search

mailcow / mailcow-dockerized

mailcow: dockerized - 🐮 + 🐋 = 💕
https://mailcow.email
GNU General Public License v3.0
8.34k stars 1.13k forks source link

Debian 12 and native IPv6 not working (connection refused) #5420

Closed ro78 closed 8 months ago

ro78 commented 10 months ago

Contribution guidelines

I've found a bug and checked that ...

Description

After reinstalling a server and moving from Debian 11 to 12, native installation of mailcow was fine, both in IPv4 and IPv6.

After checking for an update availability using the upgrade script, I accepted to enable native IPv6. Since this, Dovecot wasn't available over IPv6 (connection refused).

I started 2 fresh virtual machines on OVH Public Cloud, one with Debian 11 and another one with Debian 12.

After native installation of mailcow, I can do telnet on IPv6 on port 25 and 110 on both of them.

After running the upgrade script and enabling native IPv6, Debian 11 is fine (both IPv4 and IPv6 telnet are working on port 25 and 110), but Debian 12 has the same issue than my initial problem: Dovecot is not responding on port 110 over IPv6. Only IPv4. 

Dovecot container is running fine and Docker is listeting on IPv6.

Logs:

7c334a5e4f4a   mailcow/dovecot:1.24     "/docker-entrypoint.…"   4 minutes ago   Up 4 minutes             0.0.0.0:110->110/tcp, :::110->110/tcp, 0.0.0.0:143->143/tcp, :::143->143/tcp, 0.0.0.0:993->993/tcp, :::993->993/tcp, 0.0.0.0:995->995/tcp, :::995->995/tcp, 0.0.0.0:4190->4190/tcp, :::4190->4190/tcp, 127.0.0.1:19991->12345/tcp   mailcowdockerized-dovecot-mailcow-1

12852 /usr/bin/docker-proxy -proto tcp -host-ip :: -host-port 110 -container-ip fd4d:6169:6c63:6f77::e -container-port 110

Steps to reproduce:

1. Installer mailcow on a fresh Debian 12
2. Start mailcow
3. Test that you can telnet your IPv6 on port 25 and 110
4. Run the upgrade script, accept to enable native IPv6
5. Run the same telnet, issues over IPv6

Which branch are you using?

master

Operating System:

Debian 12

Server/VM specifications:

2 CPU, 16 GB of RAM

Is Apparmor, SELinux or similar active?

No

Virtualization technology:

KVM

Docker version:

24.0.6

docker-compose version or docker compose version:

v2.21.0

mailcow version:

2023-08

Reverse proxy:

N/A

Logs of git diff:

diff --git a/data/assets/ssl-example/cert.pem b/data/assets/ssl-example/cert.pem
index 96d16bec..cb30e21b 100644
--- a/data/assets/ssl-example/cert.pem
+++ b/data/assets/ssl-example/cert.pem
@@ -1,19 +1,33 @@
 -----BEGIN CERTIFICATE-----
-MIIDBDCCAe6gAwIBAgIQeJMoL/3dxhxhT9EwuRTL/DALBgkqhkiG9w0BAQswEjEQ
-MA4GA1UEChMHbWFpbGNvdzAeFw0xNjEyMTMxMDExMDBaFw0xOTExMjgxMDExMDBa
-MC0xEDAOBgNVBAoTB21haWxjb3cxGTAXBgNVBAMTEG1haWwuZXhhbXBsZS5vcmcw
-ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRg0xT3At9DSb3H5OMp3K1
-MpXAgYyotSK6TS61fC0QEHy2fMXiws7Agcye6Ln7CG63Fe1eN2jkdlefy9xJivS8
-y5w0M8i168v5znzC8fnylL2iOiSYfK/B/oEqfU7YH4RcegO53oDDIUZmi4Frgnu7
-39VVOU1ZyHEVqGJ2H2aAIkoZRjGzumD9Ym4LWGidtKJzBgFt/qmhUeWXipM8w281
-XkQnJU79+x2ywnJSvEZ3r/ZVJC7kbjiVw+/k15k9Cxk6Ik8wmJ0X/+xWxoZomHQI
-1LM0VKAS/iaU95dn2bplvL6jTiiyWAbrMjSKs4XbPt/fIbOicNkj6+CFy0MVfyyH
-AgMBAAGjPzA9MA4GA1UdDwEB/wQEAwIAqDAdBgNVHSUEFjAUBggrBgEFBQcDAgYI
-KwYBBQUHAwEwDAYDVR0TAQH/BAIwADALBgkqhkiG9w0BAQsDggEBAI/jBJa1P8nB
-eHUN5muQmjBVDVOYyWAAEapOe2HYsBcpjaB2H8Iw3DQzJtz6peYeYSCmHRVqFLCm
-VPrq36l9mPUotyPDPlQQAxCj9R2+WbGaJO+N/E1F8FQ94dr3jqwUyfjVPoqEjmIH
-NFkvbA0RJOeBm9oYGdhM0wjOBV9c9MTHFG82nQ/zQeTuPb7GXuKIOXYCxoLNOZMw
-UJ02Cqjv5ImrgOhcstAKX3Ip0urSvZUGvtPla4CGh+M6yDFJ08GzX6OiMIH207RW
-jAbUXXERSUv/7hysdDjGo5HZjCeMzVu9KAxoZXqnmvkk8g2swKWtWBRcoeU1VGx0
-Bx4Q4KMjuYQ=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 -----END CERTIFICATE-----
diff --git a/data/assets/ssl-example/key.pem b/data/assets/ssl-example/key.pem
index cedf35a0..4f8a9f60 100644
--- a/data/assets/ssl-example/key.pem
+++ b/data/assets/ssl-example/key.pem
@@ -1,27 +1,52 @@
------BEGIN RSA PRIVATE KEY-----
-MIIEpAIBAAKCAQEA0YNMU9wLfQ0m9x+TjKdytTKVwIGMqLUiuk0utXwtEBB8tnzF
-4sLOwIHMnui5+whutxXtXjdo5HZXn8vcSYr0vMucNDPItevL+c58wvH58pS9ojok
-mHyvwf6BKn1O2B+EXHoDud6AwyFGZouBa4J7u9/VVTlNWchxFahidh9mgCJKGUYx
-s7pg/WJuC1honbSicwYBbf6poVHll4qTPMNvNV5EJyVO/fsdssJyUrxGd6/2VSQu
-5G44lcPv5NeZPQsZOiJPMJidF//sVsaGaJh0CNSzNFSgEv4mlPeXZ9m6Zby+o04o
-slgG6zI0irOF2z7f3yGzonDZI+vghctDFX8shwIDAQABAoIBAQC9kiLnIgxXGyZt
-pmmYdA6re1jatZ2zLSp+DcY8ul3/0hs195IKCyCOOSQPiR520Pt0t+duP46uYZIJ
-aakp9gxaI5Vz+oMacH/AyaBDuDTj1Mf9WMSyIOfbDVCMRJOppGLcVh62+Gfjp2EO
-+h2hTJBuvypFkbK2kVIZOaHVpbXWKw1oYuEcTftk9XfxxvfSMw1HQ12/P2CAcbaa
-jPmVbisunv6kpXtewSBTcaLSYWJf1MYD5Hi8fzkD2FJSXYbfQd8RKvT2rj6FA7ux
-CDMzbYhdnd7lc63OARCIjfCRNtDT1cZ3gR1CQHD98lWxmPQIZukv+w7s/bSrFgnQ
-ROZ0ghBJAoGBAOmE/3d5FDmp0aJNxXynKcRGdpEEM4O40RIdqa2eR6Pa7aTRosao
-z0qVgdFuJrqjlB3jgedxXEX1M0abCUzzM9Q5F7JLl+KsjwRwpkIOkPiyUncLp7LK
-QbY3tvYBIdpjlF1USOMGRL4j11hqr4vQC/yPBF7jj81kCZDTbmZhp82jAoGBAOWu
-ql5QFUOlmqkuWIAFkiLEZhOu+ptqkE+zG50CCGMJIX0dJ2PHXFyNGInomAeT0nbI
-pbnK3x7KeEKiGrAqZFNCTHhApTwkrIj0L/RQbMDZ7u7j1AEUVNFEhIm62kg84FtG
-xtfxVxredE+NQc/tyV3hXegdNZxegALirlcMKIvNAoGAWFwIxk48Ru1o8z72QQqH
-lUsMRicOzwK5qV8r+xPvC6MlVL42F3F8rj4QFwzU/r4yp3SUjNyqC5aSRl8Xj9Re
-gijwPHi6Cf09SHLPliMo29GtvnnchJxfbPF7+23GP3p6gy4HPk/65u9s5nnH3uFk
-B7ad8sGsgg0eSXyXQ4okEn0CgYEAnogPuedGthlxBgMiPMMbmfm7hyyId4t3Ljuu
-/JExnsHnpobf8EPjoVIWNOIhRWGnrCtUEEhR9tvDZCKljyDDfKBPTdU496lMmX8K
-NnToi7gg7iy84T3aSVMktDgPgDrclMPmbZh8CeSvnVUfrtgu3Ci4+4Rlw5eKffNe
-aGDQ/6UCgYAbUq9mRT2WOXIo+Dchi9VzDWgtfOw5VEyqkSpb7hPiIYx5jNaENnVK
-cAi3iqbBgPJBuMlTrKmmaxdmssGOEZNJLuuXLDbCU+f5cpu5PQ4crC6UtRI5rlhp
-8Yc+oiv3HWbSw3sVRpMFB6NP4DnvgFW3B2Wdfb/lNzPCKWqBsX7gWw==
------END RSA PRIVATE KEY-----
+-----BEGIN PRIVATE KEY-----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+-----END PRIVATE KEY-----
diff --git a/data/conf/postfix/main.cf b/data/conf/postfix/main.cf
index 237b4263..a5fbeb0d 100644
--- a/data/conf/postfix/main.cf
+++ b/data/conf/postfix/main.cf
@@ -170,3 +170,33 @@ parent_domain_matches_subdomains = debug_peer_list,fast_flush_domains,mynetworks

