Sub-addressing

[gugaua]

Contribution guidelines

• I've read the contribution guidelines and wholeheartedly agree

Checklist prior issue creation

• I understand that failure to follow below instructions may cause this issue to be closed.
• I understand that vague, incomplete or inaccurate information may cause this issue to be closed.
• I understand that this form is intended solely for reporting software bugs and not for support-related inquiries.
• I understand that all responses are voluntary and community-driven, and do not constitute commercial support.
• I confirm that I have reviewed previous issues to ensure this matter has not already been addressed.
• I confirm that my environment meets all prerequisite requirements as specified in the official documentation.

Description

Sub-addressing feature not working with default Global Postfilter

Steps to reproduce:

1. Set Mailbox Settings to "tagged e-mails in subfolder" in German: Umgang mit getaggten E-Mails steuern: --> In Unterordner
2. Send Mail from other domain to user+tag@domain.com <-- this is main user not alias
3. Expect E-Mail to arrive in INBOX/tag and create this subfolder if it does not exist
4. E-Mail arrives in INBOX
5. To make it work change default global_sieve_after to NOT check "header :contains "X-Moo-Tag" "YES""
6. Send another e-mail and it works
   Relevant part:

if allof (
  envelope :detail :matches "to" "*",
  header :contains "X-Moo-Tag" "YES"
  ) {
  set :lower :upperfirst "tag" "${1}";
  if mailboxexists "INBOX/${1}" {
    fileinto "INBOX/${1}";
  } else {
    fileinto :create "INBOX/${tag}";
  }
} **else {
if envelope :detail :matches "to" "*" {
fileinto :create "INBOX/${1}";
}
}**

I was chatting via Telegram to "DerLinkman (Niklas) and I discovered that there is some missing Log in php-fpm-mailcow container... there should be something like ALIAS EXPANDER but that is missing totally:
[01-Oct-2025 16:16:55] WARNING: [pool system-worker] child 5155 said into stderr: "NOTICE: PHP message: ALIAS EXPANDER: http pipe: query tester@example.com as username from mailbox"

This kind if messages I can´t see at all... maybe the problem is hidden somewhere there?
I belive this ALIAS EXPANDER should add "X-Moo-Tag" and set it to "yes"?

In provided logs you can see Postfix will show "user+tag@domain.com" Dovecot will only show "user@domain.com"

Guidelines 5 small changes:

docker override

services:

  postfix-mailcow:
    logging:
      driver: "syslog"
      options:
        syslog-address: "udp://127.0.0.1:514"
        syslog-facility: "local3"

  dovecot-mailcow:
    logging:
      driver: "syslog"
      options:
        syslog-address: "udp://127.0.0.1:514"
        syslog-facility: "local3"

  rspamd-mailcow:
    logging:
      driver: "syslog"
      options:
        syslog-address: "udp://127.0.0.1:514"
        syslog-facility: "local3"

    environment:
      - MASTER=${MASTER:-y}
    labels:
      ofelia.enabled: "true"
      ofelia.job-exec.rspamd_dmarc_reporting_yesterday.schedule: "@every 24h"
      ofelia.job-exec.rspamd_dmarc_reporting_yesterday.command: "/bin/bash -c \"[[ $${MASTER} == y ]] && /usr/bin/rspamadm dmarc_report $(date --date yesterday '+%Y%m%d') > /var/lib/rspamd/dmarc_reports_last_log 2>&1 || exit 0\""
  ofelia-mailcow:
    depends_on:
      - rspamd-mailcow

xxxxxxxxxxxxxxxxxxxxxxx
data/conf/rspamd/local.d
xxxxxxxxxxxxxxxxxxxxxxx
reporting {
    enabled = true;
    email = 'noreply@domain.com';
    bcc_addrs = 'user@domain.com';
    domain = 'domain.com';
    org_name = 'anonymised';
    helo = 'rspamd';
    smtp = 'postfix';
    smtp_port = 25;
    from_name = 'Example DMARC Report';
    msgid_from = 'rspamd.mail.domain';
    max_entries = 2k;
    keys_expire = 2d;
}

Logs:

xxxxxxxxxxxx
POSTFIX
xxxxxxxxxxxx

postfix-mailcow-1  | Oct  7 12:12:06 47ae623f34d3 postfix/postscreen[23371]: CONNECT from [1.2.3.4]:49742 to [172.22.1.253]:25
postfix-mailcow-1  | Oct  7 12:12:06 47ae623f34d3 whitelist_forwardinghosts: Look up 1.2.3.4 on whitelist, result 200 PERMIT
postfix-mailcow-1  | Oct  7 12:12:06 47ae623f34d3 postfix/postscreen[23371]: ALLOWLISTED [1.2.3.4]:49742
postfix-mailcow-1  | Oct  7 12:12:07 47ae623f34d3 postfix/smtpd[23379]: connect from unknown[1.2.3.4]
postfix-mailcow-1  | Oct  7 12:12:07 47ae623f34d3 postfix/smtpd[23379]: Anonymous TLS connection established from unknown[1.2.3.4]: TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256
postfix-mailcow-1  | Oct  7 12:12:07 47ae623f34d3 postfix/smtpd[23379]: 3CF9E520BBC: client=unknown[1.2.3.4]
postfix-mailcow-1  | Oct  7 12:12:07 47ae623f34d3 postfix/cleanup[23380]: 3CF9E520BBC: message-id=<emcefced74-e1be-4ec6-bbec-80e1f9dade75@b344fc68.com>
postfix-mailcow-1  | Oct  7 12:12:07 47ae623f34d3 postfix/qmgr[378]: 3CF9E520BBC: from=<user2@domain2.com>, size=18800, nrcpt=1 (queue active)
postfix-mailcow-1  | Oct  7 12:12:07 47ae623f34d3 postfix/smtpd[23379]: disconnect from unknown[1.2.3.4] ehlo=2 starttls=1 mail=1 rcpt=1 data=1 quit=1 commands=7
postfix-mailcow-1  | Oct  7 12:12:07 47ae623f34d3 postfix/lmtp[23382]: 3CF9E520BBC: to=<user+tag@domain.com>, relay=dovecot[172.22.1.250]:24, delay=0.47, delays=0.26/0.04/0.01/0.16, dsn=2.0.0, status=sent (250 2.0.0 <user+tag@domain.com> oB4vF3fn5GixAAAA++bECA Saved)
postfix-mailcow-1  | Oct  7 12:12:07 47ae623f34d3 postfix/qmgr[378]: 3CF9E520BBC: removed




xxxxxxxxxxxx
DOVECOT
xxxxxxxxxxxx

dovecot-mailcow-1  | Oct  7 12:12:02 575aba957c42 dovecot: lmtp(177): Connect from 172.22.1.13
dovecot-mailcow-1  | Oct  7 12:12:02 575aba957c42 dovecot: auth-worker(248): conn unix:auth-worker (pid=174,uid=401): auth-worker<69>: sql(watchdog@invalid,172.22.1.13): unknown user 
dovecot-mailcow-1  | Oct  7 12:12:02 575aba957c42 dovecot: lmtp(177): Disconnect from 172.22.1.13: Logged out (state=MAIL FROM)
dovecot-mailcow-1  | Oct  7 12:12:02 575aba957c42 dovecot: imap-login: Disconnected: Aborted login by logging out (no auth attempts in 0 secs): user=<>, rip=172.22.1.13, lip=172.22.1.250, TLS, TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
dovecot-mailcow-1  | Oct  7 12:12:03 575aba957c42 dovecot: imap-login: Disconnected: Aborted login by logging out (no auth attempts in 0 secs): user=<>, rip=172.22.1.13, lip=172.22.1.250
dovecot-mailcow-1  | Oct  7 12:12:03 575aba957c42 dovecot: managesieve-login: Disconnected: Connection closed (no auth attempts in 0 secs): user=<>, rip=172.22.1.13, lip=172.22.1.250
dovecot-mailcow-1  | Oct  7 12:12:07 575aba957c42 dovecot: lmtp(177): Connect from 172.22.1.253
dovecot-mailcow-1  | Oct  7 12:12:07 575aba957c42 dovecot: lmtp(user@domain.com)<177><oB4vF3fn5GixAAAA++bECA>: sieve: msgid=<emcefced74-e1be-4ec6-bbec-80e1f9dade75@b344fc68.com>: stored mail into mailbox 'INBOX'
dovecot-mailcow-1  | Oct  7 12:12:07 575aba957c42 dovecot: lmtp(177): Disconnect from 172.22.1.253: Logged out (state=READY)
dovecot-mailcow-1  | Oct  7 12:12:10 575aba957c42 dovecot: auth-worker(248): conn unix:auth-worker (pid=174,uid=401): auth-worker<74>: sql(74ztarlq6b9c22mc@mailcow.local): unknown user 
dovecot-mailcow-1  | Oct  7 12:12:10 575aba957c42 dovecot: doveadm(74ztarlq6b9c22mc@mailcow.local): Error: User doesn't exist

Which branch are you using?

master (stable)

Which architecture are you using?

x86_64

Operating System:

Ubuntu 24.04.3 LTS

Server/VM specifications:

8GB Ram, 4 Cores

Is Apparmor, SELinux or similar active?

no

Virtualization technology:

VMWare ESXi

Docker version:

28.5.0

docker-compose version or docker compose version:

v2.39.4

mailcow version:

2025-09b

Reverse proxy:

none

Logs of git diff:

NOT POSTED START
diff --git a/data/assets/ssl-example/cert.pem b/data/assets/ssl-example/cert.pem
diff --git a/data/assets/ssl-example/key.pem b/data/assets/ssl-example/key.pem
NOT POSTED END
diff --git a/data/conf/dovecot/global_sieve_after b/data/conf/dovecot/global_sieve_after
index cf12543a..774e34b9 100644
--- a/data/conf/dovecot/global_sieve_after
+++ b/data/conf/dovecot/global_sieve_after
@@ -22,6 +22,10 @@ if allof (
   } else {
     fileinto :create "INBOX/${tag}";
   }
+} else {
+if envelope :detail :matches "to" "*" {
+fileinto :create "INBOX/${1}";
+}
 }
 
 if duplicate {
diff --git a/data/conf/postfix/main.cf b/data/conf/postfix/main.cf
index f091cb3f..bdf18b68 100644
--- a/data/conf/postfix/main.cf
+++ b/data/conf/postfix/main.cf
@@ -174,3 +174,29 @@ lmtp_destination_recipient_limit=1
 
 # DO NOT EDIT ANYTHING BELOW #
 # Overrides #
+
+postscreen_dnsbl_sites = wl.mailspike.net=127.0.0.[18;19;20]*-2
+  hostkarma.junkemailfilter.com=127.0.0.1*-2
+  list.dnswl.org=127.0.[0..255].0*-2
+  list.dnswl.org=127.0.[0..255].1*-4
+  list.dnswl.org=127.0.[0..255].2*-6
+  list.dnswl.org=127.0.[0..255].3*-8
+  bl.spamcop.net*2
+  bl.suomispam.net*2
+  hostkarma.junkemailfilter.com=127.0.0.2*3
+  hostkarma.junkemailfilter.com=127.0.0.4*2
+  hostkarma.junkemailfilter.com=127.0.1.2*1
+  backscatter.spameatingmonkey.net*2
+  bl.ipv6.spameatingmonkey.net*2
+  bl.spameatingmonkey.net*2
+  b.barracudacentral.org=127.0.0.2*7
+  bl.mailspike.net=127.0.0.2*5
+  bl.mailspike.net=127.0.0.[10;11;12]*4
+  zen.spamhaus.org=127.0.0.[10;11]*8
+  zen.spamhaus.org=127.0.0.[4..7]*6
+  zen.spamhaus.org=127.0.0.3*4
+  zen.spamhaus.org=127.0.0.2*3
+
+# User Overrides
+myhostname = ANONYMISE
+message_size_limit = 367001600

Logs of iptables -L -vn:

Chain INPUT (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         

Chain FORWARD (policy DROP 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         
3531K 3571M MAILCOW    0    --  *      *       0.0.0.0/0            0.0.0.0/0            /* mailcow */
3539K 3576M DOCKER-USER  0    --  *      *       0.0.0.0/0            0.0.0.0/0           
3539K 3576M DOCKER-FORWARD  0    --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         

Chain DOCKER (2 references)
 pkts bytes target     prot opt in     out     source               destination         
   22  1192 ACCEPT     6    --  !br-mailcow br-mailcow  0.0.0.0/0            172.22.1.253         tcp dpt:587
  133  7004 ACCEPT     6    --  !br-mailcow br-mailcow  0.0.0.0/0            172.22.1.253         tcp dpt:465
  278 16376 ACCEPT     6    --  !br-mailcow br-mailcow  0.0.0.0/0            172.22.1.253         tcp dpt:25
    0     0 ACCEPT     6    --  !br-mailcow br-mailcow  0.0.0.0/0            172.22.1.250         tcp dpt:12345
    4   192 ACCEPT     6    --  !br-mailcow br-mailcow  0.0.0.0/0            172.22.1.250         tcp dpt:4190
    0     0 ACCEPT     6    --  !br-mailcow br-mailcow  0.0.0.0/0            172.22.1.250         tcp dpt:995
  873 51085 ACCEPT     6    --  !br-mailcow br-mailcow  0.0.0.0/0            172.22.1.250         tcp dpt:993
    0     0 ACCEPT     6    --  !br-mailcow br-mailcow  0.0.0.0/0            172.22.1.250         tcp dpt:143
    0     0 ACCEPT     6    --  !br-mailcow br-mailcow  0.0.0.0/0            172.22.1.250         tcp dpt:110
11082  665K ACCEPT     6    --  !br-mailcow br-mailcow  0.0.0.0/0            172.22.1.10          tcp dpt:443
  394 21784 ACCEPT     6    --  !br-mailcow br-mailcow  0.0.0.0/0            172.22.1.10          tcp dpt:80
    0     0 ACCEPT     6    --  !br-mailcow br-mailcow  0.0.0.0/0            172.22.1.5           tcp dpt:3306
    0     0 ACCEPT     6    --  !br-mailcow br-mailcow  0.0.0.0/0            172.22.1.249         tcp dpt:6379
    0     0 DROP       0    --  !docker0 docker0  0.0.0.0/0            0.0.0.0/0           
    0     0 DROP       0    --  !br-mailcow br-mailcow  0.0.0.0/0            0.0.0.0/0           

Chain DOCKER-BRIDGE (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 DOCKER     0    --  *      docker0  0.0.0.0/0            0.0.0.0/0           
13613  812K DOCKER     0    --  *      br-mailcow  0.0.0.0/0            0.0.0.0/0           

Chain DOCKER-CT (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     0    --  *      docker0  0.0.0.0/0            0.0.0.0/0            ctstate RELATED,ESTABLISHED
1771K 2887M ACCEPT     0    --  *      br-mailcow  0.0.0.0/0            0.0.0.0/0            ctstate RELATED,ESTABLISHED

Chain DOCKER-FORWARD (1 references)
 pkts bytes target     prot opt in     out     source               destination         
3539K 3576M DOCKER-CT  0    --  *      *       0.0.0.0/0            0.0.0.0/0           
1764K  685M DOCKER-ISOLATION-STAGE-1  0    --  *      *       0.0.0.0/0            0.0.0.0/0           
1764K  685M DOCKER-BRIDGE  0    --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     0    --  docker0 *       0.0.0.0/0            0.0.0.0/0           
1746K  683M ACCEPT     0    --  br-mailcow *       0.0.0.0/0            0.0.0.0/0           

Chain DOCKER-ISOLATION-STAGE-1 (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 DOCKER-ISOLATION-STAGE-2  0    --  docker0 !docker0  0.0.0.0/0            0.0.0.0/0           
1746K  683M DOCKER-ISOLATION-STAGE-2  0    --  br-mailcow !br-mailcow  0.0.0.0/0            0.0.0.0/0           

Chain DOCKER-ISOLATION-STAGE-2 (2 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 DROP       0    --  *      br-mailcow  0.0.0.0/0            0.0.0.0/0           
    0     0 DROP       0    --  *      docker0  0.0.0.0/0            0.0.0.0/0           

Chain DOCKER-USER (1 references)
 pkts bytes target     prot opt in     out     source               destination         

Chain MAILCOW (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 DROP       6    --  !br-mailcow br-mailcow  0.0.0.0/0            0.0.0.0/0            /* mailcow isolation */

Logs of ip6tables -L -vn:

Chain INPUT (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         

Chain FORWARD (policy DROP 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 MAILCOW    0    --  *      *       ::/0                 ::/0                 /* mailcow */
    0     0 DOCKER-USER  0    --  *      *       ::/0                 ::/0                
    0     0 DOCKER-ISOLATION-STAGE-1  0    --  *      *       ::/0                 ::/0                
    0     0 DOCKER     0    --  *      br-mailcow  ::/0                 ::/0                
    0     0 ACCEPT     0    --  *      br-mailcow  ::/0                 ::/0                 ctstate RELATED,ESTABLISHED
    0     0 ACCEPT     0    --  br-mailcow !br-mailcow  ::/0                 ::/0                
    0     0 ACCEPT     0    --  br-mailcow br-mailcow  ::/0                 ::/0                
    0     0 DOCKER-FORWARD  0    --  *      *       ::/0                 ::/0                

Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         

Chain DOCKER (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     6    --  !br-mailcow br-mailcow  ::/0                 fd4d:6169:6c63:6f77::a  tcp dpt:587
    0     0 ACCEPT     6    --  !br-mailcow br-mailcow  ::/0                 fd4d:6169:6c63:6f77::a  tcp dpt:465
    0     0 ACCEPT     6    --  !br-mailcow br-mailcow  ::/0                 fd4d:6169:6c63:6f77::a  tcp dpt:25
    0     0 ACCEPT     6    --  !br-mailcow br-mailcow  ::/0                 fd4d:6169:6c63:6f77::9  tcp dpt:4190
    0     0 ACCEPT     6    --  !br-mailcow br-mailcow  ::/0                 fd4d:6169:6c63:6f77::9  tcp dpt:995
    0     0 ACCEPT     6    --  !br-mailcow br-mailcow  ::/0                 fd4d:6169:6c63:6f77::9  tcp dpt:993
    0     0 ACCEPT     6    --  !br-mailcow br-mailcow  ::/0                 fd4d:6169:6c63:6f77::9  tcp dpt:143
    0     0 ACCEPT     6    --  !br-mailcow br-mailcow  ::/0                 fd4d:6169:6c63:6f77::9  tcp dpt:110
    0     0 ACCEPT     6    --  !br-mailcow br-mailcow  ::/0                 fd4d:6169:6c63:6f77::5  tcp dpt:443
    0     0 ACCEPT     6    --  !br-mailcow br-mailcow  ::/0                 fd4d:6169:6c63:6f77::5  tcp dpt:80

Chain DOCKER-BRIDGE (1 references)
 pkts bytes target     prot opt in     out     source               destination         

Chain DOCKER-CT (1 references)
 pkts bytes target     prot opt in     out     source               destination         

Chain DOCKER-FORWARD (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 DOCKER-CT  0    --  *      *       ::/0                 ::/0                
    0     0 DOCKER-ISOLATION-STAGE-1  0    --  *      *       ::/0                 ::/0                
    0     0 DOCKER-BRIDGE  0    --  *      *       ::/0                 ::/0                

Chain DOCKER-ISOLATION-STAGE-1 (2 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 RETURN     0    --  *      *       ::/0                 ::/0                

Chain DOCKER-ISOLATION-STAGE-2 (0 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 RETURN     0    --  *      *       ::/0                 ::/0                

Chain DOCKER-USER (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 RETURN     0    --  *      *       ::/0                 ::/0                

Chain MAILCOW (1 references)
 pkts bytes target     prot opt in     out     source               destination

Logs of iptables -L -vn -t nat:

Chain PREROUTING (policy ACCEPT 2009K packets, 153M bytes)
 pkts bytes target     prot opt in     out     source               destination         
31083 2097K DOCKER     0    --  *      *       0.0.0.0/0            0.0.0.0/0            ADDRTYPE match dst-type LOCAL

Chain INPUT (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         

Chain OUTPUT (policy ACCEPT 1004K packets, 71M bytes)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 DOCKER     0    --  *      *       0.0.0.0/0           !127.0.0.0/8          ADDRTYPE match dst-type LOCAL

Chain POSTROUTING (policy ACCEPT 1083K packets, 76M bytes)
 pkts bytes target     prot opt in     out     source               destination         
 357K   26M MASQUERADE  0    --  *      !br-mailcow  172.22.1.0/24        0.0.0.0/0           
    0     0 MASQUERADE  0    --  *      !docker0  172.17.0.0/16        0.0.0.0/0           

Chain DOCKER (2 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 RETURN     0    --  br-mailcow *       0.0.0.0/0            0.0.0.0/0           
    0     0 RETURN     0    --  docker0 *       0.0.0.0/0            0.0.0.0/0           
    0     0 DNAT       6    --  !br-mailcow *       0.0.0.0/0            127.0.0.1            tcp dpt:7654 to:172.22.1.249:6379
    0     0 DNAT       6    --  !br-mailcow *       0.0.0.0/0            127.0.0.1            tcp dpt:13306 to:172.22.1.5:3306
  394 21784 DNAT       6    --  !br-mailcow *       0.0.0.0/0            0.0.0.0/0            tcp dpt:80 to:172.22.1.10:80
11082  665K DNAT       6    --  !br-mailcow *       0.0.0.0/0            0.0.0.0/0            tcp dpt:443 to:172.22.1.10:443
    0     0 DNAT       6    --  !br-mailcow *       0.0.0.0/0            0.0.0.0/0            tcp dpt:110 to:172.22.1.250:110
    0     0 DNAT       6    --  !br-mailcow *       0.0.0.0/0            0.0.0.0/0            tcp dpt:143 to:172.22.1.250:143
  873 51085 DNAT       6    --  !br-mailcow *       0.0.0.0/0            0.0.0.0/0            tcp dpt:993 to:172.22.1.250:993
    0     0 DNAT       6    --  !br-mailcow *       0.0.0.0/0            0.0.0.0/0            tcp dpt:995 to:172.22.1.250:995
    4   192 DNAT       6    --  !br-mailcow *       0.0.0.0/0            0.0.0.0/0            tcp dpt:4190 to:172.22.1.250:4190
    0     0 DNAT       6    --  !br-mailcow *       0.0.0.0/0            127.0.0.1            tcp dpt:19991 to:172.22.1.250:12345
  278 16376 DNAT       6    --  !br-mailcow *       0.0.0.0/0            0.0.0.0/0            tcp dpt:25 to:172.22.1.253:25
  133  7004 DNAT       6    --  !br-mailcow *       0.0.0.0/0            0.0.0.0/0            tcp dpt:465 to:172.22.1.253:465
   22  1192 DNAT       6    --  !br-mailcow *       0.0.0.0/0            0.0.0.0/0            tcp dpt:587 to:172.22.1.253:587

Logs of ip6tables -L -vn -t nat:

Chain PREROUTING (policy ACCEPT 173K packets, 16M bytes)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 DOCKER     0    --  *      *       ::/0                 ::/0                 ADDRTYPE match dst-type LOCAL

Chain INPUT (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         

Chain OUTPUT (policy ACCEPT 18 packets, 1440 bytes)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 DOCKER     0    --  *      *       ::/0                !::1                  ADDRTYPE match dst-type LOCAL

Chain POSTROUTING (policy ACCEPT 18 packets, 1440 bytes)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 MASQUERADE  0    --  *      br-mailcow  ::/0                 ::/0                 ADDRTYPE match dst-type LOCAL

Chain DOCKER (2 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 DNAT       6    --  !br-mailcow *       ::/0                 ::/0                 tcp dpt:4190 to:[fd4d:6169:6c63:6f77::9]:4190
    0     0 DNAT       6    --  !br-mailcow *       ::/0                 ::/0                 tcp dpt:993 to:[fd4d:6169:6c63:6f77::9]:993
    0     0 DNAT       6    --  !br-mailcow *       ::/0                 ::/0                 tcp dpt:995 to:[fd4d:6169:6c63:6f77::9]:995
    0     0 DNAT       6    --  !br-mailcow *       ::/0                 ::/0                 tcp dpt:110 to:[fd4d:6169:6c63:6f77::9]:110
    0     0 DNAT       6    --  !br-mailcow *       ::/0                 ::/0                 tcp dpt:143 to:[fd4d:6169:6c63:6f77::9]:143
    0     0 DNAT       6    --  !br-mailcow *       ::/0                 ::/0                 tcp dpt:443 to:[fd4d:6169:6c63:6f77::5]:443
    0     0 DNAT       6    --  !br-mailcow *       ::/0                 ::/0                 tcp dpt:80 to:[fd4d:6169:6c63:6f77::5]:80
    0     0 DNAT       6    --  !br-mailcow *       ::/0                 ::/0                 tcp dpt:25 to:[fd4d:6169:6c63:6f77::a]:25
    0     0 DNAT       6    --  !br-mailcow *       ::/0                 ::/0                 tcp dpt:465 to:[fd4d:6169:6c63:6f77::a]:465
    0     0 DNAT       6    --  !br-mailcow *       ::/0                 ::/0                 tcp dpt:587 to:[fd4d:6169:6c63:6f77::a]:587

DNS check:

172.64.155.249
104.18.32.7

[gugaua]

I think I may have found a clue as to what could be causing this issue.

I’m using “Weiterleitungs-Hosts”, which can be found under:
/admin/system → Einstellungen → Weiterleitungs-Hosts

There, I have set an email server with the spam filter disabled.

When I receive an email from an external domain which is not in this list like gmail, it works fine with tags — so this setup might be influencing the behavior.

Can someone reproduce this bug?

[DerLinkman]

The Plussubadressing as well as BCC Maps is handled by Rspamd (it is a logic error in this case).

However, this change is deeper included than "simply remove it" so we need to carefully figure out how to solve this with the "Redirect Hosts".

[milkmaker]

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs.

[DerLinkman]

This has been fixed with Release 2025-12a

[ckleiner1977]

Looks like is NOT fixed in 2025-12a. Is there anything else to do exept update? Since i disabled spamfilter for my upstream host, mails come into INBOX.

[DerLinkman]

It's not fixed? Ok, interesting because in my recent test it works fine.

Tell me, how do you disabled the spamfilter via forwarded hosts?

[ckleiner1977]

On WAN side i have a relay server. This server i configured in mc system - configuration - relay hosts. If i enable Spamfilter, there will be a new folder in my inbox. Spamfilter disabled, no new folder and mail is in inbox.