No connection to mail server and [IMAP] The folder "/Public" cannot be opened. (NO [NOPERM]

I think there is a misunderstanding. It is not about accepting individual mails. It’s more about the mail accounts not working anymore, because the mail clients can’t get a connection with the mail server. As a test, I logged into Cockpit and Webmail with the same credentials. This worked without any problems and I was able to send and receive mails in webmail.

What is the content of the mail connection in maillog

Sorry but without evidence we cannot help, we need the log lines from the start to the end

Sorry, I’m too slow…switching between both problems :frowning:

Two completely different issues and not related

fleas and lice, as we say

oh wonder, after re-installing Roundcube my mail client syncs again.
Only one remaining error:
[IMAP] The folder "/Public" cannot be opened. (NO [NOPERM] Permission denied (0.001 + 0.000 secs).)

I have not changed anything else, not even on the client side.

within fail2ban I found now:

2022-03-28 16:11:13,286 fail2ban.filter         [2583]: INFO    [postfix-ddos] Ignore 93.245.xxx.xxx by dns
2022-03-28 16:11:19,294 fail2ban.filter         [2583]: INFO    [postfix-ddos] Ignore 93.245.xxx.xxx by dns
2022-03-28 16:11:19,295 fail2ban.filter         [2583]: INFO    [postfix-ddos] Ignore 93.245.xxx.xxx by dns
2022-03-28 16:11:19,295 fail2ban.filter         [2583]: INFO    [postfix-ddos] Ignore 93.245.xxx.xxx by dns
2022-03-28 16:11:19,699 fail2ban.filter         [2583]: INFO    [postfix-sasl-abuse] Ignore 93.245.xxx.xxx by dns
2022-03-28 16:11:20,503 fail2ban.filter         [2583]: INFO    [postfix-ddos] Ignore 93.245.xxx.xxx by dns
2022-03-28 16:11:30,521 fail2ban.filter         [2583]: INFO    [postfix-sasl-abuse] Ignore 93.245.xxx.xxx by dns
2022-03-28 16:11:53,563 fail2ban.filterpoll     [2583]: WARNING Too many errors. Remove file '/var/log/roundcubemail/errors.log' from monitoring process
2022-03-28 16:11:53,564 fail2ban.filter         [2583]: INFO    Removed logfile: '/var/log/roundcubemail/errors.log'
2022-03-28 16:24:27,328 fail2ban.filter         [2583]: INFO    [postfix-sasl-abuse] Ignore 93.245.xxx.xxx by dns
2022-03-28 16:24:35,944 fail2ban.filter         [2583]: INFO    [postfix-sasl-abuse] Ignore 93.245.xxx.xxx by dns

But the credentials are accepted by the mailserver.

maillog:

