Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

relay access denied 554 5.7.1 on 0.12.2/0.12.3 version . #145

Closed
sakearzoo opened this issue Jul 16, 2022 · 41 comments · Fixed by #146
Closed

relay access denied 554 5.7.1 on 0.12.2/0.12.3 version . #145

sakearzoo opened this issue Jul 16, 2022 · 41 comments · Fixed by #146

Comments

@sakearzoo
Copy link

sakearzoo commented Jul 16, 2022

Behaviour

After setting docker container with anonaddy version edge/latest/0.12.3/0.12.2. I am having error i,e Relay access denied 554. and email is not sending for verification. But when i downgrade the version of anonaddy to 0.11.2 everything works fine without error. It seems that with latest version 0.12.x it is facing error.

Steps to reproduce this issue

Setup a vm with ubuntu 20.04 lts

  1. create docker container anonaddy with version edge/latest/0.12.3/0.12.2.
  2. email will not go through and it will fail with error relay access denied.

Expected behaviour

Verification email should go through without error

Actual behaviour

Having error during register as email is not going through. error is:
Symfony\Component\Mailer\Exception\TransportException:
Expected response code "250/251/252" but got code "554", with message "554 5.7.1 ********@gmail.com: Relay access denied".

Configuration

  • Docker version (type docker --version) :Docker version 20.10.17, build 100c701

  • Docker compose version if applicable (type docker-compose --version) : Docker Compose version v2.2.2

  • Platform (Debian 9, Ubuntu 18.04, ...) : ubuntu 20.04 LTS

  • System info (type uname -a) : Linux containerr 5.11.0-1022 # 23 ~ 20.04.1-Ubuntu SMP Fri Nov 12 15:45:47 UTC 2021 aarch64 aarch64 aarch64 GNU/Linux

  • Include all necessary configuration files : docker-compose.yml, .env, ...
    docker-compose.yml

version: "3.7"

services:
  db:
    image: mariadb:10.5
    container_name: anonaddy_db
    networks:
      - proxy2
    command:
      - "mysqld"
      - "--character-set-server=utf8mb4"
      - "--collation-server=utf8mb4_unicode_ci"
    volumes:
      - "/home/ubuntu/anonaddy/db:/var/lib/mysql"
    environment:
      - MYSQL_ALLOW_EMPTY_PASSWORD=yes
      - MYSQL_DATABASE
      - MYSQL_USER
      - MYSQL_PASSWORD

    restart: always

  redis:
    image: redis:4.0-alpine
    container_name: anonaddy_redis
    restart: always
    networks:
      - proxy2

  anonaddy:
    image: anonaddy/anonaddy:latest
    container_name: anonaddy
    restart: unless-stopped
    security_opt:
      - no-new-privileges:true
    networks:
      - proxy2 
    depends_on:
      - db
      - redis
    ports:
      - target: 25
        published: 25
        protocol: tcp
      - target: 465
        published: 465
        protocol: tcp
      - target: 587
        published: 587
        protocol: tcp
    volumes:
      - "/home/ubuntu/anonaddy/data:/data"
    labels:
      - "traefik.enable=true"
      - "traefik.docker.network=proxy2"
      - "traefik.http.routers.anonaddy.tls=true"
      - "traefik.http.routers.anonaddy-secure.entrypoints=https"
      - "traefik.http.routers.anonaddy-secure.rule=Host(`****.****.cc`)"
      - "traefik.http.routers.anonaddy-secure.service=anonaddy"
      - "traefik.http.services.anonaddy.loadbalancer.server.port=8000"
    environment:
      - DB_HOST=db
      - DB_DATABASE=${MYSQL_DATABASE}
      - DB_USERNAME=${MYSQL_USER}
      - DB_PASSWORD=${MYSQL_PASSWORD}
      - REDIS_HOST=redis
      - TZ=Asia/Calcutta
      - PUID=1000
      - PGID=1000

      - MEMORY_LIMIT=512M
      - UPLOAD_MAX_SIZE=32M
      - OPCACHE_MEM_SIZE=256
      - REAL_IP_FROM=0.0.0.0/32
      - REAL_IP_HEADER=X-Forwarded-For
      - LOG_IP_VAR=http_x_forwarded_for

      - APP_KEY=base64:Wz************************************************vn5lIg=
      - APP_DEBUG=true
      - APP_URL=****.****.cc
      - ANONADDY_RETURN_PATH=******@****.cc
      - ANONADDY_ADMIN_USERNAME=narzoo
      - ANONADDY_ENABLE_REGISTRATION=true
      - ANONADDY_DOMAIN=****.cc
      - ANONADDY_ALL_DOMAINS=****.cc
      - ANONADDY_HOSTNAME=*******.****.cc
      - ANONADDY_DNS_RESOLVER=127.0.0.1
      - ANONADDY_SECRET=78V*****************************************Wrvn0=
      - ANONADDY_LIMIT=400
      - ANONADDY_BANDWIDTH_LIMIT=104857600
      - ANONADDY_NEW_ALIAS_LIMIT=20
      - ANONADDY_ADDITIONAL_USERNAME_LIMIT=3
      - ANONADDY_DKIM_SIGNING_KEY=/data/dkim/****.cc.private
      - ANONADDY_DKIM_SELECTOR=default
      - LISTEN_IPV6=false
      - RSPAMD_ENABLE=true
      - RSPAMD_WEB_PASSWORD=******
      - MAIL_FROM_NAME=Sheikh-Nawab-Arzoo
      - MAIL_FROM_ADDRESS=****@****.cc
      - MAIL_DRIVER=smtp
      - MAIL_HOST=****.****.cc
      - MAIL_PORT=25
      - MAIL_EHLO_DOMAIN=****.****.cc
      - MAIL_VERIFY_PEER=true
      - MAIL_ENCRYPTION=tls
      - POSTFIX_DEBUG=true
      - POSTFIX_SMTPD_TLS=true
      - POSTFIX_SMTP_TLS=true
      - POSTFIX_SMTPD_TLS_CERT_FILE=/data/certs/****.cc/fullchain.pem
      - POSTFIX_SMTPD_TLS_KEY_FILE=/data/certs/****.cc/privkey.pem
      - 

networks:
  proxy2:
    external: true

shared env:

MYSQL_DATABASE=anonaddy
MYSQL_USER=na******
MYSQL_PASSWORD=*****

Docker info

> Output of command `docker info`
Client:
 Context:    default
 Debug Mode: false
 Plugins:
  app: Docker App (Docker Inc., v0.9.1-beta3)
  buildx: Docker Buildx (Docker Inc., v0.8.2-docker)

Server:
 Containers: 20
  Running: 19
  Paused: 0
  Stopped: 1
 Images: 29
 Server Version: 20.10.17
 Storage Driver: overlay2
  Backing Filesystem: extfs
  Supports d_type: true
  Native Overlay Diff: false
  userxattr: false
 Logging Driver: json-file
 Cgroup Driver: cgroupfs
 Cgroup Version: 1
 Plugins:
  Volume: local
  Network: bridge host ipvlan macvlan null overlay
  Log: awslogs fluentd gcplogs gelf journald json-file local logentries splunk syslog
 Swarm: inactive
 Runtimes: io.containerd.runtime.v1.linux runc io.containerd.runc.v2
 Default Runtime: runc
 Init Binary: docker-init
 containerd version: 10c1**********************ae1
 runc version: v1.1.2-0-ga916309
 init version: de40ad0
 Security Options:
  apparmor
  seccomp
   Profile: default
 Kernel Version: 5.11.0-1022
 Operating System: Ubuntu 20.04.4 LTS
 OSType: linux
 Architecture: aarch64
 CPUs: 4
 Total Memory: 22.46GiB
 Name: containerr
 ID: ***********************************
 Docker Root Dir: /var/lib/docker
 Debug Mode: false
 Registry: https://index.docker.io/v1/
 Labels:
 Experimental: false
 Insecure Registries:
  127.0.0.0/8
 Live Restore Enabled: false


Logs

> Container logs (set LOG_LEVEL to debug if applicable)

