Dear all,

I’m using spamcop.net to submit spam reports on a regular basis.
Unfortunately spamcop anaylzes the email headers and stops if an internal network is being detected.
This happens sometimes, and I don’t know the exact cause yet, but I can say thet rspamd did not rewrite the header of the spamemail, instead it seaid no-action.

Why does the header show the internal IP fd4d:6169:6c63:6f77::c for my mailserver instead of the external one?

My docker containers “mailcowdockerized-postfix-mailcow-1” uses the ipv6 addres fd4d:6169:6c63:6f77::c.
A received-header begins like this:
Received: from mail.meinedomain.de ([fd4d:6169:6c63:6f77::c])
by 6b8c305be537 with LMTP
id WFhiKY85UWijixoAhYVPlA
(envelope-from <x>)
for <x>; Tue, 17 Jun 2025 11:46:55 +0200

My br-mailcow uses internal ips (ipv4 and ipv6) only:
ip addr show br-mailcow
395: br-mailcow: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default
link/ether be:03:4e:xx:xx:xx brd ff:ff:ff:ff:ff:ff
inet 172.22.1.1/24 brd 172.22.1.255 scope global br-mailcow
valid_lft forever preferred_lft forever
inet6 fd4d:6169:6c63:6f77::1/64 scope global nodad
valid_lft forever preferred_lft forever
inet6 fe80::bc03:4eff:feb0:c473/64 scope link
valid_lft forever preferred_lft forever

This corresponds to the settings in docker-compose.yml:
networks:
mailcow-network:
driver: bridge
driver_opts:
com.docker.network.bridge.name: br-mailcow
enable_ipv6: true
ipam:
driver: default
config:
- subnet: ${IPV4_NETWORK:-172.22.1}.0/24
- subnet: ${IPV6_NETWORK:-fd4d:6169:6c63:6f77::/64}

Why isn’t a public routed ipv6-network being used?
Is there a chance to rewrite headers automatically to show external IPv6-IPs only?

how do you do spamcop.net submissions with mailcow?

  • EETNyx

      Moolevel 83
    • Edited

    Hello, if is possible, please post full headers of this e-mail. I would say, that it’s pretty normal that some of Received headers show local IP.

      Have something to say?

      Join the community by quickly registering to participate in this discussion. We'd like to see you joining our great moo-community!

      ETNyx that’s exactly the weird thing with these kind of emails: they do NOT show any external ip in their headers.
      Here you will find another example where the email is sent to meine-adresse@gmx.net and then forwarded to meine-mailbox@meinedomain.de.

      Return-Path: <meine-adresse@gmx.net>
      Delivered-To: meine-mailbox@meinedomain.de
      Received: from mail.meinedomain.de ([fd4d:6169:6c63:6f77::c])
      by 6b8c305be537 with LMTP
      id AJu3NCJDUWjKkhoAhYVPlA
      (envelope-from <meine-adresse@gmx.net>)
      for <meine-mailbox@meinedomain.de>; Tue, 17 Jun 2025 12:27:46 +0200
      X-Original-To: meine-mailbox@meinedomain.de
      Received: from mout-xforward.gmx.net (mout-xforward.gmx.net [82.165.159.42])
      (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
      key-exchange ECDHE (prime256v1) server-signature RSA-PSS (4096 bits) server-digest SHA256)
      (No client certificate requested)
      by mail.meinedomain.de (Postcow) with ESMTPS id 2BA8E18DA64
      for <meine-mailbox@meinedomain.de>; Tue, 17 Jun 2025 12:27:46 +0200 (CEST)
      Authentication-Results: mail.meinedomain.de;
      dkim=pass header.d=will.termind.us header.s=default header.b=T60ceC7f;
      dmarc=none;
      spf=pass (mail.meinedomain.de: domain of meine-adresse@gmx.net designates 82.165.159.42 as permitted sender) smtp.mailfrom=meine-adresse@gmx.net
      ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=meinedomain.de;
      s=email; t=1750156066;
      h=from:from:reply-to:subject:subject:date:date:message-id:message-id:
      to:to:cc:mime-version:mime-version:content-type:content-type:
      content-transfer-encoding:content-transfer-encoding:dkim-signature;
      bh=OlLzofsm01Oi/WKExjE0VEnev44Gx1Y4IEO46XAhf0I=;
      b=CoMOdVMTIwSaStx0DMcrVhQqoQQJ25ESkMUTL3uDUAWTLYhBsmaOQ11IFicEioSMUzRjYn
      9dnJq5jlgZJ0d4vzSy7pGF+E49UgSmt4OL5Xl7o5tf9iW8mvKUZu4geRFLxA5Su071JcqM
      ymWOV4wLrw2M1XKDyy2iBdXMZjTmfd75zAyIIbqVOxt9+yLTjsM/RN1TXvBzIhj7Jbgorh
      q/PdR2n5cizdk7qn+ueysskNIzLzs78lPO9Suo9qdkC0X4+N2dr+G0zUxyq8TlDG4gDcDz
      miMyjiVCJ+HFCzSCcdG8nFSQ0Ss/GPEsvbOM90eb7NPYCosUccyknI3CWFAF8g==
      ARC-Authentication-Results: i=1;
      mail.meinedomain.de;
      dkim=pass header.d=will.termind.us header.s=default header.b=T60ceC7f;
      dmarc=none;
      spf=pass (mail.meinedomain.de: domain of meine-adresse@gmx.net designates 82.165.159.42 as permitted sender) smtp.mailfrom=meine-adresse@gmx.net
      ARC-Seal: i=1; s=email; d=meinedomain.de; t=1750156066; a=rsa-sha256;
      cv=none;
      b=E/HDVfJ6wwy3XYY78KwqWW76lIuDEiJj87lbRfRDFnwazcwbNKLuyJ2SxqzWTduqubse08
      pd7iJYzfG/9lOzu0//jC5SYy7jum3B/U+PaROYBWUPtdgdPs/+41nS5rgZusNGsxnEvZO1
      cglLPAxa737Epf3M+njxQHQSMskFTP32y8qlSvNBxeNcbEblKva7HTfVhv9SapqYgo7uVT
      TUMnDodm0mjOIszvkqU2FfHkska51PGS9femODbOjJYqcoquidiAOL8cb0Lnr/Qc9Opnna
      3+LUnqPbsPkn+rACj33I/TpD99EjWc414j9xwuXKaLIwzkGUw6Zp6WspPNfFBA==
      UI-Loop: V01:POlLc1fWYkk=:xRutLJo3LgNovcXpgJIJ+w==
      Received: from will.termind.us ([27.255.82.114]) by mx-ha.gmx.net (mxgmx109
      [212.227.17.5]) with ESMTPS (Nemesis) id 1Mnnfe-1v81E21mCQ-00mHxG for
      <meine-adresse@gmx.net>; Tue, 17 Jun 2025 12:27:45 +0200
      DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=default; d=will.termind.us;
      h=Subject:From:Content-Type:To:Message-ID:MIME-Version:
      Content-Transfer-Encoding:Date; i=McAfee-Cooperative@will.termind.us;
      bh=OlLzofsm01Oi/WKExjE0VEnev44Gx1Y4IEO46XAhf0I=;
      b=T60ceC7fvW18HKE6SajesDReefcB1JacDQY9D6C+zXiMa1OXfGIphXv8/aPD2Wc+nWy2sbJFCKUM
      Yf2PbQBaQ6SZcpooFfGtPoy2wrgjA40wthibzaGO/cdDxgCu35mcE3I5/EJ52Csb6Z2veT+rNG2+
      nyMgUdQJUBzB3w1OuwI5fM+UvRyFm4FURGBIUn0IlI6IWHxm0TXYu8UHz7Crr0D06nb64cHvQC7T
      Gky9JsDqNW70RLMLDkfJL1zPE8NLJYKU8LcqrLHZmzkspZ3N7/53Y785TyWpXGGMRffhE1A6Ppdp
      AhhNREWVu7bKtYDS4dbJiIz4p6Skyp5GBdVlpQ==
      Subject: =?UTF-8?B?U3RheSBzYWZlIHdpdGggTWNBZmVlOiBQcm90ZWN0IHlvdXIgZGV2aWNlcyB0b2RheSE=?=
      From: McAfee-Cooperative <McAfee-Cooperative@will.termind.us>
      Content-Type: text/html; charset="utf-8"
      To: Mein Name <McAfee-Cooperativeservice1@emailswave.com>
      Message-ID: <abf581ab-ca0b-4d4b-887jcDnilJ8-aa8ba9184e8b@us-east-2.amazonses.com>
      MIME-Version: 1.0
      X-SFMC-Stack: 13
      Content-Transfer-Encoding: 8bit
      Date: Tue, 17 Jun 2025 06:27:41 -0400
      Envelope-To: <meine-adresse@gmx.net>
      UI-OutboundReport: junk:10;M01:P0:inR9VMd/HzY=;8eozDgJJz39yT2hnKAPuSucEp2z6q
      96GtXgIkc5CD++i9jHB3gVm6yGbtUkScCzzpZRmjq1ICsimpio8BeCpgP2vk5Nm8Lwb7wPwKs
      1F361pR0Mxp+1zEGbUSh6h4YNCre7wRqIzmPjg1c6O8fbTZJnsmTXATVEenVx1Tqwr1mtFawh
      HZMww9LuXal5IGoINyYyfm1kClnFgBLeQYfV1cFe9iAX+WPRoR+Szf6tQ6ux+Nb4usCgrFX+2
      c3ogAQ5xc9vCutdcX74Lgl/BUFWG44nWxpJiBUFR6I4fQkvSVjSqo/uS9818xHx150mLrpYBP
      yiuY3h+IgTavndwki2dIUj/fCjQP4t39ZQX8bl6trd1OMa/CZRYRT2M9LAdv6MbLKpYoWNzcX
      hZwpkJfPBkUlaSZ8eUpanvFLdGOAIT1nanRbdLHd0D9INBKwtjwv87jVUzZ4wx2UkZ9goLPL+
      2zCPnT8G5nK16eWZLZTqk1TZAXRFyqrC0bE3fU+5pIWRyaP4VyTybAnQuinPUjOlBaubN58KH
      4ThB45Kp8G6DRod3giLAd9vl165gclOyQezVGrwobQiPnT5n34uxBBg9iFbrXZjCwGTllmqHq
      A51x876Da+39UDhsEuCorSbROHsSBzXtrQ8o1nu3aJ1Cm1MM6tweMGDmtMZVJqjoPg/bHZl8w
      auyhuMx+qA94zpEWLf7axhw0y6ph/Psc8zjXxXtsA3kSmvrFY0lwPCRDXi66D/g9hUmPqZMuF
      sfeV6ueCiPDFBg6hRB11q78+nOmHjwVM7/cMxQkbprzt9BAphXmeoT6h/g+UDHe0Ix7UTh+Tp
      +wOmWscOD/U5kgOz5jJgLgTL4oTrbjTIeO1as/TLYu2gHq87U2LGIijXn2aHz45KcyrrGKVJb
      Vi1ach0t6KDEDYpGcBoyQlBUBcbzYLfDUAmQIncxd1CAAjItIrYuIp1kuNv5LnBB4VlO8IxP4
      bbRcuitPxkQnZF059IstyvoVROUednAHb9PfPsogHRITAqlSJRTEb6jyKWqdp4QLYX2Zp0xq6
      JrjyHLqW3XFbrn/lm6c9fbW+RpT1xKNaOw0PhF5OOq3mX89eHF3c5ayMKz27gtOul1NyTno3C
      602yZYBMSMmRQMiXKIZSsAxLW+RHmXbFlLb+PeKbdSTjICSnPtbyg5TqwWYUp0MhBiQPewCvb
      eJQclkUeuQOYz2oXMqqKG5WO7stKWyskfpFFlOS2o/XEpciaIPWE4hqgA79rEHTi84Gs/sJPf
      QpcUFnDJog3KO3q0duxdIB4so/kRnKq4gHvo5RoeqvVy983YyYTLL6RISdRTmjZTlNOQNUJv8
      c1ONfzGGPdbAvWLzv7JVxqITFDA4w9m2nptk9vlAxh5LLkRFLw2CplU61qDmgDi68+7k+lTU1
      7/27asy6fmeHvzzRBoMEfu0Kocl8M9zEDSrV6bnAMwp6jYJT//+0YzmN7jPFSfgzdSUMdH1c8
      agJ5as88Elzlyud1OM7nofQCCm2QrsCD4JliROFhoIgIxJlISv8zAiYaSam3adI6ZI6F1AYz4
      sPsENWCGJ7sVlvMZVcWzbA4fxdS1mtyOV2S2nSZl3JVi/6OxTouuNRO4AzNtz/PXhWjf1YFay
      IkuhQL58gYVYwenKpY8bNWFiXRhAesuu67m+zE4Zh8rFHGu/ieV6L1xiJyh9vcpjWvnrE8W7C
      KNYUc7LtT3kORij2zKiFl8cDggoRDDtdOl9ArlHls+30vx4Wd+PLDXusgQoHlNOkWY6v5jvVR
      xaqXInnyxyCo12Cglsv2FGLnayT7YjJfFhpAEPqWb+6IMJfxr27xfPNgqaJdA/axW5RwXzk8n
      7K06pFvjJTUFRxKkiEzEJPdnznGT+SaJrT1eQSEj8vHmslMeOX4OFnoRT6z+f32Vqtv2tl07e
      Vpu+sehcwNIttsrfHOdD6z2s0JYDY8JZs9ip+FkYyFTfDQusjLrYrmKE2ZDQoIQuk8j9YTlps
      ZKvvAiDOOmexCsv0kL6Gw2ZCeQuBk3tAG9MygbmsTMsNOn+HI3qiMOBLMne4I7zZSUvB5x4kt
      vfH88ikCbOMTV8g2GLFKj1QLQ6Q87yPFZ+jlNjzEfCEvVZtf0JJPiyoKUZtF5WT2jOZN9SK4Z
      Ee16nkUr8P+za+BzzD5r6nJwcsyCgcfPxtYK1gHHQIEcx+hQoKtxkGpdjwq8DZe+Qc+LMEK44
      JDAUBCERqGdFSWte4/B9CMHdPUe7DPxUIGGiltiKViuBSNG5m3U0BfBiyaa2qVt3W9vo1dN4e
      HB2VS670fHwU3bPqGYH2Z7XALwYJCXXtWuaFJ0PWliIktNBISeC0JAKVfU4fOj0Snt+hhjspK
      vJZB79W5fMinFpBdP6N3fsT1KFbPk+2DxZNPCRiO9HyaCv0W5lDlwcpkWTH7Y/pQ/dI7MU0Cc
      Ta2jk7Oo9iZoPeoXoqPQNhFT4XXdl4FYi8nlLh41gZLHK1ie5h2O63YQajv8isR4KXhy7I5Ah
      YUzokYzRwxfpdiaSbmsoMVpbI2FMAgln9r51J9xxSaa8A1ZCAM7AGDVhvhIURoicgdjIM9+HK
      z13CBQvm0/4M3o75+d47OlEoaSd4r6oqdVEnS8ME1aUBMg8I37hBFAmDAjY8k8avMUefvburE
      trUmHT9x+RbPBmIfZ0jSxCXBwm99EkkekeDK6JVC++rrYIKN4KKEsdSHJHntdJx6ovWyeVkRS
      shhg18aVgcvtK0sV6Kp2xuTW1d4PsOpx7htkV4diG4rEuVEnRkJWSFBXdj5YzcH45pJ4UzROh
      jdUE33QvpKX6Z/KdyJTp2acABonV48q9egSPh+qwi3DD3/T0RKxngy3bWlGW3DsIHo0eMA8do
      9ietLdNFFQsvgz7PbVbZL2tqr2kKJM0Gdb1nlGGpxsspwFc05MjWNTzaYVp1JseaxhgoR+7K/
      xHQqPP0JT+RVRw02zLZbHQBexsff6SX0Tjwg8K08GC1CJ4PvYK8Uo2K+O+0/D98iOA27G9xPC
      gaqkRmoHsADUD2szcr09oZAB2LJLF08thYbQfbFlahJXhtoBw03n9KYzrtH66mDEnYzFMpkEX
      sK24lr1tUN3Bnjqwjhdj+NN/ORtP1IHcrhbUTnXXjosVmwxe9Nk1pN8mnEIt2r7WDLgVv/rOM
      DDK5a4CHWrB1AdtaE/v4o5198hWl7W4GMCFONo9a/dsPHgQg7poRGrsSgAhGhamCLLsuWZP7x
      81mRxurZxsjWXJkcRUsopGqXnjjzJjoCv6THZk+KmvYciqvhK1JbvTLU8/1J+TJ6k0fDCsS3j
      Cz9a5AQY0FXMUY1JlIlMptzhQRomwyB1XtKcmK90Z5uPWUjvYFO8KtwckzJV46uTEJScOJiSu
      6kDTGOEjA5fvvrYRRqrE3j2LTsvYxx5g/nRk3FeHWpOzpqz5F/9l+3bJnj/3a833uss3i6cDG
      4BIOKeZhUTcIQA+GTExWjsX1xXzrAz9wVSVGvPNrprT4xsSiBg8jfF/clJqT+4Y4FSuAClMqT
      1W0G/U2dFEtpxen8Ni7lQVkRNOUK80EKxLac9rRrrd2f0R5OqMdDzMZHPgkD0cK0lp22ROkR8
      occYv4aslf/Ng/kJUTCnvmZq/MQ2npO1dncugTfBXcUn8sJ+Zu4YXnFZ8wp6SzIpgynlBzw1S
      MSUukt7ZC3Kzkc5+0hKmrbP0qcoCGpLOvjvPJX9cIsduMIVE6JxjeP0DFTXO6r6mL1jobAmkR
      +EzORkNUBL3o6g7dmj35IYBqz1Nl7Bg6kyF3eamNsOW30g680jvYPvszUwfaGB+NgXVFXUwu+
      w8piNDrPDnnxz0aASzpXkhN+EQ0SXTCfgJKTLRZaJkYsJRtEfjYFnBfo4g6Urggw6HqQpAyrZ
      6U09QpaEAwNzfjW075JpJHqMGQNuXcm8qqa6O0O0iB991h3rX3+jCSzMY6rlbd40l0Cdnf9ag
      bgnLl1DGgyO9HtU+uT/Hsa6Zo46XCWlVDf9ODUpNzg9XS0M7DwlLplzGxA8BTlB+p0/pVCxVK
      VKZ6ZuFGmdxfSQPlG2XPPYHl1XQfbo002yU9H8L6M5Y03IR9hGxJrIRToxZZotM/w0WtZ4IM3
      Ed0yu1085iN8P3eueDYMMUmkRSzwe2OpCF9ziPI6sDZzdeOVp3QX/AspW1NEfxf7yIQatkPf+
      +gSgNArsj7x/ycruwAPIPSz1cChn1n1SxBD1bhDv/fsNzSrX5MR6K7UK0EKdgt2DR15J0cYYH
      L4xVovMCUmZ+EXPAW7hykYzNvhr+OS8RNEu5JeTNaKUxg5Wjw6F7ZVGLupI3cfEqn8/qJ90bi
      SZ/FJiFhBGSaR22yABD7Pe7rFM+bXOiduYKFqdICXHUKJWhEvAoxX0biO6GoKsp6eMcJkld40
      3pRfk2NBklrgOsZ0cCj+52zSIaKXucBDbFMf5G2rUVO/bGQ4WAlDtXgmU5kNZj8csn3KgxQON
      gIkjwQoGlgvdprqeC7byV+GErE91y31EICXcsSFN/Hos+SisXuC2EqskRulw8zekEhsNX1EPL
      +aEVOYKP+u7AthBvqT8SGIHi9tx0A64wdMNJSHwkYp+40xj+5arOvtreaXg+4KzAZGL236wYF
      WsAnNuKFmasTNK4fUslcLow2vbEUu9P9f4/Y+Y7rbuTNuXZcxiQ8qXRytDi4UkcT5gjDAAhIz
      mPepbg3MHwlGvufw2YOJvusyohE/E+NfJX7edRh//fc6Mbm2S0F5BzE9JUQMZe3VQFrRy6D9F
      GzYgcWPp4clwAc6fOK4JUkruCVRo0uR5qyJPjcVJ0P6fZDU5mLJR9REU4qeEWDCX2aLy9v7SR
      TUUFCEoXDGOd49fMPrH0AQkMAr2YXXmmYDDo/XLE7s5gqIs4NUHn9kX7lo+6na4nNTcOV3mEI
      e/6Yt+ywWJHpMKhtxwoSdh23aiYp/DLI0gddi4f4xn8HMTuxttBUclP5Kf74b4Egeb7H/W7Yv
      NdleG11uKaVmlzvifkBcAltjLH2mic/ikbyDWECBmSAmbjt67bcDj5943ELu5gROu5LgzbBJj
      1Ak+d44gN98NVPwFDqZQJ5SWGQs+rMecNWOg+4Kv9jtMiLJW1AWgPcClSfmcSDjFdxDrj0KrM
      AcX/BiAi60URoQm6ICsEp3i3s5RYtxNAWHT4cu9AJXQ35FOmtqG/vjFMyuQ43n6dTGJc3kj99
      vAvNVc5cdjmlCuxTBMN+8DhcQPbq/NnNfYzUAmHtCi64iQWILpkP7eOeWNzFo8SsV0r6wptAf
      ouTBoNcPEkBDiN89E9JopJt7ya5vYzVuP4vmySdhoESOYLGQkaRImDv7yOGTpiigB3lPeKXw6
      akhrpoHVbWEUXByca8KS3TPojM7KTw6qtAnb0m3ILgVTdOXlvDTrierFQSLizCwWAqRdnkjRN
      kKMTLrFIvArwzTvJg76JvnKW9ce5bt3IAqJZsCIIl81+frPVfjIYbk7+3fH6qkBn+22z3NDVf
      0GNWKfIhHXClZgtVjd9ZZwZWQTvKD2nvqI3P2H2NPwtJGwiutyRzSLI+ZS9mR2I/0JS7IK+/Z
      CHbSS6PDtzwdfgpn28ZohPPnLtTsOrbQhdU95xB0nVSoTBWsUNQ8X4k+xAAT+5T1eGxOl58+5
      OmNXNuflZnhHFDT1MTyfVWVovE1yQ3SKfLss+tKw5omNjeHxwt8+S26j6AAOCK5l7/jKcldCi
      frBMfRhOPkR2eUFeznIlWdBSM0bPjafrfxlhRUWotIPqa6EO65hFgLlYC/ecnsfLHO6c7X6ZI
      Jx/ML710wptgMTk17E83oGrwqGpPqMlZao0b3TwKDwuaK+KuYCPhYkTBGL5HLmBZ1XuZDtuAE
      HNioMGWJZiiCGeHuPC/wJcZBMQ+cP3I3Ymfh0mrZLu98SHpwGHNVIi5FFmVLOa+ga1HAYxzGe
      qc7StHw2F60PRGGimpV+OcwCyqii0MVYZNn99GZ1tquYEweoLdFPB2XeBYTRSI15q9xDGTvvI
      XWILFjJEWVipP/aejNApikOfxgfLvRdDcXbTAAUimIOSTJTPePl5WEjWrpTTdRDhru/ZGkK/3
      6SMMV0qTKbsuS0I9eBzQ33ncoI/rpb4N3MlVC3mRtRDjTDtAhxe5jKh1Mffj7kFjcMQQTw8RC
      A8+M/ExM/IgyGPqnKuQzfIN/ek3rWA3+BwqX5fG1CCtbzEB1bfpujw4jYidNHmBMFIWTo0bML
      kZi7iLxjbsM5n5ob1F1IuS189zx8oNQOGLARc0Uy+/z8U1MAq3ivWO4LfWa1S9eE7pXMXuBZR
      Qs3n4zebQ+o8s4cnQhN1TJXy2Ahs6woW7hKigBmNdUaVciNvdTE94wr3qgYH7YkU6KoRIQnCN
      aHgPK6BhPcU09t1RpDKiTspT69EzUnr2DYBfhd6xcn0sQxU1glgcIGrcrFcc8oUCe7aqmtuBG
      QFBTmXHpLBPd8unGrU2VySsBlFhQhssgL8+j6y6v+8PvP1tlhl6p0Ij0lsOYSzIBVQqcZgeuS
      fwEQO+u52P8fB93bv+MA2aFSt/wjPxPLkpGpI2W1DjfLrj4NK1MkDFT1SyKKkGnC9OUabRbCn
      5tSwTRRoUBjeTqw2RKWapDztn0GYjIENW3oxvO9aG+VFUSKfGYBP+L/3fNTXgaPHcIDF+moOc
      /F0P4yVze9M0OiP9oXHCnKkBOfTFHhlmzXQtpLbSsk0bvL7RRthZbIyLfC9Osb5B1DoZEWHrf
      +87fClr/VnShEFMyTftOdN4CI/epr4PEHT8fQRy7WtJpaHHHJ3Z2/MB+Ajv13QOTL+lbAi2/3
      sfr9qouYwPELUC5umB0qzi8n6t5enGeNbEDS9IOQsaQDVigB8LemvWFXr3ORd9W65Efydl0cQ
      ob3kzBBb8hgDAwQP35sG9anhY2OY6a9bvynjE/A44vooo8InSB7X97H7doLPN695jhz/raOVb
      UhzaJjBThSLDR6V/4SuC+17Zqz95EWrSL4znwUcV9qoaZDL7un8zcuDr2teCqcVYMawx1ZFCu
      l+1AtkICEPxmhPEL0H1NTgNz1aRSTvpjt4geZrDxUZYACScDMf86EVCFV/kEZsN6fUR3Iswga
      bv22L+zyAKSmQp6WLQsjQRn32Yut9jLbqJjkToTF3Vdgra9z351P9RnGqx9PkkP7N2kxYbDro
      J4nz8NnpSu0O3AZA1KkVZi31noIRGUmtTh6Uzf3OMAtL+q8Ncc1itYovFzWc6d8VeVfrbepcf
      YMhGoIMk0QnUffAt5KjR3M3D9ZHYM4nBwnpxME+yFbYxvwahDmK28upGiCvwrvLzKZTr4Ajgq
      CgrX/5Cakr5OW4pylo6GpHj7/ySSeiCuoCbc+khH5sI2+Z47fYizejTqVOYH26VNdChsFaLDq
      t7HtEDe/ueudsZPWaEOWHaZh+vPh9+3ae42ynF32Ot5xuyMCxVAGTA1Y+ql5NwB9hpbA9yoRn
      UzOaSG/XyI4lyJw6okUfFMbJClSQredOBUc8rs4zscONeU43kiKmalBIMtHSPA/NYQtKIpYic
      qB5NXqcQDkiCNoaPf11KFdNZ0/LnzVnBEJQ6cA4IG2ZpSCPuGS/1sqGNCdnFJJd9ELAPDNYko
      s5G7EOn9YeaK6o3aTGi8A6pF8M49EiOoNdiYipgPFHI0h3uezKNrGCHb67B+4G1gyQ76LxN7C
      DvufNPkdgcJ7k8ZcWHOvbmbMLOEbgmWH3GclvXWbUdah/5huIyrY1NRJQd7GZSpjihnKr3zb8
      a8bSBDVQXKr47rAM23O4aJ76TkbDF3H11HYXpZ0yfE2iT9yU1WYdaqYH8+wdFnPyn9SDZIqKX
      rWOkdN+31WTq8FzXS7BeL6Bbt+ZK8TAiI7gt7qrCS7y1BiKcBc998uDxy9pR+pAVgPBpdsKqU
