Hi, Where do I look for forwarded email address? This is the current situation: - Mailcow is installed on example.com - user (userA@example.com) keeps receiving emails from example.com mailserver complaining of "Undelivered Mail Returned to Sender". The offending email address is ZULU@example.com - I checked in mailcow mailboxes and there is no ZULU@example.com to be found. - user checked in his SOGo Preferences -> Mail -> Forward and there is no ZULU@example.com to be found too. So, what other places should I check to remove the offending email address? Thank you Henry

The offending mail is not coming from an external user as such setup is intended. During the initial setup, it was configured for all received emails by - alpha@example.com, - beta@example.com, - charlie@example.com would automatically be forwarded to - user1@example.com (user exist), - user2@example (user exist), - user3@example.com (user exist), - zulu@example.com (user does not exist in the first place). After the migration has completed, users alpha, beta, charlie logged into SOGO and deleted the zulu@example.com entry in their SOGo Preferences -> Mail -> Forward. But it seems the zulu@example.com entry still exist somewhere in the system as all received emails by alpha, beta, charlie still gets forwarded to zulu@example.com.

Ghost forwarded Account

gnulab

Hi,

Where do I look for forwarded email address? This is the current situation:

Mailcow is installed on example.com
user (userA@example.com) keeps receiving emails from example.com mailserver complaining of “Undelivered Mail Returned to Sender”. The offending email address is ZULU@example.com
I checked in mailcow mailboxes and there is no ZULU@example.com to be found.
user checked in his SOGo Preferences -> Mail -> Forward and there is no ZULU@example.com to be found too.

So, what other places should I check to remove the offending email address?

Thank you
Henry

esackbauer

Have you checked from which IP this offending mail is coming?
Have you checked the postfix logs?

gnulab

The offending mail is not coming from an external user as such setup is intended.
During the initial setup, it was configured for all received emails by

alpha@example.com,
beta@example.com,
charlie@example.com
would automatically be forwarded to
user1@example.com (user exist),
user2@example (user exist),
user3@example.com (user exist),
zulu@example.com (user does not exist in the first place).

After the migration has completed, users alpha, beta, charlie logged into SOGO and deleted the zulu@example.com entry in their SOGo Preferences -> Mail -> Forward.

But it seems the zulu@example.com entry still exist somewhere in the system as all received emails by alpha, beta, charlie still gets forwarded to zulu@example.com.

DocFraggle

You could check the sieve files in your vmail directory, maybe someone created a rule by himself.

Find your vmail directory:

docker volume inspect mailcowdockerized_vmail-vol-1 | grep Mount

cd into the directory and run

find . -name *.sieve | xargs grep -i zulu

If you don’t find an entry there, maybe the user created a local rule in hie email client?

gnulab

Hi @DocFraggle ,

Thanks for the heads up.

Turns out the previous consultant had created it in the alias.
alias = charlie@example.com
goto address = zulu@example.com (non-existant user)

Thank you once again.