refused to talk to me: 502 5.5.2 Error: command not found

[Gobelin]

I know this question has been asked already several times on this forum, I'm however totally lost. I have a ZCS 7.1.3 installation running in a kvm setup.
I can't get my inbound mail up and running. Routing and forwarding are working fine.
Any help would be appreciated


All my inbound email is bounced with following return message:

Original-Recipient: rfc822;<somename>@<somedomain>.net
Action: failed
Status: 5.5.2
Remote-MTA: dns; merlin.<somedomain>.org
Diagnostic-Code: smtp; 502 5.5.2 Error: command not recognized


a few telnet tests:

- from in the kvm (localhost)

zimbra@merlin:~/ssl$ telnet localhost 25
Trying ::1...
Trying 127.0.0.1...
Connected to localhost.
Escape character is '^]'.
220 merlin.<somedomain>.org ESMTP Postfix
ehlo smtp.<somedomain>.org
250-merlin.<somedomain>.org
250-PIPELINING
250-SIZE 10240000
250-VRFY
250-ETRN
250-STARTTLS
250-ENHANCEDSTATUSCODES
250-8BITMIME
250 DSN
MAIL FROM: <somename>@gmail.com
250 2.1.0 Ok
RCPT TO: <somename>@<somedomain>.net
250 2.1.5 Ok
DATA
354 End data with <CR><LF>.<CR><LF>
.
250 2.0.0 Ok: queued as 31622E257
^]
telnet> quit
Connection closed.
zimbra@merlin:~/ssl$

- from in the host (hosting the kvm's)

root@morgana ~ # telnet merlin.<somedomain>.org 25
Trying x.y.z.x...
Connected to merlin.<somedomain>.org.
Escape character is '^]'.
220 merlin.<somedomain>.org ESMTP Postfix
ehlo smtp.<somedomain>.net
250-merlin.<somedomain>.org
250-PIPELINING
250-SIZE 10240000
250-VRFY
250-ETRN
250-STARTTLS
250-ENHANCEDSTATUSCODES
250-8BITMIME
250 DSN
MAIL FROM: <somename>@gmail.com
250 2.1.0 Ok
RCPT TO: <somename>@<somedomain>.net
250 2.1.5 Ok
DATA
354 End data with <CR><LF>.<CR><LF>
.
250 2.0.0 Ok: queued as BA302DA9E
quit
Connection closed by foreign host.
root@morgana ~ #

- from a remote host

23:29] root@odyssey:~$ telnet merlin.<somedomain>.org 25
Trying x.y.z.x...
Connected to merlin.<somedomain>.org.
Escape character is '^]'.
220 merlin.<somedomain>.org ESMTP Postfix
ehlo smtp.<somedomain>.net
250-merlin.<somedomain>.org
250-PIPELINING
250-SIZE 10240000
250-VRFY
250-ETRN
250-STARTTLS
250-ENHANCEDSTATUSCODES
250-8BITMIME
250 DSN
MAIL FROM: <somename>@gmail.com
250 2.1.0 Ok
RCPT TO: <somename>@<somedomain>.net
250 2.1.5 Ok
DATA
354 End data with <CR><LF>.<CR><LF>
.
250 2.0.0 Ok: queued as 26572DA9E
quit
221 2.0.0 Bye
Connection closed by foreign host.
[23:32] root@odyssey:~$

[phoenix]

Originally Posted by Gobelin

I know this question has been asked already several times on this forum, I'm however totally lost. I have a ZCS 7.1.3 installation running in a kvm setup.

Is this is a Network Edition install? That's not a supported platform for ZCS NE installation (nor is it supported for the OSS version).

You need to have the ZCS server installed on a machine with a LAN IP address and and relevant ports forwarded through your NAT router, you will also need to set-up a Split DNS configuration - have you done all of those things? You should also disable any firewall and AppArmor (or SElinux) on the ZCS server.

