Zimbra - can anyone help me get my zimbra to receive external emails?

[reggiep]

I "think" that I have set up everything I need to get my zimbra server to receive emails but it doesn't!

I get this error when trying to send to a users email "553 553 sorry, that domain isn't in my list of allowed rcpthosts"

I have checked the mx record and that points to the right ip address for the server. I have tried sending to a non existent user on the server and I get a different error so I am assuming it is getting so far but I cannot get any further.

Can anyone who has zimbra up and running help at all?

Thanks

[kmount]

First thing, on the zimbra itself can it send from itself to itself via the known domain?
Can you send OUT from the zimbra to anywhere else?

Checking the MX would be my next bet port of call, check that the 553 is actually from your zimbra server and not somewhere else (which distro are you running it under?)

[reggiep]

Hi Kmount,
I am running it on ubuntu server.
I can send an email to user@mail.tayna.eu from anotheruser@mail.tayna.eu while I am running on our domain.
I'm not sure if that email leaves the domain?
I cannot email out to external accounts such as my gmail or external school webmail.

[reggiep]

Just to update on the sending emails, I have tried telneting to out LA email server and I get the same error when trying to send to my gmail from that. SO I guess I had better check with them.

[kmount]

If you can't send out, it's not MX that's the problem, mind you, if you can't get anything back in either it suggests it's a problem both ways.

Right ... so you want to use kmount@mail.tayna.eu or @tayna.eu?

The MX for mail. lands on oneandone as aswell as tayna.eu which might be causing confusion.

This being said, I can connect to the SMTP server from the outside no problem.

kmount@parity ~ $ telnet tayna.eu 25
Trying 87.106.63.47...
Connected to tayna.eu.
Escape character is '^]'.
220 s15260768.onlinehome-server.info ESMTP
ehlo
250-s15260768.onlinehome-server.info
250-AUTH=LOGIN CRAM-MD5 PLAIN
250-AUTH LOGIN CRAM-MD5 PLAIN
250-STARTTLS
250-PIPELINING
250 8BITMIME
^]
telnet> quit
Connection closed.
kmount@parity ~ $

Can you confirm whether you can telnet out from your mail server to say ... relay.embc.uk.com on port 25 and get a connection?

[reggiep]

Bugger,
I'm timing out when trying to connect to relay.embc.uk.com 25.
I'm guessing I need to get our Tech services to unblock some things?

thanks Kmount

[Geoff]

Or use a smarthost.

[reggiep]

Just as I was about to give up for the day, geoff mentions smarthosts?
Please explain more?

Thanks

[kmount]

A smart host IS a SMTP server you CAN get to within the corporate LAN or so, saves on your server talking to everyone elses SMTP server by instead talking to your "allowed" one in our case that's relay which does the talking for you.

This does however explain why you're not sending anything

[reggiep]

In that case I might alrady be talking to one?

I am going to an internal address that our LA Tech services has provided along the lines of 10.60.*.*

Is that a smarthost?

Thanks

[kmount]

Very possibly yes, now, it might be worth telneting to that address on port 25 and sending a mail via it just to check it goes through OK before we look into Zimbra a bit more.

Have a quick google for sending mail through telnet and give it a go to a gmail address or so.

[Geoff]

Certainly sounds like it. You could port scan it or telnet to make sure.

[reggiep]

Very possibly yes, now, it might be worth telneting to that address on port 25 and sending a mail via it just to check it goes through OK before we look into Zimbra a bit more.

Have a quick google for sending mail through telnet and give it a go to a gmail address or so.

I can connect through to the address but it will not let an email go through.
I get a - 554 relay access denied message - error.

I guess i might have set it up right then but need tech support to unblock some bits for me!

[powdarrmonkey]

You need to authenticate against it then.

[kmount]

Yup, you're internal mailserver ip needs to be added to the relay list or get authentication in play if they support that instead.