Logs

[Bill Brock]

What log do I look at to see what incoming e-mails have been rejected for one reason or another?

Why would anyone from the outside worls "not be authorized" to send to a local recipient? I am not blocking anythin as far as I know?

[phoenix]

You need to look at /var/log/zimbra.log for details of incoming messages and reasons for rejection.

[Bill Brock]

Thank you for the reply.

I use Webmin on my SuSE server for remote admin. It allows me to view Syslogs as one of its functions. It has the mail log at /var/log/mail. It allows for detailed viewing of the log as well as filtering. I had it show only lines with the domain name that was blocked and there it was. Webmin is good stuff.

Here is the log.

Aug 16 21:56:10 webmail postfix/smtpd[25041]: connect from smtp1.xxi.com[209.176.38.65]
Aug 16 21:56:11 webmail postfix/smtpd[25041]: NOQUEUE: reject: RCPT from smtp1.xxi.com[209.176.38.65]: 450 <void.xxi.com>: Helo command rejected: Host not found; from=<Graeme.Wallace@xxi.com> to=<craig.dodds@brocknetworks.com> proto=ESMTP helo=<void.xxi.com>
Aug 16 21:56:11 webmail postfix/smtpd[25041]: disconnect from smtp1.xxi.com[209.176.38.65]
Aug 17 08:42:17 webmail postfix/smtpd[6383]: connect from smtp1.xxi.com[209.176.38.65]
Aug 17 08:42:17 webmail postfix/smtpd[6383]: NOQUEUE: reject: RCPT from smtp1.xxi.com[209.176.38.65]: 450 <void.xxi.com>: Helo command rejected: Host not found; from=<Graeme.Wallace@xxi.com> to=<craig.dodds@brocknetworks.com> proto=ESMTP helo=<void.xxi.com>
Aug 17 08:42:18 webmail postfix/smtpd[6383]: disconnect from smtp1.xxi.com[209.176.38.65]
Aug 16 21:56:10 webmail postfix/smtpd[25041]: connect from smtp1.xxi.com[209.176.38.65]
Aug 16 21:56:11 webmail postfix/smtpd[25041]: NOQUEUE: reject: RCPT from smtp1.xxi.com[209.176.38.65]: 450 <void.xxi.com>: Helo command rejected: Host not found; from=<Graeme.Wallace@xxi.com> to=<craig.dodds@brocknetworks.com> proto=ESMTP helo=<void.xxi.com>
Aug 16 21:56:11 webmail postfix/smtpd[25041]: disconnect from smtp1.xxi.com[209.176.38.65]
Aug 17 08:42:17 webmail postfix/smtpd[6383]: connect from smtp1.xxi.com[209.176.38.65]
Aug 17 08:42:17 webmail postfix/smtpd[6383]: NOQUEUE: reject: RCPT from smtp1.xxi.com[209.176.38.65]: 450 <void.xxi.com>: Helo command rejected: Host not found; from=<Graeme.Wallace@xxi.com> to=<craig.dodds@brocknetworks.com> proto=ESMTP helo=<void.xxi.com>
Aug 17 08:42:18 webmail postfix/smtpd[6383]: disconnect from smtp1.xxi.com[209.176.38.65]

It appears that the MX record points to "smtp1" but the helo command came back wit "void. Void does not resolve.

Was it rejected because the machine's name was different than the MX name or because the machine name didn't resolve or both?

[phoenix]

Sorry, I forgot to check the version of Zimbra you were running - that was the previous name for the log.

It's being rejected because the host name can't be resolved, the easiest resolution (no pun intended ) would be to change the MX record. Changing the host name can be problematic but there is a recently updated wiki article on changing the hostname - if you're feeling brave.