Results 1 to 8 of 8

Thread: access control on distribution list

  1. #1
    Join Date
    Sep 2009
    Posts
    5
    Rep Power
    6

    Angry access control on distribution list

    hi all,

    recently i join an org. where we are using zimbra 5.0 for internal mailing service....
    i want to set the access permission for my distribution list like (all@mydomain.com) for few of my user only not for all who are in the list or not, i had strictly followed all steps from RestrictPostfixRecipients - Zimbra :: Wiki, at the last i reload my postfix... but still the user whois in the DL list are able to access and send the mail across...

    i need to do it quickly ASAp i can..

    ..

    will wait for you help.


    sandeep singh
    Last edited by uxbod; 09-04-2009 at 09:45 AM. Reason: removed phone number

  2. #2
    Join Date
    Nov 2006
    Location
    UK
    Posts
    8,017
    Rep Power
    25

    Default

    Welcome to the forums

    If you have restarted ZCS then /opt/zimbra/postfix/conf/main.cf will have been over-written. You need to make the changes to /opt/zimbra/conf/zmmta.cf and then restart ZCS.

  3. #3
    Join Date
    Sep 2009
    Posts
    5
    Rep Power
    6

    Default

    thnks for ur quick rply..

    how do i start ZCS and what changes required in opt/zimbra/conf/zmmta.cf

    sandeep singh

  4. #4
    Join Date
    Sep 2009
    Posts
    5
    Rep Power
    6

    Default

    hey Ubox,

    i am waiting for your reply...


    sandeep.singh

  5. #5
    Join Date
    Nov 2006
    Location
    UK
    Posts
    8,017
    Rep Power
    25

    Default

    Quote Originally Posted by sandeep.singh View Post
    how do i start ZCS
    what do you mean ?

  6. #6
    Join Date
    Sep 2009
    Posts
    5
    Rep Power
    6

    Default

    as you said..

    ( If you have restarted ZCS then /opt/zimbra/postfix/conf/main.cf will have been over-written. You need to make the changes to /opt/zimbra/conf/zmmta.cf and then restart ZCS )

    what all changes i need to do.

  7. #7
    Join Date
    Nov 2006
    Location
    UK
    Posts
    8,017
    Rep Power
    25

    Default

    For the time being make the changes to main.cf so that you get your install back up and running.

  8. #8
    Join Date
    Sep 2009
    Posts
    5
    Rep Power
    6

    Default

    it done..

    plz check the configuration....

    $ vi /opt/zimbra/postfix/conf/permitted_senders

    localhost OK
    pinelabs.com OK
    zimbra.pinelabs.com OK
    sandeep.singh@pinelabs.com OK ------> valid user
    ~

    $ vi /opt/zimbra/postfix/conf/protected_recipients

    #pine-all@pinelabs.com permitted_senders_list
    ithelp@pinelabs.com permitted_senders_list -----> my DL

    $ /opt/zimbra/postfix/conf/update_protected_recipients

    rebuild permitted_senders...
    rebuild protected_recipients....

    $ vi /opt/zimbra/conf/postfix_recipient_restrictions.cf

    check_recipient_access hash:/opt/zimbra/postfix/conf/protected_recipients
    reject_non_fqdn_recipient
    permit_sasl_authenticated
    permit_mynetworks
    reject_unauth_destination
    reject_unlisted_recipient
    %%contains VAR:zimbraMtaRestriction reject_invalid_hostname%%
    %%contains VAR:zimbraMtaRestriction reject_non_fqdn_hostname%%
    %%contains VAR:zimbraMtaRestriction reject_non_fqdn_sender%%
    %%contains VAR:zimbraMtaRestriction reject_unknown_client%%
    %%contains VAR:zimbraMtaRestriction reject_unknown_hostname%%
    %%contains VAR:zimbraMtaRestriction reject_unknown_sender_domain%%
    %%explode reject_rbl_client VAR:zimbraMtaRestrictionRBLs%%
    %%contains VAR:zimbraMtaRestriction check_policy_service unixrivate/policy%%
    permit


