Mailcow-dockerized: Tagged alias mails won't get send to subfolder anymore

[skupfer]

Let us assume I create a direct alias address for my mailbox [email protected] which will be [email protected]. This alias is attached to the my primary mailbox through the mailbox configuration panel.

If I send an email to [email protected] I receive it in my [email protected] mailbox. The configuration for this mailbox says "Set handling for tagged mail: In subfolder".

This was working for quite some time and stopped working around half a year ago I think. Now the mails received via alias+tag (i.e. [email protected]) get stored normally in the inbox instead of being moved to the subfolder (which already exist in most cases because it was working before).

On a side note. A year ago I was reporting it wasn't working the other way around (to subject wasn't working and instead they were moved to a subfolder #851

Unfortunately I can't remember which update changed this behavior.

Best Regards
Kupfer

[andryyy]

I think we should drop the subject rewrite. The mails should be moved to to a subfldler though. Please set it to subfolder and provide logs of Dovecot if it fails to move.

[skupfer]

It is set to subfolder, that's the point of the issue this time, not like the last one.

Log from the admin log panel

3/30/2019, 3:05:02 PM | info | imap([email protected])<7927><GrqhClCFZJisFgH4>: Logged out in=4735 out=40363 deleted=0 expunged=0 trashed=0 hdr_count=0 hdr_bytes=0 body_count=0 body_bytes=0
-- | -- | --
3/30/2019, 3:04:55 PM | info | indexer-worker([email protected])<30421><oKa7L4Z3n1z5HwAAjgZzUw:6PnuEId3n1zVdgAAjgZzUw>: Indexed 1 messages in INBOX (UIDs 212..212)
3/30/2019, 3:04:55 PM | info | lmtp(8185): Disconnect from IPv6-Address Client has quit the connection (state=READY)
3/30/2019, 3:04:55 PM | info | lmtp([email protected])<8185><oKa7L4Z3n1z5HwAAjgZzUw>: sieve: msgid=<[email protected]>: stored mail into mailbox 'INBOX'
3/30/2019, 3:04:54 PM | info | lmtp(8185): Connect from IPv6-Address

or

3/27/2019, 5:42:47 PM | info | imap([email protected])<1664><ar75HRaF0IWsFgH4>: Logged out in=435 out=8536 deleted=0 expunged=0 trashed=0 hdr_count=0 hdr_bytes=0 body_count=0 body_bytes=0
-- | -- | --
3/27/2019, 5:42:44 PM | info | indexer-worker([email protected])<1673><DDdVLgOom1yEBgAAjgZzUw:T/laOwOom1yJBgAAjgZzUw>: Indexed 1 messages in INBOX (UIDs 211..211)
3/27/2019, 5:42:43 PM | info | lmtp(1668): Disconnect from IPv6-Address Client has quit the connection (state=READY)
3/27/2019, 5:42:43 PM | info | lmtp([email protected])<1668><DDdVLgOom1yEBgAAjgZzUw>: sieve: msgid=<[e-mail]>: stored mail into mailbox 'INBOX'
3/27/2019, 5:42:43 PM | info | lmtp(1668): Connect from IPv6-Address
3/27/2019, 5:42:26 PM | info | imap([email protected])<1352><Zt4G3BWFmuSsFgH4>: Logged out in=3574 out=32275 deleted=0 expunged=0 trashed=0 hdr_count=0 hdr_bytes=0 body_count=0 body_bytes=0

[andryyy]

Is there an X-Moo header in the mail?

Rspamd logs from when this happens?

------ Originalnachricht ------
Von: "skupfer" [e-mail]
An: "mailcow/mailcow-dockerized" [e-mail]
Cc: "André Peters" [e-mail]; "Comment"
[e-mail]
Gesendet: 01.04.2019 09:32:21
Betreff: Re: [mailcow/mailcow-dockerized] Tagged alias mails won't get
send to subfolder anymore (#2487)

It is set to subfolder, that's the point of the issue this time, not
like the last one.

Log from the admin log panel

3/30/2019, 3:05:02 PM | info | imap([email protected])<7927>: Logged out in=4735 out=40363 deleted=0 expunged=0 trashed=0 hdr_count=0 hdr_bytes=0 body_count=0 body_bytes=0
-- | -- | --
3/30/2019, 3:04:55 PM | info | indexer-worker([email protected])<30421>: Indexed 1 messages in INBOX (UIDs 212..212)
3/30/2019, 3:04:55 PM | info | lmtp(8185): Disconnect from IPv6-Address Client has quit the connection (state=READY)
3/30/2019, 3:04:55 PM | info | lmtp([email protected])<8185>: sieve: msgid=[e-mail]: stored mail into mailbox 'INBOX'
3/30/2019, 3:04:54 PM | info | lmtp(8185): Connect from IPv6-Address

or

3/27/2019, 5:42:47 PM | info | imap([email protected])<1664>: Logged out in=435 out=8536 deleted=0 expunged=0 trashed=0 hdr_count=0 hdr_bytes=0 body_count=0 body_bytes=0
-- | -- | --
3/27/2019, 5:42:44 PM | info | indexer-worker([email protected])<1673>: Indexed 1 messages in INBOX (UIDs 211..211)
3/27/2019, 5:42:43 PM | info | lmtp(1668): Disconnect from IPv6-Address Client has quit the connection (state=READY)
3/27/2019, 5:42:43 PM | info | lmtp([email protected])<1668>: sieve: msgid=[e-mail]: stored mail into mailbox 'INBOX'
3/27/2019, 5:42:43 PM | info | lmtp(1668): Connect from IPv6-Address
3/27/2019, 5:42:26 PM | info | imap([email protected])<1352>: Logged out in=3574 out=32275 deleted=0 expunged=0 trashed=0 hdr_count=0 hdr_bytes=0 body_count=0 body_bytes=0

—
You are receiving this because you commented.
Reply to this email directly, view it on GitHub
https://github.com/mailcow/mailcow-dockerized/issues/2487#issuecomment-478467999,
or mute the thread
https://github.com/notifications/unsubscribe-auth/AC1dFpSxtdYCbQDCBBxAuKnT4hte7Kiiks5vcbYFgaJpZM4cU_YW.

[skupfer]

I just sent two mails from another mailcow mailbox and the logs/behavior is the same. So there shouldn't be the mentioned header, right?

Mail Local

Return-Path: <[email protected]>
Delivered-To: [email protected]
Received: from mail.domain.tld ([IPaddress7])
    by mail.domain.tld with LMTP
    id c0oYNMu+oVzVRwAAjgZzUw
    (envelope-from <[email protected]>)
    for <[email protected]>; Mon, 01 Apr 2019 09:33:31 +0200
Received: from dcf5f1167e79 (mailcowdockerized_sogo-mailcow_1.mailcowdockerized_mailcow-network [IPaddress248])
    (Authenticated sender: [email protected])
    by mail.domain.tld (Postcow) with ESMTPA id 7452C15A970
    for <[email protected]>; Mon,  1 Apr 2019 09:33:31 +0200 (CEST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=anotherdomain.tld;
    s=dkim; t=1554104011; h=from:from:sender:reply-to:subject:subject:date:date:
     message-id:message-id:to:to:cc:mime-version:mime-version:
     content-type:content-type:content-transfer-encoding:in-reply-to:
     references; bh=aT55zTWU2z3UmvjiRnWMB3FNxmkML1bCAtlszUw7MEg=;
    b=HiK2EbOCr9fUMnkhCh1a9FjPndqYVRpcKCfqBhpCP7ZbMClZ7Oxo8Y4iNO/LdbisHHfolR
    vR4GiIw+IR7KSrjViJjDOGIWYWlGMjf9HxCDl2ZEW9YwJ8NghMvna40NX4nFO60i5MCuiZ
    JVAyWXgzWbhvcpT4agzfKPuHyTE7XKggBUXZS9FS38LVI71O1v+n78BpWPyRDiGuLo4TsD
    3cXTEnvuR3/PJPeSeTL+N2P5mUF1AMfBGYhb9Z4ub3KR4TqVURD9hQTqmN8UmRe9igDwb8
    QVnfNeUaM70tWHCqbxGjYHv2JBJn1QMNWA7rqAW50IO9SXjNRZ8nTHx6sKmSpQ==
Content-Type: multipart/alternative; boundary="----=_=-_OpenGroupware_org_NGMime-25577-1554104011.236756-0------"
To: [email protected]
User-Agent: SOGoMail 4.0.5
MIME-Version: 1.0
Date: Mon, 01 Apr 2019 09:33:31 +0200
Subject: test 2
Message-ID: <63e9-5ca1bf00-1-71730880@139829820>
X-Forward: IP-Address
From: "Anothermailbox" <[email protected]>
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=anotherdomain.tld;
    s=dkim; t=1554104011; h=from:from:sender:reply-to:subject:subject:date:date:
     message-id:message-id:to:to:cc:mime-version:mime-version:
     content-type:content-type:content-transfer-encoding:in-reply-to:
     references; bh=aT55zTWU2z3UmvjiRnWMB3FNxmkML1bCAtlszUw7MEg=;
    b=uBU7/0NOMJdOyD7W/lYHl1fxzgZwEh2A7c/FVCChyorSmZ84/9vBIzoWdBSqfnP8VaY3Zg
    R5l82xweJebnOBnVU+FxTf6isf97MhOPO9aIrGHcVoWg6RCST3DwZAMeLW9T7u66C76Nr7
    qyD7G6kHv6yIF5nfmjWDnQfwh05QuoGhyTpaH+z+YP+717cpxce0H/StkiC5iuiYzMvq+E
    c7uYWrwC3zK8XLkevp1ekThoAVus9l7VE5tFog3jUl5rSOuzFJZda8kFDhvQ8cUcczeqzb
    nkR/E0rETYKpbDCd/3Purlhpa6z9x84Xd/9TjbKMAn09vZbplZsaBRDylsbZ0g==
ARC-Seal: i=1; s=dkim; d=anotherdomain.tld; t=1554104011; a=rsa-sha256;
    cv=none;
    b=YIw+dZ3eoOkN+jK4TgPrCi/DYwbeNbU2mBPxkCYV4OpZ2S26RyWSGb4zvu8UsRCcEpowx0
    7h7Zurl19Mc+vybYqzy/qaO6PL94BdHQX9+tReWJRwMW20vpg/GqutU9Gr7lYG4wa9kMaz
    temR3tkFdJFw3iOcM02+P3/8wosZQNr7ut29A+dr0YywzJUzDK2lwQybQ5WH99JlVJDrYi
    fTcPKrhPQ0cq8/4tghTZeH7e13LiGEi1WicFnTu6QGKpAKGzJDz44PDcPOZ2rSQrMj/k/8
    hMg78afEgtJd3ozq4ezYDWY8Hpg1GQGARfgW7YLeLuQZT6xbqqEgXhk6b0q0cg==
ARC-Authentication-Results: i=1;
    mail.domain.tld;
    auth=pass [email protected] [email protected]

------=_=-_OpenGroupware_org_NGMime-25577-1554104011.236756-0------
Content-Type: text/plain; charset=utf-8



------=_=-_OpenGroupware_org_NGMime-25577-1554104011.236756-0------
Content-Type: text/html; charset=utf-8
Content-Length: 13

<html></html>

------=_=-_OpenGroupware_org_NGMime-25577-1554104011.236756-0--------

RSPAMD Local Mail

IP address  ipaddress
Subject test 2
Symbols MAILCOW_AUTH (-20)
MID_RHS_NOT_FQDN (0.5)
MIME_GOOD (-0.1) [multipart/alternative,text/plain]
FROM_EQ_ENVFROM (0)
RCVD_COUNT_ZERO (0) [0]
TO_MATCH_ENVRCPT_ALL (0)
RCPT_COUNT_ONE (0) [1]
TO_DN_NONE (0)
FROM_HAS_DN (0)
ARC_NA (0)
DKIM_SIGNED (0)
MIME_TRACE (0) [0:+,1:+]
RCVD_TLS_ALL (0)
TAGGED_RCPT (0) [tag]
RCPT_MAILCOW_DOMAIN (0) [domain.tld]
ARC_SIGNED (0) [i=1]
DYN_RL_CHECK (0)
Msg size    728 B
Scan time   0.032 / 0.013
ID  63e9-5ca1bf00-1-71730880@139829820

