1 Topic by mike175de (edited by mike175de 2020-03-14 17:44:06)

  • mike175de
  • mike175de
  • Member
  • Offline
  • Registered: 2019-02-27
  • Posts: 77

Topic: [Closed] google.com => An error occurred during object publishing

==== REQUIRED BASIC INFO OF YOUR IREDMAIL SERVER ====
- iRedMail version (check /etc/iredmail-release): 1.1
- Deployed with iRedMail Easy or the downloadable installer? Installer
- Linux/BSD distribution name and version: Buster
- Store mail accounts in which backend (LDAP/MySQL/PGSQL): MySQL
- Web server (Apache or Nginx): Nginx
- Manage mail accounts with iRedAdmin-Pro? No
- [IMPORTANT] Related original log or error message is required if you're experiencing an issue.
====

Hey there,

I receive some replies from google.com with teh following:

Report domain: domain.de Submitter: google.com Report-ID: 232563401636199173

When I open the attachment I only see this:

An error occurred during object publishing
Did not find mail method or part-reference!

The logs are showing this every 10 to 15min:

Mar 12 10:38:03 mbox postfix/postscreen[1131]: PASS NEW [209.85.222.202]:41051
Mar 12 10:38:03 mbox postfix/smtpd[16166]: connect from mail-qk1-f202.google.com[209.85.222.202]
Mar 12 10:38:03 mbox postfix/smtpd[16166]: Anonymous TLS connection established from mail-qk1-f202.google.com[209.85.222.202]: TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256
Mar 12 10:38:04 mbox postfix/smtpd[16166]: 48dNzc2B7QzKpFv: client=mail-qk1-f202.google.com[209.85.222.202]
Mar 12 10:38:04 mbox postfix/cleanup[18412]: 48dNzc2B7QzKpFv: message-id=<232563401636199173@google.com>
Mar 12 10:38:04 mbox postfix/qmgr[797]: 48dNzc2B7QzKpFv: from=<noreply-dmarc-support@google.com>, size=3661, nrcpt=1 (queue active)
Mar 12 10:38:04 mbox postfix/smtpd[16166]: disconnect from mail-qk1-f202.google.com[209.85.222.202] ehlo=2 starttls=1 mail=1 rcpt=1 bdat=1 quit=1 commands=7
Mar 12 10:38:05 mbox postfix/10025/smtpd[18420]: connect from mbox.virmai.de[127.0.0.1]
Mar 12 10:38:05 mbox postfix/10025/smtpd[18420]: 48dNzd59B4zKpG0: client=mbox.virmai.de[127.0.0.1]
Mar 12 10:38:05 mbox postfix/cleanup[18412]: 48dNzd59B4zKpG0: message-id=<232563401636199173@google.com>
Mar 12 10:38:05 mbox postfix/qmgr[797]: 48dNzd59B4zKpG0: from=<noreply-dmarc-support@google.com>, size=4731, nrcpt=1 (queue active)
Mar 12 10:38:05 mbox postfix/10025/smtpd[18420]: disconnect from mbox.virmai.de[127.0.0.1] ehlo=1 mail=1 rcpt=1 data=1 quit=1 commands=5
Mar 12 10:38:05 mbox amavis[10923]: (10923-10) Passed CLEAN {RelayedInbound}, [209.85.222.202]:41051 [209.85.222.202] ESMTP/ESMTP <noreply-dmarc-support@google.com> -> <postmaster@virmai.de>, (ESMTPS://[209.85.222.202]:41051), Queue-ID: 48dNzc2B7QzKpFv, Message-ID: <232563401636199173@google.com>, mail_id: EsHK_dZFCYit, b: ai8DGoAdj, Hits: -12.613, size: 3661, queued_as: 48dNzd59B4zKpG0, Subject: "Report domain: lehner-online.net Submitter: google.com Report-ID: 232563401636199173", From: <noreply-dmarc-support@google.com> (dkim:AUTHOR), helo=mail-qk1-f202.google.com, Tests: [DATE_IN_PAST_06_12=1.103,DKIMWL_WL_MED=-0.001,DKIM_SIGNED=0.1,DKIM_VALID=-0.1,DKIM_VALID_AU=-0.1,DKIM_VALID_EF=-0.1,ENV_AND_HDR_SPF_MATCH=-0.5,PYZOR_CHECK=1.985,RCVD_IN_DNSWL_NONE=-0.0001,RCVD_IN_MSPIKE_H2=-0.001,SPF_HELO_NONE=0.001,SPF_PASS=-0.001,TVD_SPACE_RATIO=0.001,USER_IN_DEF_DKIM_WL=-7.5,USER_IN_DEF_SPF_WL=-7.5], autolearn=no autolearn_force=no, autolearnscore=2.888, dkim_i=@google.com, dkim_sd=20161025:google.com, 1369 ms
Mar 12 10:38:05 mbox postfix/amavis/smtp[18413]: 48dNzc2B7QzKpFv: to=<postmaster@virmai.de>, relay=127.0.0.1[127.0.0.1]:10024, delay=1.5, delays=0.13/0.02/0.02/1.4, dsn=2.0.0, status=sent (250 2.0.0 from MTA(smtp:[127.0.0.1]:10025): 250 2.0.0 Ok: queued as 48dNzd59B4zKpG0)
Mar 12 10:38:05 mbox postfix/qmgr[797]: 48dNzc2B7QzKpFv: removed
Mar 12 10:38:05 mbox postfix/pipe[18421]: 48dNzd59B4zKpG0: to=<postmaster@virmai.de>, relay=dovecot, delay=0.09, delays=0.01/0.02/0/0.06, dsn=2.0.0, status=sent (delivered via dovecot service)
Mar 12 10:38:05 mbox postfix/qmgr[797]: 48dNzd59B4zKpG0: removed

But no mail appears in the mentioned postmaster-account.

Any hints on that?

Thx and Greets, Mike

----

Spider Email Archiver: On-Premises, lightweight email archiving software developed by iRedMail team. Supports Amazon S3 compatible storage and custom branding.

2 Reply by mike175de

  • mike175de
  • mike175de
  • Member
  • Offline
  • Registered: 2019-02-27
  • Posts: 77

Re: [Closed] google.com => An error occurred during object publishing

Additional infos:

The part

An error occurred during object publishing
Did not find mail method or part-reference!

seems to be a Sogo problem. Cause I am also in the users@sogo.nu-list and there was the same question asked:

dear all

when i open attachment at web client its shwos this message:

An error occurred during object publishing
did not find body part


but when i open the same message at roundcube its opened normally.

whats the problem in sogo in this case ?

best regards.

When I open one of those mails in Roundcube, I see a zip-file with this content:

<?xml version="1.0" encoding="UTF-8" ?>
<feedback>
  <report_metadata>
    <org_name>google.com</org_name>
    <email>noreply-dmarc-support@google.com</email>
    <extra_contact_info>https://support.google.com/a/answer/2466580</extra_contact_info>
    <report_id>232563401636199173</report_id>
    <date_range>
      <begin>1583884800</begin>
      <end>1583971199</end>
    </date_range>
  </report_metadata>
  <policy_published>
    <domain>lehner-online.net</domain>
    <adkim>r</adkim>
    <aspf>r</aspf>
    <p>none</p>
    <sp>none</sp>
    <pct>100</pct>
  </policy_published>
  <record>
    <row>
      <source_ip>167.86.81.230</source_ip>
      <count>1</count>
      <policy_evaluated>
        <disposition>none</disposition>
        <dkim>pass</dkim>
        <spf>pass</spf>
      </policy_evaluated>
    </row>
    <identifiers>
      <header_from>lehner-online.net</header_from>
    </identifiers>
    <auth_results>
      <dkim>
        <domain>lehner-online.net</domain>
        <result>pass</result>
        <selector>dkim</selector>
      </dkim>
      <spf>
        <domain>lehner-online.net</domain>
        <result>pass</result>
      </spf>
    </auth_results>
  </record>
  <record>
    <row>
      <source_ip>209.85.220.69</source_ip>
      <count>2</count>
      <policy_evaluated>
        <disposition>none</disposition>
        <dkim>fail</dkim>
        <spf>fail</spf>
        <reason>
          <type>local_policy</type>
          <comment>arc=pass</comment>
        </reason>
      </policy_evaluated>
    </row>
    <identifiers>
      <header_from>lehner-online.net</header_from>
    </identifiers>
    <auth_results>
      <dkim>
        <domain>davtreuchtlingen.de</domain>
        <result>pass</result>
        <selector>googledkim</selector>
      </dkim>
      <spf>
        <domain>davtreuchtlingen.de</domain>
        <result>pass</result>
      </spf>
    </auth_results>
  </record>
</feedback>

Does this help?

Greets mike

3 Reply by Cthulhu

  • Cthulhu
  • Member
  • Offline
  • Registered: 2019-06-04
  • Posts: 906

Re: [Closed] google.com => An error occurred during object publishing

Seems like an DMARC report.

v=DMARC1; p=none; rua=mailto:postmaster@virmai.de

If you send mails, servers check your DMARC policy, and then u get the DMARC reports to the rua.

The Problem seems:

<record>
    <row>
      <source_ip>209.85.220.69</source_ip>
      <count>2</count>
      <policy_evaluated>
        <disposition>none</disposition>
        <dkim>fail</dkim>
        <spf>fail</spf>
        <reason>
          <type>local_policy</type>
          <comment>arc=pass</comment>
        </reason>
      </policy_evaluated>
    </row>

This ip seems to fail both spf and dkim checks.

https://www.abuseipdb.com/check/209.85.220.69

Impressive, mail-sor-f69.google.com is the reverse PTR for this IP.

4 Reply by Cthulhu

  • Cthulhu
  • Member
  • Offline
  • Registered: 2019-06-04
  • Posts: 906

Re: [Closed] google.com => An error occurred during object publishing

davtreuchtlingen.de has no DMARC, so i guess you get this report due to invalid SPF:

https://www.spf-record.de/spf-lookup?do … tlingen.de

It is configured as softfail, but the sending IP and MX is excluded, i guess there is a misconfiguration for this domain.

5 Reply by mike175de

  • mike175de
  • mike175de
  • Member
  • Offline
  • Registered: 2019-02-27
  • Posts: 77

Re: [Closed] google.com => An error occurred during object publishing

Thx!

I already thought that my config is faulty. So the config of the domain davtreuchklingen.de is wrong. Much better for me ;o)

Maybe it is better to delete the rua-entry in the DMARC-settinig?

Greets