Configure internal zimbra server to use external server to send mails?

bathory · 02-19-2010, 04:19 AM

Quote:

Only solution given was to configure SMTP authentication which I already have done. I have configured my zimbra to use SMTP authentication while sending emails from go daddy server using my account.

Can you send email from a mail client using godaddy as outgoing mail server and your credentials?
Also what gives:

Code:

dig mx yourdomain.com

linuxlover.chaitanya · 02-19-2010, 04:20 AM

Bathory,

In this error

Code:

host smtpout.where.secureserver.net[72.167.82.80] said: 553 Sorry, that domain
    isn't in my list of allowed rcpthosts. (in reply to RCPT TO command)

What does that domain refers to? Is the receiver? Like gmail or yahoo I am trying to send to?

linuxlover.chaitanya · 02-19-2010, 04:23 AM

Yes I can. I am using thunderbird as my email client and no just me but all our organizational employees use Outlook Office.

And this is the outcome of the dig command.

Code:

dig mx inspirebridge.com

; <<>> DiG 9.3.6-P1-RedHat-9.3.6-4.P1.el5_4.2 <<>> mx inspirebridge.com
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 24360
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;inspirebridge.com.		IN	MX

;; ANSWER SECTION:
inspirebridge.com.	3600	IN	MX	0 smtp.secureserver.net.
inspirebridge.com.	3600	IN	MX	10 mailstore1.secureserver.net.

;; Query time: 540 msec
;; SERVER: 192.168.2.2#53(192.168.2.2)
;; WHEN: Fri Feb 19 15:39:48 2010

linuxlover.chaitanya · 02-19-2010, 04:24 AM

Hey just a minute. Is it because that my internal domain name is different from the Live domain that has been hosted by go daddy?

bathory · 02-19-2010, 04:34 AM

Quote:

What does that domain refers to? Is the receiver? Like gmail or yahoo I am trying to send to?

Exactly

Quote:

Hey just a minute. Is it because that my internal domain name is different from the Live domain that has been hosted by go daddy?

AFAIK to authenticate you need to use a username like: user@domain.com and a password and I guess the domain.com should be the same as the one registered with godaddy.

linuxlover.chaitanya · 02-19-2010, 05:38 AM

As you said to authenticate, I am using a username that is available and on a domain registered with go daddy.
My domain registered is inspirebridge.com. And the user name I am using for SMTP authentication say user@inspirebridge.com is actually there and is already in use on one of our systems.
But the internal domain is say inspirebridge.com.local. Can this be done?
I will use user and password registered with go daddy to authenticate their SMTP server.

bathory · 02-19-2010, 06:01 AM

I think you should re-read the "Enabling SMTP authentication" in the 1st link I gave you and especially the part:

Quote:

Configure postfix to use the outgoing servername rather than the canonical server name:

postconf -e smtp_cname_overrides_servername=no

smtp_cname_overrides_servername=no is used because many smtp servers forward the connection different server than the one set in the smtp_sasl_password_maps file.

Example of the problem :

/opt/zimbra/conf/relay_password :

smtp.gmail.com username@gmail.com

assword

but postfix connects to gmail-smtp.l.google.com

Postfix will not send the authentication info contained in smtp_sasl_password_maps file because it as no entry for the server gmail-smtp.l.google.com but has one for smtp.gmail.com

linuxlover.chaitanya · 02-19-2010, 07:26 AM

I think I advanced a bit but there is this problem now

Quote:

Host refused to talk to me. Your access to this mail system has been rejected due to the sending MTA's poor reputation. If you believe this is in error, please contact the intended recipient via alternate means.

bathory · 02-19-2010, 07:38 AM

Who is giving this response? godaddy or the final destination smtp server?

linuxlover.chaitanya · 02-19-2010, 07:58 AM

Edit:
Here is the message that I can see in zimbra message queue. it is not the final destination smtp server but the go daddy server it seems

Quote:

host smtp.where.secureserver.net refused to talk to me: 554-p3pismtp01-003.prod.phx3.secureserver.net 554 your access to this mail system has been rejected due to the sending mts's poor reputation. If you believe this failure is in error, please contact the intended recipient via alternate means.

bathory · 02-19-2010, 08:35 AM

It is not your end, but what is says is that your smtp server was refused due to poor reputation (meaning spam suspect).
Is p3pismtp01-003.prod.phx3.secureserver.net also a godaddy server? I guess you should contact them.

linuxlover.chaitanya · 02-19-2010, 11:35 PM

I guess yes. That is also a go daddy server. I thought it could be that my internal server was blacklisted but the internal server is not online. Let me check out with go daddy guys what they have to say about this.

linuxlover.chaitanya · 02-20-2010, 12:43 AM

Thanks bathory for keeping up with me. I have finally been able to send the mails using the external go daddy server and my domain user registered with go daddy from internal zimbra server.
There are some changes that I tried though from my side. One is that I did not use the cname and instead used smtpout.secureserver.net itself rather than the canonical name smtpout.where.secureserver.net. And go daddy uses port 80 for relaying.
In addition, while I do not configure tls or ssl authentication in mail clients (thunderbird or outlook), I had to do that here.

I would mark this thread solved once the changes are persistent.