domain aliases and rejecting false mail from addresses

Discuss your pilot or production implementation with other Zimbra admins or our engineers.
it@haco.com
Posts: 4
Joined: Wed Sep 07, 2016 1:37 pm

domain aliases and rejecting false mail from addresses

Postby it@haco.com » Wed Sep 07, 2016 1:47 pm

Hello,

We are running zimbra 8.6.0_BA_1182.NETWORK
and since we got problems from spam being sent from false addresses, I decided to implement these changes
https://wiki.zimbra.com/wiki/Rejecting_false_%22mail_from%22_addresses
https://wiki.zimbra.com/wiki/Enforcing_a_match_between_FROM_address_and_sasl_username_8.5

however, now I have the problem that nobody that is using domain aliases is able to send mails.
(Sender address rejected: not owned by user)

I tried undoing the changes by

zmprov mcf zimbraMtaSmtpdRejectUnlistedRecipient no
zmprov mcf zimbraMtaSmtpdRejectUnlistedSender no
zmmtactl restart
zmconfigdctl restart

removing reject_sender_login_mismatch in the smtpd_sender_restrictions.cf file

and even doing

zmprov mcf zimbraMtaSmtpdSