Hi there,
I ran the update on my “old NS” today, since then I have not been able to call up any emails.
These were the updates of the last three weeks, since I was on vacation I only made them today.
SOGo reports that there is a linked mailbox.
My email program reports no authentication possible.
My log file reports some things but I cannot assign it:
Sep 21 18:09:41 openzwo clamd[2250]: Limits: PCREMaxFileSize limit set to 26214400.
Sep 21 18:09:41 openzwo clamd[2250]: Archive support enabled.
Sep 21 18:09:41 openzwo clamd[2250]: AlertExceedsMax heuristic detection disabled.
Sep 21 18:09:41 openzwo clamd[2250]: Heuristic alerts enabled.
Sep 21 18:09:41 openzwo clamd[2250]: Portable Executable support enabled.
Sep 21 18:09:41 openzwo clamd[2250]: ELF support enabled.
Sep 21 18:09:41 openzwo clamd[2250]: Mail files support enabled.
Sep 21 18:09:41 openzwo clamd[2250]: OLE2 support enabled.
Sep 21 18:09:41 openzwo clamd[2250]: PDF support enabled.
Sep 21 18:09:41 openzwo clamd[2250]: SWF support enabled.
Sep 21 18:09:41 openzwo clamd[2250]: HTML support enabled.
Sep 21 18:09:41 openzwo clamd[2250]: XMLDOCS support enabled.
Sep 21 18:09:41 openzwo clamd[2250]: HWP3 support enabled.
Sep 21 18:09:41 openzwo clamd[2250]: Self checking every 600 seconds.
Sep 21 18:10:11 openzwo rspamd[3906]: <nxb5yj>; lua; bayes_expiry.lua:440: finished expiry step 25: 979 items checked, 282 significant (6 made persistent), 0 insignificant (0 ttls set), 1 common (0 discriminated), 696 infrequent ($
Sep 21 18:11:22 openzwo dovecot: managesieve-login: Disconnected (auth failed, 2 attempts in 4 secs): user=<gerald.musch@nandlnet.de>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured, session=<PGDZpYPM6oF/AAAB>
Sep 21 18:11:27 openzwo dovecot: managesieve-login: Disconnected (auth failed, 2 attempts in 4 secs): user=<gerald.musch@nandlnet.de>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured, session=<M2YhpoPM9oF/AAAB>
Sep 21 18:11:48 openzwo dovecot: managesieve-login: Disconnected (auth failed, 2 attempts in 4 secs): user=<gerald.musch@nandlnet.de>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured, session=<tu5mp4PMAIJ/AAAB>
Sep 21 18:11:50 openzwo dovecot: managesieve-login: Disconnected (auth failed, 2 attempts in 4 secs): user=<gerald.musch@nandlnet.de>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured, session=<9aCGp4PMBIJ/AAAB>
Sep 21 18:11:54 openzwo rspamd[3906]: <nxb5yj>; lua; bayes_expiry.lua:440: finished expiry step 26: 980 items checked, 268 significant (1 made persistent), 0 insignificant (0 ttls set), 3 common (0 discriminated), 709 infrequent ($
Sep 21 18:11:55 openzwo rspamd[3906]: <o33omj>; map; http_map_finish: data is not modified for server maps.rspamd.com, next check at Tue, 21 Sep 2021 20:11:55 GMT (http cache based)
Sep 21 18:11:55 openzwo rspamd[3906]: <7n3qic>; map; http_map_finish: data is not modified for server maps.rspamd.com, next check at Tue, 21 Sep 2021 20:11:55 GMT (http cache based)
Sep 21 18:11:55 openzwo rspamd[3906]: <qbq3yk>; map; http_map_finish: data is not modified for server maps.rspamd.com, next check at Tue, 21 Sep 2021 20:11:55 GMT (http cache based)
Sep 21 18:12:32 openzwo postfix/anvil[6299]: statistics: max connection rate 1/60s for (smtp:46.182.7.17) at Sep 21 18:09:08
Sep 21 18:12:32 openzwo postfix/anvil[6299]: statistics: max connection count 1 for (smtp:46.182.7.17) at Sep 21 18:09:08
Sep 21 18:12:32 openzwo postfix/anvil[6299]: statistics: max cache size 1 at Sep 21 18:09:08
Sep 21 18:12:52 openzwo rspamd[3906]: <707607>; csession; rspamd_controller_check_password: allow unauthorized connection from a trusted IP 127.0.0.1
Sep 21 18:13:06 openzwo postfix/postfix-script[7974]: stopping the Postfix mail system
Sep 21 18:13:06 openzwo postfix/master[3097]: terminating on signal 15
Sep 21 18:13:07 openzwo postfix/postfix-script[8182]: starting the Postfix mail system
Sep 21 18:13:07 openzwo postfix/master[8192]: daemon started -- version 2.10.1, configuration /etc/postfix
Sep 21 18:13:08 openzwo dovecot: master: Warning: SIGHUP received - reloading configuration
Sep 21 18:13:12 openzwo opendkim[2220]: OpenDKIM Filter: mi_stop=1
Sep 21 18:13:12 openzwo opendkim[2220]: OpenDKIM Filter v2.11.0 terminating with status 0, errno = 0
Sep 21 18:13:12 openzwo opendkim[9045]: OpenDKIM Filter v2.11.0 starting (args: -x /etc/opendkim.conf -P /var/run/opendkim/opendkim.pid)
Sep 21 18:13:28 openzwo dovecot: managesieve-login: Disconnected (auth failed, 2 attempts in 8 secs): user=<gerald.musch@nandlnet.de>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured, session=<xVcUrYPMVoJ/AAAB>
Sep 21 18:13:53 openzwo rspamd[3906]: <nxb5yj>; lua; bayes_expiry.lua:440: finished expiry step 27: 983 items checked, 283 significant (1 made persistent), 1 insignificant (0 ttls set), 1 common (0 discriminated), 698 infrequent ($
Sep 21 18:15:35 openzwo rspamd[3906]: <nxb5yj>; lua; bayes_expiry.lua:440: finished expiry step 28: 979 items checked, 266 significant (8 made persistent), 0 insignificant (0 ttls set), 1 common (0 discriminated), 712 infrequent ($
Sep 21 18:15:36 openzwo dovecot: managesieve-login: Disconnected (auth failed, 2 attempts in 8 secs): user=<gerald.musch@nandlnet.de>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured, session=<nyrBtIPM0IJ/AAAB>
Sep 21 18:17:14 openzwo rspamd[3906]: <nxb5yj>; lua; bayes_expiry.lua:440: finished expiry step 29: 980 items checked, 276 significant (3 made persistent), 0 insignificant (0 ttls set), 2 common (0 discriminated), 702 infrequent ($
Sep 21 18:18:26 openzwo rspamd[3906]: <nxb5yj>; lua; bayes_expiry.lua:440: finished expiry step 30: 977 items checked, 244 significant (8 made persistent), 1 insignificant (0 ttls set), 3 common (0 discriminated), 729 infrequent ($
Sep 21 18:19:28 openzwo rspamd[3906]: <nxb5yj>; lua; bayes_expiry.lua:440: finished expiry step 31: 980 items checked, 280 significant (1 made persistent), 0 insignificant (0 ttls set), 2 common (0 discriminated), 698 infrequent ($
you still have my IMAP log file with the login errors
the first entries show that it worked, after the update the errors begin.
Sep 21 13:48:56 openzwo dovecot: imap-login: Login: user=<anika.musch@nandlnet.de>, method=PLAIN, rip=192.168.200.165, lip=192.168.222.10, mpid=9572, TLS, session=<kYl7+3/MzJ3AqMil>
Sep 21 13:48:57 openzwo dovecot: imap(anika.musch@nandlnet.de): Connection closed (IDLE running for 0.001 + waiting input for 202.989 secs, 2 B in + 10 B out, state=wait-input) in=943 out=21021
Sep 21 13:50:03 openzwo dovecot: imap-login: Login: user=<gerald.musch@nandlnet.de>, method=PLAIN, rip=109.43.49.230, lip=192.168.20.3, mpid=10006, TLS, session=<54hy/3/MmWxtKzHm>
Sep 21 14:00:00 openzwo dovecot: imap(anika.musch@nandlnet.de): Disconnected for inactivity in=1352 out=16729
Sep 21 14:00:43 openzwo dovecot: imap(anika.musch@nandlnet.de): Connection closed (IDLE running for 0.001 + waiting input for 105.257 secs, 2 B in + 10 B out, state=wait-input) in=779 out=35475
Sep 21 14:00:43 openzwo dovecot: imap(anika.musch@nandlnet.de): Connection closed (STATUS finished 42.782 secs ago) in=886 out=386233
Sep 21 14:09:45 openzwo dovecot: imap(gerald.musch@nandlnet.de): Connection closed (FETCH finished 583.660 secs ago) in=1094 out=7544
Sep 21 14:10:01 openzwo dovecot: imap-login: Login: user=<anika.musch@nandlnet.de>, method=PLAIN, rip=192.168.200.165, lip=192.168.200.10, mpid=14587, TLS, session=<P6XrRoDMnpfAqMil>
Sep 21 14:10:02 openzwo dovecot: imap-login: Login: user=<anika.musch@nandlnet.de>, method=PLAIN, rip=192.168.200.165, lip=192.168.230.10, mpid=14718, TLS, session=<hKXrRoDMmMLAqMil>
Sep 21 14:10:02 openzwo dovecot: imap-login: Login: user=<gerald.musch@nandlnet.de>, method=PLAIN, rip=109.43.49.230, lip=192.168.20.3, mpid=14734, TLS, session=<zL73RoDM2E1tKzHm>
Sep 21 14:14:37 openzwo dovecot: imap(gerald.musch@nandlnet.de): Connection closed (STATUS finished 274.933 secs ago) in=287 out=911
Sep 21 14:20:04 openzwo dovecot: imap-login: Aborted login (auth failed, 1 attempts in 2 secs): user=<gerald.musch@nandlnet.de>, method=PLAIN, rip=109.43.49.230, lip=192.168.20.3, TLS, session=<A2q9aoDMiF1tKzHm>
Sep 21 14:21:06 openzwo dovecot: imap-login: Disconnected (no auth attempts in 19 secs): user=<>, rip=109.43.51.237, lip=192.168.20.3, TLS handshaking: Disconnected, session=<8sqOboDMLGxtKzPt>
Sep 21 14:21:06 openzwo dovecot: imap-login: Disconnected (no auth attempts in 18 secs): user=<>, rip=109.43.51.237, lip=192.168.20.3, TLS handshaking: SSL_accept() syscall failed: Connection reset by peer, session=<zsuOboDMew1tKz$
Sep 21 14:21:08 openzwo dovecot: imap(anika.musch@nandlnet.de): Server shutting down. in=501 out=1443
Sep 21 14:21:08 openzwo dovecot: imap(anika.musch@nandlnet.de): Server shutting down. in=291 out=3565
Sep 21 14:21:48 openzwo dovecot: imap-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<anika.musch@nandlnet.de>, method=PLAIN, rip=192.168.200.165, lip=192.168.222.10, TLS, session=<tGf1cIDMRqDAqMil>
Sep 21 14:22:05 openzwo dovecot: imap-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<anika.musch@nandlnet.de>, method=PLAIN, rip=109.43.49.111, lip=192.168.20.3, TLS, session=<lsP0cYDMyBptKzFv>
Sep 21 14:22:48 openzwo dovecot: imap-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<anika.musch@nandlnet.de>, method=PLAIN, rip=192.168.200.165, lip=192.168.222.10, TLS, session=<xRuEdIDMoKDAqMil>
Sep 21 14:23:08 openzwo dovecot: imap-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<anika.musch@nandlnet.de>, method=PLAIN, rip=192.168.200.165, lip=192.168.200.10, TLS, session=<zvm2dYDMlJjAqMil>
Sep 21 14:23:16 openzwo dovecot: imap-login: Aborted login (auth failed, 1 attempts in 2 secs): user=<anika.musch@nandlnet.de>, method=PLAIN, rip=192.168.200.165, lip=192.168.230.10, TLS, session=<3WAvdoDMypDAqMil>
Sep 21 14:23:19 openzwo dovecot: imap-login: Aborted login (auth failed, 1 attempts in 2 secs): user=<gerald.musch@nandlnet.de>, method=PLAIN, rip=109.43.49.230, lip=192.168.20.3, TLS, session=</8pndoDMjW5tKzHm>
Sep 21 14:23:38 openzwo dovecot: imap-login: Aborted login (auth failed, 1 attempts in 2 secs): user=<anika.musch@nandlnet.de>, method=PLAIN, rip=192.168.200.165, lip=192.168.222.10, TLS, session=<ZtKEd4DM1qDAqMil>
Sep 21 14:24:38 openzwo dovecot: imap-login: Aborted login (auth failed, 1 attempts in 2 secs): user=<gerald.musch@nandlnet.de>, method=PLAIN, rip=109.43.49.230, lip=192.168.20.3, TLS, session=<HV8Ue4DM8lVtKzHm>
Sep 21 14:30:04 openzwo dovecot: imap-login: Aborted login (auth failed, 1 attempts in 2 secs): user=<anika.musch@nandlnet.de>, method=PLAIN, rip=192.168.200.165, lip=192.168.200.10, TLS, session=<femCjoDM3pjAqMil>
Sep 21 14:30:36 openzwo dovecot: imap-login: Aborted login (auth failed, 1 attempts in 2 secs): user=<diana.musch@nandlnet.de>, method=PLAIN, rip=109.43.51.237, lip=192.168.20.3, TLS, session=<PRBxkIDMQihtKzPt>
Sep 21 14:30:39 openzwo dovecot: imap-login: Disconnected (client didn't finish SASL auth, waited 4 secs): user=<>, method=PLAIN, rip=109.43.51.237, lip=192.168.20.3, TLS: Disconnected, session=<U2F7kIDMExVtKzPt>
Sep 21 14:31:30 openzwo dovecot: imap-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<anika.musch@nandlnet.de>, method=PLAIN, rip=109.43.49.111, lip=192.168.20.3, TLS, session=<h2Ook4DMOSZtKzFv>
Sep 21 14:31:38 openzwo dovecot: imap-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<anika.musch@nandlnet.de>, method=PLAIN, rip=192.168.200.165, lip=192.168.230.10, TLS, session=<UncalIDMbpHAqMil>
Sep 21 14:35:02 openzwo dovecot: imap-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<anika.musch@nandlnet.de>, method=PLAIN, rip=109.43.49.111, lip=192.168.20.3, TLS, session=<dlFFoIDMBzhtKzFv>
Sep 21 14:35:24 openzwo dovecot: imap-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<anika.musch@nandlnet.de>, method=PLAIN, rip=192.168.200.165, lip=192.168.222.10, TLS, session=<ybGQoYDMwKHAqMil>
Sep 21 14:36:24 openzwo dovecot: imap-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<anika.musch@nandlnet.de>, method=PLAIN, rip=192.168.200.165, lip=192.168.200.10, TLS, session=<JrEtpYDM1pnAqMil>
