zen.spamhaus.org - passed
Tue 2016-08-02 00:40:00:  End DNS-BL results
Tue 2016-08-02 00:40:00: --> 250 , Recipient ok
Tue 2016-08-02 00:40:01: <-- DATA
Tue 2016-08-02 00:40:01: Creating temp file (SMTP): 
d:\mdaemon\queues\temp\md5400762.tmp

Tue 2016-08-02 00:40:01: --> 354 Enter mail, end with .
Tue 2016-08-02 00:40:02: Message size: 53068 bytes
Tue 2016-08-02 00:40:02: Performing VBR certification (Domain: 
cottagegardener.com, Auth: SPF)

Tue 2016-08-02 00:40:02: *  File: d:\mdaemon\queues\temp\md5400762.tmp
Tue 2016-08-02 00:40:02: *  Message-ID: n/a
Tue 2016-08-02 00:40:02: *  Certifier (trusted): 
vbr.emailcertification.org ...
Tue 2016-08-02 00:40:02: *Querying: 
cottagegardener.com._vouch.vbr.emailcertification.org ...

Tue 2016-08-02 00:40:02: *Certifier does not recognize that domain
Tue 2016-08-02 00:40:02: *  Certification result: message not certified
Tue 2016-08-02 00:40:02:  End VBR results
Tue 2016-08-02 00:40:02: Performing DKIM lookup
Tue 2016-08-02 00:40:02: *  File: d:\mdaemon\queues\temp\md5400762.tmp
Tue 2016-08-02 00:40:02: *  Message-ID: n/a
Tue 2016-08-02 00:40:03: *  Result: neutral
Tue 2016-08-02 00:40:03:  End DKIM results
Tue 2016-08-02 00:40:03: Performing DomainKeys lookup (Sender: 
heirlo...@cottagegardener.com)

Tue 2016-08-02 00:40:03: *  File: d:\mdaemon\queues\temp\md5400762.tmp
Tue 2016-08-02 00:40:03: *  Message-ID: n/a
Tue 2016-08-02 00:40:03: *  Querying for policy: cottagegardener.com
Tue 2016-08-02 00:40:03: *Querying: _domainkey.cottagegardener.com ...
Tue 2016-08-02 00:40:03: *DNS: *  Name server reports domain name 
unknown

Tue 2016-08-02 00:40:03: *  Result: neutral
Tue 2016-08-02 00:40:03:  End DomainKeys results
Tue 2016-08-02 00:40:03: Passing message through AntiVirus (Size: 53068)...
Tue 2016-08-02 00:40:03: *  Message is clean (no viruses found)
Tue 2016-08-02 00:40:03:  End AntiVirus results
Tue 2016-08-02 00:40:03: Passing message through Outbreak Protection...
Tue 2016-08-02 00:40:03: *  Message-ID:
Tue 2016-08-02 00:40:03: *  Reference-ID: 
str=0001.0A150209.579F8972.0089:SCFSTAT37693365,ss=1,re=-4.000,recu=0.000,reip=0.000,vtr=str,vl=0,cl=1,cld=1,fgs=0

Tue 2016-08-02 00:40:03: *  Virus result: 0 - Clean
Tue 2016-08-02 00:40:03: *  Spam result: 1 - Clean
Tue 2016-08-02 00:40:03: *  IWF result: 0 - Clean
Tue 2016-08-02 00:40:03:  End Outbreak Protection results
Tue 2016-08-02 00:40:03: Passing message through Spam Filter (Size: 
53068)...
Tue 2016-08-02 00:40:03: *  1.5 HTML_IMAGE_ONLY_20 BODY: HTML: images 
with 1600-2000 bytes of words
Tue 2016-08-02 00:40:03: * -4.7 BAYES_00 BODY: Bayes spam probability is 
0 to 1%

Tue 2016-08-02 00:40:03: *  [score: 0.]
Tue 2016-08-02 00:40:03: *  0.0 HTML_MESSAGE BODY: HTML included in message
Tue 2

[MDaemon-L] email tidak masuk

2016-08-01 Terurut Topik Irwan R Jazir
Dear Pak Syafril,

 

Ada email dari domain customer yang beberapa tidak masuk ke kami pak. salah
satu log emailnya.

