search

mailcow / mailcow-dockerized

mailcow: dockerized - 🐮 + 🐋 = 💕
https://mailcow.email
GNU General Public License v3.0
9k stars 1.18k forks source link

Postfix container stuck at starting #5947

Closed aronmgv closed 4 months ago

aronmgv commented 4 months ago

Contribution guidelines

I've found a bug and checked that ...

Description

For some reason postfix container crashed and won't start:

NAME                                    IMAGE                                        COMMAND                  SERVICE             CREATED             STATUS                    PORTS
mailcowdockerized-acme-mailcow-1        mailcow/acme:1.88                            "/sbin/tini -g -- /s…"   acme-mailcow        10 minutes ago      Up 9 minutes
mailcowdockerized-certdumper-1          ghcr.io/kereis/traefik-certs-dumper:latest   "/usr/bin/dump --res…"   certdumper          10 minutes ago      Up 10 minutes (healthy)
mailcowdockerized-clamd-mailcow-1       mailcow/clamd:1.66                           "/sbin/tini -g -- /c…"   clamd-mailcow       10 minutes ago      Up 9 minutes (healthy)
mailcowdockerized-dockerapi-mailcow-1   mailcow/dockerapi:2.08                       "/bin/sh /app/docker…"   dockerapi-mailcow   10 minutes ago      Up 10 minutes
mailcowdockerized-dovecot-mailcow-1     mailcow/dovecot:1.30                         "/docker-entrypoint.…"   dovecot-mailcow     10 minutes ago      Up 10 minutes             0.0.0.0:110->110/tcp, :::110->110/tcp, 0.0.0.0:143->143/tcp, :::143->143/tcp, 0.0.0.0:993->993/tcp, :::993->993/tcp, 0.0.0.0:995->995/tcp, :::995->995/tcp, 0.0.0.0:4190->4190/tcp, :::4190->4190/tcp, 127.0.0.1:19991->12345/tcp
mailcowdockerized-memcached-mailcow-1   memcached:alpine                             "docker-entrypoint.s…"   memcached-mailcow   10 minutes ago      Up 10 minutes             11211/tcp
mailcowdockerized-mysql-mailcow-1       mariadb:10.5                                 "docker-entrypoint.s…"   mysql-mailcow       10 minutes ago      Up 10 minutes             127.0.0.1:13306->3306/tcp
mailcowdockerized-netfilter-mailcow-1   mailcow/netfilter:1.59                       "/bin/sh -c /app/doc…"   netfilter-mailcow   10 minutes ago      Up 10 minutes
mailcowdockerized-nginx-mailcow-1       nginx:mainline-alpine                        "/docker-entrypoint.…"   nginx-mailcow       10 minutes ago      Up 10 minutes             0.0.0.0:52180->52180/tcp, :::52180->52180/tcp, 80/tcp, 0.0.0.0:52190->52190/tcp, :::52190->52190/tcp
mailcowdockerized-ofelia-mailcow-1      mcuadros/ofelia:latest                       "/usr/bin/ofelia dae…"   ofelia-mailcow      10 minutes ago      Up 10 minutes
mailcowdockerized-olefy-mailcow-1       mailcow/olefy:1.13                           "python3 -u /app/ole…"   olefy-mailcow       10 minutes ago      Up 10 minutes
mailcowdockerized-php-fpm-mailcow-1     mailcow/phpfpm:1.88                          "/docker-entrypoint.…"   php-fpm-mailcow     10 minutes ago      Up 10 minutes             9000/tcp
mailcowdockerized-redis-mailcow-1       redis:7-alpine                               "docker-entrypoint.s…"   redis-mailcow       10 minutes ago      Up 10 minutes             127.0.0.1:7654->6379/tcp
mailcowdockerized-rspamd-mailcow-1      mailcow/rspamd:1.96                          "/docker-entrypoint.…"   rspamd-mailcow      10 minutes ago      Up 10 minutes
mailcowdockerized-sogo-mailcow-1        mailcow/sogo:1.123                           "/docker-entrypoint.…"   sogo-mailcow        10 minutes ago      Up 10 minutes
mailcowdockerized-solr-mailcow-1        mailcow/solr:1.8.3                           "docker-entrypoint.s…"   solr-mailcow        10 minutes ago      Up 10 minutes             127.0.0.1:18983->8983/tcp
mailcowdockerized-unbound-mailcow-1     mailcow/unbound:1.22                         "/docker-entrypoint.…"   unbound-mailcow     10 minutes ago      Up 10 minutes (healthy)   53/tcp, 53/udp

Tried rebooting the machine Tried removing the postfix volume

I am clueless what try next..


### Logs:

```plain text
No error in logs.. Cant even post logs from postfix since it is stuck at `starting` and logs are empty..

Steps to reproduce:

1. pull mailcow
2. run `./update.sh`
3. `docker-compose up -d`

Which branch are you using?

master

Which architecture are you using?

x86

Operating System:

Debian 12

Server/VM specifications:

64G, 12cores

Is Apparmor, SELinux or similar active?

dont know

Virtualization technology:

docker

Docker version:

27.0.3

docker-compose version or docker compose version:

v2.18.1

mailcow version:

2024-06a

Reverse proxy:

Traefik

Logs of git diff:

diff --git a/data/assets/ssl-example/cert.pem b/data/assets/ssl-example/cert.pem
index 96d16bec..8d9120f9 100644
--- a/data/assets/ssl-example/cert.pem
+++ b/data/assets/ssl-example/cert.pem
@@ -1,19 +1,33 @@
 -----BEGIN CERTIFICATE-----
XXX
 -----END CERTIFICATE-----
diff --git a/data/assets/ssl-example/key.pem b/data/assets/ssl-example/key.pem
index cedf35a0..6571e520 100644
--- a/data/assets/ssl-example/key.pem
+++ b/data/assets/ssl-example/key.pem
@@ -1,27 +1,52 @@
------BEGIN RSA PRIVATE KEY-----
XXX
------END RSA PRIVATE KEY-----
+-----BEGIN PRIVATE KEY-----
XXX
+-----END PRIVATE KEY-----
diff --git a/data/conf/postfix/main.cf b/data/conf/postfix/main.cf
index 6a87f2ec..4acf7808 100644
--- a/data/conf/postfix/main.cf
+++ b/data/conf/postfix/main.cf
@@ -173,3 +173,36 @@ parent_domain_matches_subdomains = debug_peer_list,fast_flush_domains,mynetworks

 # DO NOT EDIT ANYTHING BELOW #
 # Overrides #
+
+postscreen_dnsbl_sites = wl.mailspike.net=127.0.0.[18;19;20]*-2
+  hostkarma.junkemailfilter.com=127.0.0.1*-2
+  list.dnswl.org=127.0.[0..255].0*-2
+  list.dnswl.org=127.0.[0..255].1*-4
+  list.dnswl.org=127.0.[0..255].2*-6
+  list.dnswl.org=127.0.[0..255].3*-8
+  ix.dnsbl.manitu.net*2
+  bl.spamcop.net*2
+  bl.suomispam.net*2
+  hostkarma.junkemailfilter.com=127.0.0.2*3
+  hostkarma.junkemailfilter.com=127.0.0.4*2
+  hostkarma.junkemailfilter.com=127.0.1.2*1
+  backscatter.spameatingmonkey.net*2
+  bl.ipv6.spameatingmonkey.net*2
+  bl.spameatingmonkey.net*2
+  b.barracudacentral.org=127.0.0.2*7
+  bl.mailspike.net=127.0.0.2*5
+  bl.mailspike.net=127.0.0.[10;11;12]*4
+  dnsbl.sorbs.net=127.0.0.10*8
+  dnsbl.sorbs.net=127.0.0.5*6
+  dnsbl.sorbs.net=127.0.0.7*3
+  dnsbl.sorbs.net=127.0.0.8*2
+  dnsbl.sorbs.net=127.0.0.6*2
+  dnsbl.sorbs.net=127.0.0.9*2
+  zen.spamhaus.org=127.0.0.[10;11]*8
+  zen.spamhaus.org=127.0.0.[4..7]*6
+  zen.spamhaus.org=127.0.0.3*4
+  zen.spamhaus.org=127.0.0.2*3
+
+# User Overrides
+myhostname = mail.aronmgv.com
+
diff --git a/docker-compose.yml b/docker-compose.yml
index b0f50dd6..563144af 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -611,36 +611,6 @@ services:
           aliases:
             - ofelia

-    ipv6nat-mailcow:
-      depends_on:
-        - unbound-mailcow
-        - mysql-mailcow
-        - redis-mailcow
-        - clamd-mailcow
-        - rspamd-mailcow
-        - php-fpm-mailcow
-        - sogo-mailcow
-        - dovecot-mailcow
-        - postfix-mailcow
-        - memcached-mailcow
-        - nginx-mailcow
-        - acme-mailcow
-        - netfilter-mailcow
-        - watchdog-mailcow
-        - dockerapi-mailcow
-        - solr-mailcow
-      environment:
-        - TZ=${TZ}
-      image: robbertkl/ipv6nat
-      security_opt:
-        - label=disable
-      restart: always
-      privileged: true
-      network_mode: "host"
-      volumes:
-        - /var/run/docker.sock:/var/run/docker.sock:ro
-        - /lib/modules:/lib/modules:ro
-
 networks:
   mailcow-network:
     driver: bridge

Logs of iptables -L -vn:

Chain INPUT (policy DROP 7 packets, 360 bytes)
 pkts bytes target     prot opt in     out     source               destination
18784 8415K MAILCOW    0    --  *      *       0.0.0.0/0            0.0.0.0/0            /* mailcow */
  331 20342 ACCEPT     0    --  lo     *       0.0.0.0/0            0.0.0.0/0            /* loopback in */
    0     0 ACCEPT     0    --  tun0   *       0.0.0.0/0            0.0.0.0/0            /* tunnel in */
 9214  536K ACCEPT     6    --  br0    *       0.0.0.0/0            0.0.0.0/0            tcp dpt:22
    0     0 ACCEPT     17   --  br0    *       0.0.0.0/0            0.0.0.0/0            udp dpt:1194
    0     0 f2b-sshd   6    --  *      *       0.0.0.0/0            0.0.0.0/0            multiport dports 22
11992 9861K ACCEPT     0    --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate RELATED,ESTABLISHED
    4   328 DROP       0    --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate INVALID
 1317  224K ACCEPT     0    --  *      *       0.0.0.0/0            0.0.0.0/0            match-set WHITELIST src
    0     0 DROP       0    --  *      *       0.0.0.0/0            0.0.0.0/0            match-set BLACKLIST src
  137 12044 DROP       0    --  *      *       0.0.0.0/0            0.0.0.0/0            match-set FIREHOL src
    0     0 ACCEPT     0    --  br0    *       192.168.255.0/24     0.0.0.0/0            /* LAN */
    0     0 ACCEPT     0    --  br0    *       10.8.0.0/24          0.0.0.0/0            /* VPN */
    0     0 ACCEPT     1    --  br0    *       0.0.0.0/0            0.0.0.0/0            icmptype 8 /* ping */
    0     0 ACCEPT     17   --  br0    *       0.0.0.0/0            0.0.0.0/0            udp dpt:53 /* DNS UDP */
    0     0 ACCEPT     6    --  br0    *       0.0.0.0/0            0.0.0.0/0            tcp dpt:53 /* DNS TCP */
    0     0 ACCEPT     17   --  br0    *       0.0.0.0/0            0.0.0.0/0            udp spt:53 state ESTABLISHED /* Answer from DNS */
    7   360 LOG        0    --  *      *       0.0.0.0/0            0.0.0.0/0            limit: avg 3/min burst 5 LOG flags 0 level 4 prefix "iptables_INPUT_denied: "

Chain FORWARD (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination
 606K  505M MAILCOW    0    --  *      *       0.0.0.0/0            0.0.0.0/0            /* mailcow */
 607K  505M DOCKER-USER  0    --  *      *       0.0.0.0/0            0.0.0.0/0
  183  136K DOCKER-ISOLATION-STAGE-1  0    --  *      *       0.0.0.0/0            0.0.0.0/0
    0     0 ACCEPT     0    --  *      br-mailcow  0.0.0.0/0            0.0.0.0/0            ctstate RELATED,ESTABLISHED
    0     0 DOCKER     0    --  *      br-mailcow  0.0.0.0/0            0.0.0.0/0
    0     0 ACCEPT     0    --  br-mailcow !br-mailcow  0.0.0.0/0            0.0.0.0/0
    0     0 ACCEPT     0    --  br-mailcow br-mailcow  0.0.0.0/0            0.0.0.0/0
    0     0 ACCEPT     0    --  *      docker0  0.0.0.0/0            0.0.0.0/0            ctstate RELATED,ESTABLISHED
    0     0 DOCKER     0    --  *      docker0  0.0.0.0/0            0.0.0.0/0
    0     0 ACCEPT     0    --  docker0 !docker0  0.0.0.0/0            0.0.0.0/0
    0     0 ACCEPT     0    --  docker0 docker0  0.0.0.0/0            0.0.0.0/0
    0     0 ACCEPT     0    --  *      br-720ab72489d9  0.0.0.0/0            0.0.0.0/0            ctstate RELATED,ESTABLISHED
    5   244 DOCKER     0    --  *      br-720ab72489d9  0.0.0.0/0            0.0.0.0/0
    0     0 ACCEPT     0    --  br-720ab72489d9 !br-720ab72489d9  0.0.0.0/0            0.0.0.0/0
    0     0 ACCEPT     0    --  br-720ab72489d9 br-720ab72489d9  0.0.0.0/0            0.0.0.0/0
   43 59320 ACCEPT     0    --  *      br-eed726952215  0.0.0.0/0            0.0.0.0/0            ctstate RELATED,ESTABLISHED
    0     0 DOCKER     0    --  *      br-eed726952215  0.0.0.0/0            0.0.0.0/0
   39  2028 ACCEPT     0    --  br-eed726952215 !br-eed726952215  0.0.0.0/0            0.0.0.0/0
    0     0 ACCEPT     0    --  br-eed726952215 br-eed726952215  0.0.0.0/0            0.0.0.0/0
    0     0 ACCEPT     0    --  *      br-2bc56dc9b40e  0.0.0.0/0            0.0.0.0/0            ctstate RELATED,ESTABLISHED
    0     0 DOCKER     0    --  *      br-2bc56dc9b40e  0.0.0.0/0            0.0.0.0/0
    0     0 ACCEPT     0    --  br-2bc56dc9b40e !br-2bc56dc9b40e  0.0.0.0/0            0.0.0.0/0
    0     0 ACCEPT     0    --  br-2bc56dc9b40e br-2bc56dc9b40e  0.0.0.0/0            0.0.0.0/0
    0     0 ACCEPT     0    --  *      br-6083d8c65b42  0.0.0.0/0            0.0.0.0/0            ctstate RELATED,ESTABLISHED
    0     0 DOCKER     0    --  *      br-6083d8c65b42  0.0.0.0/0            0.0.0.0/0
    0     0 ACCEPT     0    --  br-6083d8c65b42 !br-6083d8c65b42  0.0.0.0/0            0.0.0.0/0
    0     0 ACCEPT     0    --  br-6083d8c65b42 br-6083d8c65b42  0.0.0.0/0            0.0.0.0/0
    0     0 ACCEPT     0    --  *      br-b4c82a79d122  0.0.0.0/0            0.0.0.0/0            ctstate RELATED,ESTABLISHED
    0     0 DOCKER     0    --  *      br-b4c82a79d122  0.0.0.0/0            0.0.0.0/0
    0     0 ACCEPT     0    --  br-b4c82a79d122 !br-b4c82a79d122  0.0.0.0/0            0.0.0.0/0
    0     0 ACCEPT     0    --  br-b4c82a79d122 br-b4c82a79d122  0.0.0.0/0            0.0.0.0/0
    0     0 ACCEPT     0    --  *      br-4050b2648e08  0.0.0.0/0            0.0.0.0/0            ctstate RELATED,ESTABLISHED
    0     0 DOCKER     0    --  *      br-4050b2648e08  0.0.0.0/0            0.0.0.0/0
    0     0 ACCEPT     0    --  br-4050b2648e08 !br-4050b2648e08  0.0.0.0/0            0.0.0.0/0
    0     0 ACCEPT     0    --  br-4050b2648e08 br-4050b2648e08  0.0.0.0/0            0.0.0.0/0
    0     0 ACCEPT     0    --  *      br-051ea57565e6  0.0.0.0/0            0.0.0.0/0            ctstate RELATED,ESTABLISHED
    0     0 DOCKER     0    --  *      br-051ea57565e6  0.0.0.0/0            0.0.0.0/0
    0     0 ACCEPT     0    --  br-051ea57565e6 !br-051ea57565e6  0.0.0.0/0            0.0.0.0/0
    0     0 ACCEPT     0    --  br-051ea57565e6 br-051ea57565e6  0.0.0.0/0            0.0.0.0/0
    0     0 ACCEPT     0    --  *      br-85affb5abaaa  0.0.0.0/0            0.0.0.0/0            ctstate RELATED,ESTABLISHED
    0     0 DOCKER     0    --  *      br-85affb5abaaa  0.0.0.0/0            0.0.0.0/0
    0     0 ACCEPT     0    --  br-85affb5abaaa !br-85affb5abaaa  0.0.0.0/0            0.0.0.0/0
    0     0 ACCEPT     0    --  br-85affb5abaaa br-85affb5abaaa  0.0.0.0/0            0.0.0.0/0
    0     0 ACCEPT     0    --  *      br-f83b4226c672  0.0.0.0/0            0.0.0.0/0            ctstate RELATED,ESTABLISHED
    0     0 DOCKER     0    --  *      br-f83b4226c672  0.0.0.0/0            0.0.0.0/0
    0     0 ACCEPT     0    --  br-f83b4226c672 !br-f83b4226c672  0.0.0.0/0            0.0.0.0/0
    0     0 ACCEPT     0    --  br-f83b4226c672 br-f83b4226c672  0.0.0.0/0            0.0.0.0/0
    0     0 ACCEPT     0    --  *      br-49b7b99aa265  0.0.0.0/0            0.0.0.0/0            ctstate RELATED,ESTABLISHED
    0     0 DOCKER     0    --  *      br-49b7b99aa265  0.0.0.0/0            0.0.0.0/0
    0     0 ACCEPT     0    --  br-49b7b99aa265 !br-49b7b99aa265  0.0.0.0/0            0.0.0.0/0
    0     0 ACCEPT     0    --  br-49b7b99aa265 br-49b7b99aa265  0.0.0.0/0            0.0.0.0/0
    0     0 ACCEPT     0    --  *      br-9e74d39fa2c9  0.0.0.0/0            0.0.0.0/0            ctstate RELATED,ESTABLISHED
    0     0 DOCKER     0    --  *      br-9e74d39fa2c9  0.0.0.0/0            0.0.0.0/0
    0     0 ACCEPT     0    --  br-9e74d39fa2c9 !br-9e74d39fa2c9  0.0.0.0/0            0.0.0.0/0
    0     0 ACCEPT     0    --  br-9e74d39fa2c9 br-9e74d39fa2c9  0.0.0.0/0            0.0.0.0/0
    0     0 ACCEPT     0    --  *      br-975c73e0ca36  0.0.0.0/0            0.0.0.0/0            ctstate RELATED,ESTABLISHED
    0     0 DOCKER     0    --  *      br-975c73e0ca36  0.0.0.0/0            0.0.0.0/0
    0     0 ACCEPT     0    --  br-975c73e0ca36 !br-975c73e0ca36  0.0.0.0/0            0.0.0.0/0
    0     0 ACCEPT     0    --  br-975c73e0ca36 br-975c73e0ca36  0.0.0.0/0            0.0.0.0/0
    0     0 ACCEPT     0    --  *      br-2f8d9214a348  0.0.0.0/0            0.0.0.0/0            ctstate RELATED,ESTABLISHED
    0     0 DOCKER     0    --  *      br-2f8d9214a348  0.0.0.0/0            0.0.0.0/0
    0     0 ACCEPT     0    --  br-2f8d9214a348 !br-2f8d9214a348  0.0.0.0/0            0.0.0.0/0
    0     0 ACCEPT     0    --  br-2f8d9214a348 br-2f8d9214a348  0.0.0.0/0            0.0.0.0/0
    0     0 ACCEPT     0    --  *      br-2b281a45c53a  0.0.0.0/0            0.0.0.0/0            ctstate RELATED,ESTABLISHED
    0     0 DOCKER     0    --  *      br-2b281a45c53a  0.0.0.0/0            0.0.0.0/0
    0     0 ACCEPT     0    --  br-2b281a45c53a !br-2b281a45c53a  0.0.0.0/0            0.0.0.0/0
    0     0 ACCEPT     0    --  br-2b281a45c53a br-2b281a45c53a  0.0.0.0/0            0.0.0.0/0
    0     0 ACCEPT     0    --  *      br-1c0e4382359c  0.0.0.0/0            0.0.0.0/0            ctstate RELATED,ESTABLISHED
