on thunderbird, CARDDAV/CALDAV points to main domain.tld, not mx record (mail.domain.tld) #6945
Closed as not planned
Description
Contribution guidelines
- I've read the contribution guidelines and wholeheartedly agree
Checklist prior issue creation
- I understand that failure to follow below instructions may cause this issue to be closed.
- I understand that vague, incomplete or inaccurate information may cause this issue to be closed.
- I understand that this form is intended solely for reporting software bugs and not for support-related inquiries.
- I understand that all responses are voluntary and community-driven, and do not constitute commercial support.
- I confirm that I have reviewed previous issues to ensure this matter has not already been addressed.
- I confirm that my environment meets all prerequisite requirements as specified in the official documentation.
Description
I have setup a mail domain (sk***.gr) mx record is mail.sk***.gr, in mailcow (mailcow url is mailcow.anotherdomain) and a mail account tester@sk***.gr and trying to connect to it with thunderbird.
Autodiscover works well for the imap/smtp settings, and it points correctly to mailcow url.
the problem is that the address books point to the main domain sk****.gr, which is on another server and obviously cannot server them.
in mailcow.conf i have:
ADDITIONAL_SAN=mail.*
Steps to reproduce:
Logs:
nginx-mailcow-1 | 94.71.***.*** - - [05/Dec/2025:17:08:22 +0200] "GET /mail/config-v1.1.xml?emailaddress=tester%40sk*****.gr HTTP/2.0" 200 647 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:140.0) Gecko/20100101 Thunderbird/140.4.0"
nginx-mailcow-1 | 94.71.***.*** - - [05/Dec/2025:17:08:22 +0200] "GET /mail/config-v1.1.xml?emailaddress=tester%40sk*****.gr HTTP/2.0" 200 647 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:140.0) Gecko/20100101 Thunderbird/140.4.0"
nginx-mailcow-1 | 94.71.***.*** - - [05/Dec/2025:17:08:22 +0200] "POST /autodiscover/autodiscover.xml HTTP/2.0" 401 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:140.0) Gecko/20100101 Thunderbird/140.4.0"
nginx-mailcow-1 | 94.71.***.*** - tester@sk*****.gr [05/Dec/2025:17:08:23 +0200] "POST /autodiscover/autodiscover.xml HTTP/2.0" 200 430 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:140.0) Gecko/20100101 Thunderbird/140.4.0"
nginx-mailcow-1 | 94.71.***.*** - tester@sk*****.gr [05/Dec/2025:17:08:23 +0200] "POST /autodiscover/autodiscover.xml HTTP/2.0" 499 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:140.0) Gecko/20100101 Thunderbird/140.4.0"
nginx-mailcow-1 | 127.0.0.1 - - [05/Dec/2025:17:08:25 +0200] "GET /sogo-auth HTTP/1.0" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:140.0) Gecko/20100101 Thunderbird/140.4.0"
nginx-mailcow-1 | 94.71.***.*** - - [05/Dec/2025:17:08:25 +0200] "PROPFIND /SOGo/dav/ HTTP/2.0" 401 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:140.0) Gecko/20100101 Thunderbird/140.4.0"
nginx-mailcow-1 | 127.0.0.1 - tester@sk*****.gr [05/Dec/2025:17:08:26 +0200] "GET /sogo-auth HTTP/1.0" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:140.0) Gecko/20100101 Thunderbird/140.4.0"
nginx-mailcow-1 | 94.71.***.*** - tester@sk*****.gr [05/Dec/2025:17:08:26 +0200] "PROPFIND /SOGo/dav/ HTTP/2.0" 207 529 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:140.0) Gecko/20100101 Thunderbird/140.4.0"
nginx-mailcow-1 | 127.0.0.1 - tester@sk*****.gr [05/Dec/2025:17:08:26 +0200] "GET /sogo-auth HTTP/1.0" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:140.0) Gecko/20100101 Thunderbird/140.4.0"