47.11.254.1 - - [16/Jul/2022:15:23:54 +0530] "GET /register HTTP/1.1" 200 1609 "https://****.****.cc/register" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36"
47.11.254.1 - - [16/Jul/2022:15:23:55 +0530] "GET /captcha/mini?FJDOdcep HTTP/1.1" 200 5329 "https://****.****.cc/register" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36"
crond: USER anonaddy pid 1244 cmd php /var/www/anonaddy/artisan schedule:run --no-ansi --no-interaction --quiet
47.11.254.1 - - [16/Jul/2022:15:24:15 +0530] "POST /register HTTP/1.1" 302 370 "https://****.****.cc/register" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36"
47.11.254.1 - - [16/Jul/2022:15:24:15 +0530] "GET /register HTTP/1.1" 200 1697 "https://****.****.cc/register" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36"
47.11.254.1 - - [16/Jul/2022:15:24:15 +0530] "GET /captcha/mini?nhVYb4i2 HTTP/1.1" 200 6811 "https://****.****.cc/register" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36"
Jul 16 15:24:24 **** postfix/smtpd[1251]: connect from localhost[127.0.0.1]
Jul 16 15:24:25 **** postfix/smtpd[1251]: Anonymous TLS connection established from localhost[127.0.0.1]: TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256
Jul 16 15:24:25 **** postfix/smtpd[1251]: NOQUEUE: reject: RCPT from localhost[127.0.0.1]: 554 5.7.1 <*****@gmail.com>: Relay access denied; from=<****@****.cc> to=<*****@gmail.com> proto=ESMTP helo=<[127.0.0.1]>
Jul 16 15:24:25 **** postfix/smtpd[1251]: using backwards-compatible default setting smtpd_relay_before_recipient_restrictions=no to reject recipient "*****@gmail.com" from client "localhost[127.0.0.1]"
47.11.254.1 - - [16/Jul/2022:15:24:25 +0530] "POST /register HTTP/1.1" 500 595735 "https://*****.****.cc/register" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36"
Jul 16 15:24:25 **** postfix/smtpd[1251]: disconnect from localhost[127.0.0.1] ehlo=2 starttls=1 mail=1 rcpt=0/1 rset=1 quit=1 commands=6/7

DNS



  | A | ***** | XXX.XXX.XXX.XX | DNS only | Auto | 
  | A | ********* | XXX.XXX.XXX.XX | DNS only | Auto | 
  | CNAME | * | redirect.******.******.cc | DNS only | Auto | 
  | MX | * | ****.****.cc | DNS only | Auto | 
  | MX | ****.cc | ****.****.cc | DNS only | Auto | 
  | TXT | ****.cc | v=spf1 mx ~all | DNS only | Auto | 
  | TXT | ****.cc | google-site-verification=**************************************| DNS only | Auto | 
  | TXT | default._domainkey | v=DKIM1; k=rsa; p=MIIB*************************************DAQAB | DNS only | Auto | 
  | TXT | _dmarc | v=DMARC1; p=reject; rua=mailto:*********@******.in; ruf=mailto:*********@******.in; sp=reject; fo=1; pct=100; aspf=r | DNS only | Auto | 
  | TXT | redirect.****** | v=spf1 mx ~all | DNS only | Auto | 



@willbrowningme
Copy link
Member

That looks to me like it is attempting to deliver the message to ***@gmail.com locally which is why it is returning relay access denied.

I think perhaps the following variables may need to be added to https://github.com/anonaddy/docker/blob/master/rootfs/etc/cont-init.d/00-env

MAIL_DRIVER=smtp
MAIL_HOST=mail.example.com
MAIL_PORT=25
MAIL_EHLO_DOMAIN=mail.example.com
MAIL_VERIFY_PEER=true

Not sure what port Docker uses for SMTP.

P.s. if that is your real Mysql username and password you should change it.

@sakearzoo
Copy link
Author

sakearzoo commented Jul 16, 2022

That looks to me like it is attempting to deliver the message to ***@gmail.com locally which is why it is returning relay access denied.

I think perhaps the following variables may need to be added to https://github.com/anonaddy/docker/blob/master/rootfs/etc/cont-init.d/00-env

MAIL_DRIVER=smtp
MAIL_HOST=mail.example.com
MAIL_PORT=25
MAIL_EHLO_DOMAIN=mail.example.com
MAIL_VERIFY_PEER=true

Not sure what port Docker uses for SMTP.

P.s. if that is your real Mysql username and password you should change it.

@willbrowningme

That also didn't help still the same issue.

HTTP 500 Internal Server Error

Port 465
Connection could not be established with host "ssl://*****.***.cc:465": stream_socket_client(): Unable to connect to ssl://*****.***.cc:465 (Connection refused)`


Port 587
Connection could not be established with host "*****.***.cc:587": stream_socket_client(): Unable to connect to *****.***.cc:587 (Connection refused)

Port 25
Expected response code "250/251/252" but got code "554", with message "554 5.7.1 <*******@gmail.com>: Relay access denied".

On 0.11.2 when am adding

MAIL_DRIVER=smtp
MAIL_HOST=mail.example.com
MAIL_PORT=25
MAIL_EHLO_DOMAIN=mail.example.com
MAIL_VERIFY_PEER=true

It also having the same error but removing these from environment variables solve the issue on 0.11.2 .

But most of the mails goes into spam folder even with spf dmarc dkim dns.

One more issue i am having is that i am unable to create MTS-STS policy & DANE on this docker container . I coun`t understand how to set it up.

@yurividal
Copy link

yurividal commented Jul 17, 2022

I have the same issue after updating to 0.12.3
Rolling back to 0.11.2 solved the issue.

Here are the logs:

pipe - 636EF19EEE4: to=<[email protected]>, relay=anonaddy, delay=383, delays=381/0.02/0/1.7, dsn=4.3.0, status=deferred (An error has occurred, please try again later. )
pipe - 661C619EEE5: to=<[email protected]>, relay=anonaddy, delay=383, delays=381/0.02/0/1.7, dsn=4.3.0, status=deferred (An error has occurred, please try again later. )
smtpd - disconnect from localhost[127.0.0.1] ehlo=1 mail=2 rcpt=0/2 rset=2 noop=1 quit=1 commands=7/9
smtpd - disconnect from localhost[127.0.0.1] ehlo=1 mail=2 rcpt=0/2 rset=2 noop=1 quit=1 commands=7/9
smtpd - using backwards-compatible default setting smtpd_relay_before_recipient_restrictions=no to reject recipient "[email protected]" from client "localhost[127.0.0.1]"
smtpd - NOQUEUE: reject: RCPT from localhost[127.0.0.1]: 554 5.7.1 <[email protected]>: Relay access denied; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<[127.0.0.1]>

@willbrowningme
Copy link
Member

If you add smtpd_relay_before_recipient_restrictions=no or smtpd_relay_before_recipient_restrictions=yes does it still show the same reject error in the logs?

@sakearzoo
Copy link
Author

@willbrowningme changing yes to no and vice-versa does nothing. Still having relay access denied error with smtp.

@crazy-max
Copy link
Member

Could this be linked to this change #122 ?

@willbrowningme
Copy link
Member

Possibly, definitely worth a try.

The only thing that has changed with v0.12.* vs v0.11.* is that the web application now uses Symfony mailer instead of Swift mailer, the SMTP settings should still work as they did previously.

@willbrowningme
Copy link
Member

In the logs reported above the helo command seems to be helo=<[127.0.0.1]> which makes me think that MAIL_EHLO_DOMAIN=mail.example.com could be part of the problem. This needs to be added to the .env file since v0.12.*

Where mail.example.com is your server's hostname.

@willbrowningme
Copy link
Member

Has anyone managed to test if this issue still persists when adding permit_my_networks back to smtpd_recipient_restrictions in rootfs/etc/cont-int.d/15-config-postfix.sh as below:

smtpd_recipient_restrictions =
    permit_mynetworks,
    reject_unauth_destination,
    check_recipient_access mysql:/etc/postfix/mysql-recipient-access.cf,
    #check_policy_service unix:private/policyd-spf
    reject_rhsbl_helo dbl.spamhaus.org,
    reject_rhsbl_reverse_client dbl.spamhaus.org,
    reject_rhsbl_sender dbl.spamhaus.org,
    reject_rbl_client zen.spamhaus.org
    reject_rbl_client dul.dnsbl.sorbs.net

@ShawnTheShadow
Copy link

bit of testing with the MAIL_EHLO_DOMAIN env variable, seems it's ignored, still have the helo=<[127.0.0.1]> in the logs

@willbrowningme
Copy link
Member

@ShawnTheShadow do you still have the same error with permit_mynetworks added as mentioned above?

