Can't send external mail but possible to receive.

[zauzerful]

Hi everyone.

I'm new to zimbra (and most generally in mail servers) and i have to install it for my company.
I installed it on a Ubuntu 8.4 LTS, Zimbra version is 6.0.1. Because i am in a DMZ, i set up a Split DNS like explained in the tutorial.

However it seems that i cannot send external mails, but there is no problem with the reception. And I can't send/receive anything on/from the intranet... I just don't understand why.

Someone told me it was probably a firewall issue, but everything seems to be ok with it. I have to make sure about the origin of the problem.

All services are running, my conf files return no error, dig or nslookup resolve to my server.

Here is a part of my syslog when i send a mail on the intranet :

Oct 20 09:57:14 mail1 postfix/smtpd[9455]: connect from localhost[127.0.0.1]
Oct 20 09:57:14 mail1 postfix/smtpd[9455]: 739791A129: client=localhost[127.0.0.1]
Oct 20 09:57:14 mail1 postfix/cleanup[9451]: 739791A129: message-id=<20649173.1191256025423180.JavaMail.root@mail1.cheval-freres.net>
Oct 20 09:57:14 mail1 postfix/qmgr[10674]: 739791A129: from=, size=1110, nrcpt=1 (queue active)
Oct 20 09:57:14 mail1 postfix/smtpd[9455]: disconnect from localhost[127.0.0.1]
Oct 20 09:57:14 mail1 amavis[9413]: (09413-06) FWD via SMTP:  -> ,BODY=7BIT 250 2.0.0 Ok, id=09413-06, from MTA([127.0.0.1]:10025): 250 2.0.0 Ok: queued as 739791A129
Oct 20 09:57:14 mail1 amavis[9413]: (09413-06) Passed CLEAN, LOCAL [10.0.0.10] [10.0.0.10]  -> , Message-ID: <20649173.1191256025423180.JavaMail.root@mail1.cheval-freres.net>, mail_id: EORSxVUkbGaJ, Hits: -2.204, size: 639, queued_as: 739791A129, 11181 ms
Oct 20 09:57:14 mail1 postfix/smtp[9452]: 480D51A105: to=, relay=127.0.0.1[127.0.0.1]:10024, delay=11, delays=0.02/0.01/0/11, dsn=2.0.0, status=sent (250 2.0.0 Ok, id=09413-06, from MTA([127.0.0.1]:10025): 250 2.0.0 Ok: queued as 739791A129)
Oct 20 09:57:14 mail1 postfix/qmgr[10674]: 480D51A105: removed

Could someone help me with this ? i'm lost. Many thanks, and sorry for my bad english.

[uxbod]

Welcome to the forums

We need to see a bit more of /var/log/zimbra.log as to why it is not going out. Are you sending our directly ?
If you dig the MX of who you are sending to does it answer correctly ?
Have you setup DNS forwarders in your split DNS ?

[zauzerful]

Thanks for your answer
Here is a full log of a failed mail transmission ; sorry, a bit long :

