Zimbra help..multi-domain each with own external relay

vhinzsanchez

I have asked Zimbra forum, even Spiceworks but no solution was provided. I have been struggling for almost 1.5 years. I've tried Ubuntu and CentOS...I think it made no difference, it's in Zimbra configuration itself.

I have been building a test Zimbra OSE server (spanning different versions, latest is 8.8). In my previous test (2015), I think it was successful as I was able to receive an external email test, however, I failed to check the email header if it routed right. That test server failed and I am to rebuild it.

I have 2 domains, domain1.com and domain2.com both of which will reside in a single Zimbra server.

We also have 2 mail providers (smtp.external1.com and smtp.external2.com) providing each one our external servers which acts as smarthosts and emails pulled via POP3 by the Zimbra server.

Considering DNS are all set locally, I was able to setup a working Zimbra (using domain1.com) including routing to correct external host (smtp.external1.com). I've added another domain (domain2.com) and emails between the domain is working great (internally routing).

I have configured relay per domain/sender_dependent_relayhost_maps (bysender) and Outgoing SMTP Authentication (relay_password).

bysender:
@domain1.com [smtp.external1.com]:587
@domain2.com [smtp.external2.com]:587

relay_password:
[smtp.external1.com]:587 [email protected]:Password1
[smtp.external2.com]:587 [email protected]:Password2

I presently do not have anything in the "Relay MTA for external delivery" and fallback. However, sending external emails (test to my google.com account) produces the following error which suggests that it it routing directly to the recipient's domain:

Jan 31 11:46:34 zimbraserver postfix/cleanup[11546]: 4BB3F9B418D1: message-id=[email protected]
Jan 31 11:46:34 zimbraserver postfix/qmgr[5514]: 4BB3F9B418D1: from=[email protected], size=8044, nrcpt=1 (queue active)
Jan 31 11:46:34 zimbraserver postfix/amavisd/smtpd[6176]: disconnect from localhost.localdomain[127.0.0.1] ehlo=1 mail=11 rcpt=11 data=11 noop=1 quit=1 commands=36
Jan 31 11:46:34 zimbraserver amavis[7960]: (07960-02) SESxErtKd5sx FWD from [email protected] -> [email protected], BODY=7BIT 250 2.0.0 from MTA(smtp:[127.0.0.1]:10025): 250 2.0.0 Ok: queued as 4BB3F9B418D1
Jan 31 11:46:34 zimbraserver amavis[7960]: (07960-02) Passed CLEAN {RelayedOutbound}, MYNETS LOCAL [127.0.0.1]:60666 [email protected] -> [email protected], Queue-ID: 6389A9B418B6, Message-ID: [email protected], mail_id: SESxErtKd5sx, Hits: -0.999, size: 7563, queued_as: 4BB3F9B418D1, 1406 ms
Jan 31 11:46:34 zimbraserver postfix/smtp[11532]: 438429B41912: to=[email protected], relay=127.0.0.1[127.0.0.1]:10024, delay=64731, delays=64727/2.7/0/1.4, dsn=2.0.0, status=sent (250 2.0.0 from MTA(smtp:[127.0.0.1]:10025): 250 2.0.0 Ok: queued as 4BB3F9B418D1)
Jan 31 11:46:34 zimbraserver postfix/qmgr[5514]: 438429B41912: removed
Jan 31 11:47:06 zimbraserver postfix/smtp[11562]: connect to gmail-smtp-in.l.google.com[74.125.204.27]:25: Connection timed out
Jan 31 11:47:06 zimbraserver postfix/smtp[11557]: connect to gmail-smtp-in.l.google.com[74.125.204.27]:25: Connection timed out
Jan 31 11:47:36 zimbraserver postfix/smtp[11557]: connect to alt1.gmail-smtp-in.l.google.com[64.233.160.26]:25: Connection timed out
Jan 31 11:47:36 zimbraserver postfix/smtp[11562]: connect to alt1.gmail-smtp-in.l.google.com[64.233.160.26]:25: Connection timed out
Jan 31 11:48:06 zimbraserver postfix/smtp[11562]: connect to alt2.gmail-smtp-in.l.google.com[108.177.121.27]:25: Connection timed out
Jan 31 11:48:06 zimbraserver postfix/smtp[11557]: connect to alt2.gmail-smtp-in.l.google.com[108.177.121.27]:25: Connection timed out
Jan 31 11:48:26 zimbraserver zmconfigd[1615]: Fetching All configs
Jan 31 11:48:26 zimbraserver zmconfigd[1615]: All configs fetched in 0.19 seconds

Same error above if using [email protected].

If I use smtp.domain1.com as "Relay MTA for external delivery," mails are routing externally but both domain1.com and domain2.com is using smtp.external1.com using the [email protected]:Password1 credential (but...domain2.com should use the smtp.external2.com instead).

If I issue the following (from Zimbra: Smarthost by Domain) then no emails get routed, even internally:

zmprov md domain1.com +zimbraSmtpHostname smtp.external1.com
zmprov md domain2.com +zimbraSmtpHostname smtp.external2.com

The page hangs for a while (with circling waiting mouse pointer) then error prompts "network error" and will not get sent and no logs in /var/log/zimbra.log or /opt/zimbra/log/mailbox.log.

