Roundcube - Connection Error - Sending a particular email

[anandmys]

A strange problem. All works well except

Few emails cant be forwarded or replied with original content

Genuine emails (ex: from Bank)

Where to check the logs to find the issue?

On clicking the send message, I get this error flashed for a second

Connection Error. (Failed to reach the server)

[cyberspace]

Roundcube logs:

/usr/local/cwpsrv/var/services/roundcube/logs/errors.log

Mail logs:

/var/log/maillog
/var/log/dovecot.log

If there is nothng inside Roundcube logs, check the section "LOGGING/DEBUGGING" of the file:
/usr/local/cwpsrv/var/services/roundcube/config/defaults.inc.php
and change the settings according to your requirements.

[overseer]

Did you check ModSecurity? Look at disabling rule 212880 or others that may be interfering with Roundcube.

Cyberspace, glad to have you back! Always hoping you are staying safe over there!

[anandmys]

Checking.

Looks like unable to forward any email

[anandmys]

I can compose and send a new email.

But I cant reply / forward any email

Not getting any clue from logs.

I tried disabling mod security / adding the exception. No use.

[Starburst]

Please advise the following:

What distro are you running CWP on?

Public or NAT?

Can you send out a test email form the CLI?

--

Welcome back @cyberspace

[anandmys]

Looks like disabling mod security for the domain , mails are going

Adding id 212880 not helping. Maybe other IDs need to be checked.

[Starburst]

Check the ModSecurity log file for that domain, and it should show which rule was being triggered.

[anandmys]

Particular domain has no logs under mod security. I tried switching on Mod security to investigate (For this domain which I had turned off)

Now I am getting errors like

"Connection to storage server failed"
"roundcube server error authenticate plain authentication failed"

Please suggest

[overseer]

Just look in the domains domlogs for ModSecurity lines:
/usr/local/apache/domlogs/user.error.log