search

mailcow / mailcow-dockerized

mailcow: dockerized - 🐮 + 🐋 = 💕
https://mailcow.email
GNU General Public License v3.0
8.96k stars 1.18k forks source link

API: Double entries when calling get/mailbox/all?tags=xxx #6079

Open aruhri opened 2 months ago

aruhri commented 2 months ago

Contribution guidelines

I've found a bug and checked that ...

Description

Calling 

curl -X 'GET'   'https://mail.mydomain.com/api/v1/get/mailbox/all?tags=prettytag' -H 'accept: application/json' -H 'X-API-Key: XXXXXXX'

lists all mailboxes that are tagged with prettytag but two times.

### Logs:
There does not occur an erro:

nginx-mailcow-1  | 10.xx.xx.xx - - [13/Sep/2024:15:43:51 +0200] "GET /api/v1/get/mailbox/all?tags=prettytag HTTP/1.1" 200 543 "-" "curl/7.81.0"

Steps to reproduce:

  1. Have at least one mailbox tagged.
  2. filter API-call as above by the tag 
    curl -X 'GET'   'https://mail.mydomain.com/api/v1/get/mailbox/all?tags=prettytag' -H 'accept: application/json' -H 'X-API-Key: XXXXXXX'
  3. See the output list two times: 
    [
{
"username": "r.wahnsinn@mydomain.com",
"active": 1,
"active_int": 1,
"domain": "mydomain.com",
"name": "Rainer Wahnsinn",
"local_part": "r.wahnsinn",
"quota": 536870912,
"messages": 1,
"attributes": {
  "force_pw_update": "0",
  "tls_enforce_in": "0",
  "tls_enforce_out": "0",
  "sogo_access": "1",
  "imap_access": "1",
  "pop3_access": "1",
  "smtp_access": "1",
  "sieve_access": "1",
  "relayhost": "0",
  "passwd_update": "2024-03-26 18:45:14",
  "mailbox_format": "maildir:",
  "quarantine_notification": "hourly",
  "quarantine_category": "reject"
},
"custom_attributes": [],
"quota_used": 2956,
"percent_in_use": 0,
"created": "2024-03-26 18:45:14",
"modified": "2024-03-26 18:45:14",
"percent_class": "success",
"last_imap_login": 0,
"last_smtp_login": 0,
"last_pop3_login": 0,
"max_new_quota": 2147483648,
"spam_aliases": 0,
"pushover_active": 0,
"rl": false,
"rl_scope": "domain",
"is_relayed": 0,
"tags": [
  "prettytag"
]
},
{
"username": "r.wahnsinn@mydomain.com",
"active": 1,
"active_int": 1,
"domain": "mydomain.com",
"name": "Rainer Wahnsinn",
"local_part": "r.wahnsinn",
"quota": 536870912,
"messages": 1,
"attributes": {
  "force_pw_update": "0",
  "tls_enforce_in": "0",
  "tls_enforce_out": "0",
  "sogo_access": "1",
  "imap_access": "1",
  "pop3_access": "1",
  "smtp_access": "1",
  "sieve_access": "1",
  "relayhost": "0",
  "passwd_update": "2024-03-26 18:45:14",
  "mailbox_format": "maildir:",
  "quarantine_notification": "hourly",
  "quarantine_category": "reject"
},
"custom_attributes": [],
"quota_used": 2956,
"percent_in_use": 0,
"created": "2024-03-26 18:45:14",
"modified": "2024-03-26 18:45:14",
"percent_class": "success",
"last_imap_login": 0,
"last_smtp_login": 0,
"last_pop3_login": 0,
"max_new_quota": 2147483648,
"spam_aliases": 0,
"pushover_active": 0,
"rl": false,
"rl_scope": "domain",
"is_relayed": 0,
"tags": [
  "prettytag"
]
}
]

Which branch are you using?

master

Which architecture are you using?

x86

Operating System:

Debian bookworm

Server/VM specifications:

32GB, 4 cores

Is Apparmor, SELinux or similar active?

no

Virtualization technology:

KVM/Qemu (proxmox)

Docker version:

27.2.1

docker-compose version or docker compose version:

v2.29.2

mailcow version:

2024-08a

Reverse proxy:

traefik

Logs of git diff:

diff --git a/data/conf/postfix/main.cf b/data/conf/postfix/main.cf
index 6a87f2ec..04e2e45f 100644
--- a/data/conf/postfix/main.cf
+++ b/data/conf/postfix/main.cf
@@ -173,3 +173,62 @@ parent_domain_matches_subdomains = debug_peer_list,fast_flush_domains,mynetworks

 # DO NOT EDIT ANYTHING BELOW #
 # Overrides #
+
+postscreen_dnsbl_sites = wl.mailspike.net=127.0.0.[18;19;20]*-2
+  hostkarma.junkemailfilter.com=127.0.0.1*-2
+  list.dnswl.org=127.0.[0..255].0*-2
+  list.dnswl.org=127.0.[0..255].1*-4
+  list.dnswl.org=127.0.[0..255].2*-6
+  list.dnswl.org=127.0.[0..255].3*-8
+  ix.dnsbl.manitu.net*2
+  bl.spamcop.net*2
+  bl.suomispam.net*2
+  hostkarma.junkemailfilter.com=127.0.0.2*3
+  hostkarma.junkemailfilter.com=127.0.0.4*2
+  hostkarma.junkemailfilter.com=127.0.1.2*1
+  backscatter.spameatingmonkey.net*2
+  bl.ipv6.spameatingmonkey.net*2
+  bl.spameatingmonkey.net*2
+  b.barracudacentral.org=127.0.0.2*7
+  bl.mailspike.net=127.0.0.2*5
+  bl.mailspike.net=127.0.0.[10;11;12]*4
+  dnsbl.sorbs.net=127.0.0.10*8
+  dnsbl.sorbs.net=127.0.0.5*6
+  dnsbl.sorbs.net=127.0.0.7*3
+  dnsbl.sorbs.net=127.0.0.8*2
+  dnsbl.sorbs.net=127.0.0.6*2
+  dnsbl.sorbs.net=127.0.0.9*2
+  zen.spamhaus.org=127.0.0.[10;11]*8
+  zen.spamhaus.org=127.0.0.[4..7]*6
+  zen.spamhaus.org=127.0.0.3*4
+  zen.spamhaus.org=127.0.0.2*3
+
+# User Overrides
+myhostname = mail.xxx.de
+mynetworks = 127.0.0.0/8 172.31.222.0/24 [::1]/128 [fd4d:6169:6c63:6f77::]/64 [fe80::]/64 192.168.1.6/32  10.2.0.20/32 10.2.0.17/32 192.168.1.158/32 192.168.1.4/32 10.2.0.4/32 10.2.0.9/32
+
+# mailman
+
+recipient_delimiter = +
+unknown_local_recipient_reject_code = 550
+owner_request_special = no
+
+local_recipient_maps =
+  regexp:/opt/mailman/core/var/data/postfix_lmtp,
+  proxy:unix:passwd.byname,
+  $alias_maps
+virtual_mailbox_maps =
+  proxy:mysql:/opt/postfix/conf/sql/mysql_virtual_mailbox_maps.cf,
+  regexp:/opt/mailman/core/var/data/postfix_lmtp
+transport_maps =
+  pcre:/opt/postfix/conf/custom_transport.pcre,
+  pcre:/opt/postfix/conf/local_transport,
+  proxy:mysql:/opt/postfix/conf/sql/mysql_relay_ne.cf,
+  proxy:mysql:/opt/postfix/conf/sql/mysql_transport_maps.cf,
+  regexp:/opt/mailman/core/var/data/postfix_lmtp
+relay_domains =
+  proxy:mysql:/opt/postfix/conf/sql/mysql_virtual_relay_domain_maps.cf,
+  regexp:/opt/mailman/core/var/data/postfix_domains
+relay_recipient_maps =
+  proxy:mysql:/opt/postfix/conf/sql/mysql_relay_recipient_maps.cf,
+  regexp:/opt/mailman/core/var/data/postfix_lmtp
diff --git a/data/conf/sogo/sogo.conf b/data/conf/sogo/sogo.conf
index d398eb05..3ae869ef 100644
--- a/data/conf/sogo/sogo.conf
+++ b/data/conf/sogo/sogo.conf
@@ -5,7 +5,7 @@
         PrivateDAndTViewer
     );

-    WOWorkersCount = "20";
+    WOWorkersCount = "80";
     SOGoACLsSendEMailNotifications = YES;
     SOGoAppointmentSendEMailNotifications = YES;
     SOGoDraftsFolderName = "Drafts";
diff --git a/data/conf/unbound/unbound.conf b/data/conf/unbound/unbound.conf
index 27110c04..64449f41 100644
--- a/data/conf/unbound/unbound.conf
+++ b/data/conf/unbound/unbound.conf
@@ -35,6 +35,10 @@ server:
   unwanted-reply-threshold: 10000
   ipsecmod-enabled: no

+local-data: "list.xxx.internal. A 192.168.1.6"
+local-data: "list.xxx.de. MX 10 list.xxx.internal."
+
+
 remote-control:
   control-enable: yes
   control-interface: 127.0.0.1
@@ -43,3 +47,4 @@ remote-control:
   server-cert-file: "/etc/unbound/unbound_server.pem"
   control-key-file: "/etc/unbound/unbound_control.key"
   control-cert-file: "/etc/unbound/unbound_control.pem"
+
diff --git a/docker-compose.yml b/docker-compose.yml
index cf0a028f..400ba5a2 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -392,9 +392,9 @@ services:
         - ./data/conf/nginx/:/etc/nginx/conf.d/:z
         - ./data/conf/rspamd/meta_exporter:/meta_exporter:ro,z
         - sogo-web-vol-1:/usr/lib/GNUstep/SOGo/
-      ports:
-        - "${HTTPS_BIND:-}:${HTTPS_PORT:-443}:${HTTPS_PORT:-443}"
-        - "${HTTP_BIND:-}:${HTTP_PORT:-80}:${HTTP_PORT:-80}"
+          #      ports:
+          #- "${HTTPS_BIND:-}:${HTTPS_PORT:-443}:${HTTPS_PORT:-443}"
+          #- "${HTTP_BIND:-}:${HTTP_PORT:-80}:${HTTP_PORT:-80}"
       restart: always
       networks:
         mailcow-network:
@@ -613,36 +613,6 @@ services:
           aliases:
             - ofelia

-    ipv6nat-mailcow:
-      depends_on:
-        - unbound-mailcow
-        - mysql-mailcow
-        - redis-mailcow
-        - clamd-mailcow
-        - rspamd-mailcow
-        - php-fpm-mailcow
-        - sogo-mailcow
-        - dovecot-mailcow
-        - postfix-mailcow
-        - memcached-mailcow
-        - nginx-mailcow
-        - acme-mailcow
-        - netfilter-mailcow
-        - watchdog-mailcow
-        - dockerapi-mailcow
-        - solr-mailcow
-      environment:
-        - TZ=${TZ}
-      image: robbertkl/ipv6nat
-      security_opt:
-        - label=disable
-      restart: always
-      privileged: true
-      network_mode: "host"
-      volumes:
-        - /var/run/docker.sock:/var/run/docker.sock:ro
-        - /lib/modules:/lib/modules:ro
-
 networks:
   mailcow-network:
     driver: bridge