[root@ns log]# cat maillog | grep 16:11:
Mar 27 16:11:20 ns rspamd[2003]: <u1dohr>; lua; bayes_expiry.lua:440: finished expiry step 1: 798 items checked, 8 significant (0 made persistent), 0 insignificant (0 ttls set), 0 common (0 discriminated), 790 infrequent (0 ttls set), 1 mean, 0 std
Mar 27 16:11:20 ns rspamd[2003]: <u1dohr>; lua; bayes_expiry.lua:440: finished expiry cycle in 1 steps: 798 items checked, 8 significant (0 made persistent), 0 insignificant (0 ttls set), 0 common (0 discriminated), 790 infrequent (0 ttls set), 1 mean, 0 std
Mar 27 16:11:20 ns rspamd[2003]: <u1dohr>; lua; bayes_expiry.lua:447: tokens occurrences, in ham: {nil}
Mar 27 16:11:20 ns rspamd[2003]: <u1dohr>; lua; bayes_expiry.lua:447: tokens occurrences, in spam: {nil}
Mar 27 16:11:20 ns rspamd[2003]: <u1dohr>; lua; bayes_expiry.lua:447: tokens occurrences, total: {nil}
Mar 28 16:11:12 ns postfix/smtpd[5301]: connect from xyz.dip0.t-ipconnect.de[93.245.xxx.xxx]
Mar 28 16:11:12 ns rspamd[2150]: <5b05fe>; proxy; proxy_accept_socket: accepted milter connection from /var/run/rspamd/worker-proxy port 0
Mar 28 16:11:12 ns postfix/smtpd[5301]: lost connection after EHLO from xyz.dip0.t-ipconnect.de[93.245.xxx.xxx]
Mar 28 16:11:12 ns postfix/smtpd[5301]: disconnect from xyz.dip0.t-ipconnect.de[93.245.xxx.xxx]
Mar 28 16:11:12 ns rspamd[2150]: <5b05fe>; milter; rspamd_milter_process_command: got connection from 93.245.xxx.xxx:30386
Mar 28 16:11:12 ns rspamd[2150]: <5b05fe>; proxy; proxy_milter_finish_handler: finished milter connection
Mar 28 16:11:18 ns postfix/smtpd[5301]: connect from xyz.dip0.t-ipconnect.de[93.245.xxx.xxx]
Mar 28 16:11:18 ns rspamd[2150]: <7ac5da>; proxy; proxy_accept_socket: accepted milter connection from /var/run/rspamd/worker-proxy port 0
Mar 28 16:11:18 ns postfix/smtpd[5301]: lost connection after EHLO from xyz.dip0.t-ipconnect.de[93.245.xxx.xxx]
Mar 28 16:11:18 ns postfix/smtpd[5301]: disconnect from xyz.dip0.t-ipconnect.de[93.245.xxx.xxx]
Mar 28 16:11:18 ns rspamd[2150]: <7ac5da>; milter; rspamd_milter_process_command: got connection from 93.245.xxx.xxx:7502
Mar 28 16:11:18 ns rspamd[2150]: <7ac5da>; proxy; proxy_milter_finish_handler: finished milter connection
Mar 28 16:11:18 ns postfix/smtpd[5301]: connect from xyz.dip0.t-ipconnect.de[93.245.xxx.xxx]
Mar 28 16:11:18 ns rspamd[2150]: <a29343>; proxy; proxy_accept_socket: accepted milter connection from /var/run/rspamd/worker-proxy port 0
Mar 28 16:11:19 ns postfix/smtpd[5315]: connect from xyz.dip0.t-ipconnect.de[93.245.xxx.xxx]
Mar 28 16:11:19 ns rspamd[2150]: <656d4a>; proxy; proxy_accept_socket: accepted milter connection from /var/run/rspamd/worker-proxy port 0
Mar 28 16:11:19 ns postfix/smtpd[5315]: lost connection after UNKNOWN from xyz.dip0.t-ipconnect.de[93.245.xxx.xxx]
Mar 28 16:11:19 ns postfix/smtpd[5315]: disconnect from xyz.dip0.t-ipconnect.de[93.245.xxx.xxx]
Mar 28 16:11:19 ns rspamd[2150]: <656d4a>; milter; rspamd_milter_process_command: got connection from 93.245.xxx.xxx:27241
Mar 28 16:11:19 ns rspamd[2150]: <656d4a>; proxy; proxy_milter_finish_handler: finished milter connection
Mar 28 16:11:19 ns postfix/smtpd[5301]: lost connection after EHLO from xyz.dip0.t-ipconnect.de[93.245.xxx.xxx]
Mar 28 16:11:19 ns postfix/smtpd[5301]: disconnect from xyz.dip0.t-ipconnect.de[93.245.xxx.xxx]
Mar 28 16:11:19 ns rspamd[2150]: <a29343>; milter; rspamd_milter_process_command: got connection from 93.245.xxx.xxx:59426
Mar 28 16:11:19 ns rspamd[2150]: <a29343>; proxy; proxy_milter_finish_handler: finished milter connection
Mar 28 16:11:19 ns postfix/smtpd[5315]: connect from xyz.dip0.t-ipconnect.de[93.245.xxx.xxx]
Mar 28 16:11:19 ns rspamd[2150]: <d57e60>; proxy; proxy_accept_socket: accepted milter connection from /var/run/rspamd/worker-proxy port 0
