[SOLVED] Moved zimbra to new server - mail gets deferred

[goetzi]

Hi,

I moved my Zimbra install to a new server this night. Now I have the problem that all emails get into the deferred queue with the error "mail transport unavailable".

Here the zimbra.log of one example message sent from outside:

[zimbra@zimbra opt]$ tail -n 2000 /var/log/zimbra.log | grep 665171A74BFA
Feb 5 12:27:09 zimbra postfix/smtpd[32521]: 665171A74BFA: client=localhost.localdomain[127.0.0.1]
Feb 5 12:27:09 zimbra postfix/cleanup[32383]: 665171A74BFA: message-id=<193.187.11.245.1202210668.wm@webmail.inode.at>
Feb 5 12:27:09 zimbra postfix/qmgr[31926]: 665171A74BFA: from=<s.preitler@inode.at>, size=2097, nrcpt=1 (queue active)
Feb 5 12:27:09 zimbra amavis[31461]: (31461-03) FWD via SMTP: <s.preitler@inode.at> -> <martina.kaufmann@schuelerunion.at>,BODY=8BITMIM E 250 2.6.0 Ok, id=31461-03, from MTA([127.0.0.1]:10025): 250 2.0.0 Ok: queued as 665171A74BFA
Feb 5 12:27:09 zimbra amavis[31461]: (31461-03) Passed CLEAN, [62.99.145.6] [193.187.11.245] <s.preitler@inode.at> -> <martina.kaufmann@schuelerunion.at>, Message-ID: <193.187.11.245.1202210668.wm@webmail.inode.at>, mail_id: QhH+nBrDqKjO, Hits: -2.599, size: 1467, queued_as: 665171A74BFA, 4845 ms
Feb 5 12:27:09 zimbra postfix/smtp[32445]: A90CC1A74BF5: to=<martina.kaufmann@schuelerunion.at>, orig_to=<martina@schuelerunion.at>, relay=127.0.0.1[127.0.0.1]:10024, delay=4.9, delays=0.03/0/0.01/4.9, dsn=2.0.0, status=sent (250 2.0.0 Ok: queued as 665171A74BFA)
Feb 5 12:28:09 zimbra postfix/qmgr[31926]: 665171A74BFA: to=<martina.kaufmann@schuelerunion.at>, relay=none, delay=60, delays=0.13/60/0/0, dsn=4.3.0, status=deferred (mail transport unavailable)

One thing is very interesting: that only happens for the domain schuelerunion.at

The delivery to another domain (michael@glatter-goetz.de which is an alias of michael.glatter-goetz@schuelerunion.at) works fine:

[zimbra@zimbra opt]$ tail -n 2000 /var/log/zimbra.log | grep 3DNDm0GPUI4K

Feb 5 12:29:43 zimbra amavis[31464]: (31464-02) Checking: 3DNDm0GPUI4K [62.99.145.7] <s.preitler@inode.at> -> <michael.glatter-goetz@schuelerunion.at>
Feb 5 12:29:48 zimbra amavis[31464]: (31464-02) Passed CLEAN, [62.99.145.7] [193.187.11.245] <s.preitler@inode.at> -> <michael.glatter-goetz@schuelerunion.at>, Message-ID: <193.187.11.245.1202210821.wm@webmail.inode.at>, mail_id: 3DNDm0GPUI4K, Hits: -2.599, size: 1425, queued_as: 25C441A74BF9, 4705 ms

[zimbra@zimbra opt]$ tail -n 2000 /var/log/zimbra.log | grep 25C441A74BF9
Feb 5 12:29:48 zimbra postfix/smtpd[32521]: 25C441A74BF9: client=localhost.localdomain[127.0.0.1]
Feb 5 12:29:48 zimbra postfix/cleanup[2706]: 25C441A74BF9: message-id=<193.187.11.245.1202210821.wm@webmail.inode.at>
Feb 5 12:29:48 zimbra postfix/qmgr[31926]: 25C441A74BF9: from=<s.preitler@inode.at>, size=2067, nrcpt=1 (queue active)
Feb 5 12:29:48 zimbra amavis[31464]: (31464-02) FWD via SMTP: <s.preitler@inode.at> -> <michael.glatter-goetz@schuelerunion.at>,BODY=8BITMIME 250 2.6.0 Ok, id=31464-02, from MTA([127.0.0.1]:10025): 250 2.0.0 Ok: queued as 25C441A74BF9
Feb 5 12:29:48 zimbra amavis[31464]: (31464-02) Passed CLEAN, [62.99.145.7] [193.187.11.245] <s.preitler@inode.at> -> <michael.glatter-goetz@schuelerunion.at>, Message-ID: <193.187.11.245.1202210821.wm@webmail.inode.at>, mail_id: 3DNDm0GPUI4K, Hits: -2.599, size: 1425, queued_as: 25C441A74BF9, 4705 ms
Feb 5 12:29:48 zimbra postfix/smtp[32445]: 668B41A74C00: to=<michael.glatter-goetz@schuelerunion.at>, orig_to=<michael@glatter-goetz.de>, relay=127.0.0.1[127.0.0.1]:10024, delay=4.8, delays=0.05/0/0/4.7, dsn=2.0.0, status=sent (250 2.0.0 Ok: queued as 25C441A74BF9)
Feb 5 12:29:48 zimbra postfix/lmtp[31975]: 25C441A74BF9: to=<michael.glatter-goetz@schuelerunion.at>, relay=zimbra.glatter-goetz.de[78.46.48.66]:7025, delay=0.4, delays=0.01/0.01/0.01/0.38, dsn=2.1.5, status=sent (250 2.1.5 OK)
Feb 5 12:29:48 zimbra postfix/qmgr[31926]: 25C441A74BF9: removed

What can this be? I don't know why the mails are not delivered and this is a real showstopper.

Please help me!

- Michael

[phoenix]

Are all the zimbra services up and running? Does this thread shed any light on the problem? I assume that all your DNS records & /etc/hosts file are correct for that domain name?

[goetzi]

Are all the zimbra services up and running?

Yes.

[zimbra@zimbra ~]$ zmcontrol start
Host zimbra.schuelerunion.at
        Starting ldap...Done.
        Starting logger...Done.
        Starting mailbox...Done.
        Starting antispam...Done.
        Starting antivirus...Done.
        Starting snmp...Done.
        Starting spell...Done.
        Starting mta...Done.
        Starting stats...Done.
[zimbra@zimbra ~]$ zmcontrol status
Host zimbra.schuelerunion.at
        antispam                Running
        antivirus               Running
        ldap                    Running
        logger                  Running
        mailbox                 Running
        mta                     Running
        snmp                    Running
        spell                   Running
        stats                   Running
[zimbra@zimbra ~]$

Does this thread shed any light on the problem?

No. The strange thing is that no all mails are deferred, only the ones for @schuelerunion.at.

I assume that all your DNS records & /etc/hosts file are correct for that domain name?

Yes.

[zimbra@zimbra ~]$ cat /etc/hosts
# Do not remove the following line, or various programs
# that require network functionality will fail.
127.0.0.1       localhost.localdomain  localhost
78.46.48.66     zimbra.schuelerunion.at zimbra
#::1            localhost6.localdomain6 localhost6

I can give you root/Zimbra admin access if needed.

[Klug]

Maybe can you try what is in this post : Strange Transport Problem - list.postfix.users | Google Groups

[goetzi]

Hm... if I want to do a postcat -q I get:

[zimbra@zimbra ~]$ postcat -q D17F51A74C90
postcat: fatal: open queue file D17F51A74C90: Permission denied

in /opt/zimbra/postfix/conf/main.cf the content_filter line is

content_filter = smtp-amavis:[127.0.0.1]:10024

Disabling Antispam and Antivirus has no effect.

I have no idea what to do.
As said before, if you want root access to the machine you can get it.

[phoenix]

Is your server currently still up? I can't get a connection to it from here, you don't have any firewall oir SElinux active do you?

[goetzi]

Is your server currently still up?

I did a restart at this moment. Server is up again.

[phoenix]

Just out of interest, how did you move Zimbra to the new server? Could you post the output of the following commands (run on the zimbra server):

host `hostname`  <-- type as-is and use backticks not single quotes
dig yourdomain.com mx 
dig yourdomain.com any

just for my own peace of mind.

[goetzi]

how did you move Zimbra to the new server?

- Old server was NE 4.5.5 on CentOS4 x86
- Installed NE 4.5.6 on the new machine (CentOS5 x86)
- blocked port 25 on old server (mails were queued on secondary MX)
- made full backup of old server (using zmbackup)
- created domains on new server
- restored full backup on new machine
- updated to NE 5.0.2
- changed MX entry fitting to the new server

host `hostname`

[zimbra@zimbra ~]$ host `hostname`
zimbra.schuelerunion.at has address 78.46.48.66

dig yourdomain.com mx

[zimbra@zimbra ~]$ dig schuelerunion.at mx

; <<>> DiG 9.3.3rc2 <<>> schuelerunion.at mx
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 30769
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;schuelerunion.at.              IN      MX

;; ANSWER SECTION:
schuelerunion.at.       7200    IN      MX      10 zimbra.schuelerunion.at.
schuelerunion.at.       7200    IN      MX      20 mail.4-mail.net.

;; Query time: 53 msec
;; SERVER: 213.133.100.100#53(213.133.100.100)
;; WHEN: Tue Feb  5 14:41:21 2008
;; MSG SIZE  rcvd: 88

dig yourdomain.com any

[zimbra@zimbra ~]$ dig schuelerunion.at any

; <<>> DiG 9.3.3rc2 <<>> schuelerunion.at any
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 45984
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;schuelerunion.at.              IN      ANY

;; ANSWER SECTION:
schuelerunion.at.       6314    IN      NS      ns5.kasserver.com.
schuelerunion.at.       6314    IN      NS      ns6.kasserver.com.

;; Query time: 1 msec
;; SERVER: 213.133.100.100#53(213.133.100.100)
;; WHEN: Tue Feb  5 14:42:06 2008
;; MSG SIZE  rcvd: 83

[phoenix]

It would appear from those results that you don't have an A record, you need one (unless you'#re only posting partial details?).