Miscellaneous first checks
Affected Component(s)
fail2ban inside docker-mailserver
What happened and when does this occur?
In the fail2ban log of docker-mailserver I see lots of messages
2022-06-10 11:13:28,342 fail2ban.actions [1173]: ERROR Failed to execute ban jail 'dovecot' action 'nftables-allports' info 'ActionInfo({'ip': '36.137.157.218', 'family': 'inet4', 'fid': <function Actions.ActionInfo.<lambda> at 0x7f9b0dc8cb80>, 'raw-ticket': <function Actions.ActionInfo.<lambda> at 0x7f9b0dc8d280>})': Error starting action Jail('dovecot')/nftables-allports: 'Script error'
2022-06-10 11:13:30,005 fail2ban.actions [1173]: ERROR Failed to execute ban jail 'postfix-sasl' action 'nftables-allports' info 'ActionInfo({'ip': '36.137.157.218', 'family': 'inet4', 'fid': <function Actions.ActionInfo.<lambda> at 0x7f9b0dc8cb80>, 'raw-ticket': <function Actions.ActionInfo.<lambda> at 0x7f9b0dc8d280>})': Error starting action Jail('postfix-sasl')/nftables-allports: 'Script error'
The fail2ban jails of dovecot and postfix-sasl are empty, no bans have taken place
What did you expect to happen?
The banned IPs should show up when listing the bans with 'setup.sh fail2ban'
How do we replicate the issue?
1. Install mailserver v11.0.0 via docker/docker compose
2. Try unauthorized access to postfix-sasl or dovecot
3.
...
DMS version
v11.0.0
What operating system is DMS running on?
Linux
What instruction set architecture is DMS running on?
x86_64 / AMD64
What container orchestration tool are you using?
Docker Compose
docker-compose.yml
services:
cert-renewer-traefik:
image: youtous/mailserver-traefik:latest
volumes:
- /var/run/docker.sock:/var/run/docker.sock
- ../traefik2/acme.json:/tmp/traefik/acme.json:ro # link traefik
- ./ssl:/tmp/ssl:rw
environment:
- TRAEFIK_VERSION=2
- CERTS_SOURCE=file
- DOMAINS=mail.markus-spring.de
mailserver:
image: docker.io/mailserver/docker-mailserver:latest
container_name: mailserver-docker-mailserver
hostname: mail
domainname: markus-spring.de
env_file: mailserver.env
ports:
- "25:25" # SMTP (explicit TLS => STARTTLS)
- "143:143" # IMAP4 (explicit TLS => STARTTLS)
- "465:465" # ESMTP (implicit TLS)
- "587:587" # ESMTP (explicit TLS => STARTTLS)
- "993:993" # IMAP4 (implicit TLS)
volumes:
- ./docker-data/dms/mail-data/:/var/mail/
- ./docker-data/dms/mail-state/:/var/mail-state/
- ./docker-data/dms/mail-logs/:/var/log/mail/
- ./docker-data/dms/config/:/tmp/docker-mailserver/
- /etc/localtime:/etc/localtime:ro
- ./ssl:/var/mail-state/manual-ssl
restart: always
stop_grace_period: 1m
cap_add:
- NET_ADMIN
- SYS_PTRACE
labels:
- "mailserver-traefik.renew.domain=mail.markus-spring.de" # tag the service
- "traefik.enable=true" # use traefik v2 for certificate generation
- "traefik.port=443" # dummy port, required generating certs with traefik
- "traefik.http.routers.mail.rule=Host(`mail.markus-spring.de`,`mail.lebenswertes-bad-reichenhall.de`,`mail.aberdoch.de`)"
- "traefik.http.routers.mail.entrypoints=websecure"
environment:
- SSL_TYPE=manual # enable SSL on the mailserver
- SSL_CERT_PATH=/var/mail-state/manual-ssl/markus-spring.de/fullchain.pem
- SSL_KEY_PATH=/var/mail-state/manual-ssl/markus-spring.de/privkey.pem
- ENABLE_FAIL2BAN=1
- ENABLE_CLAMAV=1
rainloop:
image: hardware/rainloop:latest
container_name: rainloop
volumes:
- ./webmail:/rainloop/data
depends_on:
- mailserver
environment:
- LOG_TO_STDOUT=true
labels:
- traefik.enable=true
- "traefik.docker.network=proxy"
- traefik.http.routers.webmail.rule=Host(`webmail.markus-spring.de`)
- traefik.http.routers.webmail.tls.certresolver=cloudflare
- traefik.http.routers.webmail.entrypoints=websecure
networks:
- proxy
- default
networks:
proxy:
external: true
Relevant log output
Container mailserver-cert-renewer-traefik-1 Created
Container mailserver-docker-mailserver Created
Container rainloop Created
Attaching to mailserver-cert-renewer-traefik-1, mailserver-docker-mailserver, rainloop
mailserver-cert-renewer-traefik-1 | [INFO] Running on a regular host.
