Incoming emails get rejected on fresh install

Asgatoril

Hi,

we have just installed a new grommunio server and have some problems while receiving emails.
When we try to send an email to a configured user, postfix rejects the email either with "Recipient address rejected: User unknown in local recipient table" or "unknown user".

For the background information, I'll replace the domain with "example.com" and usernames with "test".

The grommunio instance was freshly installed from the iso. It is installed in a KVM VM.
The domains "example.com", "autodiscover.example.com" and "mail.example.com" are point to the IP-Address of the server and the mx of "example.com" points to "mail.example.com".

The setup, including the generation of let's encrypt certificates, completed without errors.
After the installation, all configuration changes were made through the admin webinterface at "example.com:8443"

The grommunio instance has one organisation "Example", with one domain "example.com".
3 Users were added (test1, test2, test3) and added to the domain "example.com".

The users can access the webmailer using their email address as login (e.g. test1@example.com" and can send emails from their address.
If someone tries to reply to that email, the email gets rejected with:
Aug 04 15:34:39 example postfix/submission/smtpd[6255]: NOQUEUE: reject: RCPT from domain.provider.com[1.2.3.4]: 550 5.1.1 <test1@example.com>: Recipient address rejected: User unknown in local recipient table; from=<test@company.com> to=<test1@example.com> proto=ESMTP helo=<PC>

If the address of a user is explicitly added as an alias address, we instead get this error:
Aug 04 16:06:01 example postfix/local[8200]: 69A1F1D1: to=<test1@example.com>, relay=local, delay=1.4, delays=1.3/0.02/0/0.03, dsn=5.1.1, status=bounced (unknown user: "test1")

Interestingly, the mail gets still added to the users archive in this case, but it wont get delivered to his inbox.

The contents of /etc/postfix/main.cf, minus comments and empty lines, are:
compatibility_level = 2 queue_directory = /var/spool/postfix command_directory = /usr/sbin daemon_directory = /usr/lib/postfix/bin/ data_directory = /var/lib/postfix mail_owner = postfix unknown_local_recipient_reject_code = 550 smtpd_banner = $myhostname ESMTP debug_peer_level = 2 debugger_command = PATH=/bin:/usr/bin:/usr/local/bin:/usr/X11R6/bin ddd $daemon_directory/$process_name $process_id & sleep 5 sendmail_path = /usr/sbin/sendmail newaliases_path = /usr/bin/newaliases mailq_path = /usr/bin/mailq setgid_group = maildrop html_directory = /usr/share/doc/packages/postfix-doc/html manpage_directory = /usr/share/man sample_directory = /usr/share/doc/packages/postfix-doc/samples readme_directory = /usr/share/doc/packages/postfix-doc/README_FILES biff = no content_filter = delay_warning_time = 1h disable_dns_lookups = no disable_mime_output_conversion = no disable_vrfy_command = yes inet_interfaces = all inet_protocols = all masquerade_classes = envelope_sender, header_sender, header_recipient masquerade_domains = masquerade_exceptions = root mydestination = $myhostname, localhost.$mydomain, localhost myhostname = example.com mynetworks_style = subnet relayhost = alias_maps = lmdb:/etc/aliases canonical_maps = lmdb:/etc/postfix/canonical relocated_maps = lmdb:/etc/postfix/relocated sender_canonical_maps = lmdb:/etc/postfix/sender_canonical transport_maps = lmdb:/etc/postfix/transport mail_spool_directory = /var/mail message_strip_characters = \0 defer_transports = mailbox_command = mailbox_transport = mailbox_size_limit = 0 message_size_limit = 0 strict_8bitmime = no strict_rfc821_envelopes = no smtpd_delay_reject = yes smtpd_helo_required = no smtpd_client_restrictions = smtpd_helo_restrictions = permit_mynetworks,permit_sasl_authenticated,reject_invalid_hostname,reject_non_fqdn_hostname smtpd_sender_restrictions = reject_non_fqdn_sender,permit_sasl_authenticated,permit_mynetworks smtpd_recipient_restrictions = permit_sasl_authenticated,permit_mynetworks,check_recipient_access pcre:/etc/postfix/grommunio-archiver-envelope.cf,reject_unknown_recipient_domain,reject_non_fqdn_hostname,reject_non_fqdn_sender,reject_non_fqdn_recipient,reject_unauth_destination,reject_unauth_pipelining smtp_sasl_auth_enable = no smtp_sasl_security_options = smtp_sasl_password_maps = smtpd_sasl_auth_enable = yes smtpd_sasl_type = cyrus smtpd_sasl_path = smtpd relay_clientcerts = smtp_use_tls = yes smtp_enforce_tls = no smtp_tls_CAfile = smtp_tls_CApath = smtp_tls_cert_file = smtp_tls_key_file = smtp_tls_session_cache_database = smtpd_use_tls = yes smtpd_tls_CAfile = smtpd_tls_CApath = smtpd_tls_cert_file = /etc/grommunio-common/ssl/server-bundle.pem smtpd_tls_key_file = /etc/grommunio-common/ssl/server.key smtpd_tls_ask_ccert = no smtpd_tls_exclude_ciphers = RC4 smtpd_tls_received_header = yes relay_domains = $mydestination lmdb:/etc/postfix/relay virtual_alias_maps = mysql:/etc/postfix/grommunio-virtual-mailbox-alias-maps.cf smtpd_tls_session_cache_timeout = 3600s milter_protocol = 6 virtual_mailbox_maps = mysql:/etc/postfix/grommunio-virtual-mailbox-maps.cf smtpd_sasl_local_domain = broken_sasl_auth_clients = yes smtp_tls_security_level = may smtpd_sasl_security_options = noanonymous milter_default_action = accept virtual_mailbox_domains = mysql:/etc/postfix/grommunio-virtual-mailbox-domains.cf smtpd_tls_auth_only = no tls_random_source = dev:/dev/urandom smtpd_data_restrictions = reject_unauth_pipelining recipient_bcc_maps = mysql:/etc/postfix/grommunio-bcc-forwards.cf virtual_transport = smtp:[::1]:24 smtpd_tls_security_level = may unverified_recipient_reject_code = 550 smtpd_milters = inet:localhost:11332 always_bcc = archive@example.com

Has someone an idea why this happens and how to fix it?

WalterH

Did you restart the server after creating the domain? If not, restart in most cases a reboot fixes this issue.

Asgatoril

I restarted the server while debugging the issue. I restarted it again just now to make sure, but the error stays the same.

WalterH

Run journalctl -f on console, send mail to this mailbox. Which errors you see?

Asgatoril

I've replaced the domain names etc. again, but otherwise its verbatim:

Without adding the users email address as alias under User->SMTP:

Aug 08 16:58:18 example postfix/smtpd[6210]: connect from mout.kundenserver.de[217.72.192.75]
Aug 08 16:58:18 example rspamd[1902]: #1902(rspamd_proxy) <e36d6d>; proxy; proxy_accept_socket: accepted milter connection from ::1 port 46284
Aug 08 16:58:19 example postfix/smtpd[6210]: NOQUEUE: reject: RCPT from mout.kundenserver.de[217.72.192.75]: 550 5.1.1 <test1@example.com>: Recipient address rejected: User unknown in local recipient table; from=<test@company.com> to=<test1@example.com> proto=ESMTP helo=<mout.kundenserver.de>
Aug 08 16:58:19 example rspamd[1902]: #1902(rspamd_proxy) <e36d6d>; milter; rspamd_milter_process_command: got connection from 217.72.192.75:36433
Aug 08 16:58:19 example rspamd[1902]: #1902(rspamd_proxy) <e36d6d>; proxy; proxy_milter_finish_handler: finished milter connection
Aug 08 16:58:19 example postfix/smtpd[6210]: disconnect from mout.kundenserver.de[217.72.192.75] ehlo=2 starttls=1 mail=1 rcpt=0/1 data=0/1 quit=1 commands=5/7

After adding the address as alias:

Aug 08 16:51:10 example postfix/smtpd[5465]: connect from mout.kundenserver.de[212.227.126.131]
Aug 08 16:51:10 example rspamd[1902]: #1902(rspamd_proxy) <12564c>; proxy; proxy_accept_socket: accepted milter connection from ::1 port 35558
Aug 08 16:51:11 example postfix/trivial-rewrite[5468]: warning: do not list domain example.com in BOTH mydestination and virtual_mailbox_domains
Aug 08 16:51:11 example postfix/smtpd[5465]: 223FA231: client=mout.kundenserver.de[212.227.126.131]
Aug 08 16:51:11 example rspamd[1902]: #1902(rspamd_proxy) <12564c>; milter; rspamd_milter_process_command: got connection from 212.227.126.131:42137
Aug 08 16:51:11 example postfix/cleanup[5469]: 223FA231: message-id=<9909CA663850B240AE42EC008D091529D6D453BE@SERVER01.company.local>
Aug 08 16:51:11 example rspamd[1905]: #1905(normal) <94369d>; task; rspamd_worker_body_handler: accepted connection from ::1 port 40134, task ptr: 0000000002867C80
Aug 08 16:51:11 example rspamd[1905]: #1905(normal) <94369d>; task; rspamd_message_parse: loaded message; id: <9909CA663850B240AE42EC008D091529D6D453BE@SERVER01.company.local>; queue-id: <223FA231>; size: 2952; checksum: <4b168492a8dca51534787b99570ae44c>
Aug 08 16:51:11 example rspamd[1905]: #1905(normal) <94369d>; task; rspamd_spf_record_postprocess: increasing ttl from 282 to 300 as it lower than a limit
Aug 08 16:51:11 example rspamd[1905]: #1905(normal) <94369d>; task; rspamd_spf_maybe_return: stored SPF record for company.de (0x408122b154c49443) in LRU cache for 300 seconds, 1/2000 elements in the cache

Aug 08 16:51:11 example rspamd[1905]: #1905(normal) <94369d>; task; rspamd_redis_connected: skip obtaining bayes tokens for BAYES_SPAM of classifier bayes: not enough learns 0; 200 required
Aug 08 16:51:11 example rspamd[1905]: #1905(normal) <94369d>; task; rspamd_redis_connected: skip obtaining bayes tokens for BAYES_HAM of classifier bayes: not enough learns 0; 200 required
Aug 08 16:51:11 example rspamd[1905]: #1905(normal) <94369d>; task; rspamd_stat_classifiers_process: skip statistics as SPAM class is missing
Aug 08 16:51:11 example rspamd[1905]: #1905(normal) <94369d>; lua; greylist.lua:331: Score too low - skip greylisting
Aug 08 16:51:11 example rspamd[1905]: #1905(normal) <94369d>; lua; neural.lua:442: skip ham sample to keep spam/ham balance; probability 1; 0 spam and 1 ham vectors stored
Aug 08 16:51:11 example rspamd[1905]: #1905(normal) <94369d>; task; rspamd_task_write_log: id: <9909CA663850B240AE42EC008D091529D6D453BE@SERVER01.company.local>, qid: <223FA231>, ip: 212.227.126.131, from: <test@company.com>, (default: F (no action): [-0.40/15.00] [R_SPF_ALLOW(-0.20){+ip4:212.227.126.128/25;},MIME_GOOD(-0.10){text/plain;},RWL_MAILSPIKE_GOOD(-0.10){212.227.126.131:from;},ARC_NA(0.00){},ASN(0.00){asn:8560, ipnet:212.227.0.0/16, country:DE;},DMARC_NA(0.00){company.de;},FROM_EQ_ENVFROM(0.00){},FROM_HAS_DN(0.00){},HAS_XOIP(0.00){},MIME_TRACE(0.00){0:+;},PREVIOUSLY_DELIVERED(0.00){test1@example.com;},RCPT_COUNT_ONE(0.00){1;},RCVD_COUNT_FIVE(0.00){6;},RCVD_TLS_LAST(0.00){},RCVD_VIA_SMTP_AUTH(0.00){},R_DKIM_NA(0.00){},TO_DN_EQ_ADDR_ALL(0.00){},TO_MATCH_ENVRCPT_ALL(0.00){}]), len: 2952, time: 153.605ms, dns req: 18, digest: <4b168492a8dca51534787b99570ae44c>, rcpts: <test1@example.com>, mime_rcpts: <test1@example.com>
Aug 08 16:51:11 example rspamd[1905]: #1905(normal) <94369d>; task; rspamd_protocol_http_reply: regexp statistics: 154 pcre regexps scanned, 1 regexps matched, 172 regexps total, 11 regexps cached, 21.40KiB scanned using pcre, 21.40KiB scanned total
Aug 08 16:51:11 example postfix/qmgr[1955]: 223FA231: from=<test@company.com>, size=3403, nrcpt=2 (queue active)
Aug 08 16:51:11 example postfix/trivial-rewrite[5468]: warning: do not list domain example.com in BOTH mydestination and virtual_mailbox_domains
Aug 08 16:51:11 example postfix/trivial-rewrite[5468]: warning: do not list domain example.com in BOTH mydestination and virtual_mailbox_domains
Aug 08 16:51:11 example rspamd[1902]: #1902(rspamd_proxy) <bc84b2>; proxy; proxy_milter_finish_handler: finished milter connection
Aug 08 16:51:11 example postfix/smtpd[5465]: disconnect from mout.kundenserver.de[212.227.126.131] ehlo=2 starttls=1 mail=1 rcpt=1 data=1 quit=1 commands=7
Aug 08 16:51:11 example piler-smtp[1388]: connected from 127.0.0.1:43318 on fd=6 (active connections: 1)
Aug 08 16:51:11 example piler-smtp[1388]: received: 81QXPXFO6SOYMPDY, from=test@company.com, size=3366, client=127.0.0.1, fd=6, fsync=6568
Aug 08 16:51:11 example piler-smtp[1388]: disconnected from 127.0.0.1 on fd=6, slot=0, reason=done (0 active connections)
Aug 08 16:51:11 example postfix/smtp[5472]: 223FA231: to=<archive@example.com>, relay=127.0.0.1[127.0.0.1]:2693, delay=0.29, delays=0.25/0.03/0/0.01, dsn=2.0.0, status=sent (250 OK <81QXPXFO6SOYMPDY>)
Aug 08 16:51:11 example postfix/local[5471]: 223FA231: to=<test1@example.com>, relay=local, delay=0.3, delays=0.25/0.02/0/0.03, dsn=5.1.1, status=bounced (unknown user: "test1")
Aug 08 16:51:11 example postfix/cleanup[5469]: 665E0233: message-id=<20230808145111.665E0233@example.com>
Aug 08 16:51:11 example postfix/bounce[5473]: 223FA231: sender non-delivery notification: 665E0233
Aug 08 16:51:11 example postfix/qmgr[1955]: 665E0233: from=<>, size=5185, nrcpt=1 (queue active)
Aug 08 16:51:11 example postfix/qmgr[1955]: 223FA231: removed
Aug 08 16:51:10 example postfix/smtpd[5465]: connect from mout.kundenserver.de[212.227.126.131]
Aug 08 16:51:10 example rspamd[1902]: #1902(rspamd_proxy) <12564c>; proxy; proxy_accept_socket: accepted milter connection from ::1 port 35558
Aug 08 16:51:11 example postfix/trivial-rewrite[5468]: warning: do not list domain example.com in BOTH mydestination and virtual_mailbox_domains
Aug 08 16:51:11 example postfix/smtpd[5465]: 223FA231: client=mout.kundenserver.de[212.227.126.131]
Aug 08 16:51:11 example rspamd[1902]: #1902(rspamd_proxy) <12564c>; milter; rspamd_milter_process_command: got connection from 212.227.126.131:42137
Aug 08 16:51:11 example postfix/cleanup[5469]: 223FA231: message-id=<9909CA663850B240AE42EC008D091529D6D453BE@SERVER01.company.local>
Aug 08 16:51:11 example rspamd[1905]: #1905(normal) <94369d>; task; rspamd_worker_body_handler: accepted connection from ::1 port 40134, task ptr: 0000000002867C80
Aug 08 16:51:11 example rspamd[1905]: #1905(normal) <94369d>; task; rspamd_message_parse: loaded message; id: <9909CA663850B240AE42EC008D091529D6D453BE@SERVER01.company.local>; queue-id: <223FA231>; size: 2952; checksum: <4b168492a8dca51534787b99570ae44c>
Aug 08 16:51:11 example rspamd[1905]: #1905(normal) <94369d>; task; rspamd_spf_record_postprocess: increasing ttl from 282 to 300 as it lower than a limit
Aug 08 16:51:11 example rspamd[1905]: #1905(normal) <94369d>; task; rspamd_spf_maybe_return: stored SPF record for company.de (0x408122b154c49443) in LRU cache for 300 seconds, 1/2000 elements in the cache

Aug 08 16:51:11 example rspamd[1905]: #1905(normal) <94369d>; task; rspamd_redis_connected: skip obtaining bayes tokens for BAYES_SPAM of classifier bayes: not enough learns 0; 200 required
Aug 08 16:51:11 example rspamd[1905]: #1905(normal) <94369d>; task; rspamd_redis_connected: skip obtaining bayes tokens for BAYES_HAM of classifier bayes: not enough learns 0; 200 required
Aug 08 16:51:11 example rspamd[1905]: #1905(normal) <94369d>; task; rspamd_stat_classifiers_process: skip statistics as SPAM class is missing
Aug 08 16:51:11 example rspamd[1905]: #1905(normal) <94369d>; lua; greylist.lua:331: Score too low - skip greylisting
Aug 08 16:51:11 example rspamd[1905]: #1905(normal) <94369d>; lua; neural.lua:442: skip ham sample to keep spam/ham balance; probability 1; 0 spam and 1 ham vectors stored
Aug 08 16:51:11 example rspamd[1905]: #1905(normal) <94369d>; task; rspamd_task_write_log: id: <9909CA663850B240AE42EC008D091529D6D453BE@SERVER01.company.local>, qid: <223FA231>, ip: 212.227.126.131, from: <test@company.com>, (default: F (no action): [-0.40/15.00] [R_SPF_ALLOW(-0.20){+ip4:212.227.126.128/25;},MIME_GOOD(-0.10){text/plain;},RWL_MAILSPIKE_GOOD(-0.10){212.227.126.131:from;},ARC_NA(0.00){},ASN(0.00){asn:8560, ipnet:212.227.0.0/16, country:DE;},DMARC_NA(0.00){company.de;},FROM_EQ_ENVFROM(0.00){},FROM_HAS_DN(0.00){},HAS_XOIP(0.00){},MIME_TRACE(0.00){0:+;},PREVIOUSLY_DELIVERED(0.00){test1@example.com;},RCPT_COUNT_ONE(0.00){1;},RCVD_COUNT_FIVE(0.00){6;},RCVD_TLS_LAST(0.00){},RCVD_VIA_SMTP_AUTH(0.00){},R_DKIM_NA(0.00){},TO_DN_EQ_ADDR_ALL(0.00){},TO_MATCH_ENVRCPT_ALL(0.00){}]), len: 2952, time: 153.605ms, dns req: 18, digest: <4b168492a8dca51534787b99570ae44c>, rcpts: <test1@example.com>, mime_rcpts: <test1@example.com>
Aug 08 16:51:11 example rspamd[1905]: #1905(normal) <94369d>; task; rspamd_protocol_http_reply: regexp statistics: 154 pcre regexps scanned, 1 regexps matched, 172 regexps total, 11 regexps cached, 21.40KiB scanned using pcre, 21.40KiB scanned total
Aug 08 16:51:11 example postfix/qmgr[1955]: 223FA231: from=<test@company.com>, size=3403, nrcpt=2 (queue active)
Aug 08 16:51:11 example postfix/trivial-rewrite[5468]: warning: do not list domain example.com in BOTH mydestination and virtual_mailbox_domains
Aug 08 16:51:11 example postfix/trivial-rewrite[5468]: warning: do not list domain example.com in BOTH mydestination and virtual_mailbox_domains
Aug 08 16:51:11 example rspamd[1902]: #1902(rspamd_proxy) <bc84b2>; proxy; proxy_milter_finish_handler: finished milter connection
Aug 08 16:51:11 example postfix/smtpd[5465]: disconnect from mout.kundenserver.de[212.227.126.131] ehlo=2 starttls=1 mail=1 rcpt=1 data=1 quit=1 commands=7
Aug 08 16:51:11 example piler-smtp[1388]: connected from 127.0.0.1:43318 on fd=6 (active connections: 1)
Aug 08 16:51:11 example piler-smtp[1388]: received: 81QXPXFO6SOYMPDY, from=test@company.com, size=3366, client=127.0.0.1, fd=6, fsync=6568
Aug 08 16:51:11 example piler-smtp[1388]: disconnected from 127.0.0.1 on fd=6, slot=0, reason=done (0 active connections)
Aug 08 16:51:11 example postfix/smtp[5472]: 223FA231: to=<archive@example.com>, relay=127.0.0.1[127.0.0.1]:2693, delay=0.29, delays=0.25/0.03/0/0.01, dsn=2.0.0, status=sent (250 OK <81QXPXFO6SOYMPDY>)
Aug 08 16:51:11 example postfix/local[5471]: 223FA231: to=<test1@example.com>, relay=local, delay=0.3, delays=0.25/0.02/0/0.03, dsn=5.1.1, status=bounced (unknown user: "test1")
Aug 08 16:51:11 example postfix/cleanup[5469]: 665E0233: message-id=<20230808145111.665E0233@example.com>
Aug 08 16:51:11 example postfix/bounce[5473]: 223FA231: sender non-delivery notification: 665E0233
Aug 08 16:51:11 example postfix/qmgr[1955]: 665E0233: from=<>, size=5185, nrcpt=1 (queue active)
Aug 08 16:51:11 example postfix/qmgr[1955]: 223FA231: removed

fmorettini

I just ran into the same for a local test installation. This is your problem:

postfix/trivial-rewrite[5468]: warning: do not list domain example.com in BOTH mydestination and virtual_mailbox_domains

grommunio-setup asks the user for the FQDN of the system and then sets this as myhostname in Postfix. If you now decide to also create a mail domain with this domain then the user cannot be found. The solution is to change myhostname.

WalterH

https://community.grommunio.com/d/753-why-the-hostname-is-so-important-for-grommunio