Zimbra 8 Milter connection refuse

[virtualmarc]

Hello everyone,

I made a fresh install of Zimbra 8 Open Source some days ago and configured my user.
I also added senderbased routing in postfix to send e-mails from senders over an external relay with authentication.
I did everything like in ZCS 7!

Now when I'm sending an E-Mail I'm getting an unknown Error and in the zimbra.log I'm seeing the following Error:

Nov 26 20:56:13 barney postfix/smtpd[718]: warning: connect to Milter service inet:localhost:8465: Connection refused
Nov 26 20:56:13 zimbra.hostname postfix/smtpd[718]: NOQUEUE: milter-reject: CONNECT from localhost[127.0.0.1]: 451 4.7.1 Service unavailable - try again later; proto=SMTP
Nov 26 20:56:13 zimbra.hostname postfix/smtpd[718]: NOQUEUE: milter-reject: EHLO from localhost[127.0.0.1]: 451 4.7.1 Service unavailable - try again later; proto=SMTP helo=<my.zimbra.server.tld>
Nov 26 20:56:13 zimbra.hostname postfix/smtpd[718]: NOQUEUE: milter-reject: MAIL from localhost[127.0.0.1]: 451 4.7.1 Service unavailable - try again later; from=<account@external.tld> proto=ESMTP helo=<my.zimbra.server.tld>
Nov 26 20:56:13 zimbra.hostname postfix/smtpd[718]: disconnect from localhost[127.0.0.1]

I'm also seeing messages like:

Nov 26 21:24:53 zimbra.hostname postfix/smtp[23794]: F3FAED62770: to=<nobody@my.zimbra.server.tld>, orig_to=<nobody>, relay=::1[::1]:10024, delay=471, delays=471/0.02/0.01/0.37, dsn=4.5.0, status=deferred (host ::1[::1] said: 451 4.5.0 id=10313-01 - Temporary MTA failure on relaying, From MTA() during fwd-connect (All attempts (1) failed connecting to smtp:[::1]:10025): id=10313-01 (in reply to end of DATA command))

Has someone an idea how to fix it?
Tried several things found here on the forums (no one had exactly the same error message but nearly the same) but nothing helped.
Thanks for your help!

Regards,
Marc

[phoenix]

I made a fresh install of Zimbra 8 Open Source some days ago and configured my user.
I also added senderbased routing in postfix to send e-mails from senders over an external relay with authentication.
I did everything like in ZCS 7!

Now when I'm sending an E-Mail I'm getting an unknown Error and in the zimbra.log I'm seeing the following Error:

Nov 26 20:56:13 barney postfix/smtpd[718]: warning: connect to Milter service inet:localhost:8465: Connection refused
Nov 26 20:56:13 zimbra.hostname postfix/smtpd[718]: NOQUEUE: milter-reject: CONNECT from localhost[127.0.0.1]: 451 4.7.1 Service unavailable - try again later; proto=SMTP
Nov 26 20:56:13 zimbra.hostname postfix/smtpd[718]: NOQUEUE: milter-reject: EHLO from localhost[127.0.0.1]: 451 4.7.1 Service unavailable - try again later; proto=SMTP helo=<my.zimbra.server.tld>
Nov 26 20:56:13 zimbra.hostname postfix/smtpd[718]: NOQUEUE: milter-reject: MAIL from localhost[127.0.0.1]: 451 4.7.1 Service unavailable - try again later; from=<account@external.tld> proto=ESMTP helo=<my.zimbra.server.tld>
Nov 26 20:56:13 zimbra.hostname postfix/smtpd[718]: disconnect from localhost[127.0.0.1]

I'm also seeing messages like:

Nov 26 21:24:53 zimbra.hostname postfix/smtp[23794]: F3FAED62770: to=<nobody@my.zimbra.server.tld>, orig_to=<nobody>, relay=::1[::1]:10024, delay=471, delays=471/0.02/0.01/0.37, dsn=4.5.0, status=deferred (host ::1[::1] said: 451 4.5.0 id=10313-01 - Temporary MTA failure on relaying, From MTA() during fwd-connect (All attempts (1) failed connecting to smtp:[::1]:10025): id=10313-01 (in reply to end of DATA command))

Has someone an idea how to fix it?

Not really as there's not sufficient information in your post i.e. the highlighted text tells you what the problem is but you've given no details about which services are running but try this solution from a forum search and see if that helps.

Tried several things found here on the forums (no one had exactly the same error message but nearly the same) but nothing helped.

It would be an idea if, in future, you give details of which solutions you've tried and what happened otherwise we have to waste time going over the same ground you may have already tried.

[virtualmarc]

Hello,

thanhs for the fast reply!

It would be an idea if, in future, you give details of which solutions you've tried and what happened otherwise we have to waste time going over the same ground you may have already tried.

Sorry I forgot that!

I installed the following services and they are all marked as running (excluding the MTA, sometimes it's shown as running but sometimes not):

• spell
• mailbox
• logger
• mta (sometimes online/sometimes offline)
• stats
• antispam
• zmconfigd
• ldap
• antivirus

What I tried was setting a higher timeout for milter.

I did the following to route E-Mails through the external server:

1. I added the E-Mail addresses allowed to send in the admin console
2. In the Serversettings at MTA I disabled DNS lookups
3. Created a file /opt/zimbra/conf/relayhost_map with the syntax:
emailaddress@domain.tld smtp.server.deort
4. Created a file /opt/zimbra/conf/relay_password with the syntax:
emailaddress@domain.tld usernameassword
5. Ran the following commands as user zimbra:

zmprov mc default zimbraSmtpRestrictEnvelopeFrom FALSE
postconf -e smtp_sender_dependent_authentication=yes
postconf -e sender_dependent_relayhost_maps=hash:/opt/zimbra/conf/relayhost_map
postconf -e smtp_sasl_auth_enable=yes
postconf -e smtp_sasl_password_maps=hash:/opt/zimbra/conf/relay_password
postconf -e smtp_cname_overrides_servername=no
postconf -e smtp_use_tls=no
postconf -e smtp_sasl_security_options=noanonymous
postmap /opt/zimbra/conf/relayhost_map
postmap /opt/zimbra/conf/relay_password
postfix reload

6. Added the personalities

I looked at the thread you mentioned. There they had the problem after an upgrade from 7 to 8. I did a fresh install (fresh Ubuntu and fresh Zimbra) but tried the solutions.
I tested if theres something else running on port 8465 but netstat doesn't show anything.

I now entered the following commands as user zimbra:

zmlocalconfig -e postconf_smtp_sasl_password_maps=hash:/opt/zimbra/conf/relay_password
zmlocalconfig -e postconf_smtp_sasl_auth_enable=yes
zmlocalconfig -e postconf_smtp_cname_overrides_servername=no
zmlocalconfig -e postconf_smtp_use_tls=no
zmlocalconfig -e postfix_smtp_sasl_security_options=noanonymous
zmlocalconfig -e postconf_smtp_sender_dependent_authentication=yes

and restarted zimbra.

Nothing changed. Same error message again.

Then I tried this commands as user zimbra:

zmprov ms `zmhostname` zimbraMtaSmtpdMilters ""
zmprov ms `zmhostname` zimbraMtaNonSmtpdMilters ""

and restarted zimbra.

Now I'm not getting an error in the Zimbra Webclient anymore and no error with the milter server but I'ts not sendand it shows this error in zimbra.log:

Nov 27 19:29:04 my.zimbra.tld postfix/smtpd[22944]: connect from localhost[127.0.0.1]
Nov 27 19:29:04 my.zimbra.tld postfix/smtpd[22944]: NOQUEUE: filter: RCPT from localhost[127.0.0.1]: <my@external.tld>: Sender address triggers FILTER smtp-amavis:[::1]:10026; from=<my@external.tld> to=<someone@other.tld> proto=ESMTP helo=<my.zimbra.tld>
Nov 27 19:29:04 my.zimbra.tld postfix/smtpd[22944]: 6289ED62F02: client=localhost[127.0.0.1]
Nov 27 19:29:04 my.zimbra.tld postfix/cleanup[22948]: 6289ED62F02: message-id=<283244316.2.1354040943906.JavaMail.root@my.zim bra.tld>
Nov 27 19:29:04 my.zimbra.tld postfix/qmgr[21881]: 6289ED62F02: from=<my@external.tld>, size=2551, nrcpt=1 (queue active)
Nov 27 19:29:04 my.zimbra.tld postfix/smtpd[22944]: disconnect from localhost[127.0.0.1]
Nov 27 19:29:04 my.zimbra.tld amavis[21585]: (21585-01) ESMTP:[::1]:10026 /opt/zimbra/data/amavisd/tmp/amavis-20121127T192904-21585-T3XsNaM2: <my@external.tld> -> <someone@other.tld> Received: from my.zimbra.tld ([IPv6:::1]) by localhost (my.zimbra.tld [IPv6:::1]) (amavisd-new, port 10026) with ESMTP for <someone@other.tld>; Tue, 27 Nov 2012 19:29:04 +0100 (CET)
Nov 27 19:29:04 my.zimbra.tld amavis[21585]: (21585-01) Checking: vjWRgxOp9T0a ORIGINATING/MYNETS [127.0.0.1] <my@external.tld> -> <someone@other.tld>
Nov 27 19:29:04 my.zimbra.tld amavis[21585]: (21585-01) (!)connect to [::1]:10025 failed, attempt #1: Can't connect to socket [::1]:10025 using IO::Socket::IP: Address family for hostname not supported
Nov 27 19:29:04 my.zimbra.tld amavis[21585]: (21585-01) (!)FWD from <my@external.tld> -> <someone@other.tld>, 451 4.5.0 From MTA() during fwd-connect (All attempts (1) failed connecting to smtp:[::1]:10025): id=21585-01
Nov 27 19:29:04 my.zimbra.tld amavis[21585]: (21585-01) Blocked MTA-BLOCKED {TempFailedOutbound}, ORIGINATING/MYNETS LOCAL [127.0.0.1]:58119 [127.0.0.1] <my@external.tld> -> <someone@other.tld>, Queue-ID: 6289ED62F02, Message-ID: <283244316.2.1354040943906.JavaMail.root@my.zimbra .tld>, mail_id: vjWRgxOp9T0a, Hits: 2.69, size: 2550, 306 ms
Nov 27 19:29:04 my.zimbra.tld amavis[21585]: (21585-01) extra modules loaded: /opt/zimbra/zimbramon/lib/x86_64-linux-gnu-thread-multi/auto/Net/SSLeay/autosplit.ix, /opt/zimbra/zimbramon/lib/x86_64-linux-gnu-thread-multi/auto/Net/SSLeay/randomize.al, IO/Socket/SSL.pm, Net/SSLeay.pm
Nov 27 19:29:04 my.zimbra.tld postfix/smtp[21885]: 6289ED62F02: to=<someone@other.tld>, relay=::1[::1]:10026, delay=0.4, delays=0.1/0/0.01/0.3, dsn=4.5.0, status=deferred (host ::1[::1] said: 451 4.5.0 id=21585-01 - Temporary MTA failure on relaying, From MTA() during fwd-connect (All attempts (1) failed connecting to smtp:[::1]:10025): id=21585-01 (in reply to end of DATA command))

[virtualmarc]

Last week I got this problem fixed. Since there was a problem with our IPv6 Network the server had no IPv6 Address and can't send E-Mails through ::1
We fixed our IPv6 connection and gave the server a new IPv6 address and it's working now! (for everyone having the same problem)