mailserver-cert-renewer-traefik-1 | [INFO] 1 domain(s) to watch: mail.markus-spring.de
mailserver-cert-renewer-traefik-1 | [INFO] Configured to automatically push existing certificates in containers every 15m (PUSH_PERIOD=15m).
mailserver-cert-renewer-traefik-1 | [INFO] file selected as certificates source
mailserver-cert-renewer-traefik-1 | [INFO] Traefik v2 selected as target
mailserver-cert-renewer-traefik-1 |
mailserver-cert-renewer-traefik-1 | [INFO] certificate for mail.markus-spring.de not yet generated, skipping push...
mailserver-cert-renewer-traefik-1 |
rainloop | [INFO] Logging to stdout activated
mailserver-docker-mailserver | [ INF ] Welcome to docker-mailserver 11.0.0
mailserver-docker-mailserver | [ INF ] Initializing setup
mailserver-docker-mailserver | [ DEBUG ] Registering functions
mailserver-docker-mailserver | [ INF ] Checking configuration
mailserver-docker-mailserver | [ DEBUG ] Checking that hostname/domainname is provided or overridden
mailserver-docker-mailserver | [ DEBUG ] Domain has been set to markus-spring.de
mailserver-docker-mailserver | [ DEBUG ] Hostname has been set to mail.markus-spring.de
mailserver-docker-mailserver | [ INF ] Configuring mail server
mailserver-docker-mailserver | [ DEBUG ] Setting up default variables
mailserver-docker-mailserver | [ DEBUG ] Setting file and directory permissions
mailserver-docker-mailserver | [ DEBUG ] Setting timezone to 'DE'
mailserver-docker-mailserver | [ WARNING ] Cannot find timezone 'DE'
mailserver-docker-mailserver | [ DEBUG ] Setting up Dovecot
mailserver-docker-mailserver | [ DEBUG ] Spam messages will be moved to the Junk folder
mailserver-docker-mailserver | [ DEBUG ] Setting up Dovecot dhparam
mailserver-docker-mailserver | [ DEBUG ] Setting up Dovecot quota
mailserver-docker-mailserver | [ DEBUG ] Setting up Dovecot Local User
mailserver-docker-mailserver | [ DEBUG ] Creating user 'owner' for domain 'markus-spring.de'
mailserver-docker-mailserver | [ DEBUG ] Creating user 'mail' for domain 'markus-spring.de'
mailserver-docker-mailserver | [ DEBUG ] Creating user 'mail' for domain 'lebenswertes-bad-reichenhall.de'
mailserver-docker-mailserver | [ DEBUG ] Creating user 'fgrimagepost' for domain 'aberdoch.de'
mailserver-docker-mailserver | [ DEBUG ] Creating user 'mtb' for domain 'aberdoch.de'
mailserver-docker-mailserver | [ DEBUG ] Creating user 'gis' for domain 'aberdoch.de'
mailserver-docker-mailserver | [ DEBUG ] Creating user 'krempel' for domain 'aberdoch.de'
mailserver-docker-mailserver | [ DEBUG ] Creating user 'wordpress' for domain 'markus-spring.de'
mailserver-docker-mailserver | [ DEBUG ] Alias '[email protected]' is non-local (or mapped to a non-existing account) and will not be added to Dovecot's userdb
mailserver-docker-mailserver | [ DEBUG ] Adding alias '[email protected]' for user '[email protected]' to Dovecot's userdb
mailserver-docker-mailserver | [ DEBUG ] Adding alias '[email protected]' for user '[email protected]' to Dovecot's userdb
mailserver-docker-mailserver | [ DEBUG ] Alias '[email protected]' is non-local (or mapped to a non-existing account) and will not be added to Dovecot's userdb
mailserver-docker-mailserver | [ DEBUG ] Alias '[email protected]' is non-local (or mapped to a non-existing account) and will not be added to Dovecot's userdb
mailserver-docker-mailserver | [ DEBUG ] Alias '[email protected]' is non-local (or mapped to a non-existing account) and will not be added to Dovecot's userdb
mailserver-docker-mailserver | [ DEBUG ] Alias '[email protected]' is non-local (or mapped to a non-existing account) and will not be added to Dovecot's userdb
mailserver-docker-mailserver | [ DEBUG ] Adding alias '[email protected]' for user '[email protected]' to Dovecot's userdb
mailserver-docker-mailserver | [ DEBUG ] Adding alias '[email protected]' for user '[email protected]' to Dovecot's userdb
mailserver-docker-mailserver | [ DEBUG ] Adding alias '[email protected]' for user '[email protected]' to Dovecot's userdb
mailserver-docker-mailserver | [ DEBUG ] Adding alias '[email protected]' for user '[email protected]' to Dovecot's userdb
mailserver-docker-mailserver | [ DEBUG ] Adding alias '[email protected]' for user '[email protected]' to Dovecot's userdb
mailserver-docker-mailserver | [ DEBUG ] Adding alias '[email protected]' for user '[email protected]' to Dovecot's userdb
mailserver-docker-mailserver | [ DEBUG ] Adding alias '[email protected]' for user '[email protected]' to Dovecot's userdb
mailserver-docker-mailserver | [ WARNING ] Alias '[email protected]' will not be added to '/etc/dovecot/userdb' twice
mailserver-docker-mailserver | [ DEBUG ] Adding alias '[email protected]' for user '[email protected]' to Dovecot's userdb
mailserver-docker-mailserver | [ WARNING ] Alias '[email protected]' will not be added to '/etc/dovecot/userdb' twice
mailserver-docker-mailserver | [ DEBUG ] Adding alias '[email protected]' for user '[email protected]' to Dovecot's userdb
mailserver-docker-mailserver | [ WARNING ] Alias '[email protected]' will not be added to '/etc/dovecot/userdb' twice
mailserver-docker-mailserver | [ DEBUG ] Adding alias '@aberdoch.de' for user '[email protected]' to Dovecot's userdb
mailserver-docker-mailserver | [ WARNING ] Alias '@aberdoch.de' will not be added to '/etc/dovecot/userdb' twice
mailserver-docker-mailserver | [ DEBUG ] Adding alias '@mail.markus-spring.de' for user '[email protected]' to Dovecot's userdb
mailserver-docker-mailserver | [ DEBUG ] Adding alias '@lebenswertes-bad-reichenhall.de' for user '[email protected]' to Dovecot's userdb
mailserver-docker-mailserver | [ WARNING ] Alias '@lebenswertes-bad-reichenhall.de' will not be added to '/etc/dovecot/userdb' twice
mailserver-docker-mailserver | [ DEBUG ] Setting up Fail2Ban
mailserver-docker-mailserver | [ DEBUG ] Disabling postfix DNS block list (zen.spamhaus.org)
mailserver-docker-mailserver | [ DEBUG ] Disabling postscreen DNS block lists
mailserver-docker-mailserver | [ DEBUG ] Setting up DKIM
mailserver-docker-mailserver | Nameservers 127.0.0.11
mailserver-docker-mailserver | [ DEBUG ] Setting up SSL
mailserver-docker-mailserver | [ DEBUG ] TLS configured with 'modern' ciphers
mailserver-docker-mailserver | [ DEBUG ] Configuring certificates using key /var/mail-state/manual-ssl/markus-spring.de/privkey.pem and cert /var/mail-state/manual-ssl/markus-spring.de/fullchain.pem
mailserver-docker-mailserver | [ DEBUG ] Setting up PERMIT_DOCKER option
