[Mdaemon-L] Email tidak masuk ke inbox

[Syafril Hermansyah via Mdaemon-L]

On 3/15/23 09:46, Arif Santoso wrote:

Mail masih berada di deferred (delay) queue (Ready untuk di recall), tunggu 1 
menit lalu periksa >lagi routing log.

Wed 2023-03-15 09:36:06.121: INBOUND message: pp5637433.msg
Wed 2023-03-15 09:36:06.121: * From: "Arif 
Santoso"
Wed 2023-03-15 09:36:06.121: * To: "'Angel 
Cleopatra'"
Wed 2023-03-15 09:36:06.121: * Subject: test 4
Wed 2023-03-15 09:36:06.121: * 
Message-ID:<0da901d956e6$9fba16e0$df2e44a0$@eaglehighplantations.com>
Wed 2023-03-15 09:36:06.121: * Size: 3488; 




Ini beda messagenya dengan yang tadi.
Message-ID nya beda yang berarti beda mail.


Masih belum masuk juga email nya ke inbox



Kalau message yang ini periksa lebih kebawah rounting log nya, cari 
dengan katakunci pencarian 
"0da901d956e6$9fba16e0$df2e44a0$@eaglehighplantations.com" (tanpa tanda 
kutip).


Jika tidak ketemu, lanjutkan pencariannya di antivirus log dan 
contentfilter log.


--
syafril

Syafril Hermansyah
MDaemon-L Moderators, running MDaemon 23.0.1 Beta A
Harap tidak cc: atau kirim ke private mail untuk masalah MDaemon.

Don’t worry about failures, worry about the chances you miss when you 
don’t even try.

--- Jack Canfield


--
--[mdaemon-l]--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com
Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com
Versi terakhir: MDaemon 23.0.0, SecurityGateway 9.0.1

[Mdaemon-L] Email tidak masuk ke inbox

[Arif Santoso]

>Mail masih berada di deferred (delay) queue (Ready untuk di recall), tunggu 1 
>menit lalu periksa >lagi routing log.

Wed 2023-03-15 09:36:06.121: INBOUND message: pp5637433.msg
Wed 2023-03-15 09:36:06.121: * From: "Arif Santoso" 

Wed 2023-03-15 09:36:06.121: * To: "'Angel Cleopatra'" 

Wed 2023-03-15 09:36:06.121: * Subject: test 4
Wed 2023-03-15 09:36:06.121: * Message-ID: 
<0da901d956e6$9fba16e0$df2e44a0$@eaglehighplantations.com>
Wed 2023-03-15 09:36:06.121: * Size: 3488; 


Masih belum masuk juga email nya ke inbox


--
--[mdaemon-l]--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com
Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com
Versi terakhir: MDaemon 23.0.0, SecurityGateway 9.0.1

[Mdaemon-L] Email tidak masuk ke inbox

[Syafril Hermansyah via Mdaemon-L]

On 3/15/23 09:20, Arif Santoso wrote:

Saya test lagi .

Wed 2023-03-15 09:12:55.792: INBOUND message: md5637240.msg
Wed 2023-03-15 09:12:55.792: * From: "Arif 
Santoso"
Wed 2023-03-15 09:12:55.792: * To: "'Angel 
Cleopatra'"
Wed 2023-03-15 09:12:55.792: * Subject: test3
Wed 2023-03-15 09:12:55.792: * 
Message-ID:<0d9401d956e3$a63b2840$f2b178c0$@eaglehighplantations.com>
Wed 2023-03-15 09:12:55.792: * Message subject to recall for 1 minutes; moved 
to deferred queue



Mail masih berada di deferred (delay) queue (Ready untuk di recall), 
tunggu 1 menit lalu periksa lagi routing log.


Mestinya mail ke sesama local user tidak di delay, tanpa delay pun bisa 
direcall.


http://mdaemon.dutaint.co.id/mdaemon/23.0/message_recall.html

[x] Do not defer messages if recipient has a mailbox on this server


Check this box if you do not wish to defer messages when the
recipient's mailbox is located on the same MDaemon server as the
sender. Note: when using the "Delete recalled messages from account
mail folders" option above, even messages that were already delivered
can be recalled and deleted from a user's mailbox.


--
syafril

Syafril Hermansyah
MDaemon-L Moderators, running MDaemon 23.0.1 Beta A
Harap tidak cc: atau kirim ke private mail untuk masalah MDaemon.

It is not that I'm so smart. But I stay with the questions much longer.
--- Albert Einstein


--
--[mdaemon-l]--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com
Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com
Versi terakhir: MDaemon 23.0.0, SecurityGateway 9.0.1

[Mdaemon-L] Email tidak masuk ke inbox

[Arif Santoso]

>Maksudnya sudah tidak ada di Local queue?
Iya sudah tidak ada.

>Sudah periksa ke Junk Email Folder di Webmail atau Email client?
>Kalau tidak ketemu disana, periksa ke routing log.
Iya sudah tidak ada.

Saya test lagi .

