DOMAIN and SMTP issues #1306

Thieume · 2021-01-11T07:55:36Z

Thieume
Jan 11, 2021

Hello all,
I set up a Bitwardenrs instance on my Synology NAS behind the native reverse proxy of the NAS.
I have a dedicated sub domain for Bitwarden with a Let's Encrypt certificate : https://bitwarden.xxx.yyy

The SMTP parameters are defined in the admin section.
All seems to work : access, administration, creation of entries,...

I encounter an issue when I define the DOMAIN value :

When DOMAIN=http://localhost, I receive correctly the mails sent by Bitwarden (test mail or normal one) with the good values but in the mail all the URLs are http://localhost/...... Not good !
when DOMAIN=https://bitwarden.xxx.yyy, I receive NOTHING. No mail, Bitwardenrs seems to be a black hole. 👎

I suppose a reverse proxy issue, but I haven't seen special attributes in all the tutorials I've read.
I tried X-Forwarded-Proto=https and Front-End-Https=on with no luck.

If someone has an idea ?
Many thanks
Matthieu

BlackDex · 2021-01-11T17:58:53Z

BlackDex
Jan 11, 2021
Collaborator

Please enable SMTP_DEBUG=true during testing and see what happens.
Only use it during testing, because it is very verbose, and could contain sensitive information!

1 reply

Thieume Jan 11, 2021
Author

Hum, strange, seems, that I have the same result with both configurations :
With DOMAIN=http://localhost
2021-01-11 18:13:12.375][request][INFO] POST /admin/test/smtp/ [2021-01-11 18:13:12.475][lettre::transport::smtp::client::connection][DEBUG] << 220 GARM-105G006 Monday, January 11, 2021<CRLF> [2021-01-11 18:13:12.475][lettre::transport::smtp::client::connection][DEBUG] Wrote: EHLO bitwardenrs<CRLF> [2021-01-11 18:13:12.483][lettre::transport::smtp::client::connection][DEBUG] << 250-OVH SMTP PROXY Hello<CRLF> [2021-01-11 18:13:12.484][lettre::transport::smtp::client::connection][DEBUG] << 250-OVH SMTP PROXY Hello<CRLF>250-SIZE 104857600<CRLF> [2021-01-11 18:13:12.484][lettre::transport::smtp::client::connection][DEBUG] << 250-OVH SMTP PROXY Hello<CRLF>250-SIZE 104857600<CRLF>250-ENHANCEDSTATUSCODES<CRLF> [2021-01-11 18:13:12.484][lettre::transport::smtp::client::connection][DEBUG] << 250-OVH SMTP PROXY Hello<CRLF>250-SIZE 104857600<CRLF>250-ENHANCEDSTATUSCODES<CRLF>250-AUTH LOGIN PLAIN<CRLF> [2021-01-11 18:13:12.484][lettre::transport::smtp::client::connection][DEBUG] << 250-OVH SMTP PROXY Hello<CRLF>250-SIZE 104857600<CRLF>250-ENHANCEDSTATUSCODES<CRLF>250-AUTH LOGIN PLAIN<CRLF>250-AUTH=LOGIN