What I require is the following:

domain1.com to domain2.com internal routing (working)
domain2.com to domain1.com internal routing (working)
domain1.com to anyoutsidedomain should route to smtp.external1.com.
domain2.com to anyoutsidedomain should route to smtp.external2.com.

Provision for a 3rd or 4th domain to do the same (emails to and from domain1.com and domain2.com should route internally and any other domain, externally).

Why I want on single server? Sending and receiving will be much faster and inter-domain chats are possible. I also think that this will have an effect in disk space utilization as messages will be stored single between the 2 domains as opposed to being downloaded via POP3. The test server, BTW, is Hyper-V client.

Thanks and advance!

dbeato

I am assuming this is your Zimbra Forum Post:
https://forums.zimbra.org/viewtopic.php?t=62787
Post
[moderated as we aren't allowed to post links to things from that forum any longer see community guidelines]

dbeato

Ithe past I have been doing this:
https://wiki.zimbra.com/wiki/Relay_per_Domain
And it works well but for you it is not.
My question also would be, are you doing SPLIT DNS on this one server setup?

scottalanmiller

This is definitely a complex and unusual configuration, not one I've had to work with before. This will take some research.

vhinzsanchez

@dbeato
Yes, you got it. The one in zimbra is my first try. It seemed well but I'm unsure if domain2.com really routes to smtp.external2.com. I was pretty impressed by myself having set it up the way I wanted and I have not tried to check the header. :persevering_face:

When it broke, I tried to set it up again. This time, I have checked the header and external email is not routing as expected, it instead routes to mtp.external2.com.

After several months, I'd opened the topic in SW.

vhinzsanchez

@dbeato
I think it would work if only one domain, but as SAM is pointing out, it seems that I may have an unusual configuration.

@SAM
Thanks. Presently, we have an almost similar setup (in terms of relay/smart host but both is on different physical machine and sending to each other means to send or route to our external server.

dbeato

@vhinzsanchez said in Zimbra help..multi-domain each with own external relay:

@dbeato
I think it would work if only one domain, but as SAM is pointing out, it seems that I may have an unusual configuration.

@SAM
Thanks. Presently, we have an almost similar setup (in terms of relay/smart host but both is on different physical machine and sending to each other means to send or route to our external server.

I have one server setup this way, but mayBe retired pretty soon.

vhinzsanchez

@dbeato
Wow! You are one of the gems which has set it up correctly.

How? How? How?

dbeato

@vhinzsanchez said in Zimbra help..multi-domain each with own external relay:

@dbeato
Wow! You are one of the gems which has set it up correctly.

How? How? How?

I am connecting to the Zimbra server this morning and will let you know.

wirestyle22

@vhinzsanchez said in Zimbra help..multi-domain each with own external relay:

@SAM
Thanks. Presently, we have an almost similar setup (in terms of relay/smart host but both is on different physical machine and sending to each other means to send or route to our external server.

Just so you know @SAM is not @scottalanmiller, although Scott does go by SAM. It's just not his username.

scottalanmiller

@wirestyle22 said in Zimbra help..multi-domain each with own external relay:

@vhinzsanchez said in Zimbra help..multi-domain each with own external relay:

@SAM
Thanks. Presently, we have an almost similar setup (in terms of relay/smart host but both is on different physical machine and sending to each other means to send or route to our external server.

Just so you know @SAM is not @scottalanmiller, although Scott does go by SAM. It's just not his username.

That would confuse even me.

vhinzsanchez

@wirestyle22
Oh great, just great. Noted. Thanks for letting me know.

vhinzsanchez

@dbeato said in Zimbra help..multi-domain each with own external relay:

I am connecting to the Zimbra server this morning and will let you know.

Thanks @dbeato! Really appreciate it.

vhinzsanchez

Hi Guys,

I was wondering if you have ever got to check out my queries.

Thanks in advance!

vhinzsanchez

HI Guys,

Bumping this topic should anyone has an idea.

Thanks!

dbeato

@vhinzsanchez said in Zimbra help..multi-domain each with own external relay:

HI Guys,

Bumping this topic should anyone has an idea.

Thanks!

Sorry, I haven't been able to connect to that Zimbra server... I am wondering why. Let me report back.

vhinzsanchez

@dbeato Thanks! I was just wondering where my setup went wrong...in all of my tests :grinning_face_with_smiling_eyes: for the last 1.5 to 2 years

dbeato

@vhinzsanchez said in Zimbra help..multi-domain each with own external relay:

@dbeato Thanks! I was just wondering where my setup went wrong...in all of my tests :grinning_face_with_smiling_eyes: for the last 1.5 to 2 years

There is nothing wrong with what you setup and I have that file on my Zimbra server so I am not sure what is different from yours.

vhinzsanchez

I also think so...but setups are stating otherwise. I think I have the local bind9 working as dig works and the first domain is working fine.

dbeato

@vhinzsanchez said in Zimbra help..multi-domain each with own external relay:

I also think so...but setups are stating otherwise. I think I have the local bind9 working as dig works and the first domain is working fine.

So you are doing split DNS correct? If so, you need to add that domain there as well.