Mar 28 16:11:19 ns postfix/smtpd[5316]: connect from xyz.dip0.t-ipconnect.de[93.245.xxx.xxx]
Mar 28 16:11:19 ns rspamd[2150]: <ce3393>; proxy; proxy_accept_socket: accepted milter connection from /var/run/rspamd/worker-proxy port 0
Mar 28 16:11:19 ns postfix/smtpd[5316]: A3408D59F: client=xyz.dip0.t-ipconnect.de[93.245.xxx.xxx], sasl_method=PLAIN, sasl_username=max_mustermann@myserver.de
Mar 28 16:11:19 ns rspamd[2150]: <ce3393>; milter; rspamd_milter_process_command: got connection from 93.245.xxx.xxx:5634
Mar 28 16:11:19 ns postfix/cleanup[5327]: A3408D59F: message-id=<em68229a26-627b-47e5-88d7-57ba4ca1028a@9a317569.com>
Mar 28 16:11:19 ns rspamd[2150]: <ce3393>; proxy; rspamd_message_parse: loaded message; id: <em68229a26-627b-47e5-88d7-57ba4ca1028a@9a317569.com>; queue-id: <A3408D59F>; size: 723; checksum: <9a6c9bd034dd53966b62c6a6d6aeadd7>
Mar 28 16:11:19 ns rspamd[2150]: <ce3393>; proxy; rspamd_mime_part_detect_language: detected part language: de
Mar 28 16:11:19 ns rspamd[2150]: <ce3393>; lua; settings.lua:366: <em68229a26-627b-47e5-88d7-57ba4ca1028a@9a317569.com> apply static settings authenticated (id = 1937017268); authenticated matched; priority high
Mar 28 16:11:19 ns rspamd[2150]: <ce3393>; lua; greylist.lua:204: skip greylisting for local networks and/or authorized users
Mar 28 16:11:19 ns rspamd[2150]: <ce3393>; proxy; dkim_symbol_callback: skip DKIM checks for local networks and authorized users
Mar 28 16:11:19 ns rspamd[2150]: <ce3393>; lua; spf.lua:186: skip SPF checks for local networks and authorized users
Mar 28 16:11:19 ns rspamd[2150]: <ce3393>; lua; dmarc.lua:349: skip DMARC checks as either SPF or DKIM were not checked
Mar 28 16:11:19 ns rspamd[2150]: <ce3393>; lua; once_received.lua:99: Skipping once_received for authenticated user or local network
Mar 28 16:11:20 ns rspamd[2150]: <ce3393>; proxy; rspamd_symcache_finalize_item: slow rule: RSPAMD_EMAILBL(281): 374.85 ms; enable slow timer delay
Mar 28 16:11:20 ns rspamd[2150]: <ce3393>; proxy; rspamd_symcache_finalize_item: slow rule: RSPAMD_URIBL(270): 381.85 ms
Mar 28 16:11:20 ns rspamd[2150]: <ce3393>; proxy; rspamd_redis_connected: skip obtaining bayes tokens for BAYES_SPAM of classifier bayes: not enough learns 0; 200 required
Mar 28 16:11:20 ns rspamd[2150]: <ce3393>; proxy; rspamd_redis_connected: skip obtaining bayes tokens for BAYES_HAM of classifier bayes: not enough learns 2; 200 required
Mar 28 16:11:20 ns rspamd[2150]: <ce3393>; proxy; rspamd_stat_classifiers_process: skip statistics as SPAM class is missing
Mar 28 16:11:20 ns rspamd[2150]: <ce3393>; lua; greylist.lua:318: Score too low - skip greylisting
Mar 28 16:11:20 ns rspamd[2150]: <ce3393>; proxy; rspamd_task_write_log: id: <em68229a26-627b-47e5-88d7-57ba4ca1028a@9a317569.com>, qid: <A3408D59F>, ip: 93.245.xxx.xxx, user: max_mustermann@myserver.de, from: <max_mustermann@myserver.de>, (default: F (no action): [-0.10/20.00] [MIME_GOOD(-0.10){text/plain;},ASN(0.00){asn:3320, ipnet:93.192.0.0/10, country:DE;},FROM_EQ_ENVFROM(0.00){},FROM_HAS_DN(0.00){},HAS_REPLYTO(0.00){max_mustermann@myserver.de;},HAS_X_PRIO_FIVE(0.00){5;},MIME_TRACE(0.00){0:+;},RCPT_COUNT_ONE(0.00){1;},RCVD_COUNT_ZERO(0.00){0;},REPLYTO_EQ_FROM(0.00){},TO_DN_ALL(0.00){},TO_EQ_FROM(0.00){},TO_MATCH_ENVRCPT_ALL(0.00){}]), len: 723, time: 595.319ms, dns req: 9, digest: <9a6c9bd034dd53966b62c6a6d6aeadd7>, rcpts: <max_mustermann@myserver.de>, mime_rcpts: <max_mustermann@myserver.de>, settings_id: authenticated
Mar 28 16:11:20 ns rspamd[2150]: <ce3393>; proxy; rspamd_protocol_http_reply: regexp statistics: 0 pcre regexps scanned, 2 regexps matched, 175 regexps total, 46 regexps cached, 0B scanned using pcre, 1.21KiB scanned total
