1 (edited by Jochy 2022-03-18 00:32:13)

Topic: iRed mail silently "eats" up mails

==== REQUIRED BASIC INFO OF YOUR IREDMAIL SERVER ====
- iRedMail version (check /etc/iredmail-release):
1.5.1 MARIADB edition
- Deployed with iRedMail Easy or the downloadable installer? Easy
- Linux/BSD distribution name and version: AlmaLinux 8.5 (Arctic Sphynx)
- Store mail accounts in which backend (LDAP/MySQL/PGSQL): 10.3.28-MariaDB
- Web server (Apache or Nginx): nginx/1.14.1
- Manage mail accounts with iRedAdmin-Pro? No
- [IMPORTANT] Related original log or error message is required if you're experiencing an issue.
====

I can submit emails to iRed mail successfully. Postfix logs show everything is fine, it handles mails to dovecot service. Dovecot service does not log anything (or, at least, I have no clue where it logs too), mails never show up in my mailbox.

---------------------- This is a sniplet from /var/log/maillog:

Mar 17 17:09:20 email postfix/10025/smtpd[5085]: connect from localhost[127.0.0.1]
Mar 17 17:09:20 email postfix/10025/smtpd[5085]: discarding EHLO keywords: CHUNKING
Mar 17 17:09:20 email postfix/10025/smtpd[5085]: 4KKBsr2mSNzB3GLk: client=localhost[127.0.0.1]
Mar 17 17:09:20 email postfix/cleanup[5081]: 4KKBsr2mSNzB3GLk: message-id=<4KKBg16xQ9z6Tn@mail.iredmail.org>
Mar 17 17:09:20 email postfix/qmgr[1364]: 4KKBsr2mSNzB3GLk: from=<no-reply@forum.iredmail.org>, size=3220, nrcpt=1 (queue active)
Mar 17 17:09:20 email postfix/10025/smtpd[5085]: disconnect from localhost[127.0.0.1] ehlo=1 mail=1 rcpt=1 data=1 quit=1 commands=5
Mar 17 17:09:20 email amavis[2185]: (02185-04) Passed CLEAN {RelayedInbound}, [10.127.0.0]:60410 [139.162.146.87] ESMTP/ESMTP <no-reply@forum.iredmail.org> -> <buero@mydomain.myTLD>, (ESMTPS://45.56.127.226 < ESMTPSA://139.162.146.87), Queue-ID: 4KKBsY2yDLzB3GLj, Message-ID: <4KKBg16xQ9z6Tn@mail.iredmail.org>, mail_id: 7LRHDvr78dVv, b: DVG5T668N, Hits: -0.089, size: 2957, queued_as: 4KKBsr2mSNzB3GLk, Subject: "Welcome to iRedMail! (raw: =?UTF-8?B?V2VsY29tZSB0byBpUmVkTWFpbCE=?=)", From: <no-reply@forum.iredmail.org>, X-Mailer: PunBB_Mailer, helo=mail.mydomain.myTLD, Tests: [DKIM_SIGNED=0.1,DKIM_VALID=-0.1,DKIM_VALID_EF=-0.1,FROM_EXCESS_BASE64=0.001,T_SPF_HELO_TEMPERROR=0.01], autolearn=ham autolearn_force=no, autolearnscore=-0.089, dkim_i=@forum.iredmail.org, dkim_sd=dkim:iredmail.org, 14959 ms
Mar 17 17:09:20 email amavis[2185]: (02185-04) Passed CLEAN, <no-reply@forum.iredmail.org> -> <buero@mydomain.myTLD>, Hits: -0.089, tag=2, tag2=6.2, kill=6.9, queued_as: 4KKBsr2mSNzB3GLk, L/0/0/0
Mar 17 17:09:20 email postfix/amavis/smtp[5082]: 4KKBsY2yDLzB3GLj: to=<buero@mydomain.myTLD>, orig_to=<buero@mydomainlocal>, relay=127.0.0.1[127.0.0.1]:10024, delay=15, delays=0.37/0.01/0/15, dsn=2.0.0, status=sent (250 2.0.0 from MTA(smtp:[127.0.0.1]:10025): 250 2.0.0 Ok: queued as 4KKBsr2mSNzB3GLk)
Mar 17 17:09:20 email postfix/qmgr[1364]: 4KKBsY2yDLzB3GLj: removed
Mar 17 17:09:25 email postfix/pipe[5086]: 4KKBsr2mSNzB3GLk: to=<buero@mydomain.myTLD>, relay=dovecot, delay=5.1, delays=0.01/0.01/0/5.1, dsn=2.0.0, status=sent (delivered via dovecot service)
Mar 17 17:09:25 email postfix/qmgr[1364]: 4KKBsr2mSNzB3GLk: removed

-----------------------

I am using a mail server that actually forwards mails to the iRed mailserver. They reside on the same subnet. So all external emails go to name@mydomain.myTLD. This mail server forwards (some of these emails) to name@mydomain.local. iRed successfully receives these emails and sends them to name@mydomain.myTLD inbox. It worked fine, but out of the blue, it stopped working.

My knowledge about Linux is rather little. I mainly do networking.

----

Spider Email Archiver: On-Premises, lightweight email archiving software developed by iRedMail team. Supports Amazon S3 compatible storage and custom branding.

2

Re: iRed mail silently "eats" up mails

FYI: https://docs.iredmail.org/file.location … ovecot-log

3 (edited by Jochy 2022-03-18 18:44:10)

Re: iRed mail silently "eats" up mails

Thanks, Zhang. I investigated a little bit deeper. /var/log/devcot/lda.log showed all data successfully delivered into the inbox, so I looked into webmail (for the very first time, to be honest) and fond all my mails. I could also see these mails using IMAP. However, they didn't show up in Outlook, using Active Sync. So I investigated on the wrong side.

Mails are not eaten up, nor going to /dev/NULL, however, active sync didn't work. But now I found out: SOGo seems to be gone. So SOGo is my problem. If I surf to https://myserver.mydomain.myTLD/SOGo I get a 502, bad gateway. SOGO logs are empty, and there is no change if I reboot the box. SOGo seems to be gone completely. The last lines in /var/log/sogo/sogo.log are like that (I rebooted the box several times since then):

----------------------------

Mar 16 06:23:42 sogod [1835]: localhost "POST /SOGo/Microsoft-Server-ActiveSync?Cmd=Ping&User=johannes@mydomain.MyTLD&DeviceId=E3C61AA5524047098C026041FD80E8DD&DeviceType=WindowsOutlook15 HTTP/1.0" 200 13/1302 2817.777 - - -6500K - 16
Mar 16 06:23:42 sogod [1668]: <0x0x559c78294610[WOWatchDog]> Terminating with SIGINT or SIGTERM
Mar 16 06:23:42 sogod [1668]: <0x0x559c7836c2d0[WOWatchDogChild]> sending terminate signal to pid 1835
2022-03-16 06:23:42.105 sogod[1835:1835] Forcing termination of EAS loop.
Mar 16 06:23:42 sogod [1668]: <0x0x559c78294610[WOWatchDog]> Terminating with SIGINT or SIGTERM
Mar 16 06:23:42 sogod [1668]: <0x0x559c7836a200[WOWatchDogChild]> child 6240 exited
Mar 16 06:23:42 sogod [7242]: localhost "POST /SOGo/Microsoft-Server-ActiveSync?Cmd=Ping&User=buero@mydomain.MyTLD&DeviceId=023A8A74E2264515AFDD94C663E86F05&DeviceType=WindowsOutlook15 HTTP/1.0" 200 13/581 849.535 - - -81452K - 15
Mar 16 06:23:42 sogod [1668]: <0x0x559c78294610[WOWatchDog]> Terminating with SIGINT or SIGTERM
Mar 16 06:23:42 sogod [1668]: <0x0x559c7836b530[WOWatchDogChild]> sending terminate signal to pid 7242
2022-03-16 06:23:42.272 sogod[7242:7242] Forcing termination of EAS loop.
Mar 16 06:23:42 sogod [1668]: <0x0x559c78294610[WOWatchDog]> Terminating with SIGINT or SIGTERM
Mar 16 06:23:42 sogod [1668]: <0x0x559c78294610[WOWatchDog]> Terminating with SIGINT or SIGTERM
Mar 16 06:23:42 sogod [1668]: <0x0x559c78294610[WOWatchDog]> Terminating with SIGINT or SIGTERM
Mar 16 06:23:42 sogod [1668]: <0x0x559c78294610[WOWatchDog]> Terminating with SIGINT or SIGTERM
Mar 16 06:23:42 sogod [1668]: <0x0x559c78294610[WOWatchDog]> Terminating with SIGINT or SIGTERM
Mar 16 06:23:42 sogod [1668]: <0x0x559c78294610[WOWatchDog]> Terminating with SIGINT or SIGTERM
Mar 16 06:23:42 sogod [1668]: <0x0x559c78294610[WOWatchDog]> Terminating with SIGINT or SIGTERM
Mar 16 06:23:42 sogod [1668]: <0x0x559c78294610[WOWatchDog]> Terminating with SIGINT or SIGTERM
Mar 16 06:23:42 sogod [1668]: <0x0x559c78294610[WOWatchDog]> Terminating with SIGINT or SIGTERM
Mar 16 06:23:42 sogod [1668]: <0x0x559c7836b530[WOWatchDogChild]> child 7242 exited
Mar 16 06:23:42 sogod [1668]: <0x0x559c78294610[WOWatchDog]> Terminating with SIGINT or SIGTERM
Mar 16 06:23:42 sogod [1668]: <0x0x559c7836c2d0[WOWatchDogChild]> child 1835 exited
Mar 16 06:23:43 sogod [1668]: <0x0x559c78294610[WOWatchDog]> Terminating with SIGINT or SIGTERM
Mar 16 06:23:43 sogod [1668]: <0x0x559c78294610[WOWatchDog]> Terminating with SIGINT or SIGTERM
Mar 16 06:23:43 sogod [1668]: <0x0x559c7836aa30[WOWatchDogChild]> child 6939 exited
Mar 16 06:23:43 sogod [1668]: <0x0x559c78294610[WOWatchDog]> all children exited. We now terminate.

4

Re: iRed mail silently "eats" up mails

I got a little bit farer: SOGo is missing at all. Don't know how it vanished in the haze. That's odd?

5

Re: iRed mail silently "eats" up mails

Do you have a guide on how to reinstall SOGo? I just found this one https://docs.iredmail.org/sogo-centos-6-mysql.html, but it's outdated.
Thank you so very much for your kind help!