After setting up Gmail for notifications, getting constant login emails every second

Hello all.

As soon as I enable the notifications, I get spammed constant login emails every second. It doesn't stop until I disable it.

I see this in my log file over and over. I'm assuming it's getting queued up to go.

Jan 24 13:03:28 OMVNAS postfix/qmgr[12596]: 2557E27213: from=<xxx.xxxxxx@gmail.com>, size=852, nrcpt=2 (queue active)
Jan 24 13:03:28 OMVNAS postfix/pickup[12595]: 25BE327214: uid=999 from=<openmediavault-webgui

Also seeing this over and over as well.

Jan 24 13:03:30 OMVNAS postfix/pipe[12682]: 38178211BB: to=<openmediavault-notification@localhost.localdomain>, relay=omvnotificationfilter, delay=666, delays=663/3/0/0.01, dsn=2.0.0, status=sent (delivered via omvnotificationfilter service)

Jan 24 13:03:30 OMVNAS postfix/smtp[12602]: EDD6427403: replace: header Subject: Your user account was used to log in to the openmed: Subject: [xxxxx.local] Your user account was used to log in to the openmediavault control panel via a web browser.

Jan 24 13:03:31 OMVNAS postfix/smtp[12602]: EDD6427403: to=<xxxxx@pomail.net>, orig_to=<admin>, relay=smtp.gmail.com[173.194.207.108]:587, delay=1339, delays=1334/4.1/0.35/0.44, dsn=2.0.0, status=sent (250 2.0.0 OK  1643047410 18sm7524696qtz.87 - gsmtp)
Jan 24 13:03:31 OMVNAS postfix/qmgr[12596]: EDD6427403: removed

All my settings are correct considering emails are going out. I'm just not sure why it's repeating over and over. it's like the Test Message button is stuck. I tried rebooting OMV but no luck.

Has anyone seen this? Any ideas?

Yup those commands fixed it. It was over 1000 messages queued up to go when I ran postqueue -p. I'm not sure what put them there, but deleting them with postsuper -d ALL fixed it.

Thanks for your help!

Looks like it's happening again.

Is there anyway I can tell what's putting the messages in there? Removing them from the queue does work, but randomly something flooded the queue back with these messages.

Quote from chente

Have you exposed the OMV interface to the internet?

Nope. It’s all internal

My current time was 4 hours off from the actual time. I just fixed it.

The OMV server has an internal IP of 192.168.1.23

Date and Time Wed, 26 Jan 2022 09:58:51

Remote address: 172.18.0.8 (Docker address)

edit:

After a few hours, it finally stopped putting entries in the queue and I was able to clear them. As soon as enabled email notifications again, it started flooding the queue and emailing me login events every second.

It was Heimdall. damn I feel dumb.

It constantly hits up the OMV API to pull down some stats for a quick glance. As soon as I shut it off it stopped flooding the queue.

Thanks again for y'all help.

Quote from KM0201

Probably need to figure out which of your containers has that docker ip.

If you have portainer installed, it should be listed right there on your containers page.

Quote from Zoki

Where do the logins come from? The IP is in the mail.