So ich hab folgendes Problem, Seid ca. 1 Woche lässt Mailcow meine VM, wo ich es innstalleirt habe, kommplet einfrieren. htop zeigt das sehr viele "dovecot/lmtp" prozessor, den gesamten Ram nimmt und dann st die VM nicht mehr ansprech bar. Dann hilft nur noch ein reset der VM. Ich kann das nur umgehen, wen ich in der /opt/mailcow-dockerized/data/conf/dovecot/dovecot.conf in der Zeile "protocols = imap sieve lmtp pop3" lmtp entferne. Was ja aber die Funktion vom Mailcow massive beinträchtigt. Könnt ihr mir helfen, das das nicht mehr passiert? Es ist kein Desktop Mailclient verbunden und ich bin nicht im sogo eingeloggt.[upl-image uuid=bce739ab-f888-4d8f-a019-8872b271f901 size=243kB url=https://community.mailcow.email/assets/files/2020-03-25/1585135853-71845-mailcow-dovecot-lmtp-freez-vm-25032020.jpeg]mailcow-dovecot-lmtp-freez-vm-25032020.jpeg[/upl-image]

ICh hab das problem jetzt so gelöst, in dem ich in der "/opt/mailcow-dockerized/data/conf/postfix/master.cf" die lmtp verbindungen auf 12 beschränkt habe und geht auch.

Schau doch mal in die dovecot-mailcow Logs, was da so auf den LMTP services rumhämmert, wenn es passiert. Normal ist es jedenfalls nicht, was man da sieht. Ohne Logs kann nie jemand helfen. :/

