Connect. Communicate. Collaborate. Securely.

Home » Kerio User Forums » Kerio Connect » Postini Outgoing (Setting up outgoing relay through postini)
  •  
mactech

Messages: 19
Karma: 0
Send a private message to this user
We're seeing an odd issue: Outgoing relays through Postini are configured in the Postini control panel (CP). Part of the setup process is setting up and testing so-called re-injection hosts. This is a server that does allow relaying outbound mail from the postini servers.

These servers are being tested for relaying as you save the data in the control panel, however the test and subsequent setup fails. I have verified that even with (briefly) opening up Kerio Connect (KC) as an open relay, the test will fail and have got Google/Postini's engineers to do a terminal SMTP session form their servers successfully.

It seems that KC just does not "like" SMTP traffic from Postini's servers. We have successfully set this up in instances of KC 7.2 and 7.4, the server in question is 7.3.

Any ideas?
  •  
freakinvibe

Messages: 1542
Karma: 62
Send a private message to this user
You have to enable SMTP Server and Client messages on the debug log and post the relevant snippets here.

Dexion AG - The Blackberry Specialists in Switzerland
https://dexionag.ch
  •  
mactech

Messages: 19
Karma: 0
Send a private message to this user
[17/Jul/2012 08:13:16][3016757248] {smtps} Task 339885 handler BEGIN
[17/Jul/2012 08:13:16][3016757248] {smtps} Task 339885 handler starting
[17/Jul/2012 08:13:16][3016757248] {smtps} SMTP server session begin; client connected from exprod8ac116.postini.com:45847
[17/Jul/2012 08:13:16][3016757248] {smtps} Looking up address 64.18.3.18 in DNS blacklist SpamCop...
[17/Jul/2012 08:13:16][3016757248] {smtps} Address 18.3.18.64.bl.spamcop.net not found in DNS blacklist SpamCop
[17/Jul/2012 08:13:16][3016757248] {smtps} Looking up address 64.18.3.18 in DNS blacklist SpamHaus SBL-XBL...
[17/Jul/2012 08:13:16][3016757248] {smtps} Address 18.3.18.64.zen.spamhaus.org not found in DNS blacklist SpamHaus SBL-XBL
[17/Jul/2012 08:13:16][3016757248] {smtps} Looking up address 64.18.3.18 in DNS blacklist WPBL - Weighted Private Block List...
[17/Jul/2012 08:13:16][3016757248] {smtps} Address 18.3.18.64.db.wpbl.info not found in DNS blacklist WPBL - Weighted Private Block List
[17/Jul/2012 08:13:16][3016757248] {smtps} Sent SMTP greeting to exprod8ac116.postini.com:45847
[17/Jul/2012 08:14:09][3018870784] {smtps} Task 339886 handler BEGIN
[17/Jul/2012 08:14:09][3018870784] {smtps} Task 339886 handler starting
[17/Jul/2012 08:14:09][3018870784] {smtps} SMTP server session begin; client connected from exprod8mx225.postini.com:49490
  •  
mactech

Messages: 19
Karma: 0
Send a private message to this user
The really strange thing is that I am getting the laundered incoming email from the same postini systems just fine. What is really missing is a debug procedure on the other (postini) side - received SMTP status messages would be helpful...
  •  
freakinvibe

Messages: 1542
Karma: 62
Send a private message to this user
You should probably disable spam checking against all Postini servers. Looking up their IPs in the Blacklists serves no purpose.

It looks like the Postini server doesn't answer your SMTP ready prompt. Is there anything inbetween your Kerio Connect server and the Internet, any firewall that does "SMTP checking"?

[Updated on: Tue, 17 July 2012 14:40]


Dexion AG - The Blackberry Specialists in Switzerland
https://dexionag.ch
  •  
mactech

Messages: 19
Karma: 0
Send a private message to this user
The Postini servers are in my Spam Whitelist, however, they pass the tests and help me make the conncetions more "visible" in the logs. Turning off Blacklists makes no difference. Spam Repellent (SMTP delay) is off. No SMTP Proxy is running on the firewall - port 25 is NAT'ed straight through and working, since I am receiving incoming (non-relayed) mail from the same Postini systems.
  •  
freakinvibe

Messages: 1542
Karma: 62
Send a private message to this user
If I look at the instructions from Postini:

http://www.google.com/support/enterprise/static/postini/docs /admin/en/outbound/intro_reinjection.html

you just have to add their email security service to your Trusted Hosts and allow relaying for them.

Dexion AG - The Blackberry Specialists in Switzerland
https://dexionag.ch
  •  
mactech

Messages: 19
Karma: 0
Send a private message to this user
Yes, I've done that, obviously! Wink

[Updated on: Tue, 17 July 2012 21:59]

Previous Topic: Apple Mail issues - disappearing messages
Next Topic: Cisco PBX and KC and LDAP
Goto Forum:
  


Disclaimer:
Kerio discussion forums are intended for open communication between forum members and may contain information and material posted by members which may be useful in learning about Kerio products. The discussion forums are not intended to provide technical support for any specific product. Any information implied or expressed in the discussion forums is that of the posting member. Kerio is in no way responsible for the information posted in the forums, or its accuracy. Kerio employees may participate in the discussions, but their postings do not represent an offical position of the company on any issues raised or discussed. Kerio reserves the right to monitor and maintain the forums to promote free and accurate exchange of information.

Current Time: Fri Oct 20 14:27:38 CEST 2017

Total time taken to generate the page: 0.00435 seconds
.:: Contact :: Home ::.
Powered by: FUDforum 3.0.4.