Zimbra behind NAT and lmtp:Connection refused (port 7025)

[multik]

Hello!

I try to use zimbra. (
Release 5.0.15_GA_2851.RHEL5_20090310165728 CentOS5 NETWORK edition
)

after installing, i cant receive email at all.

in logs

mailq:

BA20469E04D6 1095 Fri Apr 3 11:47:28 zimbra@pingwinlinux.ru
(mail transport unavailable)
admin@pingwinlinux.ru

/var/log/maillog

Apr 3 13:15:42 pingwinlinux postfix/lmtp[11816]: connect to pingwinlinux.ru[209.172.35.135]: Connection refused (port 7025)
Apr 3 13:15:42 pingwinlinux postfix/lmtp[11815]: 70DA069E04E8: to=, relay=none, delay=982, delays=982/0.03/0/0, dsn=4.4.1, status=deferred (connect to pingwinlinux.ru[209.172.35.135]: Connection refused)

localip 10.200.1.30
external ip 209.172.35.135

try to check

[zimbra@pingwinlinux ~]$ telnet pingwinlinux.ru 7025
Trying 10.200.1.30...
Connected to pingwinlinux.ru.
Escape character is '^]'.
220 pingwinlinux.ru Zimbra LMTP ready
quit
221 pingwinlinux.ru closing connection
Connection closed by foreign host.
[zimbra@pingwinlinux ~]$ telnet localhost 7025
Trying 127.0.0.1...
Connected to localhost.
Escape character is '^]'.
220 pingwinlinux.ru Zimbra LMTP ready
quit
221 pingwinlinux.ru closing connection
Connection closed by foreign host.
[zimbra@pingwinlinux ~]$ telnet 10.200.1.30 7025
Trying 10.200.1.30...
Connected to 10.200.1.30.
Escape character is '^]'.
220 pingwinlinux.ru Zimbra LMTP ready
quit
221 pingwinlinux.ru closing connection
Connection closed by foreign host.

[zimbra@pingwinlinux ~]$ zmprov ga admin@pingwinlinux.ru | grep -i transport
zimbraMailTransport: lmtpingwinlinux.ru:7025

Now i try to increase debug_peer_level in postfix

[zimbra@pingwinlinux ~]$ postconf -d|grep debug_peer_level
audit_log_user_command(): Connection refused
debug_peer_level = 2

[zimbra@pingwinlinux ~]$ postconf -e debug_peer_level=15
audit_log_user_command(): Connection refused

[zimbra@pingwinlinux ~]$ cat /opt/zimbra/postfix/conf/main.cf|grep debug_peer_level
debug_peer_level = 15

[zimbra@pingwinlinux ~]$ postfix reload
audit_log_user_command(): Connection refused
audit_log_user_command(): Connection refused
postfix/postfix-script: refreshing the Postfix mail system

[zimbra@pingwinlinux ~]$ postconf -d|grep debug_peer_level
audit_log_user_command(): Connection refused
debug_peer_level = 2

WTF????

[zimbra@pingwinlinux ~]$ cat /opt/zimbra/postfix/conf/main.cf|grep debug_peer_level
debug_peer_level = 15


Where actual main.cf ? What i must do next to kick postfix in life?

[uxbod]

As you are behind a firewall then you will need to implement a Wiki :: Split DNS architecture. If that fails to work then please post the following output

cat /etc/hosts
cat /etc/resolv.conf
dig yourdomain mx
dig yourdomain any
host `hostname` <- note backticks and not single quotes

[multik]

Thanks, it help

But one question remain - how properly changing values in postfix main.cf?

[phoenix]

Originally Posted by multik

Thanks, it help

But one question remain - how properly changing values in postfix main.cf?

Please post the output of the information you've been asked for.

[multik]

Here is my log ;_)

Now i try to increase debug_peer_level in postfix

[zimbra@pingwinlinux ~]$ postconf -d|grep debug_peer_level
audit_log_user_command(): Connection refused
debug_peer_level = 2

[zimbra@pingwinlinux ~]$ postconf -e debug_peer_level=15
audit_log_user_command(): Connection refused

[zimbra@pingwinlinux ~]$ cat /opt/zimbra/postfix/conf/main.cf|grep debug_peer_level
debug_peer_level = 15

[zimbra@pingwinlinux ~]$ postfix reload
audit_log_user_command(): Connection refused
audit_log_user_command(): Connection refused
postfix/postfix-script: refreshing the Postfix mail system

[zimbra@pingwinlinux ~]$ postconf -d|grep debug_peer_level
audit_log_user_command(): Connection refused
debug_peer_level = 2


debug_peer* is for example. Postfix has many features, that not covered zmprov

[uxbod]

[zimbra@office logger]$ postconf -d | grep debug_peer_level
debug_peer_level = 2

works for me just fine so have you restarted ZCS after fixing your DNS issues ? Also, please post the output both Phoenix and myself have asked for

[multik]

Originally Posted by uxbod

[zimbra@office logger]$ postconf -d | grep debug_peer_level
debug_peer_level = 2

works for me just fine so have you restarted ZCS after fixing your DNS issues ? Also, please post the output both Phoenix and myself have asked for

My DNS issue is fixed ;-) (so you can mark this as solved) All works fine. So i think, that output of host&dig is not necessary any more (right? )

i have only one (now - last) question about changing postfix main.cf parameters by properly way (so they not rewriting after reloads and so on)

[uxbod]

su - zimbra
postconf -e {attribute}={value}
postfix reload

[multik]

Originally Posted by uxbod

su - zimbra
postconf -e {attribute}={value}
postfix reload

Not works

[root@pingwinlinux /]# su - zimbra
[zimbra@pingwinlinux ~]$ postconf -d|grep debug_peer_level
audit_log_user_command(): Connection refused
debug_peer_level = 2
[zimbra@pingwinlinux ~]$ postconf -e debug_peer_level=10
audit_log_user_command(): Connection refused
[zimbra@pingwinlinux ~]$ postfix reload
audit_log_user_command(): Connection refused
audit_log_user_command(): Connection refused
postfix/postfix-script: refreshing the Postfix mail system
[zimbra@pingwinlinux ~]$ postconf -d|grep debug_peer_level
audit_log_user_command(): Connection refused
debug_peer_level = 2
[zimbra@pingwinlinux ~]$ cat /opt/zimbra/postfix/conf/main.cf|grep debug_peer_level
debug_peer_level = 10


so all looks like postconf modify /opt/zimbra/postfix/conf/main.cf properly, but postfix read configuration from other file ;-)

[uxbod]

If your getting

audit_log_user_command(): Connection refused

then something is broken in your installation. So please post the commands we asked for before as Postfix is not being started correctly.