postfix & dovecot not sending/receiving after Apache2 and ISPConfig update

Discussion in 'General' started by decentris, Jan 17, 2024.

  1. decentris

    decentris Member HowtoForge Supporter

    Hi team,
    it's a long time since I wrote a help request, because up to now every issue could be solved by mysself, but now I do not know, what the cause of the following issue could be:

    On Sunday I upated "Apache2" to version "2.4.57 (Ubuntu)".

    Then everything was restarted and worked. Just I was not able to send and receive emails, although the mail client & webmail correctly connected to the postfix & dovecot services. I also upgraded "ISPConfig" to version "3.2.11p1" and suddenly it started working again.

    It did so until today and since noon there were no emails coming in. I also had the problem, that I could not connect to dovecot anymore, but postfix no problem. So I thought it might be a fail2ban issue. I activated my VPN and suddenly, I could connect to dovecot again.

    But still no emails are delivered / received although they are correctly sent (because in the Mails I send in my mail client also appear in the "sent" folder of roundcube). This was tested with internal and external email addresses (so the mails show up in the webmail sent folder but don't reach the external email address). I again restarted the server, made a resync via ISPConfig and also restarted the services one by one but no use. I am completely clueless what the issue could be.

    Postfix version: 3.3.0
    Dovecot version: 2.2.33.2
    Server: Ubuntu 18.04.6 LTS

    Maybe some of you had similar experiences and could give me a clue.

    Thank you very much for your valued help in advance.

    Best,
    Hannes
     
  2. till

    till Super Moderator Staff Member ISPConfig Developer

    Check the /var/log/mail.log file to find out why mails do not get delivered.
     
  3. decentris

    decentris Member HowtoForge Supporter

    That's the sending log of the sending from my locally with ISPConfig set up address to [email protected] (external). No receiving not even in SPAM. But in the "sent" folder of the webmail the sent mail shows up, although sent by external mail client, which also had no problem in connecting to postfix/dovecot. I myself don't know, what to read out from here:

    Jan 17 17:14:57 server postfix/smtps/smtpd[10866]: NOQUEUE: filter: RCPT from unknown[2.58.74.38]: <[email protected]>: Sender address triggers FILTER lmtp:[127.0.0.1]:10026; f$
    Jan 17 17:14:57 server postfix/smtps/smtpd[10866]: B8871A07181: client=unknown[2.58.74.38], sasl_method=LOGIN, [email protected]
    Jan 17 17:14:57 server postfix/cleanup[14028]: B8871A07181: message-id=<[email protected]>
    Jan 17 17:14:57 server postfix/qmgr[10793]: B8871A07181: from=<[email protected]>, size=2638, nrcpt=1 (queue active)
    Jan 17 17:14:57 server postfix/lmtp[14040]: connect to 127.0.0.1[127.0.0.1]:10026: Connection refused
    Jan 17 17:14:57 server postfix/lmtp[14040]: B8871A07181: to=<[email protected]>, relay=none, delay=0.29, delays=0.29/0/0/0, dsn=4.4.1, status=deferred (connect to 127.0.0.1[127.$
    Jan 17 17:14:58 server postfix/smtpd[10804]: warning: unknown[80.94.95.181]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
    Jan 17 17:14:58 server postfix/smtpd[10985]: connect from unknown[80.94.95.181]
    Jan 17 17:14:58 server postfix/smtpd[10804]: disconnect from unknown[80.94.95.181] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
    Jan 17 17:15:00 server dovecot: imap-login: Login: user=<[email protected]>, method=PLAIN, rip=2.58.74.38, lip=185.64.106.14, mpid=14052, TLS, session=<q3N8jCYPIekCOkom>
    Jan 17 17:15:00 server postfix/smtps/smtpd[10866]: disconnect from unknown[2.58.74.38] ehlo=1 auth=1 mail=1 rcpt=1 data=1 quit=1 commands=6
    Jan 17 17:15:02 server postfix/smtpd[10984]: connect from localhost[::1]
    Jan 17 17:15:02 server postfix/smtpd[10984]: lost connection after CONNECT from localhost[::1]
    Jan 17 17:15:02 server postfix/smtpd[10984]: disconnect from localhost[::1] commands=0/0
    Jan 17 17:15:02 server dovecot: pop3-login: Disconnected (no auth attempts in 0 secs): user=<>, rip=::1, lip=::1, secured, session=<XvWdjCYPSq4AAAAAAAAAAAAAAAAAAAAB>
    Jan 17 17:15:02 server dovecot: imap-login: Disconnected (no auth attempts in 0 secs): user=<>, rip=::1, lip=::1, secured, session=<CvmdjCYPqq8AAAAAAAAAAAAAAAAAAAAB>
    Jan 17 17:15:04 server postfix/smtpd[10807]: warning: unknown[45.129.14.179]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
    Jan 17 17:15:04 server postfix/smtpd[10807]: disconnect from unknown[45.129.14.179] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
    Jan 17 17:15:07 server dovecot: imap([email protected]): Logged out in=285 out=91549
    Jan 17 17:15:12 server postfix/smtpd[10985]: warning: unknown[80.94.95.181]: SASL LOGIN authentication failed: Connection lost to authentication server
    Jan 17 17:15:12 server postfix/smtpd[10985]: disconnect from unknown[80.94.95.181] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
    Jan 17 17:15:13 server postfix/smtps/smtpd[10939]: warning: unknown[141.98.11.68]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
    Jan 17 17:15:13 server postfix/smtps/smtpd[10921]: warning: hostname noiseless.medyamol.com does not resolve to address 141.98.11.68: Name or service not known
    Jan 17 17:15:13 server postfix/smtps/smtpd[10921]: connect from unknown[141.98.11.68]
    Jan 17 17:15:14 server postfix/smtpd[10804]: connect from unknown[80.94.95.181]
    Jan 17 17:15:15 server postfix/smtpd[10984]: warning: hostname 179.hosted-by.198xd.com does not resolve to address 45.129.14.179: Name or service not known
    Jan 17 17:15:15 server postfix/smtpd[10984]: connect from unknown[45.129.14.179]
    Jan 17 17:15:19 server postfix/smtps/smtpd[10939]: lost connection after AUTH from unknown[141.98.11.68]
    Jan 17 17:15:19 server postfix/smtps/smtpd[10939]: disconnect from unknown[141.98.11.68] ehlo=1 auth=0/1 rset=1 commands=2/3
    Jan 17 17:15:22 server postfix/smtpd[10984]: warning: unknown[45.129.14.179]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
    Jan 17 17:15:22 server postfix/smtpd[10804]: warning: unknown[80.94.95.181]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
    Jan 17 17:15:22 server postfix/smtpd[10804]: disconnect from unknown[80.94.95.181] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
    Jan 17 17:15:22 server postfix/smtpd[10984]: disconnect from unknown[45.129.14.179] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
    Jan 17 17:15:24 server postfix/smtps/smtpd[10866]: connect from unknown[194.169.175.10]
    Jan 17 17:15:25 server postfix/smtps/smtpd[11251]: warning: unknown[194.169.175.10]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
    Jan 17 17:15:29 server postfix/smtpd[10985]: connect from unknown[80.94.95.181]
    Jan 17 17:15:31 server postfix/smtps/smtpd[11251]: lost connection after AUTH from unknown[194.169.175.10]
    Jan 17 17:15:31 server postfix/smtps/smtpd[11251]: disconnect from unknown[194.169.175.10] ehlo=1 auth=0/1 rset=1 commands=2/3
    Jan 17 17:15:33 server dovecot: auth: Warning: auth client 0 disconnected with 1 pending requests: Connection reset by peer
    Jan 17 17:15:34 server dovecot: imap([email protected]): Logged out in=199 out=127008
    Jan 17 17:15:34 server postfix/smtpd[10804]: warning: hostname 179.hosted-by.198xd.com does not resolve to address 45.129.14.179: Name or service not known
    Jan 17 17:15:34 server postfix/smtpd[10804]: connect from unknown[45.129.14.179]
    Jan 17 17:15:37 server dovecot: imap-login: Login: user=<[email protected]>, method=PLAIN, rip=::1, lip=::1, mpid=14164, secured, session=<qKy0jiYPwscAAAAAAAAAAAAAAAAAAAAB>
    Jan 17 17:15:37 server dovecot: imap([email protected]): Logged out in=29 out=502
    Jan 17 17:15:37 server dovecot: imap-login: Login: user=<[email protected]>, method=PLAIN, rip=::1, lip=::1, mpid=14166, secured, session=<q1G2jiYPxMcAAAAAAAAAAAAAAAAAAAAB>
    Jan 17 17:15:37 server dovecot: imap([email protected]): Logged out in=70 out=901
    Jan 17 17:15:38 server dovecot: imap-login: Login: user=<[email protected]>, method=PLAIN, rip=::1, lip=::1, mpid=14169, secured, session=<W4rBjiYPyMcAAAAAAAAAAAAAAAAAAAAB>
    Jan 17 17:15:38 server dovecot: imap-login: Login: user=<[email protected]>, method=PLAIN, rip=::1, lip=::1, mpid=14170, secured, session=<967BjiYPzMcAAAAAAAAAAAAAAAAAAAAB>
    Jan 17 17:15:38 server dovecot: imap([email protected]): Logged out in=537 out=1908
    Jan 17 17:15:38 server dovecot: imap([email protected]): Logged out in=357 out=41377
    Jan 17 17:15:41 server postfix/smtpd[10985]: warning: unknown[80.94.95.181]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
    Jan 17 17:15:41 server postfix/smtpd[10804]: warning: unknown[45.129.14.179]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
    Jan 17 17:15:41 server postfix/smtpd[10804]: disconnect from unknown[45.129.14.179] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
    Jan 17 17:15:41 server dovecot: imap-login: Login: user=<[email protected]>, method=PLAIN, rip=::1, lip=::1, mpid=14177, secured, session=<teHwjiYPcukAAAAAAAAAAAAAAAAAAAAB>
    Jan 17 17:15:41 server dovecot: imap([email protected]): Logged out in=322 out=26979
    Jan 17 17:15:42 server postfix/smtpd[10985]: disconnect from unknown[80.94.95.181] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
    Jan 17 17:15:44 server dovecot: imap-login: Login: user=<[email protected]>, method=PLAIN, rip=::1, lip=::1, mpid=14180, secured, session=<0mMhjyYPdukAAAAAAAAAAAAAAAAAAAAB>
    Jan 17 17:15:44 server dovecot: imap([email protected]): Logged out in=392 out=3346
    Jan 17 17:15:45 server postfix/smtpd[10807]: connect from unknown[80.94.95.181]
    Jan 17 17:15:47 server dovecot: imap-login: Login: user=<[email protected]>, method=PLAIN, rip=::1, lip=::1, mpid=14182, secured, session=<fe5JjyYPfukAAAAAAAAAAAAAAAAAAAAB>
    Jan 17 17:15:47 server dovecot: imap([email protected]): Logged out in=357 out=41377
     
  4. decentris

    decentris Member HowtoForge Supporter

    The interesting thing is, that I deleted the respective IMAP email account in my external email client (Outlook 365, which always worked so far) before this sending test and re-set it up. It could connect flawlessly and also it synced all the emails to the very point of today, where no emails came in anymore. And the sent email above was also displayed in the webmail "sent" folder but never reached it's receiver (not even in SPAM). So I'm completely clueless.
     
  5. decentris

    decentris Member HowtoForge Supporter

    By the way, when I turn of VPN, no connection to dovecot possible anymore. When I try to unban from jail "dovecot", it tells me, that no such ip/ip-domain is in this jail, although I can see it in chain "f2b-dovecot-pop3imap". See below:
     

    Attached Files:

  6. decentris

    decentris Member HowtoForge Supporter

    What I also detected: When logging into roundcube, it tells me "Invalid Request. No data saved." When I try a second time, it logs in correcty. Also never did this before.
     
  7. decentris

    decentris Member HowtoForge Supporter

    If I send from the external email address to our IMAP address, I do not get any "rejected" message in my external client and the email also does not arrive in the webmail not to speak the mail client with the set up IMAP account. I'm desperate. :(
     
  8. till

    till Super Moderator Staff Member ISPConfig Developer

    Here we have the reason for the issue. Amavisd is not started. Please run the following commands and post the result:

    ps aux | grep amavis
    ps aux | grep rspamd
     
  9. decentris

    decentris Member HowtoForge Supporter

    Good morning Till!

    Thank you very, very much! It's working again. (such a little thing can cause so much trouble o_O)

    We can close this now. :)
     
  10. till

    till Super Moderator Staff Member ISPConfig Developer

    The amavisd service was not started. The two above commands have nothing to do with the fact that it's working again; they were just to find out that you do not run rspamd. Most likely, you rebooted the server or something similar, which caused Amavis to get started again.
     
    decentris likes this.
  11. decentris

    decentris Member HowtoForge Supporter

    Yes, I made the service check you posted, which already gave me a clue about the possible reason (amavisd). Then I checked the services to look, if amavisd was running or not (it was not, of course) and manually restarted it, é voila, mails got delivered and received. :) That's what I meant with a little thing, that caused much trouble.

    For the future I know what a possible reason could be for such an issue and that's great!

    Again, thank you very much, Till.
     
  12. Taleman

    Taleman Well-Known Member HowtoForge Supporter

  13. pyte

    pyte Well-Known Member HowtoForge Supporter

    Little things that could be monitored to minimize down time :)
     
    decentris likes this.
  14. decentris

    decentris Member HowtoForge Supporter

    Yeah, sure! But I was just clueless as everything was running for years and updates and after making this update, the issue arised. And as I tried to figure out for quite hours the forum was my last chance. Anyhow, I appologize for any inconvenience I might have caused.
    PS: Thx for the link. This might tell others being in my situations where to look before posting a help request.
     
    Last edited: Jan 19, 2024

Share This Page