[MDaemon-L] MTA poor reputation

2017-12-13 Terurut Topik Syafril Hermansyah
On 14/12/17 09:57, Thariq Basyir wrote:
> BTW, caranya biar tau mail firewall dari pihak trendmicro/mcafee/norton/dll 
> itu
> darimana ya?


Agak susah kalau direjectionnya tidak menyebutkan alasannya, seperti kasus ini.
Harus nebak berdasarkan nama host yang digunakan receiver, atau tanya langsung
ke postmaster@receiver.

-- 
syafril
---
Syafril Hermansyah
MDaemon-L Moderators, running MDaemon 17.5.2-64 Beta B, SP 5.5-64
Harap tidak cc: atau kirim ke private mail untuk masalah MDaemon.

Friendship... is not something you learn in school. But if you haven't learned
the meaning of friendship, you really haven't learned anything.
--- Muhammad Ali


-- 
--MDaemon-L--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server.

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com
Versi terakhir MD 17.5.1, SP 5.5, OC 5.0, SG 5.0





[MDaemon-L] MTA poor reputation

2017-12-13 Terurut Topik Thariq Basyir
2017-12-13 19:19 GMT+07:00 Syafril Hermansyah :

>
> > Maaf koreksi, yang benar interscan itu milik Trendmicro.
> > Jadi check dan delistnya kesini
> > https://www.ers.trendmicro.com/reputations
>

makasi pak, mungkin karena itu pihak mcafee tidak respon apa-apa email dari
kami

BTW, caranya biar tau mail firewall dari pihak trendmicro/mcafee/norton/dll
itu darimana ya?

-- 
--MDaemon-L--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server.

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com
Versi terakhir MD 17.5.1, SP 5.5, OC 5.0, SG 5.0



[MDaemon-L] Error Log

2017-12-13 Terurut Topik Bambang Setiawan via MDaemon-L
Baik Pak, terima kasih informasinya,Tapi kalo direct delivery-nya nggak masalah 
ya Pak ? 
On Wednesday, 13 December 2017, 18:55, Syafril Hermansyah 
 wrote:
Periksanya kesini

https://sitecheck.sucuri.net/results/124.81.84.135

minta delist dari sini

https://www.avast.com/en-us/false-positive-file-form.php


   
--
--MDaemon-L--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server.

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com
Versi terakhir MD 17.5.1, SP 5.5, OC 5.0, SG 5.0



[MDaemon-L] MTA poor reputation

2017-12-13 Terurut Topik Syafril Hermansyah
On 11/12/17 17:19, Syafril Hermansyah wrote:
> On 11/12/17 16:07, Thariq Basyir wrote:
>> apakah benar domain kami di block oleh pihak indosat? karena beberapa kali 
>> gagal
>> terkirim
>> pagi ini ada user kami yang terkena hijack, sehingga mengirim SPAM keluar
> 
> Server indosatooredoo.com pakai interscan (mcafee mail firewall).


Maaf koreksi, yang benar interscan itu milik Trendmicro.
Jadi check dan delistnya kesini

https://www.ers.trendmicro.com/reputations


> Untuk pencegahan akun terhijack kedepannya, upgrade MDaemon ke versi 17.5.1 
> lalu
> aktifkan location screening, dynamic screening dan account hijack detection.
> Lengkapnya lihat diarsip
> 
> https://www.mail-archive.com/mdaemon-l@dutaint.com/msg42185.html
> https://www.mail-archive.com/mdaemon-l@dutaint.com/msg42186.html
> https://www.mail-archive.com/mdaemon-l@dutaint.com/msg42187.html
> 


-- 
syafril
---
Syafril Hermansyah
MDaemon-L Moderators, running MDaemon 17.5.2-64 Beta B, SP 5.5-64
Harap tidak cc: atau kirim ke private mail untuk masalah MDaemon.

Anyone who stops learning is old, whether twenty or eighty. Anyone who keeps
learning stays young. The greatest thing you can do is keep your mind young.
--- Mark Twain (1835 - 1910)


-- 
--MDaemon-L--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server.

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com
Versi terakhir MD 17.5.1, SP 5.5, OC 5.0, SG 5.0





[MDaemon-L] Error Log

2017-12-13 Terurut Topik Syafril Hermansyah
On 13/12/17 17:17, Bambang Setiawan via MDaemon-L wrote:
> Mohon bantuan untuk log terlampir kenapa ya Pak,


> Mon 2017-12-11 15:24:57.657: Attempting to send message to smart host
> Mon 2017-12-11 15:24:57.657: Attempting SMTP connection to 
> smtp.indosat.net.id 

> Mon 2017-12-11 15:24:57.672: <-- 554 Your access to this mail system has been 
> rejected due to the sending MTA's poor reputation. If you believe that this 
> failure is in error, please contact the intended recipient via alternate 
> means. 


Mail ditolak smarthost smtp.indosat.net.id karena reputasi IP nya buruk.

> saya cek email reputation untuk IP saya Good.


Periksanya kesini

https://sitecheck.sucuri.net/results/124.81.84.135

minta delist dari sini

https://www.avast.com/en-us/false-positive-file-form.php

-- 
syafril
---
Syafril Hermansyah
MDaemon-L Moderators, running MDaemon 17.5.2-64 Beta B, SP 5.5-64
Harap tidak cc: atau kirim ke private mail untuk masalah MDaemon.

I am who I am today because of the mistakes I made yesterday.
--- The Prolific Penman


-- 
--MDaemon-L--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server.

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com
Versi terakhir MD 17.5.1, SP 5.5, OC 5.0, SG 5.0





[MDaemon-L] Error Log

2017-12-13 Terurut Topik Bambang Setiawan via MDaemon-L
Mohon maaf Pak, pada waktu setelahnya ada log lagi untuk email yang 
sama, apakah emailnya diterima oleh recipient Pak ?


Dan apa yang menyebabkan DSN pada log sebelumnya ?


Mon 2017-12-11 16:43:50.711: --
Mon 2017-12-11 16:43:50.698: Content Filter processing 
c:\mdaemon\queues\remote\md35001029943.msg...
Mon 2017-12-11 16:43:50.698: * Message return-path: 
prvs=15183b9d0b=margaretha.ta...@persada.id

Mon 2017-12-11 16:43:50.698: * Message from: margaretha.ta...@persada.id
Mon 2017-12-11 16:43:50.698: * Message to: lily.li...@manuchar.com
Mon 2017-12-11 16:43:50.698: * Message subject: FW: Tagihan MANUCHAR 
Periode Desember 2017 (Final)
Mon 2017-12-11 16:43:50.698: * Message ID: 
<00de01d37264$8c768530$a5638f90$@persada.id>

Mon 2017-12-11 16:43:50.698: Start Content Filter results
Mon 2017-12-11 16:43:50.699: * Message matched rule: 6 "domain 
signature" (Hits: 398364)

Mon 2017-12-11 16:43:50.705: *    Action: HTML footer added to message
Mon 2017-12-11 16:43:50.711: * Matched 1 of 7 active rules
Mon 2017-12-11 16:43:50.711: End of Content Filter results
Mon 2017-12-11 16:44:59.723: --
Mon 2017-12-11 16:43:50.718: Session 467421; child 0001
Mon 2017-12-11 16:43:50.718: Parsing message 


Mon 2017-12-11 16:43:50.720: *  From: margaretha.ta...@persada.id
Mon 2017-12-11 16:43:50.720: *  To: lily.li...@manuchar.com
Mon 2017-12-11 16:43:50.720: *  Subject: FW: Tagihan MANUCHAR Periode 
Desember 2017 (Final)

Mon 2017-12-11 16:43:50.720: *  Size (bytes): 329688
Mon 2017-12-11 16:43:50.720: *  Message-ID: 
<00de01d37264$8c768530$a5638f90$@persada.id>
Mon 2017-12-11 16:43:50.721: Resolving MX record for manuchar.com (DNS 
Server: 202.155.0.15)...
Mon 2017-12-11 16:43:51.137: *  P=000 S=000 D=manuchar.com TTL=(60) 
MX=[manuchar-com.mail.protection.outlook.com]
Mon 2017-12-11 16:43:51.137: Attempting SMTP connection to 
manuchar-com.mail.protection.outlook.com
Mon 2017-12-11 16:43:51.137: Resolving A record for 
manuchar-com.mail.protection.outlook.com (DNS Server: 202.155.0.15)...
Mon 2017-12-11 16:44:51.839: *  DNS: 60 second wait for DNS response 
exceeded (DNS Server: 202.155.0.15)
Mon 2017-12-11 16:44:51.839: Attempting SMTP connection to 
manuchar-com.mail.protection.outlook.com
Mon 2017-12-11 16:44:51.839: Resolving A record for 
manuchar-com.mail.protection.outlook.com (DNS Server: 8.8.8.8)...
Mon 2017-12-11 16:44:52.047: * 
D=manuchar-com.mail.protection.outlook.com TTL=(0) A=[213.199.154.138]
Mon 2017-12-11 16:44:52.047: * 
D=manuchar-com.mail.protection.outlook.com TTL=(0) A=[213.199.154.106]
Mon 2017-12-11 16:44:52.047: Randomly picked 213.199.154.138 from list 
of possible hosts
Mon 2017-12-11 16:44:52.047: Attempting SMTP connection to 
213.199.154.138:25

Mon 2017-12-11 16:44:52.047: Waiting for socket connection...
Mon 2017-12-11 16:44:55.240: *  Connection established 
124.81.84.135:64363 --> 213.199.154.138:25

Mon 2017-12-11 16:44:55.240: Waiting for protocol to start...
Mon 2017-12-11 16:44:55.776: <-- 220 
VE1EUR03FT025.mail.protection.outlook.com Microsoft ESMTP MAIL Service 
ready at Mon, 11 Dec 2017 09:44:56 +

Mon 2017-12-11 16:44:55.777: --> EHLO mail.persada.id
Mon 2017-12-11 16:44:55.966: <-- 
250-VE1EUR03FT025.mail.protection.outlook.com Hello [124.81.84.135]

Mon 2017-12-11 16:44:55.966: <-- 250-SIZE 157286400
Mon 2017-12-11 16:44:55.966: <-- 250-PIPELINING
Mon 2017-12-11 16:44:55.966: <-- 250-DSN
Mon 2017-12-11 16:44:55.966: <-- 250-ENHANCEDSTATUSCODES
Mon 2017-12-11 16:44:55.966: <-- 250-STARTTLS
Mon 2017-12-11 16:44:55.966: <-- 250-8BITMIME
Mon 2017-12-11 16:44:55.966: <-- 250-BINARYMIME
Mon 2017-12-11 16:44:55.966: <-- 250 CHUNKING
Mon 2017-12-11 16:44:55.966: --> MAIL 
From: SIZE=329688

Mon 2017-12-11 16:44:56.284: <-- 250 2.1.0 Sender OK
Mon 2017-12-11 16:44:56.284: --> RCPT To:
Mon 2017-12-11 16:44:56.820: <-- 250 2.1.5 Recipient OK
Mon 2017-12-11 16:44:56.820: --> DATA
Mon 2017-12-11 16:44:57.003: <-- 354 Start mail input; end with 
.
Mon 2017-12-11 16:44:57.003: Sending 
 to [213.199.154.138]

Mon 2017-12-11 16:44:59.243: Transfer Complete
Mon 2017-12-11 16:44:59.713: <-- 250 2.6.0 
<00de01d37264$8c768530$a5638f90$@persada.id> [InternalId=9088150819766, 
Hostname=DB6PR07MB3495.eurprd07.prod.outlook.com] 336703 bytes in 0.920, 
357.250 KB/sec Queued mail for delivery

Mon 2017-12-11 16:44:59.713: --> QUIT
Mon 2017-12-11 16:44:59.896: <-- 221 2.0.0 Service closing transmission 
channel
Mon 2017-12-11 16:44:59.896: SMTP session successful (Bytes in/out: 
649/329832)


Terima kasih.


Salam,

On 12/13/2017 5:17 PM, Bambang Setiawan via MDaemon-L wrote:

Dear Pak Syafril,

Mohon bantuan untuk log terlampir kenapa ya Pak,

saya cek email reputation untuk IP saya Good.


Mon 2017-12-11 15:24:53.762: --
Mon 2017-12-11 15:24:36.656: Session 465499; child 0001
Mon 2017-12-11 15:24:36.656: Parsing message 


Mon 2017-12-11 15:24:36.658: *  From: margaretha.ta...@persada.id
Mon 2017-12-11 15:24:36.658: *  To: lily.li...@manuchar.com
Mon 2017-12-11 15:24:36

[MDaemon-L] Error Log

2017-12-13 Terurut Topik Bambang Setiawan via MDaemon-L

Dear Pak Syafril,

Mohon bantuan untuk log terlampir kenapa ya Pak,

saya cek email reputation untuk IP saya Good.


Mon 2017-12-11 15:24:53.762: --
Mon 2017-12-11 15:24:36.656: Session 465499; child 0001
Mon 2017-12-11 15:24:36.656: Parsing message 


Mon 2017-12-11 15:24:36.658: *  From: margaretha.ta...@persada.id
Mon 2017-12-11 15:24:36.658: *  To: lily.li...@manuchar.com
Mon 2017-12-11 15:24:36.658: *  Subject: Tagihan MANUCHAR Periode 
Desember 2017 (Final)

Mon 2017-12-11 15:24:36.658: *  Size (bytes): 329546
Mon 2017-12-11 15:24:36.658: *  Message-ID: 
<00c501d37259$78ee1100$6aca3300$@persada.id>
Mon 2017-12-11 15:24:36.659: Resolving MX record for manuchar.com (DNS 
Server: 202.155.0.15)...
Mon 2017-12-11 15:24:39.861: *  P=000 S=000 D=manuchar.com TTL=(60) 
MX=[manuchar-com.mail.protection.outlook.com]
Mon 2017-12-11 15:24:39.861: Attempting SMTP connection to 
manuchar-com.mail.protection.outlook.com
Mon 2017-12-11 15:24:39.861: Resolving A record for 
manuchar-com.mail.protection.outlook.com (DNS Server: 202.155.0.15)...
Mon 2017-12-11 15:24:40.053: * 
D=manuchar-com.mail.protection.outlook.com TTL=(0) A=[213.199.154.106]
Mon 2017-12-11 15:24:40.053: * 
D=manuchar-com.mail.protection.outlook.com TTL=(0) A=[213.199.154.138]
Mon 2017-12-11 15:24:40.053: Randomly picked 213.199.154.106 from list 
of possible hosts
Mon 2017-12-11 15:24:40.053: Attempting SMTP connection to 
213.199.154.106:25

Mon 2017-12-11 15:24:40.053: Waiting for socket connection...
Mon 2017-12-11 15:24:57.657: *  Socket error 10061 - The other host is 
either down or has refused to connect with you at that IP and/or on that 
port.
Mon 2017-12-11 15:24:57.657: *  213.199.154.106 added to connection 
failure cache for 5 minutes

Mon 2017-12-11 15:24:57.657: Attempting to send message to smart host
Mon 2017-12-11 15:24:57.657: Attempting SMTP connection to 
smtp.indosat.net.id
Mon 2017-12-11 15:24:57.657: Resolving A record for smtp.indosat.net.id 
(DNS Server: 202.155.0.15)...
Mon 2017-12-11 15:24:57.667: *  D=smtp.indosat.net.id TTL=(0) 
A=[219.83.54.114]
Mon 2017-12-11 15:24:57.667: *  D=smtp.indosat.net.id TTL=(0) 
A=[219.83.54.111]
Mon 2017-12-11 15:24:57.667: *  D=smtp.indosat.net.id TTL=(0) 
A=[219.83.54.112]
Mon 2017-12-11 15:24:57.667: *  D=smtp.indosat.net.id TTL=(0) 
A=[219.83.54.113]
Mon 2017-12-11 15:24:57.667: Randomly picked 219.83.54.114 from list of 
possible hosts

Mon 2017-12-11 15:24:57.667: Attempting SMTP connection to 219.83.54.114:25
Mon 2017-12-11 15:24:57.667: Waiting for socket connection...
Mon 2017-12-11 15:24:57.669: *  Connection established 
124.81.84.135:64525 --> 219.83.54.114:25

Mon 2017-12-11 15:24:57.669: Waiting for protocol to start...
Mon 2017-12-11 15:24:57.672: <-- 554-avas11empat.indosat.net.id
Mon 2017-12-11 15:24:57.672: <-- 554 Your access to this mail system has 
been rejected due to the sending MTA's poor reputation. If you believe 
that this failure is in error, please contact the intended recipient via 
alternate means.

Mon 2017-12-11 15:24:57.672: --> QUIT
Mon 2017-12-11 15:24:57.674: Creating delivery failure DSN...
Mon 2017-12-11 15:24:57.674: *  Recipient: margaretha.ta...@persada.id
Mon 2017-12-11 15:24:57.674: *  Session-ID: 465499
Mon 2017-12-11 15:24:57.674: *  Queue-ID: pd35001029719.msg
Mon 2017-12-11 15:24:57.674: *  Message-ID: 
00c501d37259$78ee1100$6aca3300$@persada.id

Mon 2017-12-11 15:24:57.674: --- End DSN message creation
Mon 2017-12-11 15:24:57.675: Socket connection closed by the other side 
(how rude!)

Mon 2017-12-11 15:24:57.675: SMTP session terminated (Bytes in/out: 234/6)
Mon 2017-12-11 16:40:08.413: --


Atas bantuannya diucapkan terima kasih.

--
--MDaemon-L--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server.

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com
Versi terakhir MD 17.5.1, SP 5.5, OC 5.0, SG 5.0