Mar 28 16:11:20 ns opendkim[1272]: A3408D59F: DKIM-Signature field added (s=default, d=myserver.de)
Mar 28 16:11:20 ns postfix/qmgr[2026]: A3408D59F: from=<max_mustermann@myserver.de>, size=1078, nrcpt=1 (queue active)
Mar 28 16:11:20 ns dovecot: lmtp(5338): Connect from local
Mar 28 16:11:20 ns postfix/lmtp[5337]: A3408D59F: to=<max_mustermann@myserver.de>, relay=mail.myserver.de[/var/run/dovecot/lmtp], delay=0.81, delays=0.77/0.02/0.01/0.01, dsn=2.0.0, status=sent (250 2.0.0 <max_mustermann@myserver.de> cE7JGAjCQWLaFAAAnFmNGg Saved)
Mar 28 16:11:20 ns dovecot: lmtp(max_mustermann@myserver.de): save: box=INBOX, uid=1, msgid=<em68229a26-627b-47e5-88d7-57ba4ca1028a@9a317569.com>, from="Max Mustermann" <max_mustermann@myserver.de>, subject=Testnachricht, flags=()
Mar 28 16:11:20 ns dovecot: lmtp(max_mustermann@myserver.de): cE7JGAjCQWLaFAAAnFmNGg: sieve: msgid=<em68229a26-627b-47e5-88d7-57ba4ca1028a@9a317569.com>: stored mail into mailbox 'INBOX'
Mar 28 16:11:20 ns dovecot: lmtp(5338): Disconnect from local: Successful quit
Mar 28 16:11:20 ns postfix/qmgr[2026]: A3408D59F: removed
Mar 28 16:11:20 ns postfix/smtpd[5316]: disconnect from xyz.dip0.t-ipconnect.de[93.245.xxx.xxx]
Mar 28 16:11:20 ns rspamd[2150]: <278ffc>; proxy; proxy_milter_finish_handler: finished milter connection
Mar 28 16:11:20 ns postfix/smtpd[5315]: lost connection after UNKNOWN from xyz.dip0.t-ipconnect.de[93.245.xxx.xxx]
Mar 28 16:11:20 ns postfix/smtpd[5315]: disconnect from xyz.dip0.t-ipconnect.de[93.245.xxx.xxx]
Mar 28 16:11:20 ns rspamd[2150]: <d57e60>; milter; rspamd_milter_process_command: got connection from 93.245.xxx.xxx:37968
Mar 28 16:11:20 ns rspamd[2150]: <d57e60>; proxy; proxy_milter_finish_handler: finished milter connection
Mar 28 16:11:29 ns postfix/smtpd[5316]: connect from xyz.dip0.t-ipconnect.de[93.245.xxx.xxx]
Mar 28 16:11:29 ns rspamd[2150]: <1553fb>; proxy; proxy_accept_socket: accepted milter connection from /var/run/rspamd/worker-proxy port 0
Mar 28 16:11:30 ns postfix/smtpd[5316]: 6544CD59F: client=xyz.dip0.t-ipconnect.de[93.245.xxx.xxx], sasl_method=PLAIN, sasl_username=md_admin
Mar 28 16:11:30 ns rspamd[2150]: <1553fb>; milter; rspamd_milter_process_command: got connection from 93.245.xxx.xxx:12730
Mar 28 16:11:30 ns postfix/cleanup[5327]: 6544CD59F: message-id=<em11fbf03f-c0b4-4d7e-bed0-de5b515c511d@9a317569.com>
Mar 28 16:11:30 ns rspamd[2150]: <1553fb>; proxy; rspamd_message_parse: loaded message; id: <em11fbf03f-c0b4-4d7e-bed0-de5b515c511d@9a317569.com>; queue-id: <6544CD59F>; size: 690; checksum: <aebf31420bafab037ad4e4272a44e8e7>
Mar 28 16:11:30 ns rspamd[2150]: <1553fb>; proxy; rspamd_mime_part_detect_language: detected part language: de
Mar 28 16:11:30 ns rspamd[2150]: <1553fb>; lua; settings.lua:366: <em11fbf03f-c0b4-4d7e-bed0-de5b515c511d@9a317569.com> apply static settings authenticated (id = 1937017268); authenticated matched; priority high
Mar 28 16:11:30 ns rspamd[2150]: <1553fb>; lua; greylist.lua:204: skip greylisting for local networks and/or authorized users
Mar 28 16:11:30 ns rspamd[2150]: <1553fb>; proxy; dkim_symbol_callback: skip DKIM checks for local networks and authorized users
Mar 28 16:11:30 ns rspamd[2150]: <1553fb>; lua; spf.lua:186: skip SPF checks for local networks and authorized users
Mar 28 16:11:30 ns rspamd[2150]: <1553fb>; lua; dmarc.lua:349: skip DMARC checks as either SPF or DKIM were not checked
Mar 28 16:11:30 ns rspamd[2150]: <1553fb>; lua; once_received.lua:99: Skipping once_received for authenticated user or local network
Mar 28 16:11:30 ns rspamd[2150]: <1553fb>; proxy; rspamd_redis_connected: skip obtaining bayes tokens for BAYES_SPAM of classifier bayes: not enough learns 0; 200 required
Mar 28 16:11:30 ns rspamd[2150]: <1553fb>; proxy; rspamd_redis_connected: skip obtaining bayes tokens for BAYES_HAM of classifier bayes: not enough learns 2; 200 required
Mar 28 16:11:30 ns rspamd[2150]: <1553fb>; proxy; rspamd_stat_classifiers_process: skip statistics as SPAM class is missing
Mar 28 16:11:30 ns rspamd[2150]: <1553fb>; lua; greylist.lua:318: Score too low - skip greylisting
Mar 28 16:11:30 ns rspamd[2150]: <1553fb>; proxy; rspamd_task_write_log: id: <em11fbf03f-c0b4-4d7e-bed0-de5b515c511d@9a317569.com>, qid: <6544CD59F>, ip: 93.245.xxx.xxx, user: md_admin, from: <md_admin@myserver.de>, (default: F (no action): [-0.10/20.00] [MIME_GOOD(-0.10){text/plain;},ASN(0.00){asn:3320, ipnet:93.192.0.0/10, country:DE;},FROM_EQ_ENVFROM(0.00){},FROM_HAS_DN(0.00){},HAS_REPLYTO(0.00){md_admin@myserver.de;},HAS_X_PRIO_FIVE(0.00){5;},MIME_TRACE(0.00){0:+;},RCPT_COUNT_ONE(0.00){1;},RCVD_COUNT_ZERO(0.00){0;},REPLYTO_EQ_FROM(0.00){},TO_DN_ALL(0.00){},TO_EQ_FROM(0.00){},TO_MATCH_ENVRCPT_ALL(0.00){}]), len: 690, time: 170.680ms, dns req: 9, digest: <aebf31420bafab037ad4e4272a44e8e7>, rcpts: <md_admin@myserver.de>, mime_rcpts: <md_admin@myserver.de>, settings_id: authenticated
Mar 28 16:11:30 ns rspamd[2150]: <1553fb>; proxy; rspamd_protocol_http_reply: regexp statistics: 0 pcre regexps scanned, 1 regexps matched, 175 regexps total, 44 regexps cached, 0B scanned using pcre, 1.14KiB scanned total
Mar 28 16:11:30 ns opendkim[1272]: 6544CD59F: DKIM-Signature field added (s=default, d=myserver.de)
Mar 28 16:11:30 ns postfix/qmgr[2026]: 6544CD59F: from=<md_admin@myserver.de>, size=995, nrcpt=1 (queue active)
Mar 28 16:11:30 ns dovecot: lmtp(5338): Connect from local
Mar 28 16:11:30 ns dovecot: lmtp(md_admin@myserver.de): save: box=INBOX, uid=44, msgid=<em11fbf03f-c0b4-4d7e-bed0-de5b515c511d@9a317569.com>, from=Marko-Admin <md_admin@myserver.de>, subject=Testnachricht, flags=()
Mar 28 16:11:30 ns dovecot: lmtp(md_admin@myserver.de): AFtFLRLCQWLaFAAAnFmNGg: sieve: msgid=<em11fbf03f-c0b4-4d7e-bed0-de5b515c511d@9a317569.com>: stored mail into mailbox 'INBOX'
Mar 28 16:11:30 ns postfix/lmtp[5337]: 6544CD59F: to=<md_admin@myserver.de>, relay=mail.myserver.de[/var/run/dovecot/lmtp], delay=0.42, delays=0.41/0/0/0, dsn=2.0.0, status=sent (250 2.0.0 <md_admin@myserver.de> AFtFLRLCQWLaFAAAnFmNGg Saved)
Mar 28 16:11:30 ns postfix/qmgr[2026]: 6544CD59F: removed
Mar 28 16:11:30 ns dovecot: lmtp(5338): Disconnect from local: Successful quit
Mar 28 16:11:30 ns postfix/smtpd[5316]: disconnect from xyz.dip0.t-ipconnect.de[93.245.xxx.xxx]
Mar 28 16:11:30 ns rspamd[2150]: <a40cf0>; proxy; proxy_milter_finish_handler: finished milter connection
Mar 28 16:11:55 ns rspamd[2151]: <r1xb3x>; lua; bayes_expiry.lua:440: finished expiry step 1: 798 items checked, 8 significant (0 made persistent), 0 insignificant (0 ttls set), 0 common (0 discriminated), 790 infrequent (0 ttls set), 1 mean, 0 std
Mar 28 16:11:55 ns rspamd[2151]: <r1xb3x>; lua; bayes_expiry.lua:440: finished expiry cycle in 1 steps: 798 items checked, 8 significant (0 made persistent), 0 insignificant (0 ttls set), 0 common (0 discriminated), 790 infrequent (0 ttls set), 1 mean, 0 std
Mar 28 16:11:55 ns rspamd[2151]: <r1xb3x>; lua; bayes_expiry.lua:447: tokens occurrences, in ham: {nil}
Mar 28 16:11:55 ns rspamd[2151]: <r1xb3x>; lua; bayes_expiry.lua:447: tokens occurrences, in spam: {nil}
Mar 28 16:11:55 ns rspamd[2151]: <r1xb3x>; lua; bayes_expiry.lua:447: tokens occurrences, total: {nil}
Mar 28 16:14:51 ns postfix/anvil[5304]: statistics: max connection rate 5/60s for (smtp:93.245.xxx.xxx) at Mar 28 16:11:19
Mar 28 16:14:51 ns postfix/anvil[5304]: statistics: max connection count 2 for (smtp:93.245.xxx.xxx) at Mar 28 16:11:19
Mar 28 16:14:51 ns postfix/anvil[5304]: statistics: max cache size 2 at Mar 28 16:11:19

