Results 1 to 6 of 6

Thread: Internal server address visible on header.

  1. #1
    Join Date
    Nov 2005
    Posts
    51
    Rep Power
    9

    Default Internal server address visible on header.

    I was having some issues sending/recieving email to outside mail address's (gmail, hotmail) when I started poking around and looking at the headers coming from our server I noticed that our internal mail server nat address was in the header when I looked at the mail on my hotmail account. Thinking that this was incorrect I opened a case with support and the response I got was that this was completely normal. After looking at mail from 10 other mail servers I found none of them had the internal nat address in the header. My question is how many other zimbra customers/users are seeing their servers sending out internal nat address's? And if so what needs to be changed on my config to resolve the problem. Any feedback would be helpfull.

  2. #2
    phoenix is offline Zimbra Consultant & Moderator
    Join Date
    Sep 2005
    Location
    Vannes, France
    Posts
    23,587
    Rep Power
    58

    Default

    If you mean the headers in this post they are perfectly normal. That 127.0.0.1 address is the loopback address and isn't an internal NAT address, mail from my server looks exactly the same as that and I'm not having problems. The reason you'll find 127.0.0.1 in the ehaders is that's the ip address zimbra uses to pass stuff between the components such as amavisd-new in the case of your other post.
    Regards


    Bill


    Acompli: A new adventure for Co-Founder KevinH.

  3. #3
    dijichi2 is offline OpenSource Builder & Moderator
    Join Date
    Oct 2005
    Posts
    1,176
    Rep Power
    12

    Default

    I think possibly he's referring to his server's internal IP address as opposed to the external IP mapped through NAT. In this case, it's perfectly normal for the headers to show the internal IP - there's no way of the server inserting NAT ip's without some seriously questionable resolver setup. It won't hurt sending emails to the outside. have a look in the logs for the real reason.

  4. #4
    Join Date
    Nov 2005
    Posts
    51
    Rep Power
    9

    Default

    It shows my 10.10.x.x address in the header on the mail sent from my zimbra server to the outside mail server when I look at the mail from the outside server.

    By this thinking anyone that recieves mail from our server could get the internal address without a problem. Wouldnt that be a security issue?

  5. #5
    phoenix is offline Zimbra Consultant & Moderator
    Join Date
    Sep 2005
    Location
    Vannes, France
    Posts
    23,587
    Rep Power
    58

    Default

    I'm surprised it shows that address but, no, it's not a security issue. Internal addresses are non-routable and you're behind NAT anyway. Besides, if you have port 25 open to your mail server isn't that a security issue?
    Regards


    Bill


    Acompli: A new adventure for Co-Founder KevinH.

  6. #6
    dijichi2 is offline OpenSource Builder & Moderator
    Join Date
    Oct 2005
    Posts
    1,176
    Rep Power
    12

    Default

    the only security issue is that it exposes a tiny amount of your internal logical network infrastructure - it's for this reason for instance you should always disable public zone dumping on your dns server. but in this case it's unavoidable (well, it's possible but difficult) and a very small risk.

Similar Threads

  1. initializing ldap...FAILED(256)ERROR
    By manjunath in forum Installation
    Replies: 39
    Last Post: 06-07-2013, 10:27 AM
  2. Zimbra fails after working for 2 weeks
    By Linsys in forum Administrators
    Replies: 10
    Last Post: 10-07-2008, 12:42 AM
  3. need advice on configuring zimbra to work with fax server
    By pheonix1t in forum Administrators
    Replies: 0
    Last Post: 07-11-2007, 07:46 PM
  4. 3.0 to 4.5.3 Upgrade failed (mysql error)
    By dealt in forum Installation
    Replies: 35
    Last Post: 03-19-2007, 10:30 PM
  5. Error 256 on Installation
    By RuinExplorer in forum Installation
    Replies: 5
    Last Post: 10-19-2006, 09:19 AM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •