Page 1 of 2 12 LastLast
Results 1 to 10 of 17

Thread: restrict the access for certain distribution lists

  1. #1
    Join Date
    May 2008
    Location
    Taiwan
    Posts
    296
    Rep Power
    7

    Default restrict the access for certain distribution lists

    dear all,

    we're evaluating the zcs 7.1.1 (standard edition) and hope to control the access rights to certain distribution lists.

    e.g. only few of our local users can send emails to the distribution lists (e.g. all@local.domain)

    i've found this can be done via the ancient postfix configuration, such as: RestrictPostfixRecipients - Zimbra :: Wiki

    but from zcs 7.x product introduction, it looks like it can be done via the admin UI > Rights ??

    can someone enlighten me on how to achieve this?

    Thanks.

  2. #2
    Join Date
    Jul 2007
    Posts
    343
    Rep Power
    8

    Default

    Create a dl or edit existing dl -> Goto ACL tabs and specify your ACL for that dl.

    An Access Control List (ACL) is a set of Access Control Entries (ACE's). An ACE specifies who (the "Grantee") can do what (the "right") on this object (the "target"). The table below allows for adding and removing ACE's for the target you are editing.

  3. #3
    Join Date
    Jul 2007
    Posts
    343
    Rep Power
    8

    Default

    Refer Zimbra Admin Guide by clicking help desk link in Admin console.

  4. #4
    Join Date
    Apr 2010
    Location
    Italy
    Posts
    160
    Rep Power
    5

    Default

    Quote Originally Posted by tiger2000 View Post
    dear all,

    we're evaluating the zcs 7.1.1 (standard edition) and hope to control the access rights to certain distribution lists.

    e.g. only few of our local users can send emails to the distribution lists (e.g. all@local.domain)

    i've found this can be done via the ancient postfix configuration, such as: RestrictPostfixRecipients - Zimbra :: Wiki

    but from zcs 7.x product introduction, it looks like it can be done via the admin UI > Rights ??

    can someone enlighten me on how to achieve this?

    Thanks.
    Hi,

    the reference bug is the following:

    Bug 9620 – policy for who can send to a distribution lists

    you can run the command in the guide to restrict access to distribution list.

    eg. for restrict access to local user you can run:

    Code:
     zmprov grr dl group@test.com usr user1@test.com sendToDistList
    where 'group@test.com' is the distribution list address and 'user1@test.com' is the local account address.

    To verify:
    Code:
    zmprov ckr dl group@test.com user@test.com sendToDistList
    Could this help?

    Regards

  5. #5
    Join Date
    Apr 2010
    Location
    Italy
    Posts
    160
    Rep Power
    5

    Default

    I forgot one think, after run:
    Code:
     zmprov grr dl group@test.com usr user1@test.com sendToDistList
    also run:
    Code:
    zmmtactl restart
    because the changes to take effect!

    Regards

  6. #6
    Join Date
    Jan 2009
    Posts
    5
    Rep Power
    6

    Default

    Hi Guys,
    I have already tried by adding a DL with ACL and can receive mail flag set for user who acts as grantee where I have selected a function call SendToDistList and select Allow.Save this acl and tried to send a mail from that user as well as other user in both the case the mail went through which is not suppose to be the way it should work .Please correct me if I am missing any thing

  7. #7
    Join Date
    Apr 2010
    Location
    Italy
    Posts
    160
    Rep Power
    5

    Default

    Hi,

    you have to do the following checks:

    run:
    Code:
    zmprov ckr dl group@test.com user@test.com sendToDistList
    the output must be 'ALLOWED'

    Also, have you run:
    Code:
    zmmtactl restart
    Regards

  8. #8
    Join Date
    May 2008
    Location
    Taiwan
    Posts
    296
    Rep Power
    7

    Default

    don't know why, but these commands don't work for my evaluation environment (7.1.1 NE)

    zmprov grr dl list@domain.name usr user1@domain.name sendToDistList
    zmmtactl restart
    (also verify by "ckr" option, it shows "ALLOWED")


    after running those commands, it's supposed only "user1@domain.name" can send to this list? however, we found others accounts still be able to send emails to this list.

    anything else i should check?
    Thanks.

  9. #9
    Join Date
    May 2008
    Location
    Taiwan
    Posts
    296
    Rep Power
    7

    Default

    by the way, where this right: SendToDistList is defined?
    i can't find it from Admin Console > Rights

    where can i find a full list for those rights not listed in Admin Console > Rights ??

    Thanks in advance.

  10. #10
    Join Date
    Apr 2010
    Location
    Italy
    Posts
    160
    Rep Power
    5

    Default

    Hi,

    have you enable the milter server?

    Admin console-> Global setting -> enable milter server-> save.
    Then:
    Code:
    zmmtactl restart
    Regards

Similar Threads

  1. Nested distribution lists
    By Britt in forum Administrators
    Replies: 6
    Last Post: 05-10-2013, 04:01 AM
  2. Access control to distribution lists in Zimbra 7.
    By millerdc in forum Administrators
    Replies: 10
    Last Post: 03-27-2013, 07:51 AM
  3. Replies: 1
    Last Post: 05-25-2011, 06:27 AM
  4. Replies: 8
    Last Post: 09-03-2009, 07:25 AM
  5. Restrict distribution list access
    By scalper in forum Administrators
    Replies: 4
    Last Post: 01-15-2008, 12:13 PM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •