Trouble relaying email after migrating accounts from one ZCS server to another

[Straterra]

I'm practicing (and will be doing in a production environment once all of the kinks are worked out) moving a domain's email from one ZCS server to its own ZCS server. Both servers run 7.1.3 on RHEL6 x86_64. Here is my procedure so far (which seems to work fine), minus the changes needed with DNS, etc.

1) Mark all accounts in the domain as closed.
2) Perform a full backup of the accounts using zmbackup.
3) When backup is complete, use NFS to mount /opt/zimbra/backup on the new server.
4) Perform a restore of all of the accounts
5) Change the mail transport each account as they're restored (/opt/zimbra/bin/zmprov ma $account zimbraMailTransport smtp:psi-mail01.twtc.marianinc.com:7025)
6) Set all accounts as active on new server
7) Recreate all distribution lists
8) Test sending email from user to user (within the same domain) on the new mail server
9) Test sending email from user to external user
10) If all is well, delete the accounts off of the old mail server

The problem I have is step 8. Below is a paste (with redacted user/domain information) of /var/log/maillog on the new mail server.

Oct 25 10:44:56 psi-mail01 postfix/smtpd[26833]: connect from psi-mail01.twtc.marianinc.com[10.0.1.9]
Oct 25 10:44:57 psi-mail01 postfix/smtpd[26833]: 00973A58B1: client=psi-mail01.twtc.marianinc.com[10.0.1.9]
Oct 25 10:44:57 psi-mail01 postfix/cleanup[26836]: 00973A58B1: message-id=<55e8a81c-f67b-4c20-8666-d390b71397bd@psi-mail01.twtc.marianinc.com>
Oct 25 10:44:57 psi-mail01 postfix/smtpd[26833]: disconnect from psi-mail01.twtc.marianinc.com[10.0.1.9]
Oct 25 10:44:57 psi-mail01 postfix/qmgr[6534]: 00973A58B1: from=<sender@domain.com>, size=1164, nrcpt=1 (queue active)
Oct 25 10:44:57 psi-mail01 postfix/smtpd[26840]: connect from localhost[127.0.0.1]
Oct 25 10:44:57 psi-mail01 postfix/smtpd[26840]: 51785A58B2: client=localhost[127.0.0.1]
Oct 25 10:44:57 psi-mail01 postfix/cleanup[26836]: 51785A58B2: message-id=<55e8a81c-f67b-4c20-8666-d390b71397bd@psi-mail01.twtc.marianinc.com>
Oct 25 10:44:57 psi-mail01 postfix/qmgr[6534]: 51785A58B2: from=<sender@domain.com>, size=1669, nrcpt=1 (queue active)
Oct 25 10:44:57 psi-mail01 postfix/smtp[26837]: 00973A58B1: to=<receiver@domain.com>, relay=127.0.0.1[127.0.0.1]:10024, delay=0.36, delays=0.03/0.01/0.09/0.24, dsn=2.0.0, status=sent (250 2.0.0 from MTA([127.0.0.1]:10025): 250 2.0.0 Ok: queued as 51785A58B2)
Oct 25 10:44:57 psi-mail01 postfix/qmgr[6534]: 00973A58B1: removed
Oct 25 10:44:57 psi-mail01 postfix/smtp[26841]: 51785A58B2: to=<receiver@domain.com>, relay=psi-mail01.twtc.marianinc.com[10.0.1.9]:7025, delay=0.04, delays=0.01/0.02/0/0, dsn=5.5.2, status=bounced (host psi-mail01.twtc.marianinc.com[10.0.1.9] refused to talk to me: 500 5.5.2 Syntax error)
Oct 25 10:44:57 psi-mail01 postfix/cleanup[26836]: 6A366A58C0: message-id=<20121025144457.6A366A58C0@psi-mail01.twtc.marianinc.com>
Oct 25 10:44:57 psi-mail01 postfix/qmgr[6534]: 6A366A58C0: from=<>, size=3792, nrcpt=1 (queue active)
Oct 25 10:44:57 psi-mail01 postfix/bounce[26842]: 51785A58B2: sender non-delivery notification: 6A366A58C0
Oct 25 10:44:57 psi-mail01 postfix/qmgr[6534]: 51785A58B2: removed
Oct 25 10:44:57 psi-mail01 postfix/smtp[26841]: 6A366A58C0: to=<sender@domain.com>, relay=psi-mail01.twtc.marianinc.com[10.0.1.9]:7025, delay=0.05, delays=0.05/0/0/0, dsn=5.5.2, status=bounced (host psi-mail01.twtc.marianinc.com[10.0.1.9] refused to talk to me: 500 5.5.2 Syntax error)

Any help would be much appreciated. Thanks.

[Straterra]

Any one have any ideas? Is more information needed from me?

[shanxt]

hey!

Did you get this sorted out? If you haven't, could you remove all firewall rules, and check again? Also telnet to port 7025 and post the results here..

Also post your '/etc/hosts' file and the output of 'dig psi-mail01.twtc.marianinc.com'

Internal mails shouldn't be a problem, and the 'Syntax error' message is a little unusual.

[Straterra]

I didn't get this sorted. The server has no firewall running on it. I telnet'ed and received this output..

220 psi-mail01.twtc.marianinc.com Zimbra LMTP server ready

Here is the hosts file..

127.0.0.1   localhost localhost.localdomain localhost4 localhost4.localdomain4
::1         localhost localhost.localdomain localhost6 localhost6.localdomain6
10.0.1.9        psi-mail01.twtc.marianinc.com psi-mail01

and the dig..

; <<>> DiG 9.8.2rc1-RedHat-9.8.2-0.10.rc1.el6_3.5 <<>> psi-mail01.twtc.marianinc                                                                                                                                                             .com
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 41271
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 2

;; QUESTION SECTION:
;psi-mail01.twtc.marianinc.com. IN      A

;; ANSWER SECTION:
psi-mail01.twtc.marianinc.com. 7 IN     A       10.0.1.9

;; AUTHORITY SECTION:
twtc.marianinc.com.     31      IN      NS      ns1.marianinc.com.
twtc.marianinc.com.     31      IN      NS      ns2.marianinc.com.

;; ADDITIONAL SECTION:
ns1.marianinc.com.      14      IN      A       10.0.1.1
ns2.marianinc.com.      14      IN      A       10.0.1.2

;; Query time: 2 msec
;; SERVER: 10.0.1.8#53(10.0.1.8)
;; WHEN: Wed Nov  7 09:18:51 2012
;; MSG SIZE  rcvd: 131

Also, I have DNS lookups disabled in Zimbra. We don't need them because we have an external mail relay elsewhere.

[shanxt]

This is a complete shot in the dark, but I think disabling the DNS lookup could be the cause of your problem, as your hosts file doesn't have the domain listed. Since you have a local dns on .8, I would advice you to setup the domain and MX records perfectly on that, and then enable DNS lookups. Else recreate a local DNS on this server.

See here and here for more info.

The reason I'm saying this is that I get the same error as you when I telnet to 7025, and type 'helo domainname'. Since it's LMTP, it should NOT be sending a 'helo' packet.. So I'm guessing something weird is happening when the server can't recognise it as a local domain.. Of course I get the same error when typing gibberish as well, so it could also be a corrupted installation issue. Try resintalling it as well.

[Straterra]

I've fixed this issue. The problem wasn't DNS.

I ended up uninstalling Zimbra, removing all config/logs and reinstalling Zimbra to get this to work. Thanks for the help!