      n5wimgue9Eh+FYtwJII2HQ4tmx8bc+smubNiaSgXTpa2sASIXp3KpQJEBz5/jlG0Ezh3IhDFg
      tyZT15JgQA8kpXquxkmlLcjmO2O98CIKPrZfB9F8WwsiF6hCAsDLvgfc24LWvLghJ6Jc2iGl4
      /m9oencsZeZw0va2EDMeHz0Cu7ilA6B2uLM5mPIIQRaGE+WBimdSsosB2X5RfRRTKvJRvP3TU
      MRhELEdZgG/TlTknEZmkk3bWDPArzWqdHvzuviIit3pYnsH4JJYmjKvfm8j+Tmd2xm4mNH5GD
      zckbsUOwWJecUklwyc4yo5uht2/A3avO61W4G6kGogc9E7LJfrLtEzlMjUbHIpuP3kISIsX0Y
      BHBn7CosSMqhPRvfo8urwhr9a3r52q6a1CXf9wf0SIh+47rwZz3Mu9mcZ0PidV3BpA5JVYjE5
      SccjjpUqno1KKLPMvcf/jxjgZYRsS7wzHGf1p3jNIsq9ANw0pjaQs5XcXXz44YtQUXQrQUi/4
      sPMMwLRRK7oxzKWwUKvWYq0Y00LVkMt6b8RTvcYulGp+h+rwlhSVyCpwHpdRcYyyH4v7NcJAH
      b6ZWDsMLATLphy95CZqdYyMef+pCmiDGmJBGN/SiWY8HIVFKRplpRc8svsQN2gOUA/FDQZXdp
      aRKiqzKkx6c76tcy7V3vtWmfXwudg3VVlGA3QU1b45eislvqDhSOv9Yv0Q2Dwx1Q4s6T5UgJp
      +DWdbqnh+Skc3Fwsk6hc9WIcoxF/Rc9rVmEG+w/yrRwXCVp+kndTO1ABBuuyi
      X-Last-TLS-Session-Version: TLSv1.3
      X-Spamd-Result: default: False [6.51 / 15.00];
      IP_REPUTATION_SPAM(2.36)[asn: 8560(-0.40), country: DE(-0.01), ip: 82.165.159.42(1.00)];
      BAD_REP_POLICIES(2.00)[];
      SUBJ_EXCESS_BASE64(1.50)[];
      BAYES_SPAM(0.26)[70.15%];
      ONCE_RECEIVED(0.20)[];
      MIME_HTML_ONLY(0.20)[];
      MX_GOOD(-0.01)[];
      DMARC_NA(0.00)[termind.us: no valid DMARC record];
      UPSTREAM_CHECKS_EXCLUDE_FWD_HOST(0.00)[];
      FORGED_RECIPIENTS(0.00)[m:McAfee-Cooperativeservice1@emailswave.com,s:meine-mailbox@meinedomain.de];
      RCPT_MAILCOW_DOMAIN(0.00)[meinedomain.de];
      WL_FWD_HOST(0.00)[];
      RCPT_COUNT_ONE(0.00)[1];
      SUBJECT_ENDS_EXCLAIM(0.00)[];
      FREEMAIL_ENVFROM(0.00)[gmx.net];
      BCC(0.00)[];
      MIME_TRACE(0.00)[0:~];
      FORGED_SENDER(0.00)[McAfee-Cooperative@will.termind.us,meine-adresse@gmx.net];
      FORWARDED(0.00)[meine-adresse@gmx.net];
      R_DKIM_ALLOW(0.00)[will.termind.us:s=default];
      DKIM_TRACE(0.00)[will.termind.us:+];
      ARC_SIGNED(0.00)[meinedomain.de:s=email:i=1];
      FORGED_RECIPIENTS_FORWARDING(0.00)[];
      R_SPF_ALLOW(0.00)[+a:mout-xforward.gmx.net];
      FORGED_SENDER_FORWARDING(0.00)[];
      FROM_HAS_DN(0.00)[];
      FROM_NEQ_ENVFROM(0.00)[McAfee-Cooperative@will.termind.us,meine-adresse@gmx.net];
      TO_DN_ALL(0.00)[];
      ASN(0.00)[asn:8560, ipnet:82.165.0.0/16, country:DE];
      MISSING_XM_UA(0.00)[];
      RCVD_TLS_ALL(0.00)[];
      RCVD_COUNT_ONE(0.00)[1];
      RBL_SENDERSCORE_REPUT_8(0.00)[82.165.159.42:from];
      WHITELISTED_FWD_HOST(0.00)[82.165.159.42];
      ARC_NA(0.00)[]
      X-Rspamd-Queue-Id: 2BA8E18DA64