 

Mon 2016-08-01 17:57:44: --

Mon 2016-08-01 17:57:49: Session 869; child 5; thread 2052

Mon 2016-08-01 17:56:51: Accepting SMTP connection from
[202.59.168.55:50193]

Mon 2016-08-01 17:56:51: Performing PTR lookup (55.168.59.202.IN-ADDR.ARPA)

Mon 2016-08-01 17:56:51: *  D=55.168.59.202.IN-ADDR.ARPA TTL=(0)
PTR=[IP-168-55.nap.net.id]

Mon 2016-08-01 17:56:51: *  Gathering A records...

Mon 2016-08-01 17:56:51:  End PTR results

Mon 2016-08-01 17:56:51: --> 220 mail.imprima.co.id ESMTP MDaemon 10.0.2;
Mon, 01 Aug 2016 17:56:51 +0700

Mon 2016-08-01 17:56:51: <-- EHLO jktmmavgw01.hutch.co.id

Mon 2016-08-01 17:56:51: Performing IP lookup (jktmmavgw01.hutch.co.id)

Mon 2016-08-01 17:56:51: *  Error: *  Name server reports domain name
unknown

Mon 2016-08-01 17:56:51:  End IP lookup results

Mon 2016-08-01 17:56:51: --> 250-mail.imprima.co.id Hello
IP-168-55.nap.net.id, pleased to meet you

Mon 2016-08-01 17:56:51: --> 250-ETRN

Mon 2016-08-01 17:56:51: --> 250-AUTH=LOGIN

Mon 2016-08-01 17:56:51: --> 250-AUTH LOGIN CRAM-MD5

Mon 2016-08-01 17:56:51: --> 250-8BITMIME

Mon 2016-08-01 17:56:51: --> 250 SIZE 5000

Mon 2016-08-01 17:56:51: <-- MAIL FROM: SIZE=14012

Mon 2016-08-01 17:56:51: Performing IP lookup (three.co.id)

Mon 2016-08-01 17:56:51: *  D=three.co.id TTL=(10) A=[180.214.234.38]

Mon 2016-08-01 17:56:51: *  P=005 S=001 D=three.co.id TTL=(30)
MX=[mx.three.co.id]

Mon 2016-08-01 17:56:51: *  P=030 S=000 D=three.co.id TTL=(30)
MX=[mx2.three.co.id]

Mon 2016-08-01 17:56:51: *  D=three.co.id TTL=(10) A=[180.214.234.38]

Mon 2016-08-01 17:56:51: *  D=three.co.id TTL=(10) A=[180.214.234.38]

Mon 2016-08-01 17:56:51:  End IP lookup results

Mon 2016-08-01 17:56:51: Performing SPF lookup (three.co.id / 202.59.168.55)

Mon 2016-08-01 17:56:51: *  Policy: v=spf1 mx ip4:180.214.234.3
ip4:180.214.234.4 mx:mx.three.co.id mx:mx2.three.co.id ~all

Mon 2016-08-01 17:56:51: *  Evaluating mx: match

Mon 2016-08-01 17:56:51: *  Result: pass

Mon 2016-08-01 17:56:51:  End SPF results

Mon 2016-08-01 17:56:51: --> 250 , Sender ok

Mon 2016-08-01 17:56:51: <-- RCPT TO:

Mon 2016-08-01 17:56:51: Performing DNS-BL lookup (202.59.168.55 -
connecting IP)

Mon 2016-08-01 17:56:51: *  zen.spamhaus.org - passed

Mon 2016-08-01 17:56:51:  End DNS-BL results

Mon 2016-08-01 17:56:51: --> 250 , Recipient ok

Mon 2016-08-01 17:56:51: <-- DATA

Mon 2016-08-01 17:56:51: Creating temp file (SMTP):
c:\mdaemon\queues\temp\md5000896.tmp

Mon 2016-08-01 17:56:51: --> 354 Enter mail, end with .

Mon 2016-08-01 17:56:52: Message size: 14012 bytes

Mon 2016-08-01 17:56:52: Performing VBR certification (Domain: three.co.id,
Auth: SPF)

Mon 2016-08-01 17:56:52: *  File: c:\mdaemon\queues\temp\md5000896.tmp

Mon 2016-08-01 17:56:52: *  Message-ID:


Mon 2016-08-01 17:56:52: *  Certifier (trusted): vbr.emailcertification.org
...

Mon 2016-08-01 17:56:52: *Querying:
three.co.id._vouch.vbr.emailcertification.org ...