Wed 2023-03-15 09:12:55.792: INBOUND message: md5637240.msg
Wed 2023-03-15 09:12:55.792: * From: "Arif Santoso" 

Wed 2023-03-15 09:12:55.792: * To: "'Angel Cleopatra'" 

Wed 2023-03-15 09:12:55.792: * Subject: test3
Wed 2023-03-15 09:12:55.792: * Message-ID: 
<0d9401d956e3$a63b2840$f2b178c0$@eaglehighplantations.com>
Wed 2023-03-15 09:12:55.792: * Message subject to recall for 1 minutes; moved 
to deferred queue



--
--[mdaemon-l]--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com
Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com
Versi terakhir: MDaemon 23.0.0, SecurityGateway 9.0.1

[Mdaemon-L] Dynamic screening refused connection

[Syafril Hermansyah via Mdaemon-L]

On 3/15/23 08:58, Bambang Setiawan via Mdaemon-L wrote:
dan kirim mail dari sender mana ke recipient mana saja (mungkin lebih 
dari 101 recipient)


untuk sender-nya 
bounces+11642051-f070-6211202288=persada...@em2413.talenta.co


dikirimnya memang ke banyak email alias kami pak (SC terlampir)



Kelihatanya 1 session hanya ditujukan ke 1 recipient saja.
Itu khas pengiriman lewat List Server.


Kelihatannya SMTP screening diaktifkan ya.
Coba periksa berapa besar nilainya.


Benar Pak, untuk SMTP Screening aktif dan nilainya adalah sbb :

Blok IPs that connect more than 100 times in 3 minutes 



Coba di ubah nilainya

Blok IPs that connect more than 100 times in 2 minutes.





--
syafril

Syafril Hermansyah
MDaemon-L Moderators, running MDaemon 23.0.1 Beta A
Harap tidak cc: atau kirim ke private mail untuk masalah MDaemon.

Bodily exercise, when compulsory, does no harm to the body; but 
knowledge which is acquired under compulsion obtains no hold on the mind.

--- Plato, The Republic


--
--[mdaemon-l]--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com
Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com
Versi terakhir: MDaemon 23.0.0, SecurityGateway 9.0.1

[Mdaemon-L] Dynamic screening refused connection

[Bambang Setiawan via Mdaemon-L]

On 14/03/2023 20:03, Syafril Hermansyah via Mdaemon-L wrote:


Kelihatnya ini koneksi mail firewall antivirus yang berbasis MTA Exim 
yang sering pakai protocol yang tidak standard Internet Mail (RFC 
standard).
Coba periksa di smtp-in log 2023-03-14 sebelum jam 14:03 server 
168.245.118.232 identitas hostnya apa 


Identitas hostnya ini pak o1.ptr5115.jurnal.id [168.245.118.232]


dan kirim mail dari sender mana ke recipient mana saja (mungkin lebih 
dari 101 recipient)


untuk sender-nya 
bounces+11642051-f070-6211202288=persada...@em2413.talenta.co


dikirimnya memang ke banyak email alias kami pak (SC terlampir)


Jangan pakai trusted host/trusted IP, itu berkaitan dengan "mail 
relaying" dan bypass antispam/antivirus.



Baik Pak



Kelihatannya SMTP screening diaktifkan ya.
Coba periksa berapa besar nilainya.


Benar Pak, untuk SMTP Screening aktif dan nilainya adalah sbb :

Blok IPs that connect more than 100 times in 3 minutes

Tapi sepertinya mulai jam 17.04 sudah bisa masuk kembali pak.

Tue 2023-03-14 17:04:10.342: 05: [38437446] Session 38437446; child 0002
Tue 2023-03-14 17:04:10.342: 05: [38437446] Accepting SMTP connection 
from 168.245.118.232:33966 to 103.150.114.155:25
Tue 2023-03-14 17:04:10.342: 07: [38437446] Location Screen says 
connection is from United States, North America
Tue 2023-03-14 17:04:10.343: 03: [38437446] --> 220 mail.persada.id 
ESMTP MDaemon 23.0.0; Tue, 14 Mar 2023 17:04:10 +0700

Tue 2023-03-14 17:04:10.567: 02: [38437446] <-- EHLO o1.ptr5115.jurnal.id
Tue 2023-03-14 17:04:10.568: 03: [38437446] --> 250-mail.persada.id 
Hello o1.ptr5115.jurnal.id [168.245.118.232], pleased to meet you

Tue 2023-03-14 17:04:10.568: 03: [38437446] --> 250-ETRN
Tue 2023-03-14 17:04:10.568: 07: [38437446] Location Screening hiding 
AUTH from country United States, North America

Tue 2023-03-14 17:04:10.568: 03: [38437446] --> 250-8BITMIME
Tue 2023-03-14 17:04:10.568: 03: [38437446] --> 250-ENHANCEDSTATUSCODES
Tue 2023-03-14 17:04:10.568: 03: [38437446] --> 250-PIPELINING
Tue 2023-03-14 17:04:10.568: 03: [38437446] --> 250-CHUNKING
Tue 2023-03-14 17:04:10.568: 03: [38437446] --> 250-STARTTLS
Tue 2023-03-14 17:04:10.568: 03: [38437446] --> 250 SIZE
Tue 2023-03-14 17:04:10.793: 02: [38437446] <-- STARTTLS
Tue 2023-03-14 17:04:10.793: 03: [38437446] --> 220 2.7.0 Ready to start TLS
Tue 2023-03-14 17:04:11.290: 01: [38437446] SSL negotiation successful 
(TLS 1.2, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384)

Tue 2023-03-14 17:04:11.515: 02: [38437446] <-- EHLO o1.ptr5115.jurnal.id
Tue 2023-03-14 17:04:11.515: 03: [38437446] --> 250-mail.persada.id 
Hello o1.ptr5115.jurnal.id [168.245.118.232], pleased to meet you

Tue 2023-03-14 17:04:11.515: 03: [38437446] --> 250-ETRN
Tue 2023-03-14 17:04:11.515: 07: [38437446] Location Screening hiding 
AUTH from country United States, North America

Tue 2023-03-14 17:04:11.515: 03: [38437446] --> 250-8BITMIME
Tue 2023-03-14 17:04:11.515: 03: [38437446] --> 250-ENHANCEDSTATUSCODES
Tue 2023-03-14 17:04:11.515: 03: [38437446] --> 250-PIPELINING
Tue 2023-03-14 17:04:11.515: 03: [38437446] --> 250-CHUNKING
Tue 2023-03-14 17:04:11.515: 03: [38437446] --> 250-REQUIRETLS
Tue 2023-03-14 17:04:11.515: 03: [38437446] --> 250 SIZE
Tue 2023-03-14 17:04:11.756: 02: [38437446] <-- MAIL 
FROM: 
BODY=8BITMIME
Tue 2023-03-14 17:04:11.763: 05: [38437446] Performing PTR lookup 
(232.118.245.168.IN-ADDR.ARPA)
Tue 2023-03-14 17:04:11.778: 05: [38437446] * 
D=232.118.245.168.IN-ADDR.ARPA TTL=(13) PTR=[o1.ptr5115.jurnal.id]
Tue 2023-03-14 17:04:11.793: 05: [38437446] * D=o1.ptr5115.jurnal.id 
TTL=(5) A=[168.245.118.232]

Tue 2023-03-14 17:04:11.793: 05: [38437446]  End PTR results
Tue 2023-03-14 17:04:11.796: 05: [38437446] Performing IP lookup 
(o1.ptr5115.jurnal.id)
Tue 2023-03-14 17:04:11.798: 05: [38437446] * D=o1.ptr5115.jurnal.id 
TTL=(5) A=[168.245.118.232]

Tue 2023-03-14 17:04:11.798: 05: [38437446]  End IP lookup results
Tue 2023-03-14 17:04:11.804: 05: [38437446] Performing IP lookup 
(em2413.talenta.co)
Tue 2023-03-14 17:04:12.188: 05: [38437446] *  P=020 S=001 
D=u11642051.wl052.sendgrid.net TTL=(30) MX=[mx.sendgrid.net]
Tue 2023-03-14 17:04:12.190: 05: [38437446] *  D=mx.sendgrid.net 
TTL=(20) A=[167.89.123.50]
Tue 2023-03-14 17:04:12.190: 05: [38437446] *  D=mx.sendgrid.net 
TTL=(20) A=[167.89.118.48]

Tue 2023-03-14 17:04:12.190: 05: [38437446]  End IP lookup results
Tue 2023-03-14 17:04:12.199: 09: [38437446] Performing SPF lookup 
(o1.ptr5115.jurnal.id / 168.245.118.232)
Tue 2023-03-14 17:04:12.331: 09: [38437446] *  Result: none; no SPF 
record in DNS

Tue 2023-03-14 17:04:12.331: 09: [38437446]  End SPF results
Tue 2023-03-14 17:04:12.331: 09: [38437446] Performing SPF lookup 
(em2413.talenta.co / 168.245.118.232)
Tue 2023-03-14 17:04:12.352: 09: [38437446] *  Policy: v=spf1 
ip4:168.245.118.232 -all
Tue 2023-03-14 17:04:12.352: 09: [38437446] *  Evaluating 
ip4:168.245.118.232: match

Tue 2023-03-14 17:04:12.352: 09: [38437446] *  Result: pass
Tu

[Mdaemon-L] 501 5.7.0 does not have valid PTR record

[Syafril Hermansyah via Mdaemon-L]

On 3/15/23 08:07, Sony via Mdaemon-L wrote:

Minta tolong dibuatkan update pengecualian untuk log berikut:

Tue 2023-03-14 20:08:17.085: 05: [07354107] Performing PTR lookup 
(110.153.10.170.IN-ADDR.ARPA)
Tue 2023-03-14 20:09:17.084: 04: [07354107] *  DNS: 60 second wait for DNS 
response exceeded (DNS Server: 202.152.0.2)
Tue 2023-03-14 20:10:17.082: 04: [07354107] *  DNS: 60 second wait for DNS 
response exceeded (DNS Server: 202.152.5.36)
Tue 2023-03-14 20:10:17.082: 05: [07354107] *  No PTR records found


Ini problem di DNS resolver 202.152.0.2 dan 202.152.5.36.
IP 170.10.153.110 punya valid PTR record.
Coba diganti sementara DNS resolvernya ke public DNS : 1.1.1.1, 1.0.0.1, 
8.8.8.7, 8.8.4.4


http://mdaemon.dutaint.co.id/mdaemon/23.0/default-domain-and-servers_dns.html


$ host 170.10.153.110 1.1.1.1
Using domain server:
Name: 1.1.1.1
Address: 1.1.1.1#53
Aliases:

110.153.10.170.in-addr.arpa domain name pointer 
usb-smtp-delivery-110.mimecast.com.


$ host 170.10.153.110 8.8.8.8
Using domain server:
Name: 8.8.8.8
Address: 8.8.8.8#53
Aliases:

110.153.10.170.in-addr.arpa domain name pointer 
usb-smtp-delivery-110.mimecast.com.




--
syafril

Syafril Hermansyah
MDaemon-L Moderators, running MDaemon 23.0.1 Beta A
Harap tidak cc: atau kirim ke private mail untuk masalah MDaemon.

Instruction does much, but encouragement everything.
--- Johann Wolfgang von Goethe


--
--[mdaemon-l]--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com
Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com
Versi terakhir: MDaemon 23.0.0, SecurityGateway 9.0.1

[Mdaemon-L] Email tidak masuk ke inbox

[Syafril Hermansyah via Mdaemon-L]

On 3/15/23 07:36, Arif Santoso wrote:
Akhir akhir ini versi 22, kejadian email tidak masuk ke inbox. Saya cek 
di log smtp in, ada email masuk dari OJK. Tetapi saya cek di queue/temp 
sudah tidak ada.



Maksudnya sudah tidak ada di Local queue?


Di outlook dan web email tersebut tidak masuk.


Sudah periksa ke Junk Email Folder di Webmail atau Email client?
Kalau tidak ketemu disana, periksa ke routing log.

Semalam saya update ke versi 23, ternyata sama tidak masuk juga email 
dari luar. Kebetulan hanya satu email orang tersebut yang kejadian tidak 
ada masuk email.



Periksa ke routing log.


--
syafril

Syafril Hermansyah
MDaemon-L Moderators, running MDaemon 23.0.1 Beta A
Harap tidak cc: atau kirim ke private mail untuk masalah MDaemon.

We are products of our past, but we don't have to be prisoners of it.
--- Rick Warren


--
--[mdaemon-l]--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com
Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com
Versi terakhir: MDaemon 23.0.0, SecurityGateway 9.0.1

[Mdaemon-L] 501 5.7.0 does not have valid PTR record

[Sony via Mdaemon-L]

Selamat pagi Pak Syafril,

 

Minta tolong dibuatkan update pengecualian untuk log berikut:

 

Tue 2023-03-14 20:10:16.563: 01: --

Tue 2023-03-14 20:08:13.278: 05: [07354107] Session 07354107; child 0007

Tue 2023-03-14 20:08:13.278: 05: [07354107] Accepting SMTP connection from
170.10.153.110:36494 to 192.168.100.234:25

Tue 2023-03-14 20:08:13.278: 07: [07354107] Location Screen says connection
is from United States, North America

Tue 2023-03-14 20:08:13.281: 03: [07354107] --> 220 mail.richtex.co.id ESMTP
Tue, 14 Mar 2023 20:08:13 +0700

Tue 2023-03-14 20:08:13.527: 02: [07354107] <-- EHLO
usb-smtp-delivery-110.mimecast.com

Tue 2023-03-14 20:08:13.530: 01: [07354107] EHLO/HELO response delayed 2
seconds

Tue 2023-03-14 20:08:15.530: 03: [07354107] --> 250-mail.richtex.co.id Hello
usb-smtp-delivery-110.mimecast.com [170.10.153.110], pleased to meet you

Tue 2023-03-14 20:08:15.530: 03: [07354107] --> 250-ETRN

Tue 2023-03-14 20:08:15.530: 07: [07354107] Location Screening hiding AUTH
from country United States, North America

Tue 2023-03-14 20:08:15.530: 03: [07354107] --> 250-8BITMIME

Tue 2023-03-14 20:08:15.530: 03: [07354107] --> 250-ENHANCEDSTATUSCODES

Tue 2023-03-14 20:08:15.530: 03: [07354107] --> 250-PIPELINING

Tue 2023-03-14 20:08:15.530: 03: [07354107] --> 250-CHUNKING

Tue 2023-03-14 20:08:15.530: 03: [07354107] --> 250-STARTTLS

Tue 2023-03-14 20:08:15.530: 03: [07354107] --> 250 SIZE

Tue 2023-03-14 20:08:15.775: 02: [07354107] <-- STARTTLS

Tue 2023-03-14 20:08:15.775: 03: [07354107] --> 220 2.7.0 Ready to start TLS

Tue 2023-03-14 20:08:16.564: 01: [07354107] SSL negotiation successful (TLS
1.2, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384)

Tue 2023-03-14 20:08:16.812: 02: [07354107] <-- EHLO
usb-smtp-delivery-110.mimecast.com

Tue 2023-03-14 20:08:16.824: 03: [07354107] --> 250-mail.richtex.co.id Hello
usb-smtp-delivery-110.mimecast.com [170.10.153.110], pleased to meet you

Tue 2023-03-14 20:08:16.824: 03: [07354107] --> 250-ETRN

Tue 2023-03-14 20:08:16.824: 07: [07354107] Location Screening hiding AUTH
from country United States, North America

Tue 2023-03-14 20:08:16.824: 03: [07354107] --> 250-8BITMIME

Tue 2023-03-14 20:08:16.824: 03: [07354107] --> 250-ENHANCEDSTATUSCODES

Tue 2023-03-14 20:08:16.824: 03: [07354107] --> 250-PIPELINING

Tue 2023-03-14 20:08:16.824: 03: [07354107] --> 250-CHUNKING

Tue 2023-03-14 20:08:16.824: 03: [07354107] --> 250-REQUIRETLS

Tue 2023-03-14 20:08:16.824: 03: [07354107] --> 250 SIZE

Tue 2023-03-14 20:08:17.069: 02: [07354107] <-- MAIL
FROM:

Tue 2023-03-14 20:08:17.085: 05: [07354107] Performing PTR lookup
(110.153.10.170.IN-ADDR.ARPA)

Tue 2023-03-14 20:09:17.084: 04: [07354107] *  DNS: 60 second wait for DNS
response exceeded (DNS Server: 202.152.0.2)

Tue 2023-03-14 20:10:17.082: 04: [07354107] *  DNS: 60 second wait for DNS
response exceeded (DNS Server: 202.152.5.36)

Tue 2023-03-14 20:10:17.082: 05: [07354107] *  No PTR records found

Tue 2023-03-14 20:10:17.082: 05: [07354107] *  MDaemon configured to drop
connection when no PTR records found

