Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Wrong DKIM Key usage with Exchange API #6092

Open
5 tasks done
dirkpauli opened this issue Sep 28, 2024 · 0 comments
Open
5 tasks done

Wrong DKIM Key usage with Exchange API #6092

dirkpauli opened this issue Sep 28, 2024 · 0 comments
Labels
bug

Comments

@dirkpauli
Copy link

Contribution guidelines

I've found a bug and checked that ...

  • ... I understand that not following the below instructions will result in immediate closure and/or deletion of my issue.
  • ... I have understood that this bug report is dedicated for bugs, and not for support-related inquiries.
  • ... I have understood that answers are voluntary and community-driven, and not commercial support.
  • ... I have verified that my issue has not been already answered in the past. I also checked previous issues.

Description

When a client is using the Exchange API (EAS) on a mailbox that has two or more domains assigned to it, the mail is always signed with the DKIM key of the primary domain assigned to the mailbox, not the one assigned to the sender. Using IMAP/SMTP connection instead doesn't show this problem

Logs:

/

Steps to reproduce:

1. create a mailbox with an email-address of domain A
2. assign an alias to this mailbox using domain B
3. configure for both domains DKIM 
4. connect to the mailbox with a client using EAS (MS Outlook App, Nine Mail app under Android etc)
5. send an email using the alias from domain B as sender's address to an external recipient

The mail is send using the DKIM key of domain A instead of domain B which is the domain of the sender

Using IMAP+SMTP in step 3 results in a correctly signed mail (using domain B's DKIM key)

Which branch are you using?

master

Which architecture are you using?

x86

Operating System:

official docker images of mailcow

Server/VM specifications:

8 MB, 4 cores

Is Apparmor, SELinux or similar active?

no

Virtualization technology:

KVM

Docker version:

27.3.1

docker-compose version or docker compose version:

27.3.1

mailcow version:

2024-08a

Reverse proxy:

Nginx

Logs of git diff:

none

Logs of iptables -L -vn:

Chain INPUT (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination
2701K 1716M MAILCOW    all  --  any    any     anywhere             anywhere             /* mailcow */
 982K  122M f2b-sshd   tcp  --  any    any     anywhere             anywhere             multiport dports ssh

Chain FORWARD (policy DROP 3 packets, 156 bytes)
 pkts bytes target     prot opt in     out     source               destination
  20M   19G MAILCOW    all  --  any    any     anywhere             anywhere             /* mailcow */
  32M   27G DOCKER-USER  all  --  any    any     anywhere             anywhere
  32M   27G DOCKER-ISOLATION-STAGE-1  all  --  any    any     anywhere             anywhere
10663   85M ACCEPT     all  --  any    docker0  anywhere             anywhere             ctstate RELATED,ESTABLISHED
    0     0 DOCKER     all  --  any    docker0  anywhere             anywhere
 7197  438K ACCEPT     all  --  docker0 !docker0  anywhere             anywhere
    0     0 ACCEPT     all  --  docker0 docker0  anywhere             anywhere
  29M   33G ACCEPT     all  --  any    br-nextcloud  anywhere             anywhere             ctstate RELATED,ESTABLISHED
 138K 8283K DOCKER     all  --  any    br-nextcloud  anywhere             anywhere
23861 1352K ACCEPT     all  --  br-nextcloud !br-nextcloud  anywhere             anywhere
 138K 8282K ACCEPT     all  --  br-nextcloud br-nextcloud  anywhere             anywhere
7857K   28G ACCEPT     all  --  any    br-drupal  anywhere             anywhere             ctstate RELATED,ESTABLISHED
86898 5214K DOCKER     all  --  any    br-drupal  anywhere             anywhere
11402 1138K ACCEPT     all  --  br-drupal !br-drupal  anywhere             anywhere
86889 5213K ACCEPT     all  --  br-drupal br-drupal  anywhere             anywhere
  52M   25G ACCEPT     all  --  any    br-mailcow  anywhere             anywhere             ctstate RELATED,ESTABLISHED
4977K  307M DOCKER     all  --  any    br-mailcow  anywhere             anywhere
8477K 2981M ACCEPT     all  --  br-mailcow !br-mailcow  anywhere             anywhere
4305K  270M ACCEPT     all  --  br-mailcow br-mailcow  anywhere             anywhere
Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination

Chain DOCKER (4 references)
 pkts bytes target     prot opt in     out     source               destination
    0     0 ACCEPT     tcp  --  !br-drupal br-drupal  anywhere             172.24.0.2           tcp dpt:mysql
    0     0 ACCEPT     tcp  --  !br-mailcow br-mailcow  anywhere             172.22.1.249         tcp dpt:redis
    0     0 ACCEPT     tcp  --  !br-mailcow br-mailcow  anywhere             172.22.1.5           tcp dpt:8983
    0     0 ACCEPT     tcp  --  !br-mailcow br-mailcow  anywhere             172.22.1.6           tcp dpt:mysql
  806 47720 ACCEPT     tcp  --  !br-mailcow br-mailcow  anywhere             172.22.1.250         tcp dpt:pop3
 1857  110K ACCEPT     tcp  --  !br-mailcow br-mailcow  anywhere             172.22.1.250         tcp dpt:imap2
 1738  104K ACCEPT     tcp  --  !br-mailcow br-mailcow  anywhere             172.22.1.250         tcp dpt:imaps
    0     0 ACCEPT     tcp  --  !br-mailcow br-mailcow  anywhere             172.22.1.8           tcp dpt:18080
  285 16376 ACCEPT     tcp  --  !br-mailcow br-mailcow  anywhere             172.22.1.250         tcp dpt:pop3s
    0     0 ACCEPT     tcp  --  !br-mailcow br-mailcow  anywhere             172.22.1.8           tcp dpt:18443
   59  3108 ACCEPT     tcp  --  !br-mailcow br-mailcow  anywhere             172.22.1.250         tcp dpt:sieve
    0     0 ACCEPT     tcp  --  !br-mailcow br-mailcow  anywhere             172.22.1.250         tcp dpt:12345
 8696  476K ACCEPT     tcp  --  !br-mailcow br-mailcow  anywhere             172.22.1.253         tcp dpt:smtp
 3162  189K ACCEPT     tcp  --  !br-mailcow br-mailcow  anywhere             172.22.1.253         tcp dpt:submissions
  524 29412 ACCEPT     tcp  --  !br-mailcow br-mailcow  anywhere             172.22.1.253         tcp dpt:submission
    0     0 ACCEPT     tcp  --  !br-nextcloud br-nextcloud  anywhere             172.25.0.2           tcp dpt:mysql
 3554  181K ACCEPT     tcp  --  !br-mailcow br-mailcow  anywhere             172.22.1.14          tcp dpt:http-alt
 4613  247K ACCEPT     tcp  --  !br-mailcow br-mailcow  anywhere             172.22.1.14          tcp dpt:8443
    1  1378 ACCEPT     udp  --  !br-mailcow br-mailcow  anywhere             172.22.1.14          udp dpt:8443
   17   748 ACCEPT     tcp  --  !br-mailcow br-mailcow  anywhere             172.22.1.14          tcp dpt:9443
Chain DOCKER-ISOLATION-STAGE-1 (1 references)
 pkts bytes target     prot opt in     out     source               destination
 7197  438K DOCKER-ISOLATION-STAGE-2  all  --  docker0 !docker0  anywhere             anywhere
 3372  330K DOCKER-ISOLATION-STAGE-2  all  --  br-drupal !br-drupal  anywhere             anywhere
3258K  700M DOCKER-ISOLATION-STAGE-2  all  --  br-mailcow !br-mailcow  anywhere             anywhere
 8899  491K DOCKER-ISOLATION-STAGE-2  all  --  br-nextcloud !br-nextcloud  anywhere             anywhere
  32M   27G RETURN     all  --  any    any     anywhere             anywhere

Chain DOCKER-ISOLATION-STAGE-2 (4 references)
 pkts bytes target     prot opt in     out     source               destination
    0     0 DROP       all  --  any    docker0  anywhere             anywhere
    0     0 DROP       all  --  any    br-drupal  anywhere             anywhere
    0     0 DROP       all  --  any    br-mailcow  anywhere             anywhere
    0     0 DROP       all  --  any    br-nextcloud  anywhere             anywhere
3278K  701M RETURN     all  --  any    any     anywhere             anywhere

Chain DOCKER-USER (1 references)
 pkts bytes target     prot opt in     out     source               destination
 103M   89G RETURN     all  --  any    any     anywhere             anywhere

Chain MAILCOW (2 references)
 pkts bytes target     prot opt in     out     source               destination
   30  1224 DROP       all  --  any    any     minchernes.com/26    anywhere
    0     0 DROP       all  --  any    any     epikwire.net/24      anywhere
    0     0 DROP       all  --  any    any     194.169.175.47       anywhere
    0     0 DROP       all  --  any    any     46.148.40.0/24       anywhere
    6   240 DROP       all  --  any    any     141.98.10.0/24       anywhere
    0     0 DROP       all  --  any    any     194.169.175.33       anywhere
    0     0 DROP       all  --  any    any     194.169.175.65       anywhere
    0     0 DROP       all  --  any    any     193.42.32.168/29     anywhere
    0     0 DROP       all  --  any    any     194.169.175.10       anywhere
    0     0 DROP       tcp  --  !br-mailcow br-mailcow  anywhere             anywhere             /* mailcow isolation */

Chain f2b-sshd (1 references)
 pkts bytes target     prot opt in     out     source               destination
 767K  108M RETURN     all  --  any    any     anywhere             anywhere

Logs of ip6tables -L -vn:

Chain INPUT (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination

Chain FORWARD (policy DROP 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination
2902K 6159M MAILCOW    0    --  *      *       ::/0                 ::/0                 /* mailcow */
4234K 7937M DOCKER-USER  0    --  *      *       ::/0                 ::/0
4234K 7937M DOCKER-ISOLATION-STAGE-1  0    --  *      *       ::/0                 ::/0
    0     0 ACCEPT     0    --  *      docker0  ::/0                 ::/0                 ctstate RELATED,ESTABLISHED
    0     0 DOCKER     0    --  *      docker0  ::/0                 ::/0
    0     0 ACCEPT     0    --  docker0 !docker0  ::/0                 ::/0
    0     0 ACCEPT     0    --  docker0 docker0  ::/0                 ::/0
  11M   17G ACCEPT     0    --  *      br-mailcow  ::/0                 ::/0                 ctstate RELATED,ESTABLISHED
1733K  122M DOCKER     0    --  *      br-mailcow  ::/0                 ::/0
1855K 3411M ACCEPT     0    --  br-mailcow !br-mailcow  ::/0                 ::/0
1710K  120M ACCEPT     0    --  br-mailcow br-mailcow  ::/0                 ::/0

Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination

Chain DOCKER (2 references)
 pkts bytes target     prot opt in     out     source               destination
    4   304 ACCEPT     6    --  !br-mailcow br-mailcow  ::/0                 fd4d:6169:6c63:6f77::b  tcp dpt:110
    6   444 ACCEPT     6    --  !br-mailcow br-mailcow  ::/0                 fd4d:6169:6c63:6f77::b  tcp dpt:143
   85  6204 ACCEPT     6    --  !br-mailcow br-mailcow  ::/0                 fd4d:6169:6c63:6f77::b  tcp dpt:993
   13  1024 ACCEPT     6    --  !br-mailcow br-mailcow  ::/0                 fd4d:6169:6c63:6f77::b  tcp dpt:995
    2   144 ACCEPT     6    --  !br-mailcow br-mailcow  ::/0                 fd4d:6169:6c63:6f77::b  tcp dpt:4190
   36  2632 ACCEPT     6    --  !br-mailcow br-mailcow  ::/0                 fd4d:6169:6c63:6f77::f  tcp dpt:25
   27  2068 ACCEPT     6    --  !br-mailcow br-mailcow  ::/0                 fd4d:6169:6c63:6f77::f  tcp dpt:465
   62  4924 ACCEPT     6    --  !br-mailcow br-mailcow  ::/0                 fd4d:6169:6c63:6f77::f  tcp dpt:587
   33  2600 ACCEPT     6    --  !br-mailcow br-mailcow  ::/0                 fd4d:6169:6c63:6f77::13  tcp dpt:8080
  389 31484 ACCEPT     6    --  !br-mailcow br-mailcow  ::/0                 fd4d:6169:6c63:6f77::13  tcp dpt:8443
    1  1248 ACCEPT     17   --  !br-mailcow br-mailcow  ::/0                 fd4d:6169:6c63:6f77::13  udp dpt:8443
    1    60 ACCEPT     6    --  !br-mailcow br-mailcow  ::/0                 fd4d:6169:6c63:6f77::13  tcp dpt:9443

Chain DOCKER-ISOLATION-STAGE-1 (1 references)
 pkts bytes target     prot opt in     out     source               destination
    0     0 DOCKER-ISOLATION-STAGE-2  0    --  docker0 !docker0  ::/0                 ::/0
    0     0 DOCKER-ISOLATION-STAGE-2  0    --  br-drupal !br-drupal  ::/0                 ::/0
 458K 2869M DOCKER-ISOLATION-STAGE-2  0    --  br-mailcow !br-mailcow  ::/0                 ::/0
    0     0 DOCKER-ISOLATION-STAGE-2  0    --  br-nextcloud !br-nextcloud  ::/0                 ::/0
4234K 7937M RETURN     0    --  *      *       ::/0                 ::/0

Chain DOCKER-ISOLATION-STAGE-2 (4 references)
 pkts bytes target     prot opt in     out     source               destination
    0     0 DROP       0    --  *      docker0  ::/0                 ::/0
    0     0 DROP       0    --  *      br-drupal  ::/0                 ::/0
    0     0 DROP       0    --  *      br-mailcow  ::/0                 ::/0
    0     0 DROP       0    --  *      br-nextcloud  ::/0                 ::/0
 458K 2869M RETURN     0    --  *      *       ::/0                 ::/0

Chain DOCKER-USER (1 references)
 pkts bytes target     prot opt in     out     source               destination
  15M   21G RETURN     0    --  *      *       ::/0                 ::/0

Chain MAILCOW (1 references)
 pkts bytes target     prot opt in     out     source               destination

Logs of iptables -L -vn -t nat:

Chain PREROUTING (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination
 555K   30M DOCKER     0    --  *      *       0.0.0.0/0            0.0.0.0/0            ADDRTYPE match dst-type LOCAL

Chain INPUT (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination

Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination
    0     0 DOCKER     0    --  *      *       0.0.0.0/0           !127.0.0.0/8          ADDRTYPE match dst-type LOCAL

Chain POSTROUTING (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination
   64  3862 MASQUERADE  0    --  *      !docker0  172.17.0.0/16        0.0.0.0/0
  853 55541 MASQUERADE  0    --  *      !br-nextcloud  172.25.0.0/16        0.0.0.0/0
 1258 79962 MASQUERADE  0    --  *      !br-drupal  172.24.0.0/16        0.0.0.0/0
1687K  128M MASQUERADE  0    --  *      !br-mailcow  172.22.1.0/24        0.0.0.0/0
    0     0 MASQUERADE  6    --  *      *       172.24.0.2           172.24.0.2           tcp dpt:3306
    0     0 MASQUERADE  6    --  *      *       172.22.1.249         172.22.1.249         tcp dpt:6379
    0     0 MASQUERADE  6    --  *      *       172.22.1.5           172.22.1.5           tcp dpt:8983
    0     0 MASQUERADE  6    --  *      *       172.22.1.6           172.22.1.6           tcp dpt:3306
    0     0 MASQUERADE  6    --  *      *       172.22.1.250         172.22.1.250         tcp dpt:110
    0     0 MASQUERADE  6    --  *      *       172.22.1.250         172.22.1.250         tcp dpt:143
    0     0 MASQUERADE  6    --  *      *       172.22.1.250         172.22.1.250         tcp dpt:993
    0     0 MASQUERADE  6    --  *      *       172.22.1.8           172.22.1.8           tcp dpt:18080
    0     0 MASQUERADE  6    --  *      *       172.22.1.250         172.22.1.250         tcp dpt:995
    0     0 MASQUERADE  6    --  *      *       172.22.1.8           172.22.1.8           tcp dpt:18443
    0     0 MASQUERADE  6    --  *      *       172.22.1.250         172.22.1.250         tcp dpt:4190
    0     0 MASQUERADE  6    --  *      *       172.22.1.250         172.22.1.250         tcp dpt:12345
    0     0 MASQUERADE  6    --  *      *       172.22.1.253         172.22.1.253         tcp dpt:25
    0     0 MASQUERADE  6    --  *      *       172.22.1.253         172.22.1.253         tcp dpt:465
    0     0 MASQUERADE  6    --  *      *       172.22.1.253         172.22.1.253         tcp dpt:587
    0     0 MASQUERADE  6    --  *      *       172.25.0.2           172.25.0.2           tcp dpt:3306
    0     0 MASQUERADE  6    --  *      *       172.22.1.14          172.22.1.14          tcp dpt:8080
    0     0 MASQUERADE  6    --  *      *       172.22.1.14          172.22.1.14          tcp dpt:8443
    0     0 MASQUERADE  17   --  *      *       172.22.1.14          172.22.1.14          udp dpt:8443
    0     0 MASQUERADE  6    --  *      *       172.22.1.14          172.22.1.14          tcp dpt:9443
Chain DOCKER (2 references)
 pkts bytes target     prot opt in     out     source               destination
    0     0 RETURN     0    --  docker0 *       0.0.0.0/0            0.0.0.0/0
   61  3660 RETURN     0    --  br-drupal *       0.0.0.0/0            0.0.0.0/0
 1137 68220 RETURN     0    --  br-mailcow *       0.0.0.0/0            0.0.0.0/0
    0     0 RETURN     0    --  br-nextcloud *       0.0.0.0/0            0.0.0.0/0
    0     0 DNAT       6    --  !br-drupal *       0.0.0.0/0            127.0.33.6           tcp dpt:3306 to:172.24.0.2:3306
    0     0 DNAT       6    --  !br-mailcow *       0.0.0.0/0            127.0.0.1            tcp dpt:7654 to:172.22.1.249:6379
    0     0 DNAT       6    --  !br-mailcow *       0.0.0.0/0            127.0.0.1            tcp dpt:18983 to:172.22.1.5:8983
    0     0 DNAT       6    --  !br-mailcow *       0.0.0.0/0            127.0.0.1            tcp dpt:13306 to:172.22.1.6:3306
  806 47720 DNAT       6    --  !br-mailcow *       0.0.0.0/0            0.0.0.0/0            tcp dpt:110 to:172.22.1.250:110
 1858  111K DNAT       6    --  !br-mailcow *       0.0.0.0/0            0.0.0.0/0            tcp dpt:143 to:172.22.1.250:143
 1739  104K DNAT       6    --  !br-mailcow *       0.0.0.0/0            0.0.0.0/0            tcp dpt:993 to:172.22.1.250:993
    0     0 DNAT       6    --  !br-mailcow *       0.0.0.0/0            127.0.0.1            tcp dpt:18080 to:172.22.1.8:18080
  285 16376 DNAT       6    --  !br-mailcow *       0.0.0.0/0            0.0.0.0/0            tcp dpt:995 to:172.22.1.250:995
    0     0 DNAT       6    --  !br-mailcow *       0.0.0.0/0            127.0.0.1            tcp dpt:18443 to:172.22.1.8:18443
   59  3108 DNAT       6    --  !br-mailcow *       0.0.0.0/0            0.0.0.0/0            tcp dpt:4190 to:172.22.1.250:4190
    0     0 DNAT       6    --  !br-mailcow *       0.0.0.0/0            127.0.0.1            tcp dpt:19991 to:172.22.1.250:12345
 8700  477K DNAT       6    --  !br-mailcow *       0.0.0.0/0            0.0.0.0/0            tcp dpt:25 to:172.22.1.253:25
 3164  189K DNAT       6    --  !br-mailcow *       0.0.0.0/0            0.0.0.0/0            tcp dpt:465 to:172.22.1.253:465
  524 29412 DNAT       6    --  !br-mailcow *       0.0.0.0/0            0.0.0.0/0            tcp dpt:587 to:172.22.1.253:587
    0     0 DNAT       6    --  !br-nextcloud *       0.0.0.0/0            127.0.33.7           tcp dpt:3306 to:172.25.0.2:3306
 3558  181K DNAT       6    --  !br-mailcow *       0.0.0.0/0            0.0.0.0/0            tcp dpt:80 to:172.22.1.14:8080
 4618  248K DNAT       6    --  !br-mailcow *       0.0.0.0/0            0.0.0.0/0            tcp dpt:443 to:172.22.1.14:8443
    1  1378 DNAT       17   --  !br-mailcow *       0.0.0.0/0            0.0.0.0/0            udp dpt:443 to:172.22.1.14:8443
   17   748 DNAT       6    --  !br-mailcow *       0.0.0.0/0            0.0.0.0/0            tcp dpt:1080 to:172.22.1.14:9443

Logs of ip6tables -L -vn -t nat:

Chain PREROUTING (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination
12113 1008K DOCKER     0    --  *      *       ::/0                 ::/0                 ADDRTYPE match dst-type LOCAL

Chain INPUT (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination

Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination
    0     0 DOCKER     0    --  *      *       ::/0                !::1                  ADDRTYPE match dst-type LOCAL

Chain POSTROUTING (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination
    0     0 MASQUERADE  0    --  *      !docker0  fd00:dead:beef:c0::/80  ::/0
 348K   34M MASQUERADE  0    --  *      !br-mailcow  fd4d:6169:6c63:6f77::/64  ::/0
    0     0 MASQUERADE  6    --  *      *       fd4d:6169:6c63:6f77::b  fd4d:6169:6c63:6f77::b  tcp dpt:110
    0     0 MASQUERADE  6    --  *      *       fd4d:6169:6c63:6f77::b  fd4d:6169:6c63:6f77::b  tcp dpt:143
    0     0 MASQUERADE  6    --  *      *       fd4d:6169:6c63:6f77::b  fd4d:6169:6c63:6f77::b  tcp dpt:993
    0     0 MASQUERADE  6    --  *      *       fd4d:6169:6c63:6f77::b  fd4d:6169:6c63:6f77::b  tcp dpt:995
    0     0 MASQUERADE  6    --  *      *       fd4d:6169:6c63:6f77::b  fd4d:6169:6c63:6f77::b  tcp dpt:4190
    0     0 MASQUERADE  6    --  *      *       fd4d:6169:6c63:6f77::f  fd4d:6169:6c63:6f77::f  tcp dpt:25
    0     0 MASQUERADE  6    --  *      *       fd4d:6169:6c63:6f77::f  fd4d:6169:6c63:6f77::f  tcp dpt:465
    0     0 MASQUERADE  6    --  *      *       fd4d:6169:6c63:6f77::f  fd4d:6169:6c63:6f77::f  tcp dpt:587
    0     0 MASQUERADE  6    --  *      *       fd4d:6169:6c63:6f77::13  fd4d:6169:6c63:6f77::13  tcp dpt:8080
    0     0 MASQUERADE  6    --  *      *       fd4d:6169:6c63:6f77::13  fd4d:6169:6c63:6f77::13  tcp dpt:8443
    0     0 MASQUERADE  17   --  *      *       fd4d:6169:6c63:6f77::13  fd4d:6169:6c63:6f77::13  udp dpt:8443
    0     0 MASQUERADE  6    --  *      *       fd4d:6169:6c63:6f77::13  fd4d:6169:6c63:6f77::13  tcp dpt:9443

Chain DOCKER (2 references)
 pkts bytes target     prot opt in     out     source               destination
    0     0 RETURN     0    --  docker0 *       ::/0                 ::/0
  126 10080 RETURN     0    --  br-mailcow *       ::/0                 ::/0
    4   304 DNAT       6    --  !br-mailcow *       ::/0                 ::/0                 tcp dpt:110 to:[fd4d:6169:6c63:6f77::b]:110
    6   444 DNAT       6    --  !br-mailcow *       ::/0                 ::/0                 tcp dpt:143 to:[fd4d:6169:6c63:6f77::b]:143
   85  6204 DNAT       6    --  !br-mailcow *       ::/0                 ::/0                 tcp dpt:993 to:[fd4d:6169:6c63:6f77::b]:993
   13  1024 DNAT       6    --  !br-mailcow *       ::/0                 ::/0                 tcp dpt:995 to:[fd4d:6169:6c63:6f77::b]:995
    2   144 DNAT       6    --  !br-mailcow *       ::/0                 ::/0                 tcp dpt:4190 to:[fd4d:6169:6c63:6f77::b]:4190
   36  2632 DNAT       6    --  !br-mailcow *       ::/0                 ::/0                 tcp dpt:25 to:[fd4d:6169:6c63:6f77::f]:25
   27  2068 DNAT       6    --  !br-mailcow *       ::/0                 ::/0                 tcp dpt:465 to:[fd4d:6169:6c63:6f77::f]:465
   62  4924 DNAT       6    --  !br-mailcow *       ::/0                 ::/0                 tcp dpt:587 to:[fd4d:6169:6c63:6f77::f]:587
   35  2760 DNAT       6    --  !br-mailcow *       ::/0                 ::/0                 tcp dpt:80 to:[fd4d:6169:6c63:6f77::13]:8080
  391 31632 DNAT       6    --  !br-mailcow *       ::/0                 ::/0                 tcp dpt:443 to:[fd4d:6169:6c63:6f77::13]:8443
    1  1248 DNAT       17   --  !br-mailcow *       ::/0                 ::/0                 udp dpt:443 to:[fd4d:6169:6c63:6f77::13]:8443
    1    60 DNAT       6    --  !br-mailcow *       ::/0                 ::/0                 tcp dpt:1080 to:[fd4d:6169:6c63:6f77::13]:9443

DNS check:

104.18.32.7
172.64.155.249
@dirkpauli dirkpauli added the bug label Sep 28, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
bug
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@dirkpauli