Hier ist der log vom dovecot-mailcow. > root@Ubuntu-1804:/opt/mailcow-dockerized# docker-compose logs --tail=2000 -f dovecot-mailcow > Attaching to mailcowdockerized_dovecot-mailcow_1 > > dovecot-mailcow_1 | Waiting for database to come up... > dovecot-mailcow_1 | Waiting for database to come up... > dovecot-mailcow_1 | Uptime: 4 Threads: 9 Questions: 9 Slow queries: 0 Opens: 19 Flush tables: 1 Open tables: 13 Queries per second avg: 2.250 > dovecot-mailcow_1 | Adding user `vmail' to group `tty' ... > dovecot-mailcow_1 | Adding user vmail to group tty > dovecot-mailcow_1 | Done. > dovecot-mailcow_1 | doveconf: Warning: service auth { client_limit=300 } is lower than required under max. load (10400) > dovecot-mailcow_1 | doveconf: Warning: service anvil { client_limit=300 } is lower than required under max. load (10303) > dovecot-mailcow_1 | doveconf: Error: t_readlink(/var/run/dovecot/dovecot.conf) failed: readlink() failed: No such file or directory > dovecot-mailcow_1 | % Total % Received % Xferd Average Speed Time Time Time Current > dovecot-mailcow_1 | Dload Upload Total Spent Left Speed > 100 98k 100 98k 0 0 561k 0 --:--:-- --:--:-- --:--:-- 561k > dovecot-mailcow_1 | 20_blatspammer.cf > dovecot-mailcow_1 | 70_HS_body.cf > dovecot-mailcow_1 | 70_HS_header.cf > dovecot-mailcow_1 | 2020-03-26 09:27:59,451 INFO Set uid to user 0 succeeded > dovecot-mailcow_1 | 2020-03-26 09:27:59,453 INFO supervisord started with pid 1 > dovecot-mailcow_1 | 2020-03-26 09:28:00,458 INFO spawned: 'processes' with pid 117 > dovecot-mailcow_1 | 2020-03-26 09:28:00,473 INFO spawned: 'cron' with pid 118 > dovecot-mailcow_1 | 2020-03-26 09:28:00,475 INFO spawned: 'dovecot' with pid 119 > dovecot-mailcow_1 | 2020-03-26 09:28:00,478 INFO spawned: 'syslog-ng' with pid 120 > dovecot-mailcow_1 | [2020-03-26T09:28:00.839062] WARNING: With use-dns(no), dns-cache() will be forced to 'no' too!; > dovecot-mailcow_1 | Mar 26 09:28:00 mail syslog-ng[120]: syslog-ng starting up; version='3.19.1' > dovecot-mailcow_1 | 2020-03-26 09:28:01,845 INFO success: processes entered RUNNING state, process has stayed up for > than 1 seconds (startsecs) > dovecot-mailcow_1 | 2020-03-26 09:28:01,882 INFO success: cron entered RUNNING state, process has stayed up for > than 1 seconds (startsecs) > dovecot-mailcow_1 | 2020-03-26 09:28:01,882 INFO success: dovecot entered RUNNING state, process has stayed up for > than 1 seconds (startsecs) > dovecot-mailcow_1 | 2020-03-26 09:28:01,882 INFO success: syslog-ng entered RUNNING state, process has stayed up for > than 1 seconds (startsecs) > dovecot-mailcow_1 | Mar 26 09:28:03 mail dovecot: lmtp(141): Connect from 172.22.1.10 > dovecot-mailcow_1 | Mar 26 09:28:03 mail dovecot: lmtp(140): Connect from 172.22.1.10 > dovecot-mailcow_1 | Mar 26 09:28:03 mail dovecot: lmtp(142): Connect from fd4d:6169:6c63:6f77::e > dovecot-mailcow_1 | Mar 26 09:28:03 mail dovecot: lmtp(144): Connect from fd4d:6169:6c63:6f77::e > dovecot-mailcow_1 | Mar 26 09:28:03 mail dovecot: lmtp(145): Connect from fd4d:6169:6c63:6f77::e > dovecot-mailcow_1 | Mar 26 09:28:03 mail dovecot: lmtp(146): Connect from 172.22.1.10 > dovecot-mailcow_1 | Mar 26 09:28:03 mail dovecot: lmtp(148): Connect from 172.22.1.10 > dovecot-mailcow_1 | Mar 26 09:28:03 mail dovecot: lmtp(150): Connect from fd4d:6169:6c63:6f77::e > dovecot-mailcow_1 | Mar 26 09:28:03 mail dovecot: lmtp(152): Connect from fd4d:6169:6c63:6f77::e > dovecot-mailcow_1 | Mar 26 09:28:03 mail dovecot: lmtp(153): Connect from fd4d:6169:6c63:6f77::e > dovecot-mailcow_1 | Mar 26 09:28:04 mail dovecot: lmtp(conan179@maildomain): sieve: msgid=: stored mail into mailbox 'INBOX' > dovecot-mailcow_1 | Mar 26 09:28:04 mail dovecot: lmtp(148): Disconnect from 172.22.1.10: Client has quit the connection (state=READY) > dovecot-mailcow_1 | Mar 26 09:28:04 mail dovecot: lmtp(148): Connect from 172.22.1.10 > dovecot-mailcow_1 | Mar 26 09:28:04 mail dovecot: lmtp(154): Connect from fd4d:6169:6c63:6f77::e > dovecot-mailcow_1 | Mar 26 09:28:04 mail dovecot: lmtp(conan179@maildomain): sieve: msgid=: fileinto action: stored mail into mailbox 'Mail Delivery System' > dovecot-mailcow_1 | Mar 26 09:28:04 mail dovecot: lmtp(145): Disconnect from fd4d:6169:6c63:6f77::e: Client has quit the connection (state=READY) > dovecot-mailcow_1 | Mar 26 09:28:04 mail dovecot: lmtp(145): Connect from 172.22.1.10 > dovecot-mailcow_1 | Mar 26 09:28:04 mail dovecot: lmtp(155): Connect from 172.22.1.10 > dovecot-mailcow_1 | Mar 26 09:28:04 mail dovecot: lmtp(conan179@maildomain): sieve: msgid=: fileinto