Puzzling HELO Rejects

Discuss your pilot or production implementation with other Zimbra admins or our engineers.
Post Reply
Jeffro77
Posts: 28
Joined: Fri Sep 12, 2014 10:04 pm

Puzzling HELO Rejects

Post by Jeffro77 »

I have very little postfix experience; please be gentle.
I'm seeing random odd rejects in my zimbra.log:
[quote]Feb 2 13:08:36 webmail postfix/smtpd[7819]: connect from 062.fictionwise.com[206.137.17.62]

Feb 2 13:08:36 webmail postfix/smtpd[7819]: NOQUEUE: reject: RCPT from 062.fictionwise.com[206.137.17.62]: 450 : Helo command rejected: Host not found; from= to= proto=ESMTP helo=

Feb 2 13:08:36 webmail postfix/smtpd[7819]: disconnect from 062.fictionwise.com[206.137.17.62][/quote]
If, however, I do an nslookup, the host is (generally) found:
[quote][root@webmail ~]# nslookup 062.fictionwise.com

Server: 192.168.2.29

Address: 192.168.2.29#53
Non-authoritative answer:

Name: 062.fictionwise.com

Address: 206.137.17.62[/quote]

and a reverse lookup also works:
[quote][root@webmail ~]# nslookup 206.137.17.62

Server: 192.168.2.29

Address: 192.168.2.29#53
Non-authoritative answer:

62.17.137.206.in-addr.arpa name = 062.fictionwise.com.[/quote]

What am I missing?
marcmac
Elite member
Elite member
Posts: 2091
Joined: Fri Sep 12, 2014 9:53 pm

Puzzling HELO Rejects

Post by marcmac »

did you disable dns lookups in your postfix install?
Jeffro77
Posts: 28
Joined: Fri Sep 12, 2014 10:04 pm

Puzzling HELO Rejects

Post by Jeffro77 »

Currently, lookups are enabled. I'm at work, and can't make access out thru our firewall on port 7071.
And that raises two more questions...
1) How can I reset the "management port" away from 7071 to something like 8080?
2) Is the lookups flag something I can toggle at the command line? I have access to SSH.
-j
bobby
Outstanding Member
Outstanding Member
Posts: 515
Joined: Fri Sep 12, 2014 10:01 pm

Puzzling HELO Rejects

Post by bobby »

the question is...why is 062.fictionwise.com introducing itself as fwmail.NJCHATHAM?
you can explore the command line like this:
zmprov gacf | grep -i lookup

zmprov gs | grep -i lookup
so you can enable/disable lookups:

zmprov ms zimbraMtaDnsLookupsEnabled FALSE (or TRUE)
i think you still have to edit the tomcat server.xml in order to change the admin console port number, though there is a zimbraAdminPort config parameter
Jeffro77
Posts: 28
Joined: Fri Sep 12, 2014 10:04 pm

Puzzling HELO Rejects

Post by Jeffro77 »

Thank you bobby, I missed that.
Marcmac, I disabled DNS checks in the global MTA tab, and the mail is coming through now.
Post Reply