    $ postfix reload ---> OK

    # here is the permission details...
    total 288
    drwxrwxr-x 2 root postfix 4096 2009-09-07 13:00 .
    drwxr-xr-x 6 root root 4096 2009-06-17 22:26 ..
    -rw-r--r-- 1 root postfix 17869 2009-04-13 23:54 access
    -rw-r--r-- 1 root postfix 8829 2009-04-13 23:54 aliases
    -rw-r--r-- 1 root postfix 3548 2009-04-13 23:54 bounce.cf.default
    -rw-r--r-- 1 root postfix 11681 2009-04-13 23:54 canonical
    -rw-r--r-- 1 root postfix 9904 2009-04-13 23:54 generic
    -rw-r--r-- 1 root postfix 17439 2009-04-13 23:54 header_checks
    -rw-r--r-- 1 root postfix 11942 2009-04-13 23:54 LICENSE
    -rw-r--r-- 1 zimbra zimbra 2311 2009-09-07 13:00 main.cf
    -rw-r----- 1 zimbra zimbra 2082 2009-09-04 14:15 main.cf.bkp
    -rw-r--r-- 1 root postfix 18426 2009-04-13 23:54 main.cf.default
    -rw-r--r-- 1 root postfix 3383 2009-04-13 23:54 makedefs.out
    -r--r----- 1 zimbra zimbra 5269 2009-09-07 12:56 master.cf
    -rw-r--r-- 1 zimbra zimbra 5363 2009-04-29 18:33 master.cf.in
    -rw-r----- 1 root postfix 86 2009-09-04 20:30 permitted_senders
    -rw-r----- 1 zimbra zimbra 54 2009-09-04 13:47 permitted_senders.bkp
    -rw-r----- 1 zimbra zimbra 12288 2009-09-07 12:55 permitted_senders.db
    -rw-r--r-- 1 root postfix 17588 2009-04-13 23:54 postfix-files
    -rwxr-xr-x 1 root postfix 6647 2009-04-13 23:54 postfix-script
    -rwxr-xr-x 1 root postfix 22197 2009-04-13 23:54 post-install
    -rw------- 1 root root 1024 2009-09-07 12:56 prng_exch
    -rw-r----- 1 root postfix 91 2009-09-04 20:31 protected_recipients
    -rw-r----- 1 zimbra zimbra 45 2009-09-04 13:50 protected_recipients.bkp
    -rw-r----- 1 zimbra zimbra 12288 2009-09-07 12:55 protected_recipients.db
    -rw-r--r-- 1 root postfix 6816 2009-04-13 23:54 relocated
    -rw-r--r-- 1 root postfix 1629 2009-04-13 23:54 TLS_LICENSE
    -rw-r--r-- 1 root postfix 12357 2009-04-13 23:54 transport
    -rwxr-xr-x 1 root postfix 192 2009-07-30 16:42 update_protected_recipients
    -rw-r--r-- 1 root postfix 12494 2009-04-13 23:54 virtual

    at the time of modifying... $ vi /opt/zimbra/postfix/conf/main.cf , thr is a NOTE

    [add these items to the file - note permitted_senders_list must match value in protected_recipients]
    **Note this change to the main.cf won't survive upgrades. Be sure to save a copy of your main.cf file**

    wht does below two line says...

    **** i had added these two line at the end of the file...**********

    permitted_senders_list = check_sender_access hash:/opt/zimbra/postfix/conf/permitted_senders, reject
    smtpd_restriction_classes = permitted_senders_list
    Last edited by sandeep.singh; 09-07-2009 at 02:08 AM.

Similar Threads

  1. [SOLVED] Sudden problem synching with gmail
    By bouchardpie in forum Error Reports
    Replies: 8
    Last Post: 09-09-2010, 10:50 AM
  2. Problem syncing all folders
    By mark_the_chain in forum Error Reports
    Replies: 0
    Last Post: 11-23-2008, 04:59 PM
  3. [SOLVED] Access Control on Distribution Lists
    By MTecknology in forum Administrators
    Replies: 2
    Last Post: 10-05-2008, 11:00 AM
  4. Replies: 4
    Last Post: 01-29-2008, 08:43 PM
  5. Restrict distribution list access
    By scalper in forum Administrators
    Replies: 4
    Last Post: 01-15-2008, 01:13 PM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •