Hi team, it's a long time since I wrote a help request, because up to now every issue could be solved by mysself, but now I do not know, what the cause of the following issue could be: On Sunday I upated "Apache2" to version "2.4.57 (Ubuntu)". Then everything was restarted and worked. Just I was not able to send and receive emails, although the mail client & webmail correctly connected to the postfix & dovecot services. I also upgraded "ISPConfig" to version "3.2.11p1" and suddenly it started working again. It did so until today and since noon there were no emails coming in. I also had the problem, that I could not connect to dovecot anymore, but postfix no problem. So I thought it might be a fail2ban issue. I activated my VPN and suddenly, I could connect to dovecot again. But still no emails are delivered / received although they are correctly sent (because in the Mails I send in my mail client also appear in the "sent" folder of roundcube). This was tested with internal and external email addresses (so the mails show up in the webmail sent folder but don't reach the external email address). I again restarted the server, made a resync via ISPConfig and also restarted the services one by one but no use. I am completely clueless what the issue could be. Postfix version: 3.3.0 Dovecot version: 2.2.33.2 Server: Ubuntu 18.04.6 LTS Maybe some of you had similar experiences and could give me a clue. Thank you very much for your valued help in advance. Best, Hannes
That's the sending log of the sending from my locally with ISPConfig set up address to [email protected] (external). No receiving not even in SPAM. But in the "sent" folder of the webmail the sent mail shows up, although sent by external mail client, which also had no problem in connecting to postfix/dovecot. I myself don't know, what to read out from here: Jan 17 17:14:57 server postfix/smtps/smtpd[10866]: NOQUEUE: filter: RCPT from unknown[2.58.74.38]: <[email protected]>: Sender address triggers FILTER lmtp:[127.0.0.1]:10026; f$ Jan 17 17:14:57 server postfix/smtps/smtpd[10866]: B8871A07181: client=unknown[2.58.74.38], sasl_method=LOGIN, [email protected] Jan 17 17:14:57 server postfix/cleanup[14028]: B8871A07181: message-id=<[email protected]> Jan 17 17:14:57 server postfix/qmgr[10793]: B8871A07181: from=<[email protected]>, size=2638, nrcpt=1 (queue active) Jan 17 17:14:57 server postfix/lmtp[14040]: connect to 127.0.0.1[127.0.0.1]:10026: Connection refused Jan 17 17:14:57 server postfix/lmtp[14040]: B8871A07181: to=<[email protected]>, relay=none, delay=0.29, delays=0.29/0/0/0, dsn=4.4.1, status=deferred (connect to 127.0.0.1[127.$ Jan 17 17:14:58 server postfix/smtpd[10804]: warning: unknown[80.94.95.181]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jan 17 17:14:58 server postfix/smtpd[10985]: connect from unknown[80.94.95.181] Jan 17 17:14:58 server postfix/smtpd[10804]: disconnect from unknown[80.94.95.181] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4 Jan 17 17:15:00 server dovecot: imap-login: Login: user=<[email protected]>, method=PLAIN, rip=2.58.74.38, lip=185.64.106.14, mpid=14052, TLS, session=<q3N8jCYPIekCOkom> Jan 17 17:15:00 server postfix/smtps/smtpd[10866]: disconnect from unknown[2.58.74.38] ehlo=1 auth=1 mail=1 rcpt=1 data=1 quit=1 commands=6 Jan 17 17:15:02 server postfix/smtpd[10984]: connect from localhost[::1] Jan 17 17:15:02 server postfix/smtpd[10984]: lost connection after CONNECT from localhost[::1] Jan 17 17:15:02 server postfix/smtpd[10984]: disconnect from localhost[::1] commands=0/0 Jan 17 17:15:02 server dovecot: pop3-login: Disconnected (no auth attempts in 0 secs): user=<>, rip=::1, lip=::1, secured, session=<XvWdjCYPSq4AAAAAAAAAAAAAAAAAAAAB> Jan 17 17:15:02 server dovecot: imap-login: Disconnected (no auth attempts in 0 secs): user=<>, rip=::1, lip=::1, secured, session=<CvmdjCYPqq8AAAAAAAAAAAAAAAAAAAAB> Jan 17 17:15:04 server postfix/smtpd[10807]: warning: unknown[45.129.14.179]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jan 17 17:15:04 server postfix/smtpd[10807]: disconnect from unknown[45.129.14.179] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4 Jan 17 17:15:07 server dovecot: imap([email protected]): Logged out in=285 out=91549 Jan 17 17:15:12 server postfix/smtpd[10985]: warning: unknown[80.94.95.181]: SASL LOGIN authentication failed: Connection lost to authentication server Jan 17 17:15:12 server postfix/smtpd[10985]: disconnect from unknown[80.94.95.181] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4 Jan 17 17:15:13 server postfix/smtps/smtpd[10939]: warning: unknown[141.98.11.68]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jan 17 17:15:13 server postfix/smtps/smtpd[10921]: warning: hostname noiseless.medyamol.com does not resolve to address 141.98.11.68: Name or service not known Jan 17 17:15:13 server postfix/smtps/smtpd[10921]: connect from unknown[141.98.11.68] Jan 17 17:15:14 server postfix/smtpd[10804]: connect from unknown[80.94.95.181] Jan 17 17:15:15 server postfix/smtpd[10984]: warning: hostname 179.hosted-by.198xd.com does not resolve to address 45.129.14.179: Name or service not known Jan 17 17:15:15 server postfix/smtpd[10984]: connect from unknown[45.129.14.179] Jan 17 17:15:19 server postfix/smtps/smtpd[10939]: lost connection after AUTH from unknown[141.98.11.68] Jan 17 17:15:19 server postfix/smtps/smtpd[10939]: disconnect from unknown[141.98.11.68] ehlo=1 auth=0/1 rset=1 commands=2/3 Jan 17 17:15:22 server postfix/smtpd[10984]: warning: unknown[45.129.14.179]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jan 17 17:15:22 server postfix/smtpd[10804]: warning: unknown[80.94.95.181]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jan 17 17:15:22 server postfix/smtpd[10804]: disconnect from unknown[80.94.95.181] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4 Jan 17 17:15:22 server postfix/smtpd[10984]: disconnect from unknown[45.129.14.179] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4 Jan 17 17:15:24 server postfix/smtps/smtpd[10866]: connect from unknown[194.169.175.10] Jan 17 17:15:25 server postfix/smtps/smtpd[11251]: warning: unknown[194.169.175.10]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jan 17 17:15:29 server postfix/smtpd[10985]: connect from unknown[80.94.95.181] Jan 17 17:15:31 server postfix/smtps/smtpd[11251]: lost connection after AUTH from unknown[194.169.175.10] Jan 17 17:15:31 server postfix/smtps/smtpd[11251]: disconnect from unknown[194.169.175.10] ehlo=1 auth=0/1 rset=1 commands=2/3 Jan 17 17:15:33 server dovecot: auth: Warning: auth client 0 disconnected with 1 pending requests: Connection reset by peer Jan 17 17:15:34 server dovecot: imap([email protected]): Logged out in=199 out=127008 Jan 17 17:15:34 server postfix/smtpd[10804]: warning: hostname 179.hosted-by.198xd.com does not resolve to address 45.129.14.179: Name or service not known Jan 17 17:15:34 server postfix/smtpd[10804]: connect from unknown[45.129.14.179] Jan 17 17:15:37 server dovecot: imap-login: Login: user=<[email protected]>, method=PLAIN, rip=::1, lip=::1, mpid=14164, secured, session=<qKy0jiYPwscAAAAAAAAAAAAAAAAAAAAB> Jan 17 17:15:37 server dovecot: imap([email protected]): Logged out in=29 out=502 Jan 17 17:15:37 server dovecot: imap-login: Login: user=<[email protected]>, method=PLAIN, rip=::1, lip=::1, mpid=14166, secured, session=<q1G2jiYPxMcAAAAAAAAAAAAAAAAAAAAB> Jan 17 17:15:37 server dovecot: imap([email protected]): Logged out in=70 out=901 Jan 17 17:15:38 server dovecot: imap-login: Login: user=<[email protected]>, method=PLAIN, rip=::1, lip=::1, mpid=14169, secured, session=<W4rBjiYPyMcAAAAAAAAAAAAAAAAAAAAB> Jan 17 17:15:38 server dovecot: imap-login: Login: user=<[email protected]>, method=PLAIN, rip=::1, lip=::1, mpid=14170, secured, session=<967BjiYPzMcAAAAAAAAAAAAAAAAAAAAB> Jan 17 17:15:38 server dovecot: imap([email protected]): Logged out in=537 out=1908 Jan 17 17:15:38 server dovecot: imap([email protected]): Logged out in=357 out=41377 Jan 17 17:15:41 server postfix/smtpd[10985]: warning: unknown[80.94.95.181]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jan 17 17:15:41 server postfix/smtpd[10804]: warning: unknown[45.129.14.179]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jan 17 17:15:41 server postfix/smtpd[10804]: disconnect from unknown[45.129.14.179] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4 Jan 17 17:15:41 server dovecot: imap-login: Login: user=<[email protected]>, method=PLAIN, rip=::1, lip=::1, mpid=14177, secured, session=<teHwjiYPcukAAAAAAAAAAAAAAAAAAAAB> Jan 17 17:15:41 server dovecot: imap([email protected]): Logged out in=322 out=26979 Jan 17 17:15:42 server postfix/smtpd[10985]: disconnect from unknown[80.94.95.181] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4 Jan 17 17:15:44 server dovecot: imap-login: Login: user=<[email protected]>, method=PLAIN, rip=::1, lip=::1, mpid=14180, secured, session=<0mMhjyYPdukAAAAAAAAAAAAAAAAAAAAB> Jan 17 17:15:44 server dovecot: imap([email protected]): Logged out in=392 out=3346 Jan 17 17:15:45 server postfix/smtpd[10807]: connect from unknown[80.94.95.181] Jan 17 17:15:47 server dovecot: imap-login: Login: user=<[email protected]>, method=PLAIN, rip=::1, lip=::1, mpid=14182, secured, session=<fe5JjyYPfukAAAAAAAAAAAAAAAAAAAAB> Jan 17 17:15:47 server dovecot: imap([email protected]): Logged out in=357 out=41377
The interesting thing is, that I deleted the respective IMAP email account in my external email client (Outlook 365, which always worked so far) before this sending test and re-set it up. It could connect flawlessly and also it synced all the emails to the very point of today, where no emails came in anymore. And the sent email above was also displayed in the webmail "sent" folder but never reached it's receiver (not even in SPAM). So I'm completely clueless.
By the way, when I turn of VPN, no connection to dovecot possible anymore. When I try to unban from jail "dovecot", it tells me, that no such ip/ip-domain is in this jail, although I can see it in chain "f2b-dovecot-pop3imap". See below:
What I also detected: When logging into roundcube, it tells me "Invalid Request. No data saved." When I try a second time, it logs in correcty. Also never did this before.
If I send from the external email address to our IMAP address, I do not get any "rejected" message in my external client and the email also does not arrive in the webmail not to speak the mail client with the set up IMAP account. I'm desperate.
Here we have the reason for the issue. Amavisd is not started. Please run the following commands and post the result: ps aux | grep amavis ps aux | grep rspamd
Good morning Till! Thank you very, very much! It's working again. (such a little thing can cause so much trouble ) We can close this now.
The amavisd service was not started. The two above commands have nothing to do with the fact that it's working again; they were just to find out that you do not run rspamd. Most likely, you rebooted the server or something similar, which caused Amavis to get started again.
Yes, I made the service check you posted, which already gave me a clue about the possible reason (amavisd). Then I checked the services to look, if amavisd was running or not (it was not, of course) and manually restarted it, é voila, mails got delivered and received. That's what I meant with a little thing, that caused much trouble. For the future I know what a possible reason could be for such an issue and that's great! Again, thank you very much, Till.
If you had started with https://forum.howtoforge.com/threads/please-read-before-posting.58408/, it would have reported what services are not running.
Yeah, sure! But I was just clueless as everything was running for years and updates and after making this update, the issue arised. And as I tried to figure out for quite hours the forum was my last chance. Anyhow, I appologize for any inconvenience I might have caused. PS: Thx for the link. This might tell others being in my situations where to look before posting a help request.