new install, mail queued "host refused to talk to me" 421

[michael0584]

Hi, I just Installed Zimbra to replace an old exchange 5.5 server. Everything is working fine except email to certain domains, hotmail, gmail. I have messages queued with an error that states "host refused to talk to me: 421 smtp service not available" From what I understand this is normally from no reverse dns entry. We do have a reverse dns entry for oldserver.mydomain.com and I have just changed it to newserver.mydomain.com. Maybe I need to wait for it to propogate, but as I understand it, it should work either way since the domain and ip are correct. My mx record, spf record, and reverse dns all point to newserver.mydomain.com, but if I run an smtp check my server answers 250 mydomain.com instead of 250 newserver.mydomain.com. Is this a problem?

Any help would be greatly appreciated, and by the way I love Zimbra

Thanks,
Michael

[phoenix]

You can start with the following for confirmation, go to the Split DNS article and run all the commands in the 'Verify...' section and post the output here.

[michael0584]

[root@mail ~]# dig britishparts.com mx

; <<>> DiG 9.3.6-P1-RedHat-9.3.6-4.P1.el5_5.3 <<>> britishparts.com mx
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 62216
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 3

;; QUESTION SECTION:
;britishparts.com. IN MX

;; ANSWER SECTION:
britishparts.com. 368 IN MX 10 mail.britishparts.com.

;; AUTHORITY SECTION:
britishparts.com. 153751 IN NS mom.bcsengineering.com.
britishparts.com. 153751 IN NS odie.bcsengineering.com.

;; ADDITIONAL SECTION:
mail.britishparts.com. 2592000 IN A 10.0.0.16
mom.bcsengineering.com. 145511 IN A 74.55.165.42
odie.bcsengineering.com. 145511 IN A 70.60.131.5

;; Query time: 1 msec
;; SERVER: 10.0.0.16#53(10.0.0.16)
;; WHEN: Mon Feb 28 09:52:56 2011
;; MSG SIZE rcvd: 155

[root@mail ~]#

[michael0584]

[root@mail ~]# dig britishparts.com any

; <<>> DiG 9.3.6-P1-RedHat-9.3.6-4.P1.el5_5.3 <<>> britishparts.com any
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 29998
;; flags: qr rd ra; QUERY: 1, ANSWER: 5, AUTHORITY: 2, ADDITIONAL: 3

;; QUESTION SECTION:
;britishparts.com. IN ANY

;; ANSWER SECTION:
britishparts.com. 221 IN TXT "v=spf1 a mx a:ntserver.britishparts.com a:mail.britishparts.com ip4:70.60.131.80/28 ip4:72.54.60.120/29 ~all"
britishparts.com. 221 IN MX 10 mail.britishparts.com.
britishparts.com. 221 IN A 70.60.131.84
britishparts.com. 153604 IN NS mom.bcsengineering.com.
britishparts.com. 153604 IN NS odie.bcsengineering.com.

;; AUTHORITY SECTION:
britishparts.com. 153604 IN NS odie.bcsengineering.com.
britishparts.com. 153604 IN NS mom.bcsengineering.com.

;; ADDITIONAL SECTION:
mail.britishparts.com. 2592000 IN A 10.0.0.16
mom.bcsengineering.com. 145364 IN A 74.55.165.42
odie.bcsengineering.com. 145364 IN A 70.60.131.5

;; Query time: 0 msec
;; SERVER: 10.0.0.16#53(10.0.0.16)
;; WHEN: Mon Feb 28 09:55:23 2011
;; MSG SIZE rcvd: 320

[root@mail ~]#

[michael0584]

[root@mail ~]# host $(hostname)
mail.britishparts.com has address 10.0.0.16
mail.britishparts.com mail is handled by 10 mail.britishparts.com.
[root@mail ~]#

[michael0584]

Now this may be a problem.

[root@mail ~]# cat /etc/resolv.conf
search motorcarsltd.com
search motorcarsltd.com

nameserver 10.0.0.16
nameserver 10.0.0.16


I had this originally as
search britishparts.com
search motorcarsltd.com

nameserver 10.0.0.16
nameserver 10.0.0.16

Not sure why it changed, we use both of these domains, maybe I formatted this wrong?

[michael0584]

[root@mail ~]# cat /etc/hosts
# Do not remove the following line, or various programs
# that require network functionality will fail.
127.0.0.1 localhost.localdomain localhost
::1 localhost6.localdomain6 localhost6
10.0.0.16 mail.britishparts.com britishparts.com mail

[michael0584]

[root@mail ~]# nslookup mail.britishparts.com
Server: 10.0.0.16
Address: 10.0.0.16#53

Name: mail.britishparts.com
Address: 10.0.0.16

[michael0584]

As you can probably tell, the mailserver is behind a firewall, and I did setup the split dns, but maybe incorrectly. I originally had a problem with internal mail not being delivered. I disabled dns lookups in the admin console under servers and mta. This resolved the internal mail delivery problem. Just not sure why outgoing mail is getting queued.

[phoenix]

Originally Posted by michael0584

[root@mail ~]# cat /etc/hosts
# Do not remove the following line, or various programs
# that require network functionality will fail.
127.0.0.1 localhost.localdomain localhost
::1 localhost6.localdomain6 localhost6
10.0.0.16 mail.britishparts.com britishparts.com mail

The hosts file is your problem, it should look like this:

# Do not remove the following line, or various programs
# that require network functionality will fail.
127.0.0.1               localhost.localdomain localhost
::1             localhost6.localdomain6 localhost6
10.0.0.16       mail.britishparts.com    mail