 # DO NOT EDIT ANYTHING BELOW #
 # Overrides #
+
+postscreen_dnsbl_sites = wl.mailspike.net=127.0.0.[18;19;20]*-2
+  hostkarma.junkemailfilter.com=127.0.0.1*-2
+  list.dnswl.org=127.0.[0..255].0*-2
+  list.dnswl.org=127.0.[0..255].1*-4
+  list.dnswl.org=127.0.[0..255].2*-6
+  list.dnswl.org=127.0.[0..255].3*-8
+  ix.dnsbl.manitu.net*2
+  bl.spamcop.net*2
+  bl.suomispam.net*2
+  hostkarma.junkemailfilter.com=127.0.0.2*3
+  hostkarma.junkemailfilter.com=127.0.0.4*2
+  hostkarma.junkemailfilter.com=127.0.1.2*1
+  backscatter.spameatingmonkey.net*2
+  bl.ipv6.spameatingmonkey.net*2
+  bl.spameatingmonkey.net*2
+  b.barracudacentral.org=127.0.0.2*7
+  bl.mailspike.net=127.0.0.2*5
+  bl.mailspike.net=127.0.0.[10;11;12]*4
+  dnsbl.sorbs.net=127.0.0.10*8
+  dnsbl.sorbs.net=127.0.0.5*6
+  dnsbl.sorbs.net=127.0.0.7*3
+  dnsbl.sorbs.net=127.0.0.8*2
+  dnsbl.sorbs.net=127.0.0.6*2
+  dnsbl.sorbs.net=127.0.0.9*2
+
+
+# User Overrides
+myhostname = deb12.borezo.info
+
diff --git a/docker-compose.yml b/docker-compose.yml
index ac45857f..18bf3c6e 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -584,36 +584,6 @@ services:
           aliases:
             - ofelia

-    ipv6nat-mailcow:
-      depends_on:
-        - unbound-mailcow
-        - mysql-mailcow
-        - redis-mailcow
-        - clamd-mailcow
-        - rspamd-mailcow
-        - php-fpm-mailcow
-        - sogo-mailcow
-        - dovecot-mailcow
-        - postfix-mailcow
-        - memcached-mailcow
-        - nginx-mailcow
-        - acme-mailcow
-        - netfilter-mailcow
-        - watchdog-mailcow
-        - dockerapi-mailcow
-        - solr-mailcow
-      environment:
-        - TZ=${TZ}
-      image: robbertkl/ipv6nat
-      security_opt:
-        - label=disable
-      restart: always
-      privileged: true
-      network_mode: "host"
-      volumes:
-        - /var/run/docker.sock:/var/run/docker.sock:ro
-        - /lib/modules:/lib/modules:ro
-
 networks:
   mailcow-network:
     driver: bridge

Logs of iptables -L -vn:

# Warning: iptables-legacy tables present, use iptables-legacy to see them
Chain INPUT (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination

Chain FORWARD (policy DROP 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination
12397 1984K DOCKER-USER  0    --  *      *       0.0.0.0/0            0.0.0.0/0
12397 1984K DOCKER-ISOLATION-STAGE-1  0    --  *      *       0.0.0.0/0            0.0.0.0/0
10146 1817K ACCEPT     0    --  *      br-mailcow  0.0.0.0/0            0.0.0.0/0            ctstate RELATED,ESTABLISHED
 1039 65205 DOCKER     0    --  *      br-mailcow  0.0.0.0/0            0.0.0.0/0
 1212  103K ACCEPT     0    --  br-mailcow !br-mailcow  0.0.0.0/0            0.0.0.0/0
 1035 65005 ACCEPT     0    --  br-mailcow br-mailcow  0.0.0.0/0            0.0.0.0/0
    0     0 ACCEPT     0    --  *      docker0  0.0.0.0/0            0.0.0.0/0            ctstate RELATED,ESTABLISHED
    0     0 DOCKER     0    --  *      docker0  0.0.0.0/0            0.0.0.0/0
    0     0 ACCEPT     0    --  docker0 !docker0  0.0.0.0/0            0.0.0.0/0
    0     0 ACCEPT     0    --  docker0 docker0  0.0.0.0/0            0.0.0.0/0

Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination

Chain DOCKER (2 references)
 pkts bytes target     prot opt in     out     source               destination
    0     0 ACCEPT     6    --  !br-mailcow br-mailcow  0.0.0.0/0            172.22.1.3           tcp dpt:8983
    0     0 ACCEPT     6    --  !br-mailcow br-mailcow  0.0.0.0/0            172.22.1.249         tcp dpt:6379
    0     0 ACCEPT     6    --  !br-mailcow br-mailcow  0.0.0.0/0            172.22.1.7           tcp dpt:3306
    1    52 ACCEPT     6    --  !br-mailcow br-mailcow  0.0.0.0/0            172.22.1.253         tcp dpt:587
    0     0 ACCEPT     6    --  !br-mailcow br-mailcow  0.0.0.0/0            172.22.1.250         tcp dpt:12345
    0     0 ACCEPT     6    --  !br-mailcow br-mailcow  0.0.0.0/0            172.22.1.250         tcp dpt:4190
    0     0 ACCEPT     6    --  !br-mailcow br-mailcow  0.0.0.0/0            172.22.1.10          tcp dpt:443
    1    52 ACCEPT     6    --  !br-mailcow br-mailcow  0.0.0.0/0            172.22.1.253         tcp dpt:465
    0     0 ACCEPT     6    --  !br-mailcow br-mailcow  0.0.0.0/0            172.22.1.250         tcp dpt:995
    1    44 ACCEPT     6    --  !br-mailcow br-mailcow  0.0.0.0/0            172.22.1.10          tcp dpt:80
    1    52 ACCEPT     6    --  !br-mailcow br-mailcow  0.0.0.0/0            172.22.1.253         tcp dpt:25
    0     0 ACCEPT     6    --  !br-mailcow br-mailcow  0.0.0.0/0            172.22.1.250         tcp dpt:993
    0     0 ACCEPT     6    --  !br-mailcow br-mailcow  0.0.0.0/0            172.22.1.250         tcp dpt:143
    0     0 ACCEPT     6    --  !br-mailcow br-mailcow  0.0.0.0/0            172.22.1.250         tcp dpt:110

Chain DOCKER-ISOLATION-STAGE-1 (1 references)
 pkts bytes target     prot opt in     out     source               destination
 1212  103K DOCKER-ISOLATION-STAGE-2  0    --  br-mailcow !br-mailcow  0.0.0.0/0            0.0.0.0/0
    0     0 DOCKER-ISOLATION-STAGE-2  0    --  docker0 !docker0  0.0.0.0/0            0.0.0.0/0
14627 2574K RETURN     0    --  *      *       0.0.0.0/0            0.0.0.0/0

Chain DOCKER-ISOLATION-STAGE-2 (2 references)
 pkts bytes target     prot opt in     out     source               destination
    0     0 DROP       0    --  *      br-mailcow  0.0.0.0/0            0.0.0.0/0
    0     0 DROP       0    --  *      docker0  0.0.0.0/0            0.0.0.0/0
 1402  117K RETURN     0    --  *      *       0.0.0.0/0            0.0.0.0/0

Chain DOCKER-USER (1 references)
 pkts bytes target     prot opt in     out     source               destination
20744 4150K RETURN     0    --  *      *       0.0.0.0/0            0.0.0.0/0

Logs of ip6tables -L -vn:

# Warning: ip6tables-legacy tables present, use ip6tables-legacy to see them
Chain INPUT (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination

Chain FORWARD (policy DROP 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination
 5464  541K DOCKER-USER  0    --  *      *       ::/0                 ::/0
 5464  541K DOCKER-ISOLATION-STAGE-1  0    --  *      *       ::/0                 ::/0
 1677  278K ACCEPT     0    --  *      br-mailcow  ::/0                 ::/0                 ctstate RELATED,ESTABLISHED
 3491  235K DOCKER     0    --  *      br-mailcow  ::/0                 ::/0
  296 27658 ACCEPT     0    --  br-mailcow !br-mailcow  ::/0                 ::/0
 3491  235K ACCEPT     0    --  br-mailcow br-mailcow  ::/0                 ::/0
    0     0 ACCEPT     0    --  *      docker0  ::/0                 ::/0                 ctstate RELATED,ESTABLISHED
    0     0 DOCKER     0    --  *      docker0  ::/0                 ::/0
    0     0 ACCEPT     0    --  docker0 !docker0  ::/0                 ::/0
    0     0 ACCEPT     0    --  docker0 docker0  ::/0                 ::/0

Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination

Chain DOCKER (2 references)
 pkts bytes target     prot opt in     out     source               destination
    0     0 ACCEPT     6    --  !br-mailcow br-mailcow  ::/0                 fd4d:6169:6c63:6f77::9  tcp dpt:443
    0     0 ACCEPT     6    --  !br-mailcow br-mailcow  ::/0                 fd4d:6169:6c63:6f77::9  tcp dpt:80
    0     0 ACCEPT     6    --  !br-mailcow br-mailcow  ::/0                 fd4d:6169:6c63:6f77::d  tcp dpt:587
    0     0 ACCEPT     6    --  !br-mailcow br-mailcow  ::/0                 fd4d:6169:6c63:6f77::12  tcp dpt:4190
    0     0 ACCEPT     6    --  !br-mailcow br-mailcow  ::/0                 fd4d:6169:6c63:6f77::d  tcp dpt:465
    0     0 ACCEPT     6    --  !br-mailcow br-mailcow  ::/0                 fd4d:6169:6c63:6f77::12  tcp dpt:995
    0     0 ACCEPT     6    --  !br-mailcow br-mailcow  ::/0                 fd4d:6169:6c63:6f77::d  tcp dpt:25
    0     0 ACCEPT     6    --  !br-mailcow br-mailcow  ::/0                 fd4d:6169:6c63:6f77::12  tcp dpt:993
    0     0 ACCEPT     6    --  !br-mailcow br-mailcow  ::/0                 fd4d:6169:6c63:6f77::12  tcp dpt:143
    0     0 ACCEPT     6    --  !br-mailcow br-mailcow  ::/0                 fd4d:6169:6c63:6f77::12  tcp dpt:110
    0     0 ACCEPT     6    --  !br-mailcow br-mailcow  ::/0                 fd4d:6169:6c63:6f77::e  tcp dpt:4190
    0     0 ACCEPT     6    --  !br-mailcow br-mailcow  ::/0                 fd4d:6169:6c63:6f77::f  tcp dpt:443
    0     0 ACCEPT     6    --  !br-mailcow br-mailcow  ::/0                 fd4d:6169:6c63:6f77::e  tcp dpt:995
    0     0 ACCEPT     6    --  !br-mailcow br-mailcow  ::/0                 fd4d:6169:6c63:6f77::f  tcp dpt:80
    0     0 ACCEPT     6    --  !br-mailcow br-mailcow  ::/0                 fd4d:6169:6c63:6f77::e  tcp dpt:993
    0     0 ACCEPT     6    --  !br-mailcow br-mailcow  ::/0                 fd4d:6169:6c63:6f77::e  tcp dpt:143
    0     0 ACCEPT     6    --  !br-mailcow br-mailcow  ::/0                 fd4d:6169:6c63:6f77::e  tcp dpt:110

Chain DOCKER-ISOLATION-STAGE-1 (1 references)
 pkts bytes target     prot opt in     out     source               destination
  296 27658 DOCKER-ISOLATION-STAGE-2  0    --  br-mailcow !br-mailcow  ::/0                 ::/0
    0     0 DOCKER-ISOLATION-STAGE-2  0    --  docker0 !docker0  ::/0                 ::/0
 7629  735K RETURN     0    --  *      *       ::/0                 ::/0

Chain DOCKER-ISOLATION-STAGE-2 (2 references)
 pkts bytes target     prot opt in     out     source               destination
    0     0 DROP       0    --  *      br-mailcow  ::/0                 ::/0
    0     0 DROP       0    --  *      docker0  ::/0                 ::/0
  369 34362 RETURN     0    --  *      *       ::/0                 ::/0

Chain DOCKER-USER (1 references)
 pkts bytes target     prot opt in     out     source               destination
10484 1078K RETURN     0    --  *      *       ::/0                 ::/0

Logs of iptables -L -vn -t nat:

# Warning: iptables-legacy tables present, use iptables-legacy to see them
Chain PREROUTING (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination
  249  9095 DOCKER     0    --  *      *       0.0.0.0/0            0.0.0.0/0            ADDRTYPE match dst-type LOCAL

Chain INPUT (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination

Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination
    1    60 DOCKER     0    --  *      *       0.0.0.0/0           !127.0.0.0/8          ADDRTYPE match dst-type LOCAL

Chain POSTROUTING (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination
  783 59192 MASQUERADE  0    --  *      !br-mailcow  172.22.1.0/24        0.0.0.0/0
    0     0 MASQUERADE  0    --  *      !docker0  172.17.0.0/16        0.0.0.0/0
    0     0 MASQUERADE  6    --  *      *       172.22.1.3           172.22.1.3           tcp dpt:8983
    0     0 MASQUERADE  6    --  *      *       172.22.1.249         172.22.1.249         tcp dpt:6379
    0     0 MASQUERADE  6    --  *      *       172.22.1.7           172.22.1.7           tcp dpt:3306
    0     0 MASQUERADE  6    --  *      *       172.22.1.253         172.22.1.253         tcp dpt:587
    0     0 MASQUERADE  6    --  *      *       172.22.1.250         172.22.1.250         tcp dpt:12345
    0     0 MASQUERADE  6    --  *      *       172.22.1.250         172.22.1.250         tcp dpt:4190
    0     0 MASQUERADE  6    --  *      *       172.22.1.10          172.22.1.10          tcp dpt:443
    0     0 MASQUERADE  6    --  *      *       172.22.1.253         172.22.1.253         tcp dpt:465
    0     0 MASQUERADE  6    --  *      *       172.22.1.250         172.22.1.250         tcp dpt:995
    0     0 MASQUERADE  6    --  *      *       172.22.1.10          172.22.1.10          tcp dpt:80
    0     0 MASQUERADE  6    --  *      *       172.22.1.253         172.22.1.253         tcp dpt:25
    0     0 MASQUERADE  6    --  *      *       172.22.1.250         172.22.1.250         tcp dpt:993
    0     0 MASQUERADE  6    --  *      *       172.22.1.250         172.22.1.250         tcp dpt:143
    0     0 MASQUERADE  6    --  *      *       172.22.1.250         172.22.1.250         tcp dpt:110