mailserver-docker-mailserver | [ DEBUG ] Setting up mailname and creating '/etc/mailname'
mailserver-docker-mailserver | [ DEBUG ] Setting up Amavis
mailserver-docker-mailserver | [ DEBUG ] Setting up DMARC
mailserver-docker-mailserver | [ DEBUG ] Applying hostname and domainname to Postfix
mailserver-docker-mailserver | [ DEBUG ] Applying hostname to Dovecot
mailserver-docker-mailserver | [ DEBUG ] Setting up Postfix SASL Password
mailserver-docker-mailserver | [ DEBUG ] SASL_PASSWD was not provided - '/etc/postfix/sasl_passwd' not created
mailserver-docker-mailserver | [ DEBUG ] Setting up Security Stack
mailserver-docker-mailserver | [ DEBUG ] Enabling and configuring SpamAssassin
mailserver-docker-mailserver | [ DEBUG ] Enabling ClamAV
mailserver-docker-mailserver | [ DEBUG ] Enabling Fail2Ban
mailserver-docker-mailserver | [ DEBUG ] Enabling Amavis
mailserver-docker-mailserver | [ DEBUG ] Setting up Postfix aliases
mailserver-docker-mailserver | [ DEBUG ] Setting up Postfix vhost
mailserver-docker-mailserver | [ DEBUG ] Setting up Postfix dhparam
mailserver-docker-mailserver | [ DEBUG ] Configuring Postscreen
mailserver-docker-mailserver | [ DEBUG ] Setting up Postfix Relay Hosts
mailserver-docker-mailserver | [ DEBUG ] Setting up logrotate
mailserver-docker-mailserver | [ DEBUG ] Enabling Postfix log summary reports with recipient '[email protected]'
mailserver-docker-mailserver | [ DEBUG ] Enabling logwatch reports with recipient '[email protected]'
mailserver-docker-mailserver | [ DEBUG ] Setting up configuration checksum file
mailserver-docker-mailserver | [ DEBUG ] Printing environment variables. Make sure no sensitive data is copied.
mailserver-docker-mailserver | AMAVIS_LOGLEVEL='0'
mailserver-docker-mailserver | CLAMAV_MESSAGE_SIZE_LIMIT='25M'
mailserver-docker-mailserver | DEFAULT_RELAY_HOST=''
mailserver-docker-mailserver | DOVECOT_INET_PROTOCOLS='all'
mailserver-docker-mailserver | DOVECOT_MAILBOX_FORMAT='maildir'
mailserver-docker-mailserver | DOVECOT_TLS='no'
mailserver-docker-mailserver | ENABLE_AMAVIS='1'
mailserver-docker-mailserver | ENABLE_CLAMAV='1'
mailserver-docker-mailserver | ENABLE_DNSBL='0'
mailserver-docker-mailserver | ENABLE_FAIL2BAN='1'
mailserver-docker-mailserver | ENABLE_FETCHMAIL='0'
mailserver-docker-mailserver | ENABLE_LDAP='0'
mailserver-docker-mailserver | ENABLE_MANAGESIEVE='1'
mailserver-docker-mailserver | ENABLE_POP3='0'
mailserver-docker-mailserver | ENABLE_POSTGREY='0'
mailserver-docker-mailserver | ENABLE_QUOTAS='1'
mailserver-docker-mailserver | ENABLE_SASLAUTHD='0'
mailserver-docker-mailserver | ENABLE_SPAMASSASSIN='1'
mailserver-docker-mailserver | ENABLE_SPAMASSASSIN_KAM='0'
mailserver-docker-mailserver | ENABLE_SRS='0'
mailserver-docker-mailserver | ENABLE_UPDATE_CHECK='1'
mailserver-docker-mailserver | FAIL2BAN_BLOCKTYPE='drop'
mailserver-docker-mailserver | FETCHMAIL_PARALLEL='0'
mailserver-docker-mailserver | FETCHMAIL_POLL='300'
mailserver-docker-mailserver | LDAP_START_TLS='no'
mailserver-docker-mailserver | LOGROTATE_INTERVAL='weekly'
mailserver-docker-mailserver | LOGWATCH_INTERVAL='daily'
mailserver-docker-mailserver | LOGWATCH_RECIPIENT='[email protected]'
mailserver-docker-mailserver | LOGWATCH_SENDER='[email protected]'
mailserver-docker-mailserver | LOG_LEVEL='debug'
mailserver-docker-mailserver | MOVE_SPAM_TO_JUNK='1'
mailserver-docker-mailserver | NETWORK_INTERFACE='eth0'
mailserver-docker-mailserver | ONE_DIR='1'
mailserver-docker-mailserver | OVERRIDE_HOSTNAME=''
mailserver-docker-mailserver | PERMIT_DOCKER='none'
mailserver-docker-mailserver | PFLOGSUMM_RECIPIENT='[email protected]'
mailserver-docker-mailserver | PFLOGSUMM_SENDER='[email protected]'
mailserver-docker-mailserver | PFLOGSUMM_TRIGGER='logrotate'
mailserver-docker-mailserver | POSTFIX_INET_PROTOCOLS='all'
mailserver-docker-mailserver | POSTFIX_MAILBOX_SIZE_LIMIT='0'
mailserver-docker-mailserver | POSTFIX_MESSAGE_SIZE_LIMIT='10240000'
mailserver-docker-mailserver | POSTGREY_AUTO_WHITELIST_CLIENTS='5'
mailserver-docker-mailserver | POSTGREY_DELAY='300'
mailserver-docker-mailserver | POSTGREY_MAX_AGE='35'
mailserver-docker-mailserver | POSTGREY_TEXT='Delayed by Postgrey'
mailserver-docker-mailserver | POSTMASTER_ADDRESS='[email protected]'
mailserver-docker-mailserver | POSTSCREEN_ACTION='enforce'
mailserver-docker-mailserver | RELAY_HOST=''
mailserver-docker-mailserver | REPORT_RECIPIENT='[email protected]'
mailserver-docker-mailserver | REPORT_SENDER='[email protected]'
mailserver-docker-mailserver | SA_KILL='6.31'
mailserver-docker-mailserver | SA_SPAM_SUBJECT='***SPAM*****'
mailserver-docker-mailserver | SA_TAG2='6.31'
mailserver-docker-mailserver | SA_TAG='2.0'
mailserver-docker-mailserver | SMTP_ONLY='0'
mailserver-docker-mailserver | SPAMASSASSIN_SPAM_TO_INBOX='1'
mailserver-docker-mailserver | SPOOF_PROTECTION='1'
mailserver-docker-mailserver | SRS_SENDER_CLASSES='envelope_sender'
mailserver-docker-mailserver | SSL_TYPE='manual'
mailserver-docker-mailserver | SUPERVISOR_LOGLEVEL='warn'
mailserver-docker-mailserver | TLS_LEVEL='modern'
mailserver-docker-mailserver | TZ='DE'
mailserver-docker-mailserver | UPDATE_CHECK_INTERVAL='1d'
mailserver-docker-mailserver | VIRUSMAILS_DELETE_DELAY='7'
mailserver-docker-mailserver | [ INF ] Post-configuration checks
mailserver-docker-mailserver | [ DEBUG ] Checking /var/mail permissions
mailserver-docker-mailserver | [ INF ] Starting miscellaneous tasks
mailserver-docker-mailserver | [ DEBUG ] Consolidating all state onto /var/mail-state
mailserver-docker-mailserver | [ INF ] Starting daemons
mailserver-docker-mailserver | [ DEBUG ] Starting cron
mailserver-docker-mailserver | [ DEBUG ] Starting rsyslog
mailserver-docker-mailserver | [ DEBUG ] Starting dovecot
mailserver-docker-mailserver | [ DEBUG ] Starting update-check
mailserver-docker-mailserver | [ DEBUG ] Starting opendkim
mailserver-docker-mailserver | [ DEBUG ] Starting opendmarc
mailserver-docker-mailserver | [ DEBUG ] Starting postfix
mailserver-docker-mailserver | [ DEBUG ] Starting fail2ban
mailserver-docker-mailserver | [ DEBUG ] Starting clamav
mailserver-docker-mailserver | [ DEBUG ] Starting changedetector
mailserver-docker-mailserver | [ DEBUG ] Starting amavis
mailserver-docker-mailserver | [ INF ] mail.markus-spring.de is up and running
mailserver-docker-mailserver | Jun 11 12:42:30 mail amavis[1449]: starting. /usr/sbin/amavisd-new at mail.markus-spring.de amavisd-new-2.11.1 (20181009), Unicode aware, LC_CTYPE="C.UTF-8"
mailserver-docker-mailserver | Jun 11 12:42:30 mail amavis[1449]: perl=5.032001, user=, EUID: 112 (112); group=, EGID: 114 114 (114 114)
mailserver-docker-mailserver | Jun 11 12:42:31 mail amavis[1449]: Net::Server: Group Not Defined. Defaulting to EGID '114 114'
mailserver-docker-mailserver | Jun 11 12:42:31 mail amavis[1449]: Net::Server: User Not Defined. Defaulting to EUID '112'
mailserver-docker-mailserver | Jun 11 12:42:31 mail amavis[1449]: No ext program for .zoo, tried: zoo
mailserver-docker-mailserver | Jun 11 12:42:31 mail amavis[1449]: No ext program for .doc, tried: ripole
mailserver-docker-mailserver | Jun 11 12:42:31 mail amavis[1449]: No decoder for .F
mailserver-docker-mailserver | Jun 11 12:42:31 mail amavis[1449]: No decoder for .doc
mailserver-docker-mailserver | Jun 11 12:42:31 mail amavis[1449]: No decoder for .zoo
mailserver-docker-mailserver | Jun 11 12:42:31 mail amavis[1449]: Using primary internal av scanner code for ClamAV-clamd
mailserver-docker-mailserver | Jun 11 12:42:31 mail amavis[1449]: Found secondary av scanner ClamAV-clamscan at /usr/bin/clamscan
mailserver-docker-mailserver | Jun 11 12:42:33 mail postfix/master[2389]: daemon started -- version 3.5.6, configuration /etc/postfix
Other relevant information
The last logwatch mail said:
################### Logwatch 7.5.5 (01/22/21) ####################
Processing Initiated: Sat Jun 11 08:29:01 2022
Date Range Processed: yesterday
( 2022-Jun-10 )
Period is day.
Detail Level of Output: 0
Type of Output/Format: mail / text
Logfiles for Host: mail.markus-spring.de
##################################################################
--------------------- Amavisd-new Begin ------------------------
6 Total messages scanned ------------------ 100.00%
339.777K Total bytes scanned 347,932
======== ==================================================
6 Passed ---------------------------------- 100.00%
6 Clean passed 100.00%
======== ==================================================
6 Ham ------------------------------------- 100.00%
6 Clean passed 100.00%
======== ==================================================
---------------------- Amavisd-new End -------------------------
--------------------- clam-update Begin ------------------------
Local version: 0.103.5 Recommended version: 0.103.6
Your ClamAV installation is OUTDATED!
---------------------- clam-update End -------------------------
--------------------- Dovecot Begin ------------------------
Dovecot Deliveries: 4
Dovecot IMAP and POP3 Successful Logins: 190
Dovecot disconnects: 128 Total
Unknown users blocked: 6 Total
**Unmatched Entries**
dovecot: auth: passwd-file([email protected]): unknown user : 2 Time(s)
dovecot: auth: passwd-file([email protected]): unknown user : 8 Time(s)
dovecot: auth: passwd-file([email protected]): unknown user : 4 Time(s)
---------------------- Dovecot End -------------------------
--------------------- fail2ban-messages Begin ------------------------
Banned services with Fail2Ban: Bans:Unbans
custom: [ 1:0 ]
dovecot: [ 1:1 ]
postfix: [ 0:0 ]
postfix-sasl: [ 1:1 ]
** ERRORS **
7f9b0d7c3960 -- exec: nft add table inet f2b-table: 1 Time(s)
7f9b0d7c3960 -- stderr: ' ...: 1 Time(s)
7f9b0d7c3960 -- stderr: 'Error: Could not process rule: Numerical result ou...: 1 Time(s)
7f9b0d7c3960 -- stderr: 'Error: No such file or directory': 1 Time(s)
7f9b0d7c3960 -- stderr: '^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^...: 1 Time(s)
7f9b0d7c3960 -- stderr: 'add rule inet f2b-table f2b-chain meta l4proto { t...: 1 Time(s)
7f9b0d7c3960 -- stderr: 'add set inet f2b-table addr-set-postfix-sasl { typ...: 1 Time(s)
7f9b0d7c3d50 -- exec: nft add table inet f2b-table: 1 Time(s)
7f9b0d7c3d50 -- stderr: ' ...: 1 Time(s)
7f9b0d7c3d50 -- stderr: 'Error: Could not process rule: Numerical result ou...: 1 Time(s)
7f9b0d7c3d50 -- stderr: 'Error: No such file or directory': 1 Time(s)
7f9b0d7c3d50 -- stderr: '^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^...: 1 Time(s)
7f9b0d7c3d50 -- stderr: 'add rule inet f2b-table f2b-chain meta l4proto { t...: 1 Time(s)
7f9b0d7c3d50 -- stderr: 'add set inet f2b-table addr-set-dovecot { type ipv...: 1 Time(s)
Failed to execute ban jail 'dovecot' action 'nftables-allports' info 'Actio...: 1 Time(s)
Failed to execute ban jail 'postfix-sasl' action 'nftables-allports' info '...: 1 Time(s)
---------------------- fail2ban-messages End -------------------------
--------------------- Postfix Begin ------------------------
6 SASL authentication failed 6
8 Miscellaneous warnings 8
694.623K Bytes accepted 711,294
505.250K Bytes sent via SMTP 517,376
189.373K Bytes sent via LMTP 193,918
======== ==================================================
14 Accepted 1.23%
1124 Rejected 98.77%
-------- --------------------------------------------------
1138 Total 100.00%
======== ==================================================
1114 5xx Reject relay denied 99.11%
8 5xx Reject unknown user 0.71%
2 5xx Reject recipient address 0.18%
-------- --------------------------------------------------
1124 Total 5xx Rejects 100.00%
======== ==================================================
430 Connections 430
26 Connections lost (inbound) 26
432 Disconnections 432
14 Removed from queue 14
10 Sent via SMTP 10
4 Sent via LMTP 4
1668 Postscreen 1,668
14 Policy SPF 14
2 Timeouts (inbound) 2
8 Hostname verification errors (FCRDNS) 8
386 TLS connections (server) 386
4 TLS connections (client) 4
**Unmatched Entries**
2 Jun 10 17:09:00 mail policyd-spf[8310]: 550 5.7.23 Message rejected due to: SPF fail - not authorized.
---------------------- Postfix End -------------------------
--------------------- Disk Space Begin ------------------------
Filesystem Size Used Avail Use% Mounted on
overlay 493G 54G 419G 12% /
/dev/ploop37930p1 493G 54G 419G 12% /usr/share/zoneinfo/Etc/UTC
---------------------- Disk Space End -------------------------
###################### Logwatch End #########################
What level of experience do you have with Docker and mail servers?
Code of conduct
Improvements to this form?
No response
Miscellaneous first checks
Affected Component(s)
fail2ban inside docker-mailserver
What happened and when does this occur?
What did you expect to happen?
How do we replicate the issue?
DMS version
v11.0.0
What operating system is DMS running on?
Linux
What instruction set architecture is DMS running on?
x86_64 / AMD64
What container orchestration tool are you using?
Docker Compose
docker-compose.yml
Relevant log output
Other relevant information
The last logwatch mail said: ################### Logwatch 7.5.5 (01/22/21) #################### Processing Initiated: Sat Jun 11 08:29:01 2022 Date Range Processed: yesterday ( 2022-Jun-10 ) Period is day. Detail Level of Output: 0 Type of Output/Format: mail / text Logfiles for Host: mail.markus-spring.de ################################################################## --------------------- Amavisd-new Begin ------------------------ 6 Total messages scanned ------------------ 100.00% 339.777K Total bytes scanned 347,932 ======== ================================================== 6 Passed ---------------------------------- 100.00% 6 Clean passed 100.00% ======== ================================================== 6 Ham ------------------------------------- 100.00% 6 Clean passed 100.00% ======== ================================================== ---------------------- Amavisd-new End ------------------------- --------------------- clam-update Begin ------------------------ Local version: 0.103.5 Recommended version: 0.103.6 Your ClamAV installation is OUTDATED! ---------------------- clam-update End ------------------------- --------------------- Dovecot Begin ------------------------ Dovecot Deliveries: 4 Dovecot IMAP and POP3 Successful Logins: 190 Dovecot disconnects: 128 Total Unknown users blocked: 6 Total **Unmatched Entries** dovecot: auth: passwd-file([email protected]): unknown user : 2 Time(s) dovecot: auth: passwd-file([email protected]): unknown user : 8 Time(s) dovecot: auth: passwd-file([email protected]): unknown user : 4 Time(s) ---------------------- Dovecot End ------------------------- --------------------- fail2ban-messages Begin ------------------------ Banned services with Fail2Ban: Bans:Unbans custom: [ 1:0 ] dovecot: [ 1:1 ] postfix: [ 0:0 ] postfix-sasl: [ 1:1 ] ** ERRORS ** 7f9b0d7c3960 -- exec: nft add table inet f2b-table: 1 Time(s) 7f9b0d7c3960 -- stderr: ' ...: 1 Time(s) 7f9b0d7c3960 -- stderr: 'Error: Could not process rule: Numerical result ou...: 1 Time(s) 7f9b0d7c3960 -- stderr: 'Error: No such file or directory': 1 Time(s) 7f9b0d7c3960 -- stderr: '^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^...: 1 Time(s) 7f9b0d7c3960 -- stderr: 'add rule inet f2b-table f2b-chain meta l4proto { t...: 1 Time(s) 7f9b0d7c3960 -- stderr: 'add set inet f2b-table addr-set-postfix-sasl { typ...: 1 Time(s) 7f9b0d7c3d50 -- exec: nft add table inet f2b-table: 1 Time(s) 7f9b0d7c3d50 -- stderr: ' ...: 1 Time(s) 7f9b0d7c3d50 -- stderr: 'Error: Could not process rule: Numerical result ou...: 1 Time(s) 7f9b0d7c3d50 -- stderr: 'Error: No such file or directory': 1 Time(s) 7f9b0d7c3d50 -- stderr: '^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^...: 1 Time(s) 7f9b0d7c3d50 -- stderr: 'add rule inet f2b-table f2b-chain meta l4proto { t...: 1 Time(s) 7f9b0d7c3d50 -- stderr: 'add set inet f2b-table addr-set-dovecot { type ipv...: 1 Time(s) Failed to execute ban jail 'dovecot' action 'nftables-allports' info 'Actio...: 1 Time(s) Failed to execute ban jail 'postfix-sasl' action 'nftables-allports' info '...: 1 Time(s) ---------------------- fail2ban-messages End ------------------------- --------------------- Postfix Begin ------------------------ 6 SASL authentication failed 6 8 Miscellaneous warnings 8 694.623K Bytes accepted 711,294 505.250K Bytes sent via SMTP 517,376 189.373K Bytes sent via LMTP 193,918 ======== ================================================== 14 Accepted 1.23% 1124 Rejected 98.77% -------- -------------------------------------------------- 1138 Total 100.00% ======== ================================================== 1114 5xx Reject relay denied 99.11% 8 5xx Reject unknown user 0.71% 2 5xx Reject recipient address 0.18% -------- -------------------------------------------------- 1124 Total 5xx Rejects 100.00% ======== ================================================== 430 Connections 430 26 Connections lost (inbound) 26 432 Disconnections 432 14 Removed from queue 14 10 Sent via SMTP 10 4 Sent via LMTP 4 1668 Postscreen 1,668 14 Policy SPF 14 2 Timeouts (inbound) 2 8 Hostname verification errors (FCRDNS) 8 386 TLS connections (server) 386 4 TLS connections (client) 4 **Unmatched Entries** 2 Jun 10 17:09:00 mail policyd-spf[8310]: 550 5.7.23 Message rejected due to: SPF fail - not authorized. ---------------------- Postfix End ------------------------- --------------------- Disk Space Begin ------------------------ Filesystem Size Used Avail Use% Mounted on overlay 493G 54G 419G 12% / /dev/ploop37930p1 493G 54G 419G 12% /usr/share/zoneinfo/Etc/UTC ---------------------- Disk Space End ------------------------- ###################### Logwatch End #########################What level of experience do you have with Docker and mail servers?
Code of conduct
Improvements to this form?
No response