Zimbra Proxy not listening to port 443

[mpodpora]

Hi,

we upgrade our zimbra server to ver 8.7.11 and we have to install proxy and memcached. After install we can't access webgui from 443 but we have to go to port 8443.

- Proxy service is running
- Memcached service is running
- lsof -i :443 show nothing
- zmprov gs `zmhostname` zimbraReverseProxySSLToUpstreamEnabled zimbraReverseProxyLookupTarget zimbraReverseProxyHttpEnabled zimbraMailReferMode zimbraMailPort zimbraMailProxyPort zimbraMailSSLPort zimbraMailSSLProxyPort zimbraMailMode zimbraReverseProxyMailEnabled zimbraReverseProxyMailMode zimbraImapBindPort zimbraImapProxyBindPort zimbraImapSSLBindPort zimbraImapSSLProxyBindPort zimbraImapCleartextLoginEnabled zimbraPop3BindPort zimbraPop3ProxyBindPort zimbraPop3SSLBindPort zimbraPop3SSLProxyBindPort zimbraPop3CleartextLoginEnabled zimbraAdminPort zimbraAdminProxyPort zimbraReverseProxyAdminEnabled

# name zimbra.mydomain.com
zimbraAdminPort: 7071
zimbraAdminProxyPort: 9071
zimbraImapBindPort: 7143
zimbraImapCleartextLoginEnabled: TRUE
zimbraImapProxyBindPort: 143
zimbraImapSSLBindPort: 7993
zimbraImapSSLProxyBindPort: 993
zimbraMailMode: https
zimbraMailPort: 8080
zimbraMailProxyPort: 80
zimbraMailReferMode: reverse-proxied
zimbraMailSSLPort: 8443
zimbraMailSSLProxyPort: 443
zimbraPop3BindPort: 7110
zimbraPop3CleartextLoginEnabled: TRUE
zimbraPop3ProxyBindPort: 110
zimbraPop3SSLBindPort: 7995
zimbraPop3SSLProxyBindPort: 995
zimbraReverseProxyAdminEnabled: FALSE
zimbraReverseProxyHttpEnabled: TRUE
zimbraReverseProxyLookupTarget: TRUE
zimbraReverseProxyMailEnabled: TRUE
zimbraReverseProxyMailMode: https
zimbraReverseProxySSLToUpstreamEnabled: TRUE


- zmprov gs `zmhostname` | grep MailMode
zimbraMailMode: https
zimbraReverseProxyMailMode: https


- zmprov desc -a zimbraMailMode
zimbraMailMode
whether to run HTTP or HTTPS or both/mixed mode or redirect mode. See
also related attributes zimbraMailPort and zimbraMailSSLPort

type : enum
value : http,https,both,mixed,redirect
callback : LocalBind
immutable : false
cardinality : single
requiredIn :
optionalIn : server,globalConfig
flags : serverInherited
defaults :
min :
max :
id : 308
requiresRestart :
since :
deprecatedSince :


- zmprov desc -a zimbraReverseProxyMailMode
zimbraReverseProxyMailMode
whether to run proxy in HTTP, HTTPS, both, mixed, or redirect mode.
See also related attributes zimbraMailProxyPort and
zimbraMailSSLProxyPort

type : enum
value : http,https,both,mixed,redirect
callback :
immutable : false
cardinality : single
requiredIn :
optionalIn : server,globalConfig
flags : serverInherited
defaults :
min :
max :
id : 685
requiresRestart : nginxproxy
since : 5.0.7
deprecatedSince :

evrything is OK accept this "optionalIn=server,globalConfig" order is changed. I checked with other instalations and is always "optionalIn : globalConfig,server"

Please, where to look for misconfiguration or error to debug this problem. Thanks.

[jorgedlcruz]

Hello,
Quick question, are you trying to access using IP, or a FQDN which is the same as the server hostname?

Best regards

[mpodpora]

We try to access server both from IP and domain and the resault is the same. Proxy just not listening on port 443 but it should. We have also registerd certificate from Let's Encrypt for our domain and it's valid.
What is all config files for proxy. Because we compare probably most of the config files from other instalations and we can't find diference. What information can we provide for you to look in to it.

Thanks for your time and help,
Best Regards

[mpodpora]

We checked:
/opt/zimbra/conf/nginx.conf
/opt/zimbra/conf/nginx/includes/nginx.conf.web
and
/opt/zimbra/conf/nginx/includes/nginx.conf.web.https
/opt/zimbra/conf/nginx/includes/nginx.conf.web.https.default
because only this config files are included in /opt/zimbra/conf/nginx/includes/nginx.conf.web (we only have https access)

[mpodpora]

Hi

I found the error. Somehow there was # in front of "include /opt/zimbra/conf/nginx/includes/nginx.conf.web;" line in file /opt/zimbra/conf/nginx.conf.
After I remove this # and restart service everithing is OK.