Client Host Rejected

[fathianf]

Hi, I am running zimbra for more than 5 years, and recently I receive the following error for some important places such as ubc university in canada.
host mailer.chbe.ubc.ca[137.82.115.234] said: 554 5.7.1
<alumni.iut.ac.ir[217.219.19.33]>: Client host rejected: Access denied (in
reply to RCPT TO command)
My mail server Ipaddress is: 217.219.19.33
zimbra is installed on mta.iut.ac.ir
I have more than 15 virtual domain such as cc.iut.ac.ir.
I have one mx and A record for mta.iut.ac.ir
and A record for all subdomains.
would you please let me know what is wrong with my config that I get above error.

[mavlenko]

Hi,
you need to contact with admin of mailer.chbe.ubc.ca for more details of error "Client host rejected: Access denied".
Do you know that your address 217.219.19.33 is blacklisted in some DNSBL's?

blackholes.five-ten-sg.com listed
dnsbl-2.uceprotect.net listed
dnsbl-3.uceprotect.net listed

maybe mailer.chbe.ubc.ca use it for his spamcheck?

[phoenix]

Please update your forum profile with the output of the following command (do not post the output in this thread):

zmcontrol -v

In addition to the comments above you also have a problem with your DNS records - there are multiple MX records with the same priority that have different IP addresses associated with them. Using the same priority means a reply to one specific server may end-up at another (incorrect) server which, as far as I can tell, has a different mail server running on it.

[fathianf]

I have upgraded my forum profile, please help me as I am really confused about my configuration in DNS and zimbra

[phoenix]

Originally Posted by fathianf

I have upgraded my forum profile, please help me as I am really confused about my configuration in DNS and zimbra

Why are you confused? I've already outlined the problem and mavlenko has told you what to do about being blacklisted.

[mavlenko]

In addition, I just run a commands
dig MX mta.iut.ac.ir
and
dig MX cc.iut.ac.ir
and no one MX records was returned. I think you have some problem with your DNS provider. It's not a zimbra problem.

# dig MX mta.iut.ac.ir

; <<>> DiG 9.3.1 <<>> MX mta.iut.ac.ir
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 58784
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;mta.iut.ac.ir. IN MX

;; AUTHORITY SECTION:
iut.ac.ir. 3600 IN SOA ns.iut.ac.ir. khademi.cc.iut.ac.ir. 2011021501 3600 3600 1814400 3600


# dig MX cc.iut.ac.ir

; <<>> DiG 9.3.1 <<>> MX cc.iut.ac.ir
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 3262
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;cc.iut.ac.ir. IN MX

;; AUTHORITY SECTION:
iut.ac.ir. 3298 IN SOA ns.iut.ac.ir. khademi.cc.iut.ac.ir. 2011021501 3600 3600 1814400 3600