### Logs of iptables -L -vn:

```plain text
Chain INPUT (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         

Chain FORWARD (policy DROP 4 packets, 240 bytes)
 pkts bytes target     prot opt in     out     source               destination         
  31M   16G MAILCOW    0    --  *      *       0.0.0.0/0            0.0.0.0/0            /* mailcow */
  31M   16G DOCKER-USER  0    --  *      *       0.0.0.0/0            0.0.0.0/0           
  31M   16G DOCKER-ISOLATION-STAGE-1  0    --  *      *       0.0.0.0/0            0.0.0.0/0           
  21M 5919M ACCEPT     0    --  *      br-mailcow  0.0.0.0/0            0.0.0.0/0            ctstate RELATED,ESTABLISHED
 664K   41M DOCKER     0    --  *      br-mailcow  0.0.0.0/0            0.0.0.0/0           
1237K  492M ACCEPT     0    --  br-mailcow !br-mailcow  0.0.0.0/0            0.0.0.0/0           
 641K   40M ACCEPT     0    --  br-mailcow br-mailcow  0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     0    --  *      docker0  0.0.0.0/0            0.0.0.0/0            ctstate RELATED,ESTABLISHED
    0     0 DOCKER     0    --  *      docker0  0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     0    --  docker0 !docker0  0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     0    --  docker0 docker0  0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     0    --  *      br-9034f456d2d3  0.0.0.0/0            0.0.0.0/0            ctstate RELATED,ESTABLISHED
    0     0 DOCKER     0    --  *      br-9034f456d2d3  0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     0    --  br-9034f456d2d3 !br-9034f456d2d3  0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     0    --  br-9034f456d2d3 br-9034f456d2d3  0.0.0.0/0            0.0.0.0/0           
  94M   21G ACCEPT     0    --  *      br-53bfdf276f3f  0.0.0.0/0            0.0.0.0/0            ctstate RELATED,ESTABLISHED
 104K 6247K DOCKER     0    --  *      br-53bfdf276f3f  0.0.0.0/0            0.0.0.0/0           
   70  5384 ACCEPT     0    --  br-53bfdf276f3f !br-53bfdf276f3f  0.0.0.0/0            0.0.0.0/0           
 104K 6247K ACCEPT     0    --  br-53bfdf276f3f br-53bfdf276f3f  0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     0    --  *      br-2ad1313b5a2f  0.0.0.0/0            0.0.0.0/0            ctstate RELATED,ESTABLISHED
    0     0 DOCKER     0    --  *      br-2ad1313b5a2f  0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     0    --  br-2ad1313b5a2f !br-2ad1313b5a2f  0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     0    --  br-2ad1313b5a2f br-2ad1313b5a2f  0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     0    --  *      br-0f4857fc7407  0.0.0.0/0            0.0.0.0/0            ctstate RELATED,ESTABLISHED
    0     0 DOCKER     0    --  *      br-0f4857fc7407  0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     0    --  br-0f4857fc7407 !br-0f4857fc7407  0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     0    --  br-0f4857fc7407 br-0f4857fc7407  0.0.0.0/0            0.0.0.0/0           
 156M  107G ACCEPT     0    --  *      br-0e83bcd4aea7  0.0.0.0/0            0.0.0.0/0            ctstate RELATED,ESTABLISHED
5595K  353M DOCKER     0    --  *      br-0e83bcd4aea7  0.0.0.0/0            0.0.0.0/0           
 106M  116G ACCEPT     0    --  br-0e83bcd4aea7 !br-0e83bcd4aea7  0.0.0.0/0            0.0.0.0/0           
 111K 6639K ACCEPT     0    --  br-0e83bcd4aea7 br-0e83bcd4aea7  0.0.0.0/0            0.0.0.0/0           

Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         

Chain DOCKER (7 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     6    --  !br-53bfdf276f3f br-53bfdf276f3f  0.0.0.0/0            172.23.0.3           tcp dpt:8000
  752 36484 ACCEPT     6    --  !br-0e83bcd4aea7 br-0e83bcd4aea7  0.0.0.0/0            172.19.0.3           tcp dpt:80
    0     0 ACCEPT     6    --  !br-53bfdf276f3f br-53bfdf276f3f  0.0.0.0/0            172.23.0.3           tcp dpt:8080
 126K 8002K ACCEPT     6    --  !br-0e83bcd4aea7 br-0e83bcd4aea7  0.0.0.0/0            172.19.0.3           tcp dpt:443
    0     0 ACCEPT     6    --  !br-53bfdf276f3f br-53bfdf276f3f  0.0.0.0/0            172.23.0.4           tcp dpt:8001
    0     0 ACCEPT     6    --  !br-53bfdf276f3f br-53bfdf276f3f  0.0.0.0/0            172.23.0.4           tcp dpt:8024
    0     0 ACCEPT     6    --  !br-mailcow br-mailcow  0.0.0.0/0            172.31.222.249       tcp dpt:6379
    0     0 ACCEPT     6    --  !br-mailcow br-mailcow  0.0.0.0/0            172.31.222.5         tcp dpt:8983
    0     0 ACCEPT     6    --  !br-mailcow br-mailcow  0.0.0.0/0            172.31.222.6         tcp dpt:3306
   43  2460 ACCEPT     6    --  !br-mailcow br-mailcow  0.0.0.0/0            172.31.222.250       tcp dpt:110
 2942  182K ACCEPT     6    --  !br-mailcow br-mailcow  0.0.0.0/0            172.31.222.250       tcp dpt:143
19420 1178K ACCEPT     6    --  !br-mailcow br-mailcow  0.0.0.0/0            172.31.222.250       tcp dpt:993
   17   932 ACCEPT     6    --  !br-mailcow br-mailcow  0.0.0.0/0            172.31.222.250       tcp dpt:995
    0     0 ACCEPT     6    --  !br-mailcow br-mailcow  0.0.0.0/0            172.31.222.250       tcp dpt:4190
    0     0 ACCEPT     6    --  !br-mailcow br-mailcow  0.0.0.0/0            172.31.222.250       tcp dpt:12345
  339 20036 ACCEPT     6    --  !br-mailcow br-mailcow  0.0.0.0/0            172.31.222.253       tcp dpt:25
   85  4624 ACCEPT     6    --  !br-mailcow br-mailcow  0.0.0.0/0            172.31.222.253       tcp dpt:465
  336 21160 ACCEPT     6    --  !br-mailcow br-mailcow  0.0.0.0/0            172.31.222.253       tcp dpt:587

Chain DOCKER-ISOLATION-STAGE-1 (1 references)
 pkts bytes target     prot opt in     out     source               destination         
1237K  492M DOCKER-ISOLATION-STAGE-2  0    --  br-mailcow !br-mailcow  0.0.0.0/0            0.0.0.0/0           
    0     0 DOCKER-ISOLATION-STAGE-2  0    --  docker0 !docker0  0.0.0.0/0            0.0.0.0/0           
   33  2582 DOCKER-ISOLATION-STAGE-2  0    --  br-53bfdf276f3f !br-53bfdf276f3f  0.0.0.0/0            0.0.0.0/0           
    0     0 DOCKER-ISOLATION-STAGE-2  0    --  br-2ad1313b5a2f !br-2ad1313b5a2f  0.0.0.0/0            0.0.0.0/0           
    0     0 DOCKER-ISOLATION-STAGE-2  0    --  br-0f4857fc7407 !br-0f4857fc7407  0.0.0.0/0            0.0.0.0/0           
2320K 4234M DOCKER-ISOLATION-STAGE-2  0    --  br-0e83bcd4aea7 !br-0e83bcd4aea7  0.0.0.0/0            0.0.0.0/0           
    0     0 DOCKER-ISOLATION-STAGE-2  0    --  br-9034f456d2d3 !br-9034f456d2d3  0.0.0.0/0            0.0.0.0/0           
  31M   16G RETURN     0    --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain DOCKER-ISOLATION-STAGE-2 (7 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 DROP       0    --  *      br-mailcow  0.0.0.0/0            0.0.0.0/0           
    0     0 DROP       0    --  *      docker0  0.0.0.0/0            0.0.0.0/0           
    0     0 DROP       0    --  *      br-53bfdf276f3f  0.0.0.0/0            0.0.0.0/0           
    0     0 DROP       0    --  *      br-2ad1313b5a2f  0.0.0.0/0            0.0.0.0/0           
    0     0 DROP       0    --  *      br-0f4857fc7407  0.0.0.0/0            0.0.0.0/0           
    0     0 DROP       0    --  *      br-0e83bcd4aea7  0.0.0.0/0            0.0.0.0/0           
    0     0 DROP       0    --  *      br-9034f456d2d3  0.0.0.0/0            0.0.0.0/0           
3559K 4726M RETURN     0    --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain DOCKER-USER (1 references)
 pkts bytes target     prot opt in     out     source               destination         
1492M  645G RETURN     0    --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain MAILCOW (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 DROP       6    --  !br-mailcow br-mailcow  0.0.0.0/0            0.0.0.0/0            /* mailcow isolation */

Logs of ip6tables -L -vn:

Chain INPUT (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         

Chain FORWARD (policy DROP 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         
3850K 2206M MAILCOW    0    --  *      *       ::/0                 ::/0                 /* mailcow */
3850K 2206M DOCKER-USER  0    --  *      *       ::/0                 ::/0                
3850K 2206M DOCKER-ISOLATION-STAGE-1  0    --  *      *       ::/0                 ::/0                
3745K 2198M ACCEPT     0    --  *      br-mailcow  ::/0                 ::/0                 ctstate RELATED,ESTABLISHED
