Problem Accessing ZCS Outside My Network

[aisalen]

Hi,

I deployed ZCS 5.0 GA into production last Tuesday. All is OK, and running smoothly. I can able to send/receive mail outside and inside my network. The only problem is that I cannot access the webmail outside our network (hostname.domain.com) i.e. Internet Cafe. I can access when use both local IP and hostname.domain.com inside our network. I do not have problem like this on my old server using postfix with clamav, spamassassin. Do you have any ideas what might be the problem is?

Thanks,

[king0770]

Do you know if your firewall had blocked port 80 or 443?

[aisalen]

In the server where Zimbra resides, I disable both firewall and SELinux. Our main firewall where the mail server connect thru Internet allows both 443 and 80. My previous server machine was access successfully through that port. Thanks

[king0770]

To be honest I am not very familiar with SELinux at all.

If you run the following command as the Zimbra user, are all ports accessible?

nmap `zmhostname`

IIRC, I think there was a SElinux user that had devil of time (same issue I believe). I think there was a selinux config file that needed to be changed. Sorry I can't be of anymore help in the SELinux dept.

[aisalen]

Hi, I found out that our corporate firewall (Cisco PIX) was set not to allow http port (80) but allow https (443). So in order to solved the problem, I change the connection mode in Zimbra from "mixed" to "https" mode. This solved my problem although even the connection inside our network need to be in https connection but that is just fine. As a side note, I observed also that Spell service will not start if SELinux was set to enable (I forget the term) so be sure to disable them. Thanks to all who reply.