PLAIN<CRLF> [2021-01-11 18:13:12.485][lettre::transport::smtp::client::connection][DEBUG] << 250-OVH SMTP PROXY Hello<CRLF>250-SIZE 104857600<CRLF>250-ENHANCEDSTATUSCODES<CRLF>250-AUTH LOGIN PLAIN<CRLF>250-AUTH=LOGIN PLAIN<CRLF>250 8BITMIME<CRLF> [2021-01-11 18:13:12.486][lettre::transport::smtp::client::connection][DEBUG] server OVH with {Authentication(Login), EightBitMime, Authentication(Plain)} [2021-01-11 18:13:12.487][lettre::transport::smtp::client::connection][DEBUG] Wrote: AUTH PLAIN AHJvYm90QGZyb21lbnQuZXUAbjN4NWFZRWxoU2FwUlI=<CRLF> [2021-01-11 18:13:12.785][lettre::transport::smtp::client::connection][DEBUG] << 235 2.7.0 Authentication successful<CRLF> [2021-01-11 18:13:12.788][lettre::transport::smtp::client::connection][DEBUG] Wrote: MAIL FROM:<xxx@yyy.zzz> BODY=8BITMIME<CRLF> [2021-01-11 18:13:12.805][lettre::transport::smtp::client::connection][DEBUG] << 250 2.1.0 Ok<CRLF> [2021-01-11 18:13:12.808][lettre::transport::smtp::client::connection][DEBUG] Wrote: RCPT TO:<xxx@yyy.zzz><CRLF> [2021-01-11 18:13:12.842][lettre::transport::smtp::client::connection][DEBUG] << 250 2.1.5 Ok<CRLF> [2021-01-11 18:13:12.844][lettre::transport::smtp::client::connection][DEBUG] Wrote: DATA<CRLF> [2021-01-11 18:13:12.957][lettre::transport::smtp::client::connection][DEBUG] << 354 End data with <CR><LF>.<CR><LF><CRLF> [2021-01-11 18:13:12.960][lettre::transport::smtp::client::connection][DEBUG] Wrote: Message-Id: <d6b23f008f264275bed6d3221f363627.xxx@yyy.zzzu><CRLF>To: xxx@yyy.zzz<CRLF>From: Vault<CRLF>Subject: Bitwarden_rs SMTP Test<CRLF>MIME-Version: 1.0<CRLF>Date: Mon, 11 Jan 2021 18:13:12 GMT<CRLF>Content-Type: multipart/alternative; boundary="_Part_d6b23f008f264275bed6d3221f363627_"<CRLF><CRLF>--_Part_d6b23f008f264275bed6d3221f363627_<CRLF>Content-Transfer-Encoding: base64<CRLF>Content-Type: text/plain; charset=utf-8<CRLF><CRLF>VGhpcyBpcyBhIHRlc3QgZW1haWwgdG8gdmVyaWZ5IHRoZSBTTVRQIGNvbmZpZ3Vy
(...)
_--<CRLF> [2021-01-11 18:13:12.968][lettre::transport::smtp::client::connection][DEBUG] Wrote: <CRLF>.<CRLF> [2021-01-11 18:13:12.994][lettre::transport::smtp::client::connection][DEBUG] << 250 2.0.0 Ok: queued as CBD4A19E99932<CRLF> [2021-01-11 18:13:12.995][lettre::transport::smtp::client::connection][DEBUG] Wrote: QUIT<CRLF> [2021-01-11 18:13:13.004][lettre::transport::smtp::client::connection][DEBUG] << 221 Service closing transmission channel<CRLF> [2021-01-11 18:13:13.007][response][INFO] POST /admin/test/smtp (test_smtp) => 200 OK

And with DOMAIN=https://bitwarden.xxx.yyy
[2021-01-11 18:17:54.014][request][INFO] POST /admin/test/smtp/ [2021-01-11 18:17:54.091][lettre::transport::smtp::client::connection][DEBUG] << 220 GARM-101G004 Monday, January 11, 2021<CRLF> [2021-01-11 18:17:54.091][lettre::transport::smtp::client::connection][DEBUG] Wrote: EHLO bitwardenrs<CRLF> [2021-01-11 18:17:54.099][lettre::transport::smtp::client::connection][DEBUG] << 250-OVH SMTP PROXY Hello<CRLF> [2021-01-11 18:17:54.099][lettre::transport::smtp::client::connection][DEBUG] << 250-OVH SMTP PROXY Hello<CRLF>250-SIZE 104857600<CRLF> [2021-01-11 18:17:54.100][lettre::transport::smtp::client::connection][DEBUG] << 250-OVH SMTP PROXY Hello<CRLF>250-SIZE 104857600<CRLF>250-ENHANCEDSTATUSCODES<CRLF> [2021-01-11 18:17:54.100][lettre::transport::smtp::client::connection][DEBUG] << 250-OVH SMTP PROXY Hello<CRLF>250-SIZE 104857600<CRLF>250-ENHANCEDSTATUSCODES<CRLF>250-AUTH LOGIN PLAIN<CRLF> [2021-01-11 18:17:54.101][lettre::transport::smtp::client::connection][DEBUG] << 250-OVH SMTP PROXY Hello<CRLF>250-SIZE 104857600<CRLF>250-ENHANCEDSTATUSCODES<CRLF>250-AUTH LOGIN PLAIN<CRLF>250-AUTH=LOGIN PLAIN<CRLF> [2021-01-11 18:17:54.101][lettre::transport::smtp::client::connection][DEBUG] << 250-OVH SMTP PROXY Hello<CRLF>250-SIZE 104857600<CRLF>250-ENHANCEDSTATUSCODES<CRLF>250-AUTH LOGIN PLAIN<CRLF>250-AUTH=LOGIN PLAIN<CRLF>250 8BITMIME<CRLF> [2021-01-11 18:17:54.101][lettre::transport::smtp::client::connection][DEBUG] server OVH with {Authentication(Login), Authentication(Plain), EightBitMime} [2021-01-11 18:17:54.102][lettre::transport::smtp::client::connection][DEBUG] Wrote: AUTH PLAIN AHJvYm90QGZyb21lbnQuZXUAbjN4NWFZRWxoU2FwUlI=<CRLF> [2021-01-11 18:17:54.351][lettre::transport::smtp::client::connection][DEBUG] << 235 2.7.0 Authentication successful<CRLF> [2021-01-11 18:17:54.352][lettre::transport::smtp::client::connection][DEBUG] Wrote: MAIL FROM:<xxx@yyy.zzz> BODY=8BITMIME<CRLF> [2021-01-11 18:17:54.369][lettre::transport::smtp::client::connection][DEBUG] << 250 2.1.0 Ok<CRLF> [2021-01-11 18:17:54.369][lettre::transport::smtp::client::connection][DEBUG] Wrote: RCPT TO:<xxx@yyy.zzz><CRLF> [2021-01-11 18:17:54.391][lettre::transport::smtp::client::connection][DEBUG] << 250 2.1.5 Ok<CRLF> [2021-01-11 18:17:54.391][lettre::transport::smtp::client::connection][DEBUG] Wrote: DATA<CRLF> [2021-01-11 18:17:54.507][lettre::transport::smtp::client::connection][DEBUG] << 354 End data with <CR><LF>.<CR><LF><CRLF> [2021-01-11 18:17:54.511][lettre::transport::smtp::client::connection][DEBUG] Wrote: Message-Id: <b9a90e77db204c01bafae2b6986def8d.xxx@yyy.zzz><CRLF>To: xxx@yyy.zzz<CRLF>From: vault <xxx@yyy.zzz><CRLF>Subject: Bitwarden_rs SMTP Test<CRLF>MIME-Version: 1.0<CRLF>Date: Mon, 11 Jan 2021 18:17:54 GMT<CRLF>Content-Type: multipart/alternative; boundary="_Part_b9a90e77db204c01bafae2b6986def8d_"<CRLF><CRLF>--_Part_b9a90e77db204c01bafae2b6986def8d_<CRLF>Content-Transfer-Encoding: base64<CRLF>Content-Type: text/plain; charset=utf-8<CRLF><CRLF>VGhpcyBpcyBhIHRlc3QgZW1haWwgdG8gdmVyaWZ5IHRoZSBTTVRQIGNvbmZpZ3VyYXRpb24gZm9y<CRLF>IGh0dHBzOi8vY29mZnJlLmZyb21lbnQuZXUuDQoNCldoZW4geW91IGNhbiByZWFkIHRoaXMgZW1h<CRLF>aWwgaXQgaXMgcHJvYmFibHkgY29uZmlndXJlZCBjb3JyZWN0bHkuDQoNCj09PQ0KR2l0aHViOiBo<CRLF>dHRwczovL2dpdGh1Yi5jb20vZGFuaS1nYXJjaWEvYml0d2FyZGVuX3Jz<CRLF>--_Part_b9a90e77db204c01bafae2b6986def8d_<CRLF>Content-Transfer-Encoding: base64<CRLF>Content-Type: text/html; charset=utf-8<CRLF><CRLF>PGh0bWwgeG1sbnM9Imh0dHA6Ly93d3cudzMub3Jn
(...)
_Part_b9a90e77db204c01bafae2b6986def8d_--<CRLF> [2021-01-11 18:17:54.519][lettre::transport::smtp::client::connection][DEBUG] Wrote: <CRLF>.<CRLF> [2021-01-11 18:17:54.545][lettre::transport::smtp::client::connection][DEBUG] << 250 2.0.0 Ok: queued as 5DAD619ED674A<CRLF> [2021-01-11 18:17:54.545][lettre::transport::smtp::client::connection][DEBUG] Wrote: QUIT<CRLF> [2021-01-11 18:17:54.559][lettre::transport::smtp::client::connection][DEBUG] << 221 Service closing transmission channel<CRLF> [2021-01-11 18:17:54.564][response][INFO] POST /admin/test/smtp (test_smtp) => 200 OK

Really strange ! Seems that Bitwardenrs says that the message is sent !
I have tried with another SMTP server and same result.
I click on the "Save" button after each modification...

BlackDex · 2021-01-11T21:28:55Z

BlackDex
Jan 11, 2021
Collaborator

Well, if the mail server reports it is queued we have to believe that.
It's done and delivered RFC wise. So i think it's some spam filter I something else which prevents further delivery. I don't know if you have access to the specific mailserver, bit if that is the case i would check is logs.

On our side there is not much we can do.

1 reply

Thieume Jan 12, 2021
Author

I understand that BW seems to have done is job. But what I do not understand : I do not change the parameters except the domain and the mail is blackholed.
I made tests with other SMTP (which have for sure different spam policies) and the result is the same. Seems really strange.

Why setting the domain can change a spam filter ?
Sometimes, computer science is magic !

BlackDex · 2021-01-12T08:40:07Z

BlackDex
Jan 12, 2021
Collaborator

Well, it could be a number of reasons.
It could be that that domain is somehow somewhere listed, and that it trips the spam-filter enough to block it.
You could try to send an e-mail to an other address, like gmail, yahoo, hotmail, work what ever, and see if it still fails.

2 replies

Thieume Jan 12, 2021
Author

Still done, and it fails too !

Thieume Jan 12, 2021
Author

I have another docker container on the same machine with the same SMTP parameters and all is sent (and received) correctly.

BlackDex · 2021-01-14T16:53:32Z

BlackDex
Jan 14, 2021
Collaborator

We can't help unless the smtp server returns an error, or we know why that mail is being blocked.
You should ask your smtp provider what is going on.

0 replies

Thieume · 2021-01-14T17:18:06Z

Thieume
Jan 14, 2021
Author

Tested with mailtrap and the mail is correctly intercepted. I'll find another SMTP server.
Many thanks for your time.

0 replies

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

DOMAIN and SMTP issues #1306

{{title}}

Replies: 5 comments 4 replies

{{title}}

{{title}}

{{title}}

{{title}}

{{title}}

{{title}}

{{title}}

{{title}}

{{title}}

Select a reply

DOMAIN and SMTP issues #1306

Thieume Jan 11, 2021

Replies: 5 comments · 4 replies

BlackDex Jan 11, 2021 Collaborator

Thieume Jan 11, 2021 Author

BlackDex Jan 11, 2021 Collaborator

Thieume Jan 12, 2021 Author

BlackDex Jan 12, 2021 Collaborator

Thieume Jan 12, 2021 Author

Thieume Jan 12, 2021 Author

BlackDex Jan 14, 2021 Collaborator

Thieume Jan 14, 2021 Author

Thieume
Jan 11, 2021

Replies: 5 comments 4 replies

BlackDex
Jan 11, 2021
Collaborator

Thieume Jan 11, 2021
Author

BlackDex
Jan 11, 2021
Collaborator

Thieume Jan 12, 2021
Author

BlackDex
Jan 12, 2021
Collaborator

Thieume Jan 12, 2021
Author

Thieume Jan 12, 2021
Author

BlackDex
Jan 14, 2021
Collaborator

Thieume
Jan 14, 2021
Author