who is xyz.dip0.t-ipconnect.de, is it someone you can trust ?

I have myself a lot of lost connection after EHLO and it is normal that fail2ban triggers the ban

Probably the remote server is badly set and this is why you reject it

This week I got

[root@prometheus ~]# grep -srni 'lost connection after EHLO' /var/log/maillog
13608:Mar 28 15:33:25 prometheus postfix/smtpd[32122]: lost connection after EHLO from unknown[23.225.163.203]
13686:Mar 28 15:43:07 prometheus postfix/smtpd[3869]: lost connection after EHLO from scanner-05.ch1.censys-scanner.com[162.142.125.211]

You need probably the bounced email answer to investigate further

this is some clues

https://www.google.com/search?q=lost+connection+after+EHLO&oq=lost+connection+after+EHLO&aqs=chrome..69i57j0i22i30l6j69i60.1383j0j7&sourceid=chrome&ie=UTF-8

Yes, that’s my own DSL-Account-ID from my local network.

If the ehlo is rejected you need the bounced email for debugging

I check the configuration of the mail server here: https://www.mail-tester.com/
Summary. 10/10 Points

esp.

* IP: 89.58.xxx.xxx
* HELO: mail.myserver.de
* rDNS: mail.myserver.de

alos:

#telnet mail.myserver.de 25                                                                          ─╯
Trying 89.58.xxx.xxx...
Connected to mail.myserver.de.
Escape character is '^]'.
220 mail.myserver.de ESMTP Postfix
quit
221 2.0.0 Bye
Connection closed by foreign host.

I’ve sent a mail to an unknown recipient:

This is the mail system at host mail.dargels.de.
 
I'm sorry to have to inform you that your message could not
be delivered to one or more recipients. It's attached below.
 
For further assistance, please send mail to postmaster.
 
If you do so, please include this problem report. You can
delete your own text from the attached returned message.
 
                   The mail system
 
<musterfrau@myserver.de>: host
    mail@myserver.de[89.58.xxx.xxx] said: 550 5.1.1
    <musterfrau@myserver.de>: Recipient address rejected:
    undeliverable address: host
    mail.myserver.de[/var/run/dovecot/lmtp] said: 550 5.1.1
    <musterfrau@myserver.de> User doesn't exist:
musterfrau@myserver.de (in reply to RCPT TO command) (in
    reply to RCPT TO command)

RAW-Mail:

Return-Path: <>
Delivered-To: marko@dargels.de
Received: from mail.dargels.de
	by MDOL-NethServer.dargels.de with LMTP id kEo3Aq6sQmLIBgAA85h3tw
	for <marko@dargels.de>; Tue, 29 Mar 2022 08:52:30 +0200
Received: by mail.dargels.de (Postfix)
	id 0518B15D9DD1; Tue, 29 Mar 2022 08:52:30 +0200 (CEST)
Date: Tue, 29 Mar 2022 08:52:30 +0200 (CEST)
From: MAILER-DAEMON@mail.dargels.de (Mail Delivery System)
Subject: Undelivered Mail Returned to Sender
To: marko@dargels.de
Auto-Submitted: auto-replied
MIME-Version: 1.0
Content-Type: multipart/report; report-type=delivery-status;
	boundary="566C615D9DCD.1648536750/mail.dargels.de"
Message-Id: <20220329065230.0518B15D9DD1@mail.dargels.de>

--566C615D9DCD.1648536750/mail.dargels.de
Content-Description: Notification
Content-Type: text/plain; charset=us-ascii

This is the mail system at host mail.dargels.de.

I'm sorry to have to inform you that your message could not
be delivered to one or more recipients. It's attached below.

For further assistance, please send mail to postmaster.

If you do so, please include this problem report. You can
delete your own text from the attached returned message.

                   The mail system

<musterfrau@myserver.de>: host
    mail.myserver.de[89.58.xxx.xxx] said: 550 5.1.1
    <musterfrau@myserver.de>: Recipient address rejected:
    undeliverable address: host
    mail.myserver.de[/var/run/dovecot/lmtp] said: 550 5.1.1
    <musterfrau@myserver.de> User doesn't exist:
    musterfrau@myserver.de (in reply to RCPT TO command) (in
    reply to RCPT TO command)

--566C615D9DCD.1648536750/mail.dargels.de
Content-Description: Delivery report
Content-Type: message/delivery-status

Reporting-MTA: dns; mail.dargels.de
Original-Envelope-Id: <em08f96fd2-4f2c-4d71-9334-f220dc8420fd@e3b6ba68.com>
X-Postfix-Queue-ID: 566C615D9DCD
X-Postfix-Sender: rfc822; marko@dargels.de
Arrival-Date: Tue, 29 Mar 2022 08:52:26 +0200 (CEST)

