Topic: One user keeps getting kicked off
==== REQUIRED BASIC INFO OF YOUR IREDMAIL SERVER ====
- iRedMail version (check /etc/iredmail-release): 1.4.0
- Deployed with iRedMail Easy or the downloadable installer? Downloadable installer
- Linux/BSD distribution name and version: Ubuntu 18.04 LTS
- Store mail accounts in which backend (LDAP/MySQL/PGSQL): PGSQL
- Web server (Apache or Nginx): Nginx
- Manage mail accounts with iRedAdmin-Pro? Yes
- [IMPORTANT] Related original log or error message is required if you're experiencing an issue.
====
Good day,
I have one user, and only one from what I can gather, that this affects.
He will either create a new message or reply to a message and the message he is composing will go away, then his web browser will flash an error that reads:
"An error occurred!" in red letters in the title bar of the small box, then
"Your session is invalid or expired." in the text area.
When he clicks the "X" to close that box he can see his list of emails on the left side of the window, but the right side where he would normally compose the message is completely empty except for a small red banner at the bottom right that reads "Your session is invalid or expired." After a few seconds, that message goes away, too and he is left with a list of his emails on the left side of RoundCube but the large preview area just has a small, black square which has a blude triangle and exalamation point on the lower right corner.
The logs from the time when this happened read:
Oct 12 09:35:09 mx postfix/smtpd[3404]: NOQUEUE: reject: RCPT from unknown[194.58.102.135]: 450 4.7.1 <mail.lpmain.site>: Helo command rejected: Host not found; from=<info@lpmain.online> to=<OUR_USER> proto=ESMTP helo=<mail.lpmain.site>
Oct 12 09:37:40 mx amavis[31768]: (31768-18) Passed CLEAN {RelayedInbound}, [13.111.77.82]:42867 [13.111.77.82] ESMTP/ESMTP <bounce-955_HTML-31548485-306078-110007050-0@bounce.news.hrciconnect.com> -> <OUR_USER>, (ESMTPS://[13.111.77.82]:42867), Queue-ID: 4MnYcM4dbcz1JJWn, Message-ID: <90234be0-c271-4f98-9002-e34520a072d0@atl1s11mta138.xt.local>, mail_id: koc5gtM0Mz3k, b: 4a9mIYrdM, Hits: -1.748, size: 20303, queued_as: 4MnYcN2mB1z1JKfF, Subject: "Death by CAPA", From: <SOME_OTHER_USER> (dkim:AUTHOR), helo=mta2.news.hrciconnect.com, Tests: [BAYES_00=-1.9,DKIM_SIGNED=0.1,DKIM_VALID=-0.1,DKIM_VALID_AU=-0.1,HEADER_FROM_DIFFERENT_DOMAINS=0.25,HTML_MESSAGE=0.001,RCVD_IN_DNSWL_NONE=-0.0001,SPF_HELO_NONE=0.001,SPF_PASS=-0.001,URIBL_BLOCKED=0.001], autolearn=no autolearn_force=no, autolearnscore=0.152, dkim_i=SOME_OTHER_USERm, dkim_sd=11dkim1:A_THIRD_USER, 674 ms
Oct 12 09:37:40 mx postfix/amavis/smtp[3715]: 4MnYcM4dbcz1JJWn: to=<OUR_USER>, relay=127.0.0.1[127.0.0.1]:10024, delay=0.81, delays=0.13/0/0/0.67, dsn=2.0.0, status=sent (250 2.0.0 from MTA(smtp:[127.0.0.1]:10025): 250 2.0.0 Ok: queued as 4MnYcN2mB1z1JKfF)
Oct 12 09:37:40 mx postfix/pipe[4026]: 4MnYcN2mB1z1JKfF: to=<OUR_USER>, relay=dovecot, delay=0.06, delays=0.01/0.02/0/0.04, dsn=2.0.0, status=sent (delivered via dovecot service)
I have added space to make the lines easier to read, and I have redacted email addresses. The user is "OUR_USER".
He also sent me a picture of another message he got but did not tell me about. The error is:
REQUEST CHECK FAILED
For your protection, access to this resource is secured against CSRF. If you see this, you probably didn't log out before leaving the web application.
Human interaction is now required to continue.
Please contact your system-administrator
Like I said, this happens to only one user so far as I can tell. Any ideas on how to fix him?
Thanks
----
Spider Email Archiver: On-Premises, lightweight email archiving software developed by iRedMail team. Supports Amazon S3 compatible storage and custom branding.