ML
    • Recent
    • Categories
    • Tags
    • Popular
    • Users
    • Groups
    • Register
    • Login

    Zimbra help..multi-domain each with own external relay

    IT Discussion
    5
    48
    8.0k
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • vhinzsanchezV
      vhinzsanchez @dbeato
      last edited by vhinzsanchez

      @dbeato No, not doing split dns (well, I just don't get an idea of splitdns so I was thinking it was not implemented). Just simple bind9 implementation making sure it recognize itself as postoffice.domain1.com and itself and the other mail servers (external1.com and external2.com) as mx.

      • nxlookup and dig is working as expected and seeing itself, including the mx records.

      • Domain in network is still domain.local.

      • /etc/hostname is postoffice.domain1.com

      • /etc/hosts:
        127.0.0.1
        192.168.0.1 postoffice.domain1.com postoffice
        119.93.x.x smtp.external1.com smtp

      1 Reply Last reply Reply Quote 0
      • vhinzsanchezV
        vhinzsanchez
        last edited by

        Seemed like I had given the wrong information, sorry for the confusion. Just occurred to me that I may have provided the wrong info. Domain1.com is also external1.com (same domain name as our external provider). I think it may have no effect but it may have otherwise.

        Lets I’ll step back and start my installation procedure. Most of the steps I made are taken from https://ubuntuforums.org/showthread.php?t=1866784 specially those pre-Zimbra installation – preparation and DNS. I think it is the same guide my predecessor has made to create our present server.

        Just to make it clear, I have removed the extenal1.com (it is confusing, I think):
        Internal network/domain name: domain.local
        Server name: postoffice.domain1.com (192.168.0.1)
        Zimbra domain1: domain1.com
        Zimbra domain2: domain2.com
        External server1: smtp.domain1.com (119.93.x.x)
        External server2: smtp.domain2.com (119.93.x.y)

        ============

        /etc/hostname:
        postoffice.domain1

        ============

        /etc/network/interfaces
        iface eth0 inet static
        address 192.168.0.1
        netmask 255.255.255.0
        network 192.168.1.0
        broadcast 192.168.1.255
        gateway 192.168.1.5
        # dns-* options are implemented by the resolvconf package, if installed
        dns-nameservers 192.168.0.1 8.8.8.8
        dns-search domain1.com

        ============

        /etc/resolv.conf
        nameserver 192.168.0.1
        nameserver 8.8.8.8
        search domain1.com

        ============

        /etc/bind/named.conf.local
        zone "domain1.com" {
        type master;
        file "/etc/bind/db.domain1.com";
        allow-transfer {"none";};
        forwarders {8.8.8.8;};
        };

        zone "domain2.com" {
        type master;
        file "/etc/bind/db.domain2.com";
        allow-transfer {"none";};
        forwarders {8.8.8.8;};
        };

        ============

        /etc/bind/db.domain1.com
        ; domain1.com
        $TTL 604800
        @ IN SOA ns.domain1.com. root.domain1.com. (
        20180124 ; Serial
        604800 ; Refresh
        86400 ; Retry
        2419200 ; Expire
        604800 ); Negative Cache TTL
        ;
        @ IN NS ns
        IN MX 10 postoffice
        IN MX 10 smtp
        IN A 192.168.0.1
        ns IN A 192.168.0.1
        postoffice IN A 192.168.0.1
        smtp IN A 119.93.x.x
        www IN A 192.168.0.1

        ============

        /etc/bind/db.domain2.com
        ; domain2
        $TTL 604800
        @ IN SOA ns.domain2.com. root.domain2.com. (
        20180125 ; Serial
        604800 ; Refresh
        86400 ; Retry
        2419200 ; Expire
        604800 ); Negative Cache TTL
        ;
        @ IN NS ns
        IN MX 10 postoffice
        IN MX 10 smtp
        IN A 192.168.0.1
        ns IN A 192.168.0.1
        postoffice IN A 192.168.0.1
        smtp IN A 119.93.x.y
        www IN A 192.168.0.1

        ============

        admin@postoffice:~$ nslookup domain1.com
        Server: 192.168.0.1
        Address: 192.168.0.1#53

        Name: domain1.com
        Address: 192.168.0.1

        ============

        admin@postoffice:~$ nslookup smtp.domain1.com
        Server: 192.168.0.1
        Address: 192.168.0.1#53

        Name: smtp.domain1.com
        Address: 119.93.x.x

        ============

        admin@postoffice:~$ nslookup domain2.com
        Server: 192.168.0.1
        Address: 192.168.0.1#53

