Hi,
Not yet, it's a new server only prepared to work.
I changed my ldap server to localhost and it fixed the problem, but that's not what I mean.
I logged that iredapd crashed after querying ldap and did'n get answer.
After setup is complete, this server will have approximately 8k accounts.
Can you suggest how ldap should be set up in this case? What else should I pay attention to?

Kind regards
Piotr

I turned on debugging and after that I noticed that sometimes iredapd makes a query to the LDAP server and doesn't get a response. After that, iredapd is dead and there is no response when connecting to 127.0.0.1:7777.

For now I have solved the problem and am using a local LDAP server. It's just a workaround.

But there is one question more, maybe it is related but I am not sure.

I would like to separate the SMTP server from the WEBMAIL server. And I am having trouble connecting remotely to managesieve-login daemon on iredmail server on tcp port 4190 remotely. Other connections (tcp 143, tcp 587) works fine.
I changed the configuration in /etc/dovecot/dovecot.conf to listen on all interfaces:

service managesieve-login {
    inet_listener sieve {
#        # Listen on localhost (ipv4)
        address = 0.0.0.0
        port = 4190
    }
}

And then managesieve-login listens correctly:
root@mail:~# netstat -tulnp | grep dove                   
tcp        0      0 127.0.0.1:24242         0.0.0.0:*               LISTEN      7090/dovecot       
tcp        0      0 127.0.0.1:12340         0.0.0.0:*               LISTEN      7090/dovecot       
tcp        0      0 127.0.0.1:24            0.0.0.0:*               LISTEN      7090/dovecot       
tcp        0      0 0.0.0.0:4190            0.0.0.0:*               LISTEN      7090/dovecot       
tcp        0      0 0.0.0.0:993             0.0.0.0:*               LISTEN      7090/dovecot       
tcp        0      0 0.0.0.0:995             0.0.0.0:*               LISTEN      7090/dovecot       
tcp        0      0 0.0.0.0:110             0.0.0.0:*               LISTEN      7090/dovecot       
tcp        0      0 0.0.0.0:143             0.0.0.0:*               LISTEN      7090/dovecot       
tcp6       0      0 :::993                  :::*                    LISTEN      7090/dovecot       
tcp6       0      0 :::995                  :::*                    LISTEN      7090/dovecot       
tcp6       0      0 :::110                  :::*                    LISTEN      7090/dovecot       
tcp6       0      0 :::143                  :::*                    LISTEN      7090/dovecot       

I'm using shorewall to manage iptables and this connection is permitted but when I'm trying to connect from remote serwer (in the same LAN) thers is no answer.

# connection from x.x.x.57 server
root@webmail:~# telnet x.x.x.55 4190
Trying x.x.x.55...
^C

#on x.x.x.55 server
root@mail:~# tcpdump -nn -n  port 4190             
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on ens192, link-type EN10MB (Ethernet), capture size 262144 bytes
15:39:51.889668 IP x.x.x.57.40178 > x.x.x.55.4190: Flags [S], seq 917008708, win 64240, options [mss 1460,sackOK,TS val 1360367981 ecr 0,nop,wscale 7], length 0
15:39:52.901317 IP x.x.x.57.40178 > x.x.x.55.4190: Flags [S], seq 917008708, win 64240, options [mss 1460,sackOK,TS val 1360368992 ecr 0,nop,wscale 7], length 0
15:39:54.917289 IP x.x.x.57.40178 > x.x.x.55.4190: Flags [S], seq 917008708, win 64240, options [mss 1460,sackOK,TS val 1360371008 ecr 0,nop,wscale 7], length 0

no reply and no other information in /var/log/dovecot/sieve.log

But there is one interesting thing, if I configure managesieve-login to listen on port 80, the connection works locally and remotely. Of course, nginx is then stopped for a while.

#from 57 server
pit@webmail:~$ telnet x.x.x.55 80
Trying x.x.x.55...
Connected to x.x.x.55.
Escape character is '^]'.
"IMPLEMENTATION" "Dovecot (Debian) Pigeonhole"
"SIEVE" "fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext"
"NOTIFY" "mailto"
"SASL" ""
"STARTTLS"
"VERSION" "1.0"
OK "Dovecot (Debian) ready."
^]
telnet> quit
Connection closed.

It was tested on two servers with iRedmail 1.4 and iRedAdmin 4.9 LDAP with debian 10.10
But it is working fine on server with iRedmail 1.3.2  iRedAdmin 4.8 SQL with debian 10.10

I tried the DNAT rules, stream redirect in nginx but always without luck.
What I can't see ??!!

Regards
Piotr