action: stored mail into mailbox 'Mail Delivery System' > dovecot-mailcow_1 | Mar 26 09:28:04 mail dovecot: lmtp(144): Disconnect from fd4d:6169:6c63:6f77::e: Client has quit the connection (state=READY) > dovecot-mailcow_1 | Mar 26 09:28:04 mail dovecot: lmtp(144): Connect from 172.22.1.10 > dovecot-mailcow_1 | Mar 26 09:28:04 mail dovecot: lmtp(conan179@maildomain): sieve: msgid=: fileinto action: stored mail into mailbox 'Mail Delivery System' > dovecot-mailcow_1 | Mar 26 09:28:04 mail dovecot: lmtp(156): Connect from fd4d:6169:6c63:6f77::e > dovecot-mailcow_1 | Mar 26 09:28:04 mail dovecot: lmtp(153): Disconnect from fd4d:6169:6c63:6f77::e: Client has quit the connection (state=READY) > dovecot-mailcow_1 | Mar 26 09:28:04 mail dovecot: lmtp(153): Connect from fd4d:6169:6c63:6f77::e > dovecot-mailcow_1 | Mar 26 09:28:05 mail dovecot: lmtp(157): Connect from 172.22.1.10 > dovecot-mailcow_1 | Mar 26 09:28:05 mail dovecot: lmtp(conan179@maildomain): sieve: msgid=: fileinto action: stored mail into mailbox 'Mail Delivery System' > dovecot-mailcow_1 | Mar 26 09:28:05 mail dovecot: lmtp(142): Disconnect from fd4d:6169:6c63:6f77::e: Client has quit the connection (state=READY) > dovecot-mailcow_1 | Mar 26 09:28:05 mail dovecot: lmtp(142): Connect from 172.22.1.10 > dovecot-mailcow_1 | Mar 26 09:28:05 mail dovecot: lmtp(158): Connect from fd4d:6169:6c63:6f77::e > dovecot-mailcow_1 | Mar 26 09:28:05 mail dovecot: lmtp(conan179@maildomain): sieve: msgid=: fileinto action: stored mail into mailbox 'Mail Delivery System' > dovecot-mailcow_1 | Mar 26 09:28:05 mail dovecot: lmtp(conan179@maildomain): sieve: msgid=: fileinto action: stored mail into mailbox 'Mail Delivery System' > dovecot-mailcow_1 | Mar 26 09:28:06 mail dovecot: lmtp(conan179@maildomain): sieve: msgid=: fileinto action: stored mail into mailbox 'Mail Delivery System' > dovecot-mailcow_1 | Mar 26 09:28:06 mail dovecot: lmtp(159): Connect from fd4d:6169:6c63:6f77::e > dovecot-mailcow_1 | Mar 26 09:28:06 mail dovecot: lmtp(conan179@maildomain): sieve: msgid=: fileinto action: stored mail into mailbox 'Mail Delivery System' > dovecot-mailcow_1 | Mar 26 09:28:07 mail dovecot: lmtp(160): Connect from fd4d:6169:6c63:6f77::e > dovecot-mailcow_1 | Mar 26 09:28:12 mail dovecot: lmtp(161): Connect from fd4d:6169:6c63:6f77::e > dovecot-mailcow_1 | Mar 26 09:28:13 mail dovecot: lmtp(163): Connect from fd4d:6169:6c63:6f77::e > dovecot-mailcow_1 | Mar 26 09:28:14 mail dovecot: lmtp(conan179@maildomain): sieve: msgid=: fileinto action: stored mail into mailbox 'Mail Delivery System' > dovecot-mailcow_1 | Mar 26 09:28:14 mail dovecot: lmtp(conan179@maildomain): sieve: msgid=: fileinto action: stored mail into mailbox 'Mail Delivery System' > dovecot-mailcow_1 | Mar 26 09:28:15 mail dovecot: lmtp(166): Connect from fd4d:6169:6c63:6f77::e > dovecot-mailcow_1 | Mar 26 09:28:15 mail dovecot: lmtp(165): Connect from 172.22.1.10 > dovecot-mailcow_1 | Mar 26 09:28:15 mail dovecot: lmtp(conan179@maildomain): sieve: msgid=: fileinto action: stored mail into mailbox 'Mail Delivery System' > dovecot-mailcow_1 | Mar 26 09:28:15 mail dovecot: lmtp(167): Connect from fd4d:6169:6c63:6f77::e > dovecot-mailcow_1 | Mar 26 09:28:16 mail dovecot: lmtp(conan179@maildomain): sieve: msgid=: fileinto action: stored mail into mailbox 'Mail Delivery System' > dovecot-mailcow_1 | Mar 26 09:28:16 mail dovecot: lmtp(168): Connect from 172.22.1.10 > dovecot-mailcow_1 | Mar 26 09:28:17 mail dovecot: lmtp(conan179@maildomain): sieve: msgid=: fileinto action: stored mail into mailbox 'Mail Delivery System' > dovecot-mailcow_1 | Mar 26 09:28:17 mail dovecot: lmtp(169): Connect from 172.22.1.10 > dovecot-mailcow_1 | Mar 26 09:28:18 mail dovecot: lmtp(conan179@maildomain): sieve: msgid=: fileinto action: stored mail into mailbox 'Mail Delivery System' > dovecot-mailcow_1 | Mar 26 09:28:18 mail dovecot: lmtp(conan179@maildomain): sieve: msgid=: fileinto action: stored mail into mailbox 'Mail Delivery System' > dovecot-mailcow_1 | Mar 26 09:28:19 mail dovecot: lmtp(170): Connect from 172.22.1.10 > dovecot-mailcow_1 | Mar 26 09:28:19 mail dovecot: lmtp(171): Connect from fd4d:6169:6c63:6f77::e > dovecot-mailcow_1 | Mar 26 09:28:19 mail dovecot: lmtp(conan179@maildomain): sieve: msgid=: fileinto action: stored mail into mailbox 'Cronlogs' > dovecot-mailcow_1 | Mar 26 09:28:19 mail dovecot: lmtp(172): Connect from 172.22.1.10 > dovecot-mailcow_1 | Mar 26 09:28:20 mail dovecot: lmtp(conan179@maildomain): sieve: msgid=: fileinto action: stored mail into mailbox 'Mail Delivery System' > dovecot-mailcow_1 | Mar 26 09:28:21 mail dovecot: lmtp(conan179@maildomain): sieve: msgid=: fileinto action: stored mail into mailbox 'Mail Delivery System' > dovecot-mailcow_1 | Mar 26 09:28:26 mail dovecot: lmtp(173): Connect from 172.22.1.10 > dovecot-mailcow_1 | Mar 26 09:28:26 mail dovecot: lmtp(174): Connect from fd4d:6169:6c63:6f77::e > dovecot-mailcow_1 | Mar 26 09:28:29 mail dovecot: lmtp(conan179@maildomain): sieve: msgid=: fileinto action: stored mail into mailbox 'fail2ban' > dovecot-mailcow_1 | Mar 26 09:28:30 mail dovecot: lmtp(conan179@maildomain): sieve: msgid=: fileinto action: stored mail into mailbox 'fail2ban' > dovecot-mailcow_1 | Mar 26 09:28:30 mail dovecot: lmtp(conan179@maildomain): sieve: msgid=: fileinto action: stored mail into mailbox 'fail2ban' > dovecot-mailcow_1 | Mar 26 09:28:30 mail dovecot: lmtp(conan179@maildomain): sieve: msgid=: fileinto action: stored mail into mailbox 'fail2ban' > dovecot-mailcow_1 | Mar 26 09:28:30 mail dovecot: lmtp(152): Disconnect from fd4d:6169:6c63:6f77::e: Client has quit the connection (state=READY) > dovecot-mailcow_1 | Mar 26 09:28:30 mail dovecot: lmtp(141): Disconnect from 172.22.1.10: Client has quit the connection (state=READY) > dovecot-mailcow_1 | Mar 26 09:28:30 mail dovecot: lmtp(conan179@maildomain): sieve: msgid=: fileinto action: stored mail into mailbox 'fail2ban' > dovecot-mailcow_1 | Mar 26 09:28:30 mail dovecot: lmtp(conan179@maildomain): sieve: msgid=: fileinto action: stored mail into mailbox 'fail2ban' > dovecot-mailcow_1 | Mar 26 09:28:30 mail dovecot: lmtp(146): Disconnect from 172.22.1.10: Client has quit the connection (state=READY) > dovecot-mailcow_1 | Mar 26 09:28:30 mail dovecot: lmtp(conan179@maildomain): sieve: msgid=: fileinto action: stored mail into mailbox 'fail2ban' > dovecot-mailcow_1 | Mar 26 09:28:30 mail dovecot: lmtp(141): Connect from 172.22.1.10 > dovecot-mailcow_1 | Mar 26 09:28:31 mail dovecot: lmtp(conan179@maildomain): sieve: msgid=: fileinto action: stored mail into mailbox 'fail2ban' > dovecot-mailcow_1 | Mar 26 09:28:31 mail dovecot: lmtp(146): Connect from fd4d:6169:6c63:6f77::e > dovecot-mailcow_1 | Mar 26 09:28:31 mail dovecot: lmtp(152): Connect from fd4d:6169:6c63:6f77::e > dovecot-mailcow_1 | Mar 26 09:28:31 mail dovecot: lmtp(140): Disconnect from 172.22.1.10: Client has quit the connection (state=READY) > dovecot-mailcow_1 | Mar 26 09:28:31 mail dovecot: lmtp(140): Connect from 172.22.1.10 > dovecot-mailcow_1 | Mar 26 09:28:31 mail dovecot: lmtp(conan179@maildomain): sieve: msgid=: fileinto action: stored mail into mailbox 'fail2ban' > dovecot-mailcow_1 | Mar 26 09:28:32 mail dovecot: lmtp(180): Connect from 172.22.1.10 > dovecot-mailcow_1 | Mar 26 09:28:32 mail dovecot: lmtp(179): Connect from 172.22.1.10 > dovecot-mailcow_1 | Mar 26 09:28:32 mail dovecot: lmtp(181): Connect from 172.22.1.10 > dovecot-mailcow_1 | Mar 26 09:28:32 mail dovecot: lmtp(182): Connect from 172.22.1.10 > dovecot-mailcow_1 | Mar 26 09:28:32 mail dovecot: lmtp(183): Connect from fd4d:6169:6c63:6f77::e > dovecot-mailcow_1 | Mar 26 09:28:32 mail dovecot: lmtp(184): Connect from fd4d:6169:6c63:6f77::e > dovecot-mailcow_1 | Mar 26 09:28:32 mail dovecot: lmtp(185): Connect from 172.22.1.7 > dovecot-mailcow_1 | Mar 26 09:28:32 mail dovecot: lmtp(185): Disconnect from 172.22.1.7: Client has quit the connection (state=READY) > dovecot-mailcow_1 | Mar 26 09:28:33 mail dovecot: imap-login: Aborted login (no auth attempts in 0 secs): user=, rip=172.22.1.7, lip=172.22.1.250, TLS, TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) > dovecot-mailcow_1 | Mar 26 09:28:33 mail dovecot: imap-login: Aborted login (no auth attempts in 0 secs): user=, rip=172.22.1.7, lip=172.22.1.250 > dovecot-mailcow_1 | Mar 26 09:28:33 mail dovecot: managesieve-login: Disconnected (no auth attempts in 0 secs): user=, rip=172.22.1.7, lip=172.22.1.250 > dovecot-mailcow_1 | Mar 26 09:28:33 mail dovecot: lmtp(conan179@maildomain): sieve: msgid=: fileinto action: stored mail into mailbox 'Mail Delivery System' > dovecot-mailcow_1 | Mar 26 09:28:34 mail dovecot: lmtp(conan179@maildomain): sieve: msgid=: fileinto action: stored mail into mailbox 'Mail Delivery System' > dovecot-mailcow_1 | Mar 26 09:28:34 mail dovecot: lmtp(conan179@maildomain): sieve: msgid=: fileinto action: stored mail into mailbox 'Mail Delivery System' > dovecot-mailcow_1 | Mar 26 09:28:34 mail dovecot: lmtp(conan179@maildomain): sieve: msgid=: fileinto action: stored mail into mailbox 'Mail Delivery System' > dovecot-mailcow_1 | Mar 26 09:28:35 mail dovecot: lmtp(154): Disconnect from fd4d:6169:6c63:6f77::e: Remote closed connection (state=READY) > dovecot-mailcow_1 | Mar 26 09:28:35 mail dovecot: lmtp(140): Disconnect from 172.22.1.10: Remote closed connection (state=READY) > dovecot-mailcow_1 | Mar 26 09:28:36 mail dovecot: lmtp(157): Disconnect from 172.22.1.10: Remote closed connection (state=READY) > dovecot-mailcow_1 | Mar 26 09:28:36 mail dovecot: lmtp(155): Disconnect from 172.22.1.10: Remote closed connection (state=READY) > dovecot-mailcow_1 | Mar 26 09:28:36 mail dovecot: lmtp(156): Disconnect from fd4d:6169:6c63:6f77::e: Remote closed connection (state=READY) > dovecot-mailcow_1 | Mar 26 09:28:36 mail dovecot: lmtp(148): Disconnect from 172.22.1.10: Remote closed connection (state=READY) > dovecot-mailcow_1 | Mar 26 09:28:37 mail dovecot: lmtp(conan179@maildomain): sieve: msgid=: fileinto action: stored mail into mailbox 'Mail Delivery System' > dovecot-mailcow_1 | Mar 26 09:28:37 mail dovecot: lmtp(conan179@maildomain): sieve: msgid=: fileinto action: stored mail into mailbox 'fail2ban' > dovecot-mailcow_1 | Mar 26 09:28:37 mail dovecot: lmtp(conan179@maildomain): sieve: msgid=: fileinto action: stored mail into mailbox 'Mail Delivery System' > dovecot-mailcow_1 | Mar 26 09:28:37 mail dovecot: lmtp(conan179@maildomain): sieve: msgid=: fileinto action: stored mail into mailbox 'Mail Delivery System' > dovecot-mailcow_1 | Mar 26 09:28:37 mail dovecot: lmtp(150): Disconnect from fd4d:6169:6c63:6f77::e: Client has quit the connection (state=READY) > dovecot-mailcow_1 | Mar 26 09:28:39 mail dovecot: lmtp(146): Disconnect from fd4d:6169:6c63:6f77::e: Remote closed connection (state=READY) > dovecot-mailcow_1 | Mar 26 09:28:39 mail dovecot: lmtp(181): Disconnect from 172.22.1.10: Remote closed connection (state=READY) > dovecot-mailcow_1 | Mar 26 09:28:39 mail dovecot: lmtp(179): Disconnect from 172.22.1.10: Remote closed connection (state=READY) > dovecot-mailcow_1 | Mar 26 09:28:40 mail dovecot: lmtp(146): Connect from fd4d:6169:6c63:6f77::e > dovecot-mailcow_1 | Mar 26 09:28:40 mail dovecot: lmtp(179): Connect from 172.22.1.10 > dovecot-mailcow_1 | Mar 26 09:28:40 mail dovecot: lmtp(150): Connect from fd4d:6169:6c63:6f77::e > dovecot-mailcow_1 | Mar 26 09:28:40 mail dovecot: lmtp(181): Connect from 172.22.1.10 > dovecot-mailcow_1 | Mar 26 09:28:40 mail dovecot: lmtp(157): Connect from 172.22.1.10 > dovecot-mailcow_1 | Mar 26 09:28:40 mail dovecot: lmtp(148): Connect from fd4d:6169:6c63:6f77::e > dovecot-mailcow_1 | Mar 26 09:28:40 mail dovecot: lmtp(156): Connect from 172.22.1.10 > dovecot-mailcow_1 | Mar 26 09:28:40 mail dovecot: lmtp(140): Connect from 172.22.1.10 > dovecot-mailcow_1 | Mar 26 09:28:40 mail dovecot: lmtp(154): Connect from 172.22.1.10 > dovecot-mailcow_1 | Mar 26 09:28:41 mail dovecot: lmtp(185): Connect from 172.22.1.10 > dovecot-mailcow_1 | Mar 26 09:28:41 mail dovecot: lmtp(189): Connect from fd4d:6169:6c63:6f77::e > dovecot-mailcow_1 | Mar 26 09:28:41 mail dovecot: lmtp(190): Connect from 172.22.1.10 > dovecot-mailcow_1 | Mar 26 09:28:41 mail dovecot: lmtp(155): Connect from fd4d:6169:6c63:6f77::e > dovecot-mailcow_1 | Mar 26 09:28:41 mail dovecot: lmtp(192): Connect from 172.22.1.10 > dovecot-mailcow_1 | Mar 26 09:28:41 mail dovecot: lmtp(191): Connect from 172.22.1.10 > dovecot-mailcow_1 | Mar 26 09:28:42 mail dovecot: lmtp(conan179@maildomain): sieve: msgid=: fileinto action: stored mail into mailbox 'Mail Delivery System' > dovecot-mailcow_1 | Mar 26 09:28:42 mail dovecot: lmtp(conan179@maildomain): sieve: msgid=: fileinto action: stored mail into mailbox 'Mail Delivery System' > dovecot-mailcow_1 | Mar 26 09:28:42 mail dovecot: lmtp(conan179@maildomain): sieve: msgid=: fileinto action: stored mail into mailbox 'Mail Delivery System' > dovecot-mailcow_1 | Mar 26 09:28:42 mail dovecot: lmtp(conan179@maildomain): sieve: msgid=: fileinto action: stored mail into mailbox 'Mail Delivery System' > dovecot-mailcow_1 | Mar 26 09:28:42 mail dovecot: lmtp(conan179@maildomain): sieve: msgid=: fileinto action: stored mail into mailbox 'Mail Delivery System' > dovecot-mailcow_1 | Mar 26 09:28:42 mail dovecot: lmtp(conan179@maildomain): sieve: msgid=: fileinto action: stored mail into mailbox 'Mail Delivery System' > dovecot-mailcow_1 | Mar 26 09:28:44 mail dovecot: lmtp(148): Disconnect from fd4d:6169:6c63:6f77::e: Remote closed connection (state=READY) > dovecot-mailcow_1 | Mar 26 09:28:44 mail dovecot: lmtp(148): Connect from fd4d:6169:6c63:6f77::e Nach 9:28 kommt nichts mehr, die VM ist wieder eingefroren.

