Mailcow admin ui (/debug) white after update

lohrbini commented 1 year ago

Contribution guidelines

[X] I've read the contribution guidelines and wholeheartedly agree

I've found a bug and checked that ...

[X] ... I understand that not following the below instructions will result in immediate closure and/or deletion of my issue.
[X] ... I have understood that this bug report is dedicated for bugs, and not for support-related inquiries.
[X] ... I have understood that answers are voluntary and community-driven, and not commercial support.
[X] ... I have verified that my issue has not been already answered in the past. I also checked previous issues.

Description

Hello,

after updating mailcow to its latest version via the updater script the admin ui is redirecting all requests to `/debug`. The system has previously patched.

Logs:

theralthorsten-php-fpm-mailcow-1    | fd4d:6169:6c63:6f77::d -  26/Jan/2023:09:40:08 +0000 "GET /index.php" 302
theralthorsten-nginx-mailcow-1      | 10.7.0.8 - - [26/Jan/2023:09:40:08 +0000] "GET / HTTP/1.1" 302 5 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36"
theralthorsten-solr-mailcow-1       | 2023-01-26 09:40:08.775 INFO  (qtp1399701152-23) [   x:dovecot-fts] o.a.s.s.HttpSolrCall [admin] webapp=null path=/admin/cores params={core=dovecot-fts&action=STATUS&indexInfo=true} status=0 QTime=0
theralthorsten-solr-mailcow-1       | 2023-01-26 09:40:08.783 INFO  (qtp1399701152-14) [   ] o.a.s.s.HttpSolrCall [admin] webapp=null path=/admin/info/system params={} status=0 QTime=5
theralthorsten-dockerapi-mailcow-1  | INFO:     2023-01-26 09:40:08 api call: container_post__exec__system__df, container_id: 5d51b0a24e9e4403d497e0c714a668953c5d7546c6f43fd544a50d0469b813ec
theralthorsten-php-fpm-mailcow-1    | 10.255.18.10 -  26/Jan/2023:09:40:08 +0000 "GET /debug.php" 200
theralthorsten-nginx-mailcow-1      | 10.7.0.8 - - [26/Jan/2023:09:40:08 +0000] "GET /debug HTTP/1.1" 200 31 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36"
theralthorsten-watchdog-mailcow-1   | Thu Jan 26 09:40:11 UTC 2023 Olefy health level: 100% (5/5), health trend: 0
theralthorsten-php-fpm-mailcow-1    | fd4d:6169:6c63:6f77::d -  26/Jan/2023:09:40:14 +0000 "GET /index.php" 302
theralthorsten-nginx-mailcow-1      | 10.7.0.8 - - [26/Jan/2023:09:40:14 +0000] "GET / HTTP/1.1" 302 5 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36"
theralthorsten-solr-mailcow-1       | 2023-01-26 09:40:14.698 INFO  (qtp1399701152-17) [   x:dovecot-fts] o.a.s.s.HttpSolrCall [admin] webapp=null path=/admin/cores params={core=dovecot-fts&action=STATUS&indexInfo=true} status=0 QTime=0
theralthorsten-solr-mailcow-1       | 2023-01-26 09:40:14.706 INFO  (qtp1399701152-15) [   ] o.a.s.s.HttpSolrCall [admin] webapp=null path=/admin/info/system params={} status=0 QTime=5
theralthorsten-dockerapi-mailcow-1  | INFO:     2023-01-26 09:40:14 api call: container_post__exec__system__df, container_id: 5d51b0a24e9e4403d497e0c714a668953c5d7546c6f43fd544a50d0469b813ec
theralthorsten-php-fpm-mailcow-1    | 10.255.18.10 -  26/Jan/2023:09:40:14 +0000 "GET /debug.php" 200
theralthorsten-nginx-mailcow-1      | 10.7.0.8 - - [26/Jan/2023:09:40:14 +0000] "GET /debug HTTP/1.1" 200 31 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36"
theralthorsten-nginx-mailcow-1      | 10.255.18.2 - - [26/Jan/2023:09:40:15 +0000] "GET / HTTP/1.1" 200 15 "-" "check_http/v (nagios-plugins 2.4.2)"
theralthorsten-watchdog-mailcow-1   | Thu Jan 26 09:40:15 UTC 2023 Nginx health level: 100% (5/5), health trend: 0
theralthorsten-watchdog-mailcow-1   | Thu Jan 26 09:40:15 UTC 2023 Redis health level: 100% (5/5), health trend: 0
theralthorsten-php-fpm-mailcow-1    | fd4d:6169:6c63:6f77::d -  26/Jan/2023:09:40:16 +0000 "GET /index.php" 302
theralthorsten-nginx-mailcow-1      | 10.7.0.8 - - [26/Jan/2023:09:40:16 +0000] "GET / HTTP/1.1" 302 5 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36"
theralthorsten-solr-mailcow-1       | 2023-01-26 09:40:16.667 INFO  (qtp1399701152-17) [   x:dovecot-fts] o.a.s.s.HttpSolrCall [admin] webapp=null path=/admin/cores params={core=dovecot-fts&action=STATUS&indexInfo=true} status=0 QTime=0
theralthorsten-solr-mailcow-1       | 2023-01-26 09:40:16.675 INFO  (qtp1399701152-14) [   ] o.a.s.s.HttpSolrCall [admin] webapp=null path=/admin/info/system params={} status=0 QTime=5
theralthorsten-dockerapi-mailcow-1  | INFO:     2023-01-26 09:40:16 api call: container_post__exec__system__df, container_id: 5d51b0a24e9e4403d497e0c714a668953c5d7546c6f43fd544a50d0469b813ec
theralthorsten-php-fpm-mailcow-1    | 10.255.18.10 -  26/Jan/2023:09:40:16 +0000 "GET /debug.php" 200
theralthorsten-nginx-mailcow-1      | 10.7.0.8 - - [26/Jan/2023:09:40:16 +0000] "GET /debug HTTP/1.1" 200 31 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36"
theralthorsten-php-fpm-mailcow-1    | fd4d:6169:6c63:6f77::d -  26/Jan/2023:09:40:18 +0000 "GET /index.php" 302
theralthorsten-nginx-mailcow-1      | 10.7.0.8 - - [26/Jan/2023:09:40:18 +0000] "GET / HTTP/1.1" 302 5 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36"
theralthorsten-solr-mailcow-1       | 2023-01-26 09:40:18.367 INFO  (qtp1399701152-15) [   x:dovecot-fts] o.a.s.s.HttpSolrCall [admin] webapp=null path=/admin/cores params={core=dovecot-fts&action=STATUS&indexInfo=true} status=0 QTime=0
theralthorsten-solr-mailcow-1       | 2023-01-26 09:40:18.374 INFO  (qtp1399701152-20) [   ] o.a.s.s.HttpSolrCall [admin] webapp=null path=/admin/info/system params={} status=0 QTime=4
theralthorsten-dockerapi-mailcow-1  | INFO:     2023-01-26 09:40:18 api call: container_post__exec__system__df, container_id: 5d51b0a24e9e4403d497e0c714a668953c5d7546c6f43fd544a50d0469b813ec
theralthorsten-php-fpm-mailcow-1    | 10.255.18.10 -  26/Jan/2023:09:40:18 +0000 "GET /debug.php" 200
theralthorsten-nginx-mailcow-1      | 10.7.0.8 - - [26/Jan/2023:09:40:18 +0000] "GET /debug HTTP/1.1" 200 31 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36"
theralthorsten-php-fpm-mailcow-1    | fd4d:6169:6c63:6f77::d -  26/Jan/2023:09:40:19 +0000 "GET /index.php" 302
theralthorsten-nginx-mailcow-1      | 10.7.0.8 - - [26/Jan/2023:09:40:19 +0000] "GET / HTTP/1.1" 302 5 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36"
theralthorsten-solr-mailcow-1       | 2023-01-26 09:40:19.826 INFO  (qtp1399701152-15) [   x:dovecot-fts] o.a.s.s.HttpSolrCall [admin] webapp=null path=/admin/cores params={core=dovecot-fts&action=STATUS&indexInfo=true} status=0 QTime=0
theralthorsten-solr-mailcow-1       | 2023-01-26 09:40:19.835 INFO  (qtp1399701152-14) [   ] o.a.s.s.HttpSolrCall [admin] webapp=null path=/admin/info/system params={} status=0 QTime=7
theralthorsten-dockerapi-mailcow-1  | INFO:     2023-01-26 09:40:19 api call: container_post__exec__system__df, container_id: 5d51b0a24e9e4403d497e0c714a668953c5d7546c6f43fd544a50d0469b813ec
theralthorsten-dovecot-mailcow-1    | Jan 26 09:40:19 5d51b0a24e9e dovecot: lmtp(588): Connect from 10.255.18.2
theralthorsten-dovecot-mailcow-1    | Jan 26 09:40:19 5d51b0a24e9e dovecot: lmtp(588): Disconnect from 10.255.18.2: Logged out (state=MAIL FROM)
theralthorsten-php-fpm-mailcow-1    | 10.255.18.10 -  26/Jan/2023:09:40:19 +0000 "GET /debug.php" 200
theralthorsten-nginx-mailcow-1      | 10.7.0.8 - - [26/Jan/2023:09:40:19 +0000] "GET /debug HTTP/1.1" 200 31 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36"
theralthorsten-dovecot-mailcow-1    | Jan 26 09:40:19 5d51b0a24e9e dovecot: imap-login: Disconnected: Aborted login by logging out (no auth attempts in 0 secs): user=<>, rip=10.255.18.2, lip=10.255.18.250, TLS, TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
theralthorsten-dovecot-mailcow-1    | Jan 26 09:40:19 5d51b0a24e9e dovecot: imap-login: Disconnected: Aborted login by logging out (no auth attempts in 0 secs): user=<>, rip=10.255.18.2, lip=10.255.18.250
theralthorsten-dovecot-mailcow-1    | Jan 26 09:40:19 5d51b0a24e9e dovecot: managesieve-login: Disconnected: Connection closed (no auth attempts in 0 secs): user=<>, rip=10.255.18.2, lip=10.255.18.250
theralthorsten-watchdog-mailcow-1   | Thu Jan 26 09:40:19 UTC 2023 Dovecot health level: 100% (12/12), health trend: 0
theralthorsten-php-fpm-mailcow-1    | fd4d:6169:6c63:6f77::d -  26/Jan/2023:09:40:22 +0000 "HEAD /forwardinghosts.php" 200
theralthorsten-nginx-mailcow-1      | 10.255.18.12 - - [26/Jan/2023:09:40:22 +0000] "HEAD /forwardinghosts.php HTTP/1.1" 200 0 "-" "rspamd-3.4"
theralthorsten-php-fpm-mailcow-1    | 10.255.18.10 -  26/Jan/2023:09:40:22 +0000 "GET /forwardinghosts.php" 200
theralthorsten-nginx-mailcow-1      | 10.255.18.12 - - [26/Jan/2023:09:40:22 +0000] "GET /forwardinghosts.php HTTP/1.1" 200 72 "-" "rspamd-3.4"
theralthorsten-watchdog-mailcow-1   | Thu Jan 26 09:40:22 UTC 2023 Unbound health level: 100% (5/5), health trend: 0
theralthorsten-watchdog-mailcow-1   | Thu Jan 26 09:40:22 UTC 2023 Ratelimit health level: 100% (1/1), health trend: 0
theralthorsten-watchdog-mailcow-1   | Thu Jan 26 09:40:28 UTC 2023 Fail2ban health level: 100% (1/1), health trend: 0

Steps to reproduce:

# as root user
1. update mailcow to latest version with `bash update.sh`
2. login after update
2.1 login is redirecting to `/debug`
3. rollback to before update
3.1 login is working again
4. changing branch back to stable `bash update.sh --stable`
5. login redirects to `/debug` again

Which branch are you using?

master

Operating System:

Ubuntu 22.04 LTS

Server/VM specifications:

8GB, 4CPU

Is Apparmor, SELinux or similar active?

no

Virtualization technology:

Proxmox Qemu VM

Docker version:

20.10.23

docker-compose version or docker compose version:

v2.15.1

mailcow version:

2023-01a

Reverse proxy:

HAProxy TCP passthrough

Logs of git diff:

only certificates changing. not posting here

Logs of iptables -L -vn:

# Warning: iptables-legacy tables present, use iptables-legacy to see them
Chain INPUT (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         

Chain FORWARD (policy DROP 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         
 6054 2185K DOCKER-USER  all  --  *      *       0.0.0.0/0            0.0.0.0/0           
 6054 2185K DOCKER-ISOLATION-STAGE-1  all  --  *      *       0.0.0.0/0            0.0.0.0/0           
 4654 1917K ACCEPT     all  --  *      br-mailcow  0.0.0.0/0            0.0.0.0/0            ctstate RELATED,ESTABLISHED
  503 31008 DOCKER     all  --  *      br-mailcow  0.0.0.0/0            0.0.0.0/0           
  897  236K ACCEPT     all  --  br-mailcow !br-mailcow  0.0.0.0/0            0.0.0.0/0           
  393 24408 ACCEPT     all  --  br-mailcow br-mailcow  0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     all  --  *      docker0  0.0.0.0/0            0.0.0.0/0            ctstate RELATED,ESTABLISHED
    0     0 DOCKER     all  --  *      docker0  0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     all  --  docker0 !docker0  0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     all  --  docker0 docker0  0.0.0.0/0            0.0.0.0/0           

Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         

Chain DOCKER (2 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     tcp  --  !br-mailcow br-mailcow  0.0.0.0/0            10.255.18.249        tcp dpt:6379
    0     0 ACCEPT     tcp  --  !br-mailcow br-mailcow  0.0.0.0/0            10.255.18.3          tcp dpt:8983
    0     0 ACCEPT     tcp  --  !br-mailcow br-mailcow  0.0.0.0/0            10.255.18.9          tcp dpt:3306
  104  6240 ACCEPT     tcp  --  !br-mailcow br-mailcow  0.0.0.0/0            10.255.18.10         tcp dpt:1443
    0     0 ACCEPT     tcp  --  !br-mailcow br-mailcow  0.0.0.0/0            10.255.18.10         tcp dpt:1080
    0     0 ACCEPT     tcp  --  !br-mailcow br-mailcow  0.0.0.0/0            10.255.18.253        tcp dpt:587
    0     0 ACCEPT     tcp  --  !br-mailcow br-mailcow  0.0.0.0/0            10.255.18.250        tcp dpt:12345
    0     0 ACCEPT     tcp  --  !br-mailcow br-mailcow  0.0.0.0/0            10.255.18.250        tcp dpt:4190
    0     0 ACCEPT     tcp  --  !br-mailcow br-mailcow  0.0.0.0/0            10.255.18.253        tcp dpt:465
    0     0 ACCEPT     tcp  --  !br-mailcow br-mailcow  0.0.0.0/0            10.255.18.250        tcp dpt:995
    0     0 ACCEPT     tcp  --  !br-mailcow br-mailcow  0.0.0.0/0            10.255.18.253        tcp dpt:25
    6   360 ACCEPT     tcp  --  !br-mailcow br-mailcow  0.0.0.0/0            10.255.18.250        tcp dpt:993
    0     0 ACCEPT     tcp  --  !br-mailcow br-mailcow  0.0.0.0/0            10.255.18.250        tcp dpt:143
    0     0 ACCEPT     tcp  --  !br-mailcow br-mailcow  0.0.0.0/0            10.255.18.250        tcp dpt:110

Chain DOCKER-ISOLATION-STAGE-1 (1 references)
 pkts bytes target     prot opt in     out     source               destination         
  897  236K DOCKER-ISOLATION-STAGE-2  all  --  br-mailcow !br-mailcow  0.0.0.0/0            0.0.0.0/0           
    0     0 DOCKER-ISOLATION-STAGE-2  all  --  docker0 !docker0  0.0.0.0/0            0.0.0.0/0           
67364   30M RETURN     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain DOCKER-ISOLATION-STAGE-2 (2 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 DROP       all  --  *      br-mailcow  0.0.0.0/0            0.0.0.0/0           
    0     0 DROP       all  --  *      docker0  0.0.0.0/0            0.0.0.0/0           
 8775 5293K RETURN     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain DOCKER-USER (1 references)
 pkts bytes target     prot opt in     out     source               destination         
67364   30M RETURN     all  --  *      *       0.0.0.0/0            0.0.0.0/0

Logs of ip6tables -L -vn:

# Warning: ip6tables-legacy tables present, use ip6tables-legacy to see them
Chain INPUT (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         

Chain FORWARD (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         
 3368 2210K DOCKER-USER  all      *      *       ::/0                 ::/0                
29355   21M DOCKER-ISOLATION-STAGE-1  all      *      *       ::/0                 ::/0                
27616   20M DOCKER     all      *      br-mailcow  ::/0                 ::/0                
 9693   19M ACCEPT     all      *      br-mailcow  ::/0                 ::/0                 ctstate RELATED,ESTABLISHED
 1069 94858 ACCEPT     all      br-mailcow !br-mailcow  ::/0                 ::/0                
17923 1233K ACCEPT     all      br-mailcow br-mailcow  ::/0                 ::/0                

Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         

Chain DOCKER (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     tcp      !br-mailcow br-mailcow  ::/0                 fd4d:6169:6c63:6f77::d  tcp dpt:1080
    0     0 ACCEPT     tcp      !br-mailcow br-mailcow  ::/0                 fd4d:6169:6c63:6f77::d  tcp dpt:1443
    0     0 ACCEPT     tcp      !br-mailcow br-mailcow  ::/0                 fd4d:6169:6c63:6f77::e  tcp dpt:587
    0     0 ACCEPT     tcp      !br-mailcow br-mailcow  ::/0                 fd4d:6169:6c63:6f77::e  tcp dpt:25
    0     0 ACCEPT     tcp      !br-mailcow br-mailcow  ::/0                 fd4d:6169:6c63:6f77::e  tcp dpt:465
    0     0 ACCEPT     tcp      !br-mailcow br-mailcow  ::/0                 fd4d:6169:6c63:6f77::f  tcp dpt:110
    0     0 ACCEPT     tcp      !br-mailcow br-mailcow  ::/0                 fd4d:6169:6c63:6f77::f  tcp dpt:143
    0     0 ACCEPT     tcp      !br-mailcow br-mailcow  ::/0                 fd4d:6169:6c63:6f77::f  tcp dpt:4190
    0     0 ACCEPT     tcp      !br-mailcow br-mailcow  ::/0                 fd4d:6169:6c63:6f77::f  tcp dpt:993
    0     0 ACCEPT     tcp      !br-mailcow br-mailcow  ::/0                 fd4d:6169:6c63:6f77::f  tcp dpt:995

Chain DOCKER-ISOLATION-STAGE-1 (1 references)
 pkts bytes target     prot opt in     out     source               destination         
  168 14892 DOCKER-ISOLATION-STAGE-2  all      br-mailcow !br-mailcow  ::/0                 ::/0                
 3368 2210K RETURN     all      *      *       ::/0                 ::/0                

Chain DOCKER-ISOLATION-STAGE-2 (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 DROP       all      *      br-mailcow  ::/0                 ::/0                
  168 14892 RETURN     all      *      *       ::/0                 ::/0                

Chain DOCKER-USER (1 references)
 pkts bytes target     prot opt in     out     source               destination         
29323   21M RETURN     all      *      *       ::/0                 ::/0

Logs of iptables -L -vn -t nat:

# Warning: iptables-legacy tables present, use iptables-legacy to see them
Chain PREROUTING (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         
 1314 79790 DOCKER     all  --  *      *       0.0.0.0/0            0.0.0.0/0            ADDRTYPE match dst-type LOCAL

Chain INPUT (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         

Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 DOCKER     all  --  *      *       0.0.0.0/0           !127.0.0.0/8          ADDRTYPE match dst-type LOCAL

Chain POSTROUTING (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         
  192 13593 MASQUERADE  all  --  *      !br-mailcow  10.255.18.0/24       0.0.0.0/0           
    0     0 MASQUERADE  all  --  *      !docker0  172.17.0.0/16        0.0.0.0/0           
    0     0 MASQUERADE  tcp  --  *      *       10.255.18.249        10.255.18.249        tcp dpt:6379
    0     0 MASQUERADE  tcp  --  *      *       10.255.18.3          10.255.18.3          tcp dpt:8983
    0     0 MASQUERADE  tcp  --  *      *       10.255.18.9          10.255.18.9          tcp dpt:3306
    0     0 MASQUERADE  tcp  --  *      *       10.255.18.10         10.255.18.10         tcp dpt:1443
    0     0 MASQUERADE  tcp  --  *      *       10.255.18.10         10.255.18.10         tcp dpt:1080
    0     0 MASQUERADE  tcp  --  *      *       10.255.18.253        10.255.18.253        tcp dpt:587
    0     0 MASQUERADE  tcp  --  *      *       10.255.18.250        10.255.18.250        tcp dpt:12345
    0     0 MASQUERADE  tcp  --  *      *       10.255.18.250        10.255.18.250        tcp dpt:4190
    0     0 MASQUERADE  tcp  --  *      *       10.255.18.253        10.255.18.253        tcp dpt:465
    0     0 MASQUERADE  tcp  --  *      *       10.255.18.250        10.255.18.250        tcp dpt:995
    0     0 MASQUERADE  tcp  --  *      *       10.255.18.253        10.255.18.253        tcp dpt:25
    0     0 MASQUERADE  tcp  --  *      *       10.255.18.250        10.255.18.250        tcp dpt:993
    0     0 MASQUERADE  tcp  --  *      *       10.255.18.250        10.255.18.250        tcp dpt:143
    0     0 MASQUERADE  tcp  --  *      *       10.255.18.250        10.255.18.250        tcp dpt:110

Chain DOCKER (2 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 RETURN     all  --  br-mailcow *       0.0.0.0/0            0.0.0.0/0           
    0     0 RETURN     all  --  docker0 *       0.0.0.0/0            0.0.0.0/0           
    0     0 DNAT       tcp  --  !br-mailcow *       0.0.0.0/0            127.0.0.1            tcp dpt:7654 to:10.255.18.249:6379
    0     0 DNAT       tcp  --  !br-mailcow *       0.0.0.0/0            127.0.0.1            tcp dpt:18983 to:10.255.18.3:8983
    0     0 DNAT       tcp  --  !br-mailcow *       0.0.0.0/0            127.0.0.1            tcp dpt:33306 to:10.255.18.9:3306
  120  7200 DNAT       tcp  --  !br-mailcow *       0.0.0.0/0            0.0.0.0/0            tcp dpt:1443 to:10.255.18.10:1443
    0     0 DNAT       tcp  --  !br-mailcow *       0.0.0.0/0            0.0.0.0/0            tcp dpt:1080 to:10.255.18.10:1080
    0     0 DNAT       tcp  --  !br-mailcow *       0.0.0.0/0            0.0.0.0/0            tcp dpt:587 to:10.255.18.253:587
    0     0 DNAT       tcp  --  !br-mailcow *       0.0.0.0/0            127.0.0.1            tcp dpt:19991 to:10.255.18.250:12345
    0     0 DNAT       tcp  --  !br-mailcow *       0.0.0.0/0            0.0.0.0/0            tcp dpt:14190 to:10.255.18.250:4190
    0     0 DNAT       tcp  --  !br-mailcow *       0.0.0.0/0            0.0.0.0/0            tcp dpt:465 to:10.255.18.253:465
    0     0 DNAT       tcp  --  !br-mailcow *       0.0.0.0/0            0.0.0.0/0            tcp dpt:995 to:10.255.18.250:995
    0     0 DNAT       tcp  --  !br-mailcow *       0.0.0.0/0            0.0.0.0/0            tcp dpt:25 to:10.255.18.253:25
    6   360 DNAT       tcp  --  !br-mailcow *       0.0.0.0/0            0.0.0.0/0            tcp dpt:993 to:10.255.18.250:993
    0     0 DNAT       tcp  --  !br-mailcow *       0.0.0.0/0            0.0.0.0/0            tcp dpt:143 to:10.255.18.250:143
    0     0 DNAT       tcp  --  !br-mailcow *       0.0.0.0/0            0.0.0.0/0            tcp dpt:110 to:10.255.18.250:110

Logs of ip6tables -L -vn -t nat:

root@mailer:/etc/data/mail/mailcow-dockerized# ip6tables -L -vn -t nat
# Warning: ip6tables-legacy tables present, use ip6tables-legacy to see them
Chain PREROUTING (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 DOCKER     all      *      *       ::/0                 ::/0                 ADDRTYPE match dst-type LOCAL

Chain INPUT (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         

Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 DOCKER     all      *      *       ::/0                !::1                  ADDRTYPE match dst-type LOCAL

Chain POSTROUTING (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 MASQUERADE  all      *      br-mailcow  ::/0                 ::/0                 ADDRTYPE match dst-type LOCAL
  992 88674 MASQUERADE  all      *      !br-mailcow  fd4d:6169:6c63:6f77::/64  ::/0                
    0     0 MASQUERADE  tcp      *      *       fd4d:6169:6c63:6f77::d  fd4d:6169:6c63:6f77::d  tcp dpt:1080
    0     0 MASQUERADE  tcp      *      *       fd4d:6169:6c63:6f77::d  fd4d:6169:6c63:6f77::d  tcp dpt:1443
    0     0 MASQUERADE  tcp      *      *       fd4d:6169:6c63:6f77::e  fd4d:6169:6c63:6f77::e  tcp dpt:587
    0     0 MASQUERADE  tcp      *      *       fd4d:6169:6c63:6f77::e  fd4d:6169:6c63:6f77::e  tcp dpt:25
    0     0 MASQUERADE  tcp      *      *       fd4d:6169:6c63:6f77::e  fd4d:6169:6c63:6f77::e  tcp dpt:465
    0     0 MASQUERADE  tcp      *      *       fd4d:6169:6c63:6f77::f  fd4d:6169:6c63:6f77::f  tcp dpt:110
    0     0 MASQUERADE  tcp      *      *       fd4d:6169:6c63:6f77::f  fd4d:6169:6c63:6f77::f  tcp dpt:143
    0     0 MASQUERADE  tcp      *      *       fd4d:6169:6c63:6f77::f  fd4d:6169:6c63:6f77::f  tcp dpt:4190
    0     0 MASQUERADE  tcp      *      *       fd4d:6169:6c63:6f77::f  fd4d:6169:6c63:6f77::f  tcp dpt:993
    0     0 MASQUERADE  tcp      *      *       fd4d:6169:6c63:6f77::f  fd4d:6169:6c63:6f77::f  tcp dpt:995
    0     0 MASQUERADE  tcp      *      *       fd4d:6169:6c63:6f77::f  fd4d:6169:6c63:6f77::f  tcp dpt:25
    0     0 MASQUERADE  tcp      *      *       fd4d:6169:6c63:6f77::f  fd4d:6169:6c63:6f77::f  tcp dpt:465
    0     0 MASQUERADE  tcp      *      *       fd4d:6169:6c63:6f77::f  fd4d:6169:6c63:6f77::f  tcp dpt:587
    0     0 MASQUERADE  tcp      *      *       fd4d:6169:6c63:6f77::e  fd4d:6169:6c63:6f77::e  tcp dpt:110
    0     0 MASQUERADE  tcp      *      *       fd4d:6169:6c63:6f77::e  fd4d:6169:6c63:6f77::e  tcp dpt:143
    0     0 MASQUERADE  tcp      *      *       fd4d:6169:6c63:6f77::e  fd4d:6169:6c63:6f77::e  tcp dpt:4190
    0     0 MASQUERADE  tcp      *      *       fd4d:6169:6c63:6f77::e  fd4d:6169:6c63:6f77::e  tcp dpt:993
    0     0 MASQUERADE  tcp      *      *       fd4d:6169:6c63:6f77::e  fd4d:6169:6c63:6f77::e  tcp dpt:995
    0     0 MASQUERADE  tcp      *      *       fd4d:6169:6c63:6f77::4  fd4d:6169:6c63:6f77::4  tcp dpt:110
    0     0 MASQUERADE  tcp      *      *       fd4d:6169:6c63:6f77::4  fd4d:6169:6c63:6f77::4  tcp dpt:143
    0     0 MASQUERADE  tcp      *      *       fd4d:6169:6c63:6f77::4  fd4d:6169:6c63:6f77::4  tcp dpt:4190
    0     0 MASQUERADE  tcp      *      *       fd4d:6169:6c63:6f77::4  fd4d:6169:6c63:6f77::4  tcp dpt:993
    0     0 MASQUERADE  tcp      *      *       fd4d:6169:6c63:6f77::4  fd4d:6169:6c63:6f77::4  tcp dpt:995
    0     0 MASQUERADE  tcp      *      *       fd4d:6169:6c63:6f77::7  fd4d:6169:6c63:6f77::7  tcp dpt:1080
    0     0 MASQUERADE  tcp      *      *       fd4d:6169:6c63:6f77::7  fd4d:6169:6c63:6f77::7  tcp dpt:1443
    0     0 MASQUERADE  tcp      *      *       fd4d:6169:6c63:6f77::10  fd4d:6169:6c63:6f77::10  tcp dpt:25
    0     0 MASQUERADE  tcp      *      *       fd4d:6169:6c63:6f77::10  fd4d:6169:6c63:6f77::10  tcp dpt:465
    0     0 MASQUERADE  tcp      *      *       fd4d:6169:6c63:6f77::10  fd4d:6169:6c63:6f77::10  tcp dpt:587

Chain DOCKER (2 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 RETURN     all      br-mailcow *       ::/0                 ::/0                
    0     0 DNAT       tcp      !br-mailcow *       ::/0                 ::/0                 tcp dpt:1080 to:[fd4d:6169:6c63:6f77::d]:1080
    0     0 DNAT       tcp      !br-mailcow *       ::/0                 ::/0                 tcp dpt:1443 to:[fd4d:6169:6c63:6f77::d]:1443
    0     0 DNAT       tcp      !br-mailcow *       ::/0                 ::/0                 tcp dpt:587 to:[fd4d:6169:6c63:6f77::e]:587
    0     0 DNAT       tcp      !br-mailcow *       ::/0                 ::/0                 tcp dpt:25 to:[fd4d:6169:6c63:6f77::e]:25
    0     0 DNAT       tcp      !br-mailcow *       ::/0                 ::/0                 tcp dpt:465 to:[fd4d:6169:6c63:6f77::e]:465
    0     0 DNAT       tcp      !br-mailcow *       ::/0                 ::/0                 tcp dpt:110 to:[fd4d:6169:6c63:6f77::f]:110
    0     0 DNAT       tcp      !br-mailcow *       ::/0                 ::/0                 tcp dpt:143 to:[fd4d:6169:6c63:6f77::f]:143
    0     0 DNAT       tcp      !br-mailcow *       ::/0                 ::/0                 tcp dpt:14190 to:[fd4d:6169:6c63:6f77::f]:4190
    0     0 DNAT       tcp      !br-mailcow *       ::/0                 ::/0                 tcp dpt:993 to:[fd4d:6169:6c63:6f77::f]:993
    0     0 DNAT       tcp      !br-mailcow *       ::/0                 ::/0                 tcp dpt:995 to:[fd4d:6169:6c63:6f77::f]:995

DNS check:

root@mailer:/etc/data/mail/mailcow-dockerized# docker exec -it $(docker ps -qf name=acme-mailcow) dig +short stackoverflow.com @172.22.1.254
151.101.193.69
151.101.129.69
151.101.1.69
151.101.65.69

DerLinkman commented 1 year ago

Not a bug. Those changes have been made since 2022-12 the new Status page.

lohrbini commented 1 year ago

Then the redirect after the login is wrong? Manually adjusting the path to /admin works

DerLinkman commented 1 year ago

No there is nothing wrong. This is the new redirect. The new default page so to say.

lohrbini commented 1 year ago

but it is an empty page ?

DerLinkman commented 1 year ago

That is indeed a error then. Can you give me your entered Timezone? It is possible that this breaked the debug page due to some changes in the accepted Timzones Syntaxes.

Does the Browserconsole (F12) say anything about this?

lohrbini commented 1 year ago

The configured timezone from mailcow.conf is

# Your timezone
# See https://en.wikipedia.org/wiki/List_of_tz_database_time_zones for a list of timezones
# Use the row named 'TZ database name' + pay attention for 'Notes' row

TZ=Etc

The browser console (F12) shows an empty response and that their is no response data

MAGICCC commented 1 year ago

Can you try to use Etc/UTC or Europe/London?

DerLinkman commented 1 year ago

The configured timezone from mailcow.conf is
# Your timezone
# See https://en.wikipedia.org/wiki/List_of_tz_database_time_zones for a list of timezones
# Use the row named 'TZ database name' + pay attention for 'Notes' row

TZ=Etc
The browser console (F12) shows an empty response and that their is no response data

Only ETC as a timezone is not possible. That's the reason you're getting a blank page.

Change it according to your location and like the syntax here: https://en.wikipedia.org/wiki/List_of_tz_database_time_zones

lohrbini commented 1 year ago

Yes. You're right. Its working now with the latest update. Still interesting why this timezone setting worked until today's update.

Thanks!

mailcow / mailcow-dockerized