Failed to setup listeners: bind EADDRNOTAVAIL 0.0.0.0:25

[ArtyomVancyan]

PROBLEM

Hi @msimerson, I configured the following Dockerfile to test this project before recommending it to my company as a high-performance email observer. We want to use this as a CI trigger where it executes the corresponding task based on the mail content (I think this behavior can be achieved with plugins).

FROM python:3.10-slim

RUN apt-get update -y
RUN apt-get install -y curl g++ make
RUN curl -sL https://deb.nodesource.com/setup_20.x | bash -
RUN apt-get install -y nodejs

RUN npm install -g Haraka
RUN haraka -i /opt/haraka

RUN echo "artyom" > /opt/haraka/config/me
RUN echo "smtp.pysnippet.org" > /opt/haraka/config/host_list

RUN echo "-----BEGIN PRIVATE KEY-----\n\
MIIEvQIBADANBgkqhkiG9w0BAQEFAASCBKcwggSjAgEAAoIBAQDTed7K582HNOO8\n\
lDBd4wfZTcL1nIoQFtj+AcagFCvY2YUmo1DbPfr8x52+jgFydW86d7DfPA24Hi48\n\
oEBh+rWBKe5vmb+sc9In0uOFLKxtH5S9WhE8BZutRNrr1i8QIT0XGFdG0F8El7o7\n\
TqyVBYvLKL60LbcLOGrvyboqqNiFnDxCX2JDR89QEH/Gu+havG9p2TtMZ+Tw10Pm\n\
UyJl6nE5+Hr+1WKNAhciv30Ls/ZEZQlDXrnsUT8fh7GQ4f/OrEDBp5Ui8F2aZ1gR\n\
xjVcescPSQl/BK/99Qk2gXDJEzSG15vWkIUDz727JrBgU/BLclCFjDfFtZNhA8J3\n\
OuYaCizlAgMBAAECggEAI2hrWjPXoMTFQMTbGE0z+jlf5DnSkAETUexAMntOIB/D\n\
gIWlux+0j3BoxAgIy/5HolV6AtaOQX6kJTh7rywICdlYd80ZX6mAzXQs7hZdxGOe\n\
Rtn2usMBntBBi20wMhYuoVhM/KlUz3MMFnQEx2rHTjvDOm3REQrgNMfk6NGedzg0\n\
jJrQLRS2syQG7ry3vAlVlTkePKQc5738LJJS/jlSvGbm8afLGo0jaaTHIn/0KBZP\n\
dxsaAaueClR1s8HD3kf86l71xDt91PmaH6NyhIyWMPYlgbFRBHmc0KHOuL1qWRUi\n\
HtvrY+eUqIP+TR+weHZ1fUJgAo7JKg6LDlElfmD4/QKBgQDzOvghiUmO8J9zyxth\n\
IN8fNKn6FCBg9iD6g4tCf7hYGTARa92rAtv545LuPikPrWdjqhSpoZPmOWMAPbCY\n\
AwZF3jC1+w24rWTy4uGZvJ7J4AJrHeiDmfRTJZNTkdjOMB8mluhYz2V0pP7kt9Bp\n\
eq0DYYSZMsjKecb5mOuifxFZ8wKBgQDelB8TMFlKSp1BZAl0nUuaYlXJAYn+R06W\n\
OMxpKPtp4SugdODKCEPiV/gp8Ny0Jj/YMRuQeOUnrIeoYnCdegscZ8WJh74DwFh7\n\