    0     0 DOCKER     0    --  *      br-1c0e4382359c  0.0.0.0/0            0.0.0.0/0
    0     0 ACCEPT     0    --  br-1c0e4382359c !br-1c0e4382359c  0.0.0.0/0            0.0.0.0/0
    0     0 ACCEPT     0    --  br-1c0e4382359c br-1c0e4382359c  0.0.0.0/0            0.0.0.0/0
    0     0 ACCEPT     0    --  *      br-f1e2b6ac7e48  0.0.0.0/0            0.0.0.0/0            ctstate RELATED,ESTABLISHED
    0     0 DOCKER     0    --  *      br-f1e2b6ac7e48  0.0.0.0/0            0.0.0.0/0
    0     0 ACCEPT     0    --  br-f1e2b6ac7e48 !br-f1e2b6ac7e48  0.0.0.0/0            0.0.0.0/0
    0     0 ACCEPT     0    --  br-f1e2b6ac7e48 br-f1e2b6ac7e48  0.0.0.0/0            0.0.0.0/0
    0     0 ACCEPT     0    --  *      br-ca9c8e843914  0.0.0.0/0            0.0.0.0/0            ctstate RELATED,ESTABLISHED
    0     0 DOCKER     0    --  *      br-ca9c8e843914  0.0.0.0/0            0.0.0.0/0
    0     0 ACCEPT     0    --  br-ca9c8e843914 !br-ca9c8e843914  0.0.0.0/0            0.0.0.0/0
    0     0 ACCEPT     0    --  br-ca9c8e843914 br-ca9c8e843914  0.0.0.0/0            0.0.0.0/0
    0     0 ACCEPT     0    --  *      br-9f77e96147b6  0.0.0.0/0            0.0.0.0/0            ctstate RELATED,ESTABLISHED
    0     0 DOCKER     0    --  *      br-9f77e96147b6  0.0.0.0/0            0.0.0.0/0
    0     0 ACCEPT     0    --  br-9f77e96147b6 !br-9f77e96147b6  0.0.0.0/0            0.0.0.0/0
    0     0 ACCEPT     0    --  br-9f77e96147b6 br-9f77e96147b6  0.0.0.0/0            0.0.0.0/0
    0     0 ACCEPT     0    --  *      br-f79bc7c22561  0.0.0.0/0            0.0.0.0/0            ctstate RELATED,ESTABLISHED
    0     0 DOCKER     0    --  *      br-f79bc7c22561  0.0.0.0/0            0.0.0.0/0
    0     0 ACCEPT     0    --  br-f79bc7c22561 !br-f79bc7c22561  0.0.0.0/0            0.0.0.0/0
    0     0 ACCEPT     0    --  br-f79bc7c22561 br-f79bc7c22561  0.0.0.0/0            0.0.0.0/0
    0     0 ACCEPT     0    --  *      br-b1371bc813e3  0.0.0.0/0            0.0.0.0/0            ctstate RELATED,ESTABLISHED
    0     0 DOCKER     0    --  *      br-b1371bc813e3  0.0.0.0/0            0.0.0.0/0
    0     0 ACCEPT     0    --  br-b1371bc813e3 !br-b1371bc813e3  0.0.0.0/0            0.0.0.0/0
    0     0 ACCEPT     0    --  br-b1371bc813e3 br-b1371bc813e3  0.0.0.0/0            0.0.0.0/0
    0     0 ACCEPT     0    --  *      br-6553f9280c47  0.0.0.0/0            0.0.0.0/0            ctstate RELATED,ESTABLISHED
    0     0 DOCKER     0    --  *      br-6553f9280c47  0.0.0.0/0            0.0.0.0/0
    0     0 ACCEPT     0    --  br-6553f9280c47 !br-6553f9280c47  0.0.0.0/0            0.0.0.0/0
    0     0 ACCEPT     0    --  br-6553f9280c47 br-6553f9280c47  0.0.0.0/0            0.0.0.0/0
    0     0 ACCEPT     0    --  *      br-3e4962347c8a  0.0.0.0/0            0.0.0.0/0            ctstate RELATED,ESTABLISHED
    0     0 DOCKER     0    --  *      br-3e4962347c8a  0.0.0.0/0            0.0.0.0/0
    0     0 ACCEPT     0    --  br-3e4962347c8a !br-3e4962347c8a  0.0.0.0/0            0.0.0.0/0
    0     0 ACCEPT     0    --  br-3e4962347c8a br-3e4962347c8a  0.0.0.0/0            0.0.0.0/0
    0     0 ACCEPT     0    --  *      br-06209d87f975  0.0.0.0/0            0.0.0.0/0            ctstate RELATED,ESTABLISHED
    0     0 DOCKER     0    --  *      br-06209d87f975  0.0.0.0/0            0.0.0.0/0
    0     0 ACCEPT     0    --  br-06209d87f975 !br-06209d87f975  0.0.0.0/0            0.0.0.0/0
    0     0 ACCEPT     0    --  br-06209d87f975 br-06209d87f975  0.0.0.0/0            0.0.0.0/0
    0     0 ACCEPT     0    --  *      br-3fabc97e7faa  0.0.0.0/0            0.0.0.0/0            ctstate RELATED,ESTABLISHED
    0     0 DOCKER     0    --  *      br-3fabc97e7faa  0.0.0.0/0            0.0.0.0/0
    0     0 ACCEPT     0    --  br-3fabc97e7faa !br-3fabc97e7faa  0.0.0.0/0            0.0.0.0/0
    0     0 ACCEPT     0    --  br-3fabc97e7faa br-3fabc97e7faa  0.0.0.0/0            0.0.0.0/0
    0     0 ACCEPT     0    --  *      br-389eed92cc2c  0.0.0.0/0            0.0.0.0/0            ctstate RELATED,ESTABLISHED
    0     0 DOCKER     0    --  *      br-389eed92cc2c  0.0.0.0/0            0.0.0.0/0
    0     0 ACCEPT     0    --  br-389eed92cc2c !br-389eed92cc2c  0.0.0.0/0            0.0.0.0/0
    0     0 ACCEPT     0    --  br-389eed92cc2c br-389eed92cc2c  0.0.0.0/0            0.0.0.0/0
    0     0 ACCEPT     0    --  *      br-d56a6c59fbe0  0.0.0.0/0            0.0.0.0/0            ctstate RELATED,ESTABLISHED
    0     0 DOCKER     0    --  *      br-d56a6c59fbe0  0.0.0.0/0            0.0.0.0/0
    0     0 ACCEPT     0    --  br-d56a6c59fbe0 !br-d56a6c59fbe0  0.0.0.0/0            0.0.0.0/0
    0     0 ACCEPT     0    --  br-d56a6c59fbe0 br-d56a6c59fbe0  0.0.0.0/0            0.0.0.0/0
    0     0 ACCEPT     0    --  *      br-d3c6315441bb  0.0.0.0/0            0.0.0.0/0            ctstate RELATED,ESTABLISHED
    0     0 DOCKER     0    --  *      br-d3c6315441bb  0.0.0.0/0            0.0.0.0/0
    0     0 ACCEPT     0    --  br-d3c6315441bb !br-d3c6315441bb  0.0.0.0/0            0.0.0.0/0
    0     0 ACCEPT     0    --  br-d3c6315441bb br-d3c6315441bb  0.0.0.0/0            0.0.0.0/0
    0     0 ACCEPT     0    --  *      br-b91cbacdf824  0.0.0.0/0            0.0.0.0/0            ctstate RELATED,ESTABLISHED
    0     0 DOCKER     0    --  *      br-b91cbacdf824  0.0.0.0/0            0.0.0.0/0
    0     0 ACCEPT     0    --  br-b91cbacdf824 !br-b91cbacdf824  0.0.0.0/0            0.0.0.0/0
    0     0 ACCEPT     0    --  br-b91cbacdf824 br-b91cbacdf824  0.0.0.0/0            0.0.0.0/0
    0     0 ACCEPT     0    --  *      br-4cbd1cc687d4  0.0.0.0/0            0.0.0.0/0            ctstate RELATED,ESTABLISHED
    0     0 DOCKER     0    --  *      br-4cbd1cc687d4  0.0.0.0/0            0.0.0.0/0
    0     0 ACCEPT     0    --  br-4cbd1cc687d4 !br-4cbd1cc687d4  0.0.0.0/0            0.0.0.0/0
    0     0 ACCEPT     0    --  br-4cbd1cc687d4 br-4cbd1cc687d4  0.0.0.0/0            0.0.0.0/0
    0     0 ACCEPT     0    --  *      br-1a6252e55e9d  0.0.0.0/0            0.0.0.0/0            ctstate RELATED,ESTABLISHED
    0     0 DOCKER     0    --  *      br-1a6252e55e9d  0.0.0.0/0            0.0.0.0/0
    0     0 ACCEPT     0    --  br-1a6252e55e9d !br-1a6252e55e9d  0.0.0.0/0            0.0.0.0/0
    0     0 ACCEPT     0    --  br-1a6252e55e9d br-1a6252e55e9d  0.0.0.0/0            0.0.0.0/0

Chain OUTPUT (policy ACCEPT 39147 packets, 30M bytes)
 pkts bytes target     prot opt in     out     source               destination

Chain DOCKER (32 references)
 pkts bytes target     prot opt in     out     source               destination
    0     0 ACCEPT     6    --  !br-d3c6315441bb br-d3c6315441bb  0.0.0.0/0            192.168.192.2        tcp dpt:8000
    0     0 ACCEPT     6    --  !br-06209d87f975 br-06209d87f975  0.0.0.0/0            192.168.128.2        tcp dpt:8443
    0     0 ACCEPT     6    --  !br-eed726952215 br-eed726952215  0.0.0.0/0            172.18.0.2           tcp dpt:1883
    0     0 ACCEPT     6    --  !br-9f77e96147b6 br-9f77e96147b6  0.0.0.0/0            192.168.176.2        tcp dpt:8080
    0     0 ACCEPT     6    --  !br-6553f9280c47 br-6553f9280c47  0.0.0.0/0            172.23.0.2           tcp dpt:80
    0     0 ACCEPT     6    --  !br-1c0e4382359c br-1c0e4382359c  0.0.0.0/0            192.168.48.2         tcp dpt:3000
    0     0 ACCEPT     6    --  !br-1a6252e55e9d br-1a6252e55e9d  0.0.0.0/0            172.20.0.2           tcp dpt:80
    0     0 ACCEPT     6    --  !br-3e4962347c8a br-3e4962347c8a  0.0.0.0/0            192.168.208.2        tcp dpt:9000
    0     0 ACCEPT     6    --  !br-4cbd1cc687d4 br-4cbd1cc687d4  0.0.0.0/0            192.168.64.2         tcp dpt:80
    0     0 ACCEPT     6    --  !br-3fabc97e7faa br-3fabc97e7faa  0.0.0.0/0            172.24.0.2           tcp dpt:80
    0     0 ACCEPT     6    --  !br-2b281a45c53a br-2b281a45c53a  0.0.0.0/0            192.168.160.2        tcp dpt:50101
    0     0 ACCEPT     6    --  !docker0 docker0  0.0.0.0/0            172.17.0.2           tcp dpt:80
    0     0 ACCEPT     6    --  !br-975c73e0ca36 br-975c73e0ca36  0.0.0.0/0            192.168.16.2         tcp dpt:3000
    0     0 ACCEPT     6    --  !br-1a6252e55e9d br-1a6252e55e9d  0.0.0.0/0            172.20.0.2           tcp dpt:8080
    0     0 ACCEPT     6    --  !br-b1371bc813e3 br-b1371bc813e3  0.0.0.0/0            172.19.0.2           tcp dpt:2500
    0     0 ACCEPT     6    --  !br-6083d8c65b42 br-6083d8c65b42  0.0.0.0/0            192.168.80.2         tcp dpt:9000
    0     0 ACCEPT     6    --  !br-ca9c8e843914 br-ca9c8e843914  0.0.0.0/0            192.168.32.3         tcp dpt:22
    0     0 ACCEPT     6    --  !br-ca9c8e843914 br-ca9c8e843914  0.0.0.0/0            192.168.32.3         tcp dpt:80
    0     0 ACCEPT     6    --  !br-eed726952215 br-eed726952215  0.0.0.0/0            172.18.0.3           tcp dpt:5000
    0     0 ACCEPT     6    --  !br-eed726952215 br-eed726952215  0.0.0.0/0            172.18.0.3           tcp dpt:8554
    0     0 ACCEPT     6    --  !br-eed726952215 br-eed726952215  0.0.0.0/0            172.18.0.3           tcp dpt:8555
    0     0 ACCEPT     17   --  !br-eed726952215 br-eed726952215  0.0.0.0/0            172.18.0.3           udp dpt:8555
    0     0 ACCEPT     6    --  !br-6083d8c65b42 br-6083d8c65b42  0.0.0.0/0            192.168.80.3         tcp dpt:9001
    0     0 ACCEPT     6    --  !br-d56a6c59fbe0 br-d56a6c59fbe0  0.0.0.0/0            192.168.112.3        tcp dpt:2368
    0     0 ACCEPT     6    --  !br-720ab72489d9 br-720ab72489d9  0.0.0.0/0            172.25.0.4           tcp dpt:80
    5   244 ACCEPT     6    --  !br-720ab72489d9 br-720ab72489d9  0.0.0.0/0            172.25.0.4           tcp dpt:443
    0     0 ACCEPT     6    --  !br-720ab72489d9 br-720ab72489d9  0.0.0.0/0            172.25.0.4           tcp dpt:8888
    0     0 ACCEPT     6    --  !br-49b7b99aa265 br-49b7b99aa265  0.0.0.0/0            172.29.0.4           tcp dpt:80
    0     0 ACCEPT     6    --  !br-2bc56dc9b40e br-2bc56dc9b40e  0.0.0.0/0            172.31.1.102         tcp dpt:53
    0     0 ACCEPT     17   --  !br-2bc56dc9b40e br-2bc56dc9b40e  0.0.0.0/0            172.31.1.102         udp dpt:53
    0     0 ACCEPT     6    --  !br-9e74d39fa2c9 br-9e74d39fa2c9  0.0.0.0/0            172.26.0.4           tcp dpt:8080
    0     0 ACCEPT     6    --  !br-49b7b99aa265 br-49b7b99aa265  0.0.0.0/0            172.29.0.5           tcp dpt:3306
    0     0 ACCEPT     17   --  !br-2bc56dc9b40e br-2bc56dc9b40e  0.0.0.0/0            172.31.1.102         udp dpt:67
    0     0 ACCEPT     6    --  !br-2bc56dc9b40e br-2bc56dc9b40e  0.0.0.0/0            172.31.1.102         tcp dpt:80
    0     0 ACCEPT     6    --  !br-49b7b99aa265 br-49b7b99aa265  0.0.0.0/0            172.29.0.2           tcp dpt:3301
    0     0 ACCEPT     6    --  !br-mailcow br-mailcow  0.0.0.0/0            172.22.1.249         tcp dpt:6379
    0     0 ACCEPT     6    --  !br-mailcow br-mailcow  0.0.0.0/0            172.22.1.5           tcp dpt:8983
    0     0 ACCEPT     6    --  !br-mailcow br-mailcow  0.0.0.0/0            172.22.1.6           tcp dpt:3306
    0     0 ACCEPT     6    --  !br-mailcow br-mailcow  0.0.0.0/0            172.22.1.250         tcp dpt:110
    0     0 ACCEPT     6    --  !br-mailcow br-mailcow  0.0.0.0/0            172.22.1.250         tcp dpt:143
    0     0 ACCEPT     6    --  !br-mailcow br-mailcow  0.0.0.0/0            172.22.1.250         tcp dpt:993
    0     0 ACCEPT     6    --  !br-mailcow br-mailcow  0.0.0.0/0            172.22.1.250         tcp dpt:995
    0     0 ACCEPT     6    --  !br-mailcow br-mailcow  0.0.0.0/0            172.22.1.250         tcp dpt:4190
    0     0 ACCEPT     6    --  !br-mailcow br-mailcow  0.0.0.0/0            172.22.1.250         tcp dpt:12345
    0     0 ACCEPT     6    --  !br-mailcow br-mailcow  0.0.0.0/0            172.22.1.8           tcp dpt:52180
    0     0 ACCEPT     6    --  !br-mailcow br-mailcow  0.0.0.0/0            172.22.1.8           tcp dpt:52190
    0     0 ACCEPT     6    --  !br-f83b4226c672 br-f83b4226c672  0.0.0.0/0            192.168.96.2         tcp dpt:80

Chain DOCKER-ISOLATION-STAGE-1 (1 references)
 pkts bytes target     prot opt in     out     source               destination
    0     0 DOCKER-ISOLATION-STAGE-2  0    --  br-mailcow !br-mailcow  0.0.0.0/0            0.0.0.0/0
    0     0 DOCKER-ISOLATION-STAGE-2  0    --  docker0 !docker0  0.0.0.0/0            0.0.0.0/0
    0     0 DOCKER-ISOLATION-STAGE-2  0    --  br-ca9c8e843914 !br-ca9c8e843914  0.0.0.0/0            0.0.0.0/0
    0     0 DOCKER-ISOLATION-STAGE-2  0    --  br-9e74d39fa2c9 !br-9e74d39fa2c9  0.0.0.0/0            0.0.0.0/0
    0     0 DOCKER-ISOLATION-STAGE-2  0    --  br-1c0e4382359c !br-1c0e4382359c  0.0.0.0/0            0.0.0.0/0
    0     0 DOCKER-ISOLATION-STAGE-2  0    --  br-d3c6315441bb !br-d3c6315441bb  0.0.0.0/0            0.0.0.0/0
    0     0 DOCKER-ISOLATION-STAGE-2  0    --  br-6083d8c65b42 !br-6083d8c65b42  0.0.0.0/0            0.0.0.0/0
    0     0 DOCKER-ISOLATION-STAGE-2  0    --  br-4cbd1cc687d4 !br-4cbd1cc687d4  0.0.0.0/0            0.0.0.0/0
    0     0 DOCKER-ISOLATION-STAGE-2  0    --  br-49b7b99aa265 !br-49b7b99aa265  0.0.0.0/0            0.0.0.0/0
    0     0 DOCKER-ISOLATION-STAGE-2  0    --  br-2b281a45c53a !br-2b281a45c53a  0.0.0.0/0            0.0.0.0/0
    0     0 DOCKER-ISOLATION-STAGE-2  0    --  br-1a6252e55e9d !br-1a6252e55e9d  0.0.0.0/0            0.0.0.0/0
    0     0 DOCKER-ISOLATION-STAGE-2  0    --  br-b1371bc813e3 !br-b1371bc813e3  0.0.0.0/0            0.0.0.0/0
    0     0 DOCKER-ISOLATION-STAGE-2  0    --  br-9f77e96147b6 !br-9f77e96147b6  0.0.0.0/0            0.0.0.0/0
    0     0 DOCKER-ISOLATION-STAGE-2  0    --  br-6553f9280c47 !br-6553f9280c47  0.0.0.0/0            0.0.0.0/0
   83  4316 DOCKER-ISOLATION-STAGE-2  0    --  br-eed726952215 !br-eed726952215  0.0.0.0/0            0.0.0.0/0
    0     0 DOCKER-ISOLATION-STAGE-2  0    --  br-d56a6c59fbe0 !br-d56a6c59fbe0  0.0.0.0/0            0.0.0.0/0
    0     0 DOCKER-ISOLATION-STAGE-2  0    --  br-975c73e0ca36 !br-975c73e0ca36  0.0.0.0/0            0.0.0.0/0
    0     0 DOCKER-ISOLATION-STAGE-2  0    --  br-720ab72489d9 !br-720ab72489d9  0.0.0.0/0            0.0.0.0/0
    0     0 DOCKER-ISOLATION-STAGE-2  0    --  br-f83b4226c672 !br-f83b4226c672  0.0.0.0/0            0.0.0.0/0
    0     0 DOCKER-ISOLATION-STAGE-2  0    --  br-b91cbacdf824 !br-b91cbacdf824  0.0.0.0/0            0.0.0.0/0
    0     0 DOCKER-ISOLATION-STAGE-2  0    --  br-3fabc97e7faa !br-3fabc97e7faa  0.0.0.0/0            0.0.0.0/0
    0     0 DOCKER-ISOLATION-STAGE-2  0    --  br-3e4962347c8a !br-3e4962347c8a  0.0.0.0/0            0.0.0.0/0
    0     0 DOCKER-ISOLATION-STAGE-2  0    --  br-2bc56dc9b40e !br-2bc56dc9b40e  0.0.0.0/0            0.0.0.0/0
    0     0 DOCKER-ISOLATION-STAGE-2  0    --  br-06209d87f975 !br-06209d87f975  0.0.0.0/0            0.0.0.0/0
  183  136K RETURN     0    --  *      *       0.0.0.0/0            0.0.0.0/0

Chain DOCKER-ISOLATION-STAGE-2 (24 references)
 pkts bytes target     prot opt in     out     source               destination
    0     0 DROP       0    --  *      br-mailcow  0.0.0.0/0            0.0.0.0/0
    0     0 DROP       0    --  *      docker0  0.0.0.0/0            0.0.0.0/0
    0     0 DROP       0    --  *      br-ca9c8e843914  0.0.0.0/0            0.0.0.0/0
    0     0 DROP       0    --  *      br-9e74d39fa2c9  0.0.0.0/0            0.0.0.0/0
    0     0 DROP       0    --  *      br-1c0e4382359c  0.0.0.0/0            0.0.0.0/0
    0     0 DROP       0    --  *      br-d3c6315441bb  0.0.0.0/0            0.0.0.0/0
    0     0 DROP       0    --  *      br-6083d8c65b42  0.0.0.0/0            0.0.0.0/0
    0     0 DROP       0    --  *      br-4cbd1cc687d4  0.0.0.0/0            0.0.0.0/0
    0     0 DROP       0    --  *      br-49b7b99aa265  0.0.0.0/0            0.0.0.0/0
    0     0 DROP       0    --  *      br-2b281a45c53a  0.0.0.0/0            0.0.0.0/0
    0     0 DROP       0    --  *      br-1a6252e55e9d  0.0.0.0/0            0.0.0.0/0
    0     0 DROP       0    --  *      br-b1371bc813e3  0.0.0.0/0            0.0.0.0/0
    0     0 DROP       0    --  *      br-9f77e96147b6  0.0.0.0/0            0.0.0.0/0
    0     0 DROP       0    --  *      br-6553f9280c47  0.0.0.0/0            0.0.0.0/0
    0     0 DROP       0    --  *      br-eed726952215  0.0.0.0/0            0.0.0.0/0
    0     0 DROP       0    --  *      br-d56a6c59fbe0  0.0.0.0/0            0.0.0.0/0
    0     0 DROP       0    --  *      br-975c73e0ca36  0.0.0.0/0            0.0.0.0/0
    0     0 DROP       0    --  *      br-720ab72489d9  0.0.0.0/0            0.0.0.0/0
    0     0 DROP       0    --  *      br-f83b4226c672  0.0.0.0/0            0.0.0.0/0
    0     0 DROP       0    --  *      br-b91cbacdf824  0.0.0.0/0            0.0.0.0/0
    0     0 DROP       0    --  *      br-3fabc97e7faa  0.0.0.0/0            0.0.0.0/0
    0     0 DROP       0    --  *      br-3e4962347c8a  0.0.0.0/0            0.0.0.0/0
    0     0 DROP       0    --  *      br-2bc56dc9b40e  0.0.0.0/0            0.0.0.0/0
    0     0 DROP       0    --  *      br-06209d87f975  0.0.0.0/0            0.0.0.0/0
   83  4316 RETURN     0    --  *      *       0.0.0.0/0            0.0.0.0/0

Chain DOCKER-USER (1 references)
 pkts bytes target     prot opt in     out     source               destination
 684K  570M ACCEPT     0    --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate RELATED,ESTABLISHED
    0     0 DROP       0    --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate INVALID
    8   480 ACCEPT     6    --  *      *       0.0.0.0/0            0.0.0.0/0            tcp dpt:53 /* DNS TCP */
 2670  180K ACCEPT     17   --  *      *       0.0.0.0/0            0.0.0.0/0            udp dpt:53 /* DNS UDP */
    0     0 ACCEPT     6    --  *      *       0.0.0.0/0            0.0.0.0/0            tcp dpt:25 /* Email (SMTP_PORT) */
    0     0 ACCEPT     6    --  *      *       0.0.0.0/0            0.0.0.0/0            tcp dpt:465 /* Email (SMTPS_PORT) */
   11   660 ACCEPT     6    --  *      *       0.0.0.0/0            0.0.0.0/0            tcp dpt:587 /* Email (SUBMISSION_PORT) */
    1    60 ACCEPT     6    --  *      *       0.0.0.0/0            0.0.0.0/0            tcp dpt:143 /* Email (IMAP_PORT) */
   44  2632 ACCEPT     6    --  *      *       0.0.0.0/0            0.0.0.0/0            tcp dpt:993 /* Email (IMAPS_PORT) */
    0     0 ACCEPT     6    --  *      *       0.0.0.0/0            0.0.0.0/0            tcp dpt:110 /* Email (POP_PORT) */
    0     0 ACCEPT     6    --  *      *       0.0.0.0/0            0.0.0.0/0            tcp dpt:995 /* Email (POPS_PORT) */
    0     0 ACCEPT     6    --  *      *       0.0.0.0/0            0.0.0.0/0            tcp dpt:4190 /* Email (SIEVE_PORT) */
  879 53760 ACCEPT     0    --  *      *       0.0.0.0/0            0.0.0.0/0            match-set WHITELIST src
    0     0 DROP       0    --  *      *       0.0.0.0/0            0.0.0.0/0            match-set BLACKLIST src
    0     0 DROP       0    --  *      *       0.0.0.0/0            0.0.0.0/0            match-set FIREHOL src
    5   244 RETURN     0    --  *      *       0.0.0.0/0            0.0.0.0/0

Chain MAILCOW (2 references)
 pkts bytes target     prot opt in     out     source               destination
    0     0 DROP       6    --  !br-mailcow br-mailcow  0.0.0.0/0            0.0.0.0/0            /* mailcow isolation */

Chain f2b-sshd (1 references)
 pkts bytes target     prot opt in     out     source               destination

Logs of ip6tables -L -vn:

Chain INPUT (policy ACCEPT 1611 packets, 236K bytes)
 pkts bytes target     prot opt in     out     source               destination
  617 73166 MAILCOW    0    --  *      *       ::/0                 ::/0                 /* mailcow */

Chain FORWARD (policy DROP 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination
 3946 3136K MAILCOW    0    --  *      *       ::/0                 ::/0                 /* mailcow */
 3961 3137K DOCKER-USER  0    --  *      *       ::/0                 ::/0
 3961 3137K DOCKER-ISOLATION-STAGE-1  0    --  *      *       ::/0                 ::/0
 1477 2964K ACCEPT     0    --  *      br-mailcow  ::/0                 ::/0                 ctstate RELATED,ESTABLISHED
 2484  173K DOCKER     0    --  *      br-mailcow  ::/0                 ::/0
    0     0 ACCEPT     0    --  br-mailcow !br-mailcow  ::/0                 ::/0
 2484  173K ACCEPT     0    --  br-mailcow br-mailcow  ::/0                 ::/0
    0     0 ACCEPT     0    --  *      docker0  ::/0                 ::/0                 ctstate RELATED,ESTABLISHED
    0     0 DOCKER     0    --  *      docker0  ::/0                 ::/0
    0     0 ACCEPT     0    --  docker0 !docker0  ::/0                 ::/0
    0     0 ACCEPT     0    --  docker0 docker0  ::/0                 ::/0

Chain OUTPUT (policy ACCEPT 2376 packets, 322K bytes)
 pkts bytes target     prot opt in     out     source               destination

Chain DOCKER (2 references)
 pkts bytes target     prot opt in     out     source               destination
    0     0 ACCEPT     6    --  !docker0 docker0  ::/0                 fd00:dead:beef:c0:0:21f:fb6d:56c1  tcp dpt:80
    0     0 ACCEPT     6    --  !br-mailcow br-mailcow  ::/0                 fd4d:6169:6c63:6f77::b  tcp dpt:110
    0     0 ACCEPT     6    --  !br-mailcow br-mailcow  ::/0                 fd4d:6169:6c63:6f77::b  tcp dpt:143
    0     0 ACCEPT     6    --  !br-mailcow br-mailcow  ::/0                 fd4d:6169:6c63:6f77::b  tcp dpt:993
    0     0 ACCEPT     6    --  !br-mailcow br-mailcow  ::/0                 fd4d:6169:6c63:6f77::b  tcp dpt:995
    0     0 ACCEPT     6    --  !br-mailcow br-mailcow  ::/0                 fd4d:6169:6c63:6f77::b  tcp dpt:4190
    0     0 ACCEPT     6    --  !br-mailcow br-mailcow  ::/0                 fd4d:6169:6c63:6f77::c  tcp dpt:52180
    0     0 ACCEPT     6    --  !br-mailcow br-mailcow  ::/0                 fd4d:6169:6c63:6f77::c  tcp dpt:52190

Chain DOCKER-ISOLATION-STAGE-1 (1 references)
 pkts bytes target     prot opt in     out     source               destination
    0     0 DOCKER-ISOLATION-STAGE-2  0    --  br-mailcow !br-mailcow  ::/0                 ::/0
    0     0 DOCKER-ISOLATION-STAGE-2  0    --  docker0 !docker0  ::/0                 ::/0
    0     0 DOCKER-ISOLATION-STAGE-2  0    --  br-ca9c8e843914 !br-ca9c8e843914  ::/0                 ::/0
    0     0 DOCKER-ISOLATION-STAGE-2  0    --  br-9e74d39fa2c9 !br-9e74d39fa2c9  ::/0                 ::/0
    0     0 DOCKER-ISOLATION-STAGE-2  0    --  br-1c0e4382359c !br-1c0e4382359c  ::/0                 ::/0
    0     0 DOCKER-ISOLATION-STAGE-2  0    --  br-d3c6315441bb !br-d3c6315441bb  ::/0                 ::/0
    0     0 DOCKER-ISOLATION-STAGE-2  0    --  br-6083d8c65b42 !br-6083d8c65b42  ::/0                 ::/0
    0     0 DOCKER-ISOLATION-STAGE-2  0    --  br-4cbd1cc687d4 !br-4cbd1cc687d4  ::/0                 ::/0
    0     0 DOCKER-ISOLATION-STAGE-2  0    --  br-49b7b99aa265 !br-49b7b99aa265  ::/0                 ::/0
    0     0 DOCKER-ISOLATION-STAGE-2  0    --  br-2b281a45c53a !br-2b281a45c53a  ::/0                 ::/0
    0     0 DOCKER-ISOLATION-STAGE-2  0    --  br-1a6252e55e9d !br-1a6252e55e9d  ::/0                 ::/0
    0     0 DOCKER-ISOLATION-STAGE-2  0    --  br-b1371bc813e3 !br-b1371bc813e3  ::/0                 ::/0
    0     0 DOCKER-ISOLATION-STAGE-2  0    --  br-9f77e96147b6 !br-9f77e96147b6  ::/0                 ::/0
    0     0 DOCKER-ISOLATION-STAGE-2  0    --  br-6553f9280c47 !br-6553f9280c47  ::/0                 ::/0
    0     0 DOCKER-ISOLATION-STAGE-2  0    --  br-eed726952215 !br-eed726952215  ::/0                 ::/0
    0     0 DOCKER-ISOLATION-STAGE-2  0    --  br-d56a6c59fbe0 !br-d56a6c59fbe0  ::/0                 ::/0
    0     0 DOCKER-ISOLATION-STAGE-2  0    --  br-975c73e0ca36 !br-975c73e0ca36  ::/0                 ::/0
    0     0 DOCKER-ISOLATION-STAGE-2  0    --  br-720ab72489d9 !br-720ab72489d9  ::/0                 ::/0
    0     0 DOCKER-ISOLATION-STAGE-2  0    --  br-f83b4226c672 !br-f83b4226c672  ::/0                 ::/0
    0     0 DOCKER-ISOLATION-STAGE-2  0    --  br-b91cbacdf824 !br-b91cbacdf824  ::/0                 ::/0
    0     0 DOCKER-ISOLATION-STAGE-2  0    --  br-3fabc97e7faa !br-3fabc97e7faa  ::/0                 ::/0
    0     0 DOCKER-ISOLATION-STAGE-2  0    --  br-3e4962347c8a !br-3e4962347c8a  ::/0                 ::/0
    0     0 DOCKER-ISOLATION-STAGE-2  0    --  br-2bc56dc9b40e !br-2bc56dc9b40e  ::/0                 ::/0
    0     0 DOCKER-ISOLATION-STAGE-2  0    --  br-06209d87f975 !br-06209d87f975  ::/0                 ::/0
 3961 3137K RETURN     0    --  *      *       ::/0                 ::/0

Chain DOCKER-ISOLATION-STAGE-2 (24 references)
 pkts bytes target     prot opt in     out     source               destination
    0     0 DROP       0    --  *      br-mailcow  ::/0                 ::/0
    0     0 DROP       0    --  *      docker0  ::/0                 ::/0
    0     0 DROP       0    --  *      br-ca9c8e843914  ::/0                 ::/0
    0     0 DROP       0    --  *      br-9e74d39fa2c9  ::/0                 ::/0
    0     0 DROP       0    --  *      br-1c0e4382359c  ::/0                 ::/0
    0     0 DROP       0    --  *      br-d3c6315441bb  ::/0                 ::/0
    0     0 DROP       0    --  *      br-6083d8c65b42  ::/0                 ::/0
    0     0 DROP       0    --  *      br-4cbd1cc687d4  ::/0                 ::/0
    0     0 DROP       0    --  *      br-49b7b99aa265  ::/0                 ::/0
    0     0 DROP       0    --  *      br-2b281a45c53a  ::/0                 ::/0
    0     0 DROP       0    --  *      br-1a6252e55e9d  ::/0                 ::/0
    0     0 DROP       0    --  *      br-b1371bc813e3  ::/0                 ::/0
    0     0 DROP       0    --  *      br-9f77e96147b6  ::/0                 ::/0
    0     0 DROP       0    --  *      br-6553f9280c47  ::/0                 ::/0
    0     0 DROP       0    --  *      br-eed726952215  ::/0                 ::/0
    0     0 DROP       0    --  *      br-d56a6c59fbe0  ::/0                 ::/0
    0     0 DROP       0    --  *      br-975c73e0ca36  ::/0                 ::/0
    0     0 DROP       0    --  *      br-720ab72489d9  ::/0                 ::/0
    0     0 DROP       0    --  *      br-f83b4226c672  ::/0                 ::/0
    0     0 DROP       0    --  *      br-b91cbacdf824  ::/0                 ::/0
    0     0 DROP       0    --  *      br-3fabc97e7faa  ::/0                 ::/0
    0     0 DROP       0    --  *      br-3e4962347c8a  ::/0                 ::/0
    0     0 DROP       0    --  *      br-2bc56dc9b40e  ::/0                 ::/0
    0     0 DROP       0    --  *      br-06209d87f975  ::/0                 ::/0
    0     0 RETURN     0    --  *      *       ::/0                 ::/0

Chain DOCKER-USER (1 references)
 pkts bytes target     prot opt in     out     source               destination
 3961 3137K RETURN     0    --  *      *       ::/0                 ::/0

Chain MAILCOW (2 references)
 pkts bytes target     prot opt in     out     source               destination

Logs of iptables -L -vn -t nat:

cant post, topic would be too long

Logs of ip6tables -L -vn -t nat:

cant post, topic would be too long

DNS check:

172.64.155.249
104.18.32.7
DerLinkman commented 4 months ago

I'm sorry without logs i cannot do anything to help you...

But it does not sound like a bug to me...

milkmaker commented 4 months ago

THIS IS A AUTOMATED MESSAGE!

It seems your issue is not a bug. Therefore we highly advise you to get support!

You can get support either by:

This issue will be closed. If you think your reported issue is not a support case feel free to comment above and if so the issue will reopened.