# NAT Mail — gisportal.id / 117.102.73.102

> Konteks Mailcow: `Mailcow/docs/notes/gisportal-id-mail.md`

---

## Arsitektur saat ini (2026-07-06)

```
Internet MX → mail.gisportal.id → 117.102.73.102
                                      │
                              MikroTik dst-nat
                                      │
                              10.100.1.28 (Mailcow)
                              :25 :587 :993 :465
```

| Publik `.102` | → Internal `.28` | Protokol |
|---------------|-------------------|----------|
| 25 | 25 | SMTP |
| 587 | 587 | Submission |
| 993 | 993 | IMAPS |
| 465 | 465 | SMTPS |

---

## Yang **tidak** di MikroTik

| Item | Lokasi benar |
|------|--------------|
| SPF `gisportal.id` | Master Web DNS |
| DKIM TXT | Master Web DNS |
| Mailbox / transport | Mailcow VM |

---

## Legacy geonet.co.id

NAT masih ada ke:

- `10.100.1.76` — mail hosting lama (port 25/143/993/587)
- `10.100.1.40` — beberapa rule **disabled** (AD)

Hybrid Mailcow `geonet.co.id` masih MX cPanel — NAT `.99` ke `.24` untuk web.

---

## Troubleshooting

| Gejala | Cek |
|--------|-----|
| Mail tidak masuk gisportal | NAT `.102:25` → `.28`; firewall filter forward |
| TLS mail gagal | Cert di Mailcow/nginx, bukan di MikroTik |
| SPF fail | DNS registrar, bukan router |

```routeros
/ip firewall nat print where dst-address=117.102.73.102
```