Oct 21 13:04:11 mail1 postfix/smtpd[32588]: connect from mail1.cheval-freres.net[10.0.0.10]
Oct 21 13:04:11 mail1 postfix/smtpd[32588]: D4DF81A122: client=mail1.cheval-freres.net[10.0.0.10]
Oct 21 13:04:11 mail1 postfix/cleanup[32591]: D4DF81A122: message-id=<27531427.91256123051800.JavaMail.root@mail1.cheval-freres.net>
Oct 21 13:04:11 mail1 postfix/qmgr[10818]: D4DF81A122: from=, size=634, nrcpt=1 (queue active)
Oct 21 13:04:11 mail1 postfix/smtpd[32588]: disconnect from mail1.cheval-freres.net[10.0.0.10]
Oct 21 13:04:11 mail1 amavis[9437]: (09437-01) ESMTP::10024 /opt/zimbra/data/amavisd/tmp/amavis-20091021T130411-09437:  ->  SIZE=634 Received: from mail1.cheval-freres.net ([127.0.0.1]) by localhost (mail1.cheval-freres.net [127.0.0.1]) (amavisd-new, port 10024) with ESMTP for ; Wed, 21 Oct 2009 13:04:11 +0200 (CEST)
Oct 21 13:04:11 mail1 amavis[9437]: (09437-01) Checking: EcqvBD33AlN3 [10.0.0.10]  -> 
Oct 21 13:04:12 mail1 postfix/smtpd[32595]: connect from localhost[127.0.0.1]
Oct 21 13:04:12 mail1 postfix/smtpd[32595]: 2F6AA1A134: client=localhost[127.0.0.1]
Oct 21 13:04:12 mail1 postfix/cleanup[32591]: 2F6AA1A134: message-id=<27531427.91256123051800.JavaMail.root@mail1.cheval-freres.net>
Oct 21 13:04:12 mail1 postfix/qmgr[10818]: 2F6AA1A134: from=, size=1103, nrcpt=1 (queue active)
Oct 21 13:04:12 mail1 amavis[9437]: (09437-01) FWD via SMTP:  -> ,BODY=7BIT 250 2.0.0 Ok, id=09437-01, from MTA([127.0.0.1]:10025): 250 2.0.0 Ok: queued as 2F6AA1A134
Oct 21 13:04:12 mail1 amavis[9437]: (09437-01) Passed CLEAN, LOCAL [10.0.0.10] [10.0.0.10]  -> , Message-ID: <27531427.91256123051800.JavaMail.root@mail1.cheval-freres.net>, mail_id: EcqvBD33AlN3, Hits: -2.108, size: 634, queued_as: 2F6AA1A134, 327 ms
Oct 21 13:04:12 mail1 postfix/smtp[32592]: D4DF81A122: to=, relay=127.0.0.1[127.0.0.1]:10024, delay=0.37, delays=0.03/0.01/0.01/0.32, dsn=2.0.0, status=sent (250 2.0.0 Ok, id=09437-01, from MTA([127.0.0.1]:10025): 250 2.0.0 Ok: queued as 2F6AA1A134)
Oct 21 13:04:12 mail1 amavis[9437]: (09437-01) extra modules loaded: /opt/zimbra/zimbramon/lib/i486-linux-gnu-thread-multi/auto/Net/SSLeay/autosplit.ix, /opt/zimbra/zimbramon/lib/i486-linux-gnu-thread-multi/auto/Net/SSLeay/randomize.al, IO/Socket/SSL.pm, Net/LDAP/Extension.pm, Net/SSLeay.pm
Oct 21 13:04:12 mail1 postfix/qmgr[10818]: D4DF81A122: removed
Oct 21 13:04:12 mail1 postfix/error[32596]: 2F6AA1A134: to=, relay=none, delay=0.06, delays=0.03/0.01/0/0.02, dsn=4.4.1, status=deferred (delivery temporarily suspended: connect to alt4.gmail-smtp-in.l.google.com[74.125.93.27]:25: Connection timed out)

To your question if i am sending out directly, i am not sure to understand it ? I am in a DMZ, so behind a firewall with IP 10.0.0.1, while my zimbra's IP is 10.0.0.10.
Digging the MX of gmail.com resolves to all the gmail MX, i guess it is fine that way.
And finally, yes, i put my forwarders to be the same as my ISP's DNS.

[uxbod]

From your ZCS server try telnetting to alt4.gmail-smtp-in.l.google.com on port 25 and see if it responds. If you cannot get to it then I would check your firewall rules.

[zauzerful]

Connected to alt4.gmail-smtp-in.l.google.com.
Escape character is '^]'.
220 mx.google.com ESMTP 6si5627439qwk.34
HELO
250 mx.google.com at your service


Seems i can reach it Does this exclude any firewall issue ?

[zauzerful]

Well... my colleague just did a change in the firewall and i can now send mails outside.

Problem is, he can't remember what he did
As soon as i know the exact change i'll post here, thanks btw.