CasYiIbjIrdog56GWx9oHWulAcCpbJfEmBmY5z2AiikJSxnH/vc6h6zh/8mWGB7f\n\
ennSiTT7xwKBgDiv46idQIGJ3v+ztHvcl2PEeGEKU8mFU4ZPJiOndKVDqYpF43G5\n\
xt7khRf1cMhwl4oI16v5NmkPst0Zg5DKE6ow8JVZH4eNEdvxuLaF2VQfWzDv1YLm\n\
XKUMOtvdP/Q+DuSFgz0/iNu4oJdZp78NkkkZbzftOBLIcvE1DKXgi4C1AoGAMSZ0\n\
VkBu90DSyQXWMLIrZ8QfPWvhlQ0aBYI1YWNzYUYf5CbrHLIGi4zxeBGAKyfnIU52\n\
z8hikgg/TKewRpYUrgkcTepzw1BOOZ1A8wHzB2U7KxEliHXG0a7tflqMuN0KBpev\n\
z1wA8MmRlkPHRaq/3WTogF+DnGlnJ+Jb1GoIETECgYEAkMitqsI/OvqpUvcVk/3z\n\
3GYEJnvHLb9jV56ujMfgw0tkwR2LsqT6J0t5Qc3wy77OkNQ0+IZZE2tLj2urkPVS\n\
FFy4nPdj2SKFhvqEyJLLQ5gh+NdWKyV6AoAbFTAwriPe5iQaUA8FrbUKt0gyxItm\n\
DJCmdz5zH/c0Cqb2jm1lwrU=\n\
-----END PRIVATE KEY-----" > /opt/haraka/config/tls_key.pem
RUN echo "-----BEGIN CERTIFICATE-----\n\
MIIDADCCAeigAwIBAgIUU4WAxqu6D5y7wcuJRT0iqrvKkycwDQYJKoZIhvcNAQEL\n\
BQAwITEfMB0GA1UEAwwWYXJtLWJ1aWxkLnBpdG93ZXJzLm9yZzAeFw0yMzA1MDMw\n\
MzAxMzVaFw0zMzA0MzAwMzAxMzVaMCExHzAdBgNVBAMMFmFybS1idWlsZC5waXRv\n\
d2Vycy5vcmcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTed7K582H\n\
NOO8lDBd4wfZTcL1nIoQFtj+AcagFCvY2YUmo1DbPfr8x52+jgFydW86d7DfPA24\n\
Hi48oEBh+rWBKe5vmb+sc9In0uOFLKxtH5S9WhE8BZutRNrr1i8QIT0XGFdG0F8E\n\
l7o7TqyVBYvLKL60LbcLOGrvyboqqNiFnDxCX2JDR89QEH/Gu+havG9p2TtMZ+Tw\n\
10PmUyJl6nE5+Hr+1WKNAhciv30Ls/ZEZQlDXrnsUT8fh7GQ4f/OrEDBp5Ui8F2a\n\
Z1gRxjVcescPSQl/BK/99Qk2gXDJEzSG15vWkIUDz727JrBgU/BLclCFjDfFtZNh\n\
A8J3OuYaCizlAgMBAAGjMDAuMAkGA1UdEwQCMAAwIQYDVR0RBBowGIIWYXJtLWJ1\n\
aWxkLnBpdG93ZXJzLm9yZzANBgkqhkiG9w0BAQsFAAOCAQEAZ8VA7gpRVzMb1buS\n\
3T0hGVrJFNUOQ4MuhsfCW8faGODrIhSPd/TIMGn5XFAKFJFymewiPCWH6eUhnUqH\n\
PRNXyH0bR5fGFiAp3PRsrBtIrMzO9h2/My/wvV2cYaPoOAqr8c/ZBnKni48VVEdF\n\
xO8lUVzEyMyW7Jk2OidvfAJiNn/pkZgk9LeAc6d2zmkTIPK5el0gJgoGezFzDc2K\n\
Q2qGLuLT1uQzgQk9RzMFz3K3bicfQJ48v9R+G68XLRbkdti494+xTebsFd1oRCPZ\n\
b6gvRkyJ+Fey84HLmqVNhIF259he5AVgfkFIXLEBdDutEEmK197Te1m4y7/qY3ON\n\
H4eOxA==\n\
-----END CERTIFICATE-----" > /opt/haraka/config/tls_cert.pem

RUN echo "[core]\n\
methods=CRAM-MD5\n\
; constrain_sender=true\n\n\
[users]\n\
artyom=" > /opt/haraka/config/auth_flat_file.ini
RUN echo "; address to listen on (default: all IPv6 and IPv4 addresses, port 25)\n\
; use \"[::0]:25\" to listen on IPv6 and IPv4 (not all OSes)\n\
listen=smtp.pysnippet.org:25\n\n\
; public IP address (default: none)\n\
; If your machine is behind a NAT, some plugins (SPF, GeoIP) gain features\n\
; if they know the servers public IP. If 'stun' is installed, Haraka will\n\
; try to figure it out. If that doesn't work, set it here.\n\
; public_ip=109.75.37.165\n\\n\
; Run using cluster to fork multiple backend processes\n\
nodes=1\n\n\
[headers]\n\
; replace max_header_lines\n\
max_lines=1000\n\
; replace max_received_count\n\
max_received=100" > /opt/haraka/config/smtp.ini

ENTRYPOINT ["haraka", "-c", "/opt/haraka"]

Note

I leave the actual SSL certs in it so you can test it yourself (I will change them later).

The ERROR log is the following:

loaded TLD files:
  1=1445
  2=8416
  3=3642
loaded 9773 Public Suffixes
loglevel: INFO
log format: DEFAULT
Starting up Haraka version 3.0.4
[INFO] [-] [plugins] loading mail_from.is_resolvable
[INFO] [-] [plugins] loading rcpt_to.in_host_list
[INFO] [-] [plugins] loading queue/smtp_forward
[NOTICE] [-] [server] worker started worker=1 pid=17
loaded TLD files:
  1=1445
  2=8416
  3=3642
loaded 9773 Public Suffixes
loglevel: INFO
log format: DEFAULT
Starting up Haraka version 3.0.4
[INFO] [-] [plugins] loading mail_from.is_resolvable
[INFO] [-] [plugins] loading rcpt_to.in_host_list
[INFO] [-] [plugins] loading queue/smtp_forward
[INFO] [-] [core] loading tls.ini
[ERROR] [-] [server] Failed to setup listeners: bind EADDRNOTAVAIL 109.75.37.165:25
[ERROR] [-] [server] Error: bind EADDRNOTAVAIL 109.75.37.165:25
    at listenOnPrimaryHandle (node:net:1985:18)
    at rr (node:internal/cluster/child:163:12)
    at Worker.<anonymous> (node:internal/cluster/child:113:7)
    at process.onInternalMessage (node:internal/cluster/utils:49:5)
    at process.emit (node:events:531:35)
    at emit (node:internal/child_process:951:14)
    at process.processTicksAndRejections (node:internal/process/task_queues:83:21) {
  errno: -99,
  code: 'EADDRNOTAVAIL',
  syscall: 'bind',
  address: '109.75.37.165',
  port: 25
}

Well, the SMTP server I try to connect to uses Postfix with Dovecot. So, 25 port is active, and telnet smtp.pysnippet.org 25 returns:

Trying 109.75.37.165...
Connected to smtp.pysnippet.org.
Escape character is '^]'.
220 smtp.pysnippet.org ESMTP Postfix (Debian/GNU)

I have tried everything to make this work

• Rechecked Postfix configs
• Tried with other ports like 110 and 995
• Run from inside the server
• Tried to find config guides, but only the official documentation was found where I couldn't find my answer

In case you are interested in my Postfix config, I attach the postfix/main.cf below:

# See /usr/share/postfix/main.cf.dist for a commented, more complete version

# Debian specific:  Specifying a file name will cause the first
# line of that file to be used as the name.  The Debian default
# is /etc/mailname.
#myorigin = /etc/mailname

smtpd_banner = $myhostname ESMTP $mail_name (Debian/GNU)
biff = no

# appending .domain is the MUA's job.
append_dot_mydomain = no

# Uncomment the next line to generate "delayed mail" warnings
#delay_warning_time = 4h

readme_directory = no

# See http://www.postfix.org/COMPATIBILITY_README.html -- default to 2 on
# fresh installs.
compatibility_level = 2

# TLS parameters
smtpd_tls_cert_file=/etc/ssl/certs/ssl-cert-snakeoil.pem
smtpd_tls_key_file=/etc/ssl/private/ssl-cert-snakeoil.key
smtpd_tls_security_level=may

smtp_tls_CApath=/etc/ssl/certs
smtpd_tls_protocols = !SSLv2, !SSLv3, !TLSv1, !TLSv1.1
smtpd_tls_mandatory_protocols = !SSLv2, !SSLv3, !TLSv1, !TLSv1.1
smtp_tls_security_level=may
smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache

smtpd_recipient_restrictions = permit_sasl_authenticated permit_mynetworks reject_unauth_destination
smtpd_relay_restrictions = permit_mynetworks permit_sasl_authenticated defer_unauth_destination
myhostname = smtp.pysnippet.org
alias_maps = hash:/etc/aliases
alias_database = hash:/etc/aliases
myorigin = /etc/mailname
mydestination = $myhostname, pysnippet.org, typesnippet.org, raspberrypi, localhost.localdomain, localhost
relayhost =
mynetworks = 127.0.0.0/8 [::ffff:127.0.0.0]/104 [::1]/128
mailbox_size_limit = 0
recipient_delimiter = +
inet_interfaces = all
inet_protocols = all

QUESTION

So, as I am only interested in observing incoming messages, how should I configure Heraka properly? You can see that in the Dockerfile, I changed a configuration file overriding the defaults (maybe this is just a configuration issue).

P.S. Please note that the user I am using doesn't have a password.

[ArtyomVancyan]

Well, for anyone who is facing a similar issue, I will share my experience.

First, the listen setting in the smtp.ini file confused me, and I misunderstood the project's purpose. It binds the mentioned address and port. Binding the static IP inside the docker container couldn't be done, so after decontainerizing this, it finally bound the port.