Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Outlook App (Android/iOS) - New emails not being sent do client when using EAS #5846

Closed
5 tasks done
gellenburg opened this issue Apr 18, 2024 · 18 comments
Closed
5 tasks done

Outlook App (Android/iOS) - New emails not being sent do client when using EAS #5846

gellenburg opened this issue Apr 18, 2024 · 18 comments
Labels
bug

Comments

@gellenburg
Copy link

Contribution guidelines

I've found a bug and checked that ...

  • ... I understand that not following the below instructions will result in immediate closure and/or deletion of my issue.
  • ... I have understood that this bug report is dedicated for bugs, and not for support-related inquiries.
  • ... I have understood that answers are voluntary and community-driven, and not commercial support.
  • ... I have verified that my issue has not been already answered in the past. I also checked previous issues.

Description

I am reporting a bug. Since upgrading to Mailcow 2024-04 on April 13th, new emails received by mailboxes are not being delivered to Outlook clients running on Android.

I have had the users completely clear their cache and stored data and gone through setting up Outlook from scratch on their clients.

The client authenticates just fine, and the mailbox contents are downloaded, but any mail received after April 13th (the day Mailcow was updated) are not delivered.

The emails however DO appear in Sogo, and using other clients such as Thunderbird on the desktop.

The issue appears to only be affecting Outlook clients on Android.

Logs:

php-fpm-mailcow-1    | 2024-04-18T01:11:04.274483309Z 172.22.1.8 -  17/Apr/2024:21:11:04 -0400 "GET /json_api.php" 200
nginx-mailcow-1      | 2024-04-18T01:11:04.274566383Z 104.129.24.107 - - [17/Apr/2024:21:11:04 -0400] "GET /api/v1/get/status/host HTTP/2.0" 200 157 "https://linycmx01.bofhllc.net/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0"
php-fpm-mailcow-1    | 2024-04-18T01:11:05.255463291Z 172.22.1.8 - george@ellenburg.email 17/Apr/2024:21:11:05 -0400 "GET /sogo-auth.php" 200
nginx-mailcow-1      | 2024-04-18T01:11:05.257506963Z 127.0.0.1 - george@ellenburg.email [17/Apr/2024:21:11:05 -0400] "GET /sogo-auth HTTP/1.0" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:127.0) Gecko/20100101 Firefox/127.0 Thunderbird/127.0a1"
nginx-mailcow-1      | 2024-04-18T01:11:05.274314035Z 2607:fcd0:aa80:1302::e030 - george@ellenburg.email [17/Apr/2024:21:11:05 -0400] "REPORT /SOGo/dav/george@ellenburg.email/Contacts/personal/ HTTP/2.0" 207 125 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:127.0) Gecko/20100101 Firefox/127.0 Thunderbird/127.0a1"
sogo-mailcow-1       | 2024-04-18T01:11:05.275637612Z Apr 17 21:11:05 2e17a5da77ce sogod [85]: 2607:fcd0:aa80:1302::e030 "REPORT /SOGo/dav/george@ellenburg.email/Contacts/personal/ HTTP/1.0" 207 125/303 0.016 - - 0 - 13
php-fpm-mailcow-1    | 2024-04-18T01:11:06.308595325Z fd4d:6169:6c63:6f77::c -  17/Apr/2024:21:11:06 -0400 "GET /sogo-auth.php" 200
nginx-mailcow-1      | 2024-04-18T01:11:06.309249490Z 127.0.0.1 - - [17/Apr/2024:21:11:06 -0400] "GET /sogo-auth HTTP/1.0" 200 0 "-" "Outlook-iOS-Android/1.0"
nginx-mailcow-1      | 2024-04-18T01:11:06.312141266Z 2603:1036:30c:138::5 - - [17/Apr/2024:21:11:06 -0400] "OPTIONS /Microsoft-Server-ActiveSync?Cmd=Options&User=george%40ellenburg.email&DeviceId=3d47507fced84135b3c880d497a2cc43&DeviceType=Outlook HTTP/1.1" 401 0 "-" "Outlook-iOS-Android/1.0"
sogo-mailcow-1       | 2024-04-18T01:11:06.313337046Z Apr 17 21:11:06 2e17a5da77ce sogod [85]: 2603:1036:30c:138::5 "OPTIONS /SOGo/Microsoft-Server-ActiveSync?Cmd=Options&User=george%40ellenburg.email&DeviceId=3d47507fced84135b3c880d497a2cc43&DeviceType=Outlook HTTP/1.0" 401 0/0 0.002 - - 0 - 13
php-fpm-mailcow-1    | 2024-04-18T01:11:06.463900165Z 172.22.1.8 - george@ellenburg.email 17/Apr/2024:21:11:06 -0400 "GET /sogo-auth.php" 200
nginx-mailcow-1      | 2024-04-18T01:11:06.464784907Z 127.0.0.1 - george@ellenburg.email [17/Apr/2024:21:11:06 -0400] "GET /sogo-auth HTTP/1.0" 200 0 "-" "Outlook-iOS-Android/1.0"
nginx-mailcow-1      | 2024-04-18T01:11:06.467065278Z 2603:1036:30c:138::5 - george@ellenburg.email [17/Apr/2024:21:11:06 -0400] "OPTIONS /Microsoft-Server-ActiveSync?Cmd=Options&User=george%40ellenburg.email&DeviceId=3d47507fced84135b3c880d497a2cc43&DeviceType=Outlook HTTP/1.1" 200 0 "-" "Outlook-iOS-Android/1.0"
sogo-mailcow-1       | 2024-04-18T01:11:06.467508251Z Apr 17 21:11:06 2e17a5da77ce sogod [85]: 2603:1036:30c:138::5 "OPTIONS /SOGo/Microsoft-Server-ActiveSync?Cmd=Options&User=george%40ellenburg.email&DeviceId=3d47507fced84135b3c880d497a2cc43&DeviceType=Outlook HTTP/1.0" 200 0/0 0.002 - - 0 - 13
php-fpm-mailcow-1    | 2024-04-18T01:11:06.858394990Z fd4d:6169:6c63:6f77::c -  17/Apr/2024:21:11:06 -0400 "GET /sogo-auth.php" 200
nginx-mailcow-1      | 2024-04-18T01:11:06.858606933Z 127.0.0.1 - - [17/Apr/2024:21:11:06 -0400] "GET /sogo-auth HTTP/1.0" 200 0 "-" "Outlook-iOS-Android/1.0"
nginx-mailcow-1      | 2024-04-18T01:11:06.861571345Z 2603:1036:30c:138::5 - - [17/Apr/2024:21:11:06 -0400] "POST /Microsoft-Server-ActiveSync?Cmd=FolderSync&User=george%40ellenburg.email&DeviceId=3d47507fced84135b3c880d497a2cc43&DeviceType=Outlook HTTP/1.1" 403 0 "-" "Outlook-iOS-Android/1.0"
sogo-mailcow-1       | 2024-04-18T01:11:06.861576594Z Apr 17 21:11:06 2e17a5da77ce sogod [85]: <0x0x55d16c49ef10[SOGoActiveSyncDispatcher]> EAS - Forbidden access for user (null)
sogo-mailcow-1       | 2024-04-18T01:11:06.862868762Z Apr 17 21:11:06 2e17a5da77ce sogod [85]: 2603:1036:30c:138::5 "POST /SOGo/Microsoft-Server-ActiveSync?Cmd=FolderSync&User=george%40ellenburg.email&DeviceId=3d47507fced84135b3c880d497a2cc43&DeviceType=Outlook HTTP/1.0" 403 0/38 0.002 - - 0 - 13
watchdog-mailcow-1   | 2024-04-18T01:11:06.919454586Z Wed Apr 17 21:11:06 EDT 2024 Ratelimit health level: 100% (1/1), health trend: 0
dockerapi-mailcow-1  | 2024-04-18T01:11:09.433139347Z INFO:     172.22.1.7:52876 - "GET /host/stats HTTP/1.1" 200 OK
php-fpm-mailcow-1    | 2024-04-18T01:11:09.433770088Z 172.22.1.8 -  17/Apr/2024:21:11:09 -0400 "GET /json_api.php" 200
nginx-mailcow-1      | 2024-04-18T01:11:09.434401008Z 104.129.24.107 - - [17/Apr/2024:21:11:09 -0400] "GET /api/v1/get/status/host HTTP/2.0" 200 157 "https://linycmx01.bofhllc.net/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0"



### Steps to reproduce:

```plain text
1. Upgrade to 2024-04
2. Receive mail
3. Notice that new mail received is not being delivered to Outlook clients running on Android

Which branch are you using?

master

Which architecture are you using?

x86

Operating System:

Debian GNU/Linux 11 (bullseye)

Server/VM specifications:

6 cores, 16 GB

Is Apparmor, SELinux or similar active?

no

Virtualization technology:

qemu

Docker version:

26.0.0

docker-compose version or docker compose version:

v2.25.0

mailcow version:

2024-04

Reverse proxy:

nginx

Logs of git diff:

n/a

Logs of iptables -L -vn:

root@linycmx01:/opt/mailcow-dockerized# iptables -L -vn
Chain INPUT (policy ACCEPT 1153K packets, 283M bytes)
 pkts bytes target     prot opt in     out     source               destination         
1153K  283M MAILCOW    all  --  *      *       0.0.0.0/0            0.0.0.0/0            /* mailcow */
1153K  283M MAILCOW    all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain FORWARD (policy DROP 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         
65656   18M DOCKER-USER  all  --  *      *       0.0.0.0/0            0.0.0.0/0           
65656   18M DOCKER-ISOLATION-STAGE-1  all  --  *      *       0.0.0.0/0            0.0.0.0/0           
54755   14M ACCEPT     all  --  *      br-mailcow  0.0.0.0/0            0.0.0.0/0            ctstate RELATED,ESTABLISHED
 4416  278K DOCKER     all  --  *      br-mailcow  0.0.0.0/0            0.0.0.0/0           
 6485 3232K ACCEPT     all  --  br-mailcow !br-mailcow  0.0.0.0/0            0.0.0.0/0           
 4222  267K ACCEPT     all  --  br-mailcow br-mailcow  0.0.0.0/0            0.0.0.0/0           
5647K 1960M MAILCOW    all  --  *      *       0.0.0.0/0            0.0.0.0/0            /* mailcow */
    0     0 ACCEPT     all  --  *      docker0  0.0.0.0/0            0.0.0.0/0            ctstate RELATED,ESTABLISHED
    0     0 DOCKER     all  --  *      docker0  0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     all  --  docker0 !docker0  0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     all  --  docker0 docker0  0.0.0.0/0            0.0.0.0/0           
    0     0 MAILCOW    all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain OUTPUT (policy ACCEPT 1087K packets, 151M bytes)
 pkts bytes target     prot opt in     out     source               destination         

Chain DOCKER (2 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     tcp  --  !br-mailcow br-mailcow  0.0.0.0/0            172.22.1.249         tcp dpt:6379
    0     0 ACCEPT     tcp  --  !br-mailcow br-mailcow  0.0.0.0/0            172.22.1.5           tcp dpt:8983
    0     0 ACCEPT     tcp  --  !br-mailcow br-mailcow  0.0.0.0/0            172.22.1.6           tcp dpt:3306
    0     0 ACCEPT     tcp  --  !br-mailcow br-mailcow  0.0.0.0/0            172.22.1.250         tcp dpt:12345
    0     0 ACCEPT     tcp  --  !br-mailcow br-mailcow  0.0.0.0/0            172.22.1.250         tcp dpt:4190
    6   360 ACCEPT     tcp  --  !br-mailcow br-mailcow  0.0.0.0/0            172.22.1.250         tcp dpt:995
    6   312 ACCEPT     tcp  --  !br-mailcow br-mailcow  0.0.0.0/0            172.22.1.250         tcp dpt:993
    2   100 ACCEPT     tcp  --  !br-mailcow br-mailcow  0.0.0.0/0            172.22.1.250         tcp dpt:143
    1    52 ACCEPT     tcp  --  !br-mailcow br-mailcow  0.0.0.0/0            172.22.1.250         tcp dpt:110
   21  1216 ACCEPT     tcp  --  !br-mailcow br-mailcow  0.0.0.0/0            172.22.1.8           tcp dpt:443
    3   144 ACCEPT     tcp  --  !br-mailcow br-mailcow  0.0.0.0/0            172.22.1.8           tcp dpt:80
    2   120 ACCEPT     tcp  --  !br-mailcow br-mailcow  0.0.0.0/0            172.22.1.253         tcp dpt:587
  149  8932 ACCEPT     tcp  --  !br-mailcow br-mailcow  0.0.0.0/0            172.22.1.253         tcp dpt:465
    4   216 ACCEPT     tcp  --  !br-mailcow br-mailcow  0.0.0.0/0            172.22.1.253         tcp dpt:25

Chain DOCKER-ISOLATION-STAGE-1 (1 references)
 pkts bytes target     prot opt in     out     source               destination         
 6485 3232K DOCKER-ISOLATION-STAGE-2  all  --  br-mailcow !br-mailcow  0.0.0.0/0            0.0.0.0/0           
    0     0 DOCKER-ISOLATION-STAGE-2  all  --  docker0 !docker0  0.0.0.0/0            0.0.0.0/0           
5640K 1974M RETURN     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain DOCKER-ISOLATION-STAGE-2 (2 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 DROP       all  --  *      br-mailcow  0.0.0.0/0            0.0.0.0/0           
    0     0 DROP       all  --  *      docker0  0.0.0.0/0            0.0.0.0/0           
 569K  179M RETURN     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain DOCKER-USER (1 references)
 pkts bytes target     prot opt in     out     source               destination         
5640K 1974M RETURN     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain MAILCOW (4 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 DROP       tcp  --  !br-mailcow br-mailcow  0.0.0.0/0            0.0.0.0/0            /* mailcow isolation */
    0     0 DROP       all  --  *      *       80.244.11.0/24       0.0.0.0/0           
    0     0 DROP       all  --  *      *       80.244.11.0/24       0.0.0.0/0           
    0     0 DROP       all  --  *      *       80.244.11.0/24       0.0.0.0/0           
 6584  396K DROP       all  --  *      *       194.169.175.0/24     0.0.0.0/0           
33587 2015K DROP       all  --  *      *       80.244.11.0/24       0.0.0.0/0           
   33  1320 REJECT     all  --  *      *       87.246.7.0/24        0.0.0.0/0            reject-with icmp-port-unreachable
root@linycmx01:/opt/mailcow-dockerized#

Logs of ip6tables -L -vn:

root@linycmx01:/opt/mailcow-dockerized# ip6tables -L -vn
Chain INPUT (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         

Chain FORWARD (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 MAILCOW    all      *      *       ::/0                 ::/0                 /* mailcow */
15899   13M DOCKER-USER  all      *      *       ::/0                 ::/0                
1040K 1344M DOCKER     all      *      br-mailcow  ::/0                 ::/0                
 794K 1324M ACCEPT     all      *      br-mailcow  ::/0                 ::/0                 ctstate RELATED,ESTABLISHED
 168K   21M ACCEPT     all      br-mailcow !br-mailcow  ::/0                 ::/0                
 160K   11M ACCEPT     all      br-mailcow br-mailcow  ::/0                 ::/0                
  503 42620 DOCKER-ISOLATION-STAGE-1  all      *      *       ::/0                 ::/0                

Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         

Chain DOCKER (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     tcp      !br-mailcow br-mailcow  ::/0                 fd4d:6169:6c63:6f77::c  tcp dpt:80
  292 48685 ACCEPT     tcp      !br-mailcow br-mailcow  ::/0                 fd4d:6169:6c63:6f77::c  tcp dpt:443
    0     0 ACCEPT     tcp      !br-mailcow br-mailcow  ::/0                 fd4d:6169:6c63:6f77::b  tcp dpt:143
    0     0 ACCEPT     tcp      !br-mailcow br-mailcow  ::/0                 fd4d:6169:6c63:6f77::b  tcp dpt:4190
  597 58783 ACCEPT     tcp      !br-mailcow br-mailcow  ::/0                 fd4d:6169:6c63:6f77::b  tcp dpt:993
    0     0 ACCEPT     tcp      !br-mailcow br-mailcow  ::/0                 fd4d:6169:6c63:6f77::b  tcp dpt:995
    0     0 ACCEPT     tcp      !br-mailcow br-mailcow  ::/0                 fd4d:6169:6c63:6f77::b  tcp dpt:110
   14  1470 ACCEPT     tcp      !br-mailcow br-mailcow  ::/0                 fd4d:6169:6c63:6f77::f  tcp dpt:465
    0     0 ACCEPT     tcp      !br-mailcow br-mailcow  ::/0                 fd4d:6169:6c63:6f77::f  tcp dpt:587
    0     0 ACCEPT     tcp      !br-mailcow br-mailcow  ::/0                 fd4d:6169:6c63:6f77::f  tcp dpt:25

Chain DOCKER-ISOLATION-STAGE-1 (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 DOCKER-ISOLATION-STAGE-2  all      br-mailcow !br-mailcow  ::/0                 ::/0                
    0     0 RETURN     all      *      *       ::/0                 ::/0                

Chain DOCKER-ISOLATION-STAGE-2 (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 DROP       all      *      br-mailcow  ::/0                 ::/0                
    0     0 RETURN     all      *      *       ::/0                 ::/0                

Chain DOCKER-USER (1 references)
 pkts bytes target     prot opt in     out     source               destination         
1208K 1365M RETURN     all      *      *       ::/0                 ::/0                

Chain MAILCOW (1 references)
 pkts bytes target     prot opt in     out     source               destination         
root@linycmx01:/opt/mailcow-dockerized#

Logs of iptables -L -vn -t nat:

root@linycmx01:/opt/mailcow-dockerized# iptables -L -vn -t nat
Chain PREROUTING (policy ACCEPT 772K packets, 50M bytes)
 pkts bytes target     prot opt in     out     source               destination         
 192K   11M DOCKER     all  --  *      *       0.0.0.0/0            0.0.0.0/0            ADDRTYPE match dst-type LOCAL

Chain INPUT (policy ACCEPT 102K packets, 5446K bytes)
 pkts bytes target     prot opt in     out     source               destination         

Chain OUTPUT (policy ACCEPT 971 packets, 63010 bytes)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 DOCKER     all  --  *      *       0.0.0.0/0           !127.0.0.0/8          ADDRTYPE match dst-type LOCAL

Chain POSTROUTING (policy ACCEPT 477K packets, 30M bytes)
 pkts bytes target     prot opt in     out     source               destination         
 1819  136K MASQUERADE  all  --  *      !br-mailcow  172.22.1.0/24        0.0.0.0/0           
    0     0 MASQUERADE  all  --  *      !docker0  172.17.0.0/16        0.0.0.0/0           
    0     0 MASQUERADE  tcp  --  *      *       172.22.1.7           172.22.1.7           tcp dpt:443
    0     0 MASQUERADE  tcp  --  *      *       172.22.1.7           172.22.1.7           tcp dpt:80
    0     0 MASQUERADE  tcp  --  *      *       172.22.1.10          172.22.1.10          tcp dpt:8983
    0     0 MASQUERADE  tcp  --  *      *       172.22.1.11          172.22.1.11          tcp dpt:3306
    0     0 MASQUERADE  tcp  --  *      *       172.22.1.249         172.22.1.249         tcp dpt:6379
    0     0 MASQUERADE  tcp  --  *      *       172.22.1.5           172.22.1.5           tcp dpt:8983
    0     0 MASQUERADE  tcp  --  *      *       172.22.1.6           172.22.1.6           tcp dpt:3306
    0     0 MASQUERADE  tcp  --  *      *       172.22.1.250         172.22.1.250         tcp dpt:12345
    0     0 MASQUERADE  tcp  --  *      *       172.22.1.250         172.22.1.250         tcp dpt:4190
    0     0 MASQUERADE  tcp  --  *      *       172.22.1.250         172.22.1.250         tcp dpt:995
    0     0 MASQUERADE  tcp  --  *      *       172.22.1.250         172.22.1.250         tcp dpt:993
    0     0 MASQUERADE  tcp  --  *      *       172.22.1.250         172.22.1.250         tcp dpt:143
    0     0 MASQUERADE  tcp  --  *      *       172.22.1.250         172.22.1.250         tcp dpt:110
    0     0 MASQUERADE  tcp  --  *      *       172.22.1.8           172.22.1.8           tcp dpt:443
    0     0 MASQUERADE  tcp  --  *      *       172.22.1.8           172.22.1.8           tcp dpt:80
    0     0 MASQUERADE  tcp  --  *      *       172.22.1.253         172.22.1.253         tcp dpt:587
    0     0 MASQUERADE  tcp  --  *      *       172.22.1.253         172.22.1.253         tcp dpt:465
    0     0 MASQUERADE  tcp  --  *      *       172.22.1.253         172.22.1.253         tcp dpt:25

Chain DOCKER (2 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 RETURN     all  --  br-mailcow *       0.0.0.0/0            0.0.0.0/0           
    0     0 RETURN     all  --  docker0 *       0.0.0.0/0            0.0.0.0/0           
    0     0 DNAT       tcp  --  !br-mailcow *       0.0.0.0/0            127.0.0.1            tcp dpt:7654 to:172.22.1.249:6379
    0     0 DNAT       tcp  --  !br-mailcow *       0.0.0.0/0            127.0.0.1            tcp dpt:18983 to:172.22.1.5:8983
    0     0 DNAT       tcp  --  !br-mailcow *       0.0.0.0/0            127.0.0.1            tcp dpt:13306 to:172.22.1.6:3306
    0     0 DNAT       tcp  --  !br-mailcow *       0.0.0.0/0            127.0.0.1            tcp dpt:19991 to:172.22.1.250:12345
    0     0 DNAT       tcp  --  !br-mailcow *       0.0.0.0/0            0.0.0.0/0            tcp dpt:4190 to:172.22.1.250:4190
    6   360 DNAT       tcp  --  !br-mailcow *       0.0.0.0/0            0.0.0.0/0            tcp dpt:995 to:172.22.1.250:995
    6   312 DNAT       tcp  --  !br-mailcow *       0.0.0.0/0            0.0.0.0/0            tcp dpt:993 to:172.22.1.250:993
    2   100 DNAT       tcp  --  !br-mailcow *       0.0.0.0/0            0.0.0.0/0            tcp dpt:143 to:172.22.1.250:143
    1    52 DNAT       tcp  --  !br-mailcow *       0.0.0.0/0            0.0.0.0/0            tcp dpt:110 to:172.22.1.250:110
   21  1216 DNAT       tcp  --  !br-mailcow *       0.0.0.0/0            0.0.0.0/0            tcp dpt:443 to:172.22.1.8:443
    3   144 DNAT       tcp  --  !br-mailcow *       0.0.0.0/0            0.0.0.0/0            tcp dpt:80 to:172.22.1.8:80
    2   120 DNAT       tcp  --  !br-mailcow *       0.0.0.0/0            0.0.0.0/0            tcp dpt:587 to:172.22.1.253:587
  161  9652 DNAT       tcp  --  !br-mailcow *       0.0.0.0/0            0.0.0.0/0            tcp dpt:465 to:172.22.1.253:465
    4   216 DNAT       tcp  --  !br-mailcow *       0.0.0.0/0            0.0.0.0/0            tcp dpt:25 to:172.22.1.253:25
root@linycmx01:/opt/mailcow-dockerized#

Logs of ip6tables -L -vn -t nat:

root@linycmx01:/opt/mailcow-dockerized# ip6tables -L -vn -t nat
Chain PREROUTING (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         
 2448  188K DOCKER     all      *      *       ::/0                 ::/0                 ADDRTYPE match dst-type LOCAL

Chain INPUT (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         

Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 DOCKER     all      *      *       ::/0                !::1                  ADDRTYPE match dst-type LOCAL

Chain POSTROUTING (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 MASQUERADE  all      *      br-mailcow  ::/0                 ::/0                 ADDRTYPE match dst-type LOCAL
44981 4357K MASQUERADE  all      *      !br-mailcow  fd4d:6169:6c63:6f77::/64  ::/0                
    0     0 MASQUERADE  tcp      *      *       fd4d:6169:6c63:6f77::c  fd4d:6169:6c63:6f77::c  tcp dpt:80
    0     0 MASQUERADE  tcp      *      *       fd4d:6169:6c63:6f77::c  fd4d:6169:6c63:6f77::c  tcp dpt:443
    0     0 MASQUERADE  tcp      *      *       fd4d:6169:6c63:6f77::b  fd4d:6169:6c63:6f77::b  tcp dpt:143
    0     0 MASQUERADE  tcp      *      *       fd4d:6169:6c63:6f77::b  fd4d:6169:6c63:6f77::b  tcp dpt:4190
    0     0 MASQUERADE  tcp      *      *       fd4d:6169:6c63:6f77::b  fd4d:6169:6c63:6f77::b  tcp dpt:993
    0     0 MASQUERADE  tcp      *      *       fd4d:6169:6c63:6f77::b  fd4d:6169:6c63:6f77::b  tcp dpt:995
    0     0 MASQUERADE  tcp      *      *       fd4d:6169:6c63:6f77::b  fd4d:6169:6c63:6f77::b  tcp dpt:110
    0     0 MASQUERADE  tcp      *      *       fd4d:6169:6c63:6f77::f  fd4d:6169:6c63:6f77::f  tcp dpt:465
    0     0 MASQUERADE  tcp      *      *       fd4d:6169:6c63:6f77::f  fd4d:6169:6c63:6f77::f  tcp dpt:587
    0     0 MASQUERADE  tcp      *      *       fd4d:6169:6c63:6f77::f  fd4d:6169:6c63:6f77::f  tcp dpt:25
    0     0 MASQUERADE  tcp      *      *       fd4d:6169:6c63:6f77::d  fd4d:6169:6c63:6f77::d  tcp dpt:443
    0     0 MASQUERADE  tcp      *      *       fd4d:6169:6c63:6f77::d  fd4d:6169:6c63:6f77::d  tcp dpt:80
    0     0 MASQUERADE  tcp      *      *       fd4d:6169:6c63:6f77::12  fd4d:6169:6c63:6f77::12  tcp dpt:4190
    0     0 MASQUERADE  tcp      *      *       fd4d:6169:6c63:6f77::12  fd4d:6169:6c63:6f77::12  tcp dpt:993
    0     0 MASQUERADE  tcp      *      *       fd4d:6169:6c63:6f77::12  fd4d:6169:6c63:6f77::12  tcp dpt:995
    0     0 MASQUERADE  tcp      *      *       fd4d:6169:6c63:6f77::12  fd4d:6169:6c63:6f77::12  tcp dpt:110
    0     0 MASQUERADE  tcp      *      *       fd4d:6169:6c63:6f77::12  fd4d:6169:6c63:6f77::12  tcp dpt:143
    0     0 MASQUERADE  tcp      *      *       fd4d:6169:6c63:6f77::e  fd4d:6169:6c63:6f77::e  tcp dpt:587
    0     0 MASQUERADE  tcp      *      *       fd4d:6169:6c63:6f77::e  fd4d:6169:6c63:6f77::e  tcp dpt:25
    0     0 MASQUERADE  tcp      *      *       fd4d:6169:6c63:6f77::e  fd4d:6169:6c63:6f77::e  tcp dpt:465

Chain DOCKER (2 references)
 pkts bytes target     prot opt in     out     source               destination         
   22  1760 RETURN     all      br-mailcow *       ::/0                 ::/0                
    0     0 DNAT       tcp      !br-mailcow *       ::/0                 ::/0                 tcp dpt:80 to:[fd4d:6169:6c63:6f77::c]:80
   28  2016 DNAT       tcp      !br-mailcow *       ::/0                 ::/0                 tcp dpt:443 to:[fd4d:6169:6c63:6f77::c]:443
    0     0 DNAT       tcp      !br-mailcow *       ::/0                 ::/0                 tcp dpt:143 to:[fd4d:6169:6c63:6f77::b]:143
    0     0 DNAT       tcp      !br-mailcow *       ::/0                 ::/0                 tcp dpt:4190 to:[fd4d:6169:6c63:6f77::b]:4190
    5   360 DNAT       tcp      !br-mailcow *       ::/0                 ::/0                 tcp dpt:993 to:[fd4d:6169:6c63:6f77::b]:993
    0     0 DNAT       tcp      !br-mailcow *       ::/0                 ::/0                 tcp dpt:995 to:[fd4d:6169:6c63:6f77::b]:995
    0     0 DNAT       tcp      !br-mailcow *       ::/0                 ::/0                 tcp dpt:110 to:[fd4d:6169:6c63:6f77::b]:110
    1    80 DNAT       tcp      !br-mailcow *       ::/0                 ::/0                 tcp dpt:465 to:[fd4d:6169:6c63:6f77::f]:465
    0     0 DNAT       tcp      !br-mailcow *       ::/0                 ::/0                 tcp dpt:587 to:[fd4d:6169:6c63:6f77::f]:587
    0     0 DNAT       tcp      !br-mailcow *       ::/0                 ::/0                 tcp dpt:25 to:[fd4d:6169:6c63:6f77::f]:25
root@linycmx01:/opt/mailcow-dockerized#

DNS check:

root@linycmx01:/opt/mailcow-dockerized# docker exec -it $(docker ps -qf name=acme-mailcow) dig +short stackoverflow.com @172.22.1.254
104.18.32.7
172.64.155.249
root@linycmx01:/opt/mailcow-dockerized#
@gellenburg gellenburg added the bug label Apr 18, 2024
@schoebelh
Copy link

Same here and also on iOS Outlook, last synced mail from 14.04.24 - even if i delete the account in outlook an re-adding it.

@DocFraggle
Copy link
Contributor

DocFraggle commented Apr 18, 2024 •
edited
Loading

It's not a mailcow issue, we already determined that here: (sorry, it's in German...) https://community.mailcow.email/d/3510-outlook-probleme-seit-2024-04/33

Using Google Translate for you: https://community-mailcow-email.translate.goog/d/3510-outlook-probleme-seit-2024-04?_x_tr_sl=auto&_x_tr_tl=en&_x_tr_hl=en&_x_tr_pto=wapp&_x_tr_hist=true

It seems that Microsoft changed something a few days ago and that the Outlook App is doing strange things which may run at Microsoft, not in the app itself...

One user had the same problems with 2024-02, so it's not a mailcow or Sogo issue

@isradelatorre
Copy link

isradelatorre commented Apr 18, 2024 •
edited
Loading

Same here. I hope there will be a fix that we can apply to SoGo or mailcow soon...

@bjornberfelo
Copy link

Outlook client is working for me again (on android)

@isradelatorre
Copy link

Working back from two weeks ago so far.

@sergedc
Copy link

sergedc commented Jun 30, 2024

I am sorry if a little off topic, but this is the only place where I found people commenting that they could configure activesync in outlook for android with mailcow/sogo (in recent times). Could you share what config you use?
I managed to make activesync work in bluemail, but with outlook (android) I am confused about what to input for the config:

  • Email address: xxx@mydomain.com
  • password: the password of the email
  • Server: mail.mydomain.com Do I need to provide a port?
  • Domain: I tried mydomain.com and mail.mydomain.com. Do I need to provide a port?
  • User name: I tried xxx and xxx@mydomain.com

Thanks a ton!

@pschiffe
Copy link
Contributor

pschiffe commented Jul 1, 2024

For me it works with domain empty and user name is email. Server without port.

@sergedc
Copy link

sergedc commented Jul 1, 2024 •
edited
Loading

@pschiffe : thank you very very much. Using your instruction it worked and the account gets added.
It took a little time to sync, but emails came all good

@nejis
Copy link

nejis commented Jul 24, 2024

I currently have the same problem, but only for accounts with TFA enabled.

@shuffleznl
Copy link

shuffleznl commented Aug 27, 2024 •
edited
Loading

I currently have the same problem, but only for accounts with TFA enabled.

Same here, since few weeks. Cleared ActiveSync profile in Mailcow & reset account in Outlook on Android to no avail. Update from 2024.04 to Mailcow 2024.08a hasnt resolved either. I can see the EAS login from with the App password, from an IPv6 from the US belonging to Microsoft.

Edit/update: removing and re-adding account from Outlook Android cliënt leaves empty mailbox with an Account Locked notification. Removing app password for new one doesn't solve either.

@theoricher
Copy link

Same problem here, I've never had this problem before.

@isradelatorre
Copy link

The problem is back, and for about 3 weeks now, I haven't had synchronized email on several Outlook accounts using mailcow mailboxes.

Setting up the mailbox as Exchange within the Gmail app works fine, so it seems like something related only to the Outlook app (in my case, using Android).

@DocFraggle
Copy link
Contributor

Well, that's the problem with the Outlook app... Microsoft does as it pleases... and all the magic happens on the Microsoft servers, not inside the app.
Outlook 365 for Windows works normally though.

@78wesley
Copy link

Still a issue...

does anyone has found a fix?

@shuffleznl
Copy link

Still a issue...

does anyone has found a fix?

Just tried again, same issue.
Outlook app reports server issue:
Screenshot_20240924-095711

@DerLinkman
Copy link
Member

Hello, there won't be a a fix as the problem is only specific for Microshit's Outlook Apps. If you still want to use them, simply do not use EAS.

@DerLinkman DerLinkman closed this as not planned Won't fix, can't repro, duplicate, stale Sep 25, 2024
@DerLinkman DerLinkman changed the title Mailcow 2024-04 Outlook Android - New emails not being sent do client Outlook App (Android/iOS) - New emails not being sent do client when using EAS Sep 25, 2024
@DerLinkman DerLinkman pinned this issue Sep 25, 2024
@78wesley
Copy link

Hello, there won't be a a fix as the problem is only specific for Microshit's Outlook Apps. If you still want to use them, simply do not use EAS.

Could you explain in depth what the problem is?

@DerLinkman
Copy link
Member

Simply see https://community-mailcow-email.translate.goog/d/3510-outlook-probleme-seit-2024-04?_x_tr_sl=auto&_x_tr_tl=en&_x_tr_hl=en&_x_tr_pto=wapp&_x_tr_hist=true

Short form: Microsoft removed the plain auth options in their Apps (Outlook Mobile App and new Outlook App on PC) which did not allow mailcow/SOGo to authenticate against. That's why the apps are pretty much useless with EAS now. Other Apps like Gmail/Blue Mail etc. which are EAS compatible still work like a charm.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
bug
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests