The Basics
Nextcloud version : 28.0.11.1
Operating system and version : Armbian-unofficial 24.2.1 Bookworm \l . 6.6.18-current-bcm2711 (aarch64)
Apache or nginx version : Apache 2.4.62 (Debian)
PHP version : 8.1.29
Summary of the issue you are facing:
Checking logs, I see many of thosre lines (everyday) :
2025-01-16T22:03:02.043666+00:00 nextcloudpi postfix/smtp[487365]: 5FA2E6561: to=ncp-fail2ban@nextcloudpi.com, relay=none, delay=194057, delays>
2025-01-16T22:07:01.083430+00:00 nextcloudpi postfix/qmgr[2014]: 6999E6837: from=<>, size=2350, nrcpt=1 (queue active)
2025-01-16T22:07:01.226142+00:00 nextcloudpi postfix/smtp[487384]: connect to nextcloudpi.com[2606:50c0:8003::153]:25: Network is unreachable
2025-01-16T22:07:01.226405+00:00 nextcloudpi postfix/smtp[487384]: connect to nextcloudpi.com[2606:50c0:8002::153]:25: Network is unreachable
2025-01-16T22:07:01.226519+00:00 nextcloudpi postfix/smtp[487384]: connect to nextcloudpi.com[2606:50c0:8000::153]:25: Network is unreachable
2025-01-16T22:07:31.255094+00:00 nextcloudpi postfix/smtp[487384]: connect to nextcloudpi.com[185.199.110.153]:25: Connection timed out
2025-01-16T22:08:01.286613+00:00 nextcloudpi postfix/smtp[487384]: connect to nextcloudpi.com[185.199.108.153]:25: Connection timed out
I indeed activated fail2ban, it seems it tries to send an email to the nextloudpi site owner, and fail to do it…
Question 1 : is this a normal behavior, i.e. it tries to send an email to nextcloupi.com ?
Question 2 : is there something I can do to either stop this, and/or have the email sent to me in order to check whatever needs to be checked ?
Thanks