Page 1 of 1
Connection refused from <external server> ?
Posted: Thu Jan 10, 2008 12:49 pm
by maraboshi
Hi all,
just installed Scalix 11.3
It's meant to be replacement to an old server.
I gave it same IP and it's managing the same mail domain.
Hostname is different, the one I used is actually the same defined in the external DNS server as the MX record for mydomain while the old server's hostname has a FQDN in a different domain.
I can receive mail from anywhere but anything I write it's not being delivered and maillog says "connection refused by gsmtp183.google.com" and so on for any mail I try to send.
Please help...I'm a paying customer.
TIA
Marco
Posted: Fri Jan 11, 2008 3:12 am
by Valerion
Can you telnet to the remote mail server on port 25? If not, it's a firewall issue (on your machine/network or the ISP). Do a host -t mx <domain name> and check the server address. You may have to relay mail through your ISP, search on here for SMARTHOST. Also verify that DNS is working correctly.
Posted: Fri Jan 11, 2008 7:11 am
by maraboshi
Valerion wrote:Can you telnet to the remote mail server on port 25? If not, it's a firewall issue (on your machine/network or the ISP). Do a host -t mx <domain name> and check the server address. You may have to relay mail through your ISP, search on here for SMARTHOST. Also verify that DNS is working correctly.
I can telnet no problem, there is no firewall as both servers are in the same network managed by us, no iptables or stuff. The external firewall is also managed by us and there is no rule to block email services.
Now I gave the same exact name and IP of the old server and still I've got connection refused by the remote server (gmail in this case).
Already checked the DNS and it's correct, reporting mail.mydomain.com as the MX record.
Only thing I need to check is the relay but as far as I know we're not using it.
I'll have a look on that then...thanks a lot.
Marco
Posted: Fri Jan 11, 2008 7:24 am
by Valerion
I've just tried it from my own PC, and I get the following:
telnet gsmtp183.google.com 25
Trying 64.233.183.27...
Connected to gsmtp183.google.com (64.233.183.27).
Escape character is '^]'.
220 mx.google.com ESMTP d24si2812410nfh.19
quit
221 2.0.0 mx.google.com closing connection d24si2812410nfh.19
Connection closed by foreign host.
So google is definitely not blocking it. And you say you can telnet there as well, whichis good. In your sendmail config file have you set up any smarthosts that can influence this?
Maybe post a portion of the sendmail logs that shows the error, it may contain other useful information.
Posted: Fri Jan 11, 2008 7:50 am
by maraboshi
Valerion wrote:I've just tried it from my own PC, and I get the following:
telnet gsmtp183.google.com 25
Trying 64.233.183.27...
Connected to gsmtp183.google.com (64.233.183.27).
Escape character is '^]'.
220 mx.google.com ESMTP d24si2812410nfh.19
quit
221 2.0.0 mx.google.com closing connection d24si2812410nfh.19
Connection closed by foreign host.
So google is definitely not blocking it. And you say you can telnet there as well, whichis good. In your sendmail config file have you set up any smarthosts that can influence this?
Maybe post a portion of the sendmail logs that shows the error, it may contain other useful information.
What...I tried to telnet same google host from the console and it says straight connection refused?
I've also put the smarthost thing as explained in
http://www.scalix.com/wiki/index.php?ti ... ntegration without the authentication part which I'm sure we don't use and result is the same. No change in the logs.
I'll check the external firewall again and I'll post the maillog lines...
Thanks again.
Posted: Fri Jan 11, 2008 8:49 am
by Valerion
This does indeed sound like a firewall problem. Hope you can get it sorted out.
Posted: Fri Jan 11, 2008 12:48 pm
by maraboshi
Valerion wrote:This does indeed sound like a firewall problem. Hope you can get it sorted out.
...and it wasn't..
Speeaking with the collegue who installed the other server I found out I needed to relay on the third server inside the building (not the ISP's).
And that was it...
Thanks a lot!
Marco