Can't Receive or Send External Mail - DNS Issue

[afrojoe]

Hello everyone.

First off, I'm a 2 day old Zimbra junkie. I can't get enough of this email server and love the interface and simplicity of the setup.

I believe my main issue resides in getting my DNS setup correctly. I can't wrap my head around the whole Split-DNS methodology and need help setting up my DNS A & MX records properly.

[CODE]

Here's my setup:

jbody@zimbra:~$ dig jbodyperformance.com mx

; <<>> DiG 9.7.0-P1 <<>> jbodyperformance.com mx
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 44410
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1

;; QUESTION SECTION:
;jbodyperformance.com.          IN      MX

;; ANSWER SECTION:
jbodyperformance.com.   12335   IN      MX      0 zimbra.jbodyperformance.com.

;; ADDITIONAL SECTION:
zimbra.jbodyperformance.com. 1099 IN    A       76.69.133.95

;; Query time: 13 msec
;; SERVER: 10.0.2.2#53(10.0.2.2)
;; WHEN: Fri Mar 23 11:41:45 2012
;; MSG SIZE  rcvd: 77

jbody@zimbra:~$ dig jbodyperformance.com any

; <<>> DiG 9.7.0-P1 <<>> jbodyperformance.com any
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 16466
;; flags: qr rd ra; QUERY: 1, ANSWER: 4, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;jbodyperformance.com.          IN      ANY

;; ANSWER SECTION:
jbodyperformance.com.   12246   IN      MX      0 zimbra.jbodyperformance.com.
jbodyperformance.com.   12162   IN      A       74.52.139.242
jbodyperformance.com.   84162   IN      NS      ns2.prettyoblivion.com.
jbodyperformance.com.   84162   IN      NS      ns1.prettyoblivion.com.

;; Query time: 15 msec
;; SERVER: 10.0.2.2#53(10.0.2.2)
;; WHEN: Fri Mar 23 11:43:14 2012
;; MSG SIZE  rcvd: 128

jbody@zimbra:~$ host $(hostname)
Host zimbra not found: 2(SERVFAIL)

jbody@zimbra:~$ host $(hostname)
Host zimbra not found: 2(SERVFAIL)

jbody@zimbra:~$ cat /etc/resolv.conf
nameserver 10.0.2.2
jbody@zimbra:~$ cat /etc/hosts
127.0.0.1       localhost.localdomain localhost
10.0.2.7        zimbra.kayna.grp        zimbra

# The following lines are desirable for IPv6 capable hosts
::1     localhost ip6-localhost ip6-loopback
fe00::0 ip6-localnet
ff00::0 ip6-mcastprefix
ff02::1 ip6-allnodes
ff02::2 ip6-allrouters

My LAN DNS server is a Windows box. It has the following configuration:

A RECORD
HOST: ZIMBRA
FQDN: ZIMBRA.KAYNA.GRP
IP: 10.0.2.7

PTR RECORD
IP: 10.0.2.7
FQDN: 7.2.0.10.in-addr.arpa
HOST: ZIMBRA.KAYNA.GRP


Can anyone help please?

[phoenix]

I believe my main issue resides in getting my DNS setup correctly. I can't wrap my head around the whole Split-DNS methodology and need help setting up my DNS A & MX records properly.

Details of the DNS requirements are all over the forums and in the Split DNS article (including the requirements for the resolv.conf and /etc/hosts file), have you read the description of what's needed?

[afrojoe]

Details of the DNS requirements are all over the forums and in the Split DNS article (including the requirements for the resolv.conf and /etc/hosts file), have you read the description of what's needed?

Hi Phoenix,

Yes, I have read and re-read the split DNS article, (which is why I indicated it in my original post). The only problem is that it isn't really sinking in clearly the direction I should go forth from here.

Can you please steer me in the right direction and assist me?

[phoenix]

Yes, I have read and re-read the split DNS article, (which is why I indicated it in my original post).

You didn't actually say that you'd read that article.

The only problem is that it isn't really sinking in clearly the direction I should go forth from here.[/QUOTE]The article does give you a complete description of what's necessary and it's covered several time including running the command in the 'Verify..' section of that article including the expected output of those commands.

Can you please steer me in the right direction and assist me?

Let me quote a section of the wiki article that should point you to the problem:

.....LAN then any functioning DNS server that provides a LAN IP response..... for the DNS MX lookup of the Zimbra server will do

Your output doesn't show the expected LAN IP address, does that answer your question?

[afrojoe]

Your output doesn't show the expected LAN IP address, does that answer your question?

I think so. I guess what your indicating is that my Windows DNS has to hand out a response that is my public MX IP ?

EDIT: Rather, my Windows DNS has to hand out the proper LAN IP of my zimbra server, which is (10.0.2.7) ?

[phoenix]

EDIT: Rather, my Windows DNS has to hand out the proper LAN IP of my zimbra server, which is (10.0.2.7) ?

That's correct.

[afrojoe]

That's correct.

Awesome, thanks for not giving me the answer directly but letting me think! It really lets ppl be self-sufficient!

[afrojoe]

Awesome, thanks for not giving me the answer directly but letting me think! It really lets ppl be self-sufficient!

UPDATE: Spoke to soon! lol.. I still can't get mail to flow. Apparently, updating the DNS on the windows box didnt' work.

Here's a bounce back I got on a test email from hotmail to zimbra:

This is an automatically generated Delivery Status Notification.

Delivery to the following recipients failed.

       mev@jbodyperformance.com

Reporting-MTA: dns;snt0-omc1-s13.snt0.hotmail.com
Received-From-MTA: dns;SNT140-DS9
Arrival-Date: Fri, 23 Mar 2012 20:29:51 -0700

Final-Recipient: rfc822;mev@jbodyperformance.com
Action: failed
Status: 5.5.0
Diagnostic-Code: smtp;550-snt0-omc1-s13.snt0.hotmail.com [65.55.90.24] is currently not permitted to
550-relay through this server. Perhaps you have not logged into the pop/imap
550-server in the last 30 minutes or do not have SMTP Authentication turned on
550 in your email client.

[phoenix]

If that's your real domain name in the error message then it looks like you have two mail servers with different IP addresses, is that correct? If it's correct then the mail server with a priority of 10 has it's DNS records configured incorrectly. What exactly are you trying to achieve in this configuration?

[afrojoe]

I should have only have one mail server. I delete the other MX record. (jbodyperformance.com) when testing. I realized this after you pointed me in the right direction that the domain name itself needs the MX record applied to it. (ie: zimbra.jbodyperformance.com holds the sole MX record and its IP is 76.69.133.95)

(The zimbra.jbodyperformance.com MX record is the only one that exists and the jbodyperformance.com MX record is deleted during testing and restored until I can figure this out)

Phoenix, thanks for your patience and guidance in advance. I guess what I'm trying to accomplish is as follows:

MX record zimbra.jbodyperformance.com points 76.69.133.95 (which is my WAN IP). The WAN IP (router) then fwd's all Zimbra ports to the private IP 10.0.2.7.

My Zimbra Server has two domains on it currently. (zimbra.kayna.grp and jbodyperformance.com) When I click the 'check MX records' button within the jbodyperformance.com domain, it passes.

My DNS server is a Windows Box. It has the following:


A RECORD
HOST: ZIMBRA
FQDN: ZIMBRA.KAYNA.GRP
IP: 10.0.2.7

PTR RECORD
IP: 10.0.2.7
FQDN: 7.2.0.10.in-addr.arpa
HOST: ZIMBRA.KAYNA.GRP

Does this help you help me in anyway??