Mail not being received - 451 error

[cabletastic]

Hi all - long story short is that I have had a Zimbra box running flawlessly for over 4 years. Installed a 7.1.2 box from scratch several weeks ago after a whole WORLD of pain just getting it to install on a vanilla Ubuntu box - for another day
However now, I am experiencing pretty much 100% failure to get mails delivered from the outside world in. All that is being logged in my zimbra.log is :-


Aug 29 21:30:08 mail zmmailboxdmgr[31702]: status requested
Aug 29 21:30:08 mail zmmailboxdmgr[31702]: status OK
Aug 29 21:30:26 mail zmmailboxdmgr[31957]: status requested
Aug 29 21:30:26 mail zmmailboxdmgr[31957]: status OK
Aug 29 21:30:26 mail zmmailboxdmgr[31965]: status requested
Aug 29 21:30:26 mail zmmailboxdmgr[31965]: status OK
(pretty much).

If I telnet to port 25 from here, I get as far as submitting the message and I get a 451 error message from postfix (451 Temporary local problem - please try later).

This is a Split DNS box but I have gone through all of the hosts/DNS tests and all is good - if I run nmap on the localhost to see what is occurring it tells me that all is good with regard to listening ports, viz:-

nmap localhost

Starting Nmap 5.00 ( Nmap - Free Security Scanner For Network Exploration & Security Audits. ) at 2011-08-29 21:33 BST
Interesting ports on localhost (127.0.0.1):
Not shown: 982 closed ports
PORT STATE SERVICE
22/tcp open ssh
25/tcp open smtp
53/tcp open domain
80/tcp open http
110/tcp open pop3
143/tcp open imap
465/tcp open smtps
587/tcp open submission
993/tcp open imaps
995/tcp open pop3s
5222/tcp open unknown
5269/tcp open unknown
7025/tcp open unknown
7777/tcp open unknown
8080/tcp open http-proxy
10000/tcp open snet-sensor-mgmt
10024/tcp open unknown
10025/tcp open unknown

(had an issue whereby I had to manually start amavis and clamav but this seems to be resolved now).

If anyone has any clues what is going on here I would really appreciate it as I want my server back!!

Cheers
Si

[phoenix]

Originally Posted by cabletastic

This is a Split DNS box but I have gone through all of the hosts/DNS tests and all is good.....

Then let's see the output form all the commands in the 'Verify..' section of the article, just for confirmation. You should also look in the log files for the exact error message(s) when you try and send an email. Make sure that AppArmor and the firewall are disabled on this server.

[cabletastic]

Here we go:-

$ dig domain.com mx

; <<>> DiG 9.7.0-P1 <<>> domain.com mx
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 54706
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 1, ADDITIONAL: 1

;; QUESTION SECTION:
;domain.com. IN MX

;; ANSWER SECTION:
domain.com. 38400 IN MX 10 mail.domain.com.

;; AUTHORITY SECTION:
domain.com. 38400 IN NS mail.domain.com.

;; ADDITIONAL SECTION:
mail.domain.com. 38400 IN A 172.30.250.98

;; Query time: 5 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Tue Aug 30 22:32:26 2011
;; MSG SIZE rcvd: 88

$ dig domain.com any

; <<>> DiG 9.7.0-P1 <<>> domain.com any
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 44195
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 4, AUTHORITY: 0, ADDITIONAL: 1

;; QUESTION SECTION:
;domain.com. IN ANY

;; ANSWER SECTION:
domain.com. 38400 IN SOA mail.domain.com. root.domain.com. 1271229476 10800 3600 604800 38400
domain.com. 38400 IN NS mail.domain.com.
domain.com. 38400 IN MX 10 mail.domain.com.
domain.com. 38400 IN A 172.30.250.98

;; ADDITIONAL SECTION:
mail.domain.com. 38400 IN A 172.30.250.98

;; Query time: 1 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Tue Aug 30 22:32:52 2011
;; MSG SIZE rcvd: 145

$ host $(hostname)
mail.domain.com has address 172.30.250.98

zimbra.log tells me as per the above, mailbox.log not a hell of a lot more but can post through if it helps.
Cheers
Si

[cabletastic]

Also AppArmor, ufw and iptables are not running...

[cabletastic]

Anyone any thoughts here - getting rather desperate....
Cheers
Si

[ssatam]

Capture zimbra.log and mailbox.log when you are sending an email, and post it here.

[cabletastic]

Here you go - as mooted earlier, nothing at all is really logged here. I have just captured the last 100 lines in each instance. The mail I sent inbound was at 21:02.