Error connecting to port 25 going out

[daly1]

I do not have anything restricting port 25 going out. I can receive mails fine, but sending fails because of:

Nov  3 01:48:52 localhost postfix/smtp[22174]: connect to gmail.com[216.239.57.107]: Connection timed out (port 25)

Nov  3 01:48:52 localhost postfix/smtp[22174]: 3A3E82C883E: to=, relay=none, delay=90, status=deferred (connect to gmail.com[216.239.57.107]: Connection timed out)

Any ideas? Thanks.

[marcmac]

You may not have it blocked, but your ISP might (this is increasingly common, to have port 25 outbound blocked. It's an anti-spam measure).

But I don't think you're going to the correct server. None of the gmail.com MTAs I see have that IP, but one of the web servers does.

Are dns lookups enabled in your MTA?

Find the mx server for gmail:
host -t mx gmail.com

From the command line, make sure you can telnet to the gmail mx server on port 25:
telnet (IP from previous command) 25

If you can connect, make sure that you've got DNS lookups enabled.

If you can't connect - find out what your ISPs outgoing mail host is (they can tell you) and use that as a relay host in your mta settings.

[daly1]

OK. telneting to port 25 on any mail sever fails. My ISP's mail server is smtp.broadband.rogers.com and I can telnet to port 25 on that.

When I add that address as a mail relay in the server settings, I get this error on the webclient:

msg - system failure: MessagingException
code - service.FAILURE
method - ZmCsfeCommand.invoke
detail - soap:Receiver
constructor - 
function ZmCsfeException(msg, code, method, detail) {
    if (arguments.length == 0) {
        return;
    }
    AjxException.call(this, msg, code, method, detail);
}

toString - 
function () {
    return "ZmCsfeException";
}

dump - 
function () {
    return "AjxException: msg=" + this.msg + " code=" + this.code + " method=" + this.method + " detail=" + this.detail;
}

What now?

[marcmac]

Did you set the relay_host (in the mta tab) or the smtphost? The smtphost is where the web client hands the mail to, while the relay host is where postfix hands it off.

Also - if you're setting a relay host, you'll want to disable dns lookups in postfix.

[daly1]

Thanks. I found this on the rogers help site

Configuring your email client to send mail using SMTP on an alternate port

Most e-mail service providers understand that port 25 blocking is an effective method of reducing SPAM. As a result, they typically provide support for users who access their outgoing mail servers through ports other than 25. Many of these servers can now be accessed using port 465, or port 587. Please refer to your email service provider to determine if they provide access on alternate ports.

Below are examples of how to configure some popular email software packages to use an alternate SMTP port. Your specific email software may vary.

I need to change the port that zimbra sends from from 25 to 465. There is a post Questions Before I Start that talks about this but I still do not understand how to change the smtp port.

Please help!

[marcmac]

I think the rogers post you mentioned is more about configuring email client software - and the forum post talks about how to configure the ports we LISTEN on, not the ones we send on.

That said - if your email provider want you to use another port, add it to the relay_host parameter in postfix:

postconf -e relay_host=mail.isp.ca:465

[daly1]

Thank you. But is there a way of making it send to port 465 without using a mail relay? I want to connect directly to other mail servers on that port. I checked several mail servers by telnetting to port 465 and it worked.

[marcmac]

I'm not sure, I've never tried this, but the postfix docs may have more info (google postfix, there's lots of stuff out there).

I would not suggest this course of action, though - just because some mail servers permit alternative ports for submission, doesn't mean that all of them will (Zimbra, for instance, doesn't.) You'd most likely be better off, in the long run, handing the mail to your ISPs mail server. (Or switching to a less restrictive ISP, if available).

[daly1]

I ran the command for relay:

[zimbra@mail ~]$ postconf|grep relay
address_verify_relay_transport = $relay_transport
address_verify_relayhost = $relayhost
fallback_relay =
fast_flush_domains = $relay_domains
luser_relay =
parent_domain_matches_subdomains = debug_peer_list,fast_flush_domains,mynetworks,perm it_mx_backup_networks,qmqpd_authorized_clients,rel ay_domains,smtpd_access_maps
proxy_read_maps = $local_recipient_maps $mydestination $virtual_alias_maps $virtual_alias_domains $virtual_mailbox_maps $virtual_mailbox_domains $relay_recipient_maps $relay_domains $canonical_maps $sender_canonical_maps $recipient_canonical_maps $relocated_maps $transport_maps $mynetworks
relay_clientcerts =
relay_destination_concurrency_limit = $default_destination_concurrency_limit
relay_destination_recipient_limit = $default_destination_recipient_limit
relay_domains = $mydestination
relay_domains_reject_code = 554
relay_recipient_maps =
relay_transport = relay
relayhost = smtp.broadband.rogers.com:25
unknown_relay_recipient_reject_code = 550

But it seems not to be taking effect:

Nov 4 14:33:31 mail postfix/qmgr[24120]: 4B60E2C8A56: from=, size=726, nrcpt=1 (queue active)
Nov 4 14:33:32 mail amavis[22047]: (22047-02) ESMTP::10024 /opt/zimbra/amavisd/tmp/amavis-20051104T131933-22047: erreportcard.com> -> Received: SIZE=726 from mail.localdomain.com ([127.0.0.1]) by localhost (mail.daly.no-
ip.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 22047-02 for ; Fri, 4 Nov 2005 14:33:32 -0500
(EST)
Nov 4 14:33:32 mail amavis[22047]: (22047-02) body hash: dfe8a81ff0f3176eda73deabefd69858
Nov 4 14:33:32 mail amavis[22047]: (22047-02) Checking: 4ipOKZkd3CYQ [192.168.0.182] -> y@gmail.com>
Nov 4 14:33:32 mail amavis[22047]: (22047-02) Cached virus check expired, TTL = 180 s
Nov 4 14:33:32 mail amavis[22047]: (22047-02) cached dfe8a81ff0f3176eda73deabefd69858 from (0,0
)
Nov 4 14:33:33 mail amavis[22047]: (22047-02) p001 1 Content-Type: text/plain, size: 178 B, name:
Nov 4 14:33:33 mail amavis[22047]: (22047-02) Checking for banned types and filenames
Nov 4 14:33:33 mail amavis[22047]: (22047-02) collect banned table[0]: remoteuser@gmail.com, tables: DEFAULT=>Amavis::Lookup::RE
=ARRAY(0xa0d0b0c)
Nov 4 14:33:33 mail amavis[22047]: (22047-02) p.path remoteuser@gmail.com: "P=p001,L=1,M=text/plain,T=asc"
Nov 4 14:33:33 mail amavis[22047]: (22047-02) Using ClamAV-clamd: (built-in interface)
Nov 4 14:33:33 mail amavis[22047]: (22047-02) Using (ClamAV-clamd) on dir: CONTSCAN /opt/zimbra/amavisd/tmp/amavis-20051104T1
31933-22047/parts\n
Nov 4 14:33:33 mail amavis[22047]: (22047-02) ClamAV-clamd: Connecting to socket 127.0.0.1:3310
Nov 4 14:33:33 mail amavis[22047]: (22047-02) ClamAV-clamd: Sending CONTSCAN /opt/zimbra/amavisd/tmp/amavis-20051104T131933-2
2047/parts\n to INET socket 127.0.0.1:3310
Nov 4 14:33:33 mail amavis[22047]: (22047-02) ask_av (ClamAV-clamd): /opt/zimbra/amavisd/tmp/amavis-20051104T131933-22047/par
ts CLEAN
Nov 4 14:33:33 mail amavis[22047]: (22047-02) ClamAV-clamd result: clean
Nov 4 14:33:34 mail amavis[22047]: (22047-02) spam_scan: hits=-5.899 tests=[ALL_TRUSTED=-3.3,BAYES_00=-2.599]
Nov 4 14:33:34 mail postfix/smtpd[21265]: initializing the server-side TLS engine
Nov 4 14:33:34 mail postfix/smtpd[21265]: connect from localhost.localdomain[127.0.0.1]
Nov 4 14:33:34 mail amavis[22047]: (22047-02) AUTH not needed, user='', MTA offers ''
Nov 4 14:33:34 mail postfix/smtpd[21265]: C75A12C8A57: client=localhost.localdomain[127.0.0.1]
Nov 4 14:33:34 mail amavis[22047]: (22047-02) response to RCPT TO for : "250 Ok"
Nov 4 14:33:34 mail postfix/cleanup[21261]: C75A12C8A57: message-id=<4179068.1131132810550.JavaMail.zimbra@mail.daly.no-ip.co
m>
Nov 4 14:33:34 mail postfix/smtpd[21265]: disconnect from localhost.localdomain[127.0.0.1]
Nov 4 14:33:34 mail amavis[22047]: (22047-02) FWD via SMTP: -> , 250 2.6.0 O
k, id=22047-02, from MTA([127.0.0.1]:10025): 250 Ok: queued as C75A12C8A57
Nov 4 14:33:34 mail postfix/qmgr[24120]: C75A12C8A57: from=, size=1182, nrcpt=1 (queue active)
Nov 4 14:33:35 mail amavis[22047]: (22047-02) Passed CLEAN, LOCAL [192.168.0.182] [192.168.0.182] m> -> , Message-ID: <4179068.1131132810550.JavaMail.zimbra@mail.localdo main.com>, mail_id: 4ipOKZkd3CYQ, Hit
s: -5.899, 3150 ms
Nov 4 14:33:35 mail amavis[22047]: (22047-02) TIMING [total 3198 ms] - SMTP EHLO: 548 (17%)17, SMTP pre-MAIL: 8 (0%)17, looku
p_ldap: 293 (9%)27, SMTP pre-DATA-flush: 43 (1%)28, SMTP DATA: 2 (0%)28, body_hash: 33 (1%)29, gen_mail_id: 43 (1%)30, mime_de
code: 241 (8%)38, get-file-type1: 79 (2%)40, decompose_part: 3 (0%)40, parts_decode: 0 (0%)40, AV-scan-1: 58 (2%)42, spam-wb-l
ist: 22 (1%)43, SA msg read: 119 (4%)47, SA parse: 11 (0%)47, SA check: 1157 (36%)83, update_cache: 10 (0%)83, deal_with_mail_
size: 3 (0%)84, fwd-connect: 147 (5%)88, fwd-mail-from: 67 (2%)90, fwd-rcpt-to: 24 (1%)91, write-header: 17 (1%)92, fwd-data:
1 (0%)92, fwd-data-end: 91 (3%)94, fwd-rundown: 8 (0%)95, main_log_entry: 148 (5%)99, update_snmp: 13 (0%)100, unlink-1-files:
7 (0%)100, rundown: 2 (0%)100
Nov 4 14:33:35 mail postfix/smtp[21262]: 4B60E2C8A56: to=, relay=127.0.0.1[127.0.0.1], delay=4, status=sen
t (250 2.6.0 Ok, id=22047-02, from MTA([127.0.0.1]:10025): 250 Ok: queued as C75A12C8A57)
Nov 4 14:33:35 mail amavis[22047]: (22047-02) extra modules loaded: Net/LDAP/Bind.pm
Nov 4 14:33:35 mail postfix/qmgr[24120]: 4B60E2C8A56: removed
Nov 4 14:33:35 mail amavis[22047]: (22047-02) load: 0 %, total idle 4428.912 s, busy 14.567 s
Nov 4 14:34:05 mail postfix/smtp[19981]: connect to gmail-smtp-in.l.google.com[72.14.205.27]: Connection timed out (port 25)
Nov 4 14:34:23 mail postfix/smtpd[21133]: connect from localhost.localdomain[127.0.0.1]
Nov 4 14:34:23 mail postfix/smtpd[21133]: disconnect from localhost.localdomain[127.0.0.1]
Nov 4 14:34:35 mail postfix/smtp[19981]: connect to gsmtp83-2.google.com[66.249.83.114]: Connection timed out (port 25)

Thank you for all your help. I seem to be so close, what am I missing?

[marcmac]

set the relay host in the admin ui, or it will get overwritten (or set zimbraMtaRelayHost via zmprov on the server:

zmprov ms zimbraMtaRelayHost
and restart postfix.