Mail 3/30/2019

Return-Path: <[email protected]>
Delivered-To: [email protected]
Received: from mail.domain.tld ([IPv6address])
    by mail.domain.tld with LMTP
    id oKa7L4Z3n1z5HwAAjgZzUw
    (envelope-from <[email protected]>)
    for <[email protected]>; Sat, 30 Mar 2019 15:04:54 +0100
Received: from o1.sendgrid.cobinhood.com (o1.sendgrid.cobinhood.com [IPaddress])
    (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
    (No client certificate requested)
    by mail.domain.tld (Postcow) with ESMTPS id AF43A15A95A
    for <[email protected]>; Sat, 30 Mar 2019 15:04:40 +0100 (CET)
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d=cobinhood.com; 
    h=content-type:from:mime-version:reply-to:subject:to:list-unsubscribe; 
    s=s1; bh=EvWM6uO4Cs0zRp7Dmaf63BEbwxg=; b=gqq6qGu5+TujTOUoNoL7sG5
    w+fZ8Dtlg/BxUUfXGZtwH+/iyMdQQTEfo9B9EVv5gcxJNzm0bTbY9+GOcWYihW6+
    DPQF6yWPl1XUI+DVhdfuIPUmWPUzro4T8N6VBI/wtnZa0yot38EC3yv0GYzllJf8
    pVQhsUFNLoonymlCB7DQ=
Content-Type: multipart/alternative; boundary=0426a7bfaa94e689dc83077bb917a34479c636f754820dabea1a157a10f5
Date: Sat, 30 Mar 2019 14:04:28 +0000 (UTC)
From: "COBINHOOD" <[email protected]>
Mime-Version: 1.0
Reply-To: [email protected]
Subject: A subject
To: [email protected]
Message-ID: <[email protected]>
List-Unsubscribe: <unsubscribe>
X-SG-EID: R102MRGnf/0CCAp/pYPga2CeTJoXnMNvCamDfwig4IololurHOLXMxAmkBJDBO33AXZu5oqLJcJxp4
 +ZS07AnfF1eg1Ft3ear9CRdQu5unSj+agvaIaMrJK/XKgoH360QEQblrgyGgSGzf5ZSebbCq8z/eKJ
 KGRuVjvSJu1ffXbvC78212yXm+lJk8OzLz+nZgrmkDbhsGkZ13O/TIOxXBNhJddOtBqYk5yUD8AsRT
 I=
X-SG-ID: Z2FxZazunBjVeNuNdzHDqrF8mxuCpi0krmont6YQrP33xPPAYN8z70Z0NYQHfvzDYjeIUa5mlY3ouw
 PvTCrxQpl/kDDFkp3U7HAAAxWIw1D4nefU+Yh1BQH0qekw0tMk3JjquozMFUAf99hrm90u3zkKwqu8
 WHdTCufN2GVstRryidljCfccRuk9NxprvSYu
Authentication-Results: mail.domain.tld;
    dkim=pass header.d=cobinhood.com header.s=s1 header.b=gqq6qGu5;
    dmarc=pass (policy=reject) header.from=cobinhood.com;
    spf=pass (mail.domain.tld: domain of [email protected] designates IPaddress as permitted sender) [email protected]
X-Spamd-Result: default: False [2.10 / 15.00];
     HAS_REPLYTO(0.00)[[email protected]];
     R_SPF_ALLOW(-0.20)[+ip4:IPaddress];
     MV_CASE(0.50)[];
     TO_DN_NONE(0.00)[];
     REPLYTO_ADDR_EQ_FROM(0.00)[];
     DKIM_TRACE(0.00)[cobinhood.com:+];
     MX_GOOD(-0.01)[mx.sendgrid.net];
     DMARC_POLICY_ALLOW(-0.50)[cobinhood.com,reject];
     SUBJECT_ENDS_EXCLAIM(0.00)[];
     FORGED_SENDER(0.30)[[email protected],[email protected]];
     RCVD_COUNT_ZERO(0.00)[0];
     RCPT_MAILCOW_DOMAIN(0.00)[domain.tld];
     MIME_TRACE(0.00)[0:+,1:+];
     IP_SCORE(0.27)[ip: (0.57), ipnet: 168.245.0.0/18(0.36), asn: 11377(0.60), country: US(-0.19)];
     ASN(0.00)[asn:11377, ipnet:168.245.0.0/18, country:US];
     TAGGED_FROM(0.00)[7446361-3df4-crypto,cobinhood=domain.tld];
     FROM_NEQ_ENVFROM(0.00)[[email protected],[email protected]];
     PHISHING(0.75)[eux.tech->cobinhood.com];
     ARC_NA(0.00)[];
     R_DKIM_ALLOW(-0.20)[cobinhood.com:s=s1];
     PHISH_EMOTION(1.00)[];
     FROM_HAS_DN(0.00)[];
     TO_MATCH_ENVRCPT_ALL(0.00)[];
     TAGGED_RCPT(0.00)[cobinhood];
     MIME_GOOD(-0.10)[multipart/alternative,text/plain];
     HAS_LIST_UNSUB(-0.01)[];
     RCPT_COUNT_ONE(0.00)[1];
     MANY_INVISIBLE_PARTS(0.30)[4];
     RCVD_IN_DNSWL_NONE(0.00)[167.39.245.168.list.dnswl.org : 127.0.15.0];
     RCVD_TLS_ALL(0.00)[]
X-Rspamd-Queue-Id: AF43A15A95A

--0426a7bfaa94e689dc83077bb917a34479c636f754820dabea1a157a10f5
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain; charset=UTF-8
Mime-Version: 1.0

Text

--0426a7bfaa94e689dc83077bb917a34479c636f754820dabea1a157a10f5
Content-Transfer-Encoding: quoted-printable
Content-Type: text/html; charset=UTF-8
Mime-Version: 1.0

<html></html>

--0426a7bfaa94e689dc83077bb917a34479c636f754820dabea1a157a10f5--

RSPAMD 3/30/2019

IP address  IPaddress
Subject Subject
Symbols PHISH_EMOTION (1)
PHISHING (0.752822) [eux.tech->cobinhood.com]
MV_CASE (0.5)
DMARC_POLICY_ALLOW (-0.5) [cobinhood.com,reject]
FORGED_SENDER (0.3) [[email protected],[email protected]]
MANY_INVISIBLE_PARTS (0.3) [4]
IP_SCORE (0.268153) [ip: (0.57), ipnet: ipnet/18(0.36), asn: 11377(0.60), country: US(-0.19)]
R_DKIM_ALLOW (-0.2) [cobinhood.com:s=s1]
R_SPF_ALLOW (-0.2) [+ip4:ipaddress]
MIME_GOOD (-0.1) [multipart/alternative,text/plain]
HAS_LIST_UNSUB (-0.01)
MX_GOOD (-0.01) [mx.sendgrid.net]
ASN (0) [asn:11377, ipnet:ipaddess/18, country:US]
RCVD_IN_DNSWL_NONE (0) [167.39.245.168.list.dnswl.org : 127.0.15.0]
TO_MATCH_ENVRCPT_ALL (0)
RCPT_COUNT_ONE (0) [1]
FROM_HAS_DN (0)
TAGGED_FROM (0) [7446361-3df4-alias,tag=domain.tld]
ARC_NA (0)
RCVD_COUNT_ZERO (0) [0]
TO_DN_NONE (0)
REPLYTO_ADDR_EQ_FROM (0)
SUBJECT_ENDS_EXCLAIM (0)
MIME_TRACE (0) [0:+,1:+]
HAS_REPLYTO (0) [[email protected]]
RCVD_TLS_ALL (0)
TAGGED_RCPT (0) [cobinhood]
RCPT_MAILCOW_DOMAIN (0) [domain.tld]
DKIM_TRACE (0) [cobinhood.com:+]
FROM_NEQ_ENVFROM (0) [[email protected],[email protected]]
Msg size    65.2 KiB
Scan time   9.364 / 0.055
ID  [email protected]

[andryyy]

Rspamd logs, not headers.

Please set logging to info instead of silent in data/conf/rspamd/override.d/logging.inc. Restart Rspamd, send a mail (again) and post the container logs, please. :)

[skupfer]