Tue 2023-03-14 20:10:17.082: 05: [07354107]  End PTR results

Tue 2023-03-14 20:10:17.082: 03: [07354107] --> 501 5.7.0 170.10.153.110
does not have valid PTR record

Tue 2023-03-14 20:10:17.082: 04: [07354107] SMTP session terminated (Bytes
in/out: 721/4381)

Tue 2023-03-14 20:10:17.082: 01: --

Tue 2023-03-14 20:13:19.091: 05: [07354160] Session 07354160; child 0018

Tue 2023-03-14 20:13:19.091: 05: [07354160] Accepting SMTP connection from
170.10.151.110:52755 to 192.168.100.234:25

Tue 2023-03-14 20:13:19.091: 07: [07354160] Location Screen says connection
is from United States, North America

Tue 2023-03-14 20:13:19.094: 03: [07354160] --> 220 mail.richtex.co.id ESMTP
Tue, 14 Mar 2023 20:13:19 +0700

Tue 2023-03-14 20:13:19.357: 02: [07354160] <-- EHLO
usb-smtp-delivery-110.mimecast.com

Tue 2023-03-14 20:13:19.360: 01: [07354160] EHLO/HELO response delayed 2
seconds

Tue 2023-03-14 20:13:21.360: 03: [07354160] --> 250-mail.richtex.co.id Hello
usb-smtp-delivery-110.mimecast.com [170.10.151.110], pleased to meet you

Tue 2023-03-14 20:13:21.360: 03: [07354160] --> 250-ETRN

Tue 2023-03-14 20:13:21.360: 07: [07354160] Location Screening hiding AUTH
from country United States, North America

Tue 2023-03-14 20:13:21.360: 03: [07354160] --> 250-8BITMIME

Tue 2023-03-14 20:13:21.360: 03: [07354160] --> 250-ENHANCEDSTATUSCODES

Tue 2023-03-14 20:13:21.360: 03: [07354160] --> 250-PIPELINING

Tue 2023-03-14 20:13:21.360: 03: [07354160] --> 250-CHUNKING

Tue 2023-03-14 20:13:21.360: 03: [07354160] --> 250-STARTTLS

Tue 2023-03-14 20:13:21.360: 03: [07354160] --> 250 SIZE

Tue 2023-03-14 20:13:21.621: 02: [07354160] <-- STARTTLS

Tue 2023-03-14 20:13:21.622: 03: [07354160] --> 220 2.7.0 Ready to start TLS

Tue 2023-03-14 20:13:22.455: 01: [07354160] SSL negotiation successful (TLS
1.2, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384)

Tue 2023-03-14 20:13:22.718: 02: [07354160] <-- EHLO
usb-smtp-de

[Mdaemon-L] Email tidak masuk ke inbox

[Arif Santoso]

Dear All,

 

Akhir akhir ini versi 22, kejadian email tidak masuk ke inbox. Saya cek di
log smtp in, ada email masuk dari OJK. Tetapi saya cek di queue/temp sudah
tidak ada.

Di outlook dan web email tersebut tidak masuk.

 

Semalam saya update ke versi 23, ternyata sama tidak masuk juga email dari
luar. Kebetulan hanya satu email orang tersebut yang kejadian tidak ada
masuk email.

 

Mohon pencerahan nya.

 

Rgds,

 

Arif 


-- 
--[mdaemon-l]--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com
Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com
Versi terakhir: MDaemon 23.0.0, SecurityGateway 9.0.1

[Mdaemon-L] Dynamic screening refused connection

[Syafril Hermansyah via Mdaemon-L]

On 14/03/23 18.33, Bambang Setiawan via Mdaemon-L wrote:
Jika salah satu sender ter-refused connectionnya karena hal di bawah ini, saya 
harus setting dimana ya pak, supaya tidak terulang di refused oleh mail server kami.



Tue 2023-03-14 14:03:32.345: --
Tue 2023-03-14 14:04:00.028: SMTP screening added 168.245.118.232; connected 
101 times within 3 minutes
Tue 2023-03-14 14:04:00.029: --
Tue 2023-03-14 14:04:00.031: Dynamic screening refused connection to 
103.150.114.155:25 from 168.245.118.232; 180 minutes remain
Tue 2023-03-14 14:04:00.032: --



Kelihatnya ini koneksi mail firewall antivirus yang berbasis MTA Exim yang 
sering pakai protocol yang tidak standard Internet Mail (RFC standard).
Coba periksa di smtp-in log 2023-03-14 sebelum jam 14:03 server 168.245.118.232 
identitas hostnya apa dan kirim mail dari sender mana ke recipient mana saja 
(mungkin lebih dari 101 recipient)



Sebelumnya saya sudah masukan sebagai trusted hosts tetapi masih terjadi hal 
ini.


Jangan pakai trusted host/trusted IP, itu berkaitan dengan "mail relaying" dan 
bypass antispam/antivirus.


Kelihatannya SMTP screening diaktifkan ya.
Coba periksa berapa besar nilainya.

http://mdaemon.dutaint.co.id/mdaemon/23.0/security--smtp_screen.html





--
syafril

Syafril Hermansyah

MDaemon-L Moderator, run MDaemon 23.0.1 Beta A
Mohon tidak kirim private mail (atau cc:) untuk masalah MDaemon.

Anda tidak pernah akan menemukan diri Anda sampai Anda menghadapi kebenaran
-- Pearl Bailey



--
--[mdaemon-l]--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com
Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com
Versi terakhir: MDaemon 23.0.0, SecurityGateway 9.0.1

[Mdaemon-L] Dynamic screening refused connection

[Bambang Setiawan via Mdaemon-L]

Maaf terlampir tambahan log-nya ya pak
Tue 2023-03-14 18:02:15.303: --
Tue 2023-03-14 18:02:15.534: [38439287] Session 38439287; child 0004
Tue 2023-03-14 18:02:15.534: [38439287] Accepting SMTP connection from 
168.245.118.232:35380 to 103.150.114.155:25
Tue 2023-03-14 18:02:15.534: [38439287] Location Screen says connection is from 
United States, North America
Tue 2023-03-14 18:02:15.535: [38439287] --> 220 mail.persada.id ESMTP MDaemon 
23.0.0; Tue, 14 Mar 2023 18:02:15 +0700
Tue 2023-03-14 18:02:15.789: [38439287] <-- EHLO o1.ptr5115.jurnal.id
Tue 2023-03-14 18:02:15.790: [38439287] --> 250-mail.persada.id Hello 
o1.ptr5115.jurnal.id [168.245.118.232], pleased to meet you
Tue 2023-03-14 18:02:15.790: [38439287] --> 250-ETRN
Tue 2023-03-14 18:02:15.790: [38439287] Location Screening hiding AUTH from 
country United States, North America
Tue 2023-03-14 18:02:15.790: [38439287] --> 250-8BITMIME
Tue 2023-03-14 18:02:15.790: [38439287] --> 250-ENHANCEDSTATUSCODES
Tue 2023-03-14 18:02:15.790: [38439287] --> 250-PIPELINING
Tue 2023-03-14 18:02:15.790: [38439287] --> 250-CHUNKING
Tue 2023-03-14 18:02:15.790: [38439287] --> 250-STARTTLS
Tue 2023-03-14 18:02:15.790: [38439287] --> 250 SIZE
Tue 2023-03-14 18:02:16.055: [38439287] <-- STARTTLS
Tue 2023-03-14 18:02:16.055: [38439287] --> 220 2.7.0 Ready to start TLS
Tue 2023-03-14 18:02:16.617: [38439287] SSL negotiation successful (TLS 1.2, 
TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384)
Tue 2023-03-14 18:02:16.871: [38439287] <-- EHLO o1.ptr5115.jurnal.id
Tue 2023-03-14 18:02:16.871: [38439287] --> 250-mail.persada.id Hello 
o1.ptr5115.jurnal.id [168.245.118.232], pleased to meet you
Tue 2023-03-14 18:02:16.871: [38439287] --> 250-ETRN
Tue 2023-03-14 18:02:16.871: [38439287] Location Screening hiding AUTH from 
country United States, North America
Tue 2023-03-14 18:02:16.871: [38439287] --> 250-8BITMIME
Tue 2023-03-14 18:02:16.871: [38439287] --> 250-ENHANCEDSTATUSCODES
Tue 2023-03-14 18:02:16.871: [38439287] --> 250-PIPELINING
Tue 2023-03-14 18:02:16.871: [38439287] --> 250-CHUNKING
Tue 2023-03-14 18:02:16.871: [38439287] --> 250-REQUIRETLS
Tue 2023-03-14 18:02:16.871: [38439287] --> 250 SIZE
Tue 2023-03-14 18:02:17.140: [38439287] <-- MAIL 
FROM: 
BODY=8BITMIME
Tue 2023-03-14 18:02:17.159: [38439287] Performing PTR lookup 
(232.118.245.168.IN-ADDR.ARPA)
Tue 2023-03-14 18:02:17.161: [38439287] *  D=232.118.245.168.IN-ADDR.ARPA 
TTL=(4) PTR=[o1.ptr5115.jurnal.id]
Tue 2023-03-14 18:02:17.163: [38439287] *  D=o1.ptr5115.jurnal.id TTL=(4) 
A=[168.245.118.232]
Tue 2023-03-14 18:02:17.163: [38439287]  End PTR results
Tue 2023-03-14 18:02:17.166: [38439287] Performing IP lookup 
(o1.ptr5115.jurnal.id)
Tue 2023-03-14 18:02:17.168: [38439287] *  D=o1.ptr5115.jurnal.id TTL=(4) 
A=[168.245.118.232]
Tue 2023-03-14 18:02:17.168: [38439287]  End IP lookup results
Tue 2023-03-14 18:02:17.175: [38439287] Performing IP lookup (sendgrid.net)
Tue 2023-03-14 18:02:17.177: [38439287] *  D=sendgrid.net TTL=(0) 
A=[167.89.115.56]
Tue 2023-03-14 18:02:17.177: [38439287] *  D=sendgrid.net TTL=(0) 
A=[167.89.123.54]
Tue 2023-03-14 18:02:17.177: [38439287] *  D=sendgrid.net TTL=(0) 
A=[167.89.115.120]
Tue 2023-03-14 18:02:17.177: [38439287] *  D=sendgrid.net TTL=(0) 
A=[167.89.123.124]
Tue 2023-03-14 18:02:17.181: [38439287] *  P=010 S=000 D=sendgrid.net TTL=(0) 
MX=[mx.sendgrid.net]
Tue 2023-03-14 18:02:17.181: [38439287] *  P=020 S=001 D=sendgrid.net TTL=(0) 
MX=[mx2.sendgrid.net]
Tue 2023-03-14 18:02:17.184: [38439287] *  D=mx.sendgrid.net TTL=(20) 
A=[167.89.118.48]
Tue 2023-03-14 18:02:17.184: [38439287] *  D=mx.sendgrid.net TTL=(20) 
A=[167.89.123.50]
Tue 2023-03-14 18:02:17.186: [38439287] *  D=mx2.sendgrid.net TTL=(2) 
A=[167.89.123.50]
Tue 2023-03-14 18:02:17.186: [38439287] *  D=mx2.sendgrid.net TTL=(2) 
A=[167.89.118.48]
Tue 2023-03-14 18:02:17.186: [38439287]  End IP lookup results
Tue 2023-03-14 18:02:17.189: [38439287] --> 550 5.7.1 Sender unknown
Tue 2023-03-14 18:02:17.189: [38439287] Mail from 
bounces+32950962-4877-agung.oktaviansyah=persada...@sendgrid.net refused 
(Sender Block List)
Tue 2023-03-14 18:02:17.189: [38439287] SMTP session terminated (Bytes in/out: 
639/4261)
Tue 2023-03-14 18:02:17.189: --

