Results 1 to 9 of 9

Thread: [SOLVED] Change the main.cf options

  1. #1
    Join Date
    Jun 2006
    Posts
    209
    Rep Power
    9

    Default [SOLVED] Change the main.cf options

    Hi,

    I'm afraid because by default my Postfix main.cf set the smtpd_reject_unlisted_recipient to NO !!!

    I changed with postconf -e smtpd_reject_unlisted_recipient=yes on zimbra user but if I restart Postfix this directive back to NO.

    How to fix this this directive to YES definitely ?

    Thanks for your help.

    Sam.
    Release 6.0.7_GA_2473.DEBIAN5 DEBIAN5 FOSS edition.
    On Debian Vserver

  2. #2
    Join Date
    Nov 2006
    Location
    UK
    Posts
    8,017
    Rep Power
    24

    Default

    Make sure that /opt/zimbra/conf/postfix_recipient_restrictions.cf has the following within it
    Code:
    reject_unlisted_recipient

  3. #3
    Join Date
    Jun 2006
    Posts
    209
    Rep Power
    9

    Default

    Quote Originally Posted by uxbod View Post
    Make sure that /opt/zimbra/conf/postfix_recipient_restrictions.cf has the following within it
    Code:
    reject_unlisted_recipient
    Look my postfix_recipient_restrictions.cf:

    Code:
    reject_non_fqdn_recipient
    permit_sasl_authenticated
    permit_mynetworks
    reject_unauth_destination
    reject_unlisted_recipient
    %%contains VAR:zimbraMtaRestriction reject_invalid_hostname%%
    %%contains VAR:zimbraMtaRestriction reject_non_fqdn_hostname%%
    %%contains VAR:zimbraMtaRestriction reject_non_fqdn_sender%%
    %%contains VAR:zimbraMtaRestriction reject_unknown_client%%
    %%contains VAR:zimbraMtaRestriction reject_unknown_hostname%%
    %%contains VAR:zimbraMtaRestriction reject_unknown_sender_domain%%
    %%explode reject_rbl_client VAR:zimbraMtaRestrictionRBLs%%
    %%contains VAR:zimbraMtaRestriction check_policy_service unix:private/policy%%
    permit
    But on each postfix restart I have to make postconf -e smtpd_reject_unlisted_recipient=yes to set this feature otherwise Zimbra accept mails to unknown receipient !?

    Sam.
    Release 6.0.7_GA_2473.DEBIAN5 DEBIAN5 FOSS edition.
    On Debian Vserver

  4. #4
    Join Date
    May 2009
    Posts
    18
    Rep Power
    6

    Default

    I also have problems when wanting to change a directive from the postfix main.cf but does change when you restart postfix is again equal
    Any idea how to do
    greetings

  5. #5
    Join Date
    Nov 2005
    Posts
    518
    Rep Power
    10

    Default

    You're looking at two different items; reject_unlisted_recipient should be listed in the smtpd_recipient_restrictions, so it's not necessary to also set smtpd_reject_unlisted_recipient.

    $ postconf smtpd_recipient_restrictions
    smtpd_recipient_restrictions = reject_non_fqdn_recipient, permit_sasl_authenticated, permit_mynetworks, reject_unauth_destination, reject_unlisted_recipient, reject_invalid_hostname, reject_non_fqdn_sender, permit

    $ postconf smtpd_reject_unlisted_recipient
    smtpd_reject_unlisted_recipient = no

    If you really want to set it, edit the line for this in /opt/zimbra/conf/zmmta.cf:

    POSTCONF smtpd_reject_unlisted_recipient yes

  6. #6
    Join Date
    Jun 2006
    Posts
    209
    Rep Power
    9

    Default

    Quote Originally Posted by bobby View Post
    If you really want to set it, edit the line for this in /opt/zimbra/conf/zmmta.cf:

    POSTCONF smtpd_reject_unlisted_recipient yes
    Bingo, I changed zmmta.cf to set smtpd_reject_unlisted_recipient = yes (line 109) after restart Postfix this directive stay to "Yes"

    Thanks a lot.

    For the history we have more than 20 000 mails with unknown user a day and perhaps to send spams, our server was blacklisted, it's the first time I have this problem after 10 years of mail server installation and managment.

    Sam.
    Release 6.0.7_GA_2473.DEBIAN5 DEBIAN5 FOSS edition.
    On Debian Vserver

  7. #7
    Join Date
    Jun 2006
    Posts
    209
    Rep Power
    9

    Default

    Just for information:

    I had more than 20 000 rejected mails a day for unknown user who generates spam by MALER-DAEMON, and our IP was blacklisted on several RBL.

    I had to install Postfix-policyd on our mail relay in front of Zimbra to fix this problem, perhaps it will be useful to integrate Postfix-policyd on Zimbra.

    Sam.
    Release 6.0.7_GA_2473.DEBIAN5 DEBIAN5 FOSS edition.
    On Debian Vserver

  8. #8
    Join Date
    Nov 2006
    Location
    UK
    Posts
    8,017
    Rep Power
    24

    Default

    Are you saying you are greylisting now ? I have to admit I run MailScanner in-front of my Zimbra installations, which is personally choice, but a lot can be done to kick back those naughty spammers. Are you suffering from backscatter ? or spammers impersonating your domain ?

  9. #9
    Join Date
    Jun 2006
    Posts
    209
    Rep Power
    9

    Default

    Quote Originally Posted by uxbod View Post
    Are you saying you are greylisting now ? I have to admit I run MailScanner in-front of my Zimbra installations, which is personally choice, but a lot can be done to kick back those naughty spammers. Are you suffering from backscatter ? or spammers impersonating your domain ?
    From backscatter and our IP is registered on ips.backscatter.org and they ask us to wait 4 weeks to be automatically removed from list or... send 50.00Euros for immediate removing (so nice !)

    We use MailScanner too on the mail relay but not as AS/AV we got the best result with Postfix-Policyd, more than 30 000 wrong mails are discarded a day.

    I put some RBL in Zimbra MTA Agent (SORBS-DUL, spamcop.net, spamhaus.org) but I'm not sure if this work behind a mail relay, all mails come from only one IP...

    Thanks for your help.

    Sam.
    Release 6.0.7_GA_2473.DEBIAN5 DEBIAN5 FOSS edition.
    On Debian Vserver

Similar Threads

  1. Change Password URL
    By jterhune in forum Administrators
    Replies: 5
    Last Post: 08-24-2009, 03:55 PM
  2. Howto change zimbra postfix main.cf
    By NIRMESH KUMAR in forum Administrators
    Replies: 2
    Last Post: 02-15-2007, 12:10 AM
  3. Replies: 0
    Last Post: 11-16-2006, 06:28 PM
  4. Change main.cf
    By lfasci in forum Administrators
    Replies: 4
    Last Post: 09-18-2006, 12:38 PM
  5. "Must change password" still doest work
    By graffiti in forum Users
    Replies: 5
    Last Post: 12-05-2005, 08:00 PM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •