I no longer receive emails and I no longer send emails

zedred

I haven’t been able to receive emails for a few days and I can’t send them.

Log from Devcot if I try to send email

09/11/2024, 10:42:43 warning warning: process /usr/lib/postfix/sbin/qmgr pid 509 exit status 1
09/11/2024, 10:42:43 warning warning: process /usr/lib/postfix/sbin/qmgr pid 508 exit status 1
09/11/2024, 10:42:42 warning warning: open active B87827D611: No such file or directory
09/11/2024, 10:42:42 crit fatal: bad numerical configuration: lmtp_destination_recipient_limit = 1 postscreen_dnsbl_sites = wl.mailspike.net=127.0.0.[18;19;20]-2 hostkarma.junkemailfilter.com=127.0.0.1-2 list.dnswl.org=127.0.[0..255].0-2 list.dnswl.org=127.0.[0..255].1-4 list.dnswl.org=127.0.[0..255].2-6 list.dnswl.org=127.0.[0..255].3-8 ix.dnsbl.manitu.net2 bl.spamcop.net2 bl.suomispam.net2 hostkarma.junkemailfilter.com=127.0.0.23 hostkarma.junkemailfilter.com=127.0.0.42 hostkarma.junkemailfilter.com=127.0.1.21 backscatter.spameatingmonkey.net2 bl.ipv6.spameatingmonkey.net2 bl.spameatingmonkey.net2 b.barracudacentral.org=127.0.0.27 bl.mailspike.net=127.0.0.25 bl.mailspike.net=127.0.0.[10;11;12]4 dnsbl.sorbs.net=127.0.0.108 dnsbl.sorbs.net=127.0.0.56 dnsbl.sorbs.net=127.0.0.73 dnsbl.sorbs.net=127.0.0.82 dnsbl.sorbs.net=127.0.0.62 dnsbl.sorbs.net=127.0.0.92 zen.spamhaus.org=127.0.0.[10;11]8 zen.spamhaus.org=127.0.0.[4..7]6 zen.spamhaus.org=127.0.0.34 zen.spamhaus.org=127.0.0.23 zen.spamhaus.org=127.0.0.[10;11]8 zen.spamhaus.org=127.0.0.[4..7]6 zen.spamhaus.org=127.0.0.34 zen.spamhaus.org=127.0.0.23

if i try to receive an email

09/11/2024, 10:45:19 warning warning: process /usr/lib/postfix/sbin/qmgr pid 529 exit status 1
09/11/2024, 10:45:11 warning warning: process /usr/lib/postfix/sbin/qmgr pid 528 exit status 1
09/11/2024, 10:45:10 info disconnect from mail-io1-xd2e.google.com[2607:f8b0:4864:20::d2e] ehlo=2 starttls=1 mail=1 rcpt=1 data=1 quit=1 commands=7
09/11/2024, 10:45:10 crit fatal: bad numerical configuration: lmtp_destination_recipient_limit = 1 postscreen_dnsbl_sites = wl.mailspike.net=127.0.0.[18;19;20]-2 hostkarma.junkemailfilter.com=127.0.0.1-2 list.dnswl.org=127.0.[0..255].0-2 list.dnswl.org=127.0.[0..255].1-4 list.dnswl.org=127.0.[0..255].2-6 list.dnswl.org=127.0.[0..255].3-8 ix.dnsbl.manitu.net2 bl.spamcop.net2 bl.suomispam.net2 hostkarma.junkemailfilter.com=127.0.0.23 hostkarma.junkemailfilter.com=127.0.0.42 hostkarma.junkemailfilter.com=127.0.1.21 backscatter.spameatingmonkey.net2 bl.ipv6.spameatingmonkey.net2 bl.spameatingmonkey.net2 b.barracudacentral.org=127.0.0.27 bl.mailspike.net=127.0.0.25 bl.mailspike.net=127.0.0.[10;11;12]4 dnsbl.sorbs.net=127.0.0.108 dnsbl.sorbs.net=127.0.0.56 dnsbl.sorbs.net=127.0.0.73 dnsbl.sorbs.net=127.0.0.82 dnsbl.sorbs.net=127.0.0.62 dnsbl.sorbs.net=127.0.0.92 zen.spamhaus.org=127.0.0.[10;11]8 zen.spamhaus.org=127.0.0.[4..7]6 zen.spamhaus.org=127.0.0.34 zen.spamhaus.org=127.0.0.23 zen.spamhaus.org=127.0.0.[10;11]8 zen.spamhaus.org=127.0.0.[4..7]6 zen.spamhaus.org=127.0.0.34 zen.spamhaus.org=127.0.0.23
09/11/2024, 10:45:10 info B88D77D1A1: from=test@gmail.com, size=3099, nrcpt=1 (queue active)
09/11/2024, 10:45:10 info B87827D611: from=myemail@mydomain.it, size=953, nrcpt=1 (queue active)
09/11/2024, 10:45:09 info 4F5177DAF1: message-id=CAC+e930y2D0O0g1T+a8HZLROJm3r9a8QBC+WKa5oPcCVzS9GFw@mail.gmail.com
09/11/2024, 10:45:09 info 4F5177DAF1: client=mail-io1-xd2e.google.com[2607:f8b0:4864:20::d2e]
09/11/2024, 10:45:09 info Anonymous TLS connection established from mail-io1-xd2e.google.com[2607:f8b0:4864:20::d2e] to mail.mydomain.it: TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256
09/11/2024, 10:45:08 info connect from mail-io1-xd2e.google.com[2607:f8b0:4864:20::d2e]
09/11/2024, 10:45:08 info ALLOWLISTED [2607:f8b0:4864:20::d2e]:57374
09/11/2024, 10:45:08 info CONNECT from [2607:f8b0:4864:20::d2e]:57374 to [fd4d:6169:6c63:6f77::a]:25

Any ideas?

DocFraggle

zedred 09/11/2024, 10:42:42 crit fatal: bad numerical configuration: lmtp_destination_recipient_limit = 1 postscreen_dnsbl_sites = wl.mailspike.net=127.0.0.[18;19;20]-2 hostkarma.junkemailfilter.com=127.0.0.1-2 list.dnswl.org=127.0.[0..255].0-2 list.dnswl.org=127.0.[0..255].1-4 list.dnswl.org=127.0.[0..255].2-6 list.dnswl.org=127.0.[0..255].3-8 ix.dnsbl.manitu.net2 bl.spamcop.net2 bl.suomispam.net2 hostkarma.junkemailfilter.com=127.0.0.23 hostkarma.junkemailfilter.com=127.0.0.42 hostkarma.junkemailfilter.com=127.0.1.21 backscatter.spameatingmonkey.net2 bl.ipv6.spameatingmonkey.net2 bl.spameatingmonkey.net2 b.barracudacentral.org=127.0.0.27 bl.mailspike.net=127.0.0.25 bl.mailspike.net=127.0.0.[10;11;12]4 dnsbl.sorbs.net=127.0.0.108 dnsbl.sorbs.net=127.0.0.56 dnsbl.sorbs.net=127.0.0.73 dnsbl.sorbs.net=127.0.0.82 dnsbl.sorbs.net=127.0.0.62 dnsbl.sorbs.net=127.0.0.92 zen.spamhaus.org=127.0.0.[10;11]8 zen.spamhaus.org=127.0.0.[4..7]6 zen.spamhaus.org=127.0.0.34 zen.spamhaus.org=127.0.0.23 zen.spamhaus.org=127.0.0.[10;11]8 zen.spamhaus.org=127.0.0.[4..7]6 zen.spamhaus.org=127.0.0.34 zen.spamhaus.org=127.0.0.23

Do you have this log entry available on your host? Unfortunately you posted this without the code format button, so it used the asterisk to show characters in italic…

If you still have it, please post it again and this time wrap the text with the “Insert code” button in the editor

DocFraggle

Did you try to restart the stack?

docker compose down
docker compose up -d

ETNyx

Seems to be known issue mailcow/mailcow-dockerized6143

solution: “did you edited the file data/postfix/conf/dns_blocklists.cf? If not please delete it and restart postfix”

zedred

ETNyx it works, thank you so much

kwisatz

I’m happy I found a solution quickly, but I’m also a sucker for understanding why something does or does not work and gaining some knowledge from it.
An explanation is unfortunately neither provided here, nor on the github ticket, only that it’s “not a bug per se”.