Final-Recipient: rfc822; musterfrau@myserver.de
Original-Recipient: rfc822;musterfrau@myserver.de
Action: failed
Status: 5.1.1
Remote-MTA: dns; mail.myserver.de
Diagnostic-Code: smtp; 550 5.1.1 <musterfrau@myserver.de>:
    Recipient address rejected: undeliverable address: host
    mail.myserver.de[/var/run/dovecot/lmtp] said: 550 5.1.1
    <musterfrau@myserver.de> User doesn't exist:
    musterfrau@myserver.de (in reply to RCPT TO command)

--566C615D9DCD.1648536750/mail.dargels.de
Content-Description: Undelivered Message
Content-Type: message/rfc822

Return-Path: <marko@dargels.de>
Received: from [192.168.3.151] (xxx.dip0.t-ipconnect.de [93.245.xxx.xxx])
	(Authenticated sender: marko@dargels.de)
	by mail.dargels.de (Postfix) with ESMTPSA id 566C615D9DCD
	for <musterfrau@myserver.de>; Tue, 29 Mar 2022 08:52:26 +0200 (CEST)
DKIM-Filter: OpenDKIM Filter v2.11.0 mail.dargels.de 566C615D9DCD
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=dargels.de;
	s=default; t=1648536746;
	bh=38shEe0P9vkR6mf9Bw4lt63oZY4cDzKo2Xr0gjaUm1M=;
	h=From:To:Subject:Date:Reply-To:From;
	b=ZFNcyL2eCHl1jYRb1iQ13tV9aiw0TqavZxJBtexIrWCkYqLZ2IoBC3S5dmTIUdyi1
	 HEXAcfw5Nlovizo6s3iHFCt9QpBCcYleHwNi92r2QWIhkePxMqSUEF/yjGkPvoVJME
	 zXeNGqbpeQaCHZHUE3adgVJ25Y1SrqvtpcrTMSLfCcndURlO2d0yVt9durSM/XMkOo
	 FrxtCIRHOx3VWNT9GGn4VGxd1PU2aUMOAP2eiR2ocBhQEQvWGZbKywIY1aIQS7MA8p
	 vevhqKogM92f7MoR3+Za066pVORIe7oI3KbzdvwWzhdUfSuvGA23w7PGM++t2X4hVC
	 5mOnMKN2kRlLA==
From: "Marko Dargel" <marko@dargels.de>
To: musterfrau@myserver.de
Subject: test bounce mail
Date: Tue, 29 Mar 2022 06:51:59 +0000
Message-Id: <em08f96fd2-4f2c-4d71-9334-f220dc8420fd@e3b6ba68.com>
Reply-To: "Marko Dargel" <marko@dargels.de>
User-Agent: eM_Client/9.0.1360.0
MIME-Version: 1.0
Content-Type: multipart/signed; protocol="application/pgp-signature"; micalg=SHA-256;
 boundary="------=_MB0A415D1D-6C29-4070-A81B-2836CFDBC283"
X-Rspamd-Queue-Id: 566C615D9DCD
X-Spamd-Result: default: False [-4.30 / 20.00];
	SIGNED_PGP(-2.00)[];
	BAYES_HAM(-1.95)[94.73%];
	GENERIC_REPUTATION(-0.25)[-0.25367907675195];
	MIME_GOOD(-0.20)[multipart/signed,multipart/mixed,text/plain];
	MIME_UNKNOWN(0.10)[application/pgp-keys];
	ASN(0.00)[asn:3320, ipnet:93.192.0.0/10, country:DE];
	MIME_TRACE(0.00)[0:+,1:+,2:+,3:~,4:~];
	RCVD_COUNT_ZERO(0.00)[0];
	FROM_EQ_ENVFROM(0.00)[];
	TO_DN_NONE(0.00)[];
	HAS_ATTACHMENT(0.00)[];
	REPLYTO_EQ_FROM(0.00)[];
	RCPT_COUNT_ONE(0.00)[1];
	FROM_HAS_DN(0.00)[];
	TO_MATCH_ENVRCPT_ALL(0.00)[];
	HAS_REPLYTO(0.00)[marko@dargels.de]
X-Rspamd-Server: MDOL-NethServer.dargels.de

--------=_MB0A415D1D-6C29-4070-A81B-2836CFDBC283
Content-Type: multipart/mixed; boundary="------=_MBFD891467-E302-48C7-9A02-857C6AD7801E"

--------=_MBFD891467-E302-48C7-9A02-857C6AD7801E
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding: quoted-printable

Test
--------=_MBFD891467-E302-48C7-9A02-857C6AD7801E
Content-Type: application/pgp-keys; name="marko@dargels.de.asc"
Content-Transfer-Encoding: 7bit
Content-Disposition: attachment; filename="marko@dargels.de.asc"

