Problems with webmail

Hello everyone,
I'm having a problem on my server where webmail is becoming inaccessible from time to time.
I've checked the logs and services several times, and it only starts working again after I restart the http service.
Does anyone have any ideas of something that could help me?

Are you running on the default ports (2095/2096)? Do you have trouble with plain HTTP connections and/or SSL-encrypted HTTPS?

Yes, I am using the standard ports for both http and https.
One thing I noticed today is that only webmail.domain.com access stops working. If I access it via
domain.com/webmail, it continues to work.
Every time this problem occurs, I just have to restart httpd and it starts working again. The problem is that it happens very frequently, almost every hour, and no error log is generated.

Could be your DNS setup... who is your provider?

I'm having a problem on my server where webmail is becoming inaccessible from time to time.

What error message does your browser show when the problem appears ?

I'm having a problem on my server where webmail is becoming inaccessible from time to time.

What error message does your browser show when the problem appears ?

The error is:
ERR_CONNECTION_RESET

If I restart the apache service it will work, but after a few minutes it stops

here is the webmail part of my vhosts

Code: [Select]

<VirtualHost serverip:443>
        ServerName webmail.domain.com.br

        SSLEngine on
        SSLCertificateFile /etc/pki/tls/certs/domain.com.br.cert
        SSLCertificateKeyFile /etc/pki/tls/private/domain.com.br.key
        SSLCertificateChainFile /etc/pki/tls/certs/domain.com.br.bundle
        SetEnvIf User-Agent ".*MSIE.*" nokeepalive ssl-unclean-shutdown

        <IfModule mod_proxy.c>
                ProxyRequests Off
                ProxyPreserveHost On
                ProxyVia Full
                ProxyPass / http://127.0.0.1:2095/
                ProxyPassReverse / http://127.0.0.1:2095/

                <Proxy *>
                        AllowOverride All
                </Proxy>
        </IfModule>

        <IfModule mod_security2.c>
                SecRuleEngine Off
        </IfModule>

</VirtualHost>


When it happens run:

Code: [Select]

csf -g XXX.XXX.XXX.XXX

iptables -L -n | grep XXX.XXX.XXX.XXX

as root in shell of your server. Replace XXX.XXX.XXX.XXX  with your WAN IP address and check if you get your WAN IP in output. If the WAN IP is there then it means your IP is blocked by the firewall for some reason.

When it happens run:

Code: [Select]

csf -g XXX.XXX.XXX.XXX

iptables -L -n | grep XXX.XXX.XXX.XXX

as root in shell of your server. Replace XXX.XXX.XXX.XXX  with your WAN IP address and check if you get your WAN IP in output. If the WAN IP is there then it means your IP is blocked by the firewall for some reason.

csf -g XXX.XXX.XXX.XXX
Returns:

Code: [Select]

Table  Chain            num   pkts bytes target     prot opt in     out     source               destination         
No matches found for serverip in iptables

IPSET: No matches found for serverip


ip6tables:

Table  Chain            num   pkts bytes target     prot opt in     out     source               destination         
No matches found for serverip in ip6tables

and the command iptables -L -n | grep
does not return anything

1. Ok, then check the following files:

Code: [Select]

/usr/local/apache/domlogs/DOMAIN.COM.error.log
/usr/local/cwpsrv/logs/error_logto find why the commention can't be established (webmail inaccessible).

2. Additionally, make sure the A/AAAA(IPv6)/CNAME records of webmail.DOMAIN.COM point the visitor to the correct ip/host.

3. Make sure there are no problems with the DNS resolver used by your computer.

the log repeats several times just this

Code: [Select]

[Tue Nov 19 15:19:10.351878 2024] [proxy:debug] [pid 97782:tid 140596737591168] proxy_util.c(2105): AH00927: initializing worker http://127.0.0.1:2095/ local
[Tue Nov 19 15:19:10.351901 2024] [proxy:debug] [pid 97782:tid 140596737591168] proxy_util.c(2137): AH00930: initialized pool in child 97782 for (127.0.0.1) min=0 max=25 smax=25
[Tue Nov 19 15:19:10.351909 2024] [proxy:debug] [pid 97782:tid 140596737591168] proxy_util.c(2040): AH00924: worker http://localhost:2095/ shared already initialized
[Tue Nov 19 15:19:10.351913 2024] [proxy:debug] [pid 97782:tid 140596737591168] proxy_util.c(2105): AH00927: initializing worker http://localhost:2095/ local
[Tue Nov 19 15:19:10.351946 2024] [proxy:debug] [pid 97782:tid 140596737591168] proxy_util.c(2137): AH00930: initialized pool in child 97782 for (localhost) min=0 max=25 smax=25
[Tue Nov 19 15:19:10.351953 2024] [proxy:debug] [pid 97782:tid 140596737591168] proxy_util.c(2045): AH00925: initializing worker http://127.0.0.1:2095/ shared
[Tue Nov 19 15:19:10.351968 2024] [proxy:debug] [pid 97782:tid 140596737591168] proxy_util.c(2105): AH00927: initializing worker http://127.0.0.1:2095/ local
[Tue Nov 19 15:19:10.351991 2024] [proxy:debug] [pid 97782:tid 140596737591168] proxy_util.c(2137): AH00930: initialized pool in child 97782 for (127.0.0.1) min=0 max=25 smax=25
[Tue Nov 19 15:19:10.352017 2024] [proxy:debug] [pid 97782:tid 140596737591168] proxy_util.c(2040): AH00924: worker http://localhost:2095/ shared already initialized
[Tue Nov 19 15:19:10.352021 2024] [proxy:debug] [pid 97782:tid 140596737591168] proxy_util.c(2105): AH00927: initializing worker http://localhost:2095/ local
[Tue Nov 19 15:19:10.352066 2024] [proxy:debug] [pid 97782:tid 140596737591168] proxy_util.c(2137): AH00930: initialized pool in child 97782 for (localhost) min=0 max=25 smax=25