@ShawnTheShadow
Copy link

When editing inside the container, and restarting, it gives a /data/storage already exists error and dies, have to recreate the container, i know that's going to be a different issue, it also happens on restart of the system
I'll see if i can spin up another instance using the git repo with the edits when i have more time

@sakearzoo
Copy link
Author

sakearzoo commented Jul 19, 2022

today i checked the debug log and found that

match_list_match: smtpd_client_event_limit_exceptions: no match
match_list_match: hostname.mydomain.tld: no match
match_list_match: <public_ip>: no match
match_hostname: smtpd_client_event_limit_exceptions: hostname.mydomain.tld ~? 127.0.0.0/8
match_hostaddr: smtpd_client_event_limit_exceptions: <public_ip> ~? 127.0.0.0/8

neither hostname nor public ip matches.
i am unable to edit the container so if someone can try editing mynetworks list and add public ip / hostname to the list or adding both might solve the issue.

here is the complete log:

crond: USER anonaddy pid 1047 cmd php /var/www/anonaddy/artisan schedule:run --no-ansi --no-interaction --quiet
47.11.236.109 - - [19/Jul/2022:22:45:14 +0530] "GET /register HTTP/1.1" 200 1610 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36"
47.11.236.109 - - [19/Jul/2022:22:45:14 +0530] "GET /captcha/mini?OnnHTJH1 HTTP/1.1" 200 6025 "https://addy.4mc.cc/register" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36"
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: name_mask: ipv4
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: inet_addr_local: configured 2 IPv4 addresses
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: process generation: 4 (4)
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: dict_open: regexp:{{/^[^A-Z]/ Bogus}}
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: match_string: parent_domain_matches_subdomains: smtpd_client_event_limit_exceptions ~? debug_peer_list
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: match_string: parent_domain_matches_subdomains: smtpd_client_event_limit_exceptions ~? fast_flush_domains
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: match_string: parent_domain_matches_subdomains: smtpd_client_event_limit_exceptions ~? mynetworks
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: match_string: parent_domain_matches_subdomains: smtpd_client_event_limit_exceptions ~? permit_mx_backup_networks
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: match_string: parent_domain_matches_subdomains: smtpd_client_event_limit_exceptions ~? qmqpd_authorized_clients
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: match_string: parent_domain_matches_subdomains: smtpd_client_event_limit_exceptions ~? relay_domains
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: match_string: parent_domain_matches_subdomains: smtpd_client_event_limit_exceptions ~? smtpd_access_maps
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: match_list_match: smtpd_client_event_limit_exceptions: no match
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: match_string: parent_domain_matches_subdomains: mynetworks ~? debug_peer_list
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: match_string: parent_domain_matches_subdomains: mynetworks ~? fast_flush_domains
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: match_string: parent_domain_matches_subdomains: mynetworks ~? mynetworks
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: match_string: parent_domain_matches_subdomains: mynetworks ~? debug_peer_list
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: match_string: parent_domain_matches_subdomains: mynetworks ~? fast_flush_domains
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: match_string: parent_domain_matches_subdomains: mynetworks ~? mynetworks
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: name_mask: host
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: been_here: 127.0.0.1/32: 0
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: been_here: 172.20.0.7/32: 0
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: mynetworks_core: 127.0.0.1/32 172.20.0.7/32 
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: match_string: parent_domain_matches_subdomains: relay_domains ~? debug_peer_list
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: match_string: parent_domain_matches_subdomains: relay_domains ~? fast_flush_domains
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: match_string: parent_domain_matches_subdomains: relay_domains ~? mynetworks
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: match_string: parent_domain_matches_subdomains: relay_domains ~? permit_mx_backup_networks
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: match_string: parent_domain_matches_subdomains: relay_domains ~? qmqpd_authorized_clients
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: match_string: parent_domain_matches_subdomains: relay_domains ~? relay_domains
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: match_string: parent_domain_matches_subdomains: permit_mx_backup_networks ~? debug_peer_list
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: match_string: parent_domain_matches_subdomains: permit_mx_backup_networks ~? fast_flush_domains
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: match_string: parent_domain_matches_subdomains: permit_mx_backup_networks ~? mynetworks
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: match_string: parent_domain_matches_subdomains: permit_mx_backup_networks ~? permit_mx_backup_networks
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: match_string: parent_domain_matches_subdomains: smtpd_access_maps ~? debug_peer_list
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: match_string: parent_domain_matches_subdomains: smtpd_access_maps ~? fast_flush_domains
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: match_string: parent_domain_matches_subdomains: smtpd_access_maps ~? mynetworks
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: match_string: parent_domain_matches_subdomains: smtpd_access_maps ~? permit_mx_backup_networks
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: match_string: parent_domain_matches_subdomains: smtpd_access_maps ~? qmqpd_authorized_clients
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: match_string: parent_domain_matches_subdomains: smtpd_access_maps ~? relay_domains
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: match_string: parent_domain_matches_subdomains: smtpd_access_maps ~? smtpd_access_maps
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: cfg_get_str: /etc/postfix/mysql-recipient-access.cf: user = *******
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: cfg_get_str: /etc/postfix/mysql-recipient-access.cf: password = *****
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: cfg_get_str: /etc/postfix/mysql-recipient-access.cf: dbname = anonaddy
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: cfg_get_str: /etc/postfix/mysql-recipient-access.cf: result_format = %s
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: cfg_get_str: /etc/postfix/mysql-recipient-access.cf: option_file = <NULL>
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: cfg_get_str: /etc/postfix/mysql-recipient-access.cf: option_group = client
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: cfg_get_str: /etc/postfix/mysql-recipient-access.cf: tls_key_file = <NULL>
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: cfg_get_str: /etc/postfix/mysql-recipient-access.cf: tls_cert_file = <NULL>
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: cfg_get_str: /etc/postfix/mysql-recipient-access.cf: tls_CAfile = <NULL>
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: cfg_get_str: /etc/postfix/mysql-recipient-access.cf: tls_CApath = <NULL>
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: cfg_get_str: /etc/postfix/mysql-recipient-access.cf: tls_ciphers = <NULL>
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: cfg_get_bool: /etc/postfix/mysql-recipient-access.cf: tls_verify_cert = on
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: cfg_get_bool: /etc/postfix/mysql-recipient-access.cf: require_result_set = on
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: cfg_get_int: /etc/postfix/mysql-recipient-access.cf: expansion_limit = 0
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: cfg_get_str: /etc/postfix/mysql-recipient-access.cf: query = CALL check_access('%s')
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: cfg_get_str: /etc/postfix/mysql-recipient-access.cf: domain = 
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: cfg_get_str: /etc/postfix/mysql-recipient-access.cf: hosts = db:3306
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: dict_open: mysql:/etc/postfix/mysql-recipient-access.cf
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: unknown_helo_hostname_tempfail_action = defer_if_permit
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: unknown_address_tempfail_action = defer_if_permit
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: unverified_recipient_tempfail_action = defer_if_permit
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: unverified_sender_tempfail_action = defer_if_permit
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: name_mask: 1
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: auto_clnt_create: transport=local endpoint=private/tlsmgr
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: auto_clnt_open: connected to private/tlsmgr
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: private/tlsmgr: wanted attribute: protocol
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: input attribute name: protocol
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: input attribute value: tlsmgr_protocol
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: private/tlsmgr: wanted attribute: (list terminator)
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: input attribute name: (end)
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: send attr request = seed
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: send attr size = 32
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: private/tlsmgr: wanted attribute: status
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: input attribute name: status
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: input attribute value: 0
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: private/tlsmgr: wanted attribute: seed
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: input attribute name: seed
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: input attribute value: jFKUvuBOIE9vwOjVBh50QrEWlJ6Kg04t9L2WnIhiI5M=
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: private/tlsmgr: wanted attribute: (list terminator)
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: input attribute name: (end)
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: send attr request = policy
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: send attr cache_type = smtpd
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: private/tlsmgr: wanted attribute: status
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: input attribute name: status
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: input attribute value: 0
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: private/tlsmgr: wanted attribute: cachable
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: input attribute name: cachable
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: input attribute value: 1
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: private/tlsmgr: wanted attribute: timeout
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: input attribute name: timeout
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: input attribute value: 3600
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: private/tlsmgr: wanted attribute: (list terminator)
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: input attribute name: (end)
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: name_mask: NO_COMPRESSION
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: match_string: parent_domain_matches_subdomains: fast_flush_domains ~? debug_peer_list
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: match_string: parent_domain_matches_subdomains: fast_flush_domains ~? fast_flush_domains
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: auto_clnt_create: transport=local endpoint=private/anvil
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: connection established
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: master_notify: status 0
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: name_mask: resource
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: name_mask: software
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: connect from hostname.mydomain.tld[<public_ip>]
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: match_list_match: hostname.mydomain.tld: no match
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: match_list_match: <public_ip>: no match
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: match_list_match: hostname.mydomain.tld: no match
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: match_list_match: <public_ip>: no match
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: smtp_stream_setup: maxtime=300 enable_deadline=0 min_data_rate=0
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: match_hostname: smtpd_client_event_limit_exceptions: hostname.mydomain.tld ~? 127.0.0.0/8
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: match_hostaddr: smtpd_client_event_limit_exceptions: <public_ip> ~? 127.0.0.0/8
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: match_hostname: smtpd_client_event_limit_exceptions: hostname.mydomain.tld ~? [::ffff:127.0.0.0]/104
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: match_hostaddr: smtpd_client_event_limit_exceptions: <public_ip> ~? [::ffff:127.0.0.0]/104
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: match_hostname: smtpd_client_event_limit_exceptions: hostname.mydomain.tld ~? [::1]/128
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: match_hostaddr: smtpd_client_event_limit_exceptions: <public_ip> ~? [::1]/128
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: match_hostname: smtpd_client_event_limit_exceptions: hostname.mydomain.tld ~? 10.0.0.0/8
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: match_hostaddr: smtpd_client_event_limit_exceptions: <public_ip> ~? 10.0.0.0/8
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: match_hostname: smtpd_client_event_limit_exceptions: hostname.mydomain.tld ~? 172.16.0.0/12
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: match_hostaddr: smtpd_client_event_limit_exceptions: <public_ip> ~? 172.16.0.0/12
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: match_hostname: smtpd_client_event_limit_exceptions: hostname.mydomain.tld ~? 192.168.0.0/16
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: match_hostaddr: smtpd_client_event_limit_exceptions: <public_ip> ~? 192.168.0.0/16
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: match_list_match: hostname.mydomain.tld: no match
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: match_list_match: <public_ip>: no match
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: auto_clnt_open: connected to private/anvil
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: private/anvil: wanted attribute: protocol
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: input attribute name: protocol
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: input attribute value: anvil_protocol
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: private/anvil: wanted attribute: (list terminator)
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: input attribute name: (end)
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: send attr request = connect
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: send attr ident = 25:<public_ip>
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: private/anvil: wanted attribute: status
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: input attribute name: status
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: input attribute value: 0
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: private/anvil: wanted attribute: count
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: input attribute name: count
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: input attribute value: 1
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: private/anvil: wanted attribute: rate
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: input attribute name: rate
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: input attribute value: 1
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: private/anvil: wanted attribute: (list terminator)
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: input attribute name: (end)
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: report connect to all milters
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: milter8_connect: non-protocol events for protocol version 6: 
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: milter8_connect: transport=inet endpoint=127.0.0.1:11332
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: trying... [127.0.0.1]
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: vstream_tweak_tcp: TCP_MAXSEG 32741
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: fd=15: stream buffer size old=0 new=130964
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: milter8_connect: my_version=0x6
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: milter8_connect: my_actions=0x1ff SMFIF_ADDHDRS SMFIF_CHGBODY SMFIF_ADDRCPT SMFIF_DELRCPT SMFIF_CHGHDRS SMFIF_QUARANTINE SMFIF_CHGFROM SMFIF_ADDRCPT_PAR SMFIF_SETSYMLIST
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: milter8_connect: my_events=0x1fffff SMFIP_NOCONNECT SMFIP_NOHELO SMFIP_NOMAIL SMFIP_NORCPT SMFIP_NOBODY SMFIP_NOHDRS SMFIP_NOEOH SMFIP_NR_HDR SMFIP_NOUNKNOWN SMFIP_NODATA SMFIP_SKIP SMFIP_RCPT_REJ SMFIP_NR_CONN SMFIP_NR_HELO SMFIP_NR_MAIL SMFIP_NR_RCPT SMFIP_NR_DATA SMFIP_NR_UNKN SMFIP_NR_EOH SMFIP_NR_BODY SMFIP_HDR_LEADSPC
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: milter8_connect: milter inet:127.0.0.1:11332 version 6
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: milter8_connect: events SMFIP_NR_HDR SMFIP_NR_CONN SMFIP_NR_HELO SMFIP_NR_MAIL SMFIP_NR_RCPT SMFIP_NR_DATA SMFIP_NR_UNKN SMFIP_NR_EOH SMFIP_NR_BODY
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: milter8_connect: requests SMFIF_ADDHDRS SMFIF_CHGBODY SMFIF_ADDRCPT SMFIF_DELRCPT SMFIF_CHGHDRS SMFIF_QUARANTINE SMFIF_CHGFROM SMFIF_ADDRCPT_PAR SMFIF_SETSYMLIST
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: milter_macro_lookup: "j"
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: milter_macro_lookup: result "hostname.mydomain.tld"
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: milter_macro_lookup: "{daemon_name}"
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: milter_macro_lookup: result "hostname.mydomain.tld"
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: milter_macro_lookup: "{daemon_addr}"
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: milter_macro_lookup: result "172.20.0.7"
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: milter_macro_lookup: "v"
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: milter_macro_lookup: result "Postfix 3.7.2"
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: milter_macro_lookup: "_"
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: milter_macro_lookup: result "hostname.mydomain.tld [<public_ip>]"
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: milter8_conn_event: milter inet:127.0.0.1:11332: connect hostname.mydomain.tld/<public_ip>
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: event: SMFIC_CONNECT; macros: j=hostname.mydomain.tld {daemon_name}=hostname.mydomain.tld {daemon_addr}=172.20.0.7 v=Postfix 3.7.2 _=hostname.mydomain.tld [<public_ip>]
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: skipping reply for event SMFIC_CONNECT from milter inet:127.0.0.1:11332
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: > hostname.mydomain.tld[<public_ip>]: 220 hostname.mydomain.tld ESMTP
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: smtp_stream_setup: maxtime=300 enable_deadline=0 min_data_rate=0
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: < hostname.mydomain.tld[<public_ip>]: EHLO hostname.mydomain.tld
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: report helo to all milters
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: milter_macro_lookup: "{tls_version}"
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: milter_macro_lookup: "{cipher}"
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: milter_macro_lookup: "{cipher_bits}"
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: milter_macro_lookup: "{cert_subject}"
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: milter_macro_lookup: "{cert_issuer}"
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: milter8_helo_event: milter inet:127.0.0.1:11332: helo hostname.mydomain.tld
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: event: SMFIC_HELO; macros: (none)
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: skipping reply for event SMFIC_HELO from milter inet:127.0.0.1:11332
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: match_list_match: hostname.mydomain.tld: no match
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: match_list_match: <public_ip>: no match
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: > hostname.mydomain.tld[<public_ip>]: 250-hostname.mydomain.tld
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: > hostname.mydomain.tld[<public_ip>]: 250-PIPELINING
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: > hostname.mydomain.tld[<public_ip>]: 250-SIZE 10240000
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: > hostname.mydomain.tld[<public_ip>]: 250-ETRN
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: > hostname.mydomain.tld[<public_ip>]: 250-STARTTLS
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: > hostname.mydomain.tld[<public_ip>]: 250-ENHANCEDSTATUSCODES
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: > hostname.mydomain.tld[<public_ip>]: 250-8BITMIME
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: > hostname.mydomain.tld[<public_ip>]: 250-DSN
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: > hostname.mydomain.tld[<public_ip>]: 250-SMTPUTF8
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: > hostname.mydomain.tld[<public_ip>]: 250 CHUNKING
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: smtp_stream_setup: maxtime=300 enable_deadline=0 min_data_rate=0
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: < hostname.mydomain.tld[<public_ip>]: STARTTLS
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: query milter states for other event
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: milter8_other_event: milter inet:127.0.0.1:11332
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: > hostname.mydomain.tld[<public_ip>]: 220 2.0.0 Ready to start TLS
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: abort all milters
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: milter8_abort: abort milter inet:127.0.0.1:11332
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: send attr request = seed
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: send attr size = 32
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: private/tlsmgr: wanted attribute: status
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: input attribute name: status
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: input attribute value: 0
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: private/tlsmgr: wanted attribute: seed
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: input attribute name: seed
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: input attribute value: uBKBNZPM+2nyODj1Huew3Q2xzGKyI9tcZsfAT3I64as=
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: private/tlsmgr: wanted attribute: (list terminator)
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: input attribute name: (end)
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: send attr request = tktkey
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: send attr keyname = [data 0 bytes]
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: private/tlsmgr: wanted attribute: status
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: input attribute name: status
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: input attribute value: 0
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: private/tlsmgr: wanted attribute: keybuf
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: input attribute name: keybuf
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: input attribute value: M2gUmeXDPJGctzZKmRNIj2N8wjjkDlHdFzgwCN+wyMBsKbp/0QwyiNjts4h5zZXT5vaaIAb32rj/CEqrOjQFp5Ne8+d4b8jVuiW90NILJDa87dZiAAAAAA==
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: private/tlsmgr: wanted attribute: (list terminator)
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: input attribute name: (end)
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: send attr request = update
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: send attr cache_type = smtpd
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: send attr cache_id = 4951C682F022BF4857F3CD75C2F2147421DD8E29F3BE20F359DFD1D2E5813C0F&s=25&l=269488383
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: send attr session = [data 136 bytes]
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: private/tlsmgr: wanted attribute: status
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: input attribute name: status
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: input attribute value: 0
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: private/tlsmgr: wanted attribute: (list terminator)
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: input attribute name: (end)
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: Anonymous TLS connection established from hostname.mydomain.tld[<public_ip>]: TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: smtp_stream_setup: maxtime=300 enable_deadline=0 min_data_rate=0
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: < hostname.mydomain.tld[<public_ip>]: EHLO hostname.mydomain.tld
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: report helo to all milters
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: milter_macro_lookup: "{tls_version}"
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: milter_macro_lookup: result "TLSv1.3"
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: milter_macro_lookup: "{cipher}"
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: milter_macro_lookup: result "TLS_AES_256_GCM_SHA384"
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: milter_macro_lookup: "{cipher_bits}"
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: milter_macro_lookup: result "256"
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: milter_macro_lookup: "{cert_subject}"
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: milter_macro_lookup: "{cert_issuer}"
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: milter8_helo_event: milter inet:127.0.0.1:11332: helo hostname.mydomain.tld
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: event: SMFIC_HELO; macros: {tls_version}=TLSv1.3 {cipher}=TLS_AES_256_GCM_SHA384 {cipher_bits}=256
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: skipping reply for event SMFIC_HELO from milter inet:127.0.0.1:11332
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: match_list_match: hostname.mydomain.tld: no match
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: match_list_match: <public_ip>: no match
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: > hostname.mydomain.tld[<public_ip>]: 250-hostname.mydomain.tld
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: > hostname.mydomain.tld[<public_ip>]: 250-PIPELINING
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: > hostname.mydomain.tld[<public_ip>]: 250-SIZE 10240000
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: > hostname.mydomain.tld[<public_ip>]: 250-ETRN
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: > hostname.mydomain.tld[<public_ip>]: 250-ENHANCEDSTATUSCODES
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: > hostname.mydomain.tld[<public_ip>]: 250-8BITMIME
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: > hostname.mydomain.tld[<public_ip>]: 250-DSN
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: > hostname.mydomain.tld[<public_ip>]: 250-SMTPUTF8
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: > hostname.mydomain.tld[<public_ip>]: 250 CHUNKING
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: smtp_stream_setup: maxtime=300 enable_deadline=0 min_data_rate=0
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: < hostname.mydomain.tld[<public_ip>]: MAIL FROM:<[email protected]>
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: extract_addr: input: <[email protected]>
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: smtpd_check_addr: [email protected]
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: connect to subsystem private/rewrite
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: private/rewrite socket: wanted attribute: protocol
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: input attribute name: protocol
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: input attribute value: trivial_rewrite_protocol
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: private/rewrite socket: wanted attribute: (list terminator)
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: input attribute name: (end)
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: send attr request = rewrite
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: send attr rule = local
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: send attr address = ""
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: private/rewrite socket: wanted attribute: flags
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: input attribute name: flags
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: input attribute value: 0
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: private/rewrite socket: wanted attribute: address
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: input attribute name: address
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: input attribute value: ""
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: private/rewrite socket: wanted attribute: (list terminator)
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: input attribute name: (end)
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: rewrite_clnt: local: "" -> ""
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: send attr request = rewrite
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: send attr rule = local
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: send attr address = [email protected]
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: private/rewrite socket: wanted attribute: flags
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: input attribute name: flags
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: input attribute value: 0
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: private/rewrite socket: wanted attribute: address
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: input attribute name: address
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: input attribute value: [email protected]
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: private/rewrite socket: wanted attribute: (list terminator)
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: input attribute name: (end)
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: rewrite_clnt: local: [email protected] -> [email protected]
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: send attr request = resolve
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: send attr sender = 
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: send attr address = [email protected]
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: private/rewrite socket: wanted attribute: flags
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: input attribute name: flags
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: input attribute value: 0
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: private/rewrite socket: wanted attribute: transport
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: input attribute name: transport
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: input attribute value: anonaddy
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: private/rewrite socket: wanted attribute: nexthop
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: input attribute name: nexthop
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: input attribute value: 4mc.cc
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: private/rewrite socket: wanted attribute: recipient
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: input attribute name: recipient
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: input attribute value: [email protected]
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: private/rewrite socket: wanted attribute: flags
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: input attribute name: flags
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: input attribute value: 1024
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: private/rewrite socket: wanted attribute: (list terminator)
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: input attribute name: (end)
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: resolve_clnt: `' -> `[email protected]' -> transp=`anonaddy' host=`4mc.cc' rcpt=`[email protected]' flags= class=virtual
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: ctable_locate: install entry key [email protected]
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: extract_addr: in: <[email protected]>, result: [email protected]
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: send attr request = rewrite
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: send attr rule = local
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: send attr address = double-bounce
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: private/rewrite socket: wanted attribute: flags
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: input attribute name: flags
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: input attribute value: 0
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: private/rewrite socket: wanted attribute: address
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: input attribute name: address
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: input attribute value: [email protected]
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: private/rewrite socket: wanted attribute: (list terminator)
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: input attribute name: (end)
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: rewrite_clnt: local: double-bounce -> [email protected]
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: report sender to all milters
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: milter_macro_lookup: "i"
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: milter_macro_lookup: "{mail_addr}"
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: ctable_locate: leave existing entry key [email protected]
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: milter_macro_lookup: result "[email protected]"
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: milter_macro_lookup: "{client_addr}"
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: milter_macro_lookup: result "<public_ip>"
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: milter_macro_lookup: "{client_name}"
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: milter_macro_lookup: result "hostname.mydomain.tld"
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: milter_macro_lookup: "{auth_authen}"
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: milter8_mail_event: milter inet:127.0.0.1:11332: mail <[email protected]>
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: event: SMFIC_MAIL; macros: {mail_addr}[email protected] {client_addr}=<public_ip> {client_name}=hostname.mydomain.tld
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: skipping reply for event SMFIC_MAIL from milter inet:127.0.0.1:11332
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: smtpd_check_rewrite: trying: permit_inet_interfaces
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: permit_inet_interfaces: hostname.mydomain.tld <public_ip>
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: fsspace: .: block size 4096, blocks free 46241582
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: smtpd_check_queue: blocks 4096 avail 46241582 min_free 0 msg_size_limit 10240000
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: > hostname.mydomain.tld[<public_ip>]: 250 2.1.0 Ok
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: smtp_stream_setup: maxtime=300 enable_deadline=0 min_data_rate=0
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: < hostname.mydomain.tld[<public_ip>]: RCPT TO:<[email protected]>
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: extract_addr: input: <[email protected]>
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: smtpd_check_addr: [email protected]
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: send attr request = rewrite
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: send attr rule = local
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: send attr address = [email protected]
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: private/rewrite socket: wanted attribute: flags
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: input attribute name: flags
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: input attribute value: 0
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: private/rewrite socket: wanted attribute: address
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: input attribute name: address
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: input attribute value: [email protected]
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: private/rewrite socket: wanted attribute: (list terminator)
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: input attribute name: (end)
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: rewrite_clnt: local: [email protected] -> [email protected]
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: send attr request = rewrite
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: send attr rule = local
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: send attr address = [email protected]
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: private/rewrite socket: wanted attribute: flags
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: input attribute name: flags
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: input attribute value: 0
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: private/rewrite socket: wanted attribute: address
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: input attribute name: address
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: input attribute value: [email protected]
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: private/rewrite socket: wanted attribute: (list terminator)
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: input attribute name: (end)
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: rewrite_clnt: local: [email protected] -> [email protected]
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: send attr request = resolve
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: send attr sender = [email protected]
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: send attr address = [email protected]
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: private/rewrite socket: wanted attribute: flags
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: input attribute name: flags
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: input attribute value: 0
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: private/rewrite socket: wanted attribute: transport
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: input attribute name: transport
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: input attribute value: smtp
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: private/rewrite socket: wanted attribute: nexthop
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: input attribute name: nexthop
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: input attribute value: gmail.com
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: private/rewrite socket: wanted attribute: recipient
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: input attribute name: recipient
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: input attribute value: [email protected]
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: private/rewrite socket: wanted attribute: flags
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: input attribute name: flags
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: input attribute value: 4096
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: private/rewrite socket: wanted attribute: (list terminator)
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: input attribute name: (end)
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: resolve_clnt: `[email protected]' -> `[email protected]' -> transp=`smtp' host=`gmail.com' rcpt=`[email protected]' flags= class=default
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: ctable_locate: install entry key [email protected][email protected]
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: extract_addr: in: <[email protected]>, result: [email protected]
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: >>> START Helo command RESTRICTIONS <<<
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: generic_checks: name=permit_mynetworks
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: permit_mynetworks: hostname.mydomain.tld <public_ip>
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: match_hostname: mynetworks: hostname.mydomain.tld ~? 127.0.0.0/8
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: match_hostaddr: mynetworks: <public_ip> ~? 127.0.0.0/8
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: match_hostname: mynetworks: hostname.mydomain.tld ~? [::ffff:127.0.0.0]/104
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: match_hostaddr: mynetworks: <public_ip> ~? [::ffff:127.0.0.0]/104
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: match_hostname: mynetworks: hostname.mydomain.tld ~? [::1]/128
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: match_hostaddr: mynetworks: <public_ip> ~? [::1]/128
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: match_hostname: mynetworks: hostname.mydomain.tld ~? 10.0.0.0/8
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: match_hostaddr: mynetworks: <public_ip> ~? 10.0.0.0/8
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: match_hostname: mynetworks: hostname.mydomain.tld ~? 172.16.0.0/12
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: match_hostaddr: mynetworks: <public_ip> ~? 172.16.0.0/12
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: match_hostname: mynetworks: hostname.mydomain.tld ~? 192.168.0.0/16
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: match_hostaddr: mynetworks: <public_ip> ~? 192.168.0.0/16
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: match_list_match: hostname.mydomain.tld: no match
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: match_list_match: <public_ip>: no match
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: generic_checks: name=permit_mynetworks status=0
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: generic_checks: name=permit_sasl_authenticated
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: generic_checks: name=permit_sasl_authenticated status=0
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: generic_checks: name=reject_invalid_helo_hostname
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: reject_invalid_hostname: hostname.mydomain.tld
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: generic_checks: name=reject_invalid_helo_hostname status=0
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: generic_checks: name=reject_non_fqdn_helo_hostname
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: reject_non_fqdn_hostname: hostname.mydomain.tld
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: generic_checks: name=reject_non_fqdn_helo_hostname status=0
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: generic_checks: name=reject_unknown_helo_hostname
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: reject_unknown_hostname: hostname.mydomain.tld
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: lookup hostname.mydomain.tld type A flags 
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: dns_query: hostname.mydomain.tld (A): OK
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: dns_get_answer: type A for hostname.mydomain.tld
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: generic_checks: name=reject_unknown_helo_hostname status=0
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: >>> END Helo command RESTRICTIONS <<<
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: >>> START Sender address RESTRICTIONS <<<
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: generic_checks: name=permit_mynetworks
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: permit_mynetworks: hostname.mydomain.tld <public_ip>
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: match_hostname: mynetworks: hostname.mydomain.tld ~? 127.0.0.0/8
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: match_hostaddr: mynetworks: <public_ip> ~? 127.0.0.0/8
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: match_hostname: mynetworks: hostname.mydomain.tld ~? [::ffff:127.0.0.0]/104
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: match_hostaddr: mynetworks: <public_ip> ~? [::ffff:127.0.0.0]/104
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: match_hostname: mynetworks: hostname.mydomain.tld ~? [::1]/128
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: match_hostaddr: mynetworks: <public_ip> ~? [::1]/128
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: match_hostname: mynetworks: hostname.mydomain.tld ~? 10.0.0.0/8
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: match_hostaddr: mynetworks: <public_ip> ~? 10.0.0.0/8
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: match_hostname: mynetworks: hostname.mydomain.tld ~? 172.16.0.0/12
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: match_hostaddr: mynetworks: <public_ip> ~? 172.16.0.0/12
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: match_hostname: mynetworks: hostname.mydomain.tld ~? 192.168.0.0/16
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: match_hostaddr: mynetworks: <public_ip> ~? 192.168.0.0/16
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: match_list_match: hostname.mydomain.tld: no match
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: match_list_match: <public_ip>: no match
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: generic_checks: name=permit_mynetworks status=0
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: generic_checks: name=permit_sasl_authenticated
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: generic_checks: name=permit_sasl_authenticated status=0
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: generic_checks: name=reject_non_fqdn_sender
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: reject_non_fqdn_address: [email protected]
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: generic_checks: name=reject_non_fqdn_sender status=0
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: generic_checks: name=reject_unknown_sender_domain
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: reject_unknown_address: [email protected]
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: rewrite_clnt: cached: local: [email protected] -> [email protected]
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: send attr request = rewrite
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: send attr rule = local
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: send attr address = [email protected]
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: private/rewrite socket: wanted attribute: flags
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: input attribute name: flags
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: input attribute value: 0
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: private/rewrite socket: wanted attribute: address
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: input attribute name: address
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: input attribute value: [email protected]
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: private/rewrite socket: wanted attribute: (list terminator)
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: input attribute name: (end)
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: rewrite_clnt: local: [email protected] -> [email protected]
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: send attr request = resolve
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: send attr sender = [email protected]
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: send attr address = [email protected]
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: private/rewrite socket: wanted attribute: flags
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: input attribute name: flags
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: input attribute value: 0
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: private/rewrite socket: wanted attribute: transport
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: input attribute name: transport
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: input attribute value: anonaddy
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: private/rewrite socket: wanted attribute: nexthop
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: input attribute name: nexthop
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: input attribute value: 4mc.cc
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: private/rewrite socket: wanted attribute: recipient
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: input attribute name: recipient
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: input attribute value: [email protected]
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: private/rewrite socket: wanted attribute: flags
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: input attribute name: flags
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: input attribute value: 1024
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: private/rewrite socket: wanted attribute: (list terminator)
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: input attribute name: (end)
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: resolve_clnt: `[email protected]' -> `[email protected]' -> transp=`anonaddy' host=`4mc.cc' rcpt=`[email protected]' flags= class=virtual
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: ctable_locate: install entry key [email protected][email protected]
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: generic_checks: name=reject_unknown_sender_domain status=0
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: generic_checks: name=reject_unknown_reverse_client_hostname
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: reject_unknown_reverse_name: hostname.mydomain.tld
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: generic_checks: name=reject_unknown_reverse_client_hostname status=0
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: >>> END Sender address RESTRICTIONS <<<
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: >>> START Recipient address RESTRICTIONS <<<
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: generic_checks: name=reject_unauth_destination
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: reject_unauth_destination: [email protected]
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: permit_auth_destination: [email protected]
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: ctable_locate: move existing entry key [email protected][email protected]
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: NOQUEUE: reject: RCPT from hostname.mydomain.tld[<public_ip>]: 554 5.7.1 <[email protected]>: Relay access denied; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<hostname.mydomain.tld>
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: generic_checks: name=reject_unauth_destination status=2
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: >>> END Recipient address RESTRICTIONS <<<
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: using backwards-compatible default setting smtpd_relay_before_recipient_restrictions=no to reject recipient "[email protected]" from client "hostname.mydomain.tld[<public_ip>]"
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: report recipient to all milters (flags=0x1)
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: > hostname.mydomain.tld[<public_ip>]: 554 5.7.1 <[email protected]>: Relay access denied
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: smtp_stream_setup: maxtime=300 enable_deadline=0 min_data_rate=0
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: < hostname.mydomain.tld[<public_ip>]: RSET
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: abort all milters
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: milter8_abort: abort milter inet:127.0.0.1:11332
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: > hostname.mydomain.tld[<public_ip>]: 250 2.0.0 Ok
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: smtp_stream_setup: maxtime=300 enable_deadline=0 min_data_rate=0
47.11.236.109 - - [19/Jul/2022:22:45:33 +0530] "POST /register HTTP/1.1" 500 595779 "https://addy.4mc.cc/register" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36"
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: < hostname.mydomain.tld[<public_ip>]: QUIT
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: > hostname.mydomain.tld[<public_ip>]: 221 2.0.0 Bye
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: match_hostname: smtpd_client_event_limit_exceptions: hostname.mydomain.tld ~? 127.0.0.0/8
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: match_hostaddr: smtpd_client_event_limit_exceptions: <public_ip> ~? 127.0.0.0/8
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: match_hostname: smtpd_client_event_limit_exceptions: hostname.mydomain.tld ~? [::ffff:127.0.0.0]/104
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: match_hostaddr: smtpd_client_event_limit_exceptions: <public_ip> ~? [::ffff:127.0.0.0]/104
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: match_hostname: smtpd_client_event_limit_exceptions: hostname.mydomain.tld ~? [::1]/128
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: match_hostaddr: smtpd_client_event_limit_exceptions: <public_ip> ~? [::1]/128
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: match_hostname: smtpd_client_event_limit_exceptions: hostname.mydomain.tld ~? 10.0.0.0/8
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: match_hostaddr: smtpd_client_event_limit_exceptions: <public_ip> ~? 10.0.0.0/8
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: match_hostname: smtpd_client_event_limit_exceptions: hostname.mydomain.tld ~? 172.16.0.0/12
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: match_hostaddr: smtpd_client_event_limit_exceptions: <public_ip> ~? 172.16.0.0/12
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: match_hostname: smtpd_client_event_limit_exceptions: hostname.mydomain.tld ~? 192.168.0.0/16
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: match_hostaddr: smtpd_client_event_limit_exceptions: <public_ip> ~? 192.168.0.0/16
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: match_list_match: hostname.mydomain.tld: no match
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: match_list_match: <public_ip>: no match
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: send attr request = disconnect
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: send attr ident = 25:<public_ip>
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: private/anvil: wanted attribute: status
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: input attribute name: status
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: input attribute value: 0
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: private/anvil: wanted attribute: (list terminator)
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: input attribute name: (end)
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: abort all milters
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: milter8_abort: abort milter inet:127.0.0.1:11332
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: disconnect event to all milters
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: milter8_disc_event: quit milter inet:127.0.0.1:11332
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: disconnect from hostname.mydomain.tld[<public_ip>] ehlo=2 starttls=1 mail=1 rcpt=0/1 rset=1 quit=1 commands=6/7
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: free all milters
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: free milter inet:127.0.0.1:11332
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: master_notify: status 1
Jul 19 22:45:33 mailerrr postfix/smtpd[1059]: connection closed
Jul 19 22:45:38 mailerrr postfix/smtpd[1059]: auto_clnt_close: disconnect private/tlsmgr stream
Jul 19 22:45:38 mailerrr postfix/smtpd[1059]: rewrite stream disconnect
crond: USER anonaddy pid 1063 cmd php /var/www/anonaddy/artisan schedule:run --no-ansi --no-interaction --quiet

@crazy-max
Copy link
Member

crazy-max commented Jul 19, 2022

I will make some enhancements to the image so we can add arbitrary env values, which is not currently possible.

Edit: except if Anonaddy can read env vars from system env and not just the .env file? cc @willbrowningme

@willbrowningme
Copy link
Member

@crazy-max PHP environment variables can be accessed via $_ENV["FOO"] - https://www.php.net/manual/en/reserved.variables.environment.php

But I don't know whether that would work as you mentioned or not.

@willbrowningme
Copy link
Member

I do believe the issue is simply the missing permit_my_networks value for smtpd_recipient_restrictions as that is what the error seems to suggest.

@crazy-max
Copy link
Member

I do believe the issue is simply the missing permit_my_networks value for smtpd_recipient_restrictions as that is what the error seems to suggest.

Will revert that change and see how to improve injecting env vars in a follow-up

@crazy-max
Copy link
Member

crazy-max commented Jul 19, 2022

PHP environment variables can be accessed via $_ENV["FOO"] - https://www.php.net/manual/en/reserved.variables.environment.php

Yes but Anonaddy doesn't read them currently to override ones from .env file correct?

@willbrowningme
Copy link
Member

That's right, it doesn't read them to override those in .env.

https://laravel.com/docs/9.x/configuration#retrieving-environment-configuration

When php artisan config:cache is run the web app caches the values for the .env values that are in the /config/* files.

https://laravel.com/docs/9.x/configuration#configuration-caching

@crazy-max
Copy link
Member

Ok got it thanks!

@sakearzoo
Copy link
Author

when i am using these env

MAIL_DRIVER=smtp
MAIL_HOST=mailer.mydomain.tld
MAIL_PORT=25
MAIL_EHLO_DOMAIN=mailer.mydomain.tld
MAIL_VERIFY_PEER=true
MAIL_ENCRYPTION=true

i am still getting relay access denied
but removing this its working file and all mails reach into spam folder.

working log

match_list_match: smtpd_client_event_limit_exceptions: no match
match_list_match: localhost: no match
match_list_match: 127.0.0.1: no match
match_list_match: permit_mynetworks: no match
smtpd_acl_permit: smtpd_log_access_permit_actions: no match

what should i do to get it fixed? as all mails dumps to spam folder. i have already set the records correctly and also validated through mxtoolbox and other online tools but i could not find the issue.
any suggestion would be helpful.

here are the complete logs:

  1. relay access denied.log
    https://pastebin.com/JFBphUDY
  2. working.log
    https://pastebin.com/Rdws8Mhs

@willbrowningme
Copy link
Member

@sakearzoo it should be MAIL_ENCRYPTION=tls not =true.

In your relay access denied.log in this section:

Jul 20 11:37:54 mailer postfix/smtpd[1060]: >>> START Recipient address RESTRICTIONS <<<
Jul 20 11:37:54 mailer postfix/smtpd[1060]: generic_checks: name=permit_mynetworks
Jul 20 11:37:54 mailer postfix/smtpd[1060]: permit_mynetworks: *****.mydomain.tld mypublicip
Jul 20 11:37:54 mailer postfix/smtpd[1060]: match_hostname: mynetworks: *****.mydomain.tld ~? 127.0.0.0/8
Jul 20 11:37:54 mailer postfix/smtpd[1060]: match_hostaddr: mynetworks: mypublicip ~? 127.0.0.0/8
Jul 20 11:37:54 mailer postfix/smtpd[1060]: match_hostname: mynetworks: *****.mydomain.tld ~? [::ffff:127.0.0.0]/104
Jul 20 11:37:54 mailer postfix/smtpd[1060]: match_hostaddr: mynetworks: mypublicip ~? [::ffff:127.0.0.0]/104
Jul 20 11:37:54 mailer postfix/smtpd[1060]: match_hostname: mynetworks: *****.mydomain.tld ~? [::1]/128
Jul 20 11:37:54 mailer postfix/smtpd[1060]: match_hostaddr: mynetworks: mypublicip ~? [::1]/128
Jul 20 11:37:54 mailer postfix/smtpd[1060]: match_hostname: mynetworks: *****.mydomain.tld ~? 10.0.0.0/8
Jul 20 11:37:54 mailer postfix/smtpd[1060]: match_hostaddr: mynetworks: mypublicip ~? 10.0.0.0/8
Jul 20 11:37:54 mailer postfix/smtpd[1060]: match_hostname: mynetworks: *****.mydomain.tld ~? 172.16.0.0/12
Jul 20 11:37:54 mailer postfix/smtpd[1060]: match_hostaddr: mynetworks: mypublicip ~? 172.16.0.0/12
Jul 20 11:37:54 mailer postfix/smtpd[1060]: match_hostname: mynetworks: *****.mydomain.tld ~? 192.168.0.0/16
Jul 20 11:37:54 mailer postfix/smtpd[1060]: match_hostaddr: mynetworks: mypublicip ~? 192.168.0.0/16
Jul 20 11:37:54 mailer postfix/smtpd[1060]: match_list_match: *****.mydomain.tld: no match
Jul 20 11:37:54 mailer postfix/smtpd[1060]: match_list_match: mypublicip: no match
Jul 20 11:37:54 mailer postfix/smtpd[1060]: generic_checks: name=permit_mynetworks status=0
Jul 20 11:37:54 mailer postfix/smtpd[1060]: generic_checks: name=reject_unauth_destination
Jul 20 11:37:54 mailer postfix/smtpd[1060]: reject_unauth_destination: [email protected]
Jul 20 11:37:54 mailer postfix/smtpd[1060]: permit_auth_destination: [email protected]
Jul 20 11:37:54 mailer postfix/smtpd[1060]: ctable_locate: move existing entry key *****@[email protected]
Jul 20 11:37:54 mailer postfix/smtpd[1060]: NOQUEUE: reject: RCPT from *****.mydomain.tld[mypublicip]: 554 5.7.1 <[email protected]>: Relay access denied; from=<*****@mydomain.tld> to=<[email protected]> proto=ESMTP helo=<*****.mydomain.tld>
Jul 20 11:37:54 mailer postfix/smtpd[1060]: generic_checks: name=reject_unauth_destination status=2
Jul 20 11:37:54 mailer postfix/smtpd[1060]: >>> END Recipient address RESTRICTIONS <<<

I don't understand how permit_mynetworks does not match when it seems to have your public IP.

@sakearzoo
Copy link
Author

sakearzoo commented Jul 20, 2022

@willbrowningme
most probably its not adding my public ip to mynetworks list while building the container. i am using portainer-ce for deploying this stack and my domain is behind traefik. and i have noticed its creating 2 Client ID while building.

and can you suggest me how to add mta-sts and dane record to my docker container?

i have added the latest log:
https://pastebin.com/FDwzZX7S

@crazy-max
Copy link
Member

crazy-max commented Jul 20, 2022

@sakearzoo

when i am using these env

MAIL_DRIVER=smtp
MAIL_HOST=mailer.mydomain.tld
MAIL_PORT=25
MAIL_EHLO_DOMAIN=mailer.mydomain.tld
MAIL_VERIFY_PEER=true
MAIL_ENCRYPTION=true

You don't have to set all of them expect but the one from the README: https://github.com/anonaddy/docker#mail

The others are populated automatically by the container in https://github.com/anonaddy/docker/blob/master/rootfs/etc/cont-init.d/13-config-anonaddy.sh

Btw how do you set them?

@sakearzoo
Copy link
Author

sakearzoo commented Jul 20, 2022

@crazy-max i have added those variable through environment variables directly on docker compose .
few things i have noticed that when i add MAIL_VERIFY_PEER=true the certificate doesn't match and getting error
Unable to connect with STARTTLS: stream_socket_enable_crypto(): Peer certificate CN=`4mc.cc' did not match expected CN=`127.0.0.1'
if i removing all those mail setting then it defaults to localhost and its able to establish tls connection and mail sent successfully. but certificate mismatches with more errors and mail reaches to spam folder. so i had to set all things which solves the certificate issue but mail isn't going through.

could you share your docker-compose.yml file so that i could try with my stack?

this is my docker-compose file
https://pastebin.com/VLvHZKy9

@crazy-max
Copy link
Member

crazy-max commented Jul 20, 2022

i have added those variable through environment variables directly on docker compose .

these env vars except the ones defined in the README will not be used by AnonAddy, see #145 (comment). if you want to inject arbitrary env vars see https://github.com/anonaddy/docker#define-additional-env-vars

@sakearzoo
Copy link
Author

sakearzoo commented Jul 20, 2022

ok trying that and how to add mta-sts & dane records ? is it possible to add?

@sakearzoo
Copy link
Author

@crazy-max

You can define additional environment variables that will be used by AnonAddy by creating a file named .env in /data.

i have tried creating .env file inside data folder but still seems to be ignored those files.
for those do i have to mention at here

   env_file:
      - "./anonaddy.env"

or is it automatically detected ?

@crazy-max
Copy link
Member

crazy-max commented Jul 20, 2022

no you have to create a file ./data/.env as explained in https://github.com/anonaddy/docker#define-additional-env-vars and have ./data bind mounted:

    volumes:
      - "./data:/data"

but again you don't need to set these env vars. it should work as it is.

@sakearzoo
Copy link
Author

Using docker-compose yml file

I have already mounted

volumes:
      - "/home/ubuntu/anonaddy/data:/data"

And created a file locally at /home/ubuntu/anonaddy/data/.env

Even if I don't specify those variables and i am still able to send emails, I won't be able to figure out why my emails are being routed to the spam folder. I've already set up ptr records, dkim, dmarc, and spf. My emails continue to land in the spam bin.

Even if I open ports- 587 , 465 i am unable to establish connection at those ports .

I am still confused about where i am going wrong .

@ShawnTheShadow
Copy link

ShawnTheShadow commented Jul 20, 2022

What are the ARC headers and authentication results in the email's headers? (With all PII removed of course)
Also anonaddy doesn't use ports 587 and 465, it only uses HTTP/HTTPS and port 25 for incoming mail.

@crazy-max
Copy link
Member

@sakearzoo

are being routed to the spam folder.

Maybe DMARC misconfiguration or your IP is blacklisted. You can check at https://multirbl.valli.org/lookup/

@sakearzoo
Copy link
Author

sakearzoo commented Jul 20, 2022

These are the details Received: from [127.0.0.1] (localhost [127.0.0.1]) by mailer.mydomain.tld where it should be from my hostname instead of localhost.

These are the arc header details.

Delivered-To: [email protected] Received: by 2002:a0c:e751:0:0:0:0:0 with SMTP id g17csp1359610qvn; Wed, 20 Jul 2022 12:32:40 -0700 (PDT) X-Google-Smtp-Source: AGRyM1vfJcjDyLWKe/Xv/SS4c4PxmFcxXph8oHGBkTRkrF7YSx9CMyGokH5 X-Received: by 2002:a63:6404:0:b0:415:fa99:e287 with SMTP id y4-20020a636404000000b0041599e287mr34893pgb.220.1658345560263; Wed, 20 Jul 2022 12:32:40 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1658345560; cv=none; d=google.com; s=arc-20160816; b=h7VV6b3OI9aVcyewRygu4nYvT+TYI5kSWy4y4HuY9kO9NjmJ3IMrUwlLuk Umr/MVHuhgEPWhTW+2aIS6SccRlzW2IanYZ5TTCLxcyaL/9bhFMLLdZiaCXZvdn04 YrFLE/aQYgszXKMnyqmi0EG/1uaBupdeDd2wBsIREs5c934nIjvri3xph2ksfsw4x SX5k6tt4A4EkujLsCZWRcCOG+zUi8oVuRpYihWlsRu0JRaodF0ICyDq2X7pFQVl /9B9xQM6eF0aw/ahaL9t2RaHXnS62qpo9QkRVTkHo1yVcopZ8if03fTNNXHSIIFy0 aR0w== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=date:mime-version:message-id:feedback-id:subject:to:from :dkim-signature; bh=0Srto48xXp4PC6hga29KRfteZcTHADxYls=; b=Lw5hss5/an10n5WxXC3fUlvVY5D7DxGXtYnisfhzd7qHO4Om2V+49XWGf/ dO5l2n0DxLbu0b3ADYeguCUnIAxR1MVMU/OEiDPH8wif4OJlG1nsDQj/+QYrZ h4AabFqRMH8A+iR1w2+4ggmR0jeZPk22QdMAJnz9YTHzywm0f2mvdd/9bVqAFcL TWWFdHEt8v91Fk3Ag8sB264ugaftLv1ONbEJllnLhV3KGeP8AEwoTIeqNBGQ JFFFix7DXkDUQTsGvoze3wxHMlmAL8Fnb7ifdWojFfGqV718Merbx1ahjD9RCJ RUNg== ARC-Authentication-Results: i=1; mx.google.com; dkim=pass [email protected] header.s=default header.b=GyHwMZLx; spf=pass (google.com: domain of [email protected] designates <publicip> as permitted sender) [email protected]; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=4mc.cc Return-Path: <[email protected]> Received: from mailer.mydomain.tld (mailer.mydomain.tld. [150.230.128.45]) by mx.google.com with ESMTPS id i71-20020a63a000000b004126e156abasi24441047pgd.142.2022.07.20.12.32.39 for <[email protected]> (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 20 Jul 2022 12:32:40 -0700 (PDT) Received-SPF: pass (google.com: domain of [email protected] designates mypublicip as permitted sender) client-ip=mypublicip; Authentication-Results: mx.google.com; dkim=pass [email protected] header.s=default header.b=GyHwMZLx; spf=pass (google.com: domain of [email protected] designates mypublicip as permitted sender) [email protected]; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=4mc.cc Received: from [127.0.0.1] (localhost [127.0.0.1]) by mailer.mydomain.tld (Postfix) with ESMTPS id 9B08C390C for <[email protected]>; Thu, 21 Jul 2022 01:02:37 +0530 (IST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=4mc.cc; s=default; t=165834557; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: 	 to:to:cc:mime-version:mime-version:content-type:content-type; bh=0SrtoyNQo48xXp4PC6h29KRftZDeZcTHADxYls=; b=GyHwMZLxTnz1h/q78tDtBDQJ14ugZ1Xm2T/d70NWw9VPmHCi47MkZZ5wNhaJoE 6GK4TE+O3QrD8WJ1rlYKywQ7uu+onTX8xKgSXKPml8rtUhqLNs10fd/0PNjJavH7u6H 5hZM2zmJc2tAXH2VZRIjbrkQdWn/xo9e+4c+qWzqa3JET9LAx/iUj4r4fBrz9urBiujub7 BgHn+TqDEsdgb7KdJz1kRF0Yvta3S5BlQLM1rsqYILgLY/tfvWlFNJS01/+3qLbCBXX yNx7V/yrIOM04nnIXpw/BkxYA9KwPxd9OO6Ag4JYhG2l2/SYpNBltg==

@ShawnTheShadow
Copy link

Looks like the DNS settings are all correct, check the blacklist check @crazy-max recommended, if you're doing it from home like from a nas, there are some blacklists that specifically block residental ip addresses

@sakearzoo
Copy link
Author

sakearzoo commented Jul 20, 2022

@crazy-max i have checked its not in blacklist all green and also in mail checked original where it was clearly mentioned that spf, dkim , dmarc pass with my domain.

@ShawnTheShadow
Copy link

other than residential ip address blocking, only other thing i could think of would be poor ip/subnet reputation (which i had when i started my email server with dreamhost, took several months to improve it)

@sakearzoo
Copy link
Author

sakearzoo commented Jul 20, 2022

@ShawnTheShadow that could be possible having bad ip reputation 😞 is there any proxy ip could help in this case ?

Update: i have good reputation compared to others , checked just now. Other ips who's mail reaches to my inbox having bad reputation>90% abusive. Still don't know how they manage to send the mail to my inbox folder.

@ShawnTheShadow
Copy link

I've started using mailgun for my email proxy, it's free for the first 1000 emails for the month, there's several others out there

@sakearzoo
Copy link
Author

@ShawnTheShadow do you have any idea how to setup mta-stsv1 & dane record with anonaddy docker container ?

@crazy-max
Copy link
Member

i have checked its not in blacklist all green

Are you sure? That nearly impossible, you should have at least 3/4 blacklist.

I'm on Vultr and their reput is good. I have 2 BL but unrelated as it concerns sanctions against others countries.

One trick is to create VPS over and over until an IP looks good. But be careful admins tend to detect that kind of behavior.

@crazy-max
Copy link
Member

Locking this issue as it seems out of scope now. But feel free to open a thread on https://github.com/anonaddy/docker/discussions

@anonaddy anonaddy locked as resolved and limited conversation to collaborators Jul 20, 2022
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging a pull request may close this issue.

5 participants