Mail error on delivery.

[micasrafael]

Hi. When i try to send a msg to sadc.int domain i get the following error:

################################################## #
This is the mail system at host server.domain.

I'm sorry to have to inform you that your message could not be delivered to
one or more recipients. It's attached below.

For further assistance, please send mail to postmaster.

If you do so, please include this problem report. You can delete your own
text from the attached returned message.

The mail system

<tcamela@sadc.int>: host mail.sadc.int[208.92.232.65] said: 554 5.7.1
<server.domain>: Helo command rejected: Host not found
(in
reply to RCPT TO command)
#################################################

What might be happening?

I already checked the XBL, SBL and RBL and my public IP and domain are not listed there.


micasrafael

[phoenix]

Originally Posted by micasrafael

What might be happening?

What is happening is that you have no DNS A record pointing to your Zimbra server, see the results below:

dig sadc.int mx
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 15757
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;sadc.int.                      IN      MX

;; ANSWER SECTION:
sadc.int.               86400   IN      MX      5 mail.sadc.int.

;; Query time: 1073 msec
;; SERVER: 192.168.200.254#53(192.168.200.254)
;; WHEN: Wed Sep 29 23:04:12 2010
;; MSG SIZE  rcvd: 47

dig sadc.int any

; <<>> DiG 9.7.1 <<>> sadc.int any
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 35989
;; flags: qr rd ra; QUERY: 1, ANSWER: 8, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;sadc.int.                      IN      ANY

;; ANSWER SECTION:
sadc.int.               86400   IN      SOA     mstrsky.vbnservices.net. hostmaster.vbnservices.net. 2007250783 28800 7200 604800 86400
sadc.int.               86400   IN      MX      5 mail.sadc.int.
sadc.int.               86400   IN      NS      mstruul.vbnservices.net.
sadc.int.               86400   IN      NS      mstrsky.vbnservices.net.
sadc.int.               86400   IN      NS      ns1vbn.vbnservices.net.
sadc.int.               86400   IN      NS      ns2vbn.vbnservices.net.
sadc.int.               86400   IN      NS      ns2uul.vbnservices.net.
sadc.int.               86400   IN      NS      ns1uul.vbnservices.net.

;; Query time: 1873 msec
;; SERVER: 192.168.200.254#53(192.168.200.254)
;; WHEN: Wed Sep 29 23:04:20 2010
;; MSG SIZE  rcvd: 237

You need to fix that DNS record problem.

[micasrafael]

The sadc.int it's not my domain. So that might be their problem.

Here is the output that i got from the dig command:

; <<>> DiG 9.4.2-P2.1 <<>> sadc.int mx
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 42344
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 6, ADDITIONAL: 1

;; QUESTION SECTION:
;sadc.int. IN MX

;; ANSWER SECTION:
sadc.int. 8735 IN MX 5 mail.sadc.int.

;; AUTHORITY SECTION:
sadc.int. 8735 IN NS ns2vbn.vbnservices.net.
sadc.int. 8735 IN NS mstrsky.vbnservices.net.
sadc.int. 8735 IN NS ns1uul.vbnservices.net.
sadc.int. 8735 IN NS ns1vbn.vbnservices.net.
sadc.int. 8735 IN NS ns2uul.vbnservices.net.
sadc.int. 8735 IN NS mstruul.vbnservices.net.

;; ADDITIONAL SECTION:
mail.sadc.int. 8735 IN A 208.92.232.65

;; Query time: 0 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Wed Sep 29 22:14:35 2010
;; MSG SIZE rcvd: 206

And

;
<<>> DiG 9.4.2-P2.1 <<>> sadc.int any
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 7493
;; flags: qr rd ra; QUERY: 1, ANSWER: 7, AUTHORITY: 6, ADDITIONAL: 1

;; QUESTION SECTION:
;sadc.int. IN ANY

;; ANSWER SECTION:
sadc.int. 8695 IN NS mstrsky.vbnservices.net.
sadc.int. 8695 IN NS ns1uul.vbnservices.net.
sadc.int. 8695 IN NS ns1vbn.vbnservices.net.
sadc.int. 8695 IN NS ns2uul.vbnservices.net.
sadc.int. 8695 IN NS ns2vbn.vbnservices.net.
sadc.int. 8695 IN NS mstruul.vbnservices.net.
sadc.int. 8695 IN MX 5 mail.sadc.int.

;; AUTHORITY SECTION:
sadc.int. 8695 IN NS mstrsky.vbnservices.net.
sadc.int. 8695 IN NS ns2uul.vbnservices.net.
sadc.int. 8695 IN NS ns1uul.vbnservices.net.
sadc.int. 8695 IN NS ns2vbn.vbnservices.net.
sadc.int. 8695 IN NS ns1vbn.vbnservices.net.
sadc.int. 8695 IN NS mstruul.vbnservices.net.

;; ADDITIONAL SECTION:
mail.sadc.int. 8695 IN A 208.92.232.65

;; Query time: 0 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Wed Sep 29 22:15:15 2010
;; MSG SIZE rcvd: 290

Thanks

[dalmate]

please show the output of "hostname" and "hostname -f" command

[micasrafael]

Originally Posted by dalmate

please show the output of "hostname" and "hostname -f" command

Here is the output of the coomand hostname:

siadmin@Zambeze:~$ hostname
Zambeze.isutc.transcom.co.mz

siadmin@Zambeze:~$ hostname -f
Zambeze.isutc.transcom.co.mz

[dalmate]

your hostname is good.
In the error message, I saw that the destination server doesn't accept your mail because your HELO command of your mail server.
Maybe they use "reverse lookup" in their mail server, and it checked your address in the HELO command, it can't see your domain in their DNS so it reject your mail.
Is your domain public? Can you ping it from outside?

[micasrafael]

Originally Posted by dalmate

your hostname is good.
In the error message, I saw that the destination server doesn't accept your mail because your HELO command of your mail server.
Maybe they use "reverse lookup" in their mail server, and it checked your address in the HELO command, it can't see your domain in their DNS so it reject your mail.
Is your domain public? Can you ping it from outside?

Yes, the domain is public: isutc.transcom.co.mz

[phoenix]

Originally Posted by micasrafael

Yes, the domain is public: isutc.transcom.co.mz

The problem is, for that sub-domain, you have no valid A or MX records pointing to your server - even for the domain transcom.co.mz there is only an MX record and no A record.

Is this Zimbra server behind a NAT router? If it is you will need a Split DNS set-up, in any case you should go to the 'Verify...' section of that article and check your DNS & hosts file configuration.