Ich hab jetzt mal den Log driver von dicker auf syslog geändert, die vm neugestartet und als er wieder eingefroren war, neu gestartet und den Log exportiert.[upl-file uuid=2f4a77ff-5c5f-41ff-b103-d108c08a6145 size=511kB]syslog.txt[/upl-file]

Du hast ein offenes Relay, glaube ich. Das ist nicht gut. Firewall davor oder noch irgendwas installiert, das mit den iptables Regeln rumspielt? VPN Server etc.? Bitte die gesamte Netzwerkkonfiguration posten, also alles, was irgendwie vor der Kuh steht oder auf ihr mit läuft. ``` docker-compose down docker volume rm mailcowdockerized_postfix-vol-1 systemctl restart docker docker-compose up -d ``` Danach auch mal `iptables -L -vn` und `ip6tables -L -vn` posten.

[upl-image uuid=ec4fbd17-f901-4803-8fbd-4f5e1a8cfba3 size=74kB url=https://community.mailcow.email/assets/files/2020-03-30/1585561975-986853-smtp-openrelay-30032020.jpeg]smtp-openrelay-30032020.jpeg[/upl-image] > Chain INPUT (policy ACCEPT 686 packets, 71610 bytes) > pkts bytes target prot opt in out source destination > 706 72874 MAILCOW all -- * * 0.0.0.0/0 0.0.0.0/0 > 172K 28M f2b-pam-generic tcp -- * * 0.0.0.0/0 0.0.0.0/0 > 69398 5937K f2b-sshd tcp -- * * 0.0.0.0/0 0.0.0.0/0 multiport dports 22 > > Chain FORWARD (policy ACCEPT 9328 packets, 1614K bytes) > pkts bytes target prot opt in out source destination > 12209 2637K MAILCOW all -- * * 0.0.0.0/0 0.0.0.0/0 > 22404 4507K DOCKER-USER all -- * * 0.0.0.0/0 0.0.0.0/0 > 22406 4507K DOCKER-ISOLATION-STAGE-1 all -- * * 0.0.0.0/0 0.0.0.0/0 > 2325 1093K ACCEPT all -- * br-mailcow 0.0.0.0/0 0.0.0.0/0 ctstate RELATED,ESTABLISHED > 350 20867 DOCKER all -- * br-mailcow 0.0.0.0/0 0.0.0.0/0 > 737 105K ACCEPT all -- br-mailcow !br-mailcow 0.0.0.0/0 0.0.0.0/0 > 221 15071 ACCEPT all -- br-mailcow br-mailcow 0.0.0.0/0 0.0.0.0/0 > 0 0 ACCEPT all -- * docker0 0.0.0.0/0 0.0.0.0/0 ctstate RELATED,ESTABLISHED > 0 0 DOCKER all -- * docker0 0.0.0.0/0 0.0.0.0/0 > 0 0 ACCEPT all -- docker0 !docker0 0.0.0.0/0 0.0.0.0/0 > 0 0 ACCEPT all -- docker0 docker0 0.0.0.0/0 0.0.0.0/0 > > Chain OUTPUT (policy ACCEPT 792 packets, 94349 bytes) > pkts bytes target prot opt in out source destination > > Chain DOCKER (2 references) > pkts bytes target prot opt in out source destination > 0 0 ACCEPT tcp -- !br-mailcow br-mailcow 0.0.0.0/0 172.22.1.3 tcp dpt:8983 > 0 0 ACCEPT tcp -- !br-mailcow br-mailcow 0.0.0.0/0 172.22.1.249 tcp dpt:6379 > 0 0 ACCEPT tcp -- !br-mailcow br-mailcow 0.0.0.0/0 172.22.1.8 tcp dpt:3306 > 0 0 ACCEPT tcp -- !br-mailcow br-mailcow 0.0.0.0/0 172.22.1.250 tcp dpt:12345 > 0 0 ACCEPT tcp -- !br-mailcow br-mailcow 0.0.0.0/0 172.22.1.250 tcp dpt:4190 > 0 0 ACCEPT tcp -- !br-mailcow br-mailcow 0.0.0.0/0 172.22.1.250 tcp dpt:995 > 20 1040 ACCEPT tcp -- !br-mailcow br-mailcow 0.0.0.0/0 172.22.1.250 tcp dpt:993 > 17 884 ACCEPT tcp -- !br-mailcow br-mailcow 0.0.0.0/0 172.22.1.250 tcp dpt:143 > 0 0 ACCEPT tcp -- !br-mailcow br-mailcow 0.0.0.0/0 172.22.1.250 tcp dpt:110 > 0 0 ACCEPT tcp -- !br-mailcow br-mailcow 0.0.0.0/0 172.22.1.10 tcp dpt:587 > 0 0 ACCEPT tcp -- !br-mailcow br-mailcow 0.0.0.0/0 172.22.1.10 tcp dpt:465 > 0 0 ACCEPT tcp -- !br-mailcow br-mailcow 0.0.0.0/0 172.22.1.10 tcp dpt:25 > 54 2332 ACCEPT tcp -- !br-mailcow br-mailcow 0.0.0.0/0 172.22.1.13 tcp dpt:443 > 28 1120 ACCEPT tcp -- !br-mailcow br-mailcow 0.0.0.0/0 172.22.1.13 tcp dpt:80 > > Chain DOCKER-ISOLATION-STAGE-1 (1 references) > pkts bytes target prot opt in out source destination > 737 105K DOCKER-ISOLATION-STAGE-2 all -- br-mailcow !br-mailcow 0.0.0.0/0 0.0.0.0/0 > 0 0 DOCKER-ISOLATION-STAGE-2 all -- docker0 !docker0 0.0.0.0/0 0.0.0.0/0 > 55342 10M RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 > > Chain DOCKER-ISOLATION-STAGE-2 (2 references) > pkts bytes target prot opt in out source destination > 0 0 DROP all -- * br-mailcow 0.0.0.0/0 0.0.0.0/0 > 0 0 DROP all -- * docker0 0.0.0.0/0 0.0.0.0/0 > 737 105K RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 > > Chain DOCKER-USER (1 references) > pkts bytes target prot opt in out source destination > 3754K 648M RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 > > Chain MAILCOW (2 references) > pkts bytes target prot opt in out source destination > 0 0 REJECT all -- * * 208.97.78.0/24 0.0.0.0/0 reject-with icmp-port-unreachable > 0 0 REJECT all -- * * 87.246.7.34 0.0.0.0/0 reject-with icmp-port-unreachable > 0 0 REJECT all -- * * 92.118.38.0/24 0.0.0.0/0 reject-with icmp-port-unreachable > > Chain f2b-pam-generic (1 references) > pkts bytes target prot opt in out source destination > 16 1320 REJECT all -- * * 106.13.111.19 0.0.0.0/0 reject-with icmp-port-unreachable > 170K 28M RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 > > Chain f2b-sshd (1 references) > pkts bytes target prot opt in out source destination > 0 0 REJECT all -- * * 106.13.111.19 0.0.0.0/0 reject-with icmp-port-unreachable > 69395 5936K RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 > root@Ubuntu-myhostname:/opt/mailcow-dockerized# ip6tables -L -vn > Chain INPUT (policy ACCEPT 7948 packets, 3843K bytes) > pkts bytes target prot opt in out source destination > 7946 3843K MAILCOW all * * ::/0 ::/0 > > Chain FORWARD (policy ACCEPT 0 packets, 0 bytes) > pkts bytes target prot opt in out source destination > 1316 387K MAILCOW all * * ::/0 ::/0 > 1375 392K DOCKER-USER all * * ::/0 ::/0 > 214K 185M DOCKER-ISOLATION-STAGE-1 all * * ::/0 ::/0 > 141K 80M DOCKER all * br-mailcow ::/0 ::/0 > 102K 77M ACCEPT all * br-mailcow ::/0 ::/0 ctstate RELATED,ESTABLISHED > 72073 106M ACCEPT all br-mailcow !br-mailcow ::/0 ::/0 > 21857 1566K ACCEPT all br-mailcow br-mailcow ::/0 ::/0 > > Chain OUTPUT (policy ACCEPT 8255 packets, 3879K bytes) > pkts bytes target prot opt in out source destination > > Chain DOCKER (1 references) > pkts bytes target prot opt in out source destination > 0 0 ACCEPT tcp !br-mailcow br-mailcow ::/0 fd4d:6169:6c63:6f77::11 tcp dpt:443 > 0 0 ACCEPT tcp !br-mailcow br-mailcow ::/0 fd4d:6169:6c63:6f77::11 tcp dpt:80 > 0 0 ACCEPT tcp !br-mailcow br-mailcow ::/0 fd4d:6169:6c63:6f77::d tcp dpt:110 > 5 360 ACCEPT tcp !br-mailcow br-mailcow ::/0 fd4d:6169:6c63:6f77::d tcp dpt:143 > 0 0 ACCEPT tcp !br-mailcow br-mailcow ::/0 fd4d:6169:6c63:6f77::d tcp dpt:4190 > 5 360 ACCEPT tcp !br-mailcow br-mailcow ::/0 fd4d:6169:6c63:6f77::d tcp dpt:993 > 0 0 ACCEPT tcp !br-mailcow br-mailcow ::/0 fd4d:6169:6c63:6f77::d tcp dpt:995 > 0 0 ACCEPT tcp !br-mailcow br-mailcow ::/0 fd4d:6169:6c63:6f77::e tcp dpt:25 > 0 0 ACCEPT tcp !br-mailcow br-mailcow ::/0 fd4d:6169:6c63:6f77::e tcp dpt:465 > 0 0 ACCEPT tcp !br-mailcow br-mailcow ::/0 fd4d:6169:6c63:6f77::e tcp dpt:587 > > Chain DOCKER-ISOLATION-STAGE-1 (1 references) > pkts bytes target prot opt in out source destination > 97 8690 DOCKER-ISOLATION-STAGE-2 all br-mailcow !br-mailcow ::/0 ::/0 > 1375 392K RETURN all * * ::/0 ::/0 > > Chain DOCKER-ISOLATION-STAGE-2 (1 references) > pkts bytes target prot opt in out source destination > 0 0 DROP all * br-mailcow ::/0 ::/0 > 97 8690 RETURN all * * ::/0 ::/0 > > Chain DOCKER-USER (1 references) > pkts bytes target prot opt in out source destination > 214K 185M RETURN all * * ::/0 ::/0 > > Chain MAILCOW (2 references) > pkts bytes target prot opt in out source destination >

Es war vielleicht mal eines und hatte noch alles in der Queue.

Eine solche MSG ID lässt auf OpenVPN Server schließen => Ubuntu-1804-Conans-Openvpn-maschine.maildomain

Ich hab in der VM, 3openvpn, einen NTP und mailcow laufen. SSH ist per zert login abgesichert, die openvpn zugänge auch. Definitiv habe nur ich zugriff.

Das kann zwar alles auf einem Host funktionieren, aber dann musst du genau wissen, was du tust. Zum Beispiel solltest du auf keinen Fall **alles** per NAT maskieren, was "out" (=> MASQUERADE) geht. Hier vermutlich das Problem sein wird. Viele Anleitungen im Internet beschreiben das leider so. Kannst ja mal in die entsprechenden Chains (auch in die NAT tables) schauen. Ich bin mir fast sicher, dass die Container in mailcow die IP des Gateways der Bridge sehen, weil mit NAT maskiert wird. Auch möglich ist, dass die Regeln von ipv6nat-mailcow nicht zuerst behandelt- und irgendwelche anderen FWD Regeln vom VPN schon vorher greifen. Auch hier ergibt sich das Problem, dass die Container die Docker Bridge GW IP sehen.

Aso ICH hab nicht eingestellt das alles geNAT werden soll. Da bin ich mir absolut sicher. Bewust habe ich nur das hier als MASQUERADE, per rc-local iptables -t nat -A POSTROUTING -s 192.168.6.0/24 -o eth0 -j MASQUERADE & iptables -t nat -A POSTROUTING -s 2a01:xxx:1701::/80 -o eth0 -j MASQUERADE & iptables -t nat -A POSTROUTING -s 2a01:xxx:1702::/80 -o eth0 -j MASQUERADE & Wie findei ch heraus, von wo, es komt das alles genat wird?

Mailcow läst meine VM kommplet einfrieren

Conan179

pkernstock Eine frage an dich, wieviele meiner post, in diesem Thema hast du gelesen?

pkernstock

Conan179 Ehrlich? Nachtraeglich gesehen… Ich wuenschte gar keinen…

Conan179

Dann ist es ja nicht nötig, den open relay test nochmal hier zu verlinken, wird ja eh nicht gelesen 😉

Conan179

shiz0 Die tips waren, ich soll keinen smtp open relay haben. Habe ich vor ein paar tagen schon erledigt. Ich soll nicht alles MASQUERADE, meine nachfrage, wo er gesehen hat, das es alles MASQUERADE wird, kann keine Antwort, meine 3 MASQUERADE befehle habe ich bereits hier gepostet.

Ich fasse also zusamen, ich soll keinen SMTP open relay haben, habe ich nicht.
Ich soll nicht alles NATen, mache ich nicht.

Was gibt es dazu noch zu sagen?

diekuh

Die ip6tables wären in dem Fall noch interessant gewesen, aber ich habe da jetzt eigentlich kein Interesse mehr dran. 🙁

Es ist nicht die korrekte Antwort, einfach ein Ratelimit zu setzen. Das ist wahnsinnig. Wenn du ein offenes Relay über IPv6 hast (was möglich ist!), dann wäre das fatal.

Das kann auch alles ganz anders sein, ich kenne dein System nicht, aber ich möchte auch nicht den Netzwerker für fremde Systeme machen, die ich nicht betreue. Der Netzwerkteil liegt ganz bei dir. 🙂

« Previous Page