[SOLVED] Getting bounces for email sent to you@example.com

F

fribse

Active Member
Feb 2, 2022
34
3
28
57
Hi All

Proxmox 9.1.5

I get bounces for emails sent to you@example.com from pve@root.
I can't find anything in the gui in notifications that has that address, I've changed the address for pve@pam to a real email address.
Where on earth can I find that email?
 
Last edited:
Did you check Datacenter -> Users -> root@pam ?
 
Datacenter > ACME > Accounts?
Datacenter > Notifications > Targets?
 
Nothing except the CF certificate setup under ACME Accounts.
Under Targets I've made a 'RootEmail' with a SMTP setup, and it routes all notifiations to that.
 
Do you run other PVE or even PBS instances?
 
@fribse
I would search with:

grep -ir [EMAIL]you@example.com[/EMAIL] /etc

P.S. After posting it I've noticed that the email address in the command was automatically placed between EMAIL and /EMAIL tags. Of course the real command has to be without these tags.

P.S. 2
It's worth to add -a option to grep to process also binary files.
 
Last edited:
I do run a pbs, but I am pretty sure it's coming from the PVE (and I only have 1 of those).
The grep gave no result.

The bounced email (I have replaced the domain with domain.com):

This is the mail system at host pve.domain.com.

I'm sorry to have to inform you that your message could not
be delivered to one or more recipients. It's attached below.

For further assistance, please send mail to postmaster.

If you do so, please include this problem report. You can
delete your own text from the attached returned message.

The mail system

<you@example.com>: Domain example.com does not accept mail (nullMX)


Reporting-MTA: dns; pve.domain.com
X-Postfix-Queue-ID: F4020816FF
X-Postfix-Sender: rfc822; root@pve.domain.com
Arrival-Date: Sat, 28 Feb 2026 09:00:01 +0100 (CET)

Final-Recipient: rfc822; you@example.com
Original-Recipient: rfc822;you@example.com
Action: failed
Status: 5.1.0
Diagnostic-Code: X-Postfix; Domain example.com does not accept mail (nullMX)

Return-Path: <root@pve.domain.com>
Received: by pve.domain.com (Postfix, from userid 0)
id F4020816FF; Sat, 28 Feb 2026 09:00:01 +0100 (CET)
To: you@example.com
Subject: ⚠️ ZFS/NVMe Error on pve
MIME-Version: 1.0
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: 8bit
Message-Id: <20260228080001.F4020816FF@pve.domain.com>
Date: Sat, 28 Feb 2026 09:00:01 +0100 (CET)
From: root <root@pve.domain.com>

[2026-02-28 09:00:01] --- ZFS/NVMe health check ---
[ZPOOL STATUS]
all pools are healthy
[ZPOOL ERRORS]
errors: No known data errors
[NVME ERRORS]
[1014237.232453] igc 0000:57:00.0 enp87s0: Reset adapter
[1014397.165610] igc 0000:57:00.0 enp87s0: Reset adapter
[ZFS EVENTS]
history_hostname = "pve"
history_dsname = "VM/subvol-115-disk-0"
history_internal_str = "(bptree, mintxg=1)"
history_internal_name = "destroy"
history_dsid = 0xbe3
history_txg = 0x3c899a
history_time = 0x699b1eab
time = 0x699b1eab 0x1b4a8af2
eid = 0x92

This is a VM I have deleted some time ago.

It does report a NVME error, which I fear is the problem I've seen before with Intel NIC's and 2.5 GBit interface speed and PVE.
 
fribse said:
Date: Sat, 28 Feb 2026 09:00:01
Click to expand...
Check in the (cron) log, which program is called at this time. Then you should be able the find the place where this you@example.com address is written.

Or maybe it's not written there, but this is the default address used by this program when the program wasn't instructed what real address to use.
 
Last edited:
Did you recently changed the mail address and still have have mails in your queue with the wrong receipient??

postqueue -j
 
@fstrankowski : Nothing in postfix queue

@Onslow
Nothing with crontab -l

Bash: 
root@pve:~# cat /etc/crontab
# /etc/crontab: system-wide crontab
# Unlike any other crontab you don't have to run the `crontab'
# command to install the new version when you edit this file
# and files in /etc/cron.d. These files also have username fields,
# that none of the other crontabs do.

SHELL=/bin/sh
PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin

# Example of job definition:
# .---------------- minute (0 - 59)
# |  .------------- hour (0 - 23)
# |  |  .---------- day of month (1 - 31)
# |  |  |  .------- month (1 - 12) OR jan,feb,mar,apr ...
# |  |  |  |  .---- day of week (0 - 6) (Sunday=0 or 7) OR sun,mon,tue,wed,thu,fri,sat
# |  |  |  |  |
# *  *  *  *  * user-name command to be executed
17 *    * * *   root    cd / && run-parts --report /etc/cron.hourly
25 6    * * *   root    test -x /usr/sbin/anacron || { cd / && run-parts --report /etc/cron.daily; }
47 6    * * 7   root    test -x /usr/sbin/anacron || { cd / && run-parts --report /etc/cron.weekly; }
52 6    1 * *   root    test -x /usr/sbin/anacron || { cd / && run-parts --report /etc/cron.monthly; }
#
root@pve:/etc/cron.hourly# ls -al
total 20
drwxr-xr-x   2 root root  4096 Aug 11  2025 .
drwxr-xr-x 110 root root 12288 Feb 28 09:21 ..
-rw-r--r--   1 root root   102 Mar  2  2023 .placeholder

It looks like it's sending it every hour on the dot, really strange.
 
@Onslow you are right, I found this:

Code: 
Feb 28 22:00:01 pve CRON[1179505]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0)
Feb 28 22:00:01 pve CRON[1179507]: (root) CMD (/usr/local/bin/zfs_nvme_monitor.sh)
Feb 28 22:00:01 pve CRON[1179505]: pam_unix(cron:session): session closed for user root
Feb 28 22:00:01 pve postfix/pickup[1088295]: 549FE81714: uid=0 from=<root>
Feb 28 22:00:01 pve postfix/cleanup[1179531]: 549FE81714: message-id=<20260228210001.549FE81714@pve.domain.com>
Feb 28 22:00:01 pve postfix/qmgr[1576]: 549FE81714: from=<root@pve.domain.com>, size=1564, nrcpt=1 (queue active)
Feb 28 22:00:01 pve postfix/smtp[1179535]: 549FE81714: to=<you@example.com>, relay=none, delay=0.03, delays=0.01/0.01/0.01/0, dsn=5.1.0, status=bounced (Domain example.com does not accept mail (nullMX))
Feb 28 22:00:01 pve postfix/cleanup[1179531]: 5A95781717: message-id=<20260228210001.5A95781717@pve.domain.com>
Feb 28 22:00:01 pve postfix/bounce[1179537]: 549FE81714: sender non-delivery notification: 5A95781717
Feb 28 22:00:01 pve postfix/qmgr[1576]: 5A95781717: from=<>, size=3492, nrcpt=1 (queue active)
Feb 28 22:00:01 pve postfix/qmgr[1576]: 549FE81714: removed
Feb 28 22:00:01 pve proxmox-mail-forward[1179539]: notified via target `RootEmail`
Feb 28 22:00:01 pve postfix/local[1179538]: 5A95781717: to=<root@pve.domain.com>, relay=local, delay=0.42, delays=0/0/0/0.42, dsn=2.0.0, status=sent (delivered to command: /usr/libexec/proxmox-mail-forward)
Feb 28 22:00:01 pve postfix/qmgr[1576]: 5A95781717: removed
Feb 28 22:00:09 pve sshd-session[1179690]: Connection closed by authenticating user root 10.11.12.23 port 36490 [preauth]

And in the /usr/local/bin/zfs_nvme_monitor.sh script, it has hardcoded you@example.com.
What? That is really weird.
But I have entered my own email address now, and I've removed the temp file and latest error file, if the error is still there, it will just be regenerated.
 
Last edited:
/usr/local/bin/zfs_nvme_monitor.sh is not a default Proxmox script.
Glad your problem is solved.

Please be so kind and change the thread title to [SOLVED] via its edit function.
 
It isn't? weird, must have been made when the disk wouldn't release the VM115, and I searched the web for ways to fix it, at least it is gone now.
And I found the cron, it was in /etc/cron.d/
where it had a zfs_nvme_monitor.
I had a lot of problems a few kernels ago with zfs/nvme/intel nic, and I think it could have been from back then.
At least it's gone now. Thankyou again, and I will change the title :-)
 
You must log in or register to reply here.
Top Bottom
Back