nginx-mailcow-1 | 94.71.***.*** - tester@sk*****.gr [05/Dec/2025:17:08:26 +0200] "PROPFIND /SOGo/dav/tester@sk*****.gr/ HTTP/2.0" 207 396 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:140.0) Gecko/20100101 Thunderbird/140.4.0"
nginx-mailcow-1 | 127.0.0.1 - tester@sk*****.gr [05/Dec/2025:17:08:26 +0200] "GET /sogo-auth HTTP/1.0" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:140.0) Gecko/20100101 Thunderbird/140.4.0"
nginx-mailcow-1 | 94.71.***.*** - tester@sk*****.gr [05/Dec/2025:17:08:26 +0200] "PROPFIND /SOGo/dav/tester@sk*****.gr/Contacts/ HTTP/2.0" 207 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:140.0) Gecko/20100101 Thunderbird/140.4.0"
nginx-mailcow-1 | 127.0.0.1 - - [05/Dec/2025:17:08:27 +0200] "GET /sogo-auth HTTP/1.0" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:140.0) Gecko/20100101 Thunderbird/140.4.0"
nginx-mailcow-1 | 94.71.***.*** - - [05/Dec/2025:17:08:27 +0200] "PROPFIND /SOGo/dav/ HTTP/2.0" 401 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:140.0) Gecko/20100101 Thunderbird/140.4.0"
nginx-mailcow-1 | 127.0.0.1 - tester@sk*****.gr [05/Dec/2025:17:08:28 +0200] "GET /sogo-auth HTTP/1.0" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:140.0) Gecko/20100101 Thunderbird/140.4.0"
nginx-mailcow-1 | 94.71.***.*** - tester@sk*****.gr [05/Dec/2025:17:08:28 +0200] "PROPFIND /SOGo/dav/ HTTP/2.0" 207 656 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:140.0) Gecko/20100101 Thunderbird/140.4.0"
nginx-mailcow-1 | 127.0.0.1 - - [05/Dec/2025:17:08:28 +0200] "GET /sogo-auth HTTP/1.0" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:140.0) Gecko/20100101 Thunderbird/140.4.0"
nginx-mailcow-1 | 94.71.***.*** - - [05/Dec/2025:17:08:28 +0200] "PROPFIND /SOGo/dav/tester@sk*****.gr/ HTTP/2.0" 401 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:140.0) Gecko/20100101 Thunderbird/140.4.0"
nginx-mailcow-1 | 127.0.0.1 - tester@sk*****.gr [05/Dec/2025:17:08:28 +0200] "GET /sogo-auth HTTP/1.0" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:140.0) Gecko/20100101 Thunderbird/140.4.0"
nginx-mailcow-1 | 94.71.***.*** - tester@sk*****.gr [05/Dec/2025:17:08:28 +0200] "PROPFIND /SOGo/dav/tester@sk*****.gr/ HTTP/2.0" 207 389 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:140.0) Gecko/20100101 Thunderbird/140.4.0"
nginx-mailcow-1 | 127.0.0.1 - - [05/Dec/2025:17:08:28 +0200] "GET /sogo-auth HTTP/1.0" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:140.0) Gecko/20100101 Thunderbird/140.4.0"
nginx-mailcow-1 | 94.71.***.*** - - [05/Dec/2025:17:08:28 +0200] "PROPFIND /SOGo/dav/tester@sk*****.gr/Calendar/ HTTP/2.0" 401 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:140.0) Gecko/20100101 Thunderbird/140.4.0"
nginx-mailcow-1 | 127.0.0.1 - tester@sk*****.gr [05/Dec/2025:17:08:29 +0200] "GET /sogo-auth HTTP/1.0" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:140.0) Gecko/20100101 Thunderbird/140.4.0"
nginx-mailcow-1 | 94.71.***.*** - tester@sk*****.gr [05/Dec/2025:17:08:29 +0200] "PROPFIND /SOGo/dav/tester@sk*****.gr/Calendar/ HTTP/2.0" 207 754 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:140.0) Gecko/20100101 Thunderbird/140.4.0"
Which branch are you using?
master (stable)
Which architecture are you using?
x86_64
Operating System:
Ubuntu 24.04.3 LTS
Server/VM specifications:
8 GB RAM, 4 cores
Is Apparmor, SELinux or similar active?
