CyberPanel Community

ClosedEmail stopped working => help

pe
peakminute #1

OS: Ubuntu 20.04
Cyberpanel latest version

Problem: Can’t access and send emails.

Trying to login via Rainloop gives me “account is not allowed” message
p.s. My domain is added via Rainloop admin already and there are no plugins at all

Email log:

Dec 10 09:45:29 vmi706321 postfix/postfix-script[10681]: warning: /var/spool/postfix/lib/x86_64-linux-gnu/libnss_hesiod-2.31.so and /lib/x86_64-linux-gnu/libnss_hesiod-2.31.so differ
Dec 10 09:45:29 vmi706321 postfix/postfix-script[10683]: warning: /var/spool/postfix/lib/x86_64-linux-gnu/libnss_nis-2.31.so and /lib/x86_64-linux-gnu/libnss_nis-2.31.so differ
Dec 10 09:45:29 vmi706321 postfix/postfix-script[10685]: warning: /var/spool/postfix/lib/x86_64-linux-gnu/libnss_dns-2.31.so and /lib/x86_64-linux-gnu/libnss_dns-2.31.so differ
Dec 10 09:45:29 vmi706321 postfix/postfix-script[10687]: warning: /var/spool/postfix/lib/x86_64-linux-gnu/libnss_nisplus-2.31.so and /lib/x86_64-linux-gnu/libnss_nisplus-2.31.so differ
Dec 10 09:45:29 vmi706321 postfix/postfix-script[10689]: warning: /var/spool/postfix/lib/x86_64-linux-gnu/libnss_compat-2.31.so and /lib/x86_64-linux-gnu/libnss_compat-2.31.so differ
Dec 10 09:45:29 vmi706321 postfix/postfix-script[10696]: starting the Postfix mail system
Dec 10 09:45:29 vmi706321 postfix/master[10698]: daemon started -- version 3.4.13, configuration /etc/postfix
Dec 10 10:10:59 vmi706321 dovecot: pop3-login: Disconnected (no auth attempts in 0 secs): user=<>, rip=167.94.146.57, lip=122.125.130.6, TLS: Connection closed, session=<xWsXhHvvnIOnXpI5>
Dec 10 10:14:14 vmi706321 dovecot: imap-login: Aborted login (no auth attempts in 0 secs): user=<>, rip=85.2.77.252, lip=122.125.130.6, session=<u2+zj3vv+8xWBFjx>
Dec 10 10:14:14 vmi706321 dovecot: pop3-login: Aborted login (no auth attempts in 0 secs): user=<>, rip=85.2.77.252, lip=122.125.130.6, session=<cPizj3vv/MxWBFjx>
Dec 10 10:14:14 vmi706321 dovecot: pop3-login: Aborted login (no auth attempts in 0 secs): user=<>, rip=85.2.77.252, lip=122.125.130.6, session=<bli0j3vv/sxWBFjx>
Dec 10 10:14:14 vmi706321 dovecot: imap-login: Aborted login (no auth attempts in 0 secs): user=<>, rip=85.2.77.252, lip=122.125.130.6, session=<fGq0j3vv/cxWBFjx>
9 replies
jo
josephgodwinke #2

Hello @peakminute

Seems like your installation is compromised. Do you have a firewall or AV?

Run /etc/init.d/postfix check and post the screenshot here

pe
peakminute #3 
postfix: Postfix is running with backwards-compatible default settings
postfix: See http://www.postfix.org/COMPATIBILITY_README.html for details
postfix: To disable backwards compatibility use "postconf compatibility_level=2"                                                                                                                                                              and "postfix reload"
/usr/sbin/postconf: warning: /etc/postfix/master.cf: undefined parameter: mua_se                                                                                                                                                             nder_restrictions
/usr/sbin/postconf: warning: /etc/postfix/master.cf: undefined parameter: mua_cl                                                                                                                                                             ient_restrictions
/usr/sbin/postconf: warning: /etc/postfix/master.cf: undefined parameter: mua_he                                                                                                                                                             lo_restrictions
/usr/sbin/postconf: warning: /etc/postfix/master.cf: undefined parameter: mua_se                                                                                                                                                             nder_restrictions
/usr/sbin/postconf: warning: /etc/postfix/master.cf: undefined parameter: mua_cl                                                                                                                                                             ient_restrictions
/usr/sbin/postconf: warning: /etc/postfix/master.cf: undefined parameter: mua_he                                                                                                                                                             lo_restrictions
/usr/sbin/postconf: warning: /etc/postfix/main.cf: undefined parameter: virtual_                                                                                                                                                             mailbox_limit_maps
/usr/sbin/postconf: warning: /etc/postfix/main.cf: unused parameter: virtual_cre                                                                                                                                                             ate_maildirsize=yes
/usr/sbin/postconf: warning: /etc/postfix/main.cf: unused parameter: virtual_mai                                                                                                                                                             ldir_extended=yes
/usr/sbin/postconf: warning: /etc/postfix/master.cf: undefined parameter: mua_se                                                                                                                                                             nder_restrictions
/usr/sbin/postconf: warning: /etc/postfix/master.cf: undefined parameter: mua_cl                                                                                                                                                             ient_restrictions
/usr/sbin/postconf: warning: /etc/postfix/master.cf: undefined parameter: mua_he                                                                                                                                                             lo_restrictions
/usr/sbin/postconf: warning: /etc/postfix/master.cf: undefined parameter: mua_se                                                                                                                                                             nder_restrictions
/usr/sbin/postconf: warning: /etc/postfix/master.cf: undefined parameter: mua_cl                                                                                                                                                             ient_restrictions
/usr/sbin/postconf: warning: /etc/postfix/master.cf: undefined parameter: mua_he                                                                                                                                                             lo_restrictions
/usr/sbin/postconf: warning: /etc/postfix/main.cf: undefined parameter: virtual_                                                                                                                                                             mailbox_limit_maps
/usr/sbin/postconf: warning: /etc/postfix/main.cf: unused parameter: virtual_cre                                                                                                                                                             ate_maildirsize=yes
/usr/sbin/postconf: warning: /etc/postfix/main.cf: unused parameter: virtual_mai                                                                                                                                                             ldir_extended=yes
/usr/sbin/postconf: warning: /etc/postfix/master.cf: undefined parameter: mua_se                                                                                                                                                             nder_restrictions
/usr/sbin/postconf: warning: /etc/postfix/master.cf: undefined parameter: mua_cl                                                                                                                                                             ient_restrictions
/usr/sbin/postconf: warning: /etc/postfix/master.cf: undefined parameter: mua_he                                                                                                                                                             lo_restrictions
/usr/sbin/postconf: warning: /etc/postfix/master.cf: undefined parameter: mua_se                                                                                                                                                             nder_restrictions
/usr/sbin/postconf: warning: /etc/postfix/master.cf: undefined parameter: mua_cl                                                                                                                                                             ient_restrictions
/usr/sbin/postconf: warning: /etc/postfix/master.cf: undefined parameter: mua_he                                                                                                                                                             lo_restrictions
/usr/sbin/postconf: warning: /etc/postfix/main.cf: undefined parameter: virtual_                                                                                                                                                             mailbox_limit_maps
/usr/sbin/postconf: warning: /etc/postfix/main.cf: unused parameter: virtual_cre                                                                                                                                                             ate_maildirsize=yes
/usr/sbin/postconf: warning: /etc/postfix/main.cf: unused parameter: virtual_mai                                                                                                                                                             ldir_extended=yes
/usr/sbin/postconf: warning: /etc/postfix/master.cf: undefined parameter: mua_se                                                                                                                                                             nder_restrictions
/usr/sbin/postconf: warning: /etc/postfix/master.cf: undefined parameter: mua_cl                                                                                                                                                             ient_restrictions
/usr/sbin/postconf: warning: /etc/postfix/master.cf: undefined parameter: mua_he                                                                                                                                                             lo_restrictions
/usr/sbin/postconf: warning: /etc/postfix/master.cf: undefined parameter: mua_se                                                                                                                                                             nder_restrictions
/usr/sbin/postconf: warning: /etc/postfix/master.cf: undefined parameter: mua_cl                                                                                                                                                             ient_restrictions
/usr/sbin/postconf: warning: /etc/postfix/master.cf: undefined parameter: mua_he                                                                                                                                                             lo_restrictions
/usr/sbin/postconf: warning: /etc/postfix/main.cf: undefined parameter: virtual_                                                                                                                                                             mailbox_limit_maps
/usr/sbin/postconf: warning: /etc/postfix/main.cf: unused parameter: virtual_cre                                                                                                                                                             ate_maildirsize=yes
/usr/sbin/postconf: warning: /etc/postfix/main.cf: unused parameter: virtual_mai                                                                                                                                                             ldir_extended=yes
/usr/sbin/postconf: warning: /etc/postfix/master.cf: undefined parameter: mua_se                                                                                                                                                             nder_restrictions
/usr/sbin/postconf: warning: /etc/postfix/master.cf: undefined parameter: mua_cl                                                                                                                                                             ient_restrictions
/usr/sbin/postconf: warning: /etc/postfix/master.cf: undefined parameter: mua_he                                                                                                                                                             lo_restrictions
/usr/sbin/postconf: warning: /etc/postfix/master.cf: undefined parameter: mua_se                                                                                                                                                             nder_restrictions
/usr/sbin/postconf: warning: /etc/postfix/master.cf: undefined parameter: mua_cl                                                                                                                                                             ient_restrictions
/usr/sbin/postconf: warning: /etc/postfix/master.cf: undefined parameter: mua_he                                                                                                                                                             lo_restrictions
/usr/sbin/postconf: warning: /etc/postfix/main.cf: undefined parameter: virtual_                                                                                                                                                             mailbox_limit_maps
/usr/sbin/postconf: warning: /etc/postfix/main.cf: unused parameter: virtual_cre                                                                                                                                                             ate_maildirsize=yes
/usr/sbin/postconf: warning: /etc/postfix/main.cf: unused parameter: virtual_mai                                                                                                                                                             ldir_extended=yes
/usr/sbin/postconf: warning: /etc/postfix/master.cf: undefined parameter: mua_se                                                                                                                                                             nder_restrictions
/usr/sbin/postconf: warning: /etc/postfix/master.cf: undefined parameter: mua_cl                                                                                                                                                             ient_restrictions
/usr/sbin/postconf: warning: /etc/postfix/master.cf: undefined parameter: mua_he                                                                                                                                                             lo_restrictions
/usr/sbin/postconf: warning: /etc/postfix/master.cf: undefined parameter: mua_se                                                                                                                                                             nder_restrictions
/usr/sbin/postconf: warning: /etc/postfix/master.cf: undefined parameter: mua_cl                                                                                                                                                             ient_restrictions
/usr/sbin/postconf: warning: /etc/postfix/master.cf: undefined parameter: mua_he                                                                                                                                                             lo_restrictions
/usr/sbin/postconf: warning: /etc/postfix/main.cf: undefined parameter: virtual_                                                                                                                                                             mailbox_limit_maps
/usr/sbin/postconf: warning: /etc/postfix/main.cf: unused parameter: virtual_cre                                                                                                                                                             ate_maildirsize=yes
/usr/sbin/postconf: warning: /etc/postfix/main.cf: unused parameter: virtual_mai                                                                                                                                                             ldir_extended=yes
/usr/sbin/postconf: warning: /etc/postfix/master.cf: undefined parameter: mua_se                                                                                                                                                             nder_restrictions
/usr/sbin/postconf: warning: /etc/postfix/master.cf: undefined parameter: mua_cl                                                                                                                                                             ient_restrictions
/usr/sbin/postconf: warning: /etc/postfix/master.cf: undefined parameter: mua_he                                                                                                                                                             lo_restrictions
/usr/sbin/postconf: warning: /etc/postfix/master.cf: undefined parameter: mua_se                                                                                                                                                             nder_restrictions
/usr/sbin/postconf: warning: /etc/postfix/master.cf: undefined parameter: mua_cl                                                                                                                                                             ient_restrictions
/usr/sbin/postconf: warning: /etc/postfix/master.cf: undefined parameter: mua_he                                                                                                                                                             lo_restrictions
/usr/sbin/postconf: warning: /etc/postfix/main.cf: undefined parameter: virtual_
pe
peakminute #4

and there is active fail2ban at the moment

jo
josephgodwinke #5

Just to be sure run the following

$ apt install rkhunter -y
$ rkhunter --check --rwo
pe
peakminute #6 
Warning: RH-Sharpe's Rootkit                      [ Warning ]
         File '/usr/bin/wp' found
Warning: The SSH and rkhunter configuration options should be the same:
         SSH configuration option 'PermitRootLogin': yes
         Rkhunter configuration option 'ALLOW_SSH_ROOT_USER': no
Warning: Suspicious file types found in /dev:
         /dev/shm/ols/adns_cache.lock: data
         /dev/shm/ols/adns_cache.shm: data
         /dev/shm/ols/SSL.lock: data
         /dev/shm/ols/SSL.shm: data
         /dev/shm/lsmcd/data7.lock: data
         /dev/shm/lsmcd/data7.shm: data
         /dev/shm/lsmcd/data6.lock: data
         /dev/shm/lsmcd/data6.shm: data
         /dev/shm/lsmcd/data5.lock: data
         /dev/shm/lsmcd/data5.shm: data
         /dev/shm/lsmcd/data4.lock: data
         /dev/shm/lsmcd/data4.shm: data
         /dev/shm/lsmcd/data3.lock: data
         /dev/shm/lsmcd/data3.shm: data
         /dev/shm/lsmcd/data2.lock: data
         /dev/shm/lsmcd/data2.shm: data
         /dev/shm/lsmcd/data1.lock: data
         /dev/shm/lsmcd/data1.shm: data
         /dev/shm/lsmcd/data0.lock: data
         /dev/shm/lsmcd/data0.shm: data
Warning: Hidden file found: /usr/.tempdisk: Linux rev 1.0 ext4 filesystem data, UUID=3e9068d3-9499-4d84-b6ed-8e42daef18cf (needs journal recovery) (extents) (64bit) (large files) (huge files)
Warning: Hidden file found: /dev/shm/.quicshmmap.lock: data
Warning: Hidden file found: /dev/shm/.quicshmmap.shm: data
Warning: Hidden file found: /dev/shm/.quicshmdata.lock: data
Warning: Hidden file found: /dev/shm/.quicshmdata.shm: data
jo
josephgodwinke #8

false positive ignore. if there are no more issues then nothing has compromosed your installation.

Maybe soemthing created those file possibly an update (non-cyberpanel) i will investigate.

pe
peakminute #9

updated last post as it was still loading :slight_smile:

What about email issue?

pe
peakminute #11

Never thought I need to whitelist email users,- it was workiing fine without that until last update…
I see progress.
Great, connected to Rainloop as a user.

Now I want to connect via Mozilla Thunderbird to check emails, because there are more than one email address.
Can’t connect again
Any hint?

Sorted out…

Thank you very much @josephgodwinke

Sign in to reply