PMG does not filter incoming email for zimbra email server

[hakimnorizman]

Hi I installed pmg on a debian server as suggested and i was trying to filter emails only for incoming email, i set the zimbra relay MTA for external delivery to my pmg hostname and port 25. Is it the wrong port?

 

[Stoiko Ivanov]

If you want to filter incoming mail, you usually let your MX record point to your PMG, and have your PMG relay the mail to your downstream mailserver (Zimbra):
https://pmg.proxmox.com/pmg-docs/pm...ation_into_existing_email_server_architecture

setting your Zimbra to sent mails via your PMG is outbound scanning (in that case you need to configure zimbra to send the mails to the internal port of PMG (port 26 in the default config)

If this does not help, please share some logs from PMG (and Zimbra) maybe this might help to understand where the problem is.

 

[hakimnorizman]

Yes, that was the one I am thinking of, but i tried to change my MX record for pmg as primary, but the email sent to my mail domain is missing. I will share later on the logs. In my case:
Zimbra Mail Server: 192.168.1.2 | Public ip: 10.10.10.1
PMG Server: 192.168.1.3 | Public ip: 10.10.10.2

MX record: 10.10.10.2 priority 1
MX record: 10.10.10.1 priority 2

I have setup the zimbra mta to pmg hostname and port 26, it only filters the outgoing email. And the outgoing email have a problem sending them to google, stating pmg.domain does not have a valid ptr records, i was thinking to filter both ingoing and outgoing email.

Here are some of my configuration for PMG and ZIMBRA.

 

[Stoiko Ivanov]

| Public ip: 10.10.10.1

just to be sure - 10.10.10.1 (or any ipv4 starting with 10) is not a public ip! - see rfc1918

I have setup the zimbra mta to pmg hostname and port 26, it only filters the outgoing email.

yes - this part of the configuration is only done for outbound filtering....

d the outgoing email have a problem sending them to google, stating pmg.domain does not have a valid ptr records,

Well - yes - the server which sends out e-mail to the public internet (e.g. to google, microsoft, ....) needs to have a correct DNS-Setup:
* the DNS-entry has to point to it's public IP-address
* the IP-address PTR record needs to point to the same DNS entry

else many servers will reject mails from that machine...

If this does not help - please post some logs - else it's hard to see where the issues are...