 105K 7968K DOCKER     0    --  *      br-mailcow  ::/0                 ::/0                
    0     0 ACCEPT     0    --  br-mailcow !br-mailcow  ::/0                 ::/0                
 105K 7968K ACCEPT     0    --  br-mailcow br-mailcow  ::/0                 ::/0                
    0     0 ACCEPT     0    --  *      docker0  ::/0                 ::/0                 ctstate RELATED,ESTABLISHED
    0     0 DOCKER     0    --  *      docker0  ::/0                 ::/0                
    0     0 ACCEPT     0    --  docker0 !docker0  ::/0                 ::/0                
    0     0 ACCEPT     0    --  docker0 docker0  ::/0                 ::/0                

Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         

Chain DOCKER (2 references)
 pkts bytes target     prot opt in     out     source               destination         

Chain DOCKER-ISOLATION-STAGE-1 (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 DOCKER-ISOLATION-STAGE-2  0    --  br-mailcow !br-mailcow  ::/0                 ::/0                
    0     0 DOCKER-ISOLATION-STAGE-2  0    --  docker0 !docker0  ::/0                 ::/0                
    0     0 DOCKER-ISOLATION-STAGE-2  0    --  br-53bfdf276f3f !br-53bfdf276f3f  ::/0                 ::/0                
    0     0 DOCKER-ISOLATION-STAGE-2  0    --  br-2ad1313b5a2f !br-2ad1313b5a2f  ::/0                 ::/0                
    0     0 DOCKER-ISOLATION-STAGE-2  0    --  br-0f4857fc7407 !br-0f4857fc7407  ::/0                 ::/0                
    0     0 DOCKER-ISOLATION-STAGE-2  0    --  br-0e83bcd4aea7 !br-0e83bcd4aea7  ::/0                 ::/0                
    0     0 DOCKER-ISOLATION-STAGE-2  0    --  br-9034f456d2d3 !br-9034f456d2d3  ::/0                 ::/0                
3856K 2211M RETURN     0    --  *      *       ::/0                 ::/0                

Chain DOCKER-ISOLATION-STAGE-2 (7 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 DROP       0    --  *      br-mailcow  ::/0                 ::/0                
    0     0 DROP       0    --  *      docker0  ::/0                 ::/0                
    0     0 DROP       0    --  *      br-53bfdf276f3f  ::/0                 ::/0                
    0     0 DROP       0    --  *      br-2ad1313b5a2f  ::/0                 ::/0                
    0     0 DROP       0    --  *      br-0f4857fc7407  ::/0                 ::/0                
    0     0 DROP       0    --  *      br-0e83bcd4aea7  ::/0                 ::/0                
    0     0 DROP       0    --  *      br-9034f456d2d3  ::/0                 ::/0                
    0     0 RETURN     0    --  *      *       ::/0                 ::/0                

Chain DOCKER-USER (1 references)
 pkts bytes target     prot opt in     out     source               destination         
 198M  114G RETURN     0    --  *      *       ::/0                 ::/0                

Chain MAILCOW (1 references)
 pkts bytes target     prot opt in     out     source               destination

Logs of iptables -L -vn -t nat:

iptables v1.8.9 (nf_tables): table `nat' is incompatible, use 'nft' tool.

Logs of ip6tables -L -vn -t nat:

Chain PREROUTING (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 DOCKER     0    --  *      *       ::/0                 ::/0                 ADDRTYPE match dst-type LOCAL

Chain INPUT (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         

Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 DOCKER     0    --  *      *       ::/0                !::1                  ADDRTYPE match dst-type LOCAL

Chain POSTROUTING (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 MASQUERADE  0    --  *      !br-mailcow  fd4d:6169:6c63:6f77::/64  ::/0                
    0     0 MASQUERADE  0    --  *      !docker0  fd00:dead:beef:c0::/80  ::/0                

Chain DOCKER (2 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 RETURN     0    --  br-mailcow *       ::/0                 ::/0                
    0     0 RETURN     0    --  docker0 *       ::/0                 ::/0

DNS check:

172.64.155.249
104.18.32.7
milkmaker commented 1 day ago

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs.