Problem Mail Server

Support
,
1

NethServer Version: 7.9.2009
Module: Email

Hi guys

I have this problem, i have acronis send me report for my backup to mygroup mail: backup@mydomain.tld and i don’t receive any mail, but if i try to send to another group for example assistenza@mydomain.tld the email arrived

This is the Mail log when i try to send to backup@mydomain.tld

Mar 29 12:05:46 mail rspamd[26944]: <3y4jzj>; lua; bayes_expiry.lua:440: finished expiry step 19: 992 items checked, 154 significant (7 made persistent), 2 insignificant (0 ttls set), 0 common (0 discriminated), 836 infrequent (0 ttls set), 1 mean, 1 std
Mar 29 12:06:48 mail rspamd[26944]: <3y4jzj>; lua; bayes_expiry.lua:440: finished expiry step 20: 995 items checked, 157 significant (6 made persistent), 1 insignificant (0 ttls set), 1 common (1 discriminated), 836 infrequent (0 ttls set), 1 mean, 2 std

This is the Mail log when i try to send to assistenza@mydomain.tld

Mar 29 12:07:47 mail postfix/smtpd[7519]: connect from m229-208.mailgun.net[159.135.229.208]
Mar 29 12:07:47 mail rspamd[26943]: ; proxy; proxy_accept_socket: accepted milter connection from /var/run/rspamd/worker-proxy port 0
Mar 29 12:07:48 mail postfix/smtpd[7519]: C493D120B: client=m229-208.mailgun.net[159.135.229.208]
Mar 29 12:07:48 mail rspamd[26943]: ; milter; rspamd_milter_process_command: got connection from 159.135.229.208:21687
Mar 29 12:07:49 mail postfix/cleanup[7533]: C493D120B: message-id=8XBsASZofbr9nAiD3wmKVF.0@eu8-cloud.acronis.com
Mar 29 12:07:49 mail rspamd[26943]: ; proxy; rspamd_message_parse: loaded message; id: 8XBsASZofbr9nAiD3wmKVF.0@eu8-cloud.acronis.com; queue-id: ; size: 78652; checksum: <95686de04e6d18d548bf24876b03d816>
Mar 29 12:07:49 mail rspamd[26943]: ; proxy; rspamd_mime_part_detect_language: detected part language: en
Mar 29 12:07:49 mail clamd[6905]: SelfCheck: Database status OK.
Mar 29 12:07:49 mail rspamd[26943]: ; proxy; dkim_module_key_handler: stored DKIM key for mailo._domainkey.cloud.acronis.com in LRU cache for 3600 seconds, 106/2000 elements in the cache
Mar 29 12:07:49 mail rspamd[26943]: ; proxy; rspamd_spf_record_postprocess: increasing ttl from 60 to 300 as it lower than a limit
Mar 29 12:07:49 mail rspamd[26943]: ; proxy; rspamd_spf_maybe_return: stored record for cloud.acronis.com (0xd3591d2de198b9e9) in LRU cache for 300 seconds, 110/2000 elements in the cache
Mar 29 12:07:49 mail rspamd[26943]: ; proxy; rspamd_symcache_finalize_item: slow rule: MX_INVALID(261): 428.88 ms; enable slow timer delay
Mar 29 12:07:49 mail rspamd[26943]: ; proxy; rspamd_redis_connected: skip obtaining bayes tokens for BAYES_SPAM of classifier bayes: not enough learns 103; 200 required
Mar 29 12:07:49 mail rspamd[26943]: ; proxy; rspamd_redis_connected: skip obtaining bayes tokens for BAYES_HAM of classifier bayes: not enough learns 116; 200 required
Mar 29 12:07:49 mail rspamd[26943]: ; proxy; rspamd_stat_classifiers_process: skip statistics as SPAM class is missing
Mar 29 12:07:49 mail rspamd[26943]: ; lua; neural.lua:315: skip ham sample to keep spam/ham balance; probability 0.7330508474576272; 63 spam and 235 ham vectors stored
Mar 29 12:07:49 mail rspamd[26943]: ; proxy; rspamd_task_write_log: id: 8XBsASZofbr9nAiD3wmKVF.0@eu8-cloud.acronis.com, qid: , ip: 159.135.229.208, from: bounce@cloud.acronis.com, (default: F (no action): [-1.51/20.00] [DWL_DNSWL_LOW(-1.00){acronis.com:dkim;},DMARC_POLICY_ALLOW(-0.50){cloud.acronis.com;none;},FORGED_SENDER(0.30){noreply-abc@cloud.acronis.com;bounce@cloud.acronis.com;},MIME_HTML_ONLY(0.20){},R_DKIM_ALLOW(-0.20){cloud.acronis.com:s=mailo;},R_SPF_ALLOW(-0.20){+ip4:159.135.224.0/20;},MIME_GOOD(-0.10){multipart/mixed;},MX_GOOD(-0.01){},IP_REPUTATION_HAM(-0.00){asn: 33070(0.00), country: US(-0.00), ip: 159.135.229.208(0.00);},ASN(0.00){asn:33070, ipnet:159.135.229.0/24, country:US;},DKIM_TRACE(0.00){cloud.acronis.com:+;},FROM_NEQ_ENVFROM(0.00){noreply-abc@cloud.acronis.com;bounce@cloud.acronis.com;},FROM_NO_DN(0.00){},HAS_ATTACHMENT(0.00){},MID_RHS_MATCH_FROMTLD(0.00){},MIME_TRACE(0.00){0:+;1:~;2:~;},NEURAL_HAM(0.00){-0.998;},RCPT_COUNT_ONE(0.00){1;},RCVD_COUNT_TWO(0.00){2;},RCVD_IN_DNSWL_NONE(0.00){159.135.229.208:from;},RCVD_TLS_LAST(0.00){},RWL_MAILSPIKE_POSSIBLE(0.00){159.135.229.208:from;},TAGGED_FROM(0.00){4fc62d.5e9113-assistenza=mydomain.tld;},TO_DN_NONE(0.00){},TO_MATCH_ENVRCPT_ALL(0.00){}]), len: 78652, time: 627.285ms, dns req: 40, digest: <95686de04e6d18d548bf24876b03d816>, rcpts: assistenza@mydomain.tld, mime_rcpts: assistenza@mydomain.tld
Mar 29 12:07:49 mail rspamd[26943]: ; proxy; rspamd_protocol_http_reply: regexp statistics: 82 pcre regexps scanned, 1 regexps matched, 175 regexps total, 11 regexps cached, 34.53KiB scanned using pcre, 34.53KiB scanned total
Mar 29 12:07:49 mail postfix/qmgr[26933]: C493D120B: from=bounce+4fc62d.5e9113-assistenza=mydomain.tld@cloud.acronis.com, size=78924, nrcpt=2 (queue active)
Mar 29 12:07:49 mail dovecot: lmtp(7555): Connect from local
Mar 29 12:07:49 mail dovecot: lmtp(user1@mydomain.tld): save: box=Assistenza, uid=292, msgid=8XBsASZofbr9nAiD3wmKVF.0@eu8-cloud.acronis.com, from=noreply-abc@cloud.acronis.com, subject=DAILY REPORT ON Mar 29, 2022 12:07 PM, flags=()
Mar 29 12:07:49 mail dovecot: lmtp(user1@mydomain.tld): sPokOnXaQmKDHQAANIBgBA: sieve: msgid=8XBsASZofbr9nAiD3wmKVF.0@eu8-cloud.acronis.com: stored mail into mailbox ‘Assistenza’
Mar 29 12:07:49 mail postfix/lmtp[7554]: C493D120B: to=user1@mydomain.tld, orig_to=assistenza@mydomain.tld, relay=mail.mydomain.tld[/var/run/dovecot/lmtp], delay=1.4, delays=1.4/0/0/0.01, dsn=2.0.0, status=sent (250 2.0.0 user1@mydomain.tld sPokOnXaQmKDHQAANIBgBA Saved)
Mar 29 12:07:49 mail dovecot: lmtp(user2@mydomain.tld): save: box=Assistenza, uid=50, msgid=8XBsASZofbr9nAiD3wmKVF.0@eu8-cloud.acronis.com, from=noreply-abc@cloud.acronis.com, subject=DAILY REPORT ON Mar 29, 2022 12:07 PM, flags=()
Mar 29 12:07:49 mail dovecot: lmtp(user2@mydomain.tld): sPokOnXaQmKDHQAANIBgBA:2: sieve: msgid=8XBsASZofbr9nAiD3wmKVF.0@eu8-cloud.acronis.com: stored mail into mailbox ‘Assistenza’
Mar 29 12:07:49 mail postfix/lmtp[7554]: C493D120B: to=user2@mydomain.tld, orig_to=assistenza@mydomain.tld, relay=mail.mydomain.tld[/var/run/dovecot/lmtp], delay=1.4, delays=1.4/0/0/0.02, dsn=2.0.0, status=sent (250 2.0.0 user2@mydomain.tld sPokOnXaQmKDHQAANIBgBA:2 Saved)
Mar 29 12:07:49 mail dovecot: lmtp(7555): Disconnect from local: Successful quit

