search

mailcow / mailcow-dockerized

mailcow: dockerized - 🐮 + 🐋 = 💕
https://mailcow.email
GNU General Public License v3.0
8.25k stars 1.12k forks source link

Different DKIM signature between mailcow and wordpress SMTP #5887

Open addictif80 opened 1 month ago

addictif80 commented 1 month ago

Contribution guidelines

I've found a bug and checked that ...

Description

Hello,
i've a problem with emails sending.
If i send an email from SOGo, in the mail header, i've a DKIM Key.
If i send an email from Wordpress (with FluentSMTP Plugin), i've another DKIM Key.
It result of lot of sent emails going to Junk folder of recipient.

Additionnal information : the 2 DKIM key (from SOGo and Wordpress) are not the same of "DNS" domain section of mailcow admin panel.

Logs:

WARN[0000] /DATA/AppData/mailcow-dockerized/docker-compose.yml: `version` is obsolete 
solr-mailcow-1  | SKIP_SOLR=y, skipping Solr...
mysql-mailcow-1  | 2024-05-16 19:18:35 0 [Note] InnoDB: Buffer pool(s) load completed at 240516 19:18:35
acme-mailcow-1   | Wed May 29 19:28:33 CEST 2024 - Certificates were successfully validated, no changes or renewals required, sleeping for another day.
unbound-mailcow-1  | [1716998302] unbound[1:0] info: generate keytag query _ta-4f66. NULL IN
watchdog-mailcow-1  | Wed May 29 20:43:48 CEST 2024 Olefy health level: 100% (5/5), health trend: 0
postfix-mailcow-1   | May 29 20:43:27 e6f51f472676 postfix/smtps/smtpd[22855]: disconnect from unknown[172.22.1.1] commands=0/0
nginx-mailcow-1     | 82.64.128.22 - - [29/May/2024:20:43:51 +0200] "GET /api/v1/get/status/host HTTP/2.0" 200 192 "https://mail.abhd.fr/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWeb
Kit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36 Edg/125.0.0.0"
php-fpm-mailcow-1   | 172.22.1.11 -  29/May/2024:20:43:51 +0200 "GET /json_api.php" 200
rspamd-mailcow-1    | 2024-05-29 20:43:26 #49(controller) <6fa199>; csession; rspamd_protocol_http_reply: regexp statistics: 0 pcre regexps scanned, 0 regexps matched, 3463 regexps total, 25
45 regexps cached, 0B scanned using pcre, 102B scanned total
ofelia-mailcow-1    | 2024-05-29T20:43:36.935+02:00  common.go:125 ▶ NOTICE [Job "sogo_eautoreply" (81c1065bfa16)] Finished in "932.982784ms", failed: false, skipped: false, error: none
clamd-mailcow-1     | SKIP_CLAMD=y, skipping ClamAV...
olefy-mailcow-1     | olefy INFO <module> serving on ('0.0.0.0', 10055)
netfilter-mailcow-1  | 9 more attempts in the next 600 seconds until 82.64.128.22/32 is banned
redis-mailcow-1      | 1:M 29 May 2024 20:41:00.615 * Background saving terminated with success
dovecot-mailcow-1    | May 29 20:43:28 e3c8184eeb31 dovecot: imap-login: Disconnected: Connection closed (no auth attempts in 0 secs): user=<>, rip=172.22.1.1, lip=172.22.1.250, TLS handshak
ing: Connection closed
sogo-mailcow-1       | May 29 20:43:48 938a5058f278 sogod [51]: mailcowdockerized-watchdog-mailcow-1.mailcowdockerized_mailcow-network "GET /SOGo.index/ HTTP/1.1" 200 2581/0 0.013 - - 236K -
 12
dockerapi-mailcow-1  | INFO:     172.22.1.6:39380 - "GET /host/stats HTTP/1.1" 200 OK

Steps to reproduce:

1. Install Mailcow
2. Add domain
3. Add DNS records like DKIM
4. Add account in Mailcow
5. Install and configure FluentSMTP with mailcow account
6. Create form (fluentforms) with confirmation email
7. fill form and click send for receive the email in filled mailbox (gmail for test)
8. send an email directly from Mailcow SOGo to the same address
9. Compare emails headers
10. See the differents DKIM Keys

Which branch are you using?

master

Which architecture are you using?

x86

Operating System:

Debian

Server/VM specifications:

2vCore - 2GB Ram - 80GB SSD (ionos)

Is Apparmor, SELinux or similar active?

no

Virtualization technology:

KVM (ionos)

Docker version:

26.1.3, build b72abbb

docker-compose version or docker compose version:

v2.27.0

mailcow version:

2024-04

Reverse proxy:

No

Logs of git diff:

diff --git a/data/assets/ssl-example/cert.pem b/data/assets/ssl-example/cert.pem
index 96d16bec..968b4540 100644
--- a/data/assets/ssl-example/cert.pem
+++ b/data/assets/ssl-example/cert.pem
@@ -1,19 +1,33 @@
 -----BEGIN CERTIFICATE-----
-MIIDBDCCAe6gAwIBAgIQeJMoL/3dxhxhT9EwuRTL/DALBgkqhkiG9w0BAQswEjEQ
-MA4GA1UEChMHbWFpbGNvdzAeFw0xNjEyMTMxMDExMDBaFw0xOTExMjgxMDExMDBa
-MC0xEDAOBgNVBAoTB21haWxjb3cxGTAXBgNVBAMTEG1haWwuZXhhbXBsZS5vcmcw
-ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRg0xT3At9DSb3H5OMp3K1
-MpXAgYyotSK6TS61fC0QEHy2fMXiws7Agcye6Ln7CG63Fe1eN2jkdlefy9xJivS8
-y5w0M8i168v5znzC8fnylL2iOiSYfK/B/oEqfU7YH4RcegO53oDDIUZmi4Frgnu7
-39VVOU1ZyHEVqGJ2H2aAIkoZRjGzumD9Ym4LWGidtKJzBgFt/qmhUeWXipM8w281
-XkQnJU79+x2ywnJSvEZ3r/ZVJC7kbjiVw+/k15k9Cxk6Ik8wmJ0X/+xWxoZomHQI
-1LM0VKAS/iaU95dn2bplvL6jTiiyWAbrMjSKs4XbPt/fIbOicNkj6+CFy0MVfyyH
-AgMBAAGjPzA9MA4GA1UdDwEB/wQEAwIAqDAdBgNVHSUEFjAUBggrBgEFBQcDAgYI
-KwYBBQUHAwEwDAYDVR0TAQH/BAIwADALBgkqhkiG9w0BAQsDggEBAI/jBJa1P8nB
-eHUN5muQmjBVDVOYyWAAEapOe2HYsBcpjaB2H8Iw3DQzJtz6peYeYSCmHRVqFLCm
-VPrq36l9mPUotyPDPlQQAxCj9R2+WbGaJO+N/E1F8FQ94dr3jqwUyfjVPoqEjmIH
-NFkvbA0RJOeBm9oYGdhM0wjOBV9c9MTHFG82nQ/zQeTuPb7GXuKIOXYCxoLNOZMw
-UJ02Cqjv5ImrgOhcstAKX3Ip0urSvZUGvtPla4CGh+M6yDFJ08GzX6OiMIH207RW
-jAbUXXERSUv/7hysdDjGo5HZjCeMzVu9KAxoZXqnmvkk8g2swKWtWBRcoeU1VGx0
-Bx4Q4KMjuYQ=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 -----END CERTIFICATE-----
diff --git a/data/assets/ssl-example/key.pem b/data/assets/ssl-example/key.pem
index cedf35a0..709dce24 100644
--- a/data/assets/ssl-example/key.pem
+++ b/data/assets/ssl-example/key.pem
@@ -1,27 +1,52 @@
------BEGIN RSA PRIVATE KEY-----
-MIIEpAIBAAKCAQEA0YNMU9wLfQ0m9x+TjKdytTKVwIGMqLUiuk0utXwtEBB8tnzF
-4sLOwIHMnui5+whutxXtXjdo5HZXn8vcSYr0vMucNDPItevL+c58wvH58pS9ojok
-mHyvwf6BKn1O2B+EXHoDud6AwyFGZouBa4J7u9/VVTlNWchxFahidh9mgCJKGUYx
-s7pg/WJuC1honbSicwYBbf6poVHll4qTPMNvNV5EJyVO/fsdssJyUrxGd6/2VSQu
-5G44lcPv5NeZPQsZOiJPMJidF//sVsaGaJh0CNSzNFSgEv4mlPeXZ9m6Zby+o04o
-slgG6zI0irOF2z7f3yGzonDZI+vghctDFX8shwIDAQABAoIBAQC9kiLnIgxXGyZt
-pmmYdA6re1jatZ2zLSp+DcY8ul3/0hs195IKCyCOOSQPiR520Pt0t+duP46uYZIJ
-aakp9gxaI5Vz+oMacH/AyaBDuDTj1Mf9WMSyIOfbDVCMRJOppGLcVh62+Gfjp2EO
-+h2hTJBuvypFkbK2kVIZOaHVpbXWKw1oYuEcTftk9XfxxvfSMw1HQ12/P2CAcbaa
-jPmVbisunv6kpXtewSBTcaLSYWJf1MYD5Hi8fzkD2FJSXYbfQd8RKvT2rj6FA7ux
-CDMzbYhdnd7lc63OARCIjfCRNtDT1cZ3gR1CQHD98lWxmPQIZukv+w7s/bSrFgnQ
-ROZ0ghBJAoGBAOmE/3d5FDmp0aJNxXynKcRGdpEEM4O40RIdqa2eR6Pa7aTRosao
-z0qVgdFuJrqjlB3jgedxXEX1M0abCUzzM9Q5F7JLl+KsjwRwpkIOkPiyUncLp7LK
-QbY3tvYBIdpjlF1USOMGRL4j11hqr4vQC/yPBF7jj81kCZDTbmZhp82jAoGBAOWu
-ql5QFUOlmqkuWIAFkiLEZhOu+ptqkE+zG50CCGMJIX0dJ2PHXFyNGInomAeT0nbI
-pbnK3x7KeEKiGrAqZFNCTHhApTwkrIj0L/RQbMDZ7u7j1AEUVNFEhIm62kg84FtG
-xtfxVxredE+NQc/tyV3hXegdNZxegALirlcMKIvNAoGAWFwIxk48Ru1o8z72QQqH
-lUsMRicOzwK5qV8r+xPvC6MlVL42F3F8rj4QFwzU/r4yp3SUjNyqC5aSRl8Xj9Re
-gijwPHi6Cf09SHLPliMo29GtvnnchJxfbPF7+23GP3p6gy4HPk/65u9s5nnH3uFk
-B7ad8sGsgg0eSXyXQ4okEn0CgYEAnogPuedGthlxBgMiPMMbmfm7hyyId4t3Ljuu
-/JExnsHnpobf8EPjoVIWNOIhRWGnrCtUEEhR9tvDZCKljyDDfKBPTdU496lMmX8K
-NnToi7gg7iy84T3aSVMktDgPgDrclMPmbZh8CeSvnVUfrtgu3Ci4+4Rlw5eKffNe
-aGDQ/6UCgYAbUq9mRT2WOXIo+Dchi9VzDWgtfOw5VEyqkSpb7hPiIYx5jNaENnVK
-cAi3iqbBgPJBuMlTrKmmaxdmssGOEZNJLuuXLDbCU+f5cpu5PQ4crC6UtRI5rlhp
-8Yc+oiv3HWbSw3sVRpMFB6NP4DnvgFW3B2Wdfb/lNzPCKWqBsX7gWw==
------END RSA PRIVATE KEY-----
+-----BEGIN PRIVATE KEY-----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+-----END PRIVATE KEY-----
diff --git a/data/conf/postfix/main.cf b/data/conf/postfix/main.cf
index 572300db..441c0c30 100644
--- a/data/conf/postfix/main.cf
+++ b/data/conf/postfix/main.cf
@@ -173,3 +173,36 @@ parent_domain_matches_subdomains = debug_peer_list,fast_flush_domains,mynetworks

 # DO NOT EDIT ANYTHING BELOW #
 # Overrides #
+
+postscreen_dnsbl_sites = wl.mailspike.net=127.0.0.[18;19;20]*-2
+  hostkarma.junkemailfilter.com=127.0.0.1*-2
+  list.dnswl.org=127.0.[0..255].0*-2
+  list.dnswl.org=127.0.[0..255].1*-4
+  list.dnswl.org=127.0.[0..255].2*-6
+  list.dnswl.org=127.0.[0..255].3*-8
+  ix.dnsbl.manitu.net*2
+  bl.spamcop.net*2
+  bl.suomispam.net*2
+  hostkarma.junkemailfilter.com=127.0.0.2*3
+  hostkarma.junkemailfilter.com=127.0.0.4*2
+  hostkarma.junkemailfilter.com=127.0.1.2*1
+  backscatter.spameatingmonkey.net*2
+  bl.ipv6.spameatingmonkey.net*2
+  bl.spameatingmonkey.net*2
+  b.barracudacentral.org=127.0.0.2*7
+  bl.mailspike.net=127.0.0.2*5
+  bl.mailspike.net=127.0.0.[10;11;12]*4
+  dnsbl.sorbs.net=127.0.0.10*8
+  dnsbl.sorbs.net=127.0.0.5*6
+  dnsbl.sorbs.net=127.0.0.7*3
+  dnsbl.sorbs.net=127.0.0.8*2
+  dnsbl.sorbs.net=127.0.0.6*2
+  dnsbl.sorbs.net=127.0.0.9*2
+  zen.spamhaus.org=127.0.0.[10;11]*8
+  zen.spamhaus.org=127.0.0.[4..7]*6
+  zen.spamhaus.org=127.0.0.3*4
+  zen.spamhaus.org=127.0.0.2*3
+
+# User Overrides
+myhostname = mail.abhd.fr
+
diff --git a/data/conf/rspamd/custom/global_mime_from_whitelist.map b/data/conf/rspamd/custom/global_mime_from_whitelist.map
index 3c872889..5abdecdb 100644
--- a/data/conf/rspamd/custom/global_mime_from_whitelist.map
+++ b/data/conf/rspamd/custom/global_mime_from_whitelist.map
@@ -1 +1,2 @@
-# /.+example\.com/i
+# /.+example\.com/i
diff --git a/docker-compose.yml b/docker-compose.yml
index 3efd6a42..f8580761 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -609,36 +609,6 @@ services:
           aliases:
             - ofelia

-    ipv6nat-mailcow:
-      depends_on:
-        - unbound-mailcow
-        - mysql-mailcow
-        - redis-mailcow
-        - clamd-mailcow
-        - rspamd-mailcow
-        - php-fpm-mailcow
-        - sogo-mailcow
-        - dovecot-mailcow
-        - postfix-mailcow
-        - memcached-mailcow
-        - nginx-mailcow
-        - acme-mailcow
-        - netfilter-mailcow
-        - watchdog-mailcow
-        - dockerapi-mailcow
-        - solr-mailcow
-      environment:
-        - TZ=${TZ}
-      image: robbertkl/ipv6nat
-      security_opt:
-        - label=disable
-      restart: always
-      privileged: true
-      network_mode: "host"
-      volumes:
-        - /var/run/docker.sock:/var/run/docker.sock:ro
-        - /lib/modules:/lib/modules:ro
-
 networks:
   mailcow-network:
     driver: bridge

Logs of iptables -L -vn:

Chain INPUT (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         

Chain FORWARD (policy DROP 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         
 696M  777G MAILCOW    all  --  *      *       0.0.0.0/0            0.0.0.0/0            /* mailcow */
 696M  777G DOCKER-USER  all  --  *      *       0.0.0.0/0            0.0.0.0/0           
 696M  777G DOCKER-ISOLATION-STAGE-1  all  --  *      *       0.0.0.0/0            0.0.0.0/0           
 288M  375G ACCEPT     all  --  *      docker0  0.0.0.0/0            0.0.0.0/0            ctstate RELATED,ESTABLISHED
 7571  453K DOCKER     all  --  *      docker0  0.0.0.0/0            0.0.0.0/0           
 367M  380G ACCEPT     all  --  docker0 !docker0  0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     all  --  docker0 docker0  0.0.0.0/0            0.0.0.0/0           
  24M 8975M ACCEPT     all  --  *      br-mailcow  0.0.0.0/0            0.0.0.0/0            ctstate RELATED,ESTABLISHED
2092K  130M DOCKER     all  --  *      br-mailcow  0.0.0.0/0            0.0.0.0/0           
2519K  600M ACCEPT     all  --  br-mailcow !br-mailcow  0.0.0.0/0            0.0.0.0/0           
2026K  126M ACCEPT     all  --  br-mailcow br-mailcow  0.0.0.0/0            0.0.0.0/0           
 268K  112M ACCEPT     all  --  *      br-2d3ce6c8a82c  0.0.0.0/0            0.0.0.0/0            ctstate RELATED,ESTABLISHED
 6959  418K DOCKER     all  --  *      br-2d3ce6c8a82c  0.0.0.0/0            0.0.0.0/0           
19565   12M ACCEPT     all  --  br-2d3ce6c8a82c !br-2d3ce6c8a82c  0.0.0.0/0            0.0.0.0/0           
 3414  205K ACCEPT     all  --  br-2d3ce6c8a82c br-2d3ce6c8a82c  0.0.0.0/0            0.0.0.0/0           
8885K   15G ACCEPT     all  --  *      br-25dc349ea873  0.0.0.0/0            0.0.0.0/0            ctstate RELATED,ESTABLISHED
  516 30960 DOCKER     all  --  *      br-25dc349ea873  0.0.0.0/0            0.0.0.0/0           
7376K  762M ACCEPT     all  --  br-25dc349ea873 !br-25dc349ea873  0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     all  --  br-25dc349ea873 br-25dc349ea873  0.0.0.0/0            0.0.0.0/0           

Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         

Chain DOCKER (4 references)
 pkts bytes target     prot opt in     out     source               destination         
 7480  449K ACCEPT     tcp  --  !docker0 docker0  0.0.0.0/0            172.17.0.2           tcp dpt:9001
    0     0 ACCEPT     tcp  --  !br-mailcow br-mailcow  0.0.0.0/0            172.22.1.3           tcp dpt:8983
    0     0 ACCEPT     tcp  --  !br-mailcow br-mailcow  0.0.0.0/0            172.22.1.5           tcp dpt:3306
    0     0 ACCEPT     tcp  --  !br-mailcow br-mailcow  0.0.0.0/0            172.22.1.249         tcp dpt:6379
32015 1687K ACCEPT     tcp  --  !br-mailcow br-mailcow  0.0.0.0/0            172.22.1.11          tcp dpt:443
23705 1173K ACCEPT     tcp  --  !br-mailcow br-mailcow  0.0.0.0/0            172.22.1.11          tcp dpt:80
  213 12780 ACCEPT     tcp  --  !br-25dc349ea873 br-25dc349ea873  0.0.0.0/0            172.19.0.2           tcp dpt:3001
 2514  151K ACCEPT     tcp  --  !br-2d3ce6c8a82c br-2d3ce6c8a82c  0.0.0.0/0            172.18.0.2           tcp dpt:80
   91  4330 ACCEPT     udp  --  !docker0 docker0  0.0.0.0/0            172.17.0.3           udp dpt:1194
    0     0 ACCEPT     tcp  --  !br-mailcow br-mailcow  0.0.0.0/0            172.22.1.250         tcp dpt:12345
    0     0 ACCEPT     tcp  --  !br-mailcow br-mailcow  0.0.0.0/0            172.22.1.250         tcp dpt:4190
  247 14492 ACCEPT     tcp  --  !br-mailcow br-mailcow  0.0.0.0/0            172.22.1.250         tcp dpt:995
 1168 69408 ACCEPT     tcp  --  !br-mailcow br-mailcow  0.0.0.0/0            172.22.1.250         tcp dpt:993
  152  8732 ACCEPT     tcp  --  !br-mailcow br-mailcow  0.0.0.0/0            172.22.1.250         tcp dpt:143
  206 12040 ACCEPT     tcp  --  !br-mailcow br-mailcow  0.0.0.0/0            172.22.1.250         tcp dpt:110
   81  4496 ACCEPT     tcp  --  !br-mailcow br-mailcow  0.0.0.0/0            172.22.1.253         tcp dpt:587
  197 11508 ACCEPT     tcp  --  !br-mailcow br-mailcow  0.0.0.0/0            172.22.1.253         tcp dpt:465
  561 30188 ACCEPT     tcp  --  !br-mailcow br-mailcow  0.0.0.0/0            172.22.1.253         tcp dpt:25

Chain DOCKER-ISOLATION-STAGE-1 (1 references)
 pkts bytes target     prot opt in     out     source               destination         
 367M  380G DOCKER-ISOLATION-STAGE-2  all  --  docker0 !docker0  0.0.0.0/0            0.0.0.0/0           
2517K  600M DOCKER-ISOLATION-STAGE-2  all  --  br-mailcow !br-mailcow  0.0.0.0/0            0.0.0.0/0           
13232 8282K DOCKER-ISOLATION-STAGE-2  all  --  br-2d3ce6c8a82c !br-2d3ce6c8a82c  0.0.0.0/0            0.0.0.0/0           
5638K  558M DOCKER-ISOLATION-STAGE-2  all  --  br-25dc349ea873 !br-25dc349ea873  0.0.0.0/0            0.0.0.0/0           
 696M  777G RETURN     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain DOCKER-ISOLATION-STAGE-2 (4 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 DROP       all  --  *      docker0  0.0.0.0/0            0.0.0.0/0           
    0     0 DROP       all  --  *      br-mailcow  0.0.0.0/0            0.0.0.0/0           
    0     0 DROP       all  --  *      br-2d3ce6c8a82c  0.0.0.0/0            0.0.0.0/0           
    0     0 DROP       all  --  *      br-25dc349ea873  0.0.0.0/0            0.0.0.0/0           
 375M  381G RETURN     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain DOCKER-USER (1 references)
 pkts bytes target     prot opt in     out     source               destination         
1104M 1172G RETURN     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain MAILCOW (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 DROP       all  --  *      *       195.231.2.224        0.0.0.0/0           
52397 3144K DROP       all  --  *      *       194.169.175.10       0.0.0.0/0           
    0     0 DROP       tcp  --  !br-mailcow br-mailcow  0.0.0.0/0            0.0.0.0/0            /* mailcow isolation */

Logs of ip6tables -L -vn:

Chain INPUT (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         

Chain FORWARD (policy DROP 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         
4143K 6015M MAILCOW    all      *      *       ::/0                 ::/0                 /* mailcow */
4143K 6015M DOCKER-USER  all      *      *       ::/0                 ::/0                
4143K 6015M DOCKER-ISOLATION-STAGE-1  all      *      *       ::/0                 ::/0                
    0     0 ACCEPT     all      *      docker0  ::/0                 ::/0                 ctstate RELATED,ESTABLISHED
  626 35152 DOCKER     all      *      docker0  ::/0                 ::/0                
    0     0 ACCEPT     all      docker0 !docker0  ::/0                 ::/0                
  626 35152 ACCEPT     all      docker0 docker0  ::/0                 ::/0                
3541K 5975M ACCEPT     all      *      br-mailcow  ::/0                 ::/0                 ctstate RELATED,ESTABLISHED
 606K   43M DOCKER     all      *      br-mailcow  ::/0                 ::/0                
    0     0 ACCEPT     all      br-mailcow !br-mailcow  ::/0                 ::/0                
 606K   43M ACCEPT     all      br-mailcow br-mailcow  ::/0                 ::/0                

Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         

Chain DOCKER (2 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     tcp      !docker0 docker0  ::/0                 fd00:dead:beef:c0:0:242:ac11:2  tcp dpt:9001
    0     0 ACCEPT     tcp      !br-mailcow br-mailcow  ::/0                 fd4d:6169:6c63:6f77::e  tcp dpt:443
    0     0 ACCEPT     tcp      !br-mailcow br-mailcow  ::/0                 fd4d:6169:6c63:6f77::e  tcp dpt:80
    0     0 ACCEPT     udp      !docker0 docker0  ::/0                 fd00:dead:beef:c0:0:242:ac11:3  udp dpt:1194
    0     0 ACCEPT     tcp      !br-mailcow br-mailcow  ::/0                 fd4d:6169:6c63:6f77::f  tcp dpt:4190
    0     0 ACCEPT     tcp      !br-mailcow br-mailcow  ::/0                 fd4d:6169:6c63:6f77::f  tcp dpt:995
    0     0 ACCEPT     tcp      !br-mailcow br-mailcow  ::/0                 fd4d:6169:6c63:6f77::f  tcp dpt:993
    0     0 ACCEPT     tcp      !br-mailcow br-mailcow  ::/0                 fd4d:6169:6c63:6f77::f  tcp dpt:143
    0     0 ACCEPT     tcp      !br-mailcow br-mailcow  ::/0                 fd4d:6169:6c63:6f77::f  tcp dpt:110
    0     0 ACCEPT     tcp      !br-mailcow br-mailcow  ::/0                 fd4d:6169:6c63:6f77::10  tcp dpt:587
    0     0 ACCEPT     tcp      !br-mailcow br-mailcow  ::/0                 fd4d:6169:6c63:6f77::10  tcp dpt:465
    0     0 ACCEPT     tcp      !br-mailcow br-mailcow  ::/0                 fd4d:6169:6c63:6f77::10  tcp dpt:25

Chain DOCKER-ISOLATION-STAGE-1 (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 DOCKER-ISOLATION-STAGE-2  all      docker0 !docker0  ::/0                 ::/0                
    0     0 DOCKER-ISOLATION-STAGE-2  all      br-mailcow !br-mailcow  ::/0                 ::/0                
    0     0 DOCKER-ISOLATION-STAGE-2  all      br-2d3ce6c8a82c !br-2d3ce6c8a82c  ::/0                 ::/0                
    0     0 DOCKER-ISOLATION-STAGE-2  all      br-25dc349ea873 !br-25dc349ea873  ::/0                 ::/0                
4143K 6015M RETURN     all      *      *       ::/0                 ::/0                

Chain DOCKER-ISOLATION-STAGE-2 (4 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 DROP       all      *      docker0  ::/0                 ::/0                
    0     0 DROP       all      *      br-mailcow  ::/0                 ::/0                
    0     0 DROP       all      *      br-2d3ce6c8a82c  ::/0                 ::/0                
    0     0 DROP       all      *      br-25dc349ea873  ::/0                 ::/0                
    0     0 RETURN     all      *      *       ::/0                 ::/0                

Chain DOCKER-USER (1 references)
 pkts bytes target     prot opt in     out     source               destination         
5547K 8125M RETURN     all      *      *       ::/0                 ::/0                

Chain MAILCOW (1 references)
 pkts bytes target     prot opt in     out     source               destination

Logs of iptables -L -vn -t nat:

Chain PREROUTING (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         
3429K  201M DOCKER     all  --  *      *       0.0.0.0/0            0.0.0.0/0            ADDRTYPE match dst-type LOCAL

Chain INPUT (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         

Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 DOCKER     all  --  *      *       0.0.0.0/0           !127.0.0.0/8          ADDRTYPE match dst-type LOCAL

Chain POSTROUTING (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         
 549K   48M MASQUERADE  all  --  *      !docker0  172.17.0.0/16        0.0.0.0/0           
 987K   75M MASQUERADE  all  --  *      !br-mailcow  172.22.1.0/24        0.0.0.0/0           
  468 27886 MASQUERADE  all  --  *      !br-2d3ce6c8a82c  172.18.0.0/16        0.0.0.0/0           
 777K   46M MASQUERADE  all  --  *      !br-25dc349ea873  172.19.0.0/16        0.0.0.0/0           
    0     0 MASQUERADE  tcp  --  *      *       172.17.0.2           172.17.0.2           tcp dpt:9001
    0     0 MASQUERADE  tcp  --  *      *       172.22.1.3           172.22.1.3           tcp dpt:8983
    0     0 MASQUERADE  tcp  --  *      *       172.22.1.5           172.22.1.5           tcp dpt:3306
    0     0 MASQUERADE  tcp  --  *      *       172.22.1.249         172.22.1.249         tcp dpt:6379
    0     0 MASQUERADE  tcp  --  *      *       172.22.1.11          172.22.1.11          tcp dpt:443
    0     0 MASQUERADE  tcp  --  *      *       172.22.1.11          172.22.1.11          tcp dpt:80
    0     0 MASQUERADE  tcp  --  *      *       172.19.0.2           172.19.0.2           tcp dpt:3001
    0     0 MASQUERADE  tcp  --  *      *       172.18.0.2           172.18.0.2           tcp dpt:80
    0     0 MASQUERADE  udp  --  *      *       172.17.0.3           172.17.0.3           udp dpt:1194
    0     0 MASQUERADE  tcp  --  *      *       172.22.1.250         172.22.1.250         tcp dpt:12345
    0     0 MASQUERADE  tcp  --  *      *       172.22.1.250         172.22.1.250         tcp dpt:4190
    0     0 MASQUERADE  tcp  --  *      *       172.22.1.250         172.22.1.250         tcp dpt:995
    0     0 MASQUERADE  tcp  --  *      *       172.22.1.250         172.22.1.250         tcp dpt:993
    0     0 MASQUERADE  tcp  --  *      *       172.22.1.250         172.22.1.250         tcp dpt:143
    0     0 MASQUERADE  tcp  --  *      *       172.22.1.250         172.22.1.250         tcp dpt:110
    0     0 MASQUERADE  tcp  --  *      *       172.22.1.253         172.22.1.253         tcp dpt:587
    0     0 MASQUERADE  tcp  --  *      *       172.22.1.253         172.22.1.253         tcp dpt:465
    0     0 MASQUERADE  tcp  --  *      *       172.22.1.253         172.22.1.253         tcp dpt:25

Chain DOCKER (2 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 RETURN     all  --  docker0 *       0.0.0.0/0            0.0.0.0/0           
   86  5160 RETURN     all  --  br-mailcow *       0.0.0.0/0            0.0.0.0/0           
    0     0 RETURN     all  --  br-2d3ce6c8a82c *       0.0.0.0/0            0.0.0.0/0           
56135 3368K RETURN     all  --  br-25dc349ea873 *       0.0.0.0/0            0.0.0.0/0           
 7480  449K DNAT       tcp  --  !docker0 *       0.0.0.0/0            0.0.0.0/0            tcp dpt:9001 to:172.17.0.2:9001
    0     0 DNAT       tcp  --  !br-mailcow *       0.0.0.0/0            127.0.0.1            tcp dpt:18983 to:172.22.1.3:8983
    0     0 DNAT       tcp  --  !br-mailcow *       0.0.0.0/0            127.0.0.1            tcp dpt:13306 to:172.22.1.5:3306
    0     0 DNAT       tcp  --  !br-mailcow *       0.0.0.0/0            127.0.0.1            tcp dpt:7654 to:172.22.1.249:6379
32021 1687K DNAT       tcp  --  !br-mailcow *       0.0.0.0/0            0.0.0.0/0            tcp dpt:443 to:172.22.1.11:443
23716 1173K DNAT       tcp  --  !br-mailcow *       0.0.0.0/0            0.0.0.0/0            tcp dpt:80 to:172.22.1.11:80
  213 12780 DNAT       tcp  --  !br-25dc349ea873 *       0.0.0.0/0            0.0.0.0/0            tcp dpt:3444 to:172.19.0.2:3001
 2514  151K DNAT       tcp  --  !br-2d3ce6c8a82c *       0.0.0.0/0            0.0.0.0/0            tcp dpt:8597 to:172.18.0.2:80
   91  4330 DNAT       udp  --  !docker0 *       0.0.0.0/0            0.0.0.0/0            udp dpt:1194 to:172.17.0.3:1194
    0     0 DNAT       tcp  --  !br-mailcow *       0.0.0.0/0            127.0.0.1            tcp dpt:19991 to:172.22.1.250:12345
    0     0 DNAT       tcp  --  !br-mailcow *       0.0.0.0/0            0.0.0.0/0            tcp dpt:4190 to:172.22.1.250:4190
  247 14492 DNAT       tcp  --  !br-mailcow *       0.0.0.0/0            0.0.0.0/0            tcp dpt:995 to:172.22.1.250:995
 1168 69408 DNAT       tcp  --  !br-mailcow *       0.0.0.0/0            0.0.0.0/0            tcp dpt:993 to:172.22.1.250:993
  152  8732 DNAT       tcp  --  !br-mailcow *       0.0.0.0/0            0.0.0.0/0            tcp dpt:143 to:172.22.1.250:143
  206 12040 DNAT       tcp  --  !br-mailcow *       0.0.0.0/0            0.0.0.0/0            tcp dpt:110 to:172.22.1.250:110
   81  4496 DNAT       tcp  --  !br-mailcow *       0.0.0.0/0            0.0.0.0/0            tcp dpt:587 to:172.22.1.253:587
  197 11508 DNAT       tcp  --  !br-mailcow *       0.0.0.0/0            0.0.0.0/0            tcp dpt:465 to:172.22.1.253:465
  561 30188 DNAT       tcp  --  !br-mailcow *       0.0.0.0/0            0.0.0.0/0            tcp dpt:25 to:172.22.1.253:25

Logs of ip6tables -L -vn -t nat:

Chain PREROUTING (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 DOCKER     all      *      *       ::/0                 ::/0                 ADDRTYPE match dst-type LOCAL

Chain INPUT (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         

Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         
  313 45698 DOCKER     all      *      *       ::/0                !::1                  ADDRTYPE match dst-type LOCAL

Chain POSTROUTING (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 MASQUERADE  all      *      !docker0  fd00:dead:beef:c0::/80  ::/0                
    0     0 MASQUERADE  all      *      !br-mailcow  fd4d:6169:6c63:6f77::/64  ::/0                
    0     0 MASQUERADE  all      *      docker0  ::/0                 ::/0                 ADDRTYPE match dst-type LOCAL
    0     0 MASQUERADE  tcp      *      *       fd00:dead:beef:c0:0:242:ac11:2  fd00:dead:beef:c0:0:242:ac11:2  tcp dpt:9001
    0     0 MASQUERADE  tcp      *      *       fd4d:6169:6c63:6f77::e  fd4d:6169:6c63:6f77::e  tcp dpt:443
    0     0 MASQUERADE  tcp      *      *       fd4d:6169:6c63:6f77::e  fd4d:6169:6c63:6f77::e  tcp dpt:80
    0     0 MASQUERADE  udp      *      *       fd00:dead:beef:c0:0:242:ac11:3  fd00:dead:beef:c0:0:242:ac11:3  udp dpt:1194
    0     0 MASQUERADE  tcp      *      *       fd4d:6169:6c63:6f77::f  fd4d:6169:6c63:6f77::f  tcp dpt:4190
    0     0 MASQUERADE  tcp      *      *       fd4d:6169:6c63:6f77::f  fd4d:6169:6c63:6f77::f  tcp dpt:995
    0     0 MASQUERADE  tcp      *      *       fd4d:6169:6c63:6f77::f  fd4d:6169:6c63:6f77::f  tcp dpt:993
    0     0 MASQUERADE  tcp      *      *       fd4d:6169:6c63:6f77::f  fd4d:6169:6c63:6f77::f  tcp dpt:143
    0     0 MASQUERADE  tcp      *      *       fd4d:6169:6c63:6f77::f  fd4d:6169:6c63:6f77::f  tcp dpt:110
    0     0 MASQUERADE  tcp      *      *       fd4d:6169:6c63:6f77::10  fd4d:6169:6c63:6f77::10  tcp dpt:587
    0     0 MASQUERADE  tcp      *      *       fd4d:6169:6c63:6f77::10  fd4d:6169:6c63:6f77::10  tcp dpt:465
    0     0 MASQUERADE  tcp      *      *       fd4d:6169:6c63:6f77::10  fd4d:6169:6c63:6f77::10  tcp dpt:25

Chain DOCKER (2 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 RETURN     all      docker0 *       ::/0                 ::/0                
    0     0 RETURN     all      br-mailcow *       ::/0                 ::/0                
    0     0 DNAT       tcp      !docker0 *       ::/0                 ::/0                 tcp dpt:9001 to:[fd00:dead:beef:c0:0:242:ac11:2]:9001
    0     0 DNAT       tcp      !br-mailcow *       ::/0                 ::/0                 tcp dpt:443 to:[fd4d:6169:6c63:6f77::e]:443
    0     0 DNAT       tcp      !br-mailcow *       ::/0                 ::/0                 tcp dpt:80 to:[fd4d:6169:6c63:6f77::e]:80
    0     0 DNAT       udp      !docker0 *       ::/0                 ::/0                 udp dpt:1194 to:[fd00:dead:beef:c0:0:242:ac11:3]:1194
    0     0 DNAT       tcp      !br-mailcow *       ::/0                 ::/0                 tcp dpt:4190 to:[fd4d:6169:6c63:6f77::f]:4190
    0     0 DNAT       tcp      !br-mailcow *       ::/0                 ::/0                 tcp dpt:995 to:[fd4d:6169:6c63:6f77::f]:995
    0     0 DNAT       tcp      !br-mailcow *       ::/0                 ::/0                 tcp dpt:993 to:[fd4d:6169:6c63:6f77::f]:993
    0     0 DNAT       tcp      !br-mailcow *       ::/0                 ::/0                 tcp dpt:143 to:[fd4d:6169:6c63:6f77::f]:143
    0     0 DNAT       tcp      !br-mailcow *       ::/0                 ::/0                 tcp dpt:110 to:[fd4d:6169:6c63:6f77::f]:110
    0     0 DNAT       tcp      !br-mailcow *       ::/0                 ::/0                 tcp dpt:587 to:[fd4d:6169:6c63:6f77::10]:587
    0     0 DNAT       tcp      !br-mailcow *       ::/0                 ::/0                 tcp dpt:465 to:[fd4d:6169:6c63:6f77::10]:465
    0     0 DNAT       tcp      !br-mailcow *       ::/0                 ::/0                 tcp dpt:25 to:[fd4d:6169:6c63:6f77::10]:25

DNS check:

172.64.155.249
104.18.32.7
patschi commented 4 weeks ago

Can you double-test with a different SMTP mailer/external email client using the exact same server and credentials? If the issue is not present on other email clients, I'd say Wordpress plugin does odd stuff.