mailcow / mailcow-dockerized

mailcow: dockerized - ๐Ÿฎ + ๐Ÿ‹ = ๐Ÿ’•
https://mailcow.email
GNU General Public License v3.0
8.93k stars 1.17k forks source link

redirecting custom quarantine notification E-Mail automatically (SoGo) put this notification into quarantine #4522

Closed jonathanmmm closed 2 years ago

jonathanmmm commented 2 years ago

Contribution guidelines

I've found a bug and checked that ...

Description

Hello Mailcow Devs,

I am having a mailcow email address and created redirects via SoGo to external and internal E-Mail addresses. I am using a custom Qurantine message. I got the quarantine notification on my personal external E-Mail account, but I can find that my personal qurantine notification is now in qurantine (and not being redirected to the internal E-Mail addresses). This E-Mail account is only used to redirect E-Mails (via SoGo UI). The quarantine for the original E-Mail was right and caught it (but I don't know exactly how this E-Mail reached this server, the domain is set to the IP address of this server, but MX is set to another IP address right now. Maybe spammers just send the E-Mail to the domain IP and not to the corresponding MX entry).

Logs

postfix-mailcow    | Mar 23 09:40:43 container-id-a postfix/postscreen[2711]: CONNECT from [a.a.a.a]:61979 to [g.g.g.g]:25
postfix-mailcow    | Mar 23 09:40:43 container-id-a whitelist_forwardinghosts: Look up a.a.a.a on whitelist, result 200 DUNNO
postfix-mailcow    | Mar 23 09:40:43 container-id-a postfix/postscreen[2711]: PREGREET 11 after 0.03 from [a.a.a.a]:61979: EHLO User\r\n
postfix-mailcow    | Mar 23 09:40:43 container-id-a postfix/dnsblog[2725]: addr a.a.a.a listed by domain zen.spamhaus.org as 127.0.0.4
postfix-mailcow    | Mar 23 09:40:43 container-id-a postfix/dnsblog[2725]: addr a.a.a.a listed by domain zen.spamhaus.org as 127.0.0.11
postfix-mailcow    | Mar 23 09:40:43 container-id-a postfix/dnsblog[2722]: addr a.a.a.a listed by domain hostkarma.junkemailfilter.com as 127.0.0.2
postfix-mailcow    | Mar 23 09:40:46 container-id-a postfix/postscreen[2711]: DNSBL rank 17 for [a.a.a.a]:61979
postfix-mailcow    | Mar 23 09:40:46 container-id-a postfix/postscreen[2711]: DISCONNECT [a.a.a.a]:61979
postfix-mailcow    | Mar 23 09:44:53 container-id-a postfix/smtps/smtpd[2737]: connect from unknown[b.b.b.b]
postfix-mailcow    | Mar 23 09:45:03 container-id-a postfix/smtps/smtpd[2737]: Anonymous TLS connection established from unknown[b.b.b.b]: TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)
postfix-mailcow    | Mar 23 09:45:17 container-id-a postfix/quarantine/smtpd[2744]: connect from mailcowdockerized_dovecot-mailcow.mailcowdockerized_mailcow-network[c:c:c::c]
postfix-mailcow    | Mar 23 09:45:17 container-id-a postfix/quarantine/smtpd[2744]: random-no-uno: client=mailcowdockerized_dovecot-mailcow.mailcowdockerized_mailcow-network[c:c:c::c]
postfix-mailcow    | Mar 23 09:45:17 container-id-a postfix/cleanup[2745]: random-no-uno: message-id=<>
postfix-mailcow    | Mar 23 09:45:17 container-id-a postfix/qmgr[373]: random-no-uno: from=<quarantine-notification-sender-address@my-domain.com>, size=5021, nrcpt=1 (queue active)
