Zimbra only accepting mail for "mail.ourdomain.com"

[cbraxton]

We're working with our first installation of Zimbra open source edition (Release 6.0.7_GA_2473.UBUNTU8_64 UBUNTU8_64 FOSS edition). The Zimbra server is behind a NAT router using port forwarding, so the internal IP address is not the same as the public IP.

The first problem we encountered was delivery of messages was failing, and the logs showed final delivery being made to the domain rather than the local machine. Reading through the forums we found the Split DNS configuration needed and resolved that issue.

Now messages are delivered, but only if they are addressed in the form "user@mail.ourdomain.com" rather than "user@ourdomain.com." If we were just using postfix it's a simple matter to set "mydestination" to the desired domain(s), but I'm not sure how to configure this in Zimbra.

In the Administration Console, under the "General" tab the default domain is set to "ourdomain.com." What else needs to be configured for this to work?

[phoenix]

Originally Posted by cbraxton

We're working with our first installation of Zimbra open source edition (Release 6.0.7_GA_2473.UBUNTU8_64 UBUNTU8_64 FOSS edition). The Zimbra server is behind a NAT router using port forwarding, so the internal IP address is not the same as the public IP.

The first problem we encountered was delivery of messages was failing, and the logs showed final delivery being made to the domain rather than the local machine. Reading through the forums we found the Split DNS configuration needed and resolved that issue.

Now messages are delivered, but only if they are addressed in the form "user@mail.ourdomain.com" rather than "user@ourdomain.com." If we were just using postfix it's a simple matter to set "mydestination" to the desired domain(s), but I'm not sure how to configure this in Zimbra.

In the Administration Console, under the "General" tab the default domain is set to "ourdomain.com." What else needs to be configured for this to work?

What do you mean by '.... only if they are addressed in the form "user@mail.ourdomain.com"', are you saying that no other mail is delivered? What are the exact error messages you are seeing in the log files? Go back to the Split DNS article in the wiki and check your configuration in the 'Verify...' section then post the information here, can you also confirm that your external DNS records are correct for yourdomain.com?

[cbraxton]

Originally Posted by phoenix

What do you mean by '.... only if they are addressed in the form "user@mail.ourdomain.com"', are you saying that no other mail is delivered? What are the exact error messages you are seeing in the log files?

Thank you for your assistance. Yes, no mail is delivered if the address form "user@ourdomain.com" is used. The specific error message is:

450 4.2.0 Mailbox is not on this server (in reply to RCPT TO command))

This error does not occur if the message is addressed as "user@mail.ourdomain.com."

dig ourdomain.com mx:

; <<>> DiG 9.4.2-P2.1 <<>> ourdomain.com mx
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 64930
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 1, ADDITIONAL: 2

;; QUESTION SECTION:
;ourdomain.com.             IN      MX

;; ANSWER SECTION:
ourdomain.com.      2592000 IN      MX      10 mail.ourdomain.com.

;; AUTHORITY SECTION:
ourdomain.com.      2592000 IN      NS      ns.ourdomain.com.

;; ADDITIONAL SECTION:
mail.ourdomain.com. 2592000 IN      A       192.168.20.233
ns.ourdomain.com.   2592000 IN      A       192.168.20.233

;; Query time: 12 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Tue Jul 20 11:24:05 2010
;; MSG SIZE  rcvd: 105

dig ourdomain.com

; <<>> DiG 9.4.2-P2.1 <<>> ourdomain.com any
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 49275
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 4, AUTHORITY: 0, ADDITIONAL: 2

;; QUESTION SECTION:
;ourdomain.com.         IN      ANY

;; ANSWER SECTION:
ourdomain.com.  2592000 IN      SOA     ourdomain.com. hostmaster.ourdomain.com. 10118 43200 3600 3600000 2592000
ourdomain.com.  2592000 IN      NS      ns.ourdomain.com.
ourdomain.com.  2592000 IN      MX      10 mail.ourdomain.com.
ourdomain.com.  2592000 IN      A       192.168.20.233

;; ADDITIONAL SECTION:
ns.ourdomain.com.       2592000 IN      A       192.168.20.233
mail.ourdomain.com.     2592000 IN      A       192.168.20.233

;; Query time: 23 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Tue Jul 20 11:26:41 2010
;; MSG SIZE  rcvd: 168

host `hostname`

mail.ourdomain.com has address 192.168.20.233

/etc/hosts

127.0.0.1       localhost
192.168.20.233  mail mail.ourdomain.com ourdomain.com

# The following lines are desirable for IPv6 capable hosts
::1     ip6-localhost ip6-loopback
fe00::0 ip6-localnet
ff00::0 ip6-mcastprefix
ff02::1 ip6-allnodes
ff02::2 ip6-allrouters
ff02::3 ip6-allhosts

We are testing by initiating an SMTP session to the Zimbra server from the local network. The intent is not to transfer the external DNS until local delivery is known to work.

[phoenix]

Your hosts file is incorrect, it should look like this:

127.0.0.1       localhost.localdomain localhost
192.168.20.233  mail.ourdomain.com mail

Fix that and restart Zimbra and see what happens, any errors and if so what is it?

[cbraxton]

Originally Posted by phoenix

Your hosts file is incorrect, it should look like this:

127.0.0.1       localhost.localdomain localhost
192.168.20.233  mail.ourdomain.com mail

Fix that and restart Zimbra and see what happens, any errors and if so what is it?

I fixed the hosts file and it is now working, though it is unclear if that is what the problem was -- while I was working through the DNS issues someone else decided to just reinstall Zimbra. In any event, for the moment it does appear to be working, so we'll go ahead and add the necessary user accounts then modify the external DNS...