2

Do you have grey listing enabled maybe try adding the sending email address or domain to the email whitelist as it looks like it’s being flagged as spam and being silently dropped (or if grey listing is enabled it will fail a few times then be allowed thru)

3

Hi

i try to add the domain to whitelist:

immagine
immagine1083×181 12.3 KB

But nothing change, grey listing is disabled.

4

Is the email to be received from email@cloud.acronis.com if it’s from let’s say reports@acronis.com whitelist acronis.com (without the cloud part)

Actually after some digging is the report sent from noreply-abc@cloud.acronis.com?

1 Like
5

Yes this is the sender noreply-abc@cloud.acronis.com

Btw i try to send the report to my group mail:

assistenza@mydomain.tld (ok)
pbx@mydomain.tld (ok)
nethserver@mydomain.tld (ok)
report@mydomain.tld (failed)
backup@mydomain.tld (failed)

Off course if try to send an email to backup@mydomain.tld from for example my personal gmail i’m able to receive the mail

6

Backup notifications level set correctly in Acronis?

7

Off course, because if i send report manual and put for example assistenza@mydomain.tld i receive the mail

8

So its not spam because whitelist would solve that it’s not resolution because you can receive the report on your other email

Sorry just running through the possible issue to rule out first

Are report and backup just groups while the others are user emails?

9

No all of them are groups as you can see:

immagine
immagine1098×507 28.8 KB

10

shouldnt be required but for testing purposes try adding the following in the whitelist and try sending the report again.

Email - orion.ksatdesign.com.au(20:10_22-03-31)
Email - orion.ksatdesign.com.au(20:10_22-03-31)1136×387 74.6 KB

obviously change the mydomain.tld to correct one

because that should stop anything that’s blocking then check logs and compare to see if something stands out

11

Hi

I have try to add the rule on RspamD but if i try to sendo to: backup@online-net.it the mail not arrived.

12

I just sent a test email from my email (not a gmail or generic one to see if it gets through or is flagged) I’ve checked your DNS records, for the domain etc can’t find an issue there maybe delete and recreate thouse 2 groups that arent working (could be some quirky error caused on the mail server)

13

Hello,

Could you please confirm that the backup group mailbox is enabled under:
Email > Mailboxes > Groups tab

Also it should be set to Public under Email > Addesses.

14

Hi

The mail is arrived

i’ve already try to delete and recreate the group.

Btw the mail server is part of a nethserver DC

15

Yes confirm

16

There’s no message about a sent/received mail.

If a user is in more groups the mail is delivered just once.

Did you try to create a group with another name?

17

I completely forgot about that

18

Hi @mrmarkuz

Yes if i send an email to other group, like assistenza@mydomain.tld or nethserver@mydomain.tld i receive the mail from acronis without no problem, but if i try to sendo to report@mydomain.tld or backup@mydomain.tld the mail not arrived, but in report@online-net.it i’m albe to receive notifications email from device like NAS Synology, Nethserver… so the group is working fine, but on group backup@mydomain.tld i can’t receive email from Acronis Report, but if i try to send an email from a gmail for example to backup@mydomain.tld i’m able to receive…

19

@Denis_Pollini there is any “duplicated” name among groups/users/shares?

20

@pike

Hi don’t think so

This is Group List:

immagine
immagine1105×441 31.8 KB

This is User List:

immagine
immagine1043×432 38.1 KB

This is Share List:

immagine
immagine1074×249 11.4 KB