no
Virtualization technology:
KVM
Docker version:
29.1.1
docker-compose version or docker compose version:
v5.0.0
mailcow version:
2025-10a
Reverse proxy:
none
Logs of git diff:
Logs of iptables -L -vn:
root@ubuntu-4gb-hel1-1:/opt/mailcow-dockerized# iptables -L -vn
Chain INPUT (policy ACCEPT 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
Chain FORWARD (policy DROP 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
2938 4242K MAILCOW 0 -- * * 0.0.0.0/0 0.0.0.0/0 /* mailcow */
592K 751M DOCKER-USER 0 -- * * 0.0.0.0/0 0.0.0.0/0
592K 751M DOCKER-FORWARD 0 -- * * 0.0.0.0/0 0.0.0.0/0
Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
Chain DOCKER (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT 6 -- !br-mailcow br-mailcow 0.0.0.0/0 172.22.1.253 tcp dpt:587
0 0 ACCEPT 6 -- !br-mailcow br-mailcow 0.0.0.0/0 172.22.1.253 tcp dpt:465
0 0 ACCEPT 6 -- !br-mailcow br-mailcow 0.0.0.0/0 172.22.1.253 tcp dpt:25
0 0 ACCEPT 6 -- !br-mailcow br-mailcow 0.0.0.0/0 172.22.1.250 tcp dpt:12345
0 0 ACCEPT 6 -- !br-mailcow br-mailcow 0.0.0.0/0 172.22.1.250 tcp dpt:4190
0 0 ACCEPT 6 -- !br-mailcow br-mailcow 0.0.0.0/0 172.22.1.250 tcp dpt:995
6 324 ACCEPT 6 -- !br-mailcow br-mailcow 0.0.0.0/0 172.22.1.250 tcp dpt:993
1 40 ACCEPT 6 -- !br-mailcow br-mailcow 0.0.0.0/0 172.22.1.250 tcp dpt:143
0 0 ACCEPT 6 -- !br-mailcow br-mailcow 0.0.0.0/0 172.22.1.250 tcp dpt:110
0 0 ACCEPT 6 -- !br-mailcow br-mailcow 0.0.0.0/0 172.22.1.12 tcp dpt:3306
17 872 ACCEPT 6 -- !br-mailcow br-mailcow 0.0.0.0/0 172.22.1.9 tcp dpt:443
7 415 ACCEPT 6 -- !br-mailcow br-mailcow 0.0.0.0/0 172.22.1.9 tcp dpt:80
0 0 ACCEPT 6 -- !br-mailcow br-mailcow 0.0.0.0/0 172.22.1.249 tcp dpt:6379
0 0 DROP 0 -- !docker0 docker0 0.0.0.0/0 0.0.0.0/0
0 0 DROP 0 -- !br-mailcow br-mailcow 0.0.0.0/0 0.0.0.0/0
Chain DOCKER-BRIDGE (1 references)
pkts bytes target prot opt in out source destination
0 0 DOCKER 0 -- * docker0 0.0.0.0/0 0.0.0.0/0
1975 113K DOCKER 0 -- * br-mailcow 0.0.0.0/0 0.0.0.0/0
Chain DOCKER-CT (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT 0 -- * docker0 0.0.0.0/0 0.0.0.0/0 ctstate RELATED,ESTABLISHED
118K 205M ACCEPT 0 -- * br-mailcow 0.0.0.0/0 0.0.0.0/0 ctstate RELATED,ESTABLISHED
Chain DOCKER-FORWARD (1 references)
pkts bytes target prot opt in out source destination
592K 751M DOCKER-CT 0 -- * * 0.0.0.0/0 0.0.0.0/0
298K 141M DOCKER-INTERNAL 0 -- * * 0.0.0.0/0 0.0.0.0/0
298K 141M DOCKER-BRIDGE 0 -- * * 0.0.0.0/0 0.0.0.0/0
0 0 ACCEPT 0 -- docker0 * 0.0.0.0/0 0.0.0.0/0
115K 39M ACCEPT 0 -- br-mailcow * 0.0.0.0/0 0.0.0.0/0
Chain DOCKER-INTERNAL (1 references)
pkts bytes target prot opt in out source destination
Chain DOCKER-USER (1 references)
pkts bytes target prot opt in out source destination
Chain MAILCOW (1 references)
pkts bytes target prot opt in out source destination
0 0 DROP 6 -- !br-mailcow br-mailcow 0.0.0.0/0 0.0.0.0/0 /* mailcow isolation */
Logs of ip6tables -L -vn:
