Can't recive mail using ISPConfig 3.

Discussion in 'Installation/Configuration' started by fazelukario, Feb 24, 2021.

  1. fazelukario

    fazelukario New Member

    System: Ubuntu 20.04 (LTS)
    ISPConfig version: 3.2.2
    PHP CLI version: 7.4.15
    Using postfix and dovecot.

    Everything is working except incoming email.

    I can login to roundcube and can send mail, but can't recive it. When I try to send mail from [email protected] (or another mail service) to [email protected] I getting this massage to my gmail.

    Code:
    Received: by mydomain.tld (Postfix) id 5204D17B6E0; Wed, 24 Feb 2021 13:41:07 +0000 (UTC)
    Date: Wed, 24 Feb 2021 13:41:07 +0000 (UTC)
    From: Mail Delivery System <[email protected]>
    Subject: Undelivered Mail Returned to Sender
    To: [email protected]
    Auto-Submitted: auto-replied
    MIME-Version: 1.0
    Content-Type: multipart/report; report-type=delivery-status; boundary="6253A17B6DD.1614174067/mydomain.tld"
    Content-Transfer-Encoding: 8bit
    Message-Id: <[email protected]>
    
    --6253A17B6DD.1614174067/mydomain.tld
    Content-Description: Notification
    Content-Type: text/plain; charset=utf-8
    Content-Transfer-Encoding: 8bit
    
    This is the mail system at host mydomain.tld.
    
    I'm sorry to have to inform you that your message could not
    be delivered to one or more recipients. It's attached below.
    
    For further assistance, please send mail to postmaster.
    
    If you do so, please include this problem report. You can
    delete your own text from the attached returned message.
    
                       The mail system
    
    <[email protected]>: unknown user: "admin"

    Here's full mail log from /var/log/mail.log (named mail.txt) and short mail log after sending mail from [email protected] to [email protected] (named shortmail.txt).
     

    Attached Files:

    Last edited: Feb 27, 2021
  2. Th0m

    Th0m ISPConfig Developer Staff Member ISPConfig Developer

  3. fazelukario

    fazelukario New Member

  4. Jesse Norell

    Jesse Norell Well-Known Member Staff Member Howtoforge Staff

    Do you mean the server does not accept mail from other servers, or that you are not able to login with pop3/imap to retrieve it?

    Did you try the simple mail test in that faq? What were the results?

    You posted almost 2 hours of mail logs, that is not very useful. Reproduce your problem and post the mail logs that show up at that time.
     
  5. Th0m

    Th0m ISPConfig Developer Staff Member ISPConfig Developer

    In the Read before posting, the following things are noted at the top of the thread:
    - If your system is malfunctioning, please run the test script and share the output in a code block.
    You did not run this script.
    - If you are sharing logs, the output of a command, or the content of config files, put it in a code block
    You attached a file with a log, which most people rather don't download because it can be a malicious file.

    And there is a FAQ item in it "I can't send/receive email", did you read this?

    I am very willing to help out, but without any proper information it is hard to say why it is not working.
     
  6. fazelukario

    fazelukario New Member

    Yes, result is nothing happen, mail send without error and dont fall back to mail box.
     
  7. fazelukario

    fazelukario New Member

    I can login to roundcube and can send mail, but can't recive it. When I try to send mail from [email protected] (or another mail service) to [email protected] I getting this massage to my gmail.

    Code:
    Received: by mydomain.tld (Postfix) id 5204D17B6E0; Wed, 24 Feb 2021 13:41:07 +0000 (UTC)
    Date: Wed, 24 Feb 2021 13:41:07 +0000 (UTC)
    From: Mail Delivery System <[email protected]>
    Subject: Undelivered Mail Returned to Sender
    To: [email protected]
    Auto-Submitted: auto-replied
    MIME-Version: 1.0
    Content-Type: multipart/report; report-type=delivery-status; boundary="6253A17B6DD.1614174067/mydomain.tld"
    Content-Transfer-Encoding: 8bit
    Message-Id: <[email protected]>
    
    --6253A17B6DD.1614174067/mydomain.tld
    Content-Description: Notification
    Content-Type: text/plain; charset=utf-8
    Content-Transfer-Encoding: 8bit
    
    This is the mail system at host mydomain.tld.
    
    I'm sorry to have to inform you that your message could not
    be delivered to one or more recipients. It's attached below.
    
    For further assistance, please send mail to postmaster.
    
    If you do so, please include this problem report. You can
    delete your own text from the attached returned message.
    
                       The mail system
    
    <[email protected]>: unknown user: "admin"
     
    Last edited: Feb 27, 2021
  8. fazelukario

    fazelukario New Member

    Here's couple minutes of log after sending mail from [email protected] to [email protected].


    Code:
    Feb 25 11:19:49 mydomain postfix/smtpd[177941]: connect from unknown[45.142.120.137]
    Feb 25 11:19:52 mydomain postfix/smtpd[179238]: connect from unknown[45.142.120.90]
    Feb 25 11:19:54 mydomain postfix/smtpd[177449]: connect from unknown[45.142.120.74]
    Feb 25 11:19:55 mydomain postfix/smtpd[177941]: warning: unknown[45.142.120.137]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
    Feb 25 11:19:55 mydomain postfix/smtpd[177941]: disconnect from unknown[45.142.120.137] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
    Feb 25 11:19:55 mydomain postfix/smtpd[179240]: connect from unknown[45.142.120.84]
    Feb 25 11:19:58 mydomain postfix/smtpd[179238]: warning: unknown[45.142.120.90]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
    Feb 25 11:19:58 mydomain postfix/smtpd[179238]: disconnect from unknown[45.142.120.90] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
    Feb 25 11:20:01 mydomain postfix/smtpd[177814]: connect from localhost[127.0.0.1]
    Feb 25 11:20:01 mydomain postfix/smtpd[177814]: lost connection after CONNECT from localhost[127.0.0.1]
    Feb 25 11:20:01 mydomain postfix/smtpd[177814]: disconnect from localhost[127.0.0.1] commands=0/0
    Feb 25 11:20:01 mydomain dovecot: imap-login: Disconnected (no auth attempts in 0 secs): user=<>, rip=127.0.0.1, lip=127.0.0.1, secured, session=<H7YhVSe8pLx/AAAB>
    Feb 25 11:20:01 mydomain dovecot: pop3-login: Disconnected (no auth attempts in 0 secs): user=<>, rip=127.0.0.1, lip=127.0.0.1, secured, session=<BtUhVSe8HOZ/AAAB>
    Feb 25 11:20:02 mydomain postfix/smtpd[177449]: warning: unknown[45.142.120.74]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
    Feb 25 11:20:02 mydomain postfix/smtpd[179240]: warning: unknown[45.142.120.84]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
    Feb 25 11:20:02 mydomain postfix/smtpd[179240]: disconnect from unknown[45.142.120.84] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
    Feb 25 11:20:02 mydomain postfix/smtpd[177449]: disconnect from unknown[45.142.120.74] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
    Feb 25 11:20:07 mydomain postfix/smtpd[178609]: connect from unknown[45.142.120.183]
    Feb 25 11:20:09 mydomain postfix/smtpd[180028]: connect from unknown[45.142.120.87]
    Feb 25 11:20:12 mydomain postfix/smtpd[178609]: warning: unknown[45.142.120.183]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
    Feb 25 11:20:12 mydomain postfix/smtpd[178609]: disconnect from unknown[45.142.120.183] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
    Feb 25 11:20:15 mydomain postfix/smtpd[177160]: connect from unknown[45.142.120.138]
    Feb 25 11:20:16 mydomain postfix/smtpd[180028]: warning: unknown[45.142.120.87]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
    Feb 25 11:20:17 mydomain postfix/smtpd[180028]: disconnect from unknown[45.142.120.87] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
    Feb 25 11:20:17 mydomain postfix/smtpd[177941]: connect from unknown[45.142.120.180]
    Feb 25 11:20:19 mydomain postfix/smtpd[179238]: connect from unknown[45.142.120.215]
    Feb 25 11:20:21 mydomain postfix/smtpd[177160]: warning: unknown[45.142.120.138]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
    Feb 25 11:20:21 mydomain postfix/smtpd[177160]: disconnect from unknown[45.142.120.138] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
    Feb 25 11:20:24 mydomain postfix/smtpd[177814]: connect from unknown[45.142.120.79]
    Feb 25 11:20:24 mydomain postfix/smtpd[177941]: warning: unknown[45.142.120.180]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
    Feb 25 11:20:24 mydomain postfix/smtpd[177941]: disconnect from unknown[45.142.120.180] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
    Feb 25 11:20:25 mydomain postfix/smtpd[179240]: connect from unknown[45.142.120.93]
    Feb 25 11:20:26 mydomain postfix/smtpd[179238]: warning: unknown[45.142.120.215]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
    Feb 25 11:20:26 mydomain postfix/smtpd[179238]: disconnect from unknown[45.142.120.215] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
    Feb 25 11:20:27 mydomain postfix/smtpd[179240]: warning: unknown[45.142.120.93]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
    Feb 25 11:20:28 mydomain postfix/smtpd[179240]: disconnect from unknown[45.142.120.93] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
    Feb 25 11:20:30 mydomain postfix/smtpd[177449]: connect from unknown[45.142.120.65]
    Feb 25 11:20:30 mydomain postfix/smtpd[177814]: warning: unknown[45.142.120.79]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
    Feb 25 11:20:30 mydomain postfix/smtpd[177814]: disconnect from unknown[45.142.120.79] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
    Feb 25 11:20:34 mydomain postfix/smtpd[177449]: warning: unknown[45.142.120.65]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
    Feb 25 11:20:34 mydomain postfix/smtpd[177449]: disconnect from unknown[45.142.120.65] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
    Feb 25 11:20:42 mydomain postfix/smtpd[178609]: connect from unknown[45.142.120.90]
    Feb 25 11:20:42 mydomain postfix/smtpd[180028]: connect from unknown[45.142.120.137]
    Feb 25 11:20:44 mydomain postfix/smtpd[177160]: connect from unknown[45.142.120.84]
    Feb 25 11:20:47 mydomain postfix/smtpd[177941]: connect from unknown[45.142.120.74]
    Feb 25 11:20:48 mydomain postfix/smtpd[178609]: warning: unknown[45.142.120.90]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
    Feb 25 11:20:48 mydomain postfix/smtpd[178609]: disconnect from unknown[45.142.120.90] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
    Feb 25 11:20:49 mydomain postfix/smtpd[180028]: warning: unknown[45.142.120.137]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
    Feb 25 11:20:49 mydomain postfix/smtpd[180028]: disconnect from unknown[45.142.120.137] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
    Feb 25 11:20:50 mydomain postfix/smtpd[177160]: warning: unknown[45.142.120.84]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
    Feb 25 11:20:50 mydomain postfix/smtpd[177160]: disconnect from unknown[45.142.120.84] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
    Feb 25 11:20:52 mydomain postfix/smtpd[177941]: warning: unknown[45.142.120.74]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
    Feb 25 11:20:52 mydomain postfix/smtpd[177941]: disconnect from unknown[45.142.120.74] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
    Feb 25 11:20:55 mydomain postfix/smtpd[177814]: connect from mail-yb1-f175.google.com[209.85.219.175]
    Feb 25 11:20:56 mydomain postfix/trivial-rewrite[180582]: warning: do not list domain mydomain.com.ua in BOTH mydestination and virtual_mailbox_domains
    Feb 25 11:20:56 mydomain postfix/smtpd[177814]: 95BA117B6A6: client=mail-yb1-f175.google.com[209.85.219.175]
    Feb 25 11:20:56 mydomain postfix/cleanup[180585]: 95BA117B6A6: message-id=<CAGv9CEnQUkUd9V0HpyY-v5VtFjo_vbMY0BzghqusOL=1nE+YfA@mail.gmail.com>
    Feb 25 11:20:57 mydomain postfix/smtpd[179238]: connect from unknown[45.142.120.183]
    Feb 25 11:20:57 mydomain postfix/qmgr[1608]: 95BA117B6A6: from=<[email protected]>, size=5353, nrcpt=1 (queue active)
    Feb 25 11:20:57 mydomain postfix/trivial-rewrite[180582]: warning: do not list domain mydomain.com.ua in BOTH mydestination and virtual_mailbox_domains
    Feb 25 11:20:58 mydomain postfix/local[180586]: 95BA117B6A6: to=<[email protected]>, relay=local, delay=1.5, delays=1.5/0.01/0/0.01, dsn=5.1.1, status=bounced (unknown user: "admin")
    Feb 25 11:20:58 mydomain postfix/cleanup[180585]: 01B9A17B718: message-id=<[email protected]>
    Feb 25 11:20:58 mydomain postfix/qmgr[1608]: 01B9A17B718: from=<>, size=7629, nrcpt=1 (queue active)
    Feb 25 11:20:58 mydomain postfix/bounce[180587]: 95BA117B6A6: sender non-delivery notification: 01B9A17B718
    Feb 25 11:20:58 mydomain postfix/qmgr[1608]: 95BA117B6A6: removed
    Feb 25 11:20:58 mydomain postfix/smtpd[177814]: disconnect from mail-yb1-f175.google.com[209.85.219.175] ehlo=2 starttls=1 mail=1 rcpt=1 bdat=1 quit=1 commands=7
    Feb 25 11:20:58 mydomain postfix/smtp[180588]: connect to gmail-smtp-in.l.google.com[2a00:1450:4013:c01::1b]:25: Network is unreachable
    Feb 25 11:20:58 mydomain postfix/smtp[180588]: 01B9A17B718: to=<[email protected]>, relay=gmail-smtp-in.l.google.com[108.177.126.26]:25, delay=0.81, delays=0/0.01/0.38/0.41, dsn=2.0.0, status=sent (250 2.0.0 OK  1614252058 k17si3285478ejg.621 - gsmtp)
    Feb 25 11:20:58 mydomain postfix/qmgr[1608]: 01B9A17B718: removed
    Feb 25 11:21:00 mydomain dovecot: imap-login: Login: user=<[email protected]>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=180591, secured, session=<AripWCe8EL1/AAAB>
    Feb 25 11:21:00 mydomain dovecot: imap([email protected])<180591><AripWCe8EL1/AAAB>: Logged out in=29 out=537 deleted=0 expunged=0 trashed=0 hdr_count=0 hdr_bytes=0 body_count=0 body_bytes=0
    Feb 25 11:21:00 mydomain dovecot: imap-login: Login: user=<[email protected]>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=180593, secured, session=<V6qqWCe8Er1/AAAB>
    Feb 25 11:21:00 mydomain dovecot: imap([email protected])<180593><V6qqWCe8Er1/AAAB>: Logged out in=70 out=668 deleted=0 expunged=0 trashed=0 hdr_count=0 hdr_bytes=0 body_count=0 body_bytes=0
    Feb 25 11:21:01 mydomain dovecot: imap-login: Login: user=<[email protected]>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=180597, secured, session=<UMytWCe8FL1/AAAB>
    Feb 25 11:21:01 mydomain dovecot: imap([email protected])<180597><UMytWCe8FL1/AAAB>: Logged out in=76 out=581 deleted=0 expunged=0 trashed=0 hdr_count=0 hdr_bytes=0 body_count=0 body_bytes=0
    Feb 25 11:21:01 mydomain dovecot: imap-login: Login: user=<[email protected]>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=180598, secured, session=<H+CtWCe8Fr1/AAAB>
    Feb 25 11:21:01 mydomain dovecot: imap([email protected])<180598><H+CtWCe8Fr1/AAAB>: Logged out in=233 out=1062 deleted=0 expunged=0 trashed=0 hdr_count=0 hdr_bytes=0 body_count=0 body_bytes=0
    Feb 25 11:21:01 mydomain postfix/smtpd[179240]: connect from unknown[45.142.120.87]
    Feb 25 11:21:04 mydomain postfix/smtpd[179238]: warning: unknown[45.142.120.183]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
    Feb 25 11:21:04 mydomain postfix/smtpd[179238]: disconnect from unknown[45.142.120.183] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
    Feb 25 11:21:06 mydomain postfix/smtpd[179240]: warning: unknown[45.142.120.87]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
    Feb 25 11:21:06 mydomain postfix/smtpd[179240]: disconnect from unknown[45.142.120.87] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
    Feb 25 11:21:08 mydomain postfix/smtpd[177449]: connect from unknown[45.142.120.180]
    Feb 25 11:21:10 mydomain postfix/smtpd[178609]: connect from unknown[45.142.120.215]
    Feb 25 11:21:13 mydomain postfix/smtpd[180028]: connect from unknown[45.142.120.79]
    Feb 25 11:21:15 mydomain postfix/smtpd[177449]: warning: unknown[45.142.120.180]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
    Feb 25 11:21:15 mydomain postfix/smtpd[177160]: connect from unknown[45.142.120.93]
    Feb 25 11:21:16 mydomain postfix/smtpd[177449]: disconnect from unknown[45.142.120.180] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
    Feb 25 11:21:17 mydomain postfix/smtpd[178609]: warning: unknown[45.142.120.215]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
    Feb 25 11:21:17 mydomain postfix/smtpd[178609]: disconnect from unknown[45.142.120.215] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
    Feb 25 11:21:20 mydomain postfix/smtpd[180028]: warning: unknown[45.142.120.79]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
    Feb 25 11:21:20 mydomain postfix/smtpd[180028]: disconnect from unknown[45.142.120.79] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
    Feb 25 11:21:22 mydomain postfix/smtpd[177160]: warning: unknown[45.142.120.93]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
    Feb 25 11:21:22 mydomain postfix/smtpd[177160]: disconnect from unknown[45.142.120.93] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
    Feb 25 11:21:31 mydomain postfix/smtpd[177941]: connect from unknown[45.142.120.90]
    Feb 25 11:21:33 mydomain postfix/smtpd[177814]: connect from unknown[45.142.120.84]
    Feb 25 11:21:35 mydomain postfix/smtpd[179238]: connect from unknown[45.142.120.137]
    Feb 25 11:21:35 mydomain postfix/smtpd[179240]: connect from unknown[45.142.120.138]
    Feb 25 11:21:38 mydomain postfix/smtpd[177941]: warning: unknown[45.142.120.90]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
    Feb 25 11:21:38 mydomain postfix/smtpd[177941]: disconnect from unknown[45.142.120.90] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
    Feb 25 11:21:39 mydomain postfix/smtpd[177814]: warning: unknown[45.142.120.84]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
    Feb 25 11:21:39 mydomain postfix/smtpd[177814]: disconnect from unknown[45.142.120.84] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
    Feb 25 11:21:41 mydomain postfix/smtpd[177449]: connect from unknown[45.142.120.74]
    Feb 25 11:21:42 mydomain postfix/smtpd[179238]: warning: unknown[45.142.120.137]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
    Feb 25 11:21:42 mydomain postfix/smtpd[179240]: warning: unknown[45.142.120.138]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
    Feb 25 11:21:42 mydomain postfix/smtpd[179240]: disconnect from unknown[45.142.120.138] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
    Feb 25 11:21:42 mydomain postfix/smtpd[179238]: disconnect from unknown[45.142.120.137] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
    Feb 25 11:21:45 mydomain postfix/smtpd[177449]: warning: unknown[45.142.120.74]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
    Feb 25 11:21:45 mydomain postfix/smtpd[177449]: disconnect from unknown[45.142.120.74] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
    Feb 25 11:21:46 mydomain postfix/smtpd[178609]: connect from unknown[45.142.120.183]
    Feb 25 11:21:49 mydomain postfix/smtpd[180028]: connect from unknown[45.142.120.65]
    Feb 25 11:21:52 mydomain postfix/smtpd[180028]: warning: unknown[45.142.120.65]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
    Feb 25 11:21:52 mydomain postfix/smtpd[180028]: disconnect from unknown[45.142.120.65] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
    Feb 25 11:21:53 mydomain postfix/smtpd[178609]: warning: unknown[45.142.120.183]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
    Feb 25 11:21:53 mydomain postfix/smtpd[178609]: disconnect from unknown[45.142.120.183] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
    Feb 25 11:21:53 mydomain postfix/smtpd[177160]: connect from unknown[45.142.120.87]
    Feb 25 11:21:58 mydomain postfix/smtpd[177941]: connect from unknown[45.142.120.180]
    Feb 25 11:22:00 mydomain postfix/smtpd[177160]: warning: unknown[45.142.120.87]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
    Feb 25 11:22:00 mydomain postfix/smtpd[177160]: disconnect from unknown[45.142.120.87] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
    Feb 25 11:22:01 mydomain dovecot: imap-login: Login: user=<[email protected]>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=180628, secured, session=<+I1LXCe8Tr1/AAAB>
    Feb 25 11:22:01 mydomain dovecot: imap([email protected])<180628><+I1LXCe8Tr1/AAAB>: Logged out in=50 out=540 deleted=0 expunged=0 trashed=0 hdr_count=0 hdr_bytes=0 body_count=0 body_bytes=0
    Feb 25 11:22:01 mydomain postfix/smtpd[177814]: connect from unknown[45.142.120.215]
    Feb 25 11:22:03 mydomain postfix/smtpd[179240]: connect from unknown[45.142.120.79]
    Feb 25 11:22:05 mydomain postfix/smtpd[177941]: warning: unknown[45.142.120.180]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
    Feb 25 11:22:05 mydomain postfix/smtpd[177941]: disconnect from unknown[45.142.120.180] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
    Feb 25 11:22:06 mydomain postfix/smtpd[179238]: connect from unknown[45.142.120.93]
    Feb 25 11:22:08 mydomain postfix/smtpd[177814]: warning: unknown[45.142.120.215]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
    Feb 25 11:22:08 mydomain postfix/smtpd[177814]: disconnect from unknown[45.142.120.215] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
    Feb 25 11:22:09 mydomain postfix/smtpd[179240]: warning: unknown[45.142.120.79]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
    Feb 25 11:22:09 mydomain postfix/smtpd[179240]: disconnect from unknown[45.142.120.79] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
    Feb 25 11:22:13 mydomain postfix/smtpd[179238]: warning: unknown[45.142.120.93]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
    Feb 25 11:22:13 mydomain postfix/smtpd[179238]: disconnect from unknown[45.142.120.93] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
    
     

    Attached Files:

    Last edited: Feb 27, 2021
  9. fazelukario

    fazelukario New Member

    Yes, I read it.

    I posted everything thats needed in massages #6, #7, #8
     
  10. Taleman

    Taleman Well-Known Member HowtoForge Supporter

    From the log that you posted (you are expected to read them youself, not just blindly post walls of text)
    Code:
     warning: do not list domain mydomain.tld in BOTH mydestination and virtual_mailbox_domains
    Fix that.
    The reason you did not receive e-mail is:
    Code:
    The mail system
    
    <[email protected]>: unknown user: "admin"
    Have you created a mailbox for admin?
    You still have not posted the report file the test script made.
     
    Last edited by a moderator: Feb 27, 2021
  11. till

    till Super Moderator Staff Member ISPConfig Developer

    The reason is probably the wrong mydestination setting that you (@Taleman) pointed out to him, mydestination must be a subdomain like mail.myserver.com and never a domain name that is used for sending or receiving emails on a postfix virtual user system.
     
    Last edited by a moderator: Feb 27, 2021
  12. fazelukario

    fazelukario New Member

    Yes this mailbox created.
     
  13. fazelukario

    fazelukario New Member

    Yeah thats it, thank you!
     
  14. fazelukario

    fazelukario New Member

    So, in summary: To fix this issue in my case i will need to replace mydomain.tld to mail.mydomain.tld in mydestination (in postfix main.cf /etc/postfix/main.cf)
     
  15. fazelukario

    fazelukario New Member

    So, just a little tech question:

    Whats I can do with this warnings in mail.log?

    Code:
    Feb 25 13:30:15 mydomain postfix/smtpd[186365]: warning: unknown[45.142.120.74]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
    Feb 25 13:30:15 mydomain postfix/smtpd[186365]: disconnect from unknown[45.142.120.74] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
    Feb 25 13:30:16 mydomain postfix/smtpd[187197]: connect from unknown[45.142.120.84]
    Feb 25 13:30:20 mydomain postfix/smtpd[186328]: warning: unknown[45.142.120.183]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
    Feb 25 13:30:20 mydomain postfix/smtpd[186328]: disconnect from unknown[45.142.120.183] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
    Feb 25 13:30:21 mydomain postfix/smtpd[187197]: warning: unknown[45.142.120.84]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
    Feb 25 13:30:21 mydomain postfix/smtpd[188290]: warning: unknown[45.142.120.90]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
    Feb 25 13:30:21 mydomain postfix/smtpd[187197]: disconnect from unknown[45.142.120.84] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
    Feb 25 13:30:21 mydomain postfix/smtpd[188290]: disconnect from unknown[45.142.120.90] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
    Feb 25 13:30:22 mydomain postfix/smtpd[185905]: connect from unknown[45.142.120.93]
     
    Last edited: Feb 27, 2021
  16. Taleman

    Taleman Well-Known Member HowtoForge Supporter

    Convince the cracker at IP address 45.142.120.74 to stop trying to break into your server.
    Those attempts happen on every computer connect to the Internet. Install fail2ban and configure it, then go do things that make you happy.
     
  17. fazelukario

    fazelukario New Member

    Can you please replace actualdomain.tld to mydomain.tld in both code sections.
     
    Last edited by a moderator: Feb 27, 2021
  18. Jesse Norell

    Jesse Norell Well-Known Member Staff Member Howtoforge Staff

    The domain has been changed. Note there is not very much at stake for posting your actual domain name, it usually enables those helping you to do a better job, quicker.
     

Share This Page