One NethServer environment cannot send email

Support
1

NethServer Version: Nethserver 8 core 3.7.0
Module: mail 1.6.3 roundcubemail 2.0.7

I’ve go two totally separate and not at all connected nethserver environments.

Both were set up at the same time, and my user account’s password expired on both of them at the same time.

I updated the passwords on both succesfully, and can now log in to the node, email via an app, and email via webgui (roundcubeemail)

On system B, I can send email via the WebGUI as well as the app on my phone

On system A, I can receive and read email via the app and WebGUI, but I cannot send.

Upion trying to send an email from the WebGUI, I get a pop-up message in the lower right hand corner that says “Authentication Error”

Here’s what my system logs say:

2025-05-06T12:51:55-04:00 [1:mail1:postfix/smtpd] connect from cluster-localnode[10.5.4.1]
2025-05-06T12:51:55-04:00 [1:mail1:postfix/smtpd] warning: connect to Milter service inet:127.0.0.1:11332: Connection refused
2025-05-06T12:51:55-04:00 [1:mail1:postfix/smtpd] NOQUEUE: milter-reject: CONNECT from cluster-localnode[10.5.4.1]: 451 4.7.1 Service unavailable - try again later; proto=SMTP
2025-05-06T12:51:55-04:00 [1:mail1:postfix/smtpd] NOQUEUE: milter-reject: EHLO from cluster-localnode[10.5.4.1]: 451 4.7.1 Service unavailable - try again later; proto=SMTP helo=<mail.__________.com>
2025-05-06T12:51:55-04:00 [1:mail1:postfix/smtpd] disconnect from cluster-localnode[10.5.4.1] ehlo=1 auth=0/1 quit=1 commands=2/3

I tried updating settings on the mail app on my phone to no avail, but I have no idea how to fix the WebGUI issue.

I tried installing updates, but that didn’t help.

I tried rebooting since it said a service was unavailable, but that didn’t help.

2

There was the same error in another thread: Nethserver 8 Not accepting any email - #15 by derilium

Let’s check if the port is open:

[root@ns8rockytest ~]# ss -tlp | grep 11332
LISTEN 0      4096       127.0.0.1:11332               0.0.0.0:*    users:(("rspamd",pid=10741,fd=67),("rspamd",pid=9502,fd=67))

You could try to restart the rspamd service/container:

runagent -m mail1 systemctl --user restart rspamd
3

Hi mrmarkuz!

I checked if the port is open, and it looks like it is

ss -tlp | grep 11332
LISTEN 0 4096 [::1]:11332 [::]:*

sudo netstat -dnlp | grep 11332
tcp6 0 0 ::1:11332 :::* LISTEN 4783/rspamd: main p

I also checked port 465 since that’s what the email app on my phone is trying to connect to

sudo netstat -dnlp | grep 465
tcp 0 0 0.0.0.0:465 0.0.0.0:* LISTEN 4821/master
tcp6 0 0 :::465 :::* LISTEN 4821/master

and checked ports from a different machine

Host is up (0.0016s latency).
PORT STATE SERVICE
465/tcp open smtps
11332/tcp closed unknown

So 465 is reachable from the outside, and 11332 is not. Is this how it should be?

on “Server B”, both ports are accessible from outside, but it appears there’s nothing listening on 11332, which confuses me even more lol

Host is up (0.0010s latency).
PORT STATE SERVICE
465/tcp open smtps
11332/tcp filtered unknown

4

Did you install on Debian or Rocky? Is it a VPS? Did you install from ISO or pre-built image?

Did you try to restart rspamd?

Nothing is listening on IPv4 127.0.0.1?

Here it looks like this:

[root@ns8rockytest ~]# ss -tlp | grep rspamd
LISTEN 0      4096       127.0.0.1:11333               0.0.0.0:*    users:(("rspamd",pid=363790,fd=73),("rspamd",pid=363789,fd=73),("rspamd",pid=363784,fd=73))                                                                              
LISTEN 0      4096       127.0.0.1:11332               0.0.0.0:*    users:(("rspamd",pid=363787,fd=67),("rspamd",pid=363784,fd=67))                                                                                                          
LISTEN 0      4096       127.0.0.1:11334               0.0.0.0:*    users:(("rspamd",pid=363788,fd=70),("rspamd",pid=363784,fd=70))                                                                                                          
LISTEN 0      4096           [::1]:11332                  [::]:*    users:(("rspamd",pid=363787,fd=68),("rspamd",pid=363784,fd=68))                                                                                                          
LISTEN 0      4096           [::1]:11333                  [::]:*    users:(("rspamd",pid=363790,fd=75),("rspamd",pid=363789,fd=75),("rspamd",pid=363784,fd=75))

Let’s check rspamd status:

runagent -m mail1 systemctl --user status rspamd

Yes, 11332 is just used internally.

5

Debian

No, it is a virtual machine on local hardware

ISO if I recall correctly

Yes, sorry I forgot to mention that. I restarted it using

sudo runagent -m mail1 systemctl --user restart rspamd

and prior to posting I also rebooted the virtual machine it’s running on.

When I run it on Server A (the problem server), I get this:

ss -tlp | grep 11332
LISTEN 0 4096 [::1]:11332 [::]:*

When I run it on Server B, I get this:
ss -tlp | grep 11332
LISTEN 0 4096 127.0.0.1:11332 0.0.0.0:*
LISTEN 0 4096 [::1]:11332 [::]:*

So there is something listening on that port on 127.0.0.1 on the one that’s working. Does this mean that on the problem server, it’s not listening on 11332 on IPv4? (I hate IPv6 sooooooooo much lol)

sudo runagent -m mail1 systemctl --user status rspamd

rspamd.service - Rspamd mail filter

Loaded: loaded (/home/mail1/.config/systemd/user/rspamd.service; enabled; preset: enabled)

Active: active (running) since Tue 2025-05-06 15:34:01 EDT; 1h 22min ago

Process: 14551 ExecStartPre=/bin/rm -f /run/user/1006/rspamd.pid /run/user/1006/rspamd.ctr-id (code=exited, status=0/SUCCESS)

Process: 14552 ExecStartPre=runagent discover-services (code=exited, status=0/SUCCESS)

Process: 14554 ExecStart=/usr/bin/podman run --detach --init --conmon-pidfile=/run/user/1006/rspamd.pid --cidfile=/run/user/1006/rspamd.ctr-id --cgroups=no-conmon --replace --name=rspamd --network=host --env=RSPAMD_* --env-file=rspam>

Process: 14576 ExecStartPost=/usr/bin/bash -c while ! exec 3<>/dev/tcp/127.0.0.1/11334 &>/dev/null; do sleep 3 ; done ; printf 'GET /ping

' >&3 (code=exited, status=0/SUCCESS)
Main PID: 14571 (conmon)
Tasks: 1 (limit: 4641)
Memory: 143.1M
CPU: 1.284s
CGroup: /user.slice/user-1006.slice/user@1006.service/app.slice/rspamd.service

└─14571 /usr/bin/conmon --api-version 1 -c 5ea65bfec3406db3cad39c86d17427428e8e98838d9797716e135e578628f904 -u 5ea65bfec3406db3cad39c86d17427428e8e98838d9797716e135e578628f904 -r /usr/bin/crun -b /home/mail1/.local/share/con>

May 06 15:54:34 node01 rspamd[14571]: (controller) <5t8s4f>; map; http_map_finish: data is not modified for server sa-update.surbl.org, next check at Tue, 06 May 2025 19:59:34 GMT (timer based)

May 06 16:01:32 node01 rspamd[14571]: (controller) <5t8s4f>; map; http_map_finish: data is not modified for server sa-update.surbl.org, next check at Tue, 06 May 2025 20:06:32 GMT (timer based)

May 06 16:06:33 node01 rspamd[14571]: (controller) <5t8s4f>; map; http_map_finish: data is not modified for server sa-update.surbl.org, next check at Tue, 06 May 2025 20:11:33 GMT (timer based)

May 06 16:11:50 node01 rspamd[14571]: (controller) <5t8s4f>; map; http_map_finish: data is not modified for server sa-update.surbl.org, next check at Tue, 06 May 2025 20:16:50 GMT (timer based)

May 06 16:17:57 node01 rspamd[14571]: (controller) <5t8s4f>; map; http_map_finish: data is not modified for server sa-update.surbl.org, next check at Tue, 06 May 2025 20:22:57 GMT (timer based)

May 06 16:26:36 node01 rspamd[14571]: (controller) <5t8s4f>; map; http_map_finish: data is not modified for server sa-update.surbl.org, next check at Tue, 06 May 2025 20:31:36 GMT (timer based)

May 06 16:35:40 node01 rspamd[14571]: (controller) <5t8s4f>; map; http_map_finish: data is not modified for server sa-update.surbl.org, next check at Tue, 06 May 2025 20:40:40 GMT (timer based)

May 06 16:42:58 node01 rspamd[14571]: (controller) <5t8s4f>; map; http_map_finish: data is not modified for server sa-update.surbl.org, next check at Tue, 06 May 2025 20:47:58 GMT (timer based)

May 06 16:51:28 node01 rspamd[14571]: (controller) <5t8s4f>; map; http_map_finish: data is not modified for server sa-update.surbl.org, next check at Tue, 06 May 2025 20:56:28 GMT (timer based)

May 06 16:53:47 node01 rspamd[14571]: (controller) <qamb1r>; map; http_map_finish: data is not modified for server maps.rspamd.com, next check at Wed, 07 May 2025 00:53:47 GMT (http cache based: Wed, 07 May 2025 00:53:47 GMT)

Thanks for confirming!

And also, thank you for your help!

6

I think I could reproduce the issue.

It seems following entry is missing in /etc/hosts on system A:

127.0.0.1 localhost

After setting the entry rspamd needs to be restarted:

runagent -m mail1 systemctl --user restart rspamd

Now you should get IPv4 and IPv6:

[root@ns8rockytest ~]# ss -tlp | grep rspamd
LISTEN 0      4096       127.0.0.1:11333               0.0.0.0:*    users:(("rspamd",pid=639878,fd=73),("rspamd",pid=639877,fd=73),("rspamd",pid=639873,fd=73))                                                                              
LISTEN 0      4096       127.0.0.1:11332               0.0.0.0:*    users:(("rspamd",pid=639875,fd=67),("rspamd",pid=639873,fd=67))                                                                                                          
LISTEN 0      4096       127.0.0.1:11334               0.0.0.0:*    users:(("rspamd",pid=639876,fd=70),("rspamd",pid=639873,fd=70))                                                                                                          
LISTEN 0      4096           [::1]:11332                  [::]:*    users:(("rspamd",pid=639875,fd=68),("rspamd",pid=639873,fd=68))                                                                                                          
LISTEN 0      4096           [::1]:11333                  [::]:*    users:(("rspamd",pid=639878,fd=75),("rspamd",pid=639877,fd=75),("rspamd",pid=639873,fd=75))
2 Likes
7

yep…

somehow a backslash was added to the first line of the file, which happened to be that entry

Probably my fingers moving faster than my eyes last time I was modifying it.

I restarted the service and tested and it is working now.

Thanks again for your help!!

1 Like