        Name: domain2.com
        Address: 192.168.0.1

        ============

        admin@postoffice:~$ nslookup smtp.domain2.com
        Server: 192.168.0.1
        Address: 192.168.0.1#53

        Name: smtp.domain2.com
        Address: 119.93.x.y

        ============

        admin@postoffice:~$ dig domain1.com

        ; <<>> DiG 9.10.3-P4-Ubuntu <<>> domain1.com
        ;; global options: +cmd
        ;; Got answer:
        ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 28427
        ;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 1, ADDITIONAL: 2

        ;; OPT PSEUDOSECTION:
        ; EDNS: version: 0, flags:; udp: 4096
        ;; QUESTION SECTION:
        ;domain1.com. IN A

        ;; ANSWER SECTION:
        domain1.com. 604800 IN A 192.168.0.1

        ;; AUTHORITY SECTION:
        domain1.com. 604800 IN NS ns.domain1.com.

        ;; ADDITIONAL SECTION:
        ns.domain1.com. 604800 IN A 192.168.0.1

        ;; Query time: 0 msec
        ;; SERVER: 192.168.0.1#53(192.168.0.1)
        ;; WHEN: Tue Feb 06 16:42:01 +08 2018
        ;; MSG SIZE rcvd: 91

        ============

        admin@postoffice:~$ dig domain1.com mx

        ; <<>> DiG 9.10.3-P4-Ubuntu <<>> domain1.com mx
        ;; global options: +cmd
        ;; Got answer:
        ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 11646
        ;; flags: qr aa rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 1, ADDITIONAL: 4

        ;; OPT PSEUDOSECTION:
        ; EDNS: version: 0, flags:; udp: 4096
        ;; QUESTION SECTION:
        ;domain1.com. IN MX

        ;; ANSWER SECTION:
        domain1.com. 604800 IN MX 10 smtp.domain1.com.
        domain1.com. 604800 IN MX 10 postoffice.domain1.com.

        ;; AUTHORITY SECTION:
        domain1.com. 604800 IN NS ns.domain1.com.

        ;; ADDITIONAL SECTION:
        smtp.domain1.com. 604800 IN A 119.93.x.x
        postoffice.domain1.com. 604800 IN A 192.168.0.1
        ns.domain1.com. 604800 IN A 192.168.0.1

        ;; Query time: 0 msec
        ;; SERVER: 192.168.0.1#53(192.168.0.1)
        ;; WHEN: Tue Feb 06 16:42:20 +08 2018
        ;; MSG SIZE rcvd: 155

        ============

        admin@postoffice:~$ dig domain2.com mx

        ; <<>> DiG 9.10.3-P4-Ubuntu <<>> domain2.com mx
        ;; global options: +cmd
        ;; Got answer:
        ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 10800
        ;; flags: qr aa rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 1, ADDITIONAL: 4

        ;; OPT PSEUDOSECTION:
        ; EDNS: version: 0, flags:; udp: 4096
        ;; QUESTION SECTION:
        ;domain2.com. IN MX

        ;; ANSWER SECTION:
        domain2.com. 604800 IN MX 10 postoffice.domain2.com.
        domain2.com. 604800 IN MX 10 smtp.domain2.com.

        ;; AUTHORITY SECTION:
        domain2.com. 604800 IN NS ns.domain2.com.

        ;; ADDITIONAL SECTION:
        smtp.domain2.com. 604800 IN A 119.93.x.y
        postoffice.domain2.com. 604800 IN A 192.168.0.1
        ns.domain2.com. 604800 IN A 192.168.0.1

        ;; Query time: 0 msec
        ;; SERVER: 192.168.0.1#53(192.168.0.1)
        ;; WHEN: Tue Feb 06 16:42:27 +08 2018
        ;; MSG SIZE rcvd: 166

        1 Reply Last reply Reply Quote 1
        • vhinzsanchezV
          vhinzsanchez
          last edited by

          Other configuration would be the same as the original post except the external1.com which should have been smtp.domain1.com and external2.com which should be smtp.domain2.com.

          Again, thanks in advance.

          1 Reply Last reply Reply Quote 2
          • dbeatoD
            dbeato
            last edited by

            Okay, so I reviewed finally that Zimbra server. What I found out is that we have three domains in there, one is sending through the WAN IP of the Server as NAT through the firewall while the other two domains are sending through a relay server as below:
            0_1518291530281_DeepinScreenshot_select-area_20180210143842.png

            vhinzsanchezV 1 Reply Last reply Reply Quote 0
            • dbeatoD
              dbeato
              last edited by

              Also are you SMTP Servers also on the MTA Trusted networks?

