Hi - I hope you can help with this - apologies in advance for level of detail..
I have taken on support of a Mitel 6000 (6.0.1) server installed by a UK Mitel reseller. Mitel 6000 is SME Server 6.0.1 with support from Mitel's AMC for key aspects of management. The reseller has gone out of business and stopped supporting the product and has asked me to carry on from where he left off. Thing is, its a bit of a dog's dinner....
I have a history from the reseller's reports about what they had done over the last 4 years... here's my view, in bullet form, and you might find the network diagram attached helpful.
http://www.tapiochre.co.uk/bdimages/dnsprob.png- The server was installed in 2002, in Server/Gateway mode.
- The server primary domain was configured as (for the purpose of this example) "xzy.com"
- The Mitel AMC was not and is still not publishing the xyz.com domain, this was being done by Demon Internet in the UK.
- Customer has a single, BT allocated fixed IP address (let's call it 200.200.200.200 for this example) on the ADSL
router's WAN port.
- The server's external LAN IP is set up in the router config as a "DMZ" IP address, so all traffic for the server
is passed straight through the router to the server. (Works fine)
- Until 2 weeks ago week, the ISP DNS records pointed the xzy.com doamin to an external address of (example) 100.100.100.100
(this IP was on their own webspace)
- The website (
www.xyz.com) was hosted at that same IP address of 100.100.100.100
- The ISP MX record pointed email for xyz.com to 200.200.200.200 for mail delivery staright to the server.
[So, at this stage, mail for xzy.com was arriving at the server properly and web access was routing to the
web service at the ISP location 100.100.100.100.]
[The downside was that if the customer needed to visit
www.xyz.com , then the browser would land on the server's primary webpage (which was unpopulated so they saw "Information Bay: This information bay has not yet been customized."]
[To get to their website from the server's LAN side, they had to either browse to 100.100.100.100 or they set up the
"hosts" file on their PCs to have an entry to force requests to
www.xyz.com to that IP address.]
- Three weeks ago, thay had a new website built and moved it from 100.100.100.100 to a new hosting place on a new IP of (example) 90.90.90.90.
- DNS records were updated and the website became visible in 24 hours for public viewing.
- The MX record was unchanged so email would continue to route to 200.200.200.200.
[This still meant that in-house users had to browse to 90.90.90.90 to see their own website or edit the hosts file]
- Reseller reconfigured the server primary domain name to "abc.com", so that requests from local LAN users out to "xyz.com" would pass from the
server out to the public internet. This worked ok after the reboot.
- Within a few hours of the domain name change, reports were arriving that emails entering the serverwere being bounced back
with the following error message:
"Hi. This is the qmail-send program at [thesendingemailserver.co.uk]
I'm afraid I wasn't able to deliver your message to the following addresses.
This is a permanent error; I've given up. Sorry it didn't work out.
<goodusername@xyz.com>:
200.200.200.200 does not like recipient.
Remote host said: 553 Sorry, that domain isn't in my list of allowed rcpthosts.
Giving up on 200.200.200.200."
- The reseller set the primary domain in the server back to xyz.com and the email bounces stopped.
- Reseller stops supporting the customer when they went out of business.
- I was contacted to see if I could help.
So there you have the potted history.
I'm not sure what is going on here - I'm clearly missing something!! I have read other mails about Error 553 and see reference to "relaying", but am not sure what I ought to do to configure this properly. I also can't seem to find any clear guidelines in the manual about this type of configuration (which cannot be a rare - surely?)
I'd rather not go messing around with the server config until I know exactly why why email for user@xyz.com is bounced if the primary domain is abc.com, even though the ISP MX record points all mail for xyz.com points to the 200.200.200.200 IP address. (Like I say - I need advice and help here!!)
Sorry if this is long winded, but I needed to give as much info as I could to get the best help from you guys.
Look forward to you help soon.
Chris