postfix-mailcow    | Mar 23 09:45:17 container-id-a postfix/quarantine/smtpd[2744]: disconnect from mailcowdockerized_dovecot-mailcow.mailcowdockerized_mailcow-network[c:c:c::c] ehlo=1 mail=1 rcpt=1 data=1 quit=1 commands=5
postfix-mailcow    | Mar 23 09:45:17 container-id-a postfix/sogo/smtpd[2747]: connect from mailcowdockerized_dovecot-mailcow.mailcowdockerized_mailcow-network[d.d.d.d]
postfix-mailcow    | Mar 23 09:45:17 container-id-a postfix/sogo/smtpd[2747]: some-other-id: client=mailcowdockerized_dovecot-mailcow.mailcowdockerized_mailcow-network[d.d.d.d]
postfix-mailcow    | Mar 23 09:45:17 container-id-a postfix/cleanup[2748]: some-other-id: replace: header Received: from container-id-b (mailcowdockerized_dovecot-mailcow.mailcowdockerized_mailcow-network [d.d.d.d])??by my-domain.com (Postcow) with ESMTP id some-other-id??for <first-internal-email-it-got-redirected@my-domai from mailcowdockerized_dovecot-mailcow.mailcowdockerized_mailcow-network[d.d.d.d]; from=<this-is-the-redirecting-account@my-domain.com> to=<internal-account-email-into-qurantine-no-1@my-domain.com> proto=ESMTP helo=<container-id-b>: Received: from sieve (sieve [d.d.d.d]) by my-domain.com (Postcow) with ESMTP id some-other-id??for <internal-account-email-into-qurantine-no-1@my-domain.com>; Wed, 23 Mar 2022 09:45:17 +0100 (CET)
postfix-mailcow    | Mar 23 09:45:17 container-id-a postfix/cleanup[2748]: some-other-id: message-id=<dovecot-sieve-1648200917-661141-0@container-id-b>
postfix-mailcow    | Mar 23 09:45:17 container-id-a postfix/cleanup[2748]: some-other-id: replace: header Received: from quarantine (mailcowdockerized_dovecot-mailcow.mailcowdockerized_mailcow-network [IPv6:c:c:c::c])??by my-domain.com (Postcow) with ESMTP id random-no-uno??for <in from mailcowdockerized_dovecot-mailcow.mailcowdockerized_mailcow-network[d.d.d.d]; from=<this-is-the-redirecting-account@my-domain.com> to=<internal-account-email-into-qurantine-no-1@my-domain.com> proto=ESMTP helo=<container-id-b>: Received: from sieve (sieve [IPv6:c:c:c::c]) by my-domain.com (Postcow) with ESMTP id random-no-uno??for <this-is-the-redirecting-account@my-domain.com>; Wed, 23 Mar 2022 09:45:17 +0100 (CET)
postfix-mailcow    | Mar 23 09:45:18 container-id-a postfix/qmgr[373]: some-other-id: from=<this-is-the-redirecting-account@my-domain.com>, size=5546, nrcpt=1 (queue active)
postfix-mailcow    | Mar 23 09:45:18 container-id-a postfix/sogo/smtpd[2747]: disconnect from mailcowdockerized_dovecot-mailcow.mailcowdockerized_mailcow-network[d.d.d.d] ehlo=1 mail=1 rcpt=1 bdat=1 quit=1 commands=5
postfix-mailcow    | Mar 23 09:45:18 container-id-a postfix/sogo/smtpd[2747]: connect from mailcowdockerized_dovecot-mailcow.mailcowdockerized_mailcow-network[d.d.d.d]
postfix-mailcow    | Mar 23 09:45:18 container-id-a postfix/lmtp[2750]: some-other-id: to=<internal-account-email-into-qurantine-no-1@my-domain.com>, relay=dovecot[c:c:c::c]:24, delay=0.66, delays=0.6/0.01/0.02/0.02, dsn=2.0.0, status=sent (250 2.0.0 <internal-account-email-into-qurantine-no-1@my-domain.com> some-other-string Saved)
postfix-mailcow    | Mar 23 09:45:18 container-id-a postfix/qmgr[373]: some-other-id: removed
postfix-mailcow    | Mar 23 09:45:18 container-id-a postfix/sogo/smtpd[2747]: some-other-other-id: client=mailcowdockerized_dovecot-mailcow.mailcowdockerized_mailcow-network[d.d.d.d]
postfix-mailcow    | Mar 23 09:45:18 container-id-a postfix/cleanup[2748]: some-other-other-id: replace: header Received: from container-id-b (mailcowdockerized_dovecot-mailcow.mailcowdockerized_mailcow-network [d.d.d.d])??by my-domain.com (Postcow) with ESMTP id some-other-other-id??for <other-email@other from mailcowdockerized_dovecot-mailcow.mailcowdockerized_mailcow-network[d.d.d.d]; from=<this-is-the-redirecting-account@my-domain.com> to=<other-email@other-external-domain.com> proto=ESMTP helo=<container-id-b>: Received: from sieve (sieve [d.d.d.d]) by my-domain.com (Postcow) with ESMTP id some-other-other-id??for <other-email@other-external-domain.com>; Wed, 23 Mar 2022 09:45:18 +0100 (CET)
postfix-mailcow    | Mar 23 09:45:18 container-id-a postfix/cleanup[2748]: some-other-other-id: message-id=<dovecot-sieve-1648200917-661141-1@container-id-b>
postfix-mailcow    | Mar 23 09:45:18 container-id-a postfix/cleanup[2748]: some-other-other-id: replace: header Received: from quarantine (mailcowdockerized_dovecot-mailcow.mailcowdockerized_mailcow-network [IPv6:c:c:c::c])??by my-domain.com (Postcow) with ESMTP id random-no-uno??for <in from mailcowdockerized_dovecot-mailcow.mailcowdockerized_mailcow-network[d.d.d.d]; from=<this-is-the-redirecting-account@my-domain.com> to=<other-email@other-external-domain.com> proto=ESMTP helo=<container-id-b>: Received: from sieve (sieve [IPv6:c:c:c::c]) by my-domain.com (Postcow) with ESMTP id random-no-uno??for <this-is-the-redirecting-account@my-domain.com>; Wed, 23 Mar 2022 09:45:17 +0100 (CET)
postfix-mailcow    | Mar 23 09:45:18 container-id-a postfix/qmgr[373]: some-other-other-id: from=<this-is-the-redirecting-account@my-domain.com>, size=5549, nrcpt=1 (queue active)
postfix-mailcow    | Mar 23 09:45:18 container-id-a postfix/sogo/smtpd[2747]: disconnect from mailcowdockerized_dovecot-mailcow.mailcowdockerized_mailcow-network[d.d.d.d] ehlo=1 mail=1 rcpt=1 bdat=1 quit=1 commands=5
postfix-mailcow    | Mar 23 09:45:18 container-id-a postfix/sogo/smtpd[2747]: connect from mailcowdockerized_dovecot-mailcow.mailcowdockerized_mailcow-network[d.d.d.d]
postfix-mailcow    | Mar 23 09:45:18 container-id-a postfix/sogo/smtpd[2747]: some-other-other-other-id: client=mailcowdockerized_dovecot-mailcow.mailcowdockerized_mailcow-network[d.d.d.d]
postfix-mailcow    | Mar 23 09:45:18 container-id-a postfix/cleanup[2748]: some-other-other-other-id: replace: header Received: from container-id-b (mailcowdockerized_dovecot-mailcow.mailcowdockerized_mailcow-network [d.d.d.d])??by my-domain.com (Postcow) with ESMTP id some-other-other-other-id??for <second-internal-email-it-got-redirected@my-d from mailcowdockerized_dovecot-mailcow.mailcowdockerized_mailcow-network[d.d.d.d]; from=<this-is-the-redirecting-account@my-domain.com> to=<second-internal-email-it-got-redirected@my-domain.com> proto=ESMTP helo=<container-id-b>: Received: from sieve (sieve [d.d.d.d]) by my-domain.com (Postcow) with ESMTP id some-other-other-other-id??for <second-internal-email-it-got-redirected@my-domain.com>; Wed, 23 Mar 2022 09:45:18 +0100 (CET)
postfix-mailcow    | Mar 23 09:45:18 container-id-a postfix/cleanup[2748]: some-other-other-other-id: message-id=<dovecot-sieve-longnumber-smallernumber-onedigit@container-id-b>
postfix-mailcow    | Mar 23 09:45:18 container-id-a postfix/cleanup[2748]: some-other-other-other-id: replace: header Received: from quarantine (mailcowdockerized_dovecot-mailcow.mailcowdockerized_mailcow-network [IPv6:c:c:c::c])??by my-domain.com (Postcow) with ESMTP id random-no-uno??for <in from mailcowdockerized_dovecot-mailcow.mailcowdockerized_mailcow-network[d.d.d.d]; from=<this-is-the-redirecting-account@my-domain.com> to=<second-internal-email-it-got-redirected@my-domain.com> proto=ESMTP helo=<container-id-b>: Received: from sieve (sieve [IPv6:c:c:c::c]) by my-domain.com (Postcow) with ESMTP id random-no-uno??for <this-is-the-redirecting-account@my-domain.com>; Wed, 23 Mar 2022 09:45:17 +0100 (CET)
postfix-mailcow    | Mar 23 09:45:18 container-id-a postfix/smtp[2751]: Trusted TLS connection established to other-external.domain[f.f.f.f]:25: TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)
postfix-mailcow    | Mar 23 09:45:18 container-id-a postfix/qmgr[373]: some-other-other-other-id: from=<this-is-the-redirecting-account@my-domain.com>, size=5554, nrcpt=1 (queue active)
postfix-mailcow    | Mar 23 09:45:18 container-id-a postfix/sogo/smtpd[2747]: disconnect from mailcowdockerized_dovecot-mailcow.mailcowdockerized_mailcow-network[d.d.d.d] ehlo=1 mail=1 rcpt=1 bdat=1 quit=1 commands=5
postfix-mailcow    | Mar 23 09:45:18 container-id-a postfix/sogo/smtpd[2747]: connect from mailcowdockerized_dovecot-mailcow.mailcowdockerized_mailcow-network[d.d.d.d]
postfix-mailcow    | Mar 23 09:45:18 container-id-a postfix/lmtp[2750]: some-other-other-other-id: to=<second-internal-email-it-got-redirected@my-domain.com>, relay=dovecot[c:c:c::c]:24, delay=0.19, delays=0.14/0.01/0.01/0.02, dsn=2.0.0, status=sent (250 2.0.0 <second-internal-email-it-got-redirected@my-domain.com> some-other-other-string Saved)
postfix-mailcow    | Mar 23 09:45:18 container-id-a postfix/qmgr[373]: some-other-other-other-id: removed
postfix-mailcow    | Mar 23 09:45:18 container-id-a postfix/sogo/smtpd[2747]: some-other-times-four-id: client=mailcowdockerized_dovecot-mailcow.mailcowdockerized_mailcow-network[d.d.d.d]
postfix-mailcow    | Mar 23 09:45:18 container-id-a postfix/cleanup[2748]: some-other-times-four-id: replace: header Received: from container-id-b (mailcowdockerized_dovecot-mailcow.mailcowdockerized_mailcow-network [d.d.d.d])??by my-domain.com (Postcow) with ESMTP id some-other-times-four-id??for <personal-email@external-domain.com from mailcowdockerized_dovecot-mailcow.mailcowdockerized_mailcow-network[d.d.d.d]; from=<this-is-the-redirecting-account@my-domain.com> to=<personal-email@external-domain.com> proto=ESMTP helo=<container-id-b>: Received: from sieve (sieve [d.d.d.d]) by my-domain.com (Postcow) with ESMTP id some-other-times-four-id??for <personal-email@external-domain.com>; Wed, 23 Mar 2022 09:45:18 +0100 (CET)
postfix-mailcow    | Mar 23 09:45:18 container-id-a postfix/cleanup[2748]: some-other-times-four-id: message-id=<dovecot-sieve-1648200917-661141-3@container-id-b>
postfix-mailcow    | Mar 23 09:45:18 container-id-a postfix/cleanup[2748]: some-other-times-four-id: replace: header Received: from quarantine (mailcowdockerized_dovecot-mailcow.mailcowdockerized_mailcow-network [IPv6:c:c:c::c])??by my-domain.com (Postcow) with ESMTP id random-no-uno??for <in from mailcowdockerized_dovecot-mailcow.mailcowdockerized_mailcow-network[d.d.d.d]; from=<this-is-the-redirecting-account@my-domain.com> to=<personal-email@external-domain.com> proto=ESMTP helo=<container-id-b>: Received: from sieve (sieve [IPv6:c:c:c::c]) by my-domain.com (Postcow) with ESMTP id random-no-uno??for <this-is-the-redirecting-account@my-domain.com>; Wed, 23 Mar 2022 09:45:17 +0100 (CET)
postfix-mailcow    | Mar 23 09:45:18 container-id-a postfix/qmgr[373]: some-other-times-four-id: from=<this-is-the-redirecting-account@my-domain.com>, size=5540, nrcpt=1 (queue active)
postfix-mailcow    | Mar 23 09:45:18 container-id-a postfix/lmtp[2746]: random-no-uno: to=<this-is-the-redirecting-account@my-domain.com>, relay=dovecot[d.d.d.d]:24, delay=1.4, delays=0.09/0.17/0/1.2, dsn=2.0.0, status=sent (250 2.0.0 <this-is-the-redirecting-account@my-domain.com> some-string Saved)
postfix-mailcow    | Mar 23 09:45:18 container-id-a postfix/sogo/smtpd[2747]: disconnect from mailcowdockerized_dovecot-mailcow.mailcowdockerized_mailcow-network[d.d.d.d] ehlo=1 mail=1 rcpt=1 bdat=1 quit=1 commands=5
postfix-mailcow    | Mar 23 09:45:18 container-id-a postfix/qmgr[373]: random-no-uno: removed
postfix-mailcow    | Mar 23 09:45:18 container-id-a postfix/smtp[2755]: Verified TLS connection established to external.domain[e.e.e.e]:25: TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (P-256) server-signature RSA-PSS (2048 bits) server-digest SHA256
postfix-mailcow    | Mar 23 09:45:19 container-id-a postfix/smtp[2755]: some-other-times-four-id: to=<personal-email@external-domain.com>, relay=external.domain[e.e.e.e]:25, delay=0.57, delays=0.22/0.04/0.2/0.12, dsn=2.0.0, status=sent (250 Requested mail action okay, completed: id=this-is-an-id)
postfix-mailcow    | Mar 23 09:45:19 container-id-a postfix/qmgr[373]: some-other-times-four-id: removed
postfix-mailcow    | Mar 23 09:45:19 container-id-a postfix/smtp[2751]: some-other-other-id: to=<other-email@other-external-domain.com>, relay=other-external.domain[f.f.f.f]:25, delay=1.5, delays=0.15/0.04/0.12/1.2, dsn=2.0.0, status=sent (250 2.0.0 Ok: queued as A70BD61C31)
postfix-mailcow    | Mar 23 09:45:19 container-id-a postfix/qmgr[373]: some-other-other-id: removed

Steps to reproduce

  1. create custom qurantine message (that could be understood as spam or something like that)
  2. create at least two E-Mail accounts
  3. redirect via SoGo all messages from account A to account B
  4. send an E-Mail to account A that will be put into quarantine
  5. look into account B and don't find the quarantine notification message
  6. find the quarantine notification in your admin interface stating it was send from account A to account B and seeing it in quarantine

System information

.

milkmaker commented 2 years ago

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs.

jonathanmmm commented 2 years ago

have removed the custom message, but this is probably still not fixed?