Here is RSPAMD

rspamd-mailcow_1     | 2019-04-01 10:20:51 #14(fuzzy) <rznbhc>; map; rspamd_map_read_cached: http://nginx:8081/forwardinghosts.php: read map data cached 32 bytes
rspamd-mailcow_1     | 2019-04-01 10:20:51 #14(fuzzy) <rznbhc>; map; rspamd_radix_fin: read radix trie of 1 elements: ents=1 dup=0 tbm=0 lc=1 mem=1k free=0 waste=0
rspamd-mailcow_1     | 2019-04-01 10:20:52 #12(normal) <rznbhc>; map; rspamd_map_read_cached: http://nginx:8081/forwardinghosts.php: read map data cached 32 bytes
rspamd-mailcow_1     | 2019-04-01 10:20:52 #12(normal) <rznbhc>; map; rspamd_radix_fin: read radix trie of 1 elements: ents=1 dup=0 tbm=0 lc=1 mem=1k free=0 waste=0
rspamd-mailcow_1     | 2019-04-01 10:20:52 #13(fuzzy) <rznbhc>; map; rspamd_map_read_cached: http://nginx:8081/forwardinghosts.php: read map data cached 32 bytes
rspamd-mailcow_1     | 2019-04-01 10:20:52 #13(fuzzy) <rznbhc>; map; rspamd_radix_fin: read radix trie of 1 elements: ents=1 dup=0 tbm=0 lc=1 mem=1k free=0 waste=0
rspamd-mailcow_1     | 2019-04-01 10:20:52 #12(normal) <oxhd99>; map; rspamd_map_read_cached: http://nginx:8081/settings.php: read map data cached 1024 bytes
rspamd-mailcow_1     | 2019-04-01 10:20:52 #12(normal) <aatq1u>; lua; settings.lua:659: loaded 3 elements of settings
rspamd-mailcow_1     | 2019-04-01 10:20:52 #13(fuzzy) <oxhd99>; map; rspamd_map_read_cached: http://nginx:8081/settings.php: read map data cached 1024 bytes
rspamd-mailcow_1     | 2019-04-01 10:20:52 #13(fuzzy) <aatq1u>; lua; settings.lua:659: loaded 3 elements of settings
rspamd-mailcow_1     | 2019-04-01 10:20:53 #14(fuzzy) <oxhd99>; map; rspamd_map_read_cached: http://nginx:8081/settings.php: read map data cached 1024 bytes
rspamd-mailcow_1     | 2019-04-01 10:20:53 #14(fuzzy) <aatq1u>; lua; settings.lua:659: loaded 3 elements of settings
rspamd-mailcow_1     | 2019-04-01 10:20:53 #12(normal) rspamd_worker_hyperscan_ready: loading hyperscan expressions after receiving compilation notice: new db
rspamd-mailcow_1     | 2019-04-01 10:20:53 #12(normal) <0175c1>; re_cache; rspamd_re_cache_load_hyperscan: hyperscan database of 180 regexps has been loaded
rspamd-mailcow_1     | 2019-04-01 10:20:53 #10(rspamd_proxy) <rznbhc>; map; rspamd_map_read_cached: http://nginx:8081/forwardinghosts.php: read map data cached 32 bytes
rspamd-mailcow_1     | 2019-04-01 10:20:53 #10(rspamd_proxy) <rznbhc>; map; rspamd_radix_fin: read radix trie of 1 elements: ents=1 dup=0 tbm=0 lc=1 mem=1k free=0 waste=0
rspamd-mailcow_1     | 2019-04-01 10:20:54 #10(rspamd_proxy) <oxhd99>; map; rspamd_map_read_cached: http://nginx:8081/settings.php: read map data cached 1024 bytes
rspamd-mailcow_1     | 2019-04-01 10:20:54 #10(rspamd_proxy) <aatq1u>; lua; settings.lua:659: loaded 3 elements of settings
rspamd-mailcow_1     | 2019-04-01 10:21:22 #11(controller) <8rmo3c>; map; http_map_finish: data is not modified for server maps.rspamd.com, next check at Mon, 01 Apr 2019 12:21:22 GMT
rspamd-mailcow_1     | 2019-04-01 10:21:26 #11(controller) <k8f914>; map; http_map_finish: data is not modified for server maps.rspamd.com, next check at Mon, 01 Apr 2019 12:21:26 GMT
rspamd-mailcow_1     | 2019-04-01 10:21:27 #11(controller) <f61zu5>; map; http_map_finish: data is not modified for server maps.rspamd.com, next check at Mon, 01 Apr 2019 12:21:27 GMT
rspamd-mailcow_1     | 2019-04-01 10:21:29 #11(controller) <hntukx>; map; http_map_finish: data is not modified for server maps.rspamd.com, next check at Mon, 01 Apr 2019 12:21:29 GMT
rspamd-mailcow_1     | 2019-04-01 10:21:29 #11(controller) <fdp86m>; map; http_map_finish: data is not modified for server maps.rspamd.com, next check at Mon, 01 Apr 2019 12:21:29 GMT
rspamd-mailcow_1     | 2019-04-01 10:21:33 #11(controller) <rznbhc>; map; http_map_finish: http://nginx:8081/forwardinghosts.php(ipaddress.13:8081): read map data 32 bytes, next check at Mon, 01 Apr 2019 08:22:03 GMT
rspamd-mailcow_1     | 2019-04-01 10:21:33 #11(controller) <rznbhc>; map; rspamd_map_save_http_cached_file: saved data from http://nginx:8081/forwardinghosts.php in /var/lib/rspamd/e48ac0193da10600fac6a17bb7146ba2421fee67.map, 16 bytes
rspamd-mailcow_1     | 2019-04-01 10:21:33 #11(controller) <rznbhc>; map; rspamd_radix_fin: read radix trie of 1 elements: ents=1 dup=0 tbm=0 lc=1 mem=1k free=0 waste=0
rspamd-mailcow_1     | 2019-04-01 10:21:33 #14(fuzzy) <rznbhc>; map; rspamd_map_read_cached: http://nginx:8081/forwardinghosts.php: read map data cached 32 bytes
rspamd-mailcow_1     | 2019-04-01 10:21:33 #14(fuzzy) <rznbhc>; map; rspamd_radix_fin: read radix trie of 1 elements: ents=1 dup=0 tbm=0 lc=1 mem=1k free=0 waste=0
rspamd-mailcow_1     | 2019-04-01 10:21:34 #12(normal) <rznbhc>; map; rspamd_map_read_cached: http://nginx:8081/forwardinghosts.php: read map data cached 32 bytes
rspamd-mailcow_1     | 2019-04-01 10:21:34 #12(normal) <rznbhc>; map; rspamd_radix_fin: read radix trie of 1 elements: ents=1 dup=0 tbm=0 lc=1 mem=1k free=0 waste=0
rspamd-mailcow_1     | 2019-04-01 10:21:37 #10(rspamd_proxy) <rznbhc>; map; rspamd_map_read_cached: http://nginx:8081/forwardinghosts.php: read map data cached 32 bytes
rspamd-mailcow_1     | 2019-04-01 10:21:37 #10(rspamd_proxy) <rznbhc>; map; rspamd_radix_fin: read radix trie of 1 elements: ents=1 dup=0 tbm=0 lc=1 mem=1k free=0 waste=0
rspamd-mailcow_1     | 2019-04-01 10:21:38 #13(fuzzy) <rznbhc>; map; rspamd_map_read_cached: http://nginx:8081/forwardinghosts.php: read map data cached 32 bytes
rspamd-mailcow_1     | 2019-04-01 10:21:38 #13(fuzzy) <rznbhc>; map; rspamd_radix_fin: read radix trie of 1 elements: ents=1 dup=0 tbm=0 lc=1 mem=1k free=0 waste=0
rspamd-mailcow_1     | 2019-04-01 10:21:38 #11(controller) <9zc4wc>; map; http_map_finish: data is not modified for server maps.rspamd.com, next check at Mon, 01 Apr 2019 12:21:38 GMT
rspamd-mailcow_1     | 2019-04-01 10:21:39 #11(controller) <oxhd99>; map; http_map_finish: http://nginx:8081/settings.php([fd4d:6169:6c63:6f77::10]:8081): read map data 1024 bytes, next check at Mon, 01 Apr 2019 08:22:09 GMT
rspamd-mailcow_1     | 2019-04-01 10:21:39 #11(controller) <oxhd99>; map; rspamd_map_save_http_cached_file: saved data from http://nginx:8081/settings.php in /var/lib/rspamd/f0f1f1ff89a5a9c0c3050fcb9ad2426aeacf1fdf.map, 934 bytes
rspamd-mailcow_1     | 2019-04-01 10:21:39 #11(controller) <aatq1u>; lua; settings.lua:659: loaded 3 elements of settings
rspamd-mailcow_1     | 2019-04-01 10:21:40 #11(controller) <xa6qqy>; map; http_map_finish: data is not modified for server rspamd.com, next check at Mon, 01 Apr 2019 12:21:40 GMT
rspamd-mailcow_1     | 2019-04-01 10:21:40 #13(fuzzy) <oxhd99>; map; rspamd_map_read_cached: http://nginx:8081/settings.php: read map data cached 1024 bytes
rspamd-mailcow_1     | 2019-04-01 10:21:40 #13(fuzzy) <aatq1u>; lua; settings.lua:659: loaded 3 elements of settings
rspamd-mailcow_1     | 2019-04-01 10:21:41 #11(controller) <u9r7uu>; map; http_map_finish: data is not modified for server maps.rspamd.com, next check at Mon, 01 Apr 2019 12:21:41 GMT
rspamd-mailcow_1     | 2019-04-01 10:21:41 #12(normal) <oxhd99>; map; rspamd_map_read_cached: http://nginx:8081/settings.php: read map data cached 1024 bytes
rspamd-mailcow_1     | 2019-04-01 10:21:41 #12(normal) <aatq1u>; lua; settings.lua:659: loaded 3 elements of settings
rspamd-mailcow_1     | 2019-04-01 10:21:41 #11(controller) <omc75i>; map; http_map_finish: data is not modified for server maps.rspamd.com, next check at Mon, 01 Apr 2019 12:21:41 GMT
rspamd-mailcow_1     | 2019-04-01 10:21:42 #14(fuzzy) <oxhd99>; map; rspamd_map_read_cached: http://nginx:8081/settings.php: read map data cached 1024 bytes
rspamd-mailcow_1     | 2019-04-01 10:21:42 #14(fuzzy) <aatq1u>; lua; settings.lua:659: loaded 3 elements of settings
rspamd-mailcow_1     | 2019-04-01 10:21:43 #10(rspamd_proxy) <oxhd99>; map; rspamd_map_read_cached: http://nginx:8081/settings.php: read map data cached 1024 bytes
rspamd-mailcow_1     | 2019-04-01 10:21:43 #10(rspamd_proxy) <aatq1u>; lua; settings.lua:659: loaded 3 elements of settings
rspamd-mailcow_1     | 2019-04-01 10:21:44 #11(controller) <78wxos>; map; http_map_finish: data is not modified for server maps.rspamd.com, next check at Mon, 01 Apr 2019 12:21:44 GMT
rspamd-mailcow_1     | 2019-04-01 10:21:48 #11(controller) <rznbhc>; map; rspamd_map_cache_cb: cached data is now expired (gen mismatch 1 != 2) for http://nginx:8081/forwardinghosts.php
rspamd-mailcow_1     | 2019-04-01 10:21:48 #11(controller) <oxhd99>; map; rspamd_map_cache_cb: cached data is now expired (gen mismatch 1 != 2) for http://nginx:8081/settings.php
rspamd-mailcow_1     | 2019-04-01 10:21:50 #10(rspamd_proxy) <bd2ca3>; proxy; proxy_accept_socket: accepted milter connection from ipaddress.7 port 35878
rspamd-mailcow_1     | 2019-04-01 10:21:50 #10(rspamd_proxy) <bd2ca3>; milter; rspamd_milter_process_command: got connection from ipaddress.248:33030
rspamd-mailcow_1     | 2019-04-01 10:21:50 #12(normal) <cc89d2>; task; accept_socket: accepted connection from ipaddress.11 port 42556, task ptr: 00007F02F28D4B80
rspamd-mailcow_1     | 2019-04-01 10:21:50 #12(normal) <cc89d2>; task; rspamd_mime_part_get_cte: detected missing CTE for part as: 7bit
rspamd-mailcow_1     | 2019-04-01 10:21:50 #12(normal) <cc89d2>; task; rspamd_mime_part_get_cte: detected missing CTE for part as: 7bit
rspamd-mailcow_1     | 2019-04-01 10:21:50 #12(normal) <cc89d2>; task; rspamd_message_parse: loaded message; id: <75a9-5ca1ca00-3-5a01e080@117715617>; queue-id: <834B515A970>; size: 764; checksum: <2e8fe5864bf19ba1a8a33cde38e5c622>
rspamd-mailcow_1     | 2019-04-01 10:21:50 #12(normal) <aatq1u>; lua; lua_redis.lua:454: use default Redis settings for dyn_rl
rspamd-mailcow_1     | 2019-04-01 10:21:50 #12(normal) <aatq1u>; lua; rspamd.local.lua:135: dynamic ratelimit request for user [email protected] (same server) returned invalid or empty data ("") or error ("nil") - trying dynamic ratelimit for domain...
rspamd-mailcow_1     | 2019-04-01 10:21:50 #12(normal) <aatq1u>; lua; rspamd.local.lua:139: dynamic ratelimit request for domain diskutiere.net returned invalid or empty data ("") or error ("nil")
rspamd-mailcow_1     | 2019-04-01 10:21:50 #[email protected](normal) <cc89d2>; lua; settings.lua:358: check for settings
rspamd-mailcow_1     | 2019-04-01 10:21:51 #12(normal) <cc89d2>; task; spf_symbol_callback: skip SPF checks for local networks and authorized users
rspamd-mailcow_1     | 2019-04-01 10:21:51 #12(normal) <cc89d2>; task; dkim_symbol_callback: skip DKIM checks for local networks and authorized users
rspamd-mailcow_1     | 2019-04-01 10:21:51 #12(normal) <cc89d2>; lua; once_received.lua:95: Skipping once_received for authenticated user or local network
rspamd-mailcow_1     | 2019-04-01 10:21:51 #12(normal) <cc89d2>; lua; dmarc.lua:568: skip DMARC checks for local networks and authorized users
rspamd-mailcow_1     | 2019-04-01 10:21:51 #12(normal) <cc89d2>; lua; dkim_signing.lua:126: Using selector prefix 'DKIM_SELECTORS' for domain 'diskutiere.net'
rspamd-mailcow_1     | 2019-04-01 10:21:51 #12(normal) <cc89d2>; lua; ip_score.lua:318: skip IP Score for authorized users
rspamd-mailcow_1     | 2019-04-01 10:21:51 #12(normal) <cc89d2>; lua; antivirus.lua:553: CLAM_VIRUS [clamav]: message or mime_part is clean
rspamd-mailcow_1     | 2019-04-01 10:21:51 #12(normal) <aatq1u>; lua; arc.lua:562: Using selector prefix DKIM_SELECTORS for domain diskutiere.net
rspamd-mailcow_1     | 2019-04-01 10:21:51 #12(normal) <cc89d2>; task; bayes_classify: skip classification as ham class has not enough learns: 0, 5 required
rspamd-mailcow_1     | 2019-04-01 10:21:51 #12(normal) <cc89d2>; lua; greylist.lua:260: Score too low - skip greylisting
rspamd-mailcow_1     | 2019-04-01 10:21:51 #12(normal) lua; rspamd.local.lua:84: found tag: cobinhood
rspamd-mailcow_1     | 2019-04-01 10:21:51 #12(normal) lua; rspamd.local.lua:86: metric action now: no action
rspamd-mailcow_1     | 2019-04-01 10:21:51 #12(normal) <cc89d2>; task; rspamd_task_write_log: id: <75a9-5ca1ca00-3-5a01e080@117715617>, qid: <834B515A970>, ip: ipaddress.248, user: [email protected] (same server), from: <[email protected] (same server)>, (default: F (no action): [-19.60/15.00] [MAILCOW_AUTH(-20.00){},MID_RHS_NOT_FQDN(0.50){},MIME_GOOD(-0.10){multipart/alternative;text/plain;},ARC_NA(0.00){},ARC_SIGNED(0.00){i=1;},DKIM_SIGNED(0.00){},DYN_RL_CHECK(0.00){},FROM_EQ_ENVFROM(0.00){},FROM_HAS_DN(0.00){},MIME_TRACE(0.00){0:+;1:+;},RCPT_COUNT_ONE(0.00){1;},RCPT_MAILCOW_DOMAIN(0.00){kupfer.cc;},RCVD_COUNT_ZERO(0.00){0;},RCVD_TLS_ALL(0.00){},TAGGED_RCPT(0.00){cobinhood;},TO_DN_NONE(0.00){},TO_MATCH_ENVRCPT_ALL(0.00){}]), len: 764, time: 620.000ms real, 26.357ms virtual, dns req: 0, digest: <2e8fe5864bf19ba1a8a33cde38e5c622>, rcpts: <[email protected]>, mime_rcpts: <[email protected]>
rspamd-mailcow_1     | 2019-04-01 10:21:51 #12(normal) <cc89d2>; task; rspamd_protocol_http_reply: regexp statistics: 0 pcre regexps scanned, 2 regexps matched, 180 regexps total, 93 regexps cached, 0B bytes scanned using pcre, 582B bytes scanned total
rspamd-mailcow_1     | 2019-04-01 10:21:51 #10(rspamd_proxy) <2dd813>; proxy; proxy_milter_finish_handler: finished milter connection
rspamd-mailcow_1     | 2019-04-01 10:22:19 #11(controller) <oxhd99>; map; http_map_finish: http://nginx:8081/settings.php([fd4d:6169:6c63:6f77::10]:8081): read map data 1024 bytes, next check at Mon, 01 Apr 2019 08:22:49 GMT
rspamd-mailcow_1     | 2019-04-01 10:22:19 #11(controller) <oxhd99>; map; rspamd_map_save_http_cached_file: saved data from http://nginx:8081/settings.php in /var/lib/rspamd/f0f1f1ff89a5a9c0c3050fcb9ad2426aeacf1fdf.map, 934 bytes
rspamd-mailcow_1     | 2019-04-01 10:22:19 #11(controller) <aatq1u>; lua; settings.lua:659: loaded 3 elements of settings
rspamd-mailcow_1     | 2019-04-01 10:22:19 #10(rspamd_proxy) <oxhd99>; map; rspamd_map_read_cached: http://nginx:8081/settings.php: read map data cached 1024 bytes
rspamd-mailcow_1     | 2019-04-01 10:22:19 #10(rspamd_proxy) <aatq1u>; lua; settings.lua:659: loaded 3 elements of settings
rspamd-mailcow_1     | 2019-04-01 10:22:20 #12(normal) <oxhd99>; map; rspamd_map_read_cached: http://nginx:8081/settings.php: read map data cached 1024 bytes
rspamd-mailcow_1     | 2019-04-01 10:22:20 #12(normal) <aatq1u>; lua; settings.lua:659: loaded 3 elements of settings
rspamd-mailcow_1     | 2019-04-01 10:22:20 #13(fuzzy) <oxhd99>; map; rspamd_map_read_cached: http://nginx:8081/settings.php: read map data cached 1024 bytes
rspamd-mailcow_1     | 2019-04-01 10:22:20 #13(fuzzy) <aatq1u>; lua; settings.lua:659: loaded 3 elements of settings
rspamd-mailcow_1     | 2019-04-01 10:22:21 #14(fuzzy) <oxhd99>; map; rspamd_map_read_cached: http://nginx:8081/settings.php: read map data cached 1024 bytes
rspamd-mailcow_1     | 2019-04-01 10:22:21 #14(fuzzy) <aatq1u>; lua; settings.lua:659: loaded 3 elements of settings
rspamd-mailcow_1     | 2019-04-01 10:22:24 #11(controller) <rznbhc>; map; http_map_finish: http://nginx:8081/forwardinghosts.php([fd4d:6169:6c63:6f77::10]:8081): read map data 32 bytes, next check at Mon, 01 Apr 2019 08:22:54 GMT
rspamd-mailcow_1     | 2019-04-01 10:22:24 #11(controller) <rznbhc>; map; rspamd_map_save_http_cached_file: saved data from http://nginx:8081/forwardinghosts.php in /var/lib/rspamd/e48ac0193da10600fac6a17bb7146ba2421fee67.map, 16 bytes
rspamd-mailcow_1     | 2019-04-01 10:22:24 #11(controller) <rznbhc>; map; rspamd_radix_fin: read radix trie of 1 elements: ents=1 dup=0 tbm=0 lc=1 mem=1k free=0 waste=0
rspamd-mailcow_1     | 2019-04-01 10:22:25 #12(normal) <rznbhc>; map; rspamd_map_read_cached: http://nginx:8081/forwardinghosts.php: read map data cached 32 bytes
rspamd-mailcow_1     | 2019-04-01 10:22:25 #12(normal) <rznbhc>; map; rspamd_radix_fin: read radix trie of 1 elements: ents=1 dup=0 tbm=0 lc=1 mem=1k free=0 waste=0
rspamd-mailcow_1     | 2019-04-01 10:22:25 #14(fuzzy) <rznbhc>; map; rspamd_map_read_cached: http://nginx:8081/forwardinghosts.php: read map data cached 32 bytes
rspamd-mailcow_1     | 2019-04-01 10:22:25 #14(fuzzy) <rznbhc>; map; rspamd_radix_fin: read radix trie of 1 elements: ents=1 dup=0 tbm=0 lc=1 mem=1k free=0 waste=0
rspamd-mailcow_1     | 2019-04-01 10:22:26 #10(rspamd_proxy) <rznbhc>; map; rspamd_map_read_cached: http://nginx:8081/forwardinghosts.php: read map data cached 32 bytes
rspamd-mailcow_1     | 2019-04-01 10:22:26 #10(rspamd_proxy) <rznbhc>; map; rspamd_radix_fin: read radix trie of 1 elements: ents=1 dup=0 tbm=0 lc=1 mem=1k free=0 waste=0
rspamd-mailcow_1     | 2019-04-01 10:22:27 #13(fuzzy) <rznbhc>; map; rspamd_map_read_cached: http://nginx:8081/forwardinghosts.php: read map data cached 32 bytes
rspamd-mailcow_1     | 2019-04-01 10:22:27 #13(fuzzy) <rznbhc>; map; rspamd_radix_fin: read radix trie of 1 elements: ents=1 dup=0 tbm=0 lc=1 mem=1k free=0 waste=0
rspamd-mailcow_1     | 2019-04-01 10:22:33 #11(controller) <rznbhc>; map; rspamd_map_cache_cb: cached data is now expired (gen mismatch 2 != 3) for http://nginx:8081/forwardinghosts.php
rspamd-mailcow_1     | 2019-04-01 10:22:38 #11(controller) <aatq1u>; lua; bayes_expiry.lua:395: finished expiry step 1: 0 items checked, 0 significant (0 extended), 0 insignificant (0 ttls set), 0 common (0 discriminated), 0 infrequent (0 ttls set), 0 mean, 0 std
rspamd-mailcow_1     | 2019-04-01 10:22:38 #11(controller) <aatq1u>; lua; bayes_expiry.lua:395: finished expiry cycle in 1 steps: 0 items checked, 0 significant (0 extended), 0 insignificant (0 ttls set), 0 common (0 discriminated), 0 infrequent (0 ttls set), 0 mean, 0 std
rspamd-mailcow_1     | 2019-04-01 10:22:39 #11(controller) <oxhd99>; map; rspamd_map_cache_cb: cached data is now expired (gen mismatch 2 != 3) for http://nginx:8081/settings.php

[andryyy]

You need to paste logs for a time you actually receive a tagged mail...

I cannot reproduce it btw

This is for a real mailbox though. I don't think this works with a 1:1 alias and I also think we mentioned that in the other issue.

[skupfer]

These are the logs from the time I received the tagged mail.

I send it from an account on my mail server to another account on my mailserver.

It used to work 1:1 for alias on my main mailbox as I mentioned before. Then after whatever update it stopped working and now everything lands in my inbox. This is really unfortunate because I would have to create a filter for everything so it gets moved this way :-(

[andryyy]

The logic of the tag_moo symbol never changed.

[andryyy]

We could probably add each 1:1 alias to the Redis map. Hm.

[skupfer]

Here is an example of the working state before and after updating at some point. As you mentioned, the X-Moo-Tag went missing AFTER the update. This is for all alias mails. Something must have changed.

COBINHOOD AFTER Update X

Return-Path: <bounce-mc.us16_80136606.266301-ALIAS+TAG=[e-mail]>
Delivered-To: [email protected]
Received: from mail.domain.tld ([172.22.1.7])
    by mail.domain.tld with LMTP id SKS9KHvI0FpfXQAAjgZzUw
    for <[email protected]>; Fri, 13 Apr 2018 17:10:51 +0200
Authentication-Results: mail.domain.tld; dkim=pass header.d=cobinhood.com; dmarc=pass (policy=reject) header.from=cobinhood.com; spf=pass smtp.mailfrom=[e-mail]
Received: from mail49.atl31.mcdlv.net (mail49.atl31.mcdlv.net [IP4address])
    by mail.domain.tld (Postfix) with ESMTP id 3B55615A8DC
    for <[email protected]>; Fri, 13 Apr 2018 17:10:40 +0200 (CEST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=k1; d=cobinhood.com;
 h=Subject:From:Reply-To:To:Date:Message-ID:List-ID:List-Unsubscribe:
 Content-Type:MIME-Version; [email protected];
 bh=81KaeewOA/Mc49C2sWEy3sRV01mMpUOhmZsWuq7G5Zc=;
 b=XAS7/g40y/DR6/55uCkGwrphWT/UF4YTwBGw4h0ezHygN/1ajnwfaOOiT2NYmOK7ptzksvew/DBK
   y3zKZPzayOLEiyeDCIfiVl2D7MZovA+OGqCJBCbdgb8Xbgwa/aYDBRnTWh1ISiynNcS3FxBtazfr
   PVXcO3fR6x9ea49XxEU=
Received: from (127.0.0.1) by mail49.atl31.mcdlv.net id hq34722ddl4q for <[email protected]>; Fri, 13 Apr 2018 15:10:29 +0000 (envelope-from <bounce-mc.us16_80136606.266301-ALIAS+TAG=[e-mail]>)
Subject: =?utf-8?Q?=F0=9F=92=81=C2=A0It=27s=20all=20for=20you=E2=80=94airdrop=20missions=2C=20bounties=2C=20more=20COB=20benefits?=
From: =?utf-8?Q?COBINHOOD?= <[email protected]>
Reply-To: =?utf-8?Q?COBINHOOD?= <[email protected]>
To: <[email protected]>
Date: Fri, 13 Apr 2018 15:10:29 +0000
Message-ID: <6a44078[e-mail]>
X-Mailer: MailChimp Mailer - **CID4793f17d5ccd7a3505ab**
X-Campaign: mailchimp6a440788789ab405bfce88ba1.4793f17d5c
X-campaignid: mailchimp6a440788789ab405bfce88ba1.4793f17d5c
X-Report-Abuse: Please report abuse for this campaign here: http://www.mailchimp.com/abuse/abuse.phtml?u=6a440788789ab405bfce88ba1&id=4793f17d5c&e=cd7a3505ab
X-MC-User: 6a440788789ab405bfce88ba1
Feedback-ID: 80136606:80136606.266301:us16:mc
List-ID: 6a440788789ab405bfce88ba1mc list <6a440788789ab405bfce88ba1.115829.list-id.mcsv.net>
X-Accounttype: pd
List-Unsubscribe: 
List-Unsubscribe-Post: List-Unsubscribe=One-Click
x-mcda: FALSE
Content-Type: multipart/alternative; boundary="_----------=_MCPart_242000755"
MIME-Version: 1.0
X-Spamd-Result: default: False [3.44 / 15.00]
     RCPT_COUNT_ONE(0.00)[1]
     DYN_RL_CHECK(0.00)[]
     REPLYTO_EXCESS_QP(1.20)[]
     URIBL_GREY(1.50)[list-manage.com.multi.uribl.com]
     DKIM_TRACE(0.00)[cobinhood.com:+]
     IP_SCORE(0.00)[ipnet: IP4subnet/21(0.98), asn: 14782(0.68), country: US(-0.21)]
     REPLYTO_EQ_FROM(0.00)[]
     FROM_HAS_DN(0.00)[]
     R_SPF_ALLOW(-0.20)[+ip4:IP4address]
     TAGGED_FROM(0.00)[cobinhood=DOMAIN.TLD]
     FROM_EXCESS_QP(1.20)[]
     RCPT_MAILCOW_DOMAIN(0.00)[DOMAIN.TLD]
     RCVD_NO_TLS_LAST(0.00)[]
     ARC_NA(0.00)[]
     ASN(0.00)[asn:14782, ipnet:IP4subnet/21, country:US]
     TO_DN_NONE(0.00)[]
     FORGED_SENDER(0.30)[]
     TAGGED_RCPT(0.00)[cobinhood]
     TO_MATCH_ENVRCPT_ALL(0.00)[]
     RCVD_COUNT_TWO(0.00)[2]
     MIME_GOOD(-0.10)[multipart/alternative,text/plain]
     R_DKIM_ALLOW(-0.20)[cobinhood.com]
     FROM_NEQ_ENVFROM(0.00)[[email protected],[email protected]]
     RCVD_IN_DNSWL_NONE(0.00)[49.134.201.205.list.dnswl.org : 127.0.15.0]
     DMARC_POLICY_ALLOW(-0.25)[cobinhood.com,reject]
     HAS_REPLYTO(0.00)[[email protected]]
     MX_GOOD(-0.01)[mail.mail49.atl31.mcdlv.net]
X-Rspamd-Queue-Id: 3B55615A8DC

COBINHOOD BEFORE Update X

Return-Path: <bounce-mc.us16_80136606.266297-ALIAS+TAG=[e-mail]>
Delivered-To: [email protected]
Received: from mail.domain.tld ([fd4d:6169:6c63:6f77::1])
    by mail.domain.tld with LMTP id 4METGOCjv1pZTgAAjgZzUw
    for <[email protected]>; Sat, 31 Mar 2018 15:06:08 +0000
Authentication-Results: mail.domain.tld; dkim=pass header.d=cobinhood.com; dmarc=pass (policy=reject) header.from=cobinhood.com; spf=pass smtp.mailfrom=[e-mail]
Received: from mail100.us4.mcsv.net (mail100.us4.mcsv.net [205.201.128.100])
    by mail.domain.tld (Postfix) with ESMTP id 136F115A862
    for <[email protected]>; Sat, 31 Mar 2018 15:05:56 +0000 (UTC)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=k1; d=cobinhood.com;
 h=Subject:From:Reply-To:To:Date:Message-ID:List-ID:List-Unsubscribe:
 Content-Type:MIME-Version; [email protected];
 bh=chEBpjDLEepEeytx7N9IWnkmh5D9pvNmEwVNDrUO5F8=;
 b=vfnU+EQmVv+qO5lI8Wd69lGtOnblUKAd3TWBqZFzwv2oDEQwYhIpjs6H1/cfrZbuuzj04aUbKGpB
   CKExsD+8SLaMUkgjCgwL5vSrVkuppIewVxLKF/d93ypAqApt8cfxcGNhMHmEGCVFpCEuD2VvUyfE
   tp/8gW1XeBoepIArHvk=
Received: from (127.0.0.1) by mail100.us4.mcsv.net id hnuhta2ddl4d for <[email protected]>; Sat, 31 Mar 2018 15:05:51 +0000 (envelope-from <bounce-mc.us16_80136606.266297-ALIAS+TAG=[e-mail]>)
Subject: =?utf-8?Q?=E2=9C=A8=20Revamped=20account=20level=20with=20100=20BTC=20limit=20&=20updates=20on=20tokens=20listed?=
From: =?utf-8?Q?COBINHOOD?= <[email protected]>
Reply-To: =?utf-8?Q?COBINHOOD?= <[email protected]>
To: <[email protected]>
Date: Sat, 31 Mar 2018 15:05:51 +0000
Message-ID: <6a44078[e-mail]>
X-Mailer: MailChimp Mailer - **CIDb8698eb37fcd7a3505ab**
X-Campaign: mailchimp6a440788789ab405bfce88ba1.b8698eb37f
X-campaignid: mailchimp6a440788789ab405bfce88ba1.b8698eb37f
X-Report-Abuse: Please report abuse for this campaign here: http://www.mailchimp.com/abuse/abuse.phtml?u=6a440788789ab405bfce88ba1&id=b8698eb37f&e=cd7a3505ab
X-MC-User: 6a440788789ab405bfce88ba1
Feedback-ID: 80136606:80136606.266297:us16:mc
List-ID: 6a440788789ab405bfce88ba1mc list <6a440788789ab405bfce88ba1.115829.list-id.mcsv.net>
X-Accounttype: pd
List-Unsubscribe: 
List-Unsubscribe-Post: List-Unsubscribe=One-Click
x-mcda: FALSE
Content-Type: multipart/alternative; boundary="_----------=_MCPart_697361172"
MIME-Version: 1.0
X-Moo-Tag: YES
X-Spamd-Result: default: False [3.44 / 15.00]
 FROM_NEQ_ENVFROM(0.00)[[email protected],[email protected]]
 FORGED_SENDER(0.30)[]
 R_SPF_ALLOW(-0.20)[+mx]
 MIME_GOOD(-0.10)[multipart/alternative,text/plain]
 HAS_REPLYTO(0.00)[[email protected]]
 DMARC_POLICY_ALLOW(-0.25)[cobinhood.com,reject]
 RCVD_COUNT_TWO(0.00)[2]
 TAGGED_FROM(0.00)[cobinhood=DOMAIN.TLD]
 IP_SCORE(0.00)[ipnet: IP4subnet/21(0.68), asn: 14782(0.55), country: US(-0.02)]
 RCVD_NO_TLS_LAST(0.00)[]
 URIBL_GREY(1.50)[list-manage.com.multi.uribl.com]
 FROM_EXCESS_QP(1.20)[]
 DYN_RL_CHECK(0.00)[]
 TAGGED_RCPT(0.00)[cobinhood]
 MX_GOOD(-0.01)[mail.mail100.us4.mcsv.net]
 DKIM_TRACE(0.00)[cobinhood.com:+]
 RCPT_COUNT_ONE(0.00)[1]
 R_DKIM_ALLOW(-0.20)[cobinhood.com]
 RCVD_IN_DNSWL_NONE(0.00)[100.128.201.205.list.dnswl.org : 127.0.15.0]
 RCPT_MAILCOW_DOMAIN(0.00)[DOMAIN.TLD]
 REPLYTO_EQ_FROM(0.00)[]
 TO_MATCH_ENVRCPT_ALL(0.00)[]
 ASN(0.00)[asn:14782, ipnet:IP4subnet/21, country:US]
 REPLYTO_EXCESS_QP(1.20)[]
 ARC_NA(0.00)[]
 TO_DN_NONE(0.00)[]
 FROM_HAS_DN(0.00)[]
X-Rspamd-Queue-Id: 136F115A862

Unfortunately I don't think the logs are still there from docker. (its from last year)

EDIT: Mixed up before and after (according to the dates :-))

[stale[bot]]

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.

[skupfer]

Too bad it is stale. But it looks like that it isn't working anymore for any tagged mail. They all get sent straight to the inbox instead of folders. Needs a rewrite if it relies on a non-working header/tag? Don't want to create rules :-(

[andryyy]

It works for mailboxes.

Edit: I _can_ reproduce it.

Edit2: I could reproduce, because I had set "Do nothing" as action...

Meh. After changing that: I cannot reproduce it. :(

[skupfer]

That's what I am talking about. I mean, I understood. Yes, it works for mailboxes. But it was working for the alias mail to my mailbox before commit X as I tried to tell from my comment https://github.com/mailcow/mailcow-dockerized/issues/2487#issuecomment-478520653 .. But something changed and now it stopped working completely.

Weird thing is you said you didn't change a thing. But why was it working fine and now stopped working.

[mlthlschr]

I also face the same problem. Did a really dirty workaround by commenting out certain lines in data/conf/rspamd/lua/rspamd.local.lua. Now it handles all the tags for every E-Mail received (so also the ones of the account of your Granny).

Edit: which lines?

--[[      local wants_subject_tag = task:get_symbol("RCPT_WANTS_SUBJECT_TAG")
      local wants_subfolder_tag = task:get_symbol("RCPT_WANTS_SUBFOLDER_TAG")

      if wants_subject_tag then 
]]
      rspamd_logger.infox("user wants subject modified for tagged mail")
      local sbj = task:get_header('Subject')
      new_sbj = '=?UTF-8?B?' .. tostring(util.encode_base64('[' .. tag .. '] ' .. sbj)) .. '?='
      task:set_milter_reply({
        remove_headers = {['Subject'] = 1},
        add_headers = {['Subject'] = new_sbj}
      })
--[[      elseif wants_subfolder_tag then
        rspamd_logger.infox("Add X-Moo-Tag header")
        task:set_milter_reply({
          add_headers = {['X-Moo-Tag'] = 'YES'}
        })
      end
]]

[andryyy]

It simply tags all then.

[skupfer]

Thanks, might give it a try. At least it would be working then. As of now it is not working at all. Had to create rules for every alias now due to that. Might not be needed anymore now.

