I want Inner domain emails only.. for some users.

Ask questions about your setup or get help installing ZCS server (ZD section below).
timothyalangorman
Advanced member
Advanced member
Posts: 159
Joined: Fri Sep 12, 2014 10:33 pm

I want Inner domain emails only.. for some users.

Postby timothyalangorman » Thu May 03, 2007 12:13 pm

Say I'm an IT admin for a company that has 100 remote stores.

currently I use Mailscanner with an imap client. I have a rule that blocks all out of domain emails from and to the stores.... The stores use the email for work purposes only.

Is there a way for procmail or any other zimbra mta function to do this?


mmorse
Ambassador
Ambassador
Posts: 6036
Joined: Fri Sep 12, 2014 10:24 pm

I want Inner domain emails only.. for some users.

Postby mmorse » Thu May 03, 2007 12:31 pm

So your thinking about running zimbra or already do?
You could get pretty darn close with spamassin settings...give anything with domain.com soft scaling of say -10 points...and also auto white list your domain.

Then and set your spam kill percentages lower. I'd test with the tag first. Both can be done under the admin console-global settings-mta
In opt/zimbra/conf there's an amavisd.conf.in file (dont have it in front of me and i'll correct spelling later-though it's the only .in file zimbra has that I know of, so searching should be simple) but in that file there's a section of auto-whitelisting points.
For instance anyaddress@cert.org is automatically given -3 points I believe (search that file for cert.org and you'll find the section)
timothyalangorman
Advanced member
Advanced member
Posts: 159
Joined: Fri Sep 12, 2014 10:33 pm

I want Inner domain emails only.. for some users.

Postby timothyalangorman » Thu May 03, 2007 12:35 pm

[quote user="mmorse"]So your thinking about running zimbra or already do?
You could get pretty darn close with spamassin settings...give anything with domain.com auto scaling of say -10 points...and also auto white list your domain.

Then and set your spam kill percentages lower-i'd test with the tag first. Both can be done under the admin console-global settings-mta
In opt/zimbra/conf there's an anvisd.in (dont have it in front of me-i'll correct spelling later-though it's the only .in file zimbra has that I know of-so searching should be simple) but in that file there's a section of auto-whitelisting points.
For instance anyaddress@cert.org is automatically given -3 points I believe (search that file for cert.org and you'll find the section)[/QUOTE]
Can this be done on a per-user basis? I'm from the world of Mailscanner that uses spamassasin but not directly... I'll look around...

thanks.and I'll ke you all posted.

timg
mmorse
Ambassador
Ambassador
Posts: 6036
Joined: Fri Sep 12, 2014 10:24 pm

I want Inner domain emails only.. for some users.

Postby mmorse » Thu May 03, 2007 12:43 pm

hm sorry-didn't see the 'for some users part'
then that definately doesnt help at all
bugzilla it i guess
timothyalangorman
Advanced member
Advanced member
Posts: 159
Joined: Fri Sep 12, 2014 10:33 pm

I want Inner domain emails only.. for some users.

Postby timothyalangorman » Thu May 03, 2007 1:22 pm

All my users start with st0 .... example st0301 is store number 301.

st0302 is store 302... Before I just had a rule that stated
from * to st0* blacklisted

from st0* to * blacklisted

from *@domain.com to *@domin.com whilelisted
Is there a spamassasin way to do this... I understand that thsi is not a SA forum so I'll move over these if everyone thinks I'm nutz.


hehehehe
andreychek
Advanced member
Advanced member
Posts: 155
Joined: Fri Sep 12, 2014 9:58 pm

I want Inner domain emails only.. for some users.

Postby andreychek » Thu May 03, 2007 2:20 pm

[quote user="timothyalangorman"]Is there a spamassasin way to do this... I understand that thsi is not a SA forum so I'll move over these if everyone thinks I'm nutz.[/QUOTE]

Well, I'm not so sure about SA, but there are Postfix ways of doing this, and perhaps Amavisd ways of doing this.
However, we have a similar desire at my workplace (or at least, the higher-ups do, I just do what I'm told ;-)
Rather than deal with maintaining a list of users in Postfix or Amavis or whatever, what we did was make up our own domain name suffix... instead of domainname.com, we named it domainname.internal.
Then, we setup our DNS servers so that domainname.internal's MX record pointed to our Zimbra server.
So now, the only people who could send email to anyone with a user@domainname.internal address are those using our internal DNS servers.
If that's undesirable for whatever reason, Postfix can solve it too.
In Zimbra's main.cf, you'd need a smtpd_recipient_restrictions line with a check_sender_access statement to specify who can send external mail.
To restrict who can receive messages, you'd want to add a smtpd_restriction_classes and check_recipient_access line.
I haven't done this in Zimbra, but there's no reason I can think of that should prevent it from working.
Hope that helps,

-Eric
timothyalangorman
Advanced member
Advanced member
Posts: 159
Joined: Fri Sep 12, 2014 10:33 pm

I want Inner domain emails only.. for some users.

Postby timothyalangorman » Thu May 03, 2007 3:20 pm

Perfect I'm going to shed a bit of a tear when I leave sendmail but a few of those all-nite affairs learning of it's specific weird-ities will not be missed.
are you a c-store chain? how many clients are you serving with your model?

thanks timg
andreychek
Advanced member
Advanced member
Posts: 155
Joined: Fri Sep 12, 2014 9:58 pm

I want Inner domain emails only.. for some users.

Postby andreychek » Thu May 03, 2007 3:33 pm

[quote user="timothyalangorman"]Perfect I'm going to shed a bit of a tear when I leave sendmail but a few of those all-nite affairs learning of it's specific weird-ities will not be missed.[/QUOTE]
Yeah, I think you'll come to enjoy Postfix (well, really, anything that doesn't require generating a sendmail.cf ;-)
[quote user="timothyalangorman"]are you a c-store chain? how many clients are you serving with your model?[/QUOTE]

c-store? I'm not quite sure what that is. So I suspect not :-)
The setup I'm referring to above is what I do at my day job, which is for a small-ish company (150-200 ppl), only a few of which use internal only addresses (less than 30).
I also do Zimbra and website hosting on the side for fun ;-) But none of those guys would want internal only addresses (or at least, it has yet to come up).
OTOH, that might be a half decent way to give the kids of some of the users on there email, but preventing them from receiving some of the crazy stuff that comes in spam.... giving them "family only email". Huh :-)
Anyhow, have fun!

-Eric
timothyalangorman
Advanced member
Advanced member
Posts: 159
Joined: Fri Sep 12, 2014 10:33 pm

I want Inner domain emails only.. for some users.

Postby timothyalangorman » Thu May 03, 2007 3:38 pm

[quote user="andreychek"]

OTOH, that might be a half decent way to give the kids of some of the users on there email, but preventing them from receiving some of the crazy stuff that comes in spam.... giving them "family only email". Huh :-)
Anyhow, have fun!

-Eric[/QUOTE]
That's a great point........

a c-store means.. convenience store. I work for an Exxon Mobil distributor.

...expressmart

for some reason my boss dosen't want our store manager emailing and surfing the net hehehehe

thanks again

I'm just running a pseudo domain (hosting myown dns and mx recods)

I'll need to migrate some 200 ish acounts so it'll be a process.

I just need to test this functionality before I go production...

;)
mmorse
Ambassador
Ambassador
Posts: 6036
Joined: Fri Sep 12, 2014 10:24 pm

I want Inner domain emails only.. for some users.

Postby mmorse » Tue May 08, 2007 4:52 pm

I personally like the smtpd_restriction_classes and check_recipient_access line suggestion. but there's also:

[quote]Create a 'protected recipients' list (as user zimbra) - This is your list of email addresses that may only receive email from 'permitted senders'[/quote]

[quote]Create a 'permitted senders' list (as user zimbra) - This is your list of domains and/or users who can email your protected email addresses.[/quote]

of course using *@domain.com as the permitted senders


Of">http://wiki.zimbra.com/index.php?title=RestrictPostfixRecipients
Of
course this doesn't solve the SENDING issue, but I just pm'd it to someone else so i figured i'd backtrack and post it for you as well.

Return to “Installation and Upgrade”

Who is online

Users browsing this forum: No registered users and 10 guests