Chain DOCKER (2 references)
 pkts bytes target     prot opt in     out     source               destination
    0     0 RETURN     0    --  br-mailcow *       0.0.0.0/0            0.0.0.0/0
    0     0 RETURN     0    --  docker0 *       0.0.0.0/0            0.0.0.0/0
    0     0 DNAT       6    --  !br-mailcow *       0.0.0.0/0            127.0.0.1            tcp dpt:18983 to:172.22.1.3:8983
    0     0 DNAT       6    --  !br-mailcow *       0.0.0.0/0            127.0.0.1            tcp dpt:7654 to:172.22.1.249:6379
    0     0 DNAT       6    --  !br-mailcow *       0.0.0.0/0            127.0.0.1            tcp dpt:13306 to:172.22.1.7:3306
    1    52 DNAT       6    --  !br-mailcow *       0.0.0.0/0            0.0.0.0/0            tcp dpt:587 to:172.22.1.253:587
    0     0 DNAT       6    --  !br-mailcow *       0.0.0.0/0            127.0.0.1            tcp dpt:19991 to:172.22.1.250:12345
    0     0 DNAT       6    --  !br-mailcow *       0.0.0.0/0            0.0.0.0/0            tcp dpt:4190 to:172.22.1.250:4190
    0     0 DNAT       6    --  !br-mailcow *       0.0.0.0/0            0.0.0.0/0            tcp dpt:443 to:172.22.1.10:443
    1    52 DNAT       6    --  !br-mailcow *       0.0.0.0/0            0.0.0.0/0            tcp dpt:465 to:172.22.1.253:465
    0     0 DNAT       6    --  !br-mailcow *       0.0.0.0/0            0.0.0.0/0            tcp dpt:995 to:172.22.1.250:995
    1    44 DNAT       6    --  !br-mailcow *       0.0.0.0/0            0.0.0.0/0            tcp dpt:80 to:172.22.1.10:80
    1    52 DNAT       6    --  !br-mailcow *       0.0.0.0/0            0.0.0.0/0            tcp dpt:25 to:172.22.1.253:25
    0     0 DNAT       6    --  !br-mailcow *       0.0.0.0/0            0.0.0.0/0            tcp dpt:993 to:172.22.1.250:993
    0     0 DNAT       6    --  !br-mailcow *       0.0.0.0/0            0.0.0.0/0            tcp dpt:143 to:172.22.1.250:143
    1    60 DNAT       6    --  !br-mailcow *       0.0.0.0/0            0.0.0.0/0            tcp dpt:110 to:172.22.1.250:110

Logs of ip6tables -L -vn -t nat:

# Warning: ip6tables-legacy tables present, use ip6tables-legacy to see them
Chain PREROUTING (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination
    0     0 DOCKER     0    --  *      *       ::/0                 ::/0                 ADDRTYPE match dst-type LOCAL

Chain INPUT (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination

Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination
    3   240 DOCKER     0    --  *      *       ::/0                !::1                  ADDRTYPE match dst-type LOCAL

Chain POSTROUTING (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination
  276 25725 MASQUERADE  0    --  *      !br-mailcow  fd4d:6169:6c63:6f77::/64  ::/0
    0     0 MASQUERADE  0    --  *      docker0  ::/0                 ::/0                 ADDRTYPE match dst-type LOCAL
    0     0 MASQUERADE  0    --  *      !docker0  fd00:dead:beef:c0::/80  ::/0
    0     0 MASQUERADE  6    --  *      *       fd4d:6169:6c63:6f77::9  fd4d:6169:6c63:6f77::9  tcp dpt:443
    0     0 MASQUERADE  6    --  *      *       fd4d:6169:6c63:6f77::9  fd4d:6169:6c63:6f77::9  tcp dpt:80
    0     0 MASQUERADE  6    --  *      *       fd4d:6169:6c63:6f77::d  fd4d:6169:6c63:6f77::d  tcp dpt:587
    0     0 MASQUERADE  6    --  *      *       fd4d:6169:6c63:6f77::12  fd4d:6169:6c63:6f77::12  tcp dpt:4190
    0     0 MASQUERADE  6    --  *      *       fd4d:6169:6c63:6f77::d  fd4d:6169:6c63:6f77::d  tcp dpt:465
    0     0 MASQUERADE  6    --  *      *       fd4d:6169:6c63:6f77::12  fd4d:6169:6c63:6f77::12  tcp dpt:995
    0     0 MASQUERADE  6    --  *      *       fd4d:6169:6c63:6f77::d  fd4d:6169:6c63:6f77::d  tcp dpt:25
    0     0 MASQUERADE  6    --  *      *       fd4d:6169:6c63:6f77::12  fd4d:6169:6c63:6f77::12  tcp dpt:993
    0     0 MASQUERADE  6    --  *      *       fd4d:6169:6c63:6f77::12  fd4d:6169:6c63:6f77::12  tcp dpt:143
    0     0 MASQUERADE  6    --  *      *       fd4d:6169:6c63:6f77::12  fd4d:6169:6c63:6f77::12  tcp dpt:110
    0     0 MASQUERADE  6    --  *      *       fd4d:6169:6c63:6f77::e  fd4d:6169:6c63:6f77::e  tcp dpt:4190
    0     0 MASQUERADE  6    --  *      *       fd4d:6169:6c63:6f77::f  fd4d:6169:6c63:6f77::f  tcp dpt:443
    0     0 MASQUERADE  6    --  *      *       fd4d:6169:6c63:6f77::e  fd4d:6169:6c63:6f77::e  tcp dpt:995
    0     0 MASQUERADE  6    --  *      *       fd4d:6169:6c63:6f77::f  fd4d:6169:6c63:6f77::f  tcp dpt:80
    0     0 MASQUERADE  6    --  *      *       fd4d:6169:6c63:6f77::e  fd4d:6169:6c63:6f77::e  tcp dpt:993
    0     0 MASQUERADE  6    --  *      *       fd4d:6169:6c63:6f77::e  fd4d:6169:6c63:6f77::e  tcp dpt:143
    0     0 MASQUERADE  6    --  *      *       fd4d:6169:6c63:6f77::e  fd4d:6169:6c63:6f77::e  tcp dpt:110

Chain DOCKER (2 references)
 pkts bytes target     prot opt in     out     source               destination
    0     0 RETURN     0    --  br-mailcow *       ::/0                 ::/0
    0     0 RETURN     0    --  docker0 *       ::/0                 ::/0
    0     0 DNAT       6    --  !br-mailcow *       ::/0                 ::/0                 tcp dpt:443 to:[fd4d:6169:6c63:6f77::9]:443
    0     0 DNAT       6    --  !br-mailcow *       ::/0                 ::/0                 tcp dpt:80 to:[fd4d:6169:6c63:6f77::9]:80
    0     0 DNAT       6    --  !br-mailcow *       ::/0                 ::/0                 tcp dpt:587 to:[fd4d:6169:6c63:6f77::d]:587
    0     0 DNAT       6    --  !br-mailcow *       ::/0                 ::/0                 tcp dpt:4190 to:[fd4d:6169:6c63:6f77::12]:4190
    0     0 DNAT       6    --  !br-mailcow *       ::/0                 ::/0                 tcp dpt:465 to:[fd4d:6169:6c63:6f77::d]:465
    0     0 DNAT       6    --  !br-mailcow *       ::/0                 ::/0                 tcp dpt:995 to:[fd4d:6169:6c63:6f77::12]:995
    1    80 DNAT       6    --  !br-mailcow *       ::/0                 ::/0                 tcp dpt:25 to:[fd4d:6169:6c63:6f77::d]:25
    0     0 DNAT       6    --  !br-mailcow *       ::/0                 ::/0                 tcp dpt:993 to:[fd4d:6169:6c63:6f77::12]:993
    0     0 DNAT       6    --  !br-mailcow *       ::/0                 ::/0                 tcp dpt:143 to:[fd4d:6169:6c63:6f77::12]:143
    2   160 DNAT       6    --  !br-mailcow *       ::/0                 ::/0                 tcp dpt:110 to:[fd4d:6169:6c63:6f77::12]:110
    0     0 DNAT       6    --  !br-mailcow *       ::/0                 ::/0                 tcp dpt:4190 to:[fd4d:6169:6c63:6f77::e]:4190
    0     0 DNAT       6    --  !br-mailcow *       ::/0                 ::/0                 tcp dpt:443 to:[fd4d:6169:6c63:6f77::f]:443
    0     0 DNAT       6    --  !br-mailcow *       ::/0                 ::/0                 tcp dpt:995 to:[fd4d:6169:6c63:6f77::e]:995
    0     0 DNAT       6    --  !br-mailcow *       ::/0                 ::/0                 tcp dpt:80 to:[fd4d:6169:6c63:6f77::f]:80
    0     0 DNAT       6    --  !br-mailcow *       ::/0                 ::/0                 tcp dpt:993 to:[fd4d:6169:6c63:6f77::e]:993
    0     0 DNAT       6    --  !br-mailcow *       ::/0                 ::/0                 tcp dpt:143 to:[fd4d:6169:6c63:6f77::e]:143
    0     0 DNAT       6    --  !br-mailcow *       ::/0                 ::/0                 tcp dpt:110 to:[fd4d:6169:6c63:6f77::e]:110

DNS check:

root@debian12:/opt/mailcow-dockerized# docker exec -it $(docker ps -qf name=acme-mailcow) dig +short stackoverflow.com @172.22.1.254
151.101.129.69
151.101.193.69
151.101.65.69
151.101.1.69
ro78 commented 10 months ago

Screenshots install upgrade

ro78 commented 10 months ago

docker ps CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES 4f15eee93222 mailcow/acme:1.84 "/sbin/tini -g -- /s…" 12 minutes ago Up 11 minutes mailcowdockerized-acme-mailcow-1 d962a7112594 mailcow/netfilter:1.52 "python3 -u /server.…" 12 minutes ago Up 11 minutes mailcowdockerized-netfilter-mailcow-1 713ab8da929d nginx:mainline-alpine "/docker-entrypoint.…" 12 minutes ago Up 11 minutes 0.0.0.0:80->80/tcp, :::80->80/tcp, 0.0.0.0:443->443/tcp, :::443->443/tcp mailcowdockerized-nginx-mailcow-1 ab949d8a9cab mailcow/rspamd:1.92 "/docker-entrypoint.…" 12 minutes ago Up 11 minutes mailcowdockerized-rspamd-mailcow-1 49df2e22dccf mcuadros/ofelia:latest "/usr/bin/ofelia dae…" 12 minutes ago Up 11 minutes mailcowdockerized-ofelia-mailcow-1 0803fe24d078 mailcow/phpfpm:1.84 "/docker-entrypoint.…" 12 minutes ago Up 11 minutes 9000/tcp mailcowdockerized-php-fpm-mailcow-1 7c334a5e4f4a mailcow/dovecot:1.24 "/docker-entrypoint.…" 12 minutes ago Up 11 minutes 0.0.0.0:110->110/tcp, :::110->110/tcp, 0.0.0.0:143->143/tcp, :::143->143/tcp, 0.0.0.0:993->993/tcp, :::993->993/tcp, 0.0.0.0:995->995/tcp, :::995->995/tcp, 0.0.0.0:4190->4190/tcp, :::4190->4190/tcp, 127.0.0.1:19991->12345/tcp mailcowdockerized-dovecot-mailcow-1 2f6cfeabd24f mailcow/postfix:1.71 "/docker-entrypoint.…" 12 minutes ago Up 11 minutes 0.0.0.0:25->25/tcp, :::25->25/tcp, 0.0.0.0:465->465/tcp, :::465->465/tcp, 0.0.0.0:587->587/tcp, :::587->587/tcp, 588/tcp mailcowdockerized-postfix-mailcow-1 a9e28a2e76e2 mailcow/clamd:1.61 "/sbin/tini -g -- /c…" 12 minutes ago Up 11 minutes (healthy) 3310/tcp, 7357/tcp mailcowdockerized-clamd-mailcow-1 daee9d06bd30 mariadb:10.5 "docker-entrypoint.s…" 12 minutes ago Up 11 minutes 127.0.0.1:13306->3306/tcp mailcowdockerized-mysql-mailcow-1 6194a837039a mailcow/sogo:1.118 "/docker-entrypoint.…" 12 minutes ago Up 11 minutes mailcowdockerized-sogo-mailcow-1 d692ec1e07be mailcow/watchdog:1.97 "/bin/sh -c /watchdo…" 12 minutes ago Up 11 minutes mailcowdockerized-watchdog-mailcow-1 09d1c80e270c mailcow/dockerapi:2.05 "/bin/sh /app/docker…" 12 minutes ago Up 11 minutes mailcowdockerized-dockerapi-mailcow-1 9e12de7cfe6b mailcow/olefy:1.11 "python3 -u /app/ole…" 12 minutes ago Up 11 minutes mailcowdockerized-olefy-mailcow-1 85579853b3f3 mailcow/unbound:1.17 "/docker-entrypoint.…" 12 minutes ago Up 11 minutes 53/tcp, 53/udp mailcowdockerized-unbound-mailcow-1 3aa67af56468 memcached:alpine "docker-entrypoint.s…" 12 minutes ago Up 11 minutes 11211/tcp mailcowdockerized-memcached-mailcow-1 94fc942b5a0a redis:7-alpine "docker-entrypoint.s…" 12 minutes ago Up 11 minutes 127.0.0.1:7654->6379/tcp mailcowdockerized-redis-mailcow-1 4e5be3ce6d3d mailcow/solr:1.8.1 "docker-entrypoint.s…" 12 minutes ago Up 11 minutes 127.0.0.1:18983->8983/tcp mailcowdockerized-solr-mailcow-1

ro78 commented 10 months ago

An OS reboot allows to fix the issue. Not sure if you want to consider it as a bug or not.

mitchellvanbijleveld commented 9 months ago

I can confirm that a reboot 'fixes the issue'. Just wanted to let you know.