Can't get any external incoming emails except from noreply (internal)

yboujraf

Dear,

I just installed the mailcow server and followed the steps to setup.

I am able to connect to the admin and email portails and SOGo.

I am able to send email to external account and it is received with success with correct DKIM, ….

Unfortunately, I am unable to get new email and/or any replies of the email send to external accounts exception is for “noreply email” send through internal server from the admin portail > system mails.

Any suggestions

yboujraf

Dear

I tried to send an email through another webmail withanother domain and I got this error message.
If I try from gmail, no error message when sending the email.

yboujraf

I verified if ports are open

:/opt/mailcow-dockerized$ ss -tlpn | grep -E -w '25|80|110|143|443|465|587|993|995|4190' LISTEN 0 4096 0.0.0.0:110 0.0.0.0:* LISTEN 0 4096 0.0.0.0:143 0.0.0.0:* LISTEN 0 4096 0.0.0.0:80 0.0.0.0:* LISTEN 0 4096 0.0.0.0:465 0.0.0.0:* LISTEN 0 4096 0.0.0.0:25 0.0.0.0:* LISTEN 0 4096 0.0.0.0:443 0.0.0.0:* LISTEN 0 4096 0.0.0.0:4190 0.0.0.0:* LISTEN 0 4096 0.0.0.0:993 0.0.0.0:* LISTEN 0 4096 0.0.0.0:995 0.0.0.0:* LISTEN 0 4096 0.0.0.0:587 0.0.0.0:* LISTEN 0 4096 [::]:110 [::]:* LISTEN 0 4096 [::]:143 [::]:* LISTEN 0 4096 [::]:465 [::]:* LISTEN 0 4096 [::]:25 [::]:* LISTEN 0 4096 [::]:4190 [::]:* LISTEN 0 4096 [::]:993 [::]:* LISTEN 0 4096 [::]:995 [::]:* LISTEN 0 4096 [::]:587 [::]:*

yboujraf

I progress.

I am able to send email, event, … ONLY between same domain (internally)
I am able to send email to external mail server BUT can’t reply

I am frustrated

Any helps will be great

yboujraf

This is the log when sending email two accounts on same mailcow : info@by-management.be -> postmaster@by-management.be

mailcowdockerized-postfix-mailcow-1 | Jun 15 14:19:34 869a899a5c0c postfix/submission/smtpd[2655]: connect from unknown[192.168.0.229]

mailcowdockerized-postfix-mailcow-1 | Jun 15 14:19:34 869a899a5c0c postfix/submission/smtpd[2655]: TLS SNI mail.by-management.be from unknown[192.168.0.229] not matched, using default chain

mailcowdockerized-postfix-mailcow-1 | Jun 15 14:19:34 869a899a5c0c postfix/submission/smtpd[2655]: Anonymous TLS connection established from unknown[192.168.0.229]: TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)

mailcowdockerized-postfix-mailcow-1 | Jun 15 14:19:34 869a899a5c0c postfix/submission/smtpd[2655]: EB9EF433D2: client=unknown[192.168.0.229], sasl_method=PLAIN, sasl_username=info@by-management.be
mailcowdockerized-postfix-mailcow-1 | Jun 15 14:19:34 869a899a5c0c postfix/cleanup[2659]: EB9EF433D2: replace: header Received: from [192.168.0.229] (unknown [192.168.0.229])??(using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))??(No client certificate requested)??(Authenticated sender: info@by-mana from unknown[192.168.0.229]; from=info@by-management.be to=postmaster@by-management.be proto=ESMTP helo=<[192.168.0.229]>: Received: from [127.0.0.1] (localhost [127.0.0.1]) by localhost (Mailerdaemon) with ESMTPSA id EB9EF433D2??for postmaster@by-management.be; Wed, 15 Jun 2022 14:19:34 +0200 (CEST)

mailcowdockerized-postfix-mailcow-1 | Jun 15 14:19:34 869a899a5c0c postfix/cleanup[2659]: EB9EF433D2: message-id=e6174351-726b-248c-e3d0-e73615dec320@by-management.be
mailcowdockerized-postfix-mailcow-1 | Jun 15 14:19:35 869a899a5c0c postfix/qmgr[347]: EB9EF433D2: from=info@by-management.be, size=1007, nrcpt=1 (queue active)
mailcowdockerized-postfix-mailcow-1 | Jun 15 14:19:35 869a899a5c0c postfix/submission/smtpd[2655]: disconnect from unknown[192.168.0.229] ehlo=2 starttls=1 auth=1 mail=1 rcpt=1 data=1 quit=1 commands=8

mailcowdockerized-dovecot-mailcow-1 | Jun 15 14:19:35 78687161264e dovecot: lmtp(48371): Connect from 172.22.1.253

mailcowdockerized-dovecot-mailcow-1 | Jun 15 14:19:35 78687161264e dovecot: lmtp(postmaster@by-management.be)<48371><sHaQAlfOqWLzvAAAMPcZmQ>: sieve: msgid=e6174351-726b-248c-e3d0-e73615dec320@by-management.be: stored mail into mailbox ‘INBOX’

mailcowdockerized-postfix-mailcow-1 | Jun 15 14:19:35 869a899a5c0c postfix/lmtp[2660]: EB9EF433D2: to=postmaster@by-management.be, relay=dovecot[172.22.1.250]:24, delay=0.21, delays=0.15/0.02/0.01/0.04, dsn=2.0.0, status=sent (250 2.0.0 postmaster@by-management.be sHaQAlfOqWLzvAAAMPcZmQ Saved)

mailcowdockerized-postfix-mailcow-1 | Jun 15 14:19:35 869a899a5c0c postfix/qmgr[347]: EB9EF433D2: removed

My iptable :

root@mail:/opt/mailcow-dockerized# iptables –list

Warning: iptables-legacy tables present, use iptables-legacy to see them

Chain INPUT (policy ACCEPT)
target prot opt source destination

Chain FORWARD (policy ACCEPT)
target prot opt source destination
DOCKER-USER all – anywhere anywhere
DOCKER-ISOLATION-STAGE-1 all – anywhere anywhere
ACCEPT all – anywhere anywhere ctstate RELATED,ESTABLISHED
DOCKER all – anywhere anywhere
ACCEPT all – anywhere anywhere
ACCEPT all – anywhere anywhere
ACCEPT all – anywhere anywhere ctstate RELATED,ESTABLISHED
DOCKER all – anywhere anywhere
ACCEPT all – anywhere anywhere
ACCEPT all – anywhere anywhere

Chain OUTPUT (policy ACCEPT)
target prot opt source destination

Chain DOCKER (2 references)
target prot opt source destination
ACCEPT tcp – anywhere 172.22.1.249 tcp dpt:redis
ACCEPT tcp – anywhere 172.22.1.4 tcp dpt:8983
ACCEPT tcp – anywhere 172.22.1.7 tcp dpt:mysql
ACCEPT tcp – anywhere 172.22.1.253 tcp dpt:submission
ACCEPT tcp – anywhere 172.22.1.253 tcp dpt:submissions
ACCEPT tcp – anywhere 172.22.1.250 tcp dpt:12345
ACCEPT tcp – anywhere 172.22.1.250 tcp dpt:sieve
ACCEPT tcp – anywhere 172.22.1.253 tcp dpt:smtp
ACCEPT tcp – anywhere 172.22.1.10 tcp dpt:https
ACCEPT tcp – anywhere 172.22.1.250 tcp dpt:pop3s
ACCEPT tcp – anywhere 172.22.1.10 tcp dpt:http
ACCEPT tcp – anywhere 172.22.1.250 tcp dpt:imaps
ACCEPT tcp – anywhere 172.22.1.250 tcp dpt:imap2
ACCEPT tcp – anywhere 172.22.1.250 tcp dpt:pop3

Chain DOCKER-ISOLATION-STAGE-1 (1 references)
target prot opt source destination
DOCKER-ISOLATION-STAGE-2 all – anywhere anywhere
DOCKER-ISOLATION-STAGE-2 all – anywhere anywhere
RETURN all – anywhere anywhere

Chain DOCKER-ISOLATION-STAGE-2 (2 references)
target prot opt source destination
DROP all – anywhere anywhere
DROP all – anywhere anywhere
RETURN all – anywhere anywhere

Chain DOCKER-USER (1 references)
target prot opt source destination
RETURN all – anywhere anywhere
root@mail:/opt/mailcow-dockerized#

yboujraf

Finally I found my issue.
I forgot to enable firewall rules. Only NAT and port forward were done.

Best Regards