              1 Reply Last reply Reply Quote 0
              • vhinzsanchezV
                vhinzsanchez @dbeato
                last edited by vhinzsanchez

                @dbeato said in Zimbra help..multi-domain each with own external relay:

                P of the Server as NAT through the firewall while the other two domains are sending through a relay server as belo

                Thanks @dbeato, great! Same as what I'm trying to achieve!

                I have below as my settings

                bysender:
                @domain1.com [ smtp.domain1.com]:587
                @domain2.com [ smtp.domain2.com]:587

                relay_password:
                [smtp.domain1.com]:587 [email protected]:Password1
                [smtp.domain2.com]:587 [email protected]:Password2

                @dbeato said in Zimbra help..multi-domain each with own external relay:

                Also are you SMTP Servers also on the MTA Trusted networks?

                No. Does it need to be?

                Below are mynetworks (edited the line '# name postoffice.domain1.com as it formats large):
                zimbra@postoffice:~$ postconf mynetworks
                mynetworks = 127.0.0.0/8 [::1]/128 192.168.0.0/24
                zimbra@postoffice:~$ zmprov gs postoffice.domain1.com zimbraMtaMyNetworks
                '# name postoffice.domain1.com
                zimbraMtaMyNetworks: 127.0.0.0/8 [::1]/128 192.168.0.0/24

                Honestly, I do not understand the MTA Trusted networks. Our present servers (physical and one domain on one server..this is not the one I opened in this thread) only have the loopback (127.0.0.1/8) and its network (192.168.0.0/24) but our other VLANs, other offices (via IPSEC) and outside access (NATted) works.

                What I was thinking is that the since our users are accessing the (zimbra) webmail, it is using the server's own IP address. However, this is also true if I set up POP/IMAP through a client, it connects and sends via the server's IP. Pls. correct me if I'm understanding it wrong.

                dbeatoD 1 Reply Last reply Reply Quote 1
                • dbeatoD
                  dbeato @vhinzsanchez
                  last edited by

                  @vhinzsanchez said in Zimbra help..multi-domain each with own external relay:

                  What I was thinking is that the since our users are accessing the (zimbra) webmail, it is using the server's own IP address. However, this is also true if I set up POP/IMAP through a client, it connects and sends via the server's IP. Pls. correct me if I'm understanding it wrong.

                  Your understanding is correct.

                  vhinzsanchezV 1 Reply Last reply Reply Quote 1
                  • vhinzsanchezV
                    vhinzsanchez @dbeato
                    last edited by

                    @dbeato thanks!

                    Do I also need to include both SMTP servers in MTA Trusted Networks? How do I input them in CIDR format?

                    119.93.x.x /32?
                    119.93.x.y /32?

                    Thanks!

                    dbeatoD 2 Replies Last reply Reply Quote 0
                    • dbeatoD
                      dbeato @vhinzsanchez
                      last edited by

                      @vhinzsanchez said in Zimbra help..multi-domain each with own external relay:

                      @dbeato thanks!

                      Do I also need to include both SMTP servers in MTA Trusted Networks? How do I input them in CIDR format?

                      119.93.x.x /32?
                      119.93.x.y /32?

                      Thanks!

                      Yes /32 is one IP address.

                      1 Reply Last reply Reply Quote 0
                      • dbeatoD
                        dbeato @vhinzsanchez
                        last edited by

                        @vhinzsanchez said in Zimbra help..multi-domain each with own external relay:

                        @dbeato thanks!

                        Do I also need to include both SMTP servers in MTA Trusted Networks? How do I input them in CIDR format?

                        119.93.x.x /32?
                        119.93.x.y /32?

                        Thanks!

                        Please include them there for sure.

                        vhinzsanchezV 1 Reply Last reply Reply Quote 0
                        • vhinzsanchezV
                          vhinzsanchez @dbeato
                          last edited by

                          @dbeato

                          Yup...tried to enter the IPs in MTA Trusted Networks but still the same even after issuing "zmcontrol restart" and even restarting the whole VM. It seems as though that the email is being sent directly to the recipient's server (Google's in this case):

                          Feb 13 16:36:59 postoffice systemd-logind[936]: Removed session 92.
                          Feb 13 16:37:10 postoffice postfix/smtp[38133]: connect to alt1.gmail-smtp-in.l.google.com[74.125.198.27]:25: Connection timed out
                          Feb 13 16:37:10 postoffice postfix/smtp[38134]: connect to alt1.gmail-smtp-in.l.google.com[74.125.198.27]:25: Connection timed out
                          Feb 13 16:37:40 postoffice postfix/smtp[38134]: connect to alt2.gmail-smtp-in.l.google.com[74.125.124.26]:25: Connection timed out
                          Feb 13 16:37:40 postoffice postfix/smtp[38133]: connect to alt2.gmail-smtp-in.l.google.com[74.125.124.26]:25: Connection timed out
                          Feb 13 16:37:46 postoffice zmconfigd[1371]: Fetching All configs
                          Feb 13 16:37:46 postoffice zmconfigd[1371]: All configs fetched in 0.09 seconds
                          Feb 13 16:37:51 postoffice zmconfigd[1371]: Watchdog: service antivirus status is OK.
                          Feb 13 16:37:51 postoffice zmconfigd[1371]: All rewrite threads completed in 0.00 sec
                          Feb 13 16:37:51 postoffice zmconfigd[1371]: All restarts completed in 0.00 sec
                          Feb 13 16:38:10 postoffice postfix/smtp[38133]: connect to alt3.gmail-smtp-in.l.google.com[74.125.136.26]:25: Connection timed out
                          Feb 13 16:38:10 postoffice postfix/smtp[38134]: connect to alt3.gmail-smtp-in.l.google.com[74.125.136.26]:25: Connection timed out
                          Feb 13 16:38:40 postoffice postfix/smtp[38134]: connect to alt4.gmail-smtp-in.l.google.com[173.194.208.26]:25: Connection timed out
                          Feb 13 16:38:40 postoffice postfix/smtp[38133]: connect to alt4.gmail-smtp-in.l.google.com[173.194.208.26]:25: Connection timed out
                          Feb 13 16:38:40 postoffice postfix/smtp[38133]: B00E09B4207B: to=[email protected], relay=none, delay=3353, delays=3231/0.75/121/0, dsn=4.4.1, status=deferred (connect to alt4.gmail-smtp-in.l.google.com[173.194.208.26]:25: Connection timed out)
                          Feb 13 16:38:40 postoffice postfix/smtp[38134]: 065129B42075: to=[email protected], relay=none, delay=3351, delays=3230/0.59/121/0, dsn=4.4.1, status=deferred (connect to alt4.gmail-smtp-in.l.google.com[173.194.208.26]:25: Connection timed out)

                          dbeatoD 1 Reply Last reply Reply Quote 0
                          • dbeatoD
                            dbeato @vhinzsanchez
                            last edited by

                            @vhinzsanchez said in Zimbra help..multi-domain each with own external relay:

                            @dbeato

                            Yup...tried to enter the IPs in MTA Trusted Networks but still the same even after issuing "zmcontrol restart" and even restarting the whole VM. It seems as though that the email is being sent directly to the recipient's server (Google's in this case):

                            Feb 13 16:36:59 postoffice systemd-logind[936]: Removed session 92.
                            Feb 13 16:37:10 postoffice postfix/smtp[38133]: connect to alt1.gmail-smtp-in.l.google.com[74.125.198.27]:25: Connection timed out
                            Feb 13 16:37:10 postoffice postfix/smtp[38134]: connect to alt1.gmail-smtp-in.l.google.com[74.125.198.27]:25: Connection timed out
                            Feb 13 16:37:40 postoffice postfix/smtp[38134]: connect to alt2.gmail-smtp-in.l.google.com[74.125.124.26]:25: Connection timed out
                            Feb 13 16:37:40 postoffice postfix/smtp[38133]: connect to alt2.gmail-smtp-in.l.google.com[74.125.124.26]:25: Connection timed out
                            Feb 13 16:37:46 postoffice zmconfigd[1371]: Fetching All configs
                            Feb 13 16:37:46 postoffice zmconfigd[1371]: All configs fetched in 0.09 seconds
                            Feb 13 16:37:51 postoffice zmconfigd[1371]: Watchdog: service antivirus status is OK.
                            Feb 13 16:37:51 postoffice zmconfigd[1371]: All rewrite threads completed in 0.00 sec
                            Feb 13 16:37:51 postoffice zmconfigd[1371]: All restarts completed in 0.00 sec
                            Feb 13 16:38:10 postoffice postfix/smtp[38133]: connect to alt3.gmail-smtp-in.l.google.com[74.125.136.26]:25: Connection timed out
                            Feb 13 16:38:10 postoffice postfix/smtp[38134]: connect to alt3.gmail-smtp-in.l.google.com[74.125.136.26]:25: Connection timed out
                            Feb 13 16:38:40 postoffice postfix/smtp[38134]: connect to alt4.gmail-smtp-in.l.google.com[173.194.208.26]:25: Connection timed out
                            Feb 13 16:38:40 postoffice postfix/smtp[38133]: connect to alt4.gmail-smtp-in.l.google.com[173.194.208.26]:25: Connection timed out
                            Feb 13 16:38:40 postoffice postfix/smtp[38133]: B00E09B4207B: to=[email protected], relay=none, delay=3353, delays=3231/0.75/121/0, dsn=4.4.1, status=deferred (connect to alt4.gmail-smtp-in.l.google.com[173.194.208.26]:25: Connection timed out)
                            Feb 13 16:38:40 postoffice postfix/smtp[38134]: 065129B42075: to=[email protected], relay=none, delay=3351, delays=3230/0.59/121/0, dsn=4.4.1, status=deferred (connect to alt4.gmail-smtp-in.l.google.com[173.194.208.26]:25: Connection timed out)

                            Can you setup a relay as below?
                            https://support.google.com/a/answer/2956491?hl=en

                            1 Reply Last reply Reply Quote 0
                            • vhinzsanchezV
                              vhinzsanchez
                              last edited by

                              Thanks @dbeato, by goal is to use our own SMTP (external email server) as smarthost. We are using the 2 now, in a separate physical Zimbra installation, without issues. I was only trying to replicate that settings into a single (VM) zimbra install.

                              Thanks again for sticking with me to help me out with my dilemma.

                              dbeatoD 1 Reply Last reply Reply Quote 0
                              • dbeatoD
                                dbeato @vhinzsanchez
                                last edited by

                                @vhinzsanchez said in Zimbra help..multi-domain each with own external relay:

                                Thanks @dbeato, by goal is to use our own SMTP (external email server) as smarthost. We are using the 2 now, in a separate physical Zimbra installation, without issues. I was only trying to replicate that settings into a single (VM) zimbra install.

                                Thanks again for sticking with me to help me out with my dilemma.

                                Strange, I mean your error seem to be trying to connect to Gmail that the ports are timing out.

                                1 Reply Last reply Reply Quote 0
                                • vhinzsanchezV
                                  vhinzsanchez
                                  last edited by

                                  @dbeato said in Zimbra help..multi-domain each with own external relay:

                                  Strange, I mean your error seem to be trying to connect to Gmail that the ports are timing out.

                                  That's where I'm also confused about. It seems that it is directly trying to connect to Gmail to send the messages. The recipient is my personal gmail account. Creating bysender and relay_password files and configuring Zimbra to recognize those (by the searches I had done), it should have routed the mails to the external (SMTP) server.

                                  Inputting the smtp.domain1.com to "Relay MTA for external delivery" routes all outgoing emails to it, including the ones from domain2.com which should route to smtp.domain2.com.

                                  1 Reply Last reply Reply Quote 0
                                  • vhinzsanchezV
                                    vhinzsanchez
                                    last edited by

                                    Hi,

                                    Guys, I'll be out and will be back on Monday. Tomorrow is a holiday here in Philippines, work resumes on Monday. Hope you can help me out :smiling_face_with_open_mouth:

                                    Thanks!

                                    scottalanmillerS 1 Reply Last reply Reply Quote 2
                                    • scottalanmillerS
                                      scottalanmiller @vhinzsanchez
                                      last edited by

                                      @vhinzsanchez enjoy your holiday.

                                      vhinzsanchezV 1 Reply Last reply Reply Quote 0
                                      • vhinzsanchezV
                                        vhinzsanchez @scottalanmiller
                                        last edited by

                                        @scottalanmiller Thanks! I did enjoy it with family and friends!

                                        1 Reply Last reply Reply Quote 1
                                        • bbigfordB
                                          bbigford @vhinzsanchez
                                          last edited by

                                          @vhinzsanchez said in Zimbra help..multi-domain each with own external relay:

                                          @dbeato
                                          Wow! You are one of the gems which has set it up correctly.

                                          How? How? How?

                                          0_1519015698097_websearch.png

                                          dbeatoD 1 Reply Last reply Reply Quote 2
                                          • vhinzsanchezV
                                            vhinzsanchez
                                            last edited by

                                            @BBigford yeah, that's it. And no fault of any other. I just can't figure this thing out...luckily, its just a test server (planning for an upgrade...thus the test).

                                            dbeatoD 1 Reply Last reply Reply Quote 1
                                            • 1
                                            • 2
                                            • 3
                                            • 2 / 3
                                            • First post
                                              Last post