Problem with email after today's update!

Hi there,

I ran the update on my “old NS” today, since then I have not been able to call up any emails.
These were the updates of the last three weeks, since I was on vacation I only made them today.

SOGo reports that there is a linked mailbox.
My email program reports no authentication possible.

My log file reports some things but I cannot assign it:

Sep 21 18:09:41 openzwo clamd[2250]: Limits: PCREMaxFileSize limit set to 26214400.
Sep 21 18:09:41 openzwo clamd[2250]: Archive support enabled.
Sep 21 18:09:41 openzwo clamd[2250]: AlertExceedsMax heuristic detection disabled.
Sep 21 18:09:41 openzwo clamd[2250]: Heuristic alerts enabled.
Sep 21 18:09:41 openzwo clamd[2250]: Portable Executable support enabled.
Sep 21 18:09:41 openzwo clamd[2250]: ELF support enabled.
Sep 21 18:09:41 openzwo clamd[2250]: Mail files support enabled.
Sep 21 18:09:41 openzwo clamd[2250]: OLE2 support enabled.
Sep 21 18:09:41 openzwo clamd[2250]: PDF support enabled.
Sep 21 18:09:41 openzwo clamd[2250]: SWF support enabled.
Sep 21 18:09:41 openzwo clamd[2250]: HTML support enabled.
Sep 21 18:09:41 openzwo clamd[2250]: XMLDOCS support enabled.
Sep 21 18:09:41 openzwo clamd[2250]: HWP3 support enabled.
Sep 21 18:09:41 openzwo clamd[2250]: Self checking every 600 seconds.
Sep 21 18:10:11 openzwo rspamd[3906]: <nxb5yj>; lua; bayes_expiry.lua:440: finished expiry step 25: 979 items checked, 282 significant (6 made persistent), 0 insignificant (0 ttls set), 1 common (0 discriminated), 696 infrequent ($
Sep 21 18:11:22 openzwo dovecot: managesieve-login: Disconnected (auth failed, 2 attempts in 4 secs): user=<gerald.musch@nandlnet.de>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured, session=<PGDZpYPM6oF/AAAB>
Sep 21 18:11:27 openzwo dovecot: managesieve-login: Disconnected (auth failed, 2 attempts in 4 secs): user=<gerald.musch@nandlnet.de>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured, session=<M2YhpoPM9oF/AAAB>
Sep 21 18:11:48 openzwo dovecot: managesieve-login: Disconnected (auth failed, 2 attempts in 4 secs): user=<gerald.musch@nandlnet.de>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured, session=<tu5mp4PMAIJ/AAAB>
Sep 21 18:11:50 openzwo dovecot: managesieve-login: Disconnected (auth failed, 2 attempts in 4 secs): user=<gerald.musch@nandlnet.de>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured, session=<9aCGp4PMBIJ/AAAB>
Sep 21 18:11:54 openzwo rspamd[3906]: <nxb5yj>; lua; bayes_expiry.lua:440: finished expiry step 26: 980 items checked, 268 significant (1 made persistent), 0 insignificant (0 ttls set), 3 common (0 discriminated), 709 infrequent ($
Sep 21 18:11:55 openzwo rspamd[3906]: <o33omj>; map; http_map_finish: data is not modified for server maps.rspamd.com, next check at Tue, 21 Sep 2021 20:11:55 GMT (http cache based)
Sep 21 18:11:55 openzwo rspamd[3906]: <7n3qic>; map; http_map_finish: data is not modified for server maps.rspamd.com, next check at Tue, 21 Sep 2021 20:11:55 GMT (http cache based)
Sep 21 18:11:55 openzwo rspamd[3906]: <qbq3yk>; map; http_map_finish: data is not modified for server maps.rspamd.com, next check at Tue, 21 Sep 2021 20:11:55 GMT (http cache based)
Sep 21 18:12:32 openzwo postfix/anvil[6299]: statistics: max connection rate 1/60s for (smtp:46.182.7.17) at Sep 21 18:09:08
Sep 21 18:12:32 openzwo postfix/anvil[6299]: statistics: max connection count 1 for (smtp:46.182.7.17) at Sep 21 18:09:08
Sep 21 18:12:32 openzwo postfix/anvil[6299]: statistics: max cache size 1 at Sep 21 18:09:08
Sep 21 18:12:52 openzwo rspamd[3906]: <707607>; csession; rspamd_controller_check_password: allow unauthorized connection from a trusted IP 127.0.0.1
Sep 21 18:13:06 openzwo postfix/postfix-script[7974]: stopping the Postfix mail system
Sep 21 18:13:06 openzwo postfix/master[3097]: terminating on signal 15
Sep 21 18:13:07 openzwo postfix/postfix-script[8182]: starting the Postfix mail system
Sep 21 18:13:07 openzwo postfix/master[8192]: daemon started -- version 2.10.1, configuration /etc/postfix
Sep 21 18:13:08 openzwo dovecot: master: Warning: SIGHUP received - reloading configuration
Sep 21 18:13:12 openzwo opendkim[2220]: OpenDKIM Filter: mi_stop=1
Sep 21 18:13:12 openzwo opendkim[2220]: OpenDKIM Filter v2.11.0 terminating with status 0, errno = 0
Sep 21 18:13:12 openzwo opendkim[9045]: OpenDKIM Filter v2.11.0 starting (args: -x /etc/opendkim.conf -P /var/run/opendkim/opendkim.pid)
Sep 21 18:13:28 openzwo dovecot: managesieve-login: Disconnected (auth failed, 2 attempts in 8 secs): user=<gerald.musch@nandlnet.de>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured, session=<xVcUrYPMVoJ/AAAB>
Sep 21 18:13:53 openzwo rspamd[3906]: <nxb5yj>; lua; bayes_expiry.lua:440: finished expiry step 27: 983 items checked, 283 significant (1 made persistent), 1 insignificant (0 ttls set), 1 common (0 discriminated), 698 infrequent ($
Sep 21 18:15:35 openzwo rspamd[3906]: <nxb5yj>; lua; bayes_expiry.lua:440: finished expiry step 28: 979 items checked, 266 significant (8 made persistent), 0 insignificant (0 ttls set), 1 common (0 discriminated), 712 infrequent ($
Sep 21 18:15:36 openzwo dovecot: managesieve-login: Disconnected (auth failed, 2 attempts in 8 secs): user=<gerald.musch@nandlnet.de>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured, session=<nyrBtIPM0IJ/AAAB>
Sep 21 18:17:14 openzwo rspamd[3906]: <nxb5yj>; lua; bayes_expiry.lua:440: finished expiry step 29: 980 items checked, 276 significant (3 made persistent), 0 insignificant (0 ttls set), 2 common (0 discriminated), 702 infrequent ($
Sep 21 18:18:26 openzwo rspamd[3906]: <nxb5yj>; lua; bayes_expiry.lua:440: finished expiry step 30: 977 items checked, 244 significant (8 made persistent), 1 insignificant (0 ttls set), 3 common (0 discriminated), 729 infrequent ($
Sep 21 18:19:28 openzwo rspamd[3906]: <nxb5yj>; lua; bayes_expiry.lua:440: finished expiry step 31: 980 items checked, 280 significant (1 made persistent), 0 insignificant (0 ttls set), 2 common (0 discriminated), 698 infrequent ($