Mon 2016-08-01 17:56:52: *Certifier does not recognize that domain

Mon 2016-08-01 17:56:52: *  Certification result: message not certified

Mon 2016-08-01 17:56:52:  End VBR results

Mon 2016-08-01 17:56:52: Performing DKIM lookup

Mon 2016-08-01 17:56:52: *  File: c:\mdaemon\queues\temp\md5000896.tmp

Mon 2016-08-01 17:56:52: *  Message-ID:
c1e4843caabc4646a321f16e637f2c5f0103409...@jktmmmbx02.hutch.co.id

Mon 2016-08-01 17:56:52: *  Result: neutral

Mon 2016-08-01 17:56:52:  End DKIM results

Mon 2016-08-01 17:56:52: Performing DomainKeys lookup (Sender:
norman...@three.co.id)

Mon 2016-08-01 17:56:52: *  File: c:\mdaemon\queues\temp\md5000896.tmp

Mon 2016-08-01 17:56:52: *  Message-ID:
c1e4843caabc4646a321f16e637f2c5f0103409...@jktmmmbx02.hutch.co.id

Mon 2016-08-01 17:56:52: *  Querying for policy: three.co.id

Mon 2016-08-01 17:56:52: *Querying: _domainkey.three.co.id ...

Mon 2016-08-01 17:56:52: *DNS: *  Name server has no records of the
requested type for that domain

Mon 2016-08-01 17:56:52: *  Result: neutral

Mon 2016-08-01 17:56:52:  End DomainKeys results

Mon 2016-08-01 17:56:52: Passing message through Spam Filter (Size:
14012)...

Mon 2016-08-01 17:56:52: *  1.0 URIBL_RHS_AHBL Contains an URI listed in
rhsbl.ahbl.org.

Mon 2016-08-01 17:56:52: *  [URIs: tri.co.id]

Mon 2016-08-01 17:56:52: *  3.2 FH_DATE_PAST_20XX The date is grossly in the
future.

Mon 2016-08-01 17:56:52: *  0.0 HTML_MESSAGE BODY: HTML included in message

Mon 2016-08-01 17:56:52: *  1.6 BAYES_50 BODY: Bayesian spam probability is
40 to 60%

Mon 2016-08-01 17:56:52: *  [score: 0.5000]

Mon 2016-08-01 17:56:52:  End SpamAssassin results

Mon 2016-08-01 17:56:52: Spam Filter score/req: 5.80/14.0

Mon 2016-08-01 17:57:49: Socket error sending response to DATA

Mon 2016-08-01 17:57:49: *  Winsock Error 10060 The connection timed out.

Mon 2016-08

[MDaemon-L] Mail tidak diterima jika ada domain non-lokal

2016-08-01 Terurut Topik Syafril Hermansyah
On 02/08/16 09:14, MDaemon-L@dutaint.com -- Adi Murvianto via MDaemon-L
wrote:
> Kemarin saya menemukan kasus sbb:
> Customer mengirim email ke kami dengan recipient (To:) berisi 
> anit...@gmail.com, an...@domainku.com, b...@domainku.com
> Setelah dicek email masuk ke bad queue dengan header:
> X-MDBadQueue-Reason: message for non-local recipient but in local queue

Periksa smtp-in log dan routing log untuk transaksi itu.
Kirimkan kesini lognya.



-- 
syafril
---
Syafril Hermansyah
MDaemon-L Moderators, MDaemon 16.5-64 Beta A, SP 5.0.1-64
Harap tidak cc: atau kirim ke private mail untuk masalah MDaemon.

Adalah sebuah nasihat yg baik yg pernah saya dengar diberikan kpd
seorang anak muda : Kerjakan selalu apa yg Anda takut melakukannya"
--Ralp Waldo Emmerson, 1803-1882.


-- 
--MDaemon-L--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server.

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Henti Langgan: Kirim mail ke MDaemon-L-unsubscribe [at] dutaint.com
Berlangganan: kirim mail ke MDaemon-L-subscribe [at] dutaint.com
Versi terakhir MD 16.0.4, SP 5.0.1, OC 3.6.0, SG 4.0.1





[MDaemon-L] Mail tidak diterima jika ada domain non-lokal

2016-08-01 Terurut Topik Adi Murvianto via MDaemon-L
Salam sejahtera pak,

Kemarin saya menemukan kasus sbb:
Customer mengirim email ke kami dengan recipient (To:) berisi 
anit...@gmail.com, an...@domainku.com, b...@domainku.com
Setelah dicek email masuk ke bad queue dengan header:
X-MDBadQueue-Reason: message for non-local recipient but in local queue

Lalu customer coba mengirim kembali tanpa ke alamat gmail, jadi To: hanya 
berisi an...@domainku.com, b...@domainku.com
Dan email sukses diterima.

Saya sudah coba googling perihal X-MDBadQueue-Reason tersebut namun blm ketemu 
hasil yang memuaskan tentang penyebab dan cara mengatasinya. Pesan yang ada di 
bad queue kalau dicoba move ke local queue ataupun remote queue selalu kembali 
lagi masuk bad queue.
-- 
--MDaemon-L--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server.

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Henti Langgan: Kirim mail ke MDaemon-L-unsubscribe [at] dutaint.com
Berlangganan: kirim mail ke MDaemon-L-subscribe [at] dutaint.com
Versi terakhir MD 16.0.4, SP 5.0.1, OC 3.6.0, SG 4.0.1





[MDaemon-L] Email tidak terkirim

2016-08-01 Terurut Topik Syafril Hermansyah
On 01/08/16 14:26, a...@ggindonesia.co.id -- Alim wrote:
> Mengapa email di bawah ini tidak terkirim ke recipient?

> [702401] *  Socket error 10054 - Connection was reset by the other side!
>  [702401] Error writing to socket
>  [702401] Socket connection closed by the other side (how rude!)
>  [702401] *  Socket error 10053 - Connection abort. 


antispam/antivirus firewall server penerima overload.


-- 
syafril
---
Syafril Hermansyah
MDaemon-L Moderators, MDaemon 16.5-64 Beta A, SP 5.0.1-64
Harap tidak cc: atau kirim ke private mail untuk masalah MDaemon.

Tugas anak muda adalah membuat sejarah, bukan menulis sejarah.
--- Anies Baswedan


-- 
--MDaemon-L--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server.

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Henti Langgan: Kirim mail ke MDaemon-L-unsubscribe [at] dutaint.com
Berlangganan: kirim mail ke MDaemon-L-subscribe [at] dutaint.com
Versi terakhir MD 16.0.4, SP 5.0.1, OC 3.6.0, SG 4.0.1





[MDaemon-L] Blok Email sender yang selalu berubah

2016-08-01 Terurut Topik Syafril Hermansyah
On 01/08/16 15:05, dedetsapu...@kobexindo.com -- Dedet Saputra wrote:
>> Sebenarnya lebih cocok dimasukkan ke  Bayesian Learning system kalau
>> IP/host sender berubah-ubah.
>> Memasukkan ke Ip/host screening untuk mempercepat saja.
> 
> Pada Email sebelumnya subject : "Tips mengaktifkan Antispam Content
> Filtering bagian 1-2"
> 
> Bawaan standar Bayesian Automatic Learning belum Enable seperti pada
> gambar :
> http://mdaemon.dutaint.co.id/mdaemon/16.0.3/index.html?sf_bayesian_advanced_options.htm
> 
> 
> Berarti harus di Enable?
> [x] Enable Bayesian Automatic Learning


Bukan.
Melaporkan ke bayesian learning system | Spam lewat webmail dengan
menandai "this is spam".
Kalau dari IMAP client dipindah (move) ke /public folders/bayesian
learning/spam.


-- 
syafril
---
Syafril Hermansyah
MDaemon-L Moderators, MDaemon 16.5-64 Beta A, SP 5.0.1-64
Harap tidak cc: atau kirim ke private mail untuk masalah MDaemon.

Rasa hormat tdk selalu membawa kpd persahabatan, tp persahabatan tdk
mungkin ada tanpa rasa hormat. Ini mrpkan salah satu hal yg membikin
persahabatan lbh dpd rasa cinta
-- Mille de Scudery, 1607-1701


-- 
--MDaemon-L--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server.

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Henti Langgan: Kirim mail ke MDaemon-L-unsubscribe [at] dutaint.com
Berlangganan: kirim mail ke MDaemon-L-subscribe [at] dutaint.com
Versi terakhir MD 16.0.4, SP 5.0.1, OC 3.6.0, SG 4.0.1





[MDaemon-L] Blok Email sender yang selalu berubah

2016-08-01 Terurut Topik Dedet Saputra

On 2016-08-01 1:18 PM, Syafril Hermansyah wrote:


Sebenarnya lebih cocok dimasukkan ke  Bayesian Learning system kalau
IP/host sender berubah-ubah.
Memasukkan ke Ip/host screening untuk mempercepat saja.


Pada Email sebelumnya subject : "Tips mengaktifkan Antispam Content 
Filtering bagian 1-2"


Bawaan standar Bayesian Automatic Learning belum Enable seperti pada 
gambar :

http://mdaemon.dutaint.co.id/mdaemon/16.0.3/index.html?sf_bayesian_advanced_options.htm

Berarti harus di Enable?
[x] Enable Bayesian Automatic Learning


Salam,
Dedet S

--
--MDaemon-L--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server.

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Henti Langgan: Kirim mail ke MDaemon-L-unsubscribe [at] dutaint.com
Berlangganan: kirim mail ke MDaemon-L-subscribe [at] dutaint.com
Versi terakhir MD 16.0.4, SP 5.0.1, OC 3.6.0, SG 4.0.1





[MDaemon-L] Email tidak terkirim

2016-08-01 Terurut Topik Alim

Selamat siang pak Syafril,

Mengapa email di bawah ini tidak terkirim ke recipient?

-Original Message-
From: MDaemon at dip33.dutaint.com [mailto:postmas...@ggindonesia.co.id]
Sent: Monday, August 01, 2016 10:22 AM
To: ericc...@ggindonesia.co.id
Subject: WARNING: Message delivery delayed

=
=  Greetings from the MDaemon mail system at dip33.dutaint.com  = 
=


The following message:

Session-ID: 702401 (specific to this delivery attempt)
  Queue-ID: pd9061735.msg
Message-ID: 00a101d1eba0$eadcf920$c096eb60$@ggindonesia.co.id

has not (as yet) been delivered to the following recipient(s):

sa...@hucross.com (delivery delayed)

despite one or more unsuccessful attempts to do so.

Delivery attempts will continue for up to 48 hours (2 days).  If delivery 
fails after that time you will be separately informed.


You do not need to resend the message!

The original message headers follow at the end of this report.  For 
information on DSN messages see http://www.altn.com/dsn/.


Please quote the Queue-ID, Session-ID, and Message-ID found above in any 
inquiries regarding this message.



=  Session Transcript  =


 [702401] Session 702401; child 0008
 [702401] Parsing message 
 [702401] *  From: ericc...@ggindonesia.co.id
 [702401] *  To: sa...@hucross.com
 [702401] *  Subject: FW: D30 - MAR - AD06636
 [702401] *  Size (bytes): 1110665
 [702401] *  Message-ID: 
<00a101d1eba0$eadcf920$c096eb60$@ggindonesia.co.id>
 [702401] Resolving MX record for hucross.com (DNS Server: 
103.253.112.238)...

 [702401] *  P=010 S=000 D=hucross.com TTL=(40) MX=[mx.hucross.com]
 [702401] Attempting SMTP connection to mx.hucross.com
 [702401] Resolving A record for mx.hucross.com (DNS Server: 
103.253.112.238)...

 [702401] *  D=mx.hucross.com TTL=(40) A=[119.206.195.240]
 [702401] Attempting SMTP connection to 119.206.195.240:25
 [702401] Waiting for socket connection...
 [702401] *  Connection established 103.253.112.239:62078 --> 
119.206.195.240:25

 [702401] Waiting for protocol to start...
 [702401] <-- 220 220 spamfilter.mailtop.net  ESMTP Watcher
 [702401] --> EHLO dip33.dutaint.com
 [702401] <-- 250-tmw01.mailtop.net Pleased to meet you
 [702401] <-- 250-SIZE 104857600
 [702401] <-- 250-8BITMIME
 [702401] <-- 250-HELP
 [702401] <-- 250-PIPELINING
 [702401] <-- 250 ENHANCEDSTATUSCODES
 [702401] --> MAIL From: 
SIZE=1110665
 [702401] <-- 250 2.1.0 Sender  
Ok

 [702401] --> RCPT To:
 [702401] <-- 250 2.1.0 Recipient  Ok
 [702401] --> DATA
 [702401] <-- 354 Start mail input; end with "."
 [702401] Sending  to 
[119.206.195.240]

 [702401] *  Socket error 10054 - Connection was reset by the other side!
 [702401] Error writing to socket
 [702401] Socket connection closed by the other side (how rude!)
 [702401] *  Socket error 10053 - Connection abort.
 [702401] Connection closed
 [702401] *  This message is 20 minutes old; it has 0 minutes left in this 
queue

 [702401] Remote queue lifetime exceeded; message placed in retry queue


=End Transcript=



Best rgds,
Alim 




--
--MDaemon-L--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server.

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Henti Langgan: Kirim mail ke MDaemon-L-unsubscribe [at] dutaint.com
Berlangganan: kirim mail ke MDaemon-L-subscribe [at] dutaint.com
Versi terakhir MD 16.0.4, SP 5.0.1, OC 3.6.0, SG 4.0.1