Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Mailcow is not working #5478

Closed
5 tasks done
EpicJosch opened this issue Oct 17, 2023 · 5 comments
Closed
5 tasks done

Mailcow is not working #5478

EpicJosch opened this issue Oct 17, 2023 · 5 comments
Labels
bug

Comments

@EpicJosch
Copy link

Contribution guidelines

I've found a bug and checked that ...

  • ... I understand that not following the below instructions will result in immediate closure and/or deletion of my issue.
  • ... I have understood that this bug report is dedicated for bugs, and not for support-related inquiries.
  • ... I have understood that answers are voluntary and community-driven, and not commercial support.
  • ... I have verified that my issue has not been already answered in the past. I also checked previous issues.

Description

I installed mailcow multiple times EXACTLY as told in the guide. And i get the same error every time:

What is happening?

Please do not stop the stack while we are initializing the database or do other preparations.

What is happening? - Nginx cannot connect to an upstream server or other services are not ready yet.
This is fine if mailcow was just installed or updated and can take a few minutes to complete.
Please check the logs or contact support if the error persists.

Logs:

2023/10/17 14:16:20 [notice] 1#1: using the "epoll" event method
2023/10/17 14:16:20 [notice] 1#1: nginx/1.25.2
2023/10/17 14:16:20 [notice] 1#1: built by gcc 12.2.1 20220924 (Alpine 12.2.1_git20220924-r10) 
2023/10/17 14:16:20 [notice] 1#1: OS: Linux 5.15.0-86-generic
2023/10/17 14:16:20 [notice] 1#1: getrlimit(RLIMIT_NOFILE): 1048576:1048576
2023/10/17 14:16:20 [notice] 1#1: start worker processes
2023/10/17 14:16:20 [notice] 1#1: start worker process 20
2023/10/17 14:16:20 [notice] 1#1: start worker process 21
2023/10/17 14:16:20 [notice] 1#1: start worker process 22
2023/10/17 14:16:20 [notice] 1#1: start worker process 23
2023/10/17 14:16:20 [notice] 1#1: start worker process 24
2023/10/17 14:16:20 [notice] 1#1: start worker process 25
2023/10/17 14:16:20 [notice] 1#1: start worker process 26
2023/10/17 14:16:20 [notice] 1#1: start worker process 27
2023/10/17 14:16:20 [notice] 1#1: start worker process 28
2023/10/17 14:16:20 [notice] 1#1: start worker process 29
2023/10/17 14:16:20 [notice] 1#1: start worker process 30
2023/10/17 14:16:20 [notice] 1#1: start worker process 31
2023/10/17 14:16:20 [notice] 1#1: start cache manager process 32
2023/10/17 14:16:20 [notice] 1#1: start cache loader process 33
172.22.1.12 - - [17/Oct/2023:14:16:44 +0200] "HEAD / HTTP/1.1" 200 0 "-" "curl/8.4.0"
2023/10/17 14:16:47 [error] 20#20: *2 connect() failed (111: Connection refused) while connecting to upstream, client: 172.22.1.12, server: mail.ejservice.de, request: "GET / HTTP/1.1", upstream: "fastcgi://172.22.1.6:9002", host: "nginx"
2023/10/17 14:16:47 [error] 20#20: *2 connect() failed (111: Connection refused) while connecting to upstream, client: 172.22.1.12, server: mail.ejservice.de, request: "GET / HTTP/1.1", upstream: "fastcgi://[fd4d:6169:6c63:6f77::9]:9002", host: "nginx"
172.22.1.12 - - [17/Oct/2023:14:16:47 +0200] "GET / HTTP/1.1" 502 2015 "-" "curl/8.4.0"
2023/10/17 14:16:57 [error] 21#21: *5 connect() failed (111: Connection refused) while connecting to upstream, client: 172.22.1.12, server: mail.ejservice.de, request: "GET / HTTP/1.1", upstream: "fastcgi://172.22.1.6:9002", host: "nginx"
2023/10/17 14:16:57 [error] 21#21: *5 connect() failed (111: Connection refused) while connecting to upstream, client: 172.22.1.12, server: mail.ejservice.de, request: "GET / HTTP/1.1", upstream: "fastcgi://[fd4d:6169:6c63:6f77::9]:9002", host: "nginx"
172.22.1.12 - - [17/Oct/2023:14:16:57 +0200] "GET / HTTP/1.1" 502 2015 "-" "curl/8.4.0"
2023/10/17 14:17:07 [error] 23#23: *8 connect() failed (111: Connection refused) while connecting to upstream, client: 172.22.1.12, server: mail.ejservice.de, request: "GET / HTTP/1.1", upstream: "fastcgi://172.22.1.6:9002", host: "nginx"
2023/10/17 14:17:07 [error] 23#23: *8 connect() failed (111: Connection refused) while connecting to upstream, client: 172.22.1.12, server: mail.ejservice.de, request: "GET / HTTP/1.1", upstream: "fastcgi://[fd4d:6169:6c63:6f77::9]:9002", host: "nginx"
172.22.1.12 - - [17/Oct/2023:14:17:07 +0200] "GET / HTTP/1.1" 502 2015 "-" "curl/8.4.0"
172.22.1.13 - - [17/Oct/2023:14:17:16 +0200] "GET / HTTP/1.1" 200 15 "-" "check_http/v (nagios-plugins 2.4.2)"
2023/10/17 14:17:17 [error] 22#22: *12 connect() failed (111: Connection refused) while connecting to upstream, client: 172.22.1.12, server: mail.ejservice.de, request: "GET / HTTP/1.1", upstream: "fastcgi://172.22.1.6:9002", host: "nginx"
2023/10/17 14:17:17 [error] 22#22: *12 connect() failed (111: Connection refused) while connecting to upstream, client: 172.22.1.12, server: mail.ejservice.de, request: "GET / HTTP/1.1", upstream: "fastcgi://[fd4d:6169:6c63:6f77::9]:9002", host: "nginx"
172.22.1.12 - - [17/Oct/2023:14:17:17 +0200] "GET / HTTP/1.1" 502 2015 "-" "curl/8.4.0"
2023/10/17 14:17:20 [notice] 33#33: http file cache: /tmp 0.000M, bsize: 4096
2023/10/17 14:17:20 [notice] 1#1: signal 17 (SIGCHLD) received from 33
2023/10/17 14:17:20 [notice] 1#1: cache loader process 33 exited with code 0
2023/10/17 14:17:20 [notice] 1#1: signal 29 (SIGIO) received
2023/10/17 14:17:27 [error] 24#24: *15 connect() failed (111: Connection refused) while connecting to upstream, client: 172.22.1.12, server: mail.ejservice.de, request: "GET / HTTP/1.1", upstream: "fastcgi://172.22.1.6:9002", host: "nginx"
2023/10/17 14:17:27 [error] 24#24: *15 connect() failed (111: Connection refused) while connecting to upstream, client: 172.22.1.12, server: mail.ejservice.de, request: "GET / HTTP/1.1", upstream: "fastcgi://[fd4d:6169:6c63:6f77::9]:9002", host: "nginx"
172.22.1.12 - - [17/Oct/2023:14:17:27 +0200] "GET / HTTP/1.1" 502 2015 "-" "curl/8.4.0"
2023/10/17 14:17:37 [error] 25#25: *18 connect() failed (111: Connection refused) while connecting to upstream, client: 172.22.1.12, server: mail.ejservice.de, request: "GET / HTTP/1.1", upstream: "fastcgi://172.22.1.6:9002", host: "nginx"
2023/10/17 14:17:37 [error] 25#25: *18 connect() failed (111: Connection refused) while connecting to upstream, client: 172.22.1.12, server: mail.ejservice.de, request: "GET / HTTP/1.1", upstream: "fastcgi://[fd4d:6169:6c63:6f77::9]:9002", host: "nginx"
172.22.1.12 - - [17/Oct/2023:14:17:37 +0200] "GET / HTTP/1.1" 502 2015 "-" "curl/8.4.0"
2023/10/17 14:17:47 [error] 26#26: *21 connect() failed (111: Connection refused) while connecting to upstream, client: 172.22.1.12, server: mail.ejservice.de, request: "GET / HTTP/1.1", upstream: "fastcgi://172.22.1.6:9002", host: "nginx"
2023/10/17 14:17:47 [error] 26#26: *21 connect() failed (111: Connection refused) while connecting to upstream, client: 172.22.1.12, server: mail.ejservice.de, request: "GET / HTTP/1.1", upstream: "fastcgi://[fd4d:6169:6c63:6f77::9]:9002", host: "nginx"
172.22.1.12 - - [17/Oct/2023:14:17:47 +0200] "GET / HTTP/1.1" 502 2015 "-" "curl/8.4.0"
2023/10/17 14:17:57 [error] 27#27: *24 connect() failed (111: Connection refused) while connecting to upstream, client: 172.22.1.12, server: mail.ejservice.de, request: "GET / HTTP/1.1", upstream: "fastcgi://172.22.1.6:9002", host: "nginx"
2023/10/17 14:17:57 [error] 27#27: *24 connect() failed (111: Connection refused) while connecting to upstream, client: 172.22.1.12, server: mail.ejservice.de, request: "GET / HTTP/1.1", upstream: "fastcgi://[fd4d:6169:6c63:6f77::9]:9002", host: "nginx"
172.22.1.12 - - [17/Oct/2023:14:17:57 +0200] "GET / HTTP/1.1" 502 2015 "-" "curl/8.4.0"
2023/10/17 14:18:07 [error] 28#28: *27 connect() failed (111: Connection refused) while connecting to upstream, client: 172.22.1.12, server: mail.ejservice.de, request: "GET / HTTP/1.1", upstream: "fastcgi://172.22.1.6:9002", host: "nginx"
2023/10/17 14:18:07 [error] 28#28: *27 connect() failed (111: Connection refused) while connecting to upstream, client: 172.22.1.12, server: mail.ejservice.de, request: "GET / HTTP/1.1", upstream: "fastcgi://[fd4d:6169:6c63:6f77::9]:9002", host: "nginx"
172.22.1.12 - - [17/Oct/2023:14:18:07 +0200] "GET / HTTP/1.1" 502 2015 "-" "curl/8.4.0"
2023/10/17 14:18:17 [error] 29#29: *30 connect() failed (111: Connection refused) while connecting to upstream, client: 172.22.1.12, server: mail.ejservice.de, request: "GET / HTTP/1.1", upstream: "fastcgi://172.22.1.6:9002", host: "nginx"
2023/10/17 14:18:17 [error] 29#29: *30 connect() failed (111: Connection refused) while connecting to upstream, client: 172.22.1.12, server: mail.ejservice.de, request: "GET / HTTP/1.1", upstream: "fastcgi://[fd4d:6169:6c63:6f77::9]:9002", host: "nginx"
172.22.1.12 - - [17/Oct/2023:14:18:17 +0200] "GET / HTTP/1.1" 502 2015 "-" "curl/8.4.0"
2023/10/17 14:18:27 [error] 30#30: *33 connect() failed (111: Connection refused) while connecting to upstream, client: 172.22.1.12, server: mail.ejservice.de, request: "GET / HTTP/1.1", upstream: "fastcgi://172.22.1.6:9002", host: "nginx"
2023/10/17 14:18:27 [error] 30#30: *33 connect() failed (111: Connection refused) while connecting to upstream, client: 172.22.1.12, server: mail.ejservice.de, request: "GET / HTTP/1.1", upstream: "fastcgi://[fd4d:6169:6c63:6f77::9]:9002", host: "nginx"
172.22.1.12 - - [17/Oct/2023:14:18:27 +0200] "GET / HTTP/1.1" 502 2015 "-" "curl/8.4.0"
2023/10/17 14:18:37 [error] 31#31: *36 connect() failed (111: Connection refused) while connecting to upstream, client: 172.22.1.12, server: mail.ejservice.de, request: "GET / HTTP/1.1", upstream: "fastcgi://172.22.1.6:9002", host: "nginx"
2023/10/17 14:18:37 [error] 31#31: *36 connect() failed (111: Connection refused) while connecting to upstream, client: 172.22.1.12, server: mail.ejservice.de, request: "GET / HTTP/1.1", upstream: "fastcgi://[fd4d:6169:6c63:6f77::9]:9002", host: "nginx"
172.22.1.12 - - [17/Oct/2023:14:18:37 +0200] "GET / HTTP/1.1" 502 2015 "-" "curl/8.4.0"
109.237.97.180 - - [17/Oct/2023:14:18:47 +0200] "GET /.env HTTP/1.1" 404 178 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
2023/10/17 14:18:47 [error] 20#20: *41 connect() failed (111: Connection refused) while connecting to upstream, client: 172.22.1.12, server: mail.ejservice.de, request: "GET / HTTP/1.1", upstream: "fastcgi://[fd4d:6169:6c63:6f77::9]:9002", host: "nginx"
2023/10/17 14:18:47 [error] 20#20: *41 connect() failed (111: Connection refused) while connecting to upstream, client: 172.22.1.12, server: mail.ejservice.de, request: "GET / HTTP/1.1", upstream: "fastcgi://172.22.1.6:9002", host: "nginx"
172.22.1.12 - - [17/Oct/2023:14:18:47 +0200] "GET / HTTP/1.1" 502 2015 "-" "curl/8.4.0"
109.237.97.180 - - [17/Oct/2023:14:18:47 +0200] "\x16\x03\x01\x01H\x01\x00\x01D\x03\x03\x10\xC2t\xCFUQ<Ax\xEB:\xE5Ld^\x8D\x03 \x9B\xE2Y)\xD3\x074\xFBm`TF\x8F\xF0 \xB0=\xB9\xF9\x9FRx\xA2\x85S\x93\xCE\xB9}4\x87\xD9\xBFn\x93\xA6\x9B\x91+\x8A\x5Cnd\x1A\x97 \x7F\x00b\x13\x02\x13\x03\x13\x01\xC0,\xC00\xC0+\xC0/\xCC\xA9\xCC\xA8\x00\xA3\x00\x9F\x00\xA2\x00\x9E\xCC\xAA\xC0\xAF\xC0\xAD\xC0$\xC0(\xC0" 400 150 "-" "-"
2023/10/17 14:18:57 [error] 20#20: *44 no live upstreams while connecting to upstream, client: 172.22.1.12, server: mail.ejservice.de, request: "GET / HTTP/1.1", upstream: "fastcgi://phpfpm", host: "nginx"
172.22.1.12 - - [17/Oct/2023:14:18:57 +0200] "GET / HTTP/1.1" 502 2015 "-" "curl/8.4.0"
2023/10/17 14:19:07 [error] 20#20: *45 connect() failed (111: Connection refused) while connecting to upstream, client: 172.22.1.12, server: mail.ejservice.de, request: "GET / HTTP/1.1", upstream: "fastcgi://[fd4d:6169:6c63:6f77::9]:9002", host: "nginx"
2023/10/17 14:19:07 [error] 20#20: *45 connect() failed (111: Connection refused) while connecting to upstream, client: 172.22.1.12, server: mail.ejservice.de, request: "GET / HTTP/1.1", upstream: "fastcgi://172.22.1.6:9002", host: "nginx"
172.22.1.12 - - [17/Oct/2023:14:19:07 +0200] "GET / HTTP/1.1" 502 2015 "-" "curl/8.4.0"

Steps to reproduce:

1. Install newest version of mailcow

Which branch are you using?

master

Operating System:

Ubuntu 22.04 LTS

Server/VM specifications:

Memory: 64 GB, CPU Cores: 6 (12 Threads)

Is Apparmor, SELinux or similar active?

no

Virtualization technology:

Nothing. Dedicated

Docker version:

24.0.6

docker-compose version or docker compose version:

v2.21.0

mailcow version:

2023-10a

Reverse proxy:

Logs of git diff:

diff --git a/data/assets/ssl-example/cert.pem b/data/assets/ssl-example/cert.pem
index 96d16bec..1643304c 100644
--- a/data/assets/ssl-example/cert.pem
+++ b/data/assets/ssl-example/cert.pem
@@ -1,19 +1,33 @@
 -----BEGIN CERTIFICATE-----
-MIIDBDCCAe6gAwIBAgIQeJMoL/3dxhxhT9EwuRTL/DALBgkqhkiG9w0BAQswEjEQ
-MA4GA1UEChMHbWFpbGNvdzAeFw0xNjEyMTMxMDExMDBaFw0xOTExMjgxMDExMDBa
-MC0xEDAOBgNVBAoTB21haWxjb3cxGTAXBgNVBAMTEG1haWwuZXhhbXBsZS5vcmcw
-ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRg0xT3At9DSb3H5OMp3K1
-MpXAgYyotSK6TS61fC0QEHy2fMXiws7Agcye6Ln7CG63Fe1eN2jkdlefy9xJivS8
-y5w0M8i168v5znzC8fnylL2iOiSYfK/B/oEqfU7YH4RcegO53oDDIUZmi4Frgnu7
-39VVOU1ZyHEVqGJ2H2aAIkoZRjGzumD9Ym4LWGidtKJzBgFt/qmhUeWXipM8w281
-XkQnJU79+x2ywnJSvEZ3r/ZVJC7kbjiVw+/k15k9Cxk6Ik8wmJ0X/+xWxoZomHQI
-1LM0VKAS/iaU95dn2bplvL6jTiiyWAbrMjSKs4XbPt/fIbOicNkj6+CFy0MVfyyH
-AgMBAAGjPzA9MA4GA1UdDwEB/wQEAwIAqDAdBgNVHSUEFjAUBggrBgEFBQcDAgYI
-KwYBBQUHAwEwDAYDVR0TAQH/BAIwADALBgkqhkiG9w0BAQsDggEBAI/jBJa1P8nB
-eHUN5muQmjBVDVOYyWAAEapOe2HYsBcpjaB2H8Iw3DQzJtz6peYeYSCmHRVqFLCm
-VPrq36l9mPUotyPDPlQQAxCj9R2+WbGaJO+N/E1F8FQ94dr3jqwUyfjVPoqEjmIH
-NFkvbA0RJOeBm9oYGdhM0wjOBV9c9MTHFG82nQ/zQeTuPb7GXuKIOXYCxoLNOZMw
-UJ02Cqjv5ImrgOhcstAKX3Ip0urSvZUGvtPla4CGh+M6yDFJ08GzX6OiMIH207RW
-jAbUXXERSUv/7hysdDjGo5HZjCeMzVu9KAxoZXqnmvkk8g2swKWtWBRcoeU1VGx0
-Bx4Q4KMjuYQ=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 -----END CERTIFICATE-----
:

Logs of iptables -L -vn:

# Warning: iptables-legacy tables present, use iptables-legacy to see them
Chain INPUT (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         

Chain FORWARD (policy DROP 168 packets, 8876 bytes)
 pkts bytes target     prot opt in     out     source               destination         
96639  263M DOCKER-USER  all  --  *      *       0.0.0.0/0            0.0.0.0/0           
96639  263M DOCKER-ISOLATION-STAGE-1  all  --  *      *       0.0.0.0/0            0.0.0.0/0           
60092  259M ACCEPT     all  --  *      br-mailcow  0.0.0.0/0            0.0.0.0/0            ctstate RELATED,ESTABLISHED
 1388 83749 DOCKER     all  --  *      br-mailcow  0.0.0.0/0            0.0.0.0/0           
35050 3611K ACCEPT     all  --  br-mailcow !br-mailcow  0.0.0.0/0            0.0.0.0/0           
 1356 81913 ACCEPT     all  --  br-mailcow br-mailcow  0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     all  --  *      docker0  0.0.0.0/0            0.0.0.0/0            ctstate RELATED,ESTABLISHED
    0     0 DOCKER     all  --  *      docker0  0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     all  --  docker0 !docker0  0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     all  --  docker0 docker0  0.0.0.0/0            0.0.0.0/0           

Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         

Chain DOCKER (2 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     tcp  --  !br-mailcow br-mailcow  0.0.0.0/0            172.22.1.249         tcp dpt:6379
    0     0 ACCEPT     tcp  --  !br-mailcow br-mailcow  0.0.0.0/0            172.22.1.5           tcp dpt:8983
    0     0 ACCEPT     tcp  --  !br-mailcow br-mailcow  0.0.0.0/0            172.22.1.7           tcp dpt:3306
   14   824 ACCEPT     tcp  --  !br-mailcow br-mailcow  0.0.0.0/0            172.22.1.8           tcp dpt:443
    6   360 ACCEPT     tcp  --  !br-mailcow br-mailcow  0.0.0.0/0            172.22.1.8           tcp dpt:80
    0     0 ACCEPT     tcp  --  !br-mailcow br-mailcow  0.0.0.0/0            172.22.1.250         tcp dpt:12345
    0     0 ACCEPT     tcp  --  !br-mailcow br-mailcow  0.0.0.0/0            172.22.1.250         tcp dpt:4190
    0     0 ACCEPT     tcp  --  !br-mailcow br-mailcow  0.0.0.0/0            172.22.1.250         tcp dpt:995
    0     0 ACCEPT     tcp  --  !br-mailcow br-mailcow  0.0.0.0/0            172.22.1.250         tcp dpt:993
    0     0 ACCEPT     tcp  --  !br-mailcow br-mailcow  0.0.0.0/0            172.22.1.250         tcp dpt:143
    0     0 ACCEPT     tcp  --  !br-mailcow br-mailcow  0.0.0.0/0            172.22.1.250         tcp dpt:110
    0     0 ACCEPT     tcp  --  !br-mailcow br-mailcow  0.0.0.0/0            172.22.1.253         tcp dpt:587
    0     0 ACCEPT     tcp  --  !br-mailcow br-mailcow  0.0.0.0/0            172.22.1.253         tcp dpt:465
    0     0 ACCEPT     tcp  --  !br-mailcow br-mailcow  0.0.0.0/0            172.22.1.253         tcp dpt:25

Chain DOCKER-ISOLATION-STAGE-1 (1 references)
 pkts bytes target     prot opt in     out     source               destination         
35050 3611K DOCKER-ISOLATION-STAGE-2  all  --  br-mailcow !br-mailcow  0.0.0.0/0            0.0.0.0/0           
    0     0 DOCKER-ISOLATION-STAGE-2  all  --  docker0 !docker0  0.0.0.0/0            0.0.0.0/0           
96698  263M RETURN     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain DOCKER-ISOLATION-STAGE-2 (2 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 DROP       all  --  *      br-mailcow  0.0.0.0/0            0.0.0.0/0           
    0     0 DROP       all  --  *      docker0  0.0.0.0/0            0.0.0.0/0           
35050 3611K RETURN     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain DOCKER-USER (1 references)
 pkts bytes target     prot opt in     out     source               destination         
96698  263M RETURN     all  --  *      *       0.0.0.0/0            0.0.0.0/0

Logs of ip6tables -L -vn:

# Warning: ip6tables-legacy tables present, use ip6tables-legacy to see them
Chain INPUT (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         

Chain FORWARD (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         
 4164 1302K DOCKER-USER  all      *      *       ::/0                 ::/0                
 4164 1302K DOCKER-ISOLATION-STAGE-1  all      *      *       ::/0                 ::/0                
 4082 1294K DOCKER     all      *      br-mailcow  ::/0                 ::/0                
 1025 1094K ACCEPT     all      *      br-mailcow  ::/0                 ::/0                 ctstate RELATED,ESTABLISHED
   82  7799 ACCEPT     all      br-mailcow !br-mailcow  ::/0                 ::/0                
 3057  200K ACCEPT     all      br-mailcow br-mailcow  ::/0                 ::/0                

Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         

Chain DOCKER (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     tcp      !br-mailcow br-mailcow  ::/0                 fd4d:6169:6c63:6f77::c  tcp dpt:80
    0     0 ACCEPT     tcp      !br-mailcow br-mailcow  ::/0                 fd4d:6169:6c63:6f77::c  tcp dpt:443
    0     0 ACCEPT     tcp      !br-mailcow br-mailcow  ::/0                 fd4d:6169:6c63:6f77::b  tcp dpt:110
    0     0 ACCEPT     tcp      !br-mailcow br-mailcow  ::/0                 fd4d:6169:6c63:6f77::b  tcp dpt:143
    0     0 ACCEPT     tcp      !br-mailcow br-mailcow  ::/0                 fd4d:6169:6c63:6f77::b  tcp dpt:4190
    0     0 ACCEPT     tcp      !br-mailcow br-mailcow  ::/0                 fd4d:6169:6c63:6f77::b  tcp dpt:993
    0     0 ACCEPT     tcp      !br-mailcow br-mailcow  ::/0                 fd4d:6169:6c63:6f77::b  tcp dpt:995
    0     0 ACCEPT     tcp      !br-mailcow br-mailcow  ::/0                 fd4d:6169:6c63:6f77::f  tcp dpt:25
    0     0 ACCEPT     tcp      !br-mailcow br-mailcow  ::/0                 fd4d:6169:6c63:6f77::f  tcp dpt:465
    0     0 ACCEPT     tcp      !br-mailcow br-mailcow  ::/0                 fd4d:6169:6c63:6f77::f  tcp dpt:587

Chain DOCKER-ISOLATION-STAGE-1 (1 references)
 pkts bytes target     prot opt in     out     source               destination         
   82  7799 DOCKER-ISOLATION-STAGE-2  all      br-mailcow !br-mailcow  ::/0                 ::/0                
 4164 1302K RETURN     all      *      *       ::/0                 ::/0                

Chain DOCKER-ISOLATION-STAGE-2 (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 DROP       all      *      br-mailcow  ::/0                 ::/0                
   82  7799 RETURN     all      *      *       ::/0                 ::/0                

Chain DOCKER-USER (1 references)
 pkts bytes target     prot opt in     out     source               destination         
 4164 1302K RETURN     all      *      *       ::/0                 ::/0

Logs of iptables -L -vn -t nat:

# Warning: iptables-legacy tables present, use iptables-legacy to see them
Chain PREROUTING (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         
  338 18917 DOCKER     all  --  *      *       0.0.0.0/0            0.0.0.0/0            ADDRTYPE match dst-type LOCAL

Chain INPUT (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         

Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 DOCKER     all  --  *      *       0.0.0.0/0           !127.0.0.0/8          ADDRTYPE match dst-type LOCAL

Chain POSTROUTING (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         
  373 26137 MASQUERADE  all  --  *      !br-mailcow  172.22.1.0/24        0.0.0.0/0           
    0     0 MASQUERADE  all  --  *      !docker0  172.17.0.0/16        0.0.0.0/0           
    0     0 MASQUERADE  tcp  --  *      *       172.22.1.249         172.22.1.249         tcp dpt:6379
    0     0 MASQUERADE  tcp  --  *      *       172.22.1.5           172.22.1.5           tcp dpt:8983
    0     0 MASQUERADE  tcp  --  *      *       172.22.1.7           172.22.1.7           tcp dpt:3306
    0     0 MASQUERADE  tcp  --  *      *       172.22.1.8           172.22.1.8           tcp dpt:443
    0     0 MASQUERADE  tcp  --  *      *       172.22.1.8           172.22.1.8           tcp dpt:80
    0     0 MASQUERADE  tcp  --  *      *       172.22.1.250         172.22.1.250         tcp dpt:12345
    0     0 MASQUERADE  tcp  --  *      *       172.22.1.250         172.22.1.250         tcp dpt:4190
    0     0 MASQUERADE  tcp  --  *      *       172.22.1.250         172.22.1.250         tcp dpt:995
    0     0 MASQUERADE  tcp  --  *      *       172.22.1.250         172.22.1.250         tcp dpt:993
    0     0 MASQUERADE  tcp  --  *      *       172.22.1.250         172.22.1.250         tcp dpt:143
    0     0 MASQUERADE  tcp  --  *      *       172.22.1.250         172.22.1.250         tcp dpt:110
    0     0 MASQUERADE  tcp  --  *      *       172.22.1.253         172.22.1.253         tcp dpt:587
    0     0 MASQUERADE  tcp  --  *      *       172.22.1.253         172.22.1.253         tcp dpt:465
    0     0 MASQUERADE  tcp  --  *      *       172.22.1.253         172.22.1.253         tcp dpt:25

Chain DOCKER (2 references)
 pkts bytes target     prot opt in     out     source               destination         
    1    60 RETURN     all  --  br-mailcow *       0.0.0.0/0            0.0.0.0/0           
    0     0 RETURN     all  --  docker0 *       0.0.0.0/0            0.0.0.0/0           
    0     0 DNAT       tcp  --  !br-mailcow *       0.0.0.0/0            127.0.0.1            tcp dpt:7654 to:172.22.1.249:6379
    0     0 DNAT       tcp  --  !br-mailcow *       0.0.0.0/0            127.0.0.1            tcp dpt:18983 to:172.22.1.5:8983
    0     0 DNAT       tcp  --  !br-mailcow *       0.0.0.0/0            127.0.0.1            tcp dpt:13306 to:172.22.1.7:3306
   14   824 DNAT       tcp  --  !br-mailcow *       0.0.0.0/0            0.0.0.0/0            tcp dpt:443 to:172.22.1.8:443
    6   360 DNAT       tcp  --  !br-mailcow *       0.0.0.0/0            0.0.0.0/0            tcp dpt:80 to:172.22.1.8:80
    0     0 DNAT       tcp  --  !br-mailcow *       0.0.0.0/0            127.0.0.1            tcp dpt:19991 to:172.22.1.250:12345
    0     0 DNAT       tcp  --  !br-mailcow *       0.0.0.0/0            0.0.0.0/0            tcp dpt:4190 to:172.22.1.250:4190
    0     0 DNAT       tcp  --  !br-mailcow *       0.0.0.0/0            0.0.0.0/0            tcp dpt:995 to:172.22.1.250:995
    0     0 DNAT       tcp  --  !br-mailcow *       0.0.0.0/0            0.0.0.0/0            tcp dpt:993 to:172.22.1.250:993
    0     0 DNAT       tcp  --  !br-mailcow *       0.0.0.0/0            0.0.0.0/0            tcp dpt:143 to:172.22.1.250:143
    0     0 DNAT       tcp  --  !br-mailcow *       0.0.0.0/0            0.0.0.0/0            tcp dpt:110 to:172.22.1.250:110
    0     0 DNAT       tcp  --  !br-mailcow *       0.0.0.0/0            0.0.0.0/0            tcp dpt:587 to:172.22.1.253:587
    0     0 DNAT       tcp  --  !br-mailcow *       0.0.0.0/0            0.0.0.0/0            tcp dpt:465 to:172.22.1.253:465
    0     0 DNAT       tcp  --  !br-mailcow *       0.0.0.0/0            0.0.0.0/0            tcp dpt:25 to:172.22.1.253:25

Logs of ip6tables -L -vn -t nat:

# Warning: ip6tables-legacy tables present, use ip6tables-legacy to see them
Chain PREROUTING (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 DOCKER     all      *      *       ::/0                 ::/0                 ADDRTYPE match dst-type LOCAL

Chain INPUT (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         

Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 DOCKER     all      *      *       ::/0                !::1                  ADDRTYPE match dst-type LOCAL

Chain POSTROUTING (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 MASQUERADE  all      *      br-mailcow  ::/0                 ::/0                 ADDRTYPE match dst-type LOCAL
   73  7011 MASQUERADE  all      *      !br-mailcow  fd4d:6169:6c63:6f77::/64  ::/0                
    0     0 MASQUERADE  tcp      *      *       fd4d:6169:6c63:6f77::c  fd4d:6169:6c63:6f77::c  tcp dpt:80
    0     0 MASQUERADE  tcp      *      *       fd4d:6169:6c63:6f77::c  fd4d:6169:6c63:6f77::c  tcp dpt:443
    0     0 MASQUERADE  tcp      *      *       fd4d:6169:6c63:6f77::b  fd4d:6169:6c63:6f77::b  tcp dpt:110
    0     0 MASQUERADE  tcp      *      *       fd4d:6169:6c63:6f77::b  fd4d:6169:6c63:6f77::b  tcp dpt:143
    0     0 MASQUERADE  tcp      *      *       fd4d:6169:6c63:6f77::b  fd4d:6169:6c63:6f77::b  tcp dpt:4190
    0     0 MASQUERADE  tcp      *      *       fd4d:6169:6c63:6f77::b  fd4d:6169:6c63:6f77::b  tcp dpt:993
    0     0 MASQUERADE  tcp      *      *       fd4d:6169:6c63:6f77::b  fd4d:6169:6c63:6f77::b  tcp dpt:995
    0     0 MASQUERADE  tcp      *      *       fd4d:6169:6c63:6f77::f  fd4d:6169:6c63:6f77::f  tcp dpt:25
    0     0 MASQUERADE  tcp      *      *       fd4d:6169:6c63:6f77::f  fd4d:6169:6c63:6f77::f  tcp dpt:465
    0     0 MASQUERADE  tcp      *      *       fd4d:6169:6c63:6f77::f  fd4d:6169:6c63:6f77::f  tcp dpt:587

Chain DOCKER (2 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 RETURN     all      br-mailcow *       ::/0                 ::/0                
    0     0 DNAT       tcp      !br-mailcow *       ::/0                 ::/0                 tcp dpt:80 to:[fd4d:6169:6c63:6f77::c]:80
    0     0 DNAT       tcp      !br-mailcow *       ::/0                 ::/0                 tcp dpt:443 to:[fd4d:6169:6c63:6f77::c]:443
    0     0 DNAT       tcp      !br-mailcow *       ::/0                 ::/0                 tcp dpt:110 to:[fd4d:6169:6c63:6f77::b]:110
    0     0 DNAT       tcp      !br-mailcow *       ::/0                 ::/0                 tcp dpt:143 to:[fd4d:6169:6c63:6f77::b]:143
    0     0 DNAT       tcp      !br-mailcow *       ::/0                 ::/0                 tcp dpt:4190 to:[fd4d:6169:6c63:6f77::b]:4190
    0     0 DNAT       tcp      !br-mailcow *       ::/0                 ::/0                 tcp dpt:993 to:[fd4d:6169:6c63:6f77::b]:993
    0     0 DNAT       tcp      !br-mailcow *       ::/0                 ::/0                 tcp dpt:995 to:[fd4d:6169:6c63:6f77::b]:995
    0     0 DNAT       tcp      !br-mailcow *       ::/0                 ::/0                 tcp dpt:25 to:[fd4d:6169:6c63:6f77::f]:25
    0     0 DNAT       tcp      !br-mailcow *       ::/0                 ::/0                 tcp dpt:465 to:[fd4d:6169:6c63:6f77::f]:465
    0     0 DNAT       tcp      !br-mailcow *       ::/0                 ::/0                 tcp dpt:587 to:[fd4d:6169:6c63:6f77::f]:587

DNS check:

104.18.23.201
104.18.22.201
@EpicJosch EpicJosch added the bug label Oct 17, 2023
@vigorio
Copy link

vigorio commented Oct 17, 2023

Welcome in the club! Try the 2023-09 version. It works.

@EpicJosch
Copy link
Author

Welcome in the club! Try the 2023-09 version. It works.

how can i install an older version?

@EpicJosch
Copy link
Author

2023-09

Still the same error in version 2023-09

@MAGICCC
Copy link
Member

MAGICCC commented Oct 17, 2023

When I connect to your domain from the logs, I can see the mailcow login screen.

@MAGICCC MAGICCC closed this as completed Oct 17, 2023
@Aditya-Rajgor
Copy link 

docker compose down --volumes
docker compose up -d

worked for me, you might lose your data, make sure you back up first.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
bug
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
4 participants
@MAGICCC @EpicJosch @Aditya-Rajgor @vigorio