      I listed gmx.net’s mailservers as forward-mailhosts, spamfilter on.

      • EETNyx

          Moolevel 83

        Not sure if I overreaching my knowledge, but I would think this last (first in headers) Received is due to internal routing message from smtpd (message pickup) to internals like rspamd and than lmtp (final - local delivery). And it’s ok.

        Maybe someone more experienced should provide more explanation @esackbauer (?)

        If you send message from your system to spamcop.net headers will be different. Or you are getting headers and c&p to some form?

          ETNyx thanks for your reply.
          I copy&pase headers or forward original spam-emails as .eml-attachement, so they do not get modified.
          It must be some internal routing, as you suggest, that corrupts the header and lists an internal instead of an external ipv6-ip.

          • DDerGunni

              Moolevel 1
            • Edited

            Idea: I use Mailcow behind an nginx proxy, which also provides the Letsencrypt certificates.
            The br-mailcow interface only has internal IP addresses; does that play a role in my problem? I suspect not, but I wanted to mention it anyway.

            ip addr show br-mailcow
            395: br-mailcow: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default
            link/ether be:03:xx:xx:c4:73 brd ff:ff:ff:ff:ff:ff
            inet 172.22.1.1/24 brd 172.22.1.255 scope global br-mailcow
            valid_lft forever preferred_lft forever
            inet6 fd4d:6169:6c63:6f77::1/64 scope global nodad
            valid_lft forever preferred_lft forever
            inet6 fe80::bc03:xxxx:feb0:c473/64 scope link
            valid_lft forever preferred_lft forever

            ETNyx Unfortunately not, only http(s) is routed through nginx.

            • EETNyx

                Moolevel 83

              Than to your idea,.. no this should not affect IP(s) in headers of your e-mail.

                ETNyx I found out that sometimes this happens with IPv4 too and I see RFC1918-addresses from the 172.22.1.x-range like
                mail.myserver.com ([172.22.1.253])

                Spamcop is so clever to filter this out. Still it would be good to have at least one real, external/internet-routed ip-address from my server in the header, don’t you think so?

                Is there a way to force the communication between postfix and other mailcow containers like rspamd to ipv4 only?
                Maybe this could be a workaround for my problem.

                • EETNyx

                    Moolevel 83

                  Well you could disable ipv6, but it is not a best idea, what about contacting Spamcom if they are smart to work out private IPv4 they could update their part on IPv6?

                    ETNyx i cannot whitelist the internal ipv6-ip, because spamcop’s testmail doesn’t trigger it.
                    Disabling IPv6 for the internal network shouldn’t have negative consequences. I will follow that approach.

                    3 months later

                    I still couldn’t fix the problem.
                    I now tried to replace the headers using postfix header-checks in order to remove the ULA-space and show the external ipv6-IP. Unfortunately it doesn’t work.

                    data/conf/postfix/extra.cf

                    #rewrite headers to replace container's ipv6-ULA by external ip
                    header_checks = pcre:/opt/postfix/conf/header_checks

                    data/conf/postfix/header_checks
                    /^Received: from (mail\.meinedomain\.de) \(\[fd4d:6169:6c63:6f77::[a-fA-F0-9]+\]\)/ REPLACE Received: from $1 ([1234:1234:1234:1234::1])

                    My email still shows the internal ip, here’s the header:
                    Received: from mail.meinedomain.de ([fd4d:6169:6c63:6f77::f])
                    by 9e2d86a731c7 with LMTP
                    id QIaGDYuY32iaAAAAQuOugQ
                    (envelope-from <ich@meinedomain.de>)
                    for <ich@meinedomain.de>; Fri, 03 Oct 2025 11:34:03 +0200
                    X-Original-To: ich@meinedomain.de
                    Received: from [127.0.0.1] (localhost [127.0.0.1]) by localhost (Mailerdaemon) with ESMTPA id D075818CF30

                    Any idea how to get a CLEAN header that shows the mailserver’s external ipv6 address instead of the ula from the mailcow internal network?

                    No one is typing