Hi,
I am new to zimbra, this is the version that I have installed 5.01 RHEL5.FOSS.
Everything are okay but I failed to customize the following:
What I would to achieve is in a domain, let says, "mydomain.com", there are 2 users; "test1@mydomain.com" and "test2@mydomain.com". I would like the user "test1" able to send mail within this domain only, "mydomain.com" and "test1" is not allowed to receive any external mail (from Internet).
As for user "test2", there is no restriction at all.

I have been successful in restricting user "test1" to send external mail but I can't figure out how to make it deny receiving external mail.

For the last few hours I have been reading on the zimbra's wiki and found these 2 posting
Restrict sending to certain domains - Zimbra :: Wiki
RestrictPostfixRecipients - Zimbra :: Wiki
There are quite close to what I wanted to do but I dont how to put them together.

Can some expert help?


The following are some config file:
main.cf
sender_canonical_maps = ldap:/opt/zimbra/conf/ldap-scm.cf
virtual_alias_domains = ldap:/opt/zimbra/conf/ldap-vad.cf
recipient_delimiter =
smtpd_tls_cert_file = /opt/zimbra/conf/smtpd.crt
smtpd_tls_auth_only = yes
myhostname = nmsc.mydomain.com
virtual_mailbox_domains = ldap:/opt/zimbra/conf/ldap-vmd.cf
mydestination = localhost
mailbox_size_limit = 0
smtpd_client_restrictions = reject_unauth_pipelining
virtual_alias_maps = ldap:/opt/zimbra/conf/ldap-vam.cf
transport_maps = ldap:/opt/zimbra/conf/ldap-transport.cf
sendmail_path = /opt/zimbra/postfix-2.4.3.3z/sbin/sendmail
message_size_limit = 10240000
broken_sasl_auth_clients = yes
alias_maps = hash:/etc/aliases
manpage_directory = /opt/zimbra/postfix-2.4.3.3z/man
smtpd_helo_required = yes
daemon_directory = /opt/zimbra/postfix-2.4.3.3z/libexec
virtual_transport = error
mynetworks = 127.0.0.0/8 192.168.162.0/24
smtpd_recipient_restrictions = reject_non_fqdn_recipient, permit_sasl_authenticated, permit_mynetworks, reject_unauth_destination, reject_unlisted_recipient, reject_invalid_hostname, reject_non_fqdn_sender, permit
smtpd_tls_loglevel = 1
relayhost =
disable_dns_lookups = no
content_filter = smtp-amavis:[127.0.0.1]:10024
virtual_mailbox_maps = ldap:/opt/zimbra/conf/ldap-vmm.cf
version = 2.4.3.3z
mailq_path = /opt/zimbra/postfix-2.4.3.3z/sbin/mailq
header_checks = pcre:/opt/zimbra/conf/postfix_header_checks
smtpd_use_tls = yes
queue_directory = /opt/zimbra/postfix-2.4.3.3z/spool
newaliases_path = /opt/zimbra/postfix-2.4.3.3z/sbin/newaliases
smtpd_reject_unlisted_recipient = no
smtpd_data_restrictions = reject_unauth_pipelining
smtpd_tls_key_file = /opt/zimbra/conf/smtpd.key
command_directory = /opt/zimbra/postfix-2.4.3.3z/sbin
smtpd_sasl_auth_enable = yes
smtpd_sender_restrictions = check_sender_access hash:/opt/zimbra/conf/tpmail_senders
smtpd_restriction_classes = restrict_tpmail
restrict_tpmail = check_recipient_access hash:/opt/zimbra/conf/tpmail_recipients, reject
permitted_senders_list = reject_non_fqdn_recipient, permit_sasl_authenticated, permit_mynetworks, reject_unauth_destination, reject_unlisted_recipient, reject_invalid_hostname, reject_non_fqdn_sender, permit
[root@zimbra conf]# cat tpmail_senders
test1@mydomain.com restrict_tpmail
[root@zimbra conf]# cat tpmail_recipients
mydomain.com OK