Terima kasih

 

On Tuesday, 14 March 2023 at 18:34:04 GMT+7, Bambang Setiawan via Mdaemon-L 
 wrote:  
 
 Dear Pak Syafril,
Jika salah satu sender ter-refused connectionnya karena hal di bawah ini, saya 
harus setting dimana ya pak, supaya tidak terulang di refused oleh mail server 
kami.
Sebelumnya saya sudah masukan sebagai trusted hosts tetapi masih terjadi hal 
ini.

Tue 2023-03-14 14:03:32.345: --Tue 2023-03-14 14:04:00.028: SMTP 
screening added 168.245.118.232; connected 101 times within 3 minutes
Tue 2023-03-14 14:04:00.029: --
Tue 2023-03-14 14:04:00.031: Dynamic screening refused connection to 
103.150.114.155:25 from 168.245.118.232; 180 minutes remain
Tue 2023-03-14 14:04:00.032: --

Atas bantuannya diucapka

[Mdaemon-L] Dynamic screening refused connection

[Bambang Setiawan via Mdaemon-L]

Dear Pak Syafril,
Jika salah satu sender ter-refused connectionnya karena hal di bawah ini, saya 
harus setting dimana ya pak, supaya tidak terulang di refused oleh mail server 
kami.
Sebelumnya saya sudah masukan sebagai trusted hosts tetapi masih terjadi hal 
ini.

Tue 2023-03-14 14:03:32.345: --Tue 2023-03-14 14:04:00.028: SMTP 
screening added 168.245.118.232; connected 101 times within 3 minutes
Tue 2023-03-14 14:04:00.029: --
Tue 2023-03-14 14:04:00.031: Dynamic screening refused connection to 
103.150.114.155:25 from 168.245.118.232; 180 minutes remain
Tue 2023-03-14 14:04:00.032: --

Atas bantuannya diucapkan terima kasih.


Bambang Setiawan

PERSADA

-- 
--[mdaemon-l]--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com
Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com
Versi terakhir: MDaemon 23.0.0, SecurityGateway 9.0.1

[Mdaemon-L] Subcribe Mdaemon Forum

[Rievo Niemrod Efraim via Mdaemon-L]

From: Mdaemon-L@dutaint.com  on behalf of Syafril 
Hermansyah via Mdaemon-L (Mdaemon-L@dutaint.com) 
Sent: Tuesday, March 14, 2023 2:08 PM
To: Mdaemon-L@dutaint.com 
Subject: [Mdaemon-L] Subcribe Mdaemon Forum


> Karena yang terkirim itu salah alamat, dikirim ke Mdaemon-L@dutaint.com.
> Tetapi akhirnya sudah dikirim dengan benar.
> Dan saya sudah dapat konfirmasi bahwa akun rievo.niem...@ptbmi.com sudah
>jadi member.

baik Pak , Terima kasih.



--
--[mdaemon-l]--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com
Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com
Versi terakhir: MDaemon 23.0.0, SecurityGateway 9.0.1

[Mdaemon-L] Subcribe Mdaemon Forum

[Syafril Hermansyah via Mdaemon-L]

On 3/14/23 13:47, Rievo N via Mdaemon-L wrote:
Sudah saya kirim email ke mdaemon-l-subscr...@dutaint.com 
 tetapi tidak ada respond



Karena yang terkirim itu salah alamat, dikirim ke Mdaemon-L@dutaint.com.
Tetapi akhirnya sudah dikirim dengan benar.
Dan saya sudah dapat konfirmasi bahwa akun rievo.niem...@ptbmi.com sudah 
jadi member.




Tue 2023-03-14 09:31:27.247: --
Tue 2023-03-14 11:03:21.026: [03208081] REMOTE message: pd7501000803481.msg
Tue 2023-03-14 11:03:21.026: [03208081] *  Session 03208081; child 0001
Tue 2023-03-14 11:03:21.027: [03208081] *  From: mdae...@dutaint.com
Tue 2023-03-14 11:03:21.027: [03208081] *  To: rievo.niem...@ptbmi.com
Tue 2023-03-14 11:03:21.027: [03208081] *  Subject: MDaemon-L@dutaint.com -- 
confirmation of subscription -- request 36541
Tue 2023-03-14 11:03:21.027: [03208081] *  Message-ID: 

Tue 2023-03-14 11:03:21.027: [03208081] *  Size: 1486; 