-----BEGIN PGP PUBLIC KEY BLOCK-----
Version: BCPG C# v1.8.10.0

<<cut>>

-----END PGP PUBLIC KEY BLOCK-----
--------=_MBFD891467-E302-48C7-9A02-857C6AD7801E--

--------=_MB0A415D1D-6C29-4070-A81B-2836CFDBC283
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: BCPG C# v1.8.10.0

<<cut>>

-----END PGP SIGNATURE-----

--------=_MB0A415D1D-6C29-4070-A81B-2836CFDBC283--


--566C615D9DCD.1648536750/mail.dargels.de--

http://mxtoolbox.com shows me:

Connecting to 89.58.xxx.xxx

220 mail.myserver.de ESMTP Postfix [213 ms]
EHLO keeper-us-east-1b.mxtoolbox.com
250-mail.myserver.de
250-PIPELINING
250-SIZE 100000000
250-VRFY
250-ETRN
250-STARTTLS
250-ENHANCEDSTATUSCODES
250-8BITMIME
250 DSN [204 ms]
MAIL FROM:<supertool@mxtoolboxsmtpdiag.com>
250 2.1.0 Ok [211 ms]
RCPT TO:<test@mxtoolboxsmtpdiag.com>
554 5.7.1 <test@mxtoolboxsmtpdiag.com>: Relay access denied [210 ms]

LookupServer 1748ms

Today, my IP is not banned/ignored by fail2ban and the mail client synchronize.

But one error still exists.

[IMAP] The folder "/Public" cannot be opened. (NO [NOPERM] Permission denied (0.001 + 0.000 secs).)
1 Like

Check the permission of /var/lib/nethserver/vmail/user folders

0 drwx------ 3 vmail vmail 21 Mar 27 18:47 max_mustermann@myserver.de

Maildir:

total 76
 4 drwx------ 9 vmail vmail  4096 Mar 28 18:44 .
 0 drwx------ 3 vmail vmail    21 Feb 24 00:41 ..
 4 drwx------ 2 vmail vmail  4096 Mar 28 18:44 cur
 0 -rw------- 1 vmail vmail     0 Feb 24 00:41 dovecot-acl-list
 4 -rw------- 1 vmail vmail  1072 Mar 28 16:28 dovecot.index
28 -rw------- 1 vmail vmail 24704 Mar 28 18:44 dovecot.index.cache
12 -rw------- 1 vmail vmail  9956 Mar 28 18:44 dovecot.index.log
 4 -rw------- 1 vmail vmail    21 Feb 24 21:15 dovecot-keywords
 4 -rw------- 1 vmail vmail    96 Feb 24 00:41 dovecot.mailbox.log
 4 -rw------- 1 vmail vmail  1985 Mar 28 18:43 dovecot-uidlist
 4 -rw------- 1 vmail vmail     8 Feb 24 00:41 dovecot-uidvalidity
 0 -r--r--r-- 1 vmail vmail     0 Feb 24 00:41 dovecot-uidvalidity.6216c63a
 0 drwx------ 5 vmail vmail   156 Feb 24 22:14 .Drafts
 0 drwx------ 5 vmail vmail   108 Feb 24 01:18 .Junk
 4 -rw------- 1 vmail vmail   172 Mar 28 18:46 maildirsize
 0 drwx------ 2 vmail vmail     6 Mar 28 18:44 new
 0 drwx------ 5 vmail vmail   156 Mar 27 18:49 .Sent
 4 -rw------- 1 vmail vmail    23 Feb 24 00:41 subscriptions
 0 drwx------ 2 vmail vmail     6 Mar 28 18:43 tmp
 0 drwx------ 5 vmail vmail   180 Mar 28 18:46 .Trash
2 Likes

I have executed this recommended command

/etc/e-smith/events/actions/nethserver-mail-shrmbx-modify ev 'Public' 'Public' user=user@$(hostname -d) ADMIN

The error no longer occurs.

Thank you and @mrmarkuz for the hint.

2 Likes

@mrmarkuz

Hi Markus,

I fired up this command on March 30th, too. Since a few days I observe some strange behavior: When accessing mail with different clients, e.g. Thunderbird, IOS mail, Sogo or MS mail, the “changes” do not sync anymore. It is somehow like I email is provided to each client individually. E.g. If I read or delete a mail on IOS and then open Thunderbird, the email is still there, and it appears as unread. I checked my history, but I did not change anything else except some trails on vhost settings on apache.
I believe it has something to to with that command. By change: how do I revert / “undo” that command?

TIA
Thorsten

To list the ACLs:

doveadm acl get -A Public

To remove it (change myuser to fit your environment):

doveadm acl delete -A Public user=myuser@$(hostname -d)