[Gobelin]

Originally Posted by phoenix

Is this is a Network Edition install? That's not a supported platform for ZCS NE installation (nor is it supported for the OSS version).

You need to have the ZCS server installed on a machine with a LAN IP address and and relevant ports forwarded through your NAT router, you will also need to set-up a Split DNS configuration - have you done all of those things? You should also disable any firewall and AppArmor (or SElinux) on the ZCS server.

In the KVM:

zimbra@merlin:~$ zmcontrol -v
Release 7.1.3_GA_3346.UBUNTU10_64 UBUNTU10_64 NETWORK edition.
zimbra@merlin:~$

zimbra@merlin:~$ uname -a
Linux merlin 2.6.32-33-server #70-Ubuntu SMP Thu Jul 7 22:28:30 UTC 2011 x86_64 GNU/Linux
zimbra@merlin:~$

In the host:

root@morgana ~ # cat /etc/debian_version
6.0.3
root@morgana ~ #

root@morgana ~ # uname -a
Linux morgana 2.6.32-5-amd64 #1 SMP Mon Oct 3 03:59:20 UTC 2011 x86_64 GNU/Linux
root@morgana ~ #

There is no NAT configured, just a bridge. My hosting provider (dedicated hosting) has provided me with an additional subnet of 6 ip's /29. The KVM has an external (public) ip.

Can I mail you my routing tables and iptables config of the host and the kvm ?

Thanks!
Kim

PS: ZCS 7.1.3 license purchase order is ongoing.

[phoenix]

Originally Posted by Gobelin

There is no NAT configured, just a bridge. My hosting provider (dedicated hosting) has provided me with an additional subnet of 6 ip's /29. The KVM has an external (public) ip.

As you're behind a firewall you may need to install the Split DNS configuration, you can test your current configuration by going to that article and running (on the zimbra server) all the commands in the 'Verify...' section of that article.

[Gobelin]

done with no luck. My zimbra server is now resolving only via my bind on my localhost.
I even changed the mx record to the hostname of the server.

I'm lost... :-(

[Gobelin]

Originally Posted by Gobelin

done with no luck.

The bounce mail shows however a bit more info this time:

[quote]
Mail Delivery System MAILER-DAEMON@domain

1:04 PM (10 minutes ago)

to me
This is the mail system at host domain.org.

I'm sorry to have to inform you that your message could not
be delivered to one or more recipients. It's attached below.

For further assistance, please send mail to postmaster.

If you do so, please include this problem report. You can
delete your own text from the attached returned message.

The mail system

<kim@somedomain.org>: host merlin.somedomain.org[x.y.z.x] refused to talk to
me: 502 5.5.2 Error: command not recognized

Final-Recipient: rfc822; kim@<somedomain>.org
Original-Recipient: rfc822;kim@<somedomain>.org
Action: failed
Status: 5.5.2
Remote-MTA: dns; merlin.<somedomain>.org
Diagnostic-Code: smtp; 502 5.5.2 Error: command not recognized

[Gobelin]

something else (strange) I just noticed:

Note the argument mynetworks is set to: 127.0.0.0/8,[::1]/128

<resolved - domain & ip details removed>

[Gobelin]

any idea's ?

due to this issue I'm no longer receiving emails... :-(

Could this be a license issue ?

[phoenix]

Originally Posted by Gobelin

done with no luck. My zimbra server is now resolving only via my bind on my localhost.
I even changed the mx record to the hostname of the server.

Post the output of the all the commands from the Split DNS article that I asked you to check earlier.

[vavai]

Hi,

Originally Posted by Gobelin

any idea's ?

due to this issue I'm no longer receiving emails... :-(

Could you paste, what is the result of the following command (run it outside your network, or if you can't, please tell us your domain so we can test it)

dig yourdomain.org any
dig yourdomain.org mx

Originally Posted by Gobelin

any idea's ?
Could this be a license issue ?

I don't think so, it seems your problem are related to your public DNS & public networking as mentioned by Phoenix regarding Split DNS.