root@ubuntu-4gb-hel1-1:/opt/mailcow-dockerized# ip6tables -L -vn
Chain INPUT (policy ACCEPT 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
Chain FORWARD (policy DROP 5 packets, 316 bytes)
pkts bytes target prot opt in out source destination
543 159K MAILCOW 0 -- * * ::/0 ::/0 /* mailcow */
239K 327M DOCKER-USER 0 -- * * ::/0 ::/0
239K 327M DOCKER-FORWARD 0 -- * * ::/0 ::/0
Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
Chain DOCKER (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT 6 -- !br-mailcow br-mailcow ::/0 fd4d:6169:6c63:6f77::3 tcp dpt:587
0 0 ACCEPT 6 -- !br-mailcow br-mailcow ::/0 fd4d:6169:6c63:6f77::3 tcp dpt:465
0 0 ACCEPT 6 -- !br-mailcow br-mailcow ::/0 fd4d:6169:6c63:6f77::3 tcp dpt:25
0 0 ACCEPT 6 -- !br-mailcow br-mailcow ::/0 fd4d:6169:6c63:6f77::a tcp dpt:4190
0 0 ACCEPT 6 -- !br-mailcow br-mailcow ::/0 fd4d:6169:6c63:6f77::a tcp dpt:995
0 0 ACCEPT 6 -- !br-mailcow br-mailcow ::/0 fd4d:6169:6c63:6f77::a tcp dpt:993
0 0 ACCEPT 6 -- !br-mailcow br-mailcow ::/0 fd4d:6169:6c63:6f77::a tcp dpt:143
0 0 ACCEPT 6 -- !br-mailcow br-mailcow ::/0 fd4d:6169:6c63:6f77::a tcp dpt:110
0 0 ACCEPT 6 -- !br-mailcow br-mailcow ::/0 fd4d:6169:6c63:6f77::d tcp dpt:443
0 0 ACCEPT 6 -- !br-mailcow br-mailcow ::/0 fd4d:6169:6c63:6f77::d tcp dpt:80
0 0 DROP 0 -- !docker0 docker0 ::/0 ::/0
0 0 DROP 0 -- !br-mailcow br-mailcow ::/0 ::/0
Chain DOCKER-BRIDGE (1 references)
pkts bytes target prot opt in out source destination
0 0 DOCKER 0 -- * docker0 ::/0 ::/0
159 11900 DOCKER 0 -- * br-mailcow ::/0 ::/0
Chain DOCKER-CT (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT 0 -- * docker0 ::/0 ::/0 ctstate RELATED,ESTABLISHED
68334 11M ACCEPT 0 -- * br-mailcow ::/0 ::/0 ctstate RELATED,ESTABLISHED
Chain DOCKER-FORWARD (1 references)
pkts bytes target prot opt in out source destination
239K 327M DOCKER-CT 0 -- * * ::/0 ::/0
103K 68M DOCKER-INTERNAL 0 -- * * ::/0 ::/0
103K 68M DOCKER-BRIDGE 0 -- * * ::/0 ::/0
0 0 ACCEPT 0 -- docker0 * ::/0 ::/0
50423 28M ACCEPT 0 -- br-mailcow * ::/0 ::/0
Chain DOCKER-INTERNAL (1 references)
pkts bytes target prot opt in out source destination
Chain DOCKER-USER (1 references)
pkts bytes target prot opt in out source destination
Chain MAILCOW (1 references)
pkts bytes target prot opt in out source destination
Logs of iptables -L -vn -t nat:
Chain PREROUTING (policy ACCEPT 233K packets, 13M bytes)
pkts bytes target prot opt in out source destination
169K 8190K DOCKER 0 -- * * 0.0.0.0/0 0.0.0.0/0 ADDRTYPE match dst-type LOCAL
Chain INPUT (policy ACCEPT 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
Chain OUTPUT (policy ACCEPT 1225 packets, 89048 bytes)
pkts bytes target prot opt in out source destination
0 0 DOCKER 0 -- * * 0.0.0.0/0 !127.0.0.0/8 ADDRTYPE match dst-type LOCAL
Chain POSTROUTING (policy ACCEPT 9149 packets, 551K bytes)
pkts bytes target prot opt in out source destination
25249 1945K MASQUERADE 0 -- * !br-mailcow 172.22.1.0/24 0.0.0.0/0
0 0 MASQUERADE 0 -- * !docker0 172.17.0.0/16 0.0.0.0/0
Chain DOCKER (2 references)
pkts bytes target prot opt in out source destination
0 0 DNAT 6 -- !br-mailcow * 0.0.0.0/0 127.0.0.1 tcp dpt:7654 to:172.22.1.249:6379
7 415 DNAT 6 -- !br-mailcow * 0.0.0.0/0 0.0.0.0/0 tcp dpt:80 to:172.22.1.9:80
17 872 DNAT 6 -- !br-mailcow * 0.0.0.0/0 0.0.0.0/0 tcp dpt:443 to:172.22.1.9:443
0 0 DNAT 6 -- !br-mailcow * 0.0.0.0/0 127.0.0.1 tcp dpt:13306 to:172.22.1.12:3306
0 0 DNAT 6 -- !br-mailcow * 0.0.0.0/0 0.0.0.0/0 tcp dpt:110 to:172.22.1.250:110
1 40 DNAT 6 -- !br-mailcow * 0.0.0.0/0 0.0.0.0/0 tcp dpt:143 to:172.22.1.250:143
6 324 DNAT 6 -- !br-mailcow * 0.0.0.0/0 0.0.0.0/0 tcp dpt:993 to:172.22.1.250:993
0 0 DNAT 6 -- !br-mailcow * 0.0.0.0/0 0.0.0.0/0 tcp dpt:995 to:172.22.1.250:995
0 0 DNAT 6 -- !br-mailcow * 0.0.0.0/0 0.0.0.0/0 tcp dpt:4190 to:172.22.1.250:4190
0 0 DNAT 6 -- !br-mailcow * 0.0.0.0/0 127.0.0.1 tcp dpt:19991 to:172.22.1.250:12345
0 0 DNAT 6 -- !br-mailcow * 0.0.0.0/0 0.0.0.0/0 tcp dpt:25 to:172.22.1.253:25
0 0 DNAT 6 -- !br-mailcow * 0.0.0.0/0 0.0.0.0/0 tcp dpt:465 to:172.22.1.253:465
0 0 DNAT 6 -- !br-mailcow * 0.0.0.0/0 0.0.0.0/0 tcp dpt:587 to:172.22.1.253:587
Logs of ip6tables -L -vn -t nat:
Chain PREROUTING (policy ACCEPT 25170 packets, 2250K bytes)
pkts bytes target prot opt in out source destination
2308 161K DOCKER 0 -- * * ::/0 ::/0 ADDRTYPE match dst-type LOCAL
Chain INPUT (policy ACCEPT 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
Chain OUTPUT (policy ACCEPT 791 packets, 68035 bytes)
pkts bytes target prot opt in out source destination
10 800 DOCKER 0 -- * * ::/0 !::1 ADDRTYPE match dst-type LOCAL
Chain POSTROUTING (policy ACCEPT 1396 packets, 115K bytes)
pkts bytes target prot opt in out source destination
8354 762K MASQUERADE 0 -- * !br-mailcow fd4d:6169:6c63:6f77::/64 ::/0
0 0 MASQUERADE 0 -- * !docker0 fd33:4454:78e7::/64 ::/0
Chain DOCKER (2 references)
pkts bytes target prot opt in out source destination
0 0 DNAT 6 -- !br-mailcow * !fe80::/10 ::/0 tcp dpt:80 to:[fd4d:6169:6c63:6f77::d]:80
0 0 DNAT 6 -- !br-mailcow * !fe80::/10 ::/0 tcp dpt:443 to:[fd4d:6169:6c63:6f77::d]:443
0 0 DNAT 6 -- !br-mailcow * !fe80::/10 ::/0 tcp dpt:110 to:[fd4d:6169:6c63:6f77::a]:110
0 0 DNAT 6 -- !br-mailcow * !fe80::/10 ::/0 tcp dpt:143 to:[fd4d:6169:6c63:6f77::a]:143
0 0 DNAT 6 -- !br-mailcow * !fe80::/10 ::/0 tcp dpt:993 to:[fd4d:6169:6c63:6f77::a]:993
0 0 DNAT 6 -- !br-mailcow * !fe80::/10 ::/0 tcp dpt:995 to:[fd4d:6169:6c63:6f77::a]:995
0 0 DNAT 6 -- !br-mailcow * !fe80::/10 ::/0 tcp dpt:4190 to:[fd4d:6169:6c63:6f77::a]:4190
0 0 DNAT 6 -- !br-mailcow * !fe80::/10 ::/0 tcp dpt:25 to:[fd4d:6169:6c63:6f77::3]:25
0 0 DNAT 6 -- !br-mailcow * !fe80::/10 ::/0 tcp dpt:465 to:[fd4d:6169:6c63:6f77::3]:465
0 0 DNAT 6 -- !br-mailcow * !fe80::/10 ::/0 tcp dpt:587 to:[fd4d:6169:6c63:6f77::3]:587
DNS check:
198.252.206.1