Plesk auto reply sends email to administrator

[MislavO]

I've noticed weird "problem" today. One of my clients went, I guess, on vacation and he enabled auto reply on his e-mail account.

Somehow, when somebody send email to hisname@hisdomain.com I'm getting that email in my mailbox (administrator email in Plesk settings).

How is this possible / how to fix this?

There is no CC or BCC in email recipient.

EDIT: I've tried to turn off the auto-reply and I'm not getting any emails.

 

[IgorG]

Strange behaviour. Need more details. For example mail log from time when mail was sent to time when mail was delivered to admin. Also make sure that you haven't any address in Forward to field. Even if there is no your email there can be forwarding from this email address to admin.

 

[MislavO]

First emai:

root@<MY_SERVER> /var/log # cat /usr/local/psa/var/log/maillog | grep "notification@<RANDOM_DOMAIN.com>"
Jun 21 07:43:10 <MY_SERVER> postfix/qmgr[6649]: 1DA4517823BC: from=<notification@<RANDOM_DOMAIN.com>>, size=1156, nrcpt=1 (queue active)
Jun 21 07:43:10 <MY_SERVER> postfix-local[5305]: postfix-local: from=notification@<RANDOM_DOMAIN.com>, to=<MY_CLIENT@myclientdomain.com>, dirname=/var/qmail/mailnames
Jun 21 07:43:17 <MY_SERVER> postfix/smtp[4861]: A3DF317823EB: to=<notification@<RANDOM_DOMAIN.com>>, relay=mail.RANDOM_DOMAIN-hq.com[<IP>]:25, delay=5.7, delays=0.14/0.09/0.27/5.2, dsn=5.1.1, status=bounced (host mail.RANDOM_DOMAIN.com[<IP>] said: 550 5.1.1 User unknown (in reply to RCPT TO command))

Second email:

root@<MY_SERVER> /var/log # cat /usr/local/psa/var/log/maillog | grep "<random_client@newRandomDomain.com>"
Jun 21 08:30:38 <MY_SERVER> postfix/smtp[20589]: BA39117823BD: to=<<random_client@newRandomDomain.com>>, relay=mail.newRandomDomain[<IP>]:25, delay=1.8, delays=0.71/0.13/0.51/0.43, dsn=2.0.0, status=sent (250 OK id=1Upwju-0003tG-7E)
Jun 21 08:34:47 <MY_SERVER> postfix/qmgr[6649]: 457AF17823BD: from=<<random_client@newRandomDomain.com>>, size=31890, nrcpt=1 (queue active)
Jun 21 08:34:47 <MY_SERVER> postfix-local[2948]: postfix-local: from=<random_client@newRandomDomain.com>, to=<MY_CLIENT@myclientdomain.com>, dirname=/var/qmail/mailnames
Jun 21 08:36:06 <MY_SERVER> postfix/smtp[2431]: 8DD5017823BD: to=<<random_client@newRandomDomain.com>>, relay=mail.newRandomDomain[<IP>]:25, delay=4.3, delays=1/0.43/0.45/2.4, dsn=2.0.0, status=sent (250 OK id=1UpwpA-0007Zu-Il)
Jun 21 08:38:46 <MY_SERVER> postfix/smtp[2431]: C6B2417823BD: to=<<random_client@newRandomDomain.com>>, relay=mail.express-interfracht.hr[<IP>]:25, delay=2, delays=0.88/0.07/0.38/0.63, dsn=2.0.0, status=sent (250 OK id=1Upwrm-00017k-Im)
Jun 21 08:40:04 <MY_SERVER> postfix/qmgr[6649]: EA91F17823BD: from=<<random_client@newRandomDomain.com>>, size=38835, nrcpt=1 (queue active)
Jun 21 08:40:04 <MY_SERVER> postfix-local[15815]: postfix-local: from=<random_client@newRandomDomain.com>, to=<MY_CLIENT@myclientdomain.com>, dirname=/var/qmail/mailnames

This is my admin email log, I've checked times and they match (this is just example of one, all of them are same)

root@<MY_SERVER> /var/log # cat /usr/local/psa/var/log/maillog | grep "adminEmail@myDomain.com"
Jun 21 07:43:12 <MY_SERVER> postfix/smtp[5315]: C78A117823BC: to=<adminEmail@myDomain.com>, orig_to=<postmaster@MY_SERVER_HOSTANME>, relay=aspmx.l.google.com[<IP>]:25, delay=0.48, delays=0.08/0.01/0.24/0.15, dsn=2.0.0, status=sent (250 2.0.0 OK 1371800592 w7si2841284eel.134 - gsmtp)

Header email:
http://oi41.tinypic.com/2w673wn.jpg

- please note: my email is mislav_something@domain, return path is admin@ and admin@ is server admin email, however admin@ is forward only email to me and boss

 

[IgorG]

You should not have grep the lines. We need full log for this message from beginning to the end.
Now it looks like some notification for postmaser:

C78A117823BC: to=<adminEmail@myDomain.com>, orig_to=<postmaster@MY_SERVER_HOSTANME>

 

[MislavO]

There are no mailing lists under this domain / no forwarding email addresses / alias addresses.

Jun 21 07:43:10 <MY_SERVER> postfix/smtpd[10396]: connect from xch.<randomDomain.com>[<IP>]
Jun 21 07:43:10 <MY_SERVER> postfix/smtpd[10396]: 1DA4517823BC: client=xch.<randomDomain.com>[<IP>]
Jun 21 07:43:10 <MY_SERVER> postfix/cleanup[4019]: 1DA4517823BC: message-id=<173911809.67520.1371800590067.JavaMail.jetty01@mailhost>
Jun 21 07:43:10 <MY_SERVER> /usr/lib/plesk-9.0/psa-pc-remote[5722]: handlers_stderr: SKIP
Jun 21 07:43:10 <MY_SERVER> /usr/lib/plesk-9.0/psa-pc-remote[5722]: SKIP during call 'check-quota' handler
Jun 21 07:43:10 <MY_SERVER> spf filter[5304]: Starting spf filter...
Jun 21 07:43:10 <MY_SERVER> spf filter[5304]: Error code: (2) Could not find a valid SPF record
Jun 21 07:43:10 <MY_SERVER> spf filter[5304]: Failed to query MAIL-FROM: No SPF records for '<randomDomain.com>'
Jun 21 07:43:10 <MY_SERVER> spf filter[5304]: SPF result: none
Jun 21 07:43:10 <MY_SERVER> spf filter[5304]: SPF status: PASS
Jun 21 07:43:10 <MY_SERVER> /usr/lib/plesk-9.0/psa-pc-remote[5722]: handlers_stderr: PASS
Jun 21 07:43:10 <MY_SERVER> /usr/lib/plesk-9.0/psa-pc-remote[5722]: PASS during call 'spf' handler
Jun 21 07:43:10 <MY_SERVER> postfix/qmgr[6649]: 1DA4517823BC: from=<notification@<randomDomain.com>>, size=1156, nrcpt=1 (queue active)
Jun 21 07:43:10 <MY_SERVER> postfix/smtpd[10396]: disconnect from xch.<randomDomain.com>[212.211.132.222]
Jun 21 07:43:10 <MY_SERVER> postfix-local[5305]: postfix-local: from=notification@<randomDomain.com>, to=MY_CLIENT@myclientdomain.com, dirname=/var/qmail/mailnames
Jun 21 07:43:11 <MY_SERVER> postfix/pickup[27949]: 6684F17823E2: uid=0 from=<MY_CLIENT@myclientdomain.com>
Jun 21 07:43:11 <MY_SERVER> postfix/cleanup[30145]: 6684F17823E2: message-id=<173911809.67520.1371800590067.JavaMail.jetty01@mailhost>
Jun 21 07:43:11 <MY_SERVER> postfix/qmgr[6649]: 6684F17823E2: from=<MY_CLIENT@myclientdomain.com>, size=1425, nrcpt=1 (queue active)
Jun 21 07:43:11 <MY_SERVER> postfix/cleanup[8006]: 814CB17823DD: message-id=<173911809.67520.1371800590067.JavaMail.jetty01@mailhost>
Jun 21 07:43:11 <MY_SERVER> postfix/local[3134]: 6684F17823E2: to=<mailer-daemon@localhost.localdomain>, relay=local, delay=0.27, delays=0.22/0/0/0.05, dsn=2.0.0, status=sent (forwarded as 814CB17823DD)
Jun 21 07:43:11 <MY_SERVER> postfix/qmgr[6649]: 814CB17823DD: from=<MY_CLIENT@myclientdomain.com>, size=1574, nrcpt=1 (queue active)
Jun 21 07:43:11 <MY_SERVER> postfix/qmgr[6649]: 6684F17823E2: removed
Jun 21 07:43:11 <MY_SERVER> postfix/cleanup[30145]: 8DA6417823E2: message-id=<173911809.67520.1371800590067.JavaMail.jetty01@mailhost>
Jun 21 07:43:11 <MY_SERVER> postfix/pickup[27949]: A3DF317823EB: uid=0 from=<MY_CLIENT@myclientdomain.com>
Jun 21 07:43:11 <MY_SERVER> postfix-local[5305]: handlers_stderr: PASS
Jun 21 07:43:11 <MY_SERVER> postfix-local[5305]: PASS during call 'autoresponder' handler
Jun 21 07:43:11 <MY_SERVER> postfix/cleanup[4010]: A3DF317823EB: message-id=<20130621074311.A3DF317823EB@<MY_SERVER>.HOSTNAME
Jun 21 07:43:11 <MY_SERVER> postfix/pipe[25799]: 1DA4517823BC: to=<MY_CLIENT@myclientdomain.com>, relay=plesk_virtual, delay=1.6, delays=0.28/0/0/1.3, dsn=2.0.0, status=sent (delivered via plesk_virtual service)
Jun 21 07:43:11 <MY_SERVER> postfix/qmgr[6649]: 1DA4517823BC: removed
Jun 21 07:43:11 <MY_SERVER> postfix/local[3134]: 814CB17823DD: to=<postmaster@localhost.localdomain>, orig_to=<postmaster@<MY_SERVER>.HOSTNAME>, relay=local, delay=0.2, delays=0.05/0/0/0.15, dsn=2.0.0, status=sent (forwarded as 8DA6417823E2)
Jun 21 07:43:11 <MY_SERVER> postfix/qmgr[6649]: 8DA6417823E2: from=<MY_CLIENT@myclientdomain.com>, size=1720, nrcpt=1 (queue active)
Jun 21 07:43:11 <MY_SERVER> postfix/qmgr[6649]: 814CB17823DD: removed
Jun 21 07:43:11 <MY_SERVER> postfix/qmgr[6649]: A3DF317823EB: from=<MY_CLIENT@myclientdomain.com>, size=774, nrcpt=1 (queue active)
Jun 21 07:43:11 <MY_SERVER> postfix/cleanup[8006]: C78A117823BC: message-id=<173911809.67520.1371800590067.JavaMail.jetty01@mailhost>
Jun 21 07:43:11 <MY_SERVER> postfix/local[3134]: 8DA6417823E2: to=<root@localhost.localdomain>, orig_to=<postmaster@<MY_SERVER>.fedsrv.com>, relay=local, delay=0.32, delays=0.15/0.09/0/0.08, dsn=2.0.0, status=sent (forwarded as C78A117823BC)
Jun 21 07:43:11 <MY_SERVER> postfix/qmgr[6649]: C78A117823BC: from=<MY_CLIENT@myclientdomain.com>, size=1860, nrcpt=1 (queue active)
Jun 21 07:43:11 <MY_SERVER> postfix/qmgr[6649]: 8DA6417823E2: removed
Jun 21 07:43:12 <MY_SERVER> postfix/smtp[5315]: C78A117823BC: to=<admin@adminDomain.com>, orig_to=<postmaster@<MY_SERVER>.HOSTNAME>, relay=aspmx.l.google.com[<IP>:25, delay=0.48, delays=0.08/0.01/0.24/0.15, dsn=2.0.0, status=sent (250 2.0.0 OK 1371800592 w7si2841284eel.134 - gsmtp)
Jun 21 07:43:12 <MY_SERVER> postfix/qmgr[6649]: C78A117823BC: removed

 

[HolgerW]

The problem is not as unusual as you might think.
First we've got the same problem that turning on the autoresponder of one of our customer leads to forwarding his mails to us. Second the issue was reported months ago without any response yet: http://forum.parallels.com/showthread.php?265155-Autoresponder-forwards-messages-to-root

 

[Juan ManuelT]

I have the same problem with the mail account of one of my clients. Hasnt there been any update about this?

To extend a bit, what i'm receiving in the administrator accounts are the replies for undeliverable mails caused by the autoreply my client has configured. I'll try to explain a bit better:

- My client seems to have an autoreply that says something along the lines of "Hi, i'm on holidays from day X to Y, etc".

-When that account receives a mail with an invalid return path (publicity, automated mails etc), the client automaticaly replies with "Hi, i'm on holidays from day X to Y, etc". Since the reply cant reach a valid account, the server answers with the typical underivable mail, account doesnt exist etc. Well the Plesk administrator account gets that reply instead of the client (or also, I dont know if the client is getting the replies too).

 

[MislavO]

Plesk support manage to fix my problem, apparently there was empty record in psa database.

What they did is this:

The issue occurred because of empty record in psa.resp_forward.

To fix the issue I have removed this empty record from psa database.

+++++++++++
mysql> select * from resp_forward;
+----+-------+-------------------------+
| id | rn_id | address |
+----+-------+-------------------------+
| 1 | 5 | email1@domain.TLD |
| 2 | 6 | email2@domain.TLD |
| 3 | 8 | |
| 4 | 9 | email3@domain.TLD |
+----+-------+------------------------+
4 rows in set (0.00 sec)

mysql> delete from resp_forward where id=3;
Query OK, 1 row affected (0.21 sec)
++++++++++++

In my case, after that everything is working.

 

[Juan ManuelT]

Plesk support manage to fix my problem, apparently there was empty record in psa database.

What they did is this:


In my case, after that everything is working.

It doesnt seem to be my case, my psa.resp_forward table is empty. I also dont see any weird configuration on the plesk panel side of that mail account.

Thanks a lot for your help tho.

 

[StéphanS]

The following query will show you all affected mail addresses:

SELECT psa.mail.mail_name, psa.domains.name FROM psa.mail,psa.domains WHERE psa.mail.dom_id=psa.domains.id AND psa.mail.id in (SELECT psa.mail_resp.mn_id FROM psa.mail_resp WHERE psa.mail_resp.id in (SELECT psa.resp_forward.rn_id FROM psa.resp_forward WHERE psa.resp_forward.address=''));

You can then continue to follow the steps in:

http://kb.parallels.com/en/117978

 

[DocF]

This bug also exists in 11.0.x. Will it be fixed there too?