Telneting in to Postfix reports back with old host name

Ok - update - a little more digging found me the main.cf file, which I modified to change the myhostname parameter to the correct updated value.

However, I am still getting the 421 4.4.2 Error: timeout exceeded problem.

Do I have to match up my settings at GoDaddy's DNS Manager for my domain to those I set up in the Server App??

Thanks for the help!

grabko.org is the domain.

If I've made a fool of myself, I apologise. I created all the appropriate DNS records on the Server app as well as adjusting the respective records on the GoDaddy DNS manager service within the last 12-15 hours. If this thread is premature that's my fault.

The thing is that I have added a couple of test users in the server app as local users, and tried adding their accounts to the calendar and contact apps without success.

I am using the _caldavs_tcp and _carddavs_tcp DNS service records, but have not received back my trusted certificate yet from GoDaddy. Could this be causing a problem as well?

Also, I don't have a static IP per say (but I have had the same external IP address for over a year now, I had my ISP bridge the cable modem it supplies directly into my Airport Extreme for the purposes of setting up Microsoft RDP for a virtual machine I run Windows on for work, and I use it literally every day) but I do have the proper mail relay server from my ISP set up in the Server app.

Hi Mr. Hoffman, here is an update:

Console shows this when I telnet in to port 25 in the terminal:

04/01/14 17:54:35,681 login[21847]: USER_PROCESS: 21847 ttys000

04/01/14 17:55:10,102 Mail[21433]: GSSAPI Error: Miscellaneous failure (see text (No credentials cache file found (negative cache))

04/01/14 17:55:10,102 Mail[21433]: [<_MCLibSasl2SaslClient: 0x6000004a9000> mechanism: GSSAPI security layer: no] Failed to start the SASL connection

SASL(-1): generic failure: GSSAPI Error: Miscellaneous failure (see text (No credentials cache file found (negative cache))

04/01/14 17:55:10,116 Mail[21433]: GSSAPI Error: Miscellaneous failure (see text (No credentials cache file found (negative cache))

04/01/14 17:55:10,116 Mail[21433]: [<_MCLibSasl2SaslClient: 0x6000004a8be0> mechanism: GSSAPI security layer: no] Failed to start the SASL connection

SASL(-1): generic failure: GSSAPI Error: Miscellaneous failure (see text (No credentials cache file found (negative cache))

04/01/14 17:55:10,127 Mail[21433]: GSSAPI Error: Miscellaneous failure (see text (No credentials cache file found (negative cache))

04/01/14 17:55:10,127 Mail[21433]: [<_MCLibSasl2SaslClient: 0x600000cb9d40> mechanism: GSSAPI security layer: no] Failed to start the SASL connection

SASL(-1): generic failure: GSSAPI Error: Miscellaneous failure (see text (No credentials cache file found (negative cache))

04/01/14 17:55:10,140 Mail[21433]: GSSAPI Error: Miscellaneous failure (see text (No credentials cache file found (negative cache))

04/01/14 17:55:10,140 Mail[21433]: [<_MCLibSasl2SaslClient: 0x6080004b54e0> mechanism: GSSAPI security layer: no] Failed to start the SASL connection

SASL(-1): generic failure: GSSAPI Error: Miscellaneous failure (see text (No credentials cache file found (negative cache))

I have installed my SSL Certificate from GoDaddy.

Also Getting the following in Console:

04/01/14 18:04:59,806 kdc[62640]: AS-REQ ggs.grabko.org$@GGS.GRABKO.ORG from 127.0.0.1:57943 for krbtgt/GGS.GRABKO.ORG@GGS.GRABKO.ORG

04/01/14 18:04:59,808 kdc[62640]: UNKNOWN -- ggs.grabko.org$@GGS.GRABKO.ORG: no such entry found in hdb

04/01/14 18:05:00,294 servermgrd[20002]: nsc_smb XPC: handle_event error : < Connection invalid >

And my sudo postconf -c /Library/Server/Mail/Config/postfix -n output:

alias_maps = hash:/etc/aliases

always_bcc =

biff = no

command_directory = /usr/sbin

config_directory = /Library/Server/Mail/Config/postfix

content_filter = smtp-amavis:[127.0.0.1]:10024

daemon_directory = /usr/libexec/postfix

data_directory = /Library/Server/Mail/Data/mta

debug_peer_level = 2

debugger_command = PATH=/bin:/usr/bin:/usr/local/bin:/usr/X11R6/bin xxgdb $daemon_directory/$process_name $process_id & sleep 5