In this case, could someone (e.g. @DerLinkman) please shed some light on what was wrong with the previous (in our case untouched) dns_blocklists.cf file? What exactly was causing the bad numerical configuration ?

For what it’s worth, here’s the file before deleting it:

root@host:/opt/mailcow-dockerized# cat data/conf/postfix/dns_blocklists.cf
    # Autogenerated by mailcow
    postscreen_dnsbl_sites = wl.mailspike.net=127.0.0.[18;19;20]*-2
      hostkarma.junkemailfilter.com=127.0.0.1*-2
      list.dnswl.org=127.0.[0..255].0*-2
      list.dnswl.org=127.0.[0..255].1*-4
      list.dnswl.org=127.0.[0..255].2*-6
      list.dnswl.org=127.0.[0..255].3*-8
      ix.dnsbl.manitu.net*2
      bl.spamcop.net*2
      bl.suomispam.net*2
      hostkarma.junkemailfilter.com=127.0.0.2*3
      hostkarma.junkemailfilter.com=127.0.0.4*2
      hostkarma.junkemailfilter.com=127.0.1.2*1
      backscatter.spameatingmonkey.net*2
      bl.ipv6.spameatingmonkey.net*2
      bl.spameatingmonkey.net*2
      b.barracudacentral.org=127.0.0.2*7
      bl.mailspike.net=127.0.0.2*5
      bl.mailspike.net=127.0.0.[10;11;12]*4
      dnsbl.sorbs.net=127.0.0.10*8
      dnsbl.sorbs.net=127.0.0.5*6
      dnsbl.sorbs.net=127.0.0.7*3
      dnsbl.sorbs.net=127.0.0.8*2
      dnsbl.sorbs.net=127.0.0.6*2
      dnsbl.sorbs.net=127.0.0.9*2
      zen.spamhaus.org=127.0.0.[10;11]*8
      zen.spamhaus.org=127.0.0.[4..7]*6
      zen.spamhaus.org=127.0.0.3*4
      zen.spamhaus.org=127.0.0.2*3

And this one is the recreated version:

root@host:/opt/mailcow-dockerized# cat data/conf/postfix/dns_blocklists.cf
# This file can be edited.
# Delete this file and restart postfix container to revert any changes.
postscreen_dnsbl_sites = wl.mailspike.net=127.0.0.[18;19;20]*-2
  hostkarma.junkemailfilter.com=127.0.0.1*-2
  list.dnswl.org=127.0.[0..255].0*-2
  list.dnswl.org=127.0.[0..255].1*-4
  list.dnswl.org=127.0.[0..255].2*-6
  list.dnswl.org=127.0.[0..255].3*-8
  ix.dnsbl.manitu.net*2
  bl.spamcop.net*2
  bl.suomispam.net*2
  hostkarma.junkemailfilter.com=127.0.0.2*3
  hostkarma.junkemailfilter.com=127.0.0.4*2
  hostkarma.junkemailfilter.com=127.0.1.2*1
  backscatter.spameatingmonkey.net*2
  bl.ipv6.spameatingmonkey.net*2
  bl.spameatingmonkey.net*2
  b.barracudacentral.org=127.0.0.2*7
  bl.mailspike.net=127.0.0.2*5
  bl.mailspike.net=127.0.0.[10;11;12]*4

ETNyx

Not a bug is really interesting statement, most admin does not touch it, it’s created by Mailcow and never updated any way,…

kwisatz Note that dnsbl.sorbs.net is discontinued, so maybe it’s not config that is wrong but evaluation of those DNS queries?

kwisatz

I have it

postfix-mailcow-1    | Nov 10 17:30:44 29a415449e07 postfix/qmgr[833]: fatal: bad numerical configuration: lmtp_destination_recipient_limit = 1    postscreen_dnsbl_sites = wl.mailspike.net=127.0.0.[18;19;20]*-2      hostkarma.junkemailfilter.com=127.0.0.1*-2      list.dnswl.org=127.0.[0..255].0*-2      list.dnswl.org=127.0.[0..255].1*-4      list.dnswl.org=127.0.[0..255].2*-6      list.dnswl.org=127.0.[0..255].3*-8      ix.dnsbl.manitu.net*2      bl.spamcop.net*2      bl.suomispam.net*2      hostkarma.junkemailfilter.com=127.0.0.2*3      hostkarma.junkemailfilter.com=127.0.0.4*2      hostkarma.junkemailfilter.com=127.0.1.2*1      backscatter.spameatingmonkey.net*2      bl.ipv6.spameatingmonkey.net*2      bl.spameatingmonkey.net*2      b.barracudacentral.org=127.0.0.2*7      bl.mailspike.net=127.0.0.2*5      bl.mailspike.net=127.0.0.[10;11;12]*4      dnsbl.sorbs.net=127.0.0.10*8      dnsbl.sorbs.net=127.0.0.5*6      dnsbl.sorbs.net=127.0.0.7*3      dnsbl.sorbs.net=127.0.0.8*2      dnsbl.sorbs.net=127.0.0.6*2      dnsbl.sorbs.net=127.0.0.9*2      zen.spamhaus.org=127.0.0.[10;11]*8      zen.spamhaus.org=127.0.0.[4..7]*6      zen.spamhaus.org=127.0.0.3*4      zen.spamhaus.org=127.0.0.2*3  zen.spamhaus.org=127.0.0.[10;11]*8  zen.spamhaus.org=127.0.0.[4..7]*6  zen.spamhaus.org=127.0.0.3*4  zen.spamhaus.org=127.0.0.2*3
postfix-mailcow-1    | Nov 10 17:30:45 29a415449e07 postfix/master[376]: warning: process /usr/lib/postfix/sbin/qmgr pid 833 exit status 1
postfix-mailcow-1    | Nov 10 17:30:45 29a415449e07 postfix/master[376]: warning: /usr/lib/postfix/sbin/qmgr: bad command startup -- throttling

I’m suspecting it might have something to do with how the file was being concatenated into main.cf? But unfortunately I hadn’t checked that file out prior to deleting the dns_blocklists.cf file.

DocFraggle

kwisatz I’m suspecting it might have something to do with how the file was being concatenated into main.cf? But unfortunately I hadn’t checked that file out prior to deleting the dns_blocklists.cf file.

Yes, I just had a look, @DerLinkman added a new line to main.cf here

This must have broken the concatenate of the main.cf file

So that somehow

lmtp_destination_recipient_limit = 1 postscreen_dnsbl_sites =

was in the same line (as shown in the original log line above)

DerLinkman

Actually, i don’t know what is wrong. The file people moan about is a older version of the dns_blocklists file which gets appended upon postfix boot.

A better version has been introduced earlier in the year.

However, if that older version exists already mailcow is not deleting it and therefore is not regenerating the file with a proper one.

Due to my change of the main.cf postfix is pasting the old file wrongly into the code.

You may ask: Why has it not been found earlier? Because postfix seems to wrongly interpreted the file anyways, as originally the file has been appended to the previous last main.cf parameter which was parent_domain_matches_subdomains = debug_peer_list,fast_flush_domains,mynetworks,qmqpd_authorized_clients

That stuff is not nicely solved, i’m not happy with it, if anyone has suggestions on how to better implement this, i would be greatful. (This setting (dnsblocklists) does not support file hashing or else, they must be appended with comma, that is the thing why it is hard to implement carefully)

DocFraggle

@zedred @kwisatz from which version did you update your mailcow to 2024-11?

EDIT: @DerLinkman I know the reason, it’s because of the indentation of the previous data/conf/postfix/dns_blocklists.cf file of @kwisatz , see here

Postfix assumed that it is a following config of lmtp_destination_recipient_limit because it had 2 spaces at the beginning of the line. So after deleting and recreating the file the indentation was correct, and thus it worked

EDIT 2: I have to correct myself, the indentation seems to work, just tested this with my testcow

kwisatz

I’m not sure how to retrace the update history including exact versions?
I can show when I ran updates though and from this, I’d say I definitely didn’t skip an update here.

-rw-r--r-- 1 root root     0 Aug 13 10:07 diff_before_update_2024-08-13-10-07-47
-rw-r--r-- 1 root root     0 Aug 15 17:01 diff_before_update_2024-08-15-17-01-50
-rw-r--r-- 1 root root     0 Sep  2 07:21 diff_before_update_2024-09-02-07-21-24
-rw-r--r-- 1 root root     0 Nov 10 16:33 diff_before_update_2024-11-10-16-33-10

DocFraggle

kwisatz I’d say I definitely didn’t skip an update here.

Yes, looks like it. Do you happen to still have the old file available? Maybe a backup? I can’t recreate this with just pasting the contents of your post from above…

data/conf/postfix/dns_blocklists.cf before deleting and recreating it

kwisatz

DocFraggle

dns-blocklists.txt

1kB

Here’s the file from a backup from November 9th.

DocFraggle

OK @DerLinkman, it is indeed the indentation. If I use the above file and restart the postfix container:

root@b01960898244:/# postconf -c /opt/postfix/conf/ | grep lmtp_destination_recipient_limit
lmtp_destination_recipient_limit = 1 postscreen_dnsbl_sites = wl.mailspike.net=127.0.0.[18;19;20]*-2 hostkarma.junkemailfilter.com=127.0.0.1*-2 list.dnswl.org=127.0.[0..255].0*-2 list.dnswl.org=127.0.[0..255].1*-4 list.dnswl.org=127.0.[0..255].2*-6 list.dnswl.org=127.0.[0..255].3*-8 ix.dnsbl.manitu.net*2 bl.spamcop.net*2 bl.suomispam.net*2 hostkarma.junkemailfilter.com=127.0.0.2*3 hostkarma.junkemailfilter.com=127.0.0.4*2 hostkarma.junkemailfilter.com=127.0.1.2*1 backscatter.spameatingmonkey.net*2 bl.ipv6.spameatingmonkey.net*2 bl.spameatingmonkey.net*2 b.barracudacentral.org=127.0.0.2*7 bl.mailspike.net=127.0.0.2*5 bl.mailspike.net=127.0.0.[10;11;12]*4 dnsbl.sorbs.net=127.0.0.10*8 dnsbl.sorbs.net=127.0.0.5*6 dnsbl.sorbs.net=127.0.0.7*3 dnsbl.sorbs.net=127.0.0.8*2 dnsbl.sorbs.net=127.0.0.6*2 dnsbl.sorbs.net=127.0.0.9*2 zen.spamhaus.org=127.0.0.[10;11]*8 zen.spamhaus.org=127.0.0.[4..7]*6 zen.spamhaus.org=127.0.0.3*4 zen.spamhaus.org=127.0.0.2*3 zen.spamhaus.org=127.0.0.[10;11]*8 zen.spamhaus.org=127.0.0.[4..7]*6 zen.spamhaus.org=127.0.0.3*4 zen.spamhaus.org=127.0.0.2*3

A solution would be to use this

DNSBL_CONFIG=$(grep -v '^#' /opt/postfix/conf/dns_blocklists.cf | grep '\S' | sed 's/^[[:space:]]*postscreen_dnsbl_sites/postscreen_dnsbl_sites/')

in here: mailcow/mailcow-dockerizedblob/2024-11/data/Dockerfiles/postfix/postfix.sh#L420

DocFraggle

@DerLinkman here’s a PR

mailcow/mailcow-dockerized6158