you still have my IMAP log file with the login errors

the first entries show that it worked, after the update the errors begin.

Sep 21 13:48:56 openzwo dovecot: imap-login: Login: user=<anika.musch@nandlnet.de>, method=PLAIN, rip=192.168.200.165, lip=192.168.222.10, mpid=9572, TLS, session=<kYl7+3/MzJ3AqMil>
Sep 21 13:48:57 openzwo dovecot: imap(anika.musch@nandlnet.de): Connection closed (IDLE running for 0.001 + waiting input for 202.989 secs, 2 B in + 10 B out, state=wait-input) in=943 out=21021
Sep 21 13:50:03 openzwo dovecot: imap-login: Login: user=<gerald.musch@nandlnet.de>, method=PLAIN, rip=109.43.49.230, lip=192.168.20.3, mpid=10006, TLS, session=<54hy/3/MmWxtKzHm>
Sep 21 14:00:00 openzwo dovecot: imap(anika.musch@nandlnet.de): Disconnected for inactivity in=1352 out=16729
Sep 21 14:00:43 openzwo dovecot: imap(anika.musch@nandlnet.de): Connection closed (IDLE running for 0.001 + waiting input for 105.257 secs, 2 B in + 10 B out, state=wait-input) in=779 out=35475
Sep 21 14:00:43 openzwo dovecot: imap(anika.musch@nandlnet.de): Connection closed (STATUS finished 42.782 secs ago) in=886 out=386233
Sep 21 14:09:45 openzwo dovecot: imap(gerald.musch@nandlnet.de): Connection closed (FETCH finished 583.660 secs ago) in=1094 out=7544
Sep 21 14:10:01 openzwo dovecot: imap-login: Login: user=<anika.musch@nandlnet.de>, method=PLAIN, rip=192.168.200.165, lip=192.168.200.10, mpid=14587, TLS, session=<P6XrRoDMnpfAqMil>
Sep 21 14:10:02 openzwo dovecot: imap-login: Login: user=<anika.musch@nandlnet.de>, method=PLAIN, rip=192.168.200.165, lip=192.168.230.10, mpid=14718, TLS, session=<hKXrRoDMmMLAqMil>
Sep 21 14:10:02 openzwo dovecot: imap-login: Login: user=<gerald.musch@nandlnet.de>, method=PLAIN, rip=109.43.49.230, lip=192.168.20.3, mpid=14734, TLS, session=<zL73RoDM2E1tKzHm>
Sep 21 14:14:37 openzwo dovecot: imap(gerald.musch@nandlnet.de): Connection closed (STATUS finished 274.933 secs ago) in=287 out=911
Sep 21 14:20:04 openzwo dovecot: imap-login: Aborted login (auth failed, 1 attempts in 2 secs): user=<gerald.musch@nandlnet.de>, method=PLAIN, rip=109.43.49.230, lip=192.168.20.3, TLS, session=<A2q9aoDMiF1tKzHm>
Sep 21 14:21:06 openzwo dovecot: imap-login: Disconnected (no auth attempts in 19 secs): user=<>, rip=109.43.51.237, lip=192.168.20.3, TLS handshaking: Disconnected, session=<8sqOboDMLGxtKzPt>
Sep 21 14:21:06 openzwo dovecot: imap-login: Disconnected (no auth attempts in 18 secs): user=<>, rip=109.43.51.237, lip=192.168.20.3, TLS handshaking: SSL_accept() syscall failed: Connection reset by peer, session=<zsuOboDMew1tKz$
Sep 21 14:21:08 openzwo dovecot: imap(anika.musch@nandlnet.de): Server shutting down. in=501 out=1443
Sep 21 14:21:08 openzwo dovecot: imap(anika.musch@nandlnet.de): Server shutting down. in=291 out=3565
Sep 21 14:21:48 openzwo dovecot: imap-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<anika.musch@nandlnet.de>, method=PLAIN, rip=192.168.200.165, lip=192.168.222.10, TLS, session=<tGf1cIDMRqDAqMil>
Sep 21 14:22:05 openzwo dovecot: imap-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<anika.musch@nandlnet.de>, method=PLAIN, rip=109.43.49.111, lip=192.168.20.3, TLS, session=<lsP0cYDMyBptKzFv>
Sep 21 14:22:48 openzwo dovecot: imap-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<anika.musch@nandlnet.de>, method=PLAIN, rip=192.168.200.165, lip=192.168.222.10, TLS, session=<xRuEdIDMoKDAqMil>
Sep 21 14:23:08 openzwo dovecot: imap-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<anika.musch@nandlnet.de>, method=PLAIN, rip=192.168.200.165, lip=192.168.200.10, TLS, session=<zvm2dYDMlJjAqMil>
Sep 21 14:23:16 openzwo dovecot: imap-login: Aborted login (auth failed, 1 attempts in 2 secs): user=<anika.musch@nandlnet.de>, method=PLAIN, rip=192.168.200.165, lip=192.168.230.10, TLS, session=<3WAvdoDMypDAqMil>
Sep 21 14:23:19 openzwo dovecot: imap-login: Aborted login (auth failed, 1 attempts in 2 secs): user=<gerald.musch@nandlnet.de>, method=PLAIN, rip=109.43.49.230, lip=192.168.20.3, TLS, session=</8pndoDMjW5tKzHm>
Sep 21 14:23:38 openzwo dovecot: imap-login: Aborted login (auth failed, 1 attempts in 2 secs): user=<anika.musch@nandlnet.de>, method=PLAIN, rip=192.168.200.165, lip=192.168.222.10, TLS, session=<ZtKEd4DM1qDAqMil>
Sep 21 14:24:38 openzwo dovecot: imap-login: Aborted login (auth failed, 1 attempts in 2 secs): user=<gerald.musch@nandlnet.de>, method=PLAIN, rip=109.43.49.230, lip=192.168.20.3, TLS, session=<HV8Ue4DM8lVtKzHm>
Sep 21 14:30:04 openzwo dovecot: imap-login: Aborted login (auth failed, 1 attempts in 2 secs): user=<anika.musch@nandlnet.de>, method=PLAIN, rip=192.168.200.165, lip=192.168.200.10, TLS, session=<femCjoDM3pjAqMil>
Sep 21 14:30:36 openzwo dovecot: imap-login: Aborted login (auth failed, 1 attempts in 2 secs): user=<diana.musch@nandlnet.de>, method=PLAIN, rip=109.43.51.237, lip=192.168.20.3, TLS, session=<PRBxkIDMQihtKzPt>
Sep 21 14:30:39 openzwo dovecot: imap-login: Disconnected (client didn't finish SASL auth, waited 4 secs): user=<>, method=PLAIN, rip=109.43.51.237, lip=192.168.20.3, TLS: Disconnected, session=<U2F7kIDMExVtKzPt>
Sep 21 14:31:30 openzwo dovecot: imap-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<anika.musch@nandlnet.de>, method=PLAIN, rip=109.43.49.111, lip=192.168.20.3, TLS, session=<h2Ook4DMOSZtKzFv>
Sep 21 14:31:38 openzwo dovecot: imap-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<anika.musch@nandlnet.de>, method=PLAIN, rip=192.168.200.165, lip=192.168.230.10, TLS, session=<UncalIDMbpHAqMil>
Sep 21 14:35:02 openzwo dovecot: imap-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<anika.musch@nandlnet.de>, method=PLAIN, rip=109.43.49.111, lip=192.168.20.3, TLS, session=<dlFFoIDMBzhtKzFv>
Sep 21 14:35:24 openzwo dovecot: imap-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<anika.musch@nandlnet.de>, method=PLAIN, rip=192.168.200.165, lip=192.168.222.10, TLS, session=<ybGQoYDMwKHAqMil>
Sep 21 14:36:24 openzwo dovecot: imap-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<anika.musch@nandlnet.de>, method=PLAIN, rip=192.168.200.165, lip=192.168.200.10, TLS, session=<JrEtpYDM1pnAqMil>
Sep 21 14:37:28 openzwo dovecot: imap-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<anika.musch@nandlnet.de>, method=PLAIN, rip=192.168.200.165, lip=192.168.230.10, TLS, session=<w2T2qIDMNJLAqMil>
Sep 21 14:38:34 openzwo dovecot: imap-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<anika.musch@nandlnet.de>, method=PLAIN, rip=192.168.200.165, lip=192.168.222.10, TLS, session=<6Q3wrIDMXKLAqMil>
Sep 21 14:39:41 openzwo dovecot: imap-login: Disconnected (auth failed, 1 attempts in 3 secs): user=<anika.musch@nandlnet.de>, method=PLAIN, rip=192.168.200.165, lip=192.168.200.10, TLS, session=<EuXgsIDMTJrAqMil>

Likewise, I cannot receive an email from outside, I wrote an email to myself as a test, see log:

Sep 21 19:49:18 openzwo postfix/smtpd[8464]: connect from mail-eopbgr50135.outbound.protection.outlook.com[40.107.5.135]
Sep 21 19:49:18 openzwo rspamd[3717]: <56be34>; proxy; proxy_accept_socket: accepted milter connection from /var/run/rspamd/worker-proxy port 0
Sep 21 19:49:18 openzwo postfix/smtpd[8464]: NOQUEUE: reject: RCPT from mail-eopbgr50135.outbound.protection.outlook.com[40.107.5.135]: 550 5.1.1 <gerald.musch@nandlnet.de>: Recipient address rejected: undeliverable address: host openzwo.nandlnet.de[/var/run/dovecot/lmtp] said: 550 5.1.1 <gerald.musch@nandlnet.de> User doesn't exist: gerald.musch@nandlnet.de (in reply to RCPT TO command); from=<gerald.musch@thwfs.de> to=<gerald.musch@nandlnet.de> proto=ESMTP helo=<EUR03-VE1-obe.outbound.protection.outlook.com>
Sep 21 19:49:18 openzwo postfix/cleanup[8469]: A36EBA3205: message-id=<20210921174918.A36EBA3205@openzwo.nandlnet.de>
Sep 21 19:49:18 openzwo postfix/qmgr[3097]: A36EBA3205: from=<double-bounce@openzwo.nandlnet.de>, size=282, nrcpt=1 (queue active)
Sep 21 19:49:18 openzwo dovecot: lmtp(8471): Connect from local
Sep 21 19:49:18 openzwo dovecot: lmtp(8471): Disconnect from local: Successful quit
Sep 21 19:49:18 openzwo postfix/lmtp[8470]: A36EBA3205: to=<gerald.musch@nandlnet.de>, relay=openzwo.nandlnet.de[/var/run/dovecot/lmtp], delay=0.28, delays=0.14/0.03/0.03/0.08, dsn=5.1.1, status=undeliverable (host openzwo.nandlnet.de[/var/run/dovecot/lmtp] said: 550 5.1.1 <gerald.musch@nandlnet.de> User doesn't exist: gerald.musch@nandlnet.de (in reply to RCPT TO command))
Sep 21 19:49:18 openzwo postfix/qmgr[3097]: A36EBA3205: removed
Sep 21 19:49:18 openzwo postfix/smtpd[8464]: disconnect from mail-eopbgr50135.outbound.protection.outlook.com[40.107.5.135]
Sep 21 19:49:18 openzwo rspamd[3717]: <56be34>; milter; rspamd_milter_process_command: got connection from 40.107.5.135:45024
Sep 21 19:49:18 openzwo rspamd[3717]: <56be34>; proxy; proxy_milter_finish_handler: finished milter connection
Sep 21 19:49:30 openzwo clamd[2016]: SelfCheck: Database status OK.
Sep 21 19:50:05 openzwo rspamd[3718]: <awxxsj>; lua; bayes_expiry.lua:440: finished expiry step 9: 983 items checked, 303 significant (7 made persistent), 0 insignificant (0 ttls set), 3 common (0 discriminated), 677 infrequent (0 ttls set), 51 mean, 145 std

I hope you can help me again :wink:

Gerald

Have created a new user, when setting up the directories and files were not even created in vmail.

Hi @gerald_FS,

I am not sure but I think those are created when the user login to Webmail or an email app.

Michel-André

That is absolutely correct, it is only created when you log in with the user.
I did that too …

Gerald

@support_team
Can somebody help

Does the mail address exist?

db accounts show | grep gerald.musch@nandlnet.de

Maybe a certificate issue? Do you use Letsencrypt?

yes it exists.

Yesterday I renewed my (LE) certificate.

The strange thing is, I ran the update and when it was finished, no more emails came.

Gerald

root@openzwo ibay]# db accounts show | grep gerald.musch@nandlnet.de
    AclRead=anika.musch@nandlnet.de,gerald.musch@nandlnet.de
    AclWrite=anika.musch@nandlnet.de,gerald.musch@nandlnet.de
    MailForwardAddress=gerald.musch@nandlnet.de
    MailForwardAddress=gerald.musch@nandlnet.de
    Account=anika.musch@nandlnet.de,gerald.musch@nandlnet.de
    AclRead=anika.musch@nandlnet.de,gerald.musch@nandlnet.de
    AclWrite=anika.musch@nandlnet.de,gerald.musch@nandlnet.de
    AclRead=allgemein@nandlnet.de,gerald.musch@nandlnet.de,stb@nandlnet.de
    AclWrite=allgemein@nandlnet.de,gerald.musch@nandlnet.de,stb@nandlnet.de
gerald.musch@nandlnet.de=user
    Account=anika.musch@nandlnet.de,gerald.musch@nandlnet.de
    AclRead=anika.musch@nandlnet.de,gerald.musch@nandlnet.de,stb@nandlnet.de
    AclWrite=anika.musch@nandlnet.de,gerald.musch@nandlnet.de,stb@nandlnet.de
    Account=gerald.musch@nandlnet.de
    AclRead=anika.musch@nandlnet.de,dcp@nandlnet.de,gerald.musch@nandlnet.de,ulrike.drzymalla@nandlnet.de
    AclWrite=anika.musch@nandlnet.de,dcp@nandlnet.de,gerald.musch@nandlnet.de,ulrike.drzymalla@nandlnet.de
    Account=gerald.musch@nandlnet.de,root
    AclRead=anika.musch@nandlnet.de,gerald.musch@nandlnet.de
    AclWrite=anika.musch@nandlnet.de,gerald.musch@nandlnet.de
    AclRead=gerald.musch@nandlnet.de
    AclWrite=gerald.musch@nandlnet.de
    AclRead=gerald.musch@nandlnet.de
    AclWrite=gerald.musch@nandlnet.de
    AclRead=anika.musch@nandlnet.de,gerald.musch@nandlnet.de
    AclWrite=anika.musch@nandlnet.de,gerald.musch@nandlnet.de
    Account=gerald.musch@nandlnet.de
    Account=gerald.musch@nandlnet.de
    Account=gerald.musch@nandlnet.de
[root@openzwo ibay]#

More questions, sorry… “old NS” means 7.9 fully updated anyway, correct?

Also… it’s quite “strange” to me your current MX record configuration…, your 10 should be openzwo.nandlnet.de, not nandlnet.de

The old one is because I’m currently setting up a second server that runs on Proxmox.
This configuration is installed natively and is in my basement.

I’ve been using the update for the last three weeks because I was on vacation for two weeks and the first one was very busy professionally.

The updates went through without errors and the system is up-to-date!

Hello!

I have set up the system again and everything is working again!

I think reinstalling and restoring data was quicker and easier than testing again.

Thank you anyway!

2 Likes