dovecot_destination_recipient_limit = 1

enable_server_options = yes

header_checks = pcre:/Library/Server/Mail/Config/postfix/custom_header_checks

html_directory = /usr/share/doc/postfix/html

imap_submit_cred_file = /Library/Server/Mail/Config/postfix/submit.cred

inet_interfaces = all

inet_protocols = all

local_recipient_maps = proxy:unix:passwd.byname $alias_maps

mail_owner = _postfix

mailbox_size_limit = 0

mailbox_transport = dovecot

mailq_path = /usr/bin/mailq

manpage_directory = /usr/share/man

message_size_limit = 10485760

mydestination = $myhostname, localhost.$mydomain, localhost, $mydomain

mydomain = grabko.org

mydomain_fallback = localhost

myhostname = server.grabko.org

mynetworks = 127.0.0.0/8

newaliases_path = /usr/bin/newaliases

postscreen_dnsbl_sites = zen.spamhaus.org*2

queue_directory = /Library/Server/Mail/Data/spool

readme_directory = /usr/share/doc/postfix

recipient_canonical_maps = hash:/Library/Server/Mail/Config/postfix/system_user_maps

recipient_delimiter = +

relayhost = smtprelay1.telia.com

sample_directory = /usr/share/doc/postfix/examples

sendmail_path = /usr/sbin/sendmail

setgid_group = _postdrop

smtp_sasl_auth_enable = no

smtp_sasl_password_maps =

smtpd_client_restrictions = permit_mynetworks permit_sasl_authenticated reject_rbl_client zen.spamhaus.org permit

smtpd_enforce_tls = no

smtpd_helo_required = yes

smtpd_helo_restrictions = reject_invalid_helo_hostname reject_non_fqdn_helo_hostname

smtpd_pw_server_security_options = cram-md5,digest-md5,gssapi

smtpd_recipient_restrictions = permit_sasl_authenticated permit_mynetworks reject_unauth_destination check_policy_service unix:private/policy permit

smtpd_sasl_auth_enable = yes

smtpd_tls_CAfile = /etc/certificates/server.grabko.org.1C04ED269951F447E3422EB93680FCEDAE448203.ch ain.pem

smtpd_tls_cert_file = /etc/certificates/server.grabko.org.1C04ED269951F447E3422EB93680FCEDAE448203.ce rt.pem

smtpd_tls_exclude_ciphers = SSLv2, aNULL, ADH, eNULL

smtpd_tls_key_file = /etc/certificates/server.grabko.org.1C04ED269951F447E3422EB93680FCEDAE448203.ke y.pem

smtpd_use_pw_server = yes

smtpd_use_tls = yes

tls_random_source = dev:/dev/urandom

unknown_local_recipient_reject_code = 550

use_sacl_cache = yes

virtual_alias_domains = $virtual_alias_maps

virtual_alias_maps = $virtual_maps

And my sudo serveradmin fullstatus mail:

mail:startedTime = "2014-01-01 11:58:58 +0000"

mail:setStateVersion = 1

mail:state = "RUNNING"

mail:protocolsArray:_array_index:0:status = "ON"

mail:protocolsArray:_array_index:0:kind = "INCOMING"

mail:protocolsArray:_array_index:0:protocol = "IMAP"

mail:protocolsArray:_array_index:0:state = "RUNNING"

mail:protocolsArray:_array_index:0:service = "MailAccess"

mail:protocolsArray:_array_index:0:error = ""

mail:protocolsArray:_array_index:1:status = "OFF"

mail:protocolsArray:_array_index:1:kind = "INCOMING"

mail:protocolsArray:_array_index:1:protocol = "POP3"

mail:protocolsArray:_array_index:1:state = "RUNNING"

mail:protocolsArray:_array_index:1:service = "MailAccess"

mail:protocolsArray:_array_index:1:error = ""

mail:protocolsArray:_array_index:2:status = "ON"

mail:protocolsArray:_array_index:2:kind = "INCOMING"

mail:protocolsArray:_array_index:2:protocol = "SMTP"

mail:protocolsArray:_array_index:2:state = "RUNNING"

mail:protocolsArray:_array_index:2:service = "MailTransferAgent"

mail:protocolsArray:_array_index:2:error = ""

mail:protocolsArray:_array_index:3:status = "ON"

mail:protocolsArray:_array_index:3:kind = "OUTGOING"

mail:protocolsArray:_array_index:3:protocol = "SMTP"

mail:protocolsArray:_array_index:3:state = "RUNNING"

mail:protocolsArray:_array_index:3:service = "MailTransferAgent"

mail:protocolsArray:_array_index:3:error = ""

mail:protocolsArray:_array_index:4:status = "OFF"

mail:protocolsArray:_array_index:4:kind = "INCOMING"

mail:protocolsArray:_array_index:4:protocol = ""

mail:protocolsArray:_array_index:4:state = "STOPPED"

mail:protocolsArray:_array_index:4:service = "ListServer"

mail:protocolsArray:_array_index:4:error = ""

mail:protocolsArray:_array_index:5:status = "ON"

mail:protocolsArray:_array_index:5:kind = "INCOMING"

mail:protocolsArray:_array_index:5:protocol = ""

mail:protocolsArray:_array_index:5:state = "RUNNING"

mail:protocolsArray:_array_index:5:service = "JunkMailFilter"

mail:protocolsArray:_array_index:5:error = ""

mail:protocolsArray:_array_index:6:status = "ON"

mail:protocolsArray:_array_index:6:kind = "INCOMING"

mail:protocolsArray:_array_index:6:protocol = ""

mail:protocolsArray:_array_index:6:state = "RUNNING"

mail:protocolsArray:_array_index:6:service = "VirusScanner"

mail:protocolsArray:_array_index:6:error = ""

mail:protocolsArray:_array_index:7:status = "ON"

mail:protocolsArray:_array_index:7:kind = "INCOMING"

mail:protocolsArray:_array_index:7:protocol = ""

mail:protocolsArray:_array_index:7:state = "RUNNING"

mail:protocolsArray:_array_index:7:service = "VirusDatabaseUpdater"

mail:protocolsArray:_array_index:7:error = ""

mail:logPaths:Server Error Log = "/Library/Logs/Mail/mail-err.log"

mail:logPaths:IMAP Log = "/Library/Logs/Mail/mail-info.log"

mail:logPaths:Server Log = "/Library/Logs/Mail/mail-info.log"

mail:logPaths:POP Log = "/Library/Logs/Mail/mail-info.log"

mail:logPaths:SMTP Log = "/var/log/mail.log"

mail:logPaths:List Server Log = "/Library/Logs/Mail/listserver.log"

mail:logPaths:Migration Log = "/Library/Logs/MailMigration.log"

mail:logPaths:Virus Log = "/Library/Logs/Mail/clamav.log"

mail:logPaths:Amavisd Log = "/Library/Logs/Mail/amavis.log"

mail:logPaths:Virus DB Log = "/Library/Logs/Mail/freshclam.log"

mail:imapStartedTime = "2014-01-01 11:58:58 +0000"

mail:postfixStartedTime = "2014-01-01 11:59:32 +0000"

mail:servicePortsRestrictionInfo = _empty_array

mail:servicePortsAreRestricted = "NO"

mail:connectionCount = 0

mail:readWriteSettingsVersion = 1

mail:serviceStatus = "ENABLED"

I am only running one zone for the domain, my mind is boggled...

Thanks a lot, Mr. Hoffman!

Nuking and paving is not a big deal because I am setting it up for the first time, there is nothing to lose really. I just want to make sure I really have nuked everything properly so I can start with a clean slate, can you give me a couple of pointers on that?

My ouput for the internal network is:

server:~ myopicpaideia$ dig +short -x 10.0.1.254

server.grabko.org.

I used the guide at yes>/dev/null - here - in the first place, and followed the advice given there. I set up in this order:

1. DNS - confirmed everything was good
2. Open Directory - followed the guide and verified everything was working as per instructed
3. Mail Service
4. Calendar Service
5. Contacts Service

I think something may have been askew because of legacy playing around I did a couple of years ago when I first got the machine? Can I wipe the slate clean without having to wipe the Mac mini completely?

Is the public DNS the one at GoDaddy? I will go and double check it is pointing right!

Just want to add that my router configuration is a bridged ISP cable modem into a latest generation 2TB Airport Extreme Timecapsule.

Currently, when I go into the Airport Extremes settings via Airport Utility it says DHCP and NAT. Am I using a NAT'd network, and should I change it to DHCP only?

The public DNS is pointing to my LAN's public IP address - my local DNS is supposed to translate that on to my private IP address, correct? And it appears to be doing so for my MX record, but not my server?

My DNS is responding correctly to -checkhostname - it has from the start, that is what is odd.

Thank you for the reply as well, much appreciated.

Are you saying that the public address doesn't resolve back to my domain but rather the domain that my ISP has set up for that block of public IP addresses?

That this output:

server:~ myopicpaideia$ dig +short -x 213.66.19.121

213-66-19-121-no132.tbcn.telia.com

Should read:

server:~ myopicpaideia$ dig +short -x 213.66.19.121

server.grabko.org

Would this be resolved by requesting a static IP from my ISP? Or could I portforward port 25 into my server using my AirPort Extreme to address this issue?

Am I delusional in thinking that just because I have had the same public IP for well over a year, and it will not change unless I refresh my DHCP lease from the ISP (or become disconnected for longer than a few minutes) that I do not really absolutely need a static IP (I could just stop and restart the services with the corrected DNS records and it would be good to go again?)?

As for securing it properly, I am going to be relaying all mail traffic through my ISP's mail relay server as seen above in my postconf output. I also will be using Server.app's junk mail and virus filtering options, as well as SSL.

Is this what you mean by secureing it properly? Or did you mean something else?

Again, thank you both so much for the help, I really do appreciate it very much!

If my ISP won't do reverse DNS or give me a static IP without going up to some kind of corporate service, can I use something like DynDNS to fix this? I know they have a dynamic DNS service...