DNS Problems Due to Incompetence

[seanhogge]

I've got ZCS 5.0.8GA sort of running on Ubuntu 8.04 Server. However, all mail is getting deferred.

Checked the wiki, searched the forums. Root cause would seem to be that "nslookup localhost.localdomain" is NOT resolving to 127.0.0.1 which is probably my fault (errors in setting up split DNS, surely).

host `hostname`:

mail.seanhogge.com has address 192.168.1.2

cat /etc/resolv.conf:

search
nameserver 127.0.0.1

cat /etc/hosts:

127.0.0.1       localhost.localdomain   localhost
127.0.1.1       barashta
192.168.1.2     mail.seanhogge.com      mail

dig seanhogge.com mx:

; <<>> DiG 9.4.2 <<>> seanhogge.com mx
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 3270
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;seanhogge.com.                 IN      MX

;; ANSWER SECTION:
seanhogge.com.          604800  IN      MX      10 mail.seanhogge.com.seanhogge.com.

;; AUTHORITY SECTION:
seanhogge.com.          604800  IN      NS      192.168.1.2.seanhogge.com.

;; Query time: 0 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Fri Aug 15 15:15:02 2008
;; MSG SIZE  rcvd: 92

dig seanhogge.com any

; <<>> DiG 9.4.2 <<>> seanhogge.com any
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 35641
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 4, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;seanhogge.com.                 IN      ANY

;; ANSWER SECTION:
seanhogge.com.          604800  IN      SOA     mail.seanhogge.com. admin.seanhogge.com. 70729 604800 86400 2419200 604800
seanhogge.com.          604800  IN      NS      192.168.1.2.seanhogge.com.
seanhogge.com.          604800  IN      MX      10 mail.seanhogge.com.seanhogge.com.
seanhogge.com.          604800  IN      A       192.168.1.2

;; Query time: 0 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Fri Aug 15 15:15:32 2008
;; MSG SIZE  rcvd: 155

So I've got something hosed here. Can anyone show me where my errors are, and what the appropriate fix would be? My apologies if this has been covered in detail before and I couldn't find it in my forum search. Thanks in advance!

[y@w]

Ok, the first thing I noticed was that when you dig seanhogge.com, it was returning "mail.seanhogge.com.seanhogge.com.". Looks like you've missed a '.' in the zone file on your DNS server. Make sure to end any FQDN's in the zone file with a period. You'll have to add the . and restart bind.

Also, you're not going to be able to do an nslookup for localhost.localdomain. If you can ping localhost and it goes to 127.0.0.1, it should be fine. At a quick glance, the hosts file looks fine.

[seanhogge]

Ah, yes. You're exactly right about the zone file (db.seanhogge.com). I added the dot that I forgot, and that cleaned up the dig results.

The reason that I've been running nslookup on localhost.localdomain was that I read somewhere that deferment due to this problem was because localhost wasn't resolving to 127.0.0.1. When I ping, it works fine. However, now the nslookup results are 192.168.1.254 instead of the strange public ip it was before.

I'm still getting the deferred result on all messages, though.

[y@w]

Ok, any errors going along with the deferred messages?

[seanhogge]

Yes, I'm getting

451 4.0.0 Temporary message delivery failure try again (in reply to end of DATA command))

As I was looking into this a moment ago, it doesn't necessarily seem DNS related. It also seems like there should be more information about the error. None of the logs seem to have it, though.

[y@w]

Have you checked /var/log/mailbox.log? Where did this message come from?

[y@w]

Oops.. /var/log/zimbra.log. Sorry

[seanhogge]

Actually, I did! That error message is in both of them. Here's a snippet:

Aug 15 15:40:16 mail postfix/pickup[3520]: CDE7C1569F6: uid=1004 from= orig_id=481101569E9
Aug 15 15:40:16 mail postfix/cleanup[10628]: CDE7C1569F6: message-id=<200808152017.4b85b1765772@www.zimbra.com>
Aug 15 15:40:16 mail postfix/qmgr[3522]: CDE7C1569F6: from=, size=4104, nrcpt=1 (queue active)
Aug 15 15:40:17 mail amavis[2446]: (02446-04) ESMTP::10024 /opt/zimbra/data/amavisd/tmp/amavis-20080815T143516-02446:  ->  SIZE=4104 BODY=8BITM
IME Received: from mail.seanhogge.com ([127.0.0.1]) by localhost (mail.seanhogge.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP for ; Fri, 15 Aug 2008 15:40:17 -0500 (CDT)
Aug 15 15:40:17 mail amavis[2446]: (02446-04) Checking: 4vKsQnAqtl9w [127.0.0.1]  -> 
Aug 15 15:40:18 mail postfix/smtpd[10638]: connect from localhost.localdomain[127.0.0.1]
Aug 15 15:40:18 mail postfix/smtpd[10638]: 7A4061569E9: client=localhost.localdomain[127.0.0.1]
Aug 15 15:40:18 mail postfix/cleanup[10628]: 7A4061569E9: message-id=<200808152017.4b85b1765772@www.zimbra.com>
Aug 15 15:40:18 mail postfix/smtpd[10638]: disconnect from localhost.localdomain[127.0.0.1]
Aug 15 15:40:18 mail postfix/qmgr[3522]: 7A4061569E9: from=, size=4544, nrcpt=1 (queue active)
Aug 15 15:40:18 mail amavis[2446]: (02446-04) FWD via SMTP:  -> ,BODY=8BITMIME 250 2.6.0 Ok, id=02446-04, from MTA([127.0.0.1]:10025): 250 2.0.0 Ok: queued as 7A4061569E9
Aug 15 15:40:18 mail amavis[2446]: (02446-04) Passed CLEAN, LOCAL [127.0.0.1] [76.13.17.34]  -> , Message-ID: <200808152017.4b85b1765772@www.zimbra.com>, mail_id: 4vKsQnAqtl9w, Hits: -2.599, size: 4100, queued_as: 7A4061569E9, 1529 ms 
Aug 15 15:40:18 mail postfix/smtp[10633]: CDE7C1569F6: to=, relay=127.0.0.1[127.0.0.1]:10024, delay=100, delays=99/0/0.44/1.2, dsn=2.0.0, status=sent (250 2.0.0 Ok: queued as 7A4061569E9)
Aug 15 15:40:18 mail postfix/qmgr[3522]: CDE7C1569F6: removed
Aug 15 15:40:18 mail postfix/lmtp[10622]: 7A4061569E9: to=, relay=mail.seanhogge.com[192.168.1.2]:7025, delay=0.23, delays=0.06/0/0.06/0.1, dsn=4.0.0, status=deferred (host mail.seanhogge.com[192.168.1.2] said: 451 4.0.0 Temporary message delivery failure try again (in reply to end of DATA command))

[seanhogge]

Found the issue.

In /opt/zimbra/log/mailbox.log I found a Java error about permissions being denied regarding the message store at /opt/zimbra/store/incoming/...msg

/opt/zimbra/libexec/zmfixperms doesn't fix these, so I ran

chown -R zimbra:zimbra /opt/zimbra/st*

After restarting the server, everything looks great.

As a note, the permissions issue was most likely due to the recent upgrade/reinstall performed after my server crapped out.

Thanks for your help, y@w!