[SOLVED] mail from non-existent domain (zimbra@<FQDN>)

[zimbrero]

Hi,

I've a problem with mail being send from a non existing user account zimbra@mail.ocotec.de.
mail.ocotec.de is not a valid mail domain but the FQDN of the server.
I can see approx. 150 mails being sent by this account in the daily mail report.
The mail seems to be generated locally, send through the relay and the relay in
turn sends the mail back to my server where it gets rejected.

I really wonder where this mail comes from - zmlocalconfig does not contain "zimbra@mail.ocotec.de" as address.

Any idea what is happening here?

Regards,
Ruben

Feb 26 10:50:03 mail amavis[14708]: (14708-11) Checking: C5OMEIajVYP5 <zimbra@mail.ocotec.de> -> <zimbra@mail.ocotec.de>
Feb 26 10:50:03 mail amavis[14708]: (14708-11) cached 26f5c45795dcf3682c6f59e0882b5655 from <zimbra@mail.ocotec.de> (0,0)
Feb 26 10:50:03 mail postfix/qmgr[15305]: 6854D1605E7: from=<zimbra@mail.ocotec.de>, size=1412, nrcpt=1 (queue active)
Feb 26 10:50:03 mail amavis[14708]: (14708-11) FWD via SMTP: <zimbra@mail.ocotec.de> -> <zimbra@mail.ocotec.de>,BODY=7BIT 250 2.6.0 Ok, id=14708-11, from MTA([127.0.0.1]:10025): 250 2.0.0 Ok: queued as 6854D1605E7
Feb 26 10:50:03 mail amavis[14708]: (14708-11) Passed CLEAN, <zimbra@mail.ocotec.de> -> <zimbra@mail.ocotec.de>, Message-ID: <20090226095003.20E0F1605E8@mail.ocotec.de>, mail_id: C5OMEIajVYP5, Hits: -2.594, size: 791, queued_as: 6854D1605E7, 388 ms
Feb 26 10:50:03 mail postfix/smtp[7470]: 20E0F1605E8: to=<zimbra@mail.ocotec.de>, orig_to=<zimbra>, relay=127.0.0.1[127.0.0.1]:10024, delay=0.57, delays=0.17/0.01/0/0.39, dsn=2.0.0, status=sent (250 2.0.0 Ok: queued as 6854D1605E7)
Feb 26 10:50:03 mail postfix/smtp[7510]: 6854D1605E7: to=<zimbra@mail.ocotec.de>, relay=smtp.1und1.de[212.227.15.183]:25, delay=0.56, delays=0.18/0.01/0.17/0.19, dsn=2.0.0, status=sent (250 Message 0ML29c-1LccsV3Xhl-0008GA accepted by mrelayeu6.kundenserver.de)
Feb 26 10:50:04 mail postfix/smtpd[7523]: NOQUEUE: reject: RCPT from moutng.kundenserver.de[212.227.17.8]: 554 5.7.1 <zimbra@mail.ocotec.de>: Relay access denied; from=<zimbra@mail.ocotec.de> to=<zimbra@mail.ocotec.de> proto=ESMTP helo=<moutng.kundenserver.de>
Feb 26 10:51:04 mail postfix/smtpd[7523]: NOQUEUE: reject: RCPT from mout-bounce.kundenserver.de[212.227.15.20]: 554 5.7.1 <zimbra@mail.ocotec.de>: Relay access denied; from=<> to=<zimbra@mail.ocotec.de> proto=ESMTP helo=<mout-bounce.kundenserver.de>

[uxbod]

It will be coming from the Zimbra cronjob. Have a look in /var/spool/cron/crontabs for the zimbra spec. You could add to the top of that MAILTO="x@x.com" so that any Zimbra messages from cron will go to a email address of your choice.

[zimbrero]

uxbod, thanks for the rapid answer!
and sorry for reposting - didn't get it that the thread was already committed.

Just for understanding:
By default the output of the cronjob is send to user owning the crontab which is
zimbra@<FQDN>. By editing the crontab of the user zimbra and adding the MAILTO
variable I can change this default behaviour - is that correct?

[uxbod]

Yep that will resolve your problem