Tue 2023-03-14 11:03:21.029: [03208081] Resolving TXT record for 
_mta-sts.ptbmi.com (DNS Server: 1.1.1.1)...
Tue 2023-03-14 11:03:21.075: [03208081] MTA-STS TXT record: v=STSv1; 
id=20200904T010101;
Tue 2023-03-14 11:03:21.075: [03208081] Requesting MTA-STS policy for 
ptbmi.com...
Tue 2023-03-14 11:03:21.261: [03208081] MTA-STS policy download failed - The 
host name in the certificate is invalid or does not match (12038)
Tue 2023-03-14 11:03:21.261: [03208081] MTA-STS failure for ptbmi.com: Policy 
could not be authenticated using PKIX validation
Tue 2023-03-14 11:03:21.262: [03208081] Resolving TXT record for 
_smtp._tls.ptbmi.com (DNS Server: 1.1.1.1)...
Tue 2023-03-14 11:03:21.328: [03208081] TLS Reporting TXT record: 
v=TLSRPTv1;rua=mailto:mtasts-repo...@ptbmi.com
Tue 2023-03-14 11:03:21.328: [03208081] Resolving MX record for ptbmi.com (DNS 
Server: 1.1.1.1)...
Tue 2023-03-14 11:03:21.376: [03208081] *  P=005 S=000 D=ptbmi.com TTL=(60) 
MX=[bb.ptbmi.com]
Tue 2023-03-14 11:03:21.376: [03208081] Attempting SMTP connection to 
bb.ptbmi.com
Tue 2023-03-14 11:03:21.379: [03208081] Resolving A record for bb.ptbmi.com 
(DNS Server: 1.1.1.1)...
Tue 2023-03-14 11:03:21.427: [03208081] *  D=bb.ptbmi.com TTL=(60) 
A=[202.148.25.131]
Tue 2023-03-14 11:03:21.427: [03208081] Attempting SMTP connection to 
202.148.25.131:25
Tue 2023-03-14 11:03:21.432: [03208081] Waiting for socket connection...
Tue 2023-03-14 11:03:21.464: [03208081] *  Connection established 
113.20.31.187:1141 --> 202.148.25.131:25
Tue 2023-03-14 11:03:21.464: [03208081] Waiting for protocol to start...
Tue 2023-03-14 11:03:21.485: [03208081] <-- 220 bb.ptbmi.com ESMTP MDaemon 
22.0.3; Tue, 14 Mar 2023 11:03:03 +0700
Tue 2023-03-14 11:03:21.486: [03208081] --> EHLO list.dutaint.com
Tue 2023-03-14 11:03:21.507: [03208081] <-- 250-bb.ptbmi.com Hello 
list.dutaint.com [113.20.31.187], pleased to meet you
Tue 2023-03-14 11:03:21.507: [03208081] <-- 250-ETRN
Tue 2023-03-14 11:03:21.507: [03208081] <-- 250-AUTH LOGIN CRAM-MD5 PLAIN
Tue 2023-03-14 11:03:21.507: [03208081] <-- 250-8BITMIME
Tue 2023-03-14 11:03:21.507: [03208081] <-- 250-ENHANCEDSTATUSCODES
Tue 2023-03-14 11:03:21.507: [03208081] <-- 250-PIPELINING
Tue 2023-03-14 11:03:21.507: [03208081] <-- 250-CHUNKING
Tue 2023-03-14 11:03:21.507: [03208081] <-- 250-STARTTLS
Tue 2023-03-14 11:03:21.507: [03208081] <-- 250 SIZE
Tue 2023-03-14 11:03:21.508: [03208081] --> STARTTLS
Tue 2023-03-14 11:03:21.539: [03208081] <-- 220 2.7.0 Ready to start TLS
Tue 2023-03-14 11:03:21.561: [03208081] SSL negotiation successful (TLS 1.2, 
TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384)
Tue 2023-03-14 11:03:21.583: [03208081] SSL certificate is valid (matches 
bb.ptbmi.com and is signed by recognized CA)
Tue 2023-03-14 11:03:21.583: [03208081] --> EHLO list.dutaint.com
Tue 2023-03-14 11:03:21.611: [03208081] <-- 250-bb.ptbmi.com Hello 
list.dutaint.com [113.20.31.187], pleased to meet you
Tue 2023-03-14 11:03:21.611: [03208081] <-- 250-ETRN
Tue 2023-03-14 11:03:21.611: [03208081] <-- 250-AUTH LOGIN CRAM-MD5 PLAIN
Tue 2023-03-14 11:03:21.611: [03208081] <-- 250-8BITMIME
Tue 2023-03-14 11:03:21.611: [03208081] <-- 250-ENHANCEDSTATUSCODES
Tue 2023-03-14 11:03:21.611: [03208081] <-- 250-PIPELINING
Tue 2023-03-14 11:03:21.611: [03208081] <-- 250-CHUNKING
Tue 2023-03-14 11:03:21.611: [03208081] <-- 250-REQUIRETLS
Tue 2023-03-14 11:03:21.611: [03208081] <-- 250 SIZE
Tue 2023-03-14 11:03:21.612: [03208081] --> MAIL 
From: SIZE=1486
Tue 2023-03-14 11:03:21.612: [03208081] --> RCPT To:
Tue 2023-03-14 11:03:21.751: [03208081] <-- 250 2.1.0 Sender OK
Tue 2023-03-14 11:03:25.185: [03208081] <-- 250 2.1.5 Recipient OK
Tue 2023-03-14 11:03:25.185: [03208081] --> BDAT 1486 LAST
Tue 2023-03-14 11:03:25.185: [03208081] Sending 
 to [202.148.25.131]
Tue 2023-03-14 11:03:25.187: [03208081] Transfer Complete
Tue 2023-03-14 11:03:30.575: [03208081] <-- 250 2.6.0 Ok, message saved >
Tue 2023-03-14 11:03:30.577: [03208081] --> QUIT
Tue 2023-03-14 11:03:30.604: [03208081] <-- 221 2.0.0 See ya in cyberspace
Tue 2023