Sep 21 14:37:28 openzwo dovecot: imap-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<anika.musch@nandlnet.de>, method=PLAIN, rip=192.168.200.165, lip=192.168.230.10, TLS, session=<w2T2qIDMNJLAqMil>
Sep 21 14:38:34 openzwo dovecot: imap-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<anika.musch@nandlnet.de>, method=PLAIN, rip=192.168.200.165, lip=192.168.222.10, TLS, session=<6Q3wrIDMXKLAqMil>
Sep 21 14:39:41 openzwo dovecot: imap-login: Disconnected (auth failed, 1 attempts in 3 secs): user=<anika.musch@nandlnet.de>, method=PLAIN, rip=192.168.200.165, lip=192.168.200.10, TLS, session=<EuXgsIDMTJrAqMil>
Likewise, I cannot receive an email from outside, I wrote an email to myself as a test, see log:
Sep 21 19:49:18 openzwo postfix/smtpd[8464]: connect from mail-eopbgr50135.outbound.protection.outlook.com[40.107.5.135]
Sep 21 19:49:18 openzwo rspamd[3717]: <56be34>; proxy; proxy_accept_socket: accepted milter connection from /var/run/rspamd/worker-proxy port 0
Sep 21 19:49:18 openzwo postfix/smtpd[8464]: NOQUEUE: reject: RCPT from mail-eopbgr50135.outbound.protection.outlook.com[40.107.5.135]: 550 5.1.1 <gerald.musch@nandlnet.de>: Recipient address rejected: undeliverable address: host openzwo.nandlnet.de[/var/run/dovecot/lmtp] said: 550 5.1.1 <gerald.musch@nandlnet.de> User doesn't exist: gerald.musch@nandlnet.de (in reply to RCPT TO command); from=<gerald.musch@thwfs.de> to=<gerald.musch@nandlnet.de> proto=ESMTP helo=<EUR03-VE1-obe.outbound.protection.outlook.com>
Sep 21 19:49:18 openzwo postfix/cleanup[8469]: A36EBA3205: message-id=<20210921174918.A36EBA3205@openzwo.nandlnet.de>
Sep 21 19:49:18 openzwo postfix/qmgr[3097]: A36EBA3205: from=<double-bounce@openzwo.nandlnet.de>, size=282, nrcpt=1 (queue active)
Sep 21 19:49:18 openzwo dovecot: lmtp(8471): Connect from local
Sep 21 19:49:18 openzwo dovecot: lmtp(8471): Disconnect from local: Successful quit
Sep 21 19:49:18 openzwo postfix/lmtp[8470]: A36EBA3205: to=<gerald.musch@nandlnet.de>, relay=openzwo.nandlnet.de[/var/run/dovecot/lmtp], delay=0.28, delays=0.14/0.03/0.03/0.08, dsn=5.1.1, status=undeliverable (host openzwo.nandlnet.de[/var/run/dovecot/lmtp] said: 550 5.1.1 <gerald.musch@nandlnet.de> User doesn't exist: gerald.musch@nandlnet.de (in reply to RCPT TO command))
Sep 21 19:49:18 openzwo postfix/qmgr[3097]: A36EBA3205: removed
Sep 21 19:49:18 openzwo postfix/smtpd[8464]: disconnect from mail-eopbgr50135.outbound.protection.outlook.com[40.107.5.135]
Sep 21 19:49:18 openzwo rspamd[3717]: <56be34>; milter; rspamd_milter_process_command: got connection from 40.107.5.135:45024
Sep 21 19:49:18 openzwo rspamd[3717]: <56be34>; proxy; proxy_milter_finish_handler: finished milter connection
Sep 21 19:49:30 openzwo clamd[2016]: SelfCheck: Database status OK.
Sep 21 19:50:05 openzwo rspamd[3718]: <awxxsj>; lua; bayes_expiry.lua:440: finished expiry step 9: 983 items checked, 303 significant (7 made persistent), 0 insignificant (0 ttls set), 3 common (0 discriminated), 677 infrequent (0 ttls set), 51 mean, 145 std
I hope you can help me again
Gerald