gents, yesterday i make some changes on local network, changed DNS for local computers, added forward zone on DNS server (created by AD) then after some time mailcow stopped to send emails i checked containiners and identified that unbound container wont start and showing error [upl-image-preview url=https://community.mailcow.email/assets/files/2024-06-28/1719551837-867804-1.png] [upl-image-preview url=https://community.mailcow.email/assets/files/2024-06-28/1719551870-443288-2.png] [upl-image-preview url=https://community.mailcow.email/assets/files/2024-06-28/1719552365-183195-3.png] can u help to troubleshoot coz i am new to dockers and mailcow what logs, settings or conf file i need to look? i have fortigate firewall, but i didn;t change any settings on policies, may be i need to look at mailcow firewall? [upl-image-preview url=https://community.mailcow.email/assets/files/2024-06-28/1719552864-395946-4.png] [upl-image-preview url=https://community.mailcow.email/assets/files/2024-06-28/1719552864-428180-5.png] iptables screenshot [upl-image-preview url=https://community.mailcow.email/assets/files/2024-06-28/1719552864-395946-4.png] [upl-image-preview url=https://community.mailcow.email/assets/files/2024-06-28/1719552864-428180-5.png] iptables screenshot [upl-image-preview url=https://community.mailcow.email/assets/files/2024-06-28/1719552921-320565-4.png] [upl-image-preview url=https://community.mailcow.email/assets/files/2024-06-28/1719552864-428180-5.png] iptables screenshot [upl-image-preview url=https://community.mailcow.email/assets/files/2024-06-28/1719552921-320565-4.png] [upl-image-preview url=https://community.mailcow.email/assets/files/2024-06-28/1719552864-428180-5.png] iptables screenshot [upl-image-preview url=https://community.mailcow.email/assets/files/2024-06-28/1719552921-320565-4.png] [upl-image-preview url=https://community.mailcow.email/assets/files/2024-06-28/1719552864-428180-5.png] iptables screenshot [upl-image-preview url=https://community.mailcow.email/assets/files/2024-06-28/1719552921-320565-4.png] [upl-image-preview url=https://community.mailcow.email/assets/files/2024-06-28/1719552864-428180-5.png] [upl-image-preview url=https://community.mailcow.email/assets/files/2024-06-28/1719552921-320565-4.png] [upl-image-preview url=https://community.mailcow.email/assets/files/2024-06-28/1719552864-428180-5.png] screenshot of iptables [upl-image-preview url=https://community.mailcow.email/assets/files/2024-06-28/1719552921-320565-4.png] [upl-image-preview url=https://community.mailcow.email/assets/files/2024-06-28/1719552864-428180-5.png] screenshot of iptables screenshot of iptables [upl-image-preview url=https://community.mailcow.email/assets/files/2024-06-28/1719552921-320565-4.png] [upl-image-preview url=https://community.mailcow.email/assets/files/2024-06-28/1719552864-428180-5.png] omg sorry i am unable to delete duplicated screenshots (

[upl-image-preview url=https://community.mailcow.email/assets/files/2024-06-28/1719561004-487409-image.png] [upl-image-preview url=https://community.mailcow.email/assets/files/2024-06-28/1719561091-299234-image.png] can u help me with commands, what i have to add? @"[deleted]"#2109 should i add just google? #forward-zone: # name: "." # forward-addr: 8.8.8.8 # Google Public DNS

@"esackbauer"#2109 pls help me to fix pleaaaase

unbound wont start

umirzak

gents, yesterday i make some changes on local network, changed DNS for local computers, added forward zone on DNS server (created by AD)
then after some time mailcow stopped to send emails
i checked containiners and identified that unbound container wont start and showing error

can u help to troubleshoot coz i am new to dockers and mailcow
what logs, settings or conf file i need to look?
i have fortigate firewall, but i didn;t change any settings on policies, may be i need to look at mailcow firewall?

iptables screenshot

screenshot of iptables

omg sorry i am unable to delete duplicated screenshots (

esackbauer

I hope you did not configure the forward zone in data/conf/unbound/unbound.conf
If you did, remove it. The whole point of having unbound im Mailcow is that it is NOT using any local forward zones.

umirzak

can u help me with commands, what i have to add?

@[deleted] should i add just google?
#forward-zone:

name: “.”

forward-addr: 8.8.8.8 # Google Public DNS

umirzak

@esackbauer pls help me to fix pleaaaase

esackbauer

What are you doing?? Please answer my question: Did you edit data/conf/unbound/unbound.conf and put your forward zone or other DNS servers like Google’s in?
You are not supposed to do anything in the unbound config, unless for a very specific reason.
Don’t change any configuration that you not fully understand the consequences of.

umirzak

no i didnt change, i found solution, it;s fortigate firewall, but it’s quite strange I didn’t change policy on fortigate.
so i just allowed all services from DMZ to WAN and then my mailcow (unbound-mailcow) become healthy.
will investigate further what exact ports blocking