Still it would be great if you could fix / change it officially but the workaround might come in handy. As I said it was working by 100% earlier since I have the folders there and didn't create them / moved the mails manually.

[andryyy]

Did never work for shared aliases.

I need exact steps to reproduce it, I will check it then.

@ntimo can probably write a check for the upcoming integration test then. :)

[skupfer]

It worked. By 100%. I my main account / mailbox and there are several subfolders I have never created for my aliases which were created due to the create subfolder rule (not tag in subject).

I have posted logs above in this ticket from the time it worked, this is all I can provide.

Config -> Mail Setup -> Aliases -> add alias -> [email protected] -> destination: [email protected]

Send an email to [email protected] and it arrives in mailbox [email protected]. It should get sorted into a folder automatically. This was working. I was happy about that because I didn't have to created hundreds of rules.

[andryyy]

Check the code, it is not possible this ever worked. [email protected] woud never be auto-expanded to [email protected]. This step never ever happened. You can check the git history. It did not break, it was never implemented. Ever.

I can try to add it for unshared aliases.

[skupfer]

Due to work and study I neither have the time nor the will to install older versions to prove the opposite. Others I recommended this tool have experienced exactly the same. I have not created the folders for the alias+tag mails. It worked exactly as I described. This is what the issue is all about. Perhaps it was a mistake and was unwittingly fixed. Looks like I have to live with it to close this topic once and for all.
Thank you very much for your hard work. All in all I really enjoy this product!

[andryyy]

:/ I will work on it. :) Will only work for non-shared aliases, though.

[PhilRW]

The sieve script is trying to match the +tag using envelope. It works if you check on the address instead. The recipient envelope is being rewritten to remove any +tag, which happens here. This is also why it behaves differently for aliases. I think alias delivery is bypassing dovecot somehow?

[andryyy]

If header :contains "X-Moo-Tag" "YES".

In data/conf/rspamd/lua/rspamd.local.lua the X header is set, when the rcpt is in the redis key RCPT_WANTS_SUBFOLDER_TAG. The problem is, that an alias is not part of this Redis key, only mailbox users are.

Even though [email protected] is a direct alias to [email protected], the Redis key only returns this:

> HGETALL RCPT_WANTS_SUBFOLDER_TAG
1) "[email protected]"
2) "1"
127.0.0.1:6379>

A message sent to [email protected] returns no X header:

So, my todo is: Add alias addresses to this redis key. :)

[PhilRW]

So that will take care of aliases, but should we also modify the sieve script so it checks on addresses, as such?

if header :contains "X-Moo-Tag" "YES" {
  if anyof (address :detail :matches ["To","CC"] "*",
      envelope :detail :matches "To" "*" ) {
    set :lower :upperfirst "tag" "${1}";
    if mailboxexists "INBOX/${1}" {
      fileinto "INBOX/${1}";
    } else {
      fileinto :create "INBOX/${tag}";
    }
  }
}

[andryyy]

Hm, would that fire, if any recipient in the To or CC field has a tag?

[PhilRW]

Hmm, yes it would. So envelope it is.

[albakham]

Very interested in this feature.
Having the ability to move mail, coming from tagged alias, automatically into subfolders would be much appreciated!

[andryyy]

I will work on this soon. :) Sorry.

[itkfm]

Still broken here, unfortunately. (I mean, this doesn't surprise me since this issue is still open.)

[andryyy]

Never worked, as described above.

PRs or sponsoring are welcome.

[itkfm]

sorry, just skipped through this (somewhat long) thread

[skupfer]

@andryyy I went back to the following commit: https://github.com/mailcow/mailcow-dockerized/commit/50fe21c646e4f0f8453b3b42f18064fbfd53d131

EDIT: This has been done on a virgin server!

I setup a mailbox: [email protected]
First mail: [email protected] -> Inbox
Second mail: [email protected] -> Inbox -> Alias

Working as expected. A folder got created for the alias

I setup an alias [email protected], goto to [email protected]
First mail: [email protected] -> Inbox
Second mail: [email protected] -> Inbox -> Test

A folder test got created for the alias mail with an test-tag

It looks like I wasn't imagining it.

Which logs do you need?

EDIT: Attached all logs. Hope I removed all relevant information
Archive.zip

EDIT: For completionists sake, it probably changed after
https://github.com/mailcow/mailcow-dockerized/commit/d58b89528f0cf57bf0b2fbfcac51b7d0e71bb17c

All tests done due to https://github.com/mailcow/mailcow-dockerized/issues/2487#issuecomment-574827508 and code changed

[andryyy]

2017? 😄

The tag handling was probably different in the sieve script (and changed for a reason).

I don't need logs, I need someone to pay the time to implement it properly. I don't have any free time left.

I checked it and it is the explicit option "wants_subfolder_tag" which is now required, but was "when nothing else matched" before. The default WAS to put mail to subfolders, the default IS to do nothing. And we want that new default.
So my previous words are still valid: we would need to add the alias addresses to the array of "wants_subfolder_tag".

[skupfer]

Pretty far back I know but you asked for it. Just wanted to make sure I was right when saying it WAS working before and therefore not lying. Decided to go pretty far back but I guess it changed later in 2018 to somewhere when I created this issue.

No need to hurry or something, maybe it gets implemented sooner or later. Who knows.

[pahy]

Is there anything to support you guys with to make this work?

[andryyy]

https://github.com/mailcow/mailcow-dockerized/commit/0c30d32fdb94e858318fe2bfbf81c2540741b221

[andryyy]

Finally fixed.

[itkfm]

Neat, thanks.

[skupfer]

@andryyy Thought it would work. But still receive tagged mails not filtered into their respective subfolders (4 / 4 mails failed to get moved, last one yesterday). Which info do you need? Updated 17.10.20.

[andryyy]

Can you update again? Larger messages (over 1 MB) failed to be correctly parsed.

[skupfer]

Can you update again? Larger messages (over 1 MB) failed to be correctly parsed.

Updated right after your message (23-10-20). More or less. Today (26-10-20) I received another unfiltered message. Do you want logs?

[andryyy]

Works fine here, sorry. Try to reset all changed code.

[andryyy]

Actually...

I'm an idiot and you were correct.

set_recipient has too many flaws (besides that I messed one if/else statement up which broke the tag handler for you), so I removed it and replaced the function for tag handling.

It works now. :) Can you please update once more?

[m0ddixx]

Is it possible that this broke tagging for unaliased inboxes? I've updated and since then all tagged emails get send straight to the main inbox

[andryyy]

I will check it now, but it's quite possible.

[andryyy]

Try ...

git fetch
git checkout origin/master data/conf/rspamd/lua/rspamd.local.lua data/conf/rspamd/dynmaps/aliasexp.php
docker-compose restart rspamd-mailcow

Does it work? :)

[m0ddixx]

Unfortunately, the mails with tags still won't land in a subfolder.

[andryyy]

Try a full update then, please. I tried every possible combination now. It always worked. :)

[m0ddixx]

So after i solved some git conflicts, i got some updated config. But somehow most of the file permissions got corrupted. had to blindfoldedly put all files on 755. Correct me please if there is a better way. But at least tagging is now working

[andryyy]

Important files are always corrected automatically.

[skupfer]

@andryyy I am on commit f05701954cdb490cb2facb9241af2cbabb80ba4b updated on Oct. 28.

I am still receiving mails in my inbox. Going to update again but here are the rspamd logs

rspamd-mailcow_1     | 2020-11-05 01:31:48 #38(controller) <34j8fz>; map; http_map_error: error reading https://www.invaluement.com/spdata/sendgrid-id-dnsbl.txt([2606:4700:10::6816:f90]:443): connection with http server terminated incorrectly: ssl connect error: syscall fail: Network is unreachable
rspamd-mailcow_1     | 2020-11-05 01:31:57 #1(main) <516292>; re_cache; rspamd_re_cache_load_hyperscan: full hyperscan database of 3065 regexps has been loaded
rspamd-mailcow_1     | 2020-11-05 01:46:28 #38(controller) <34j8fz>; map; http_map_error: error reading https://www.invaluement.com/spdata/sendgrid-id-dnsbl.txt([2606:4700:10::6816:e90]:443): connection with http server terminated incorrectly: ssl connect error: syscall fail: Network is unreachable
rspamd-mailcow_1     | 2020-11-05 02:00:22 #38(controller) <34j8fz>; map; http_map_error: error reading https://www.invaluement.com/spdata/sendgrid-id-dnsbl.txt([2606:4700:10::ac43:ecf]:443): connection with http server terminated incorrectly: ssl connect error: syscall fail: Network is unreachable
rspamd-mailcow_1     | 2020-11-05 02:19:55 #38(controller) <34j8fz>; map; http_map_error: error reading https://www.invaluement.com/spdata/sendgrid-id-dnsbl.txt([2606:4700:10::6816:e90]:443): connection with http server terminated incorrectly: ssl connect error: syscall fail: Network is unreachable
rspamd-mailcow_1     | 2020-11-05 02:33:46 #38(controller) <34j8fz>; map; http_map_error: error reading https://www.invaluement.com/spdata/sendgrid-id-dnsbl.txt([2606:4700:10::6816:e90]:443): connection with http server terminated incorrectly: ssl connect error: syscall fail: Network is unreachable
rspamd-mailcow_1     | 2020-11-05 02:50:15 #38(controller) <34j8fz>; map; http_map_error: error reading https://www.invaluement.com/spdata/sendgrid-id-dnsbl.txt([2606:4700:10::6816:e90]:443): connection with http server terminated incorrectly: ssl connect error: syscall fail: Network is unreachable
rspamd-mailcow_1     | 2020-11-05 03:01:15 #38(controller) <34j8fz>; map; http_map_error: error reading https://www.invaluement.com/spdata/sendgrid-id-dnsbl.txt([2606:4700:10::ac43:ecf]:443): connection with http server terminated incorrectly: ssl connect error: syscall fail: Network is unreachable
rspamd-mailcow_1     | 2020-11-05 03:22:08 #38(controller) <34j8fz>; map; http_map_error: error reading https://www.invaluement.com/spdata/sendgrid-id-dnsbl.txt([2606:4700:10::6816:f90]:443): connection with http server terminated incorrectly: ssl connect error: syscall fail: Network is unreachable
rspamd-mailcow_1     | 2020-11-05 03:41:17 #38(controller) <34j8fz>; map; http_map_error: error reading https://www.invaluement.com/spdata/sendgrid-id-dnsbl.txt([2606:4700:10::6816:e90]:443): connection with http server terminated incorrectly: ssl connect error: syscall fail: Network is unreachable
rspamd-mailcow_1     | 2020-11-05 04:00:16 #38(controller) <34j8fz>; map; http_map_error: error reading https://www.invaluement.com/spdata/sendgrid-id-dnsbl.txt([2606:4700:10::ac43:ecf]:443): connection with http server terminated incorrectly: ssl connect error: syscall fail: Network is unreachable
rspamd-mailcow_1     | 2020-11-05 04:21:55 #38(controller) <34j8fz>; map; http_map_error: error reading https://www.invaluement.com/spdata/sendgrid-id-dnsbl.txt([2606:4700:10::ac43:ecf]:443): connection with http server terminated incorrectly: ssl connect error: syscall fail: Network is unreachable
rspamd-mailcow_1     | 2020-11-05 04:46:29 #38(controller) <34j8fz>; map; http_map_error: error reading https://www.invaluement.com/spdata/sendgrid-id-dnsbl.txt([2606:4700:10::ac43:ecf]:443): connection with http server terminated incorrectly: ssl connect error: syscall fail: Network is unreachable
rspamd-mailcow_1     | 2020-11-05 05:01:17 #38(controller) <34j8fz>; map; http_map_error: error reading https://www.invaluement.com/spdata/sendgrid-id-dnsbl.txt([2606:4700:10::6816:f90]:443): connection with http server terminated incorrectly: ssl connect error: syscall fail: Network is unreachable
rspamd-mailcow_1     | 2020-11-05 05:21:13 #38(controller) <34j8fz>; map; http_map_error: error reading https://www.invaluement.com/spdata/sendgrid-id-dnsbl.txt([2606:4700:10::6816:e90]:443): connection with http server terminated incorrectly: ssl connect error: syscall fail: Network is unreachable
rspamd-mailcow_1     | 2020-11-05 05:32:36 #38(controller) <34j8fz>; map; http_map_error: error reading https://www.invaluement.com/spdata/sendgrid-id-dnsbl.txt([2606:4700:10::6816:f90]:443): connection with http server terminated incorrectly: ssl connect error: syscall fail: Network is unreachable
rspamd-mailcow_1     | 2020-11-05 05:48:12 #38(controller) <34j8fz>; map; http_map_error: error reading https://www.invaluement.com/spdata/sendgrid-id-dnsbl.txt([2606:4700:10::ac43:ecf]:443): connection with http server terminated incorrectly: ssl connect error: syscall fail: Network is unreachable
rspamd-mailcow_1     | 2020-11-05 06:03:37 #38(controller) <34j8fz>; map; http_map_error: error reading https://www.invaluement.com/spdata/sendgrid-id-dnsbl.txt([2606:4700:10::ac43:ecf]:443): connection with http server terminated incorrectly: ssl connect error: syscall fail: Network is unreachable
rspamd-mailcow_1     | 2020-11-05 06:24:34 #38(controller) <34j8fz>; map; http_map_error: error reading https://www.invaluement.com/spdata/sendgrid-id-dnsbl.txt([2606:4700:10::6816:f90]:443): connection with http server terminated incorrectly: ssl connect error: syscall fail: Network is unreachable
rspamd-mailcow_1     | 2020-11-05 06:45:06 #38(controller) <34j8fz>; map; http_map_error: error reading https://www.invaluement.com/spdata/sendgrid-id-dnsbl.txt([2606:4700:10::ac43:ecf]:443): connection with http server terminated incorrectly: ssl connect error: syscall fail: Network is unreachable
rspamd-mailcow_1     | 2020-11-05 06:56:37 #38(controller) <34j8fz>; map; http_map_error: error reading https://www.invaluement.com/spdata/sendgrid-id-dnsbl.txt([2606:4700:10::ac43:ecf]:443): connection with http server terminated incorrectly: ssl connect error: syscall fail: Network is unreachable
rspamd-mailcow_1     | 2020-11-05 07:08:58 #38(controller) <34j8fz>; map; http_map_error: error reading https://www.invaluement.com/spdata/sendgrid-id-dnsbl.txt([2606:4700:10::6816:e90]:443): connection with http server terminated incorrectly: ssl connect error: syscall fail: Network is unreachable
rspamd-mailcow_1     | 2020-11-05 07:19:50 #38(controller) <34j8fz>; map; http_map_error: error reading https://www.invaluement.com/spdata/sendgrid-id-dnsbl.txt([2606:4700:10::6816:e90]:443): connection with http server terminated incorrectly: ssl connect error: syscall fail: Network is unreachable
rspamd-mailcow_1     | 2020-11-05 07:19:50 #38(controller) rspamd_crash_sig_handler: caught fatal signal 7(Bus error), pid: 38, trace:
rspamd-mailcow_1     | 2020-11-05 07:19:50 #38(controller) rspamd_print_crash: 0: 00007F678DFBD661: rspamd_map_helper_destroy_hash()+0x21
rspamd-mailcow_1     | 2020-11-05 07:19:50 #38(controller) rspamd_print_crash: 1: 00007F678DFD60EA: rspamd_map_watch()+0x2aa
rspamd-mailcow_1     | 2020-11-05 07:19:50 #38(controller) rspamd_print_crash: 2: 00007F678DFD14B3: rspamd_http_connection_free()+0x163
rspamd-mailcow_1     | 2020-11-05 07:19:50 #38(controller) rspamd_print_crash: 3: 00007F678DFD16AB: rspamd_http_router_free()+0xcb
rspamd-mailcow_1     | 2020-11-05 07:19:50 #38(controller) rspamd_print_crash: 4: 00007F678DFF76A0: rspamd_ssl_connection_free()+0x1a0
rspamd-mailcow_1     | 2020-11-05 07:19:50 #38(controller) rspamd_print_crash: 5: 00007F678DAECA9E: ev_invoke_pending()+0x5e
rspamd-mailcow_1     | 2020-11-05 07:19:50 #38(controller) rspamd_print_crash: 6: 00007F678DAF24E8: ev_run()+0xf08
rspamd-mailcow_1     | 2020-11-05 07:19:50 #38(controller) rspamd_print_crash: 7: 0000558227E1145A: <unknown>
rspamd-mailcow_1     | 2020-11-05 07:19:50 #38(controller) rspamd_print_crash: 8: 00007F678DFDEB32: rspamd_fork_worker()+0x7a2
rspamd-mailcow_1     | 2020-11-05 07:19:50 #38(controller) rspamd_print_crash: 9: 0000558227E0A58D: <unknown>
rspamd-mailcow_1     | 2020-11-05 07:19:50 #38(controller) rspamd_print_crash: 10: 0000558227E0AD12: <unknown>
rspamd-mailcow_1     | 2020-11-05 07:19:50 #38(controller) rspamd_print_crash: 11: 0000558227E03843: <unknown>
rspamd-mailcow_1     | 2020-11-05 07:19:50 #38(controller) rspamd_print_crash: 12: 00007F678D94909B: __libc_start_main()+0xeb
rspamd-mailcow_1     | 2020-11-05 07:19:50 #38(controller) rspamd_print_crash: 13: 0000558227E03CDA: <unknown>
rspamd-mailcow_1     | 2020-11-05 07:19:50 #38(controller) rspamd_crash_sig_handler: please see Rspamd FAQ to learn how to dump core files and how to fill a bug report
rspamd-mailcow_1     | 2020-11-05 07:19:51 #1(main) <c7c619>; main; rspamd_check_termination_clause: controller process 38 terminated abnormally with exit code 0 by signal: Bus error but NOT created core file (throttled=no); core file limits: -1 current, -1 max
rspamd-mailcow_1     | 2020-11-05 07:19:51 #1(main) <c7c619>; main; rspamd_cld_handler: respawn process controller in lieu of terminated process with pid 38
rspamd-mailcow_1     | 2020-11-05 07:19:52 #1(main) <c7c619>; main; rspamd_fork_worker: prepare to fork process controller (0); listen on: /var/lib/rspamd/rspamd.sock mode=0666 owner=nobody
rspamd-mailcow_1     | 2020-11-05 07:19:53 #41(controller) <c7c619>; main; rspamd_worker_set_limits: use system max file descriptors limit: 1024KiB cur and 1024KiB max
rspamd-mailcow_1     | 2020-11-05 07:19:53 #41(controller) <c7c619>; main; rspamd_worker_set_limits: use system max core size limit: -1B cur and -1B max
rspamd-mailcow_1     | 2020-11-05 07:19:53 #41(controller) <r4q9nw>; controller; rspamd_controller_password_sane: your normal password is not encrypted, we strongly recommend to replace it with the encrypted one
rspamd-mailcow_1     | 2020-11-05 07:19:53 #41(controller) <r4q9nw>; controller; rspamd_controller_password_sane: enable password is not set, so you should filter controller availability by using of firewall or `secure_ip` option
rspamd-mailcow_1     | 2020-11-05 07:19:57 #41(controller) <34j8fz>; map; http_map_error: error reading https://www.invaluement.com/spdata/sendgrid-id-dnsbl.txt([2606:4700:10::6816:e90]:443): connection with http server terminated incorrectly: ssl connect error: syscall fail: Network is unreachable
rspamd-mailcow_1     | 2020-11-05 07:40:46 #41(controller) <34j8fz>; map; http_map_error: error reading https://www.invaluement.com/spdata/sendgrid-id-dnsbl.txt([2606:4700:10::ac43:ecf]:443): connection with http server terminated incorrectly: ssl connect error: syscall fail: Network is unreachable
rspamd-mailcow_1     | 2020-11-05 07:54:19 #41(controller) <34j8fz>; map; http_map_error: error reading https://www.invaluement.com/spdata/sendgrid-id-dnsbl.txt([2606:4700:10::6816:f90]:443): connection with http server terminated incorrectly: ssl connect error: syscall fail: Network is unreachable
rspamd-mailcow_1     | 2020-11-05 08:15:17 #41(controller) <34j8fz>; map; http_map_error: error reading https://www.invaluement.com/spdata/sendgrid-id-dnsbl.txt([2606:4700:10::6816:f90]:443): connection with http server terminated incorrectly: ssl connect error: syscall fail: Network is unreachable
rspamd-mailcow_1     | 2020-11-05 08:35:12 #41(controller) <34j8fz>; map; http_map_error: error reading https://www.invaluement.com/spdata/sendgrid-id-dnsbl.txt([2606:4700:10::ac43:ecf]:443): connection with http server terminated incorrectly: ssl connect error: syscall fail: Network is unreachable
rspamd-mailcow_1     | 2020-11-05 08:55:54 #41(controller) <34j8fz>; map; http_map_error: error reading https://www.invaluement.com/spdata/sendgrid-id-dnsbl.txt([2606:4700:10::6816:e90]:443): connection with http server terminated incorrectly: ssl connect error: syscall fail: Network is unreachable
rspamd-mailcow_1     | 2020-11-05 09:17:47 #41(controller) <34j8fz>; map; http_map_error: error reading https://www.invaluement.com/spdata/sendgrid-id-dnsbl.txt([2606:4700:10::6816:f90]:443): connection with http server terminated incorrectly: ssl connect error: syscall fail: Network is unreachable
rspamd-mailcow_1     | 2020-11-05 09:28:26 #41(controller) <34j8fz>; map; http_map_error: error reading https://www.invaluement.com/spdata/sendgrid-id-dnsbl.txt([2606:4700:10::6816:f90]:443): connection with http server terminated incorrectly: ssl connect error: syscall fail: Network is unreachable
rspamd-mailcow_1     | 2020-11-05 09:44:54 #41(controller) <34j8fz>; map; http_map_error: error reading https://www.invaluement.com/spdata/sendgrid-id-dnsbl.txt([2606:4700:10::6816:e90]:443): connection with http server terminated incorrectly: ssl connect error: syscall fail: Network is unreachable
rspamd-mailcow_1     | 2020-11-05 10:03:32 #41(controller) <34j8fz>; map; http_map_error: error reading https://www.invaluement.com/spdata/sendgrid-id-dnsbl.txt([2606:4700:10::ac43:ecf]:443): connection with http server terminated incorrectly: ssl connect error: syscall fail: Network is unreachable
rspamd-mailcow_1     | 2020-11-05 10:26:27 #41(controller) <34j8fz>; map; http_map_error: error reading https://www.invaluement.com/spdata/sendgrid-id-dnsbl.txt([2606:4700:10::6816:f90]:443): connection with http server terminated incorrectly: ssl connect error: syscall fail: Network is unreachable
rspamd-mailcow_1     | 2020-11-05 10:40:32 #41(controller) <34j8fz>; map; http_map_error: error reading https://www.invaluement.com/spdata/sendgrid-id-dnsbl.txt([2606:4700:10::6816:e90]:443): connection with http server terminated incorrectly: ssl connect error: syscall fail: Network is unreachable
rspamd-mailcow_1     | 2020-11-05 10:59:17 #41(controller) <34j8fz>; map; http_map_error: error reading https://www.invaluement.com/spdata/sendgrid-id-dnsbl.txt([2606:4700:10::ac43:ecf]:443): connection with http server terminated incorrectly: ssl connect error: syscall fail: Network is unreachable
rspamd-mailcow_1     | 2020-11-05 11:17:16 #41(controller) <34j8fz>; map; http_map_error: error reading https://www.invaluement.com/spdata/sendgrid-id-dnsbl.txt([2606:4700:10::6816:f90]:443): connection with http server terminated incorrectly: ssl connect error: syscall fail: Network is unreachable
rspamd-mailcow_1     | 2020-11-05 11:35:09 #41(controller) <34j8fz>; map; http_map_error: error reading https://www.invaluement.com/spdata/sendgrid-id-dnsbl.txt([2606:4700:10::6816:f90]:443): connection with http server terminated incorrectly: ssl connect error: syscall fail: Network is unreachable
rspamd-mailcow_1     | 2020-11-05 11:54:01 #41(controller) <34j8fz>; map; http_map_error: error reading https://www.invaluement.com/spdata/sendgrid-id-dnsbl.txt([2606:4700:10::6816:f90]:443): connection with http server terminated incorrectly: ssl connect error: syscall fail: Network is unreachable
rspamd-mailcow_1     | 2020-11-05 12:11:25 #41(controller) rspamd_crash_sig_handler: caught fatal signal 7(Bus error), pid: 41, trace:
rspamd-mailcow_1     | 2020-11-05 12:11:25 #41(controller) rspamd_print_crash: 0: 00007F678DFBD661: rspamd_map_helper_destroy_hash()+0x21
rspamd-mailcow_1     | 2020-11-05 12:11:25 #41(controller) rspamd_print_crash: 1: 00007F678DFD60EA: rspamd_map_watch()+0x2aa
rspamd-mailcow_1     | 2020-11-05 12:11:25 #41(controller) rspamd_print_crash: 2: 00007F678DFD14B3: rspamd_http_connection_free()+0x163
rspamd-mailcow_1     | 2020-11-05 12:11:25 #41(controller) rspamd_print_crash: 3: 00007F678DFDA8FB: rspamd_http_connection_new_client()+0xfbb
rspamd-mailcow_1     | 2020-11-05 12:11:25 #41(controller) rspamd_print_crash: 4: 00007F678DFDB60C: rspamd_http_connection_new_keepalive()+0x12c
rspamd-mailcow_1     | 2020-11-05 12:11:25 #41(controller) rspamd_print_crash: 5: 00007F678DF301FE: http_parser_execute()+0x202e
rspamd-mailcow_1     | 2020-11-05 12:11:25 #41(controller) rspamd_print_crash: 6: 00007F678DFD9646: rspamd_http_router_new()+0x8a6
rspamd-mailcow_1     | 2020-11-05 12:11:25 #41(controller) rspamd_print_crash: 7: 00007F678DAECA9E: ev_invoke_pending()+0x5e
rspamd-mailcow_1     | 2020-11-05 12:11:25 #41(controller) rspamd_print_crash: 8: 00007F678DAF24E8: ev_run()+0xf08
rspamd-mailcow_1     | 2020-11-05 12:11:25 #41(controller) rspamd_print_crash: 9: 0000558227E1145A: <unknown>
rspamd-mailcow_1     | 2020-11-05 12:11:25 #41(controller) rspamd_print_crash: 10: 00007F678DFDEB32: rspamd_fork_worker()+0x7a2
rspamd-mailcow_1     | 2020-11-05 12:11:25 #41(controller) rspamd_print_crash: 11: 0000558227E0A49F: <unknown>
rspamd-mailcow_1     | 2020-11-05 12:11:25 #41(controller) rspamd_print_crash: 12: 00007F678DAECA9E: ev_invoke_pending()+0x5e
rspamd-mailcow_1     | 2020-11-05 12:11:25 #41(controller) rspamd_print_crash: 13: 00007F678DAF24E8: ev_run()+0xf08
rspamd-mailcow_1     | 2020-11-05 12:11:25 #41(controller) rspamd_print_crash: 14: 0000558227E038FE: <unknown>
rspamd-mailcow_1     | 2020-11-05 12:11:25 #41(controller) rspamd_print_crash: 15: 00007F678D94909B: __libc_start_main()+0xeb
rspamd-mailcow_1     | 2020-11-05 12:11:25 #41(controller) rspamd_print_crash: 16: 0000558227E03CDA: <unknown>
rspamd-mailcow_1     | 2020-11-05 12:11:25 #41(controller) rspamd_crash_sig_handler: please see Rspamd FAQ to learn how to dump core files and how to fill a bug report
rspamd-mailcow_1     | 2020-11-05 12:11:25 #1(main) <c7c619>; main; rspamd_check_termination_clause: controller process 41 terminated abnormally with exit code 0 by signal: Bus error but NOT created core file (throttled=no); core file limits: -1 current, -1 max
rspamd-mailcow_1     | 2020-11-05 12:11:25 #1(main) <c7c619>; main; rspamd_cld_handler: respawn process controller in lieu of terminated process with pid 41
rspamd-mailcow_1     | 2020-11-05 12:11:27 #1(main) <c7c619>; main; rspamd_fork_worker: prepare to fork process controller (0); listen on: /var/lib/rspamd/rspamd.sock mode=0666 owner=nobody
rspamd-mailcow_1     | 2020-11-05 12:11:27 #42(controller) <c7c619>; main; rspamd_worker_set_limits: use system max file descriptors limit: 1024KiB cur and 1024KiB max
rspamd-mailcow_1     | 2020-11-05 12:11:27 #42(controller) <c7c619>; main; rspamd_worker_set_limits: use system max core size limit: -1B cur and -1B max
rspamd-mailcow_1     | 2020-11-05 12:11:27 #42(controller) <r4q9nw>; controller; rspamd_controller_password_sane: your normal password is not encrypted, we strongly recommend to replace it with the encrypted one
rspamd-mailcow_1     | 2020-11-05 12:11:27 #42(controller) <r4q9nw>; controller; rspamd_controller_password_sane: enable password is not set, so you should filter controller availability by using of firewall or `secure_ip` option
rspamd-mailcow_1     | 2020-11-06 06:34:37 #1(main) <c7c619>; main; rspamd_main_heartbeat_cb: lost 1 heartbeat from worker type controller with pid 42, last beat on: 2020-11-06 06:34:03.24669
rspamd-mailcow_1     | 2020-11-06 06:34:47 #1(main) <c7c619>; main; rspamd_main_heartbeat_cb: received heartbeat from worker type controller with pid 42, last beat on: 2020-11-06 06:34:47.01378 (1 beats lost previously)
rspamd-mailcow_1     | 2020-11-07 06:34:43 #42(controller) <7m3drg>; map; rspamd_map_dns_callback: cannot resolve urlhaus.abuse.ch: query timed out
rspamd-mailcow_1     | 2020-11-07 14:47:27 #1(main) <c7c619>; main; rspamd_main_heartbeat_cb: lost heartbeat from worker type controller with pid 42, last beat on: 2020-11-07 14:47:03.26598 (1 beats received previously)
rspamd-mailcow_1     | 2020-11-07 14:47:47 #1(main) <c7c619>; main; rspamd_main_heartbeat_cb: received heartbeat from worker type controller with pid 42, last beat on: 2020-11-07 14:47:37.50195 (1 beats lost previously)
rspamd-mailcow_1     | 2020-11-08 18:01:31 #1(main) <c7c619>; main; rspamd_main_heartbeat_cb: lost heartbeat from worker type controller with pid 42, last beat on: 2020-11-08 18:01:02.96723 (1 beats received previously)
rspamd-mailcow_1     | 2020-11-08 18:01:47 #1(main) <c7c619>; main; rspamd_main_heartbeat_cb: received heartbeat from worker type controller with pid 42, last beat on: 2020-11-08 18:01:40.60739 (1 beats lost previously)
rspamd-mailcow_1     | 2020-11-09 06:34:37 #1(main) <c7c619>; main; rspamd_main_heartbeat_cb: lost heartbeat from worker type controller with pid 42, last beat on: 2020-11-09 06:34:00.61141 (1 beats received previously)
rspamd-mailcow_1     | 2020-11-09 06:34:47 #1(main) <c7c619>; main; rspamd_main_heartbeat_cb: received heartbeat from worker type controller with pid 42, last beat on: 2020-11-09 06:34:47.18484 (1 beats lost previously)
rspamd-mailcow_1     | 2020-11-09 06:59:46 #39(normal) <57c99d>; task; rspamd_task_write_log: id: <[e-mail]>, qid: <D24A215BA38>, ip: 69.169.232.10, from: <[e-mail]>, (default: F (no action): [-0.40/15.00] [R_DKIM_ALLOW(-0.20){amazonses.com:s=ulrbq2zjesb42hdt6rpnifgor3epinsy;},R_SPF_ALLOW(-0.20){+ip4:69.169.224.0/20;},ARC_NA(0.00){},ARC_SIGNED(0.00){DOMAIN.COM:s=dkim:i=1;},ASN(0.00){asn:16509, ipnet:69.169.232.0/22, country:US;},BLOCKLISTDE_FAIL(0.00){69.169.232.10:query timed out;},DBL_FAIL(0.00){sender-domain.com:query timed out;amazonses.com:query timed out;},DKIM_TRACE(0.00){amazonses.com:+;},DMARC_NA(0.00){sender-domain.com;},DWL_DNSWL_FAIL(0.00){69.169.232.10:query timed out;},FROM_NEQ_ENVFROM(0.00){[email protected];[e-mail];},FROM_NO_DN(0.00){},RBL_INTERSERVER_IP_FAIL(0.00){69.169.232.10:query timed out;},RBL_INTERSERVER_URI_FAIL(0.00){amazonses.com:query timed out;support.sender-domain.com:query timed out;sender-domain.com:query timed out;},RBL_UCEPROTECT_LEVEL1_FAIL(0.00){69.169.232.10:query timed out;},RBL_VIRUSFREE_UNKNOWN_FAIL(0.00){69.169.232.10:query timed out;},RCVD_IN_DNSWL_NONE(0.00){69.169.232.10:from;},RSPAMD_URIBL_FAIL(0.00){amazonses.com:query timed out;},SURBL_MULTI_FAIL(0.00){sender-domain.com:query timed out;amazonses.com:query timed out;},TAGGED_RCPT(0.00){tag1;},URIBL_MULTI_FAIL(0.00){sender-domain.com:query timed out;}]), len: 3181, time: 13465.457ms, dns req: 39, digest: <ff7f8fc880ba06302fc99bffcdd01713>, rcpts: <[email protected],[email protected]>, mime_rcpts: <[email protected],>
rspamd-mailcow_1     | 2020-11-09 06:59:46 #39(normal) <57c99d>; task; rspamd_protocol_http_reply: regexp statistics: 0 pcre regexps scanned, 1 regexps matched, 3065 regexps total, 0 regexps cached, 0B scanned using pcre, 51B scanned total
rspamd-mailcow_1     | 2020-11-09 07:00:24 #1(main) <c7c619>; main; rspamd_main_heartbeat_cb: lost 1 heartbeat from worker type normal with pid 39, last beat on: 2020-11-09 06:59:53.17593
rspamd-mailcow_1     | 2020-11-09 07:00:24 #39(normal) <e8ae3c>; task; rspamd_task_write_log: id: <[e-mail]>, qid: <043AB15BA41>, ip: 69.169.232.8, from: <[e-mail]>, (default: F (no action): [1.10/15.00] [HFILTER_HELO_IP_A(1.00){b232-8.smtp-out.ap-southeast-2.amazonses.com;},FORGED_SENDER(0.30){[email protected];[e-mail];},MIME_HTML_ONLY(0.20){},R_DKIM_ALLOW(-0.20){amazonses.com:s=ulrbq2zjesb42hdt6rpnifgor3epinsy;},R_SPF_ALLOW(-0.20){+ip4:69.169.224.0/20:c;},ARC_NA(0.00){},ASN(0.00){asn:16509, ipnet:69.169.232.0/22, country:US;},DKIM_TRACE(0.00){amazonses.com:+;},DMARC_DNSFAIL(0.00){sender-domain.com : query timed out;},DWL_DNSWL_FAIL(0.00){69.169.232.8:query timed out;},FROM_NEQ_ENVFROM(0.00){[email protected];[e-mail];},FROM_NO_DN(0.00){},MAILSPIKE_FAIL(0.00){69.169.232.8:query timed out;},MIME_TRACE(0.00){0:~;},MSBL_EBL_FAIL(0.00){[email protected]:query timed out;},RCPT_COUNT_ONE(0.00){1;},RCVD_COUNT_ZERO(0.00){0;},RCVD_IN_DNSWL_FAIL(0.00){69.169.232.8:query timed out;},RSPAMD_EMAILBL_FAIL(0.00){support.sender-domain.com:query timed out;},TAGGED_RCPT(0.00){TAG1;},TO_DN_NONE(0.00){},TO_MATCH_ENVRCPT_ALL(0.00){}]), len: 3180, time: 31354.990ms, dns req: 11, digest: <ff7f8fc880ba06302fc99bffcdd01713>, rcpts: <[email protected],[email protected]>, mime_rcpts: <[email protected],>
rspamd-mailcow_1     | 2020-11-09 07:00:24 #39(normal) <e8ae3c>; task; rspamd_protocol_http_reply: regexp statistics: 0 pcre regexps scanned, 4 regexps matched, 3065 regexps total, 2761 regexps cached, 0B scanned using pcre, 5.27KiB scanned total
rspamd-mailcow_1     | 2020-11-09 07:00:44 #1(main) <c7c619>; main; rspamd_main_heartbeat_cb: received heartbeat from worker type normal with pid 39, last beat on: 2020-11-09 07:00:34.92906 (1 beats lost previously)
rspamd-mailcow_1     | 2020-11-09 07:37:27 #1(main) <c7c619>; main; rspamd_main_heartbeat_cb: lost heartbeat from worker type controller with pid 42, last beat on: 2020-11-09 07:37:07.18322 (1 beats received previously)
rspamd-mailcow_1     | 2020-11-09 07:37:47 #1(main) <c7c619>; main; rspamd_main_heartbeat_cb: received heartbeat from worker type controller with pid 42, last beat on: 2020-11-09 07:37:41.74997 (1 beats lost previously)
rspamd-mailcow_1     | 2020-11-09 15:33:43 #39(normal) <e20460>; task; rspamd_task_write_log: id: <[email protected]>, qid: <2510415BA41>, ip: 13.111.172.185, from: <[e-mail]>, (default: F (no action): [2.38/15.00] [MIME_BAD_ATTACHMENT(1.60){p7s;},BAYES_SPAM(1.28){92.05%;},MIME_GOOD(-0.20){multipart/signed;multipart/alternative;text/plain;},R_DKIM_ALLOW(-0.20){marketing.sender2domain.com:s=11dkim1;},R_SPF_ALLOW(-0.20){+ip4:13.111.0.0/16;},MIME_UNKNOWN(0.10){application/x-pkcs7-signature;},ARC_NA(0.00){},ARC_SIGNED(0.00){DOMAIN.COM:s=dkim:i=1;},ASN(0.00){asn:22606, ipnet:13.111.0.0/16, country:US;},DBL_FAIL(0.00){sender2domain.com:query timed out;},DKIM_TRACE(0.00){marketing.sender2domain.com:+;},DMARC_DNSFAIL(0.00){sender2domain.com : query timed out;},FROM_HAS_DN(0.00){},FROM_NEQ_ENVFROM(0.00){[email protected];[e-mail];},HAS_REPLYTO(0.00){[e-mail];},MIME_TRACE(0.00){0:+;1:+;2:+;3:~;4:~;},RBL_INTERSERVER_IP_FAIL(0.00){13.111.172.185:query timed out;},RBL_INTERSERVER_URI_FAIL(0.00){sender2domain.com:query timed out;marketing.sender2domain.com:query timed out;},RCVD_IN_DNSWL_NONE(0.00){13.111.172.185:from;},REPLYTO_DN_EQ_FROM_DN(0.00){},REPLYTO_DOM_EQ_FROM_DOM(0.00){},SPAMHAUS_FAIL(0.00){13.111.172.185:query timed out;},TAGGED_RCPT(0.00){TAG;}]), len: 68183, time: 12340.851ms, dns req: 34, digest: <e0caf85b0cc5d3b67465fbba9ab1024b>, rcpts: <[email protected],[email protected]>, mime_rcpts: <[email protected],>
rspamd-mailcow_1     | 2020-11-09 15:33:43 #39(normal) <e20460>; task; rspamd_protocol_http_reply: regexp statistics: 0 pcre regexps scanned, 0 regexps matched, 3065 regexps total, 0 regexps cached, 0B scanned using pcre, 88B scanned total
rspamd-mailcow_1     | 2020-11-09 15:53:02 #39(normal) rspamd_srv_request_handler: cannot read from server pipe: Resource temporarily unavailable
rspamd-mailcow_1     | 2020-11-09 16:01:10 #1(main) <c7c619>; main; rspamd_main_heartbeat_cb: lost heartbeat from worker type controller with pid 42, last beat on: 2020-11-09 16:00:44.37092 (1 beats received previously)
rspamd-mailcow_1     | 2020-11-09 16:01:27 #1(main) <c7c619>; main; rspamd_main_heartbeat_cb: received heartbeat from worker type controller with pid 42, last beat on: 2020-11-09 16:01:12.65640 (1 beats lost previously)
rspamd-mailcow_1     | 2020-11-09 16:01:47 #1(main) <c7c619>; main; rspamd_main_heartbeat_cb: lost heartbeat from worker type controller with pid 42, last beat on: 2020-11-09 16:01:12.65640 (1 beats received previously)
rspamd-mailcow_1     | 2020-11-09 16:01:59 #42(controller) <c6onet>; map; rspamd_map_dns_callback: cannot resolve bazaar.abuse.ch: query timed out
rspamd-mailcow_1     | 2020-11-09 16:02:02 #42(controller) <7m3drg>; map; rspamd_map_dns_callback: cannot resolve urlhaus.abuse.ch: query timed out
rspamd-mailcow_1     | 2020-11-09 16:02:07 #1(main) <c7c619>; main; rspamd_main_heartbeat_cb: received heartbeat from worker type controller with pid 42, last beat on: 2020-11-09 16:02:01.52632 (1 beats lost previously)
rspamd-mailcow_1     | 2020-11-09 16:09:04 #1(main) <c7c619>; main; rspamd_main_heartbeat_cb: lost heartbeat from worker type normal with pid 39, last beat on: 2020-11-09 16:08:28.16460 (1 beats received previously)
rspamd-mailcow_1     | 2020-11-09 16:09:24 #1(main) <c7c619>; main; rspamd_main_heartbeat_cb: lost 2 heartbeat from worker type normal with pid 39, last beat on: 2020-11-09 16:08:28.16460
rspamd-mailcow_1     | 2020-11-09 16:09:27 #1(main) <c7c619>; main; rspamd_main_heartbeat_cb: lost heartbeat from worker type controller with pid 42, last beat on: 2020-11-09 16:08:51.52843 (1 beats received previously)
rspamd-mailcow_1     | 2020-11-09 16:09:44 #1(main) <c7c619>; main; rspamd_main_heartbeat_cb: lost 3 heartbeat from worker type normal with pid 39, last beat on: 2020-11-09 16:08:28.16460
rspamd-mailcow_1     | 2020-11-09 16:09:47 #1(main) <c7c619>; main; rspamd_main_heartbeat_cb: lost 2 heartbeat from worker type controller with pid 42, last beat on: 2020-11-09 16:08:51.52843
rspamd-mailcow_1     | 2020-11-09 16:10:04 #1(main) <c7c619>; main; rspamd_main_heartbeat_cb: lost 4 heartbeat from worker type normal with pid 39, last beat on: 2020-11-09 16:08:28.16460
rspamd-mailcow_1     | 2020-11-09 16:10:07 #1(main) <c7c619>; main; rspamd_main_heartbeat_cb: lost 3 heartbeat from worker type controller with pid 42, last beat on: 2020-11-09 16:08:51.52843
rspamd-mailcow_1     | 2020-11-09 16:10:24 #1(main) <c7c619>; main; rspamd_main_heartbeat_cb: lost 5 heartbeat from worker type normal with pid 39, last beat on: 2020-11-09 16:08:28.16460
rspamd-mailcow_1     | 2020-11-09 16:10:27 #1(main) <c7c619>; main; rspamd_main_heartbeat_cb: lost 4 heartbeat from worker type controller with pid 42, last beat on: 2020-11-09 16:08:51.52843
rspamd-mailcow_1     | 2020-11-09 16:10:44 #1(main) <c7c619>; main; rspamd_main_heartbeat_cb: lost 6 heartbeat from worker type normal with pid 39, last beat on: 2020-11-09 16:08:28.16460
rspamd-mailcow_1     | 2020-11-09 16:10:47 #1(main) <c7c619>; main; rspamd_main_heartbeat_cb: lost 5 heartbeat from worker type controller with pid 42, last beat on: 2020-11-09 16:08:51.52843
rspamd-mailcow_1     | 2020-11-09 16:11:04 #1(main) <c7c619>; main; rspamd_main_heartbeat_cb: lost 7 heartbeat from worker type normal with pid 39, last beat on: 2020-11-09 16:08:28.16460
rspamd-mailcow_1     | 2020-11-09 16:11:07 #1(main) <c7c619>; main; rspamd_main_heartbeat_cb: lost 6 heartbeat from worker type controller with pid 42, last beat on: 2020-11-09 16:08:51.52843
rspamd-mailcow_1     | 2020-11-09 16:11:24 #1(main) <c7c619>; main; rspamd_main_heartbeat_cb: lost 8 heartbeat from worker type normal with pid 39, last beat on: 2020-11-09 16:08:28.16460
rspamd-mailcow_1     | 2020-11-09 16:11:27 #1(main) <c7c619>; main; rspamd_main_heartbeat_cb: lost 7 heartbeat from worker type controller with pid 42, last beat on: 2020-11-09 16:08:51.52843
rspamd-mailcow_1     | 2020-11-09 16:11:44 #1(main) <c7c619>; main; rspamd_main_heartbeat_cb: lost 9 heartbeat from worker type normal with pid 39, last beat on: 2020-11-09 16:08:28.16460
rspamd-mailcow_1     | 2020-11-09 16:11:47 #1(main) <c7c619>; main; rspamd_main_heartbeat_cb: lost 8 heartbeat from worker type controller with pid 42, last beat on: 2020-11-09 16:08:51.52843
rspamd-mailcow_1     | 2020-11-09 16:12:04 #1(main) <c7c619>; main; rspamd_main_heartbeat_cb: lost 10 heartbeat from worker type normal with pid 39, last beat on: 2020-11-09 16:08:28.16460
rspamd-mailcow_1     | 2020-11-09 16:12:07 #1(main) <c7c619>; main; rspamd_main_heartbeat_cb: lost 9 heartbeat from worker type controller with pid 42, last beat on: 2020-11-09 16:08:51.52843
rspamd-mailcow_1     | 2020-11-09 16:12:24 #1(main) <c7c619>; main; rspamd_main_heartbeat_cb: lost 11 heartbeat from worker type normal with pid 39, last beat on: 2020-11-09 16:08:28.16460
rspamd-mailcow_1     | 2020-11-09 16:12:27 #1(main) <c7c619>; main; rspamd_main_heartbeat_cb: lost 10 heartbeat from worker type controller with pid 42, last beat on: 2020-11-09 16:08:51.52843
rspamd-mailcow_1     | 2020-11-09 16:12:44 #1(main) <c7c619>; main; rspamd_main_heartbeat_cb: lost 12 heartbeat from worker type normal with pid 39, last beat on: 2020-11-09 16:08:28.16460
rspamd-mailcow_1     | 2020-11-09 16:12:47 #1(main) <c7c619>; main; rspamd_main_heartbeat_cb: lost 11 heartbeat from worker type controller with pid 42, last beat on: 2020-11-09 16:08:51.52843
rspamd-mailcow_1     | 2020-11-09 16:12:50 #42(controller) <r4q9nw>; lua; neural.lua:1202: cannot get ANN spam trains rn_SHORT_default_w7u51ryc_0 from redis: timeout while connecting the server
rspamd-mailcow_1     | 2020-11-09 16:12:53 #42(controller) <r4q9nw>; lua; neural.lua:1316: cannot get ANNs list from redis: timeout while connecting the server
rspamd-mailcow_1     | 2020-11-09 16:12:54 #42(controller) <r4q9nw>; lua; neural.lua:1352: cannot exec invalidate script in redis: timeout while connecting the server
rspamd-mailcow_1     | 2020-11-09 16:12:54 #42(controller) <r4q9nw>; lua; neural.lua:1316: cannot get ANNs list from redis: timeout while connecting the server
rspamd-mailcow_1     | 2020-11-09 16:12:54 #42(controller) <r4q9nw>; lua; neural.lua:1316: cannot get ANNs list from redis: timeout while connecting the server
rspamd-mailcow_1     | 2020-11-09 16:12:59 #42(controller) <r4q9nw>; lua; neural.lua:1352: cannot exec invalidate script in redis: timeout while connecting the server
rspamd-mailcow_1     | 2020-11-09 16:13:00 #42(controller) <r4q9nw>; lua; neural.lua:1316: cannot get ANNs list from redis: timeout while connecting the server
rspamd-mailcow_1     | 2020-11-09 16:13:00 #42(controller) <rznbhc>; map; rspamd_map_dns_callback: cannot resolve nginx: query timed out
rspamd-mailcow_1     | 2020-11-09 16:13:00 #42(controller) <oxhd99>; map; rspamd_map_dns_callback: cannot resolve nginx: query timed out
rspamd-mailcow_1     | 2020-11-09 16:13:00 #42(controller) <qbq3yk>; map; rspamd_map_dns_callback: cannot resolve maps.rspamd.com: query timed out
rspamd-mailcow_1     | 2020-11-09 16:13:00 #42(controller) <k8f914>; map; rspamd_map_dns_callback: cannot resolve maps.rspamd.com: query timed out
rspamd-mailcow_1     | 2020-11-09 16:13:00 #42(controller) <o33omj>; map; rspamd_map_dns_callback: cannot resolve maps.rspamd.com: query timed out
rspamd-mailcow_1     | 2020-11-09 16:13:00 #42(controller) <7n3qic>; map; rspamd_map_dns_callback: cannot resolve maps.rspamd.com: query timed out
rspamd-mailcow_1     | 2020-11-09 16:13:00 #42(controller) <dyatkr>; map; rspamd_map_dns_callback: cannot resolve maps.rspamd.com: query timed out
rspamd-mailcow_1     | 2020-11-09 16:13:00 #42(controller) <qamb1r>; map; rspamd_map_dns_callback: cannot resolve maps.rspamd.com: query timed out
rspamd-mailcow_1     | 2020-11-09 16:13:00 #42(controller) <fdp86m>; map; rspamd_map_dns_callback: cannot resolve maps.rspamd.com: query timed out
rspamd-mailcow_1     | 2020-11-09 16:13:00 #42(controller) <u9r7uu>; map; rspamd_map_dns_callback: cannot resolve maps.rspamd.com: query timed out
rspamd-mailcow_1     | 2020-11-09 16:13:04 #1(main) <c7c619>; main; rspamd_main_heartbeat_cb: received heartbeat from worker type normal with pid 39, last beat on: 2020-11-09 16:12:57.20227 (12 beats lost previously)
rspamd-mailcow_1     | 2020-11-09 16:13:07 #1(main) <c7c619>; main; rspamd_main_heartbeat_cb: received heartbeat from worker type controller with pid 42, last beat on: 2020-11-09 16:13:04.33330 (11 beats lost previously)
rspamd-mailcow_1     | 2020-11-09 16:35:50 #42(controller) <c6onet>; map; rspamd_map_dns_callback: cannot resolve bazaar.abuse.ch: query timed out

[andryyy]

I don't.

All of the above errors indicate internal problems. Cannot resolve any name. Not even an internal name.

Probably related to a firewall?

[skupfer]

Right, now that I see it. Never had any issues with Mailcow/Sogo receiving mails so far. But I read docker recreates the rules approprietely. This is my iptables output.

The referenced iptables-persistent link shows: This problem is no more since the release of Docker 17.06.

Chain INPUT (policy ACCEPT)
target     prot opt source               destination
MAILCOW    all  --  anywhere             anywhere
ACCEPT     all  --  anywhere             anywhere
REJECT     all  --  loopback/8           anywhere             reject-with icmp-port-unreachable
ACCEPT     icmp --  anywhere             anywhere             state NEW icmp echo-request
ACCEPT     tcp  --  anywhere             anywhere             tcp dpt:ssh state NEW
ACCEPT     tcp  --  anywhere             anywhere             tcp dpt:http state NEW
ACCEPT     tcp  --  anywhere             anywhere             tcp dpt:https state NEW
ACCEPT     tcp  --  anywhere             anywhere             tcp dpt:4242
ACCEPT     udp  --  anywhere             anywhere             udp dpt:4242
ACCEPT     tcp  --  anywhere             anywhere             tcp dpt:submission /* Postfix Submission */
ACCEPT     tcp  --  anywhere             anywhere             tcp dpt:urd /* Postfix SMTPS */
ACCEPT     tcp  --  anywhere             anywhere             tcp dpt:smtp /* Postfix SMTP */
ACCEPT     tcp  --  anywhere             anywhere             tcp dpt:imap2 /* Dovecot IMAP */
ACCEPT     tcp  --  anywhere             anywhere             tcp dpt:imaps /* Dovecot IMAPS */
ACCEPT     tcp  --  anywhere             anywhere             tcp dpt:pop3 /* Dovecot POP3 */
ACCEPT     tcp  --  anywhere             anywhere             tcp dpt:pop3s /* Dovecot POP3S */
ACCEPT     tcp  --  anywhere             anywhere             tcp dpt:sieve /* Dovecot ManageSieve */
DROP       tcp  --  anywhere             anywhere             tcp dpt:smtp STRING match  "ylmf-pc" ALGO name bm TO 65535
ACCEPT     all  --  anywhere             anywhere             state RELATED,ESTABLISHED
LOG        all  --  anywhere             anywhere             limit: avg 5/min burst 5 LOG level debug prefix "iptables_INPUT_denied: "
REJECT     all  --  anywhere             anywhere             reject-with icmp-port-unreachable

Chain FORWARD (policy ACCEPT)
target     prot opt source               destination
MAILCOW    all  --  anywhere             anywhere
DOCKER-USER  all  --  anywhere             anywhere
DOCKER-ISOLATION-STAGE-1  all  --  anywhere             anywhere
ACCEPT     all  --  anywhere             anywhere             ctstate RELATED,ESTABLISHED
DOCKER     all  --  anywhere             anywhere
ACCEPT     all  --  anywhere             anywhere
ACCEPT     all  --  anywhere             anywhere
ACCEPT     all  --  anywhere             anywhere             ctstate RELATED,ESTABLISHED
DOCKER     all  --  anywhere             anywhere
ACCEPT     all  --  anywhere             anywhere
ACCEPT     all  --  anywhere             anywhere
ACCEPT     all  --  anywhere             anywhere             ctstate RELATED,ESTABLISHED
DOCKER     all  --  anywhere             anywhere
ACCEPT     all  --  anywhere             anywhere
ACCEPT     all  --  anywhere             anywhere
ACCEPT     all  --  anywhere             anywhere             ctstate RELATED,ESTABLISHED
DOCKER     all  --  anywhere             anywhere
ACCEPT     all  --  anywhere             anywhere
ACCEPT     all  --  anywhere             anywhere
LOG        all  --  anywhere             anywhere             limit: avg 5/min burst 5 LOG level debug prefix "iptables_FORWARD_denied: "
REJECT     all  --  anywhere             anywhere             reject-with icmp-port-unreachable

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination
ACCEPT     all  --  anywhere             anywhere

Chain DOCKER (4 references)
target     prot opt source               destination
ACCEPT     tcp  --  anywhere             172.18.0.2           tcp dpt:55555
ACCEPT     tcp  --  anywhere             172.18.0.2           tcp dpt:8888
ACCEPT     tcp  --  anywhere             172.20.0.3           tcp dpt:8091
ACCEPT     tcp  --  anywhere             172.20.0.3           tcp dpt:8090
ACCEPT     tcp  --  anywhere             172.22.1.249         tcp dpt:6379
ACCEPT     tcp  --  anywhere             172.22.1.7           tcp dpt:8983
ACCEPT     tcp  --  anywhere             172.22.1.250         tcp dpt:12345
ACCEPT     tcp  --  anywhere             172.22.1.250         tcp dpt:sieve
ACCEPT     tcp  --  anywhere             172.22.1.250         tcp dpt:pop3s
ACCEPT     tcp  --  anywhere             172.22.1.250         tcp dpt:imaps
ACCEPT     tcp  --  anywhere             172.22.1.250         tcp dpt:imap2
ACCEPT     tcp  --  anywhere             172.22.1.250         tcp dpt:pop3
ACCEPT     tcp  --  anywhere             172.22.1.12          tcp dpt:8443
ACCEPT     tcp  --  anywhere             172.22.1.12          tcp dpt:http-alt
ACCEPT     tcp  --  anywhere             172.22.1.8           tcp dpt:mysql
ACCEPT     tcp  --  anywhere             172.22.1.11          tcp dpt:submission
ACCEPT     tcp  --  anywhere             172.22.1.11          tcp dpt:urd
ACCEPT     tcp  --  anywhere             172.22.1.11          tcp dpt:smtp

Chain DOCKER-ISOLATION-STAGE-1 (1 references)
target     prot opt source               destination
DOCKER-ISOLATION-STAGE-2  all  --  anywhere             anywhere
DOCKER-ISOLATION-STAGE-2  all  --  anywhere             anywhere
DOCKER-ISOLATION-STAGE-2  all  --  anywhere             anywhere
DOCKER-ISOLATION-STAGE-2  all  --  anywhere             anywhere
RETURN     all  --  anywhere             anywhere

Chain DOCKER-ISOLATION-STAGE-2 (4 references)
target     prot opt source               destination
DROP       all  --  anywhere             anywhere
DROP       all  --  anywhere             anywhere
DROP       all  --  anywhere             anywhere
DROP       all  --  anywhere             anywhere
RETURN     all  --  anywhere             anywhere

Chain DOCKER-USER (1 references)
target     prot opt source               destination
RETURN     all  --  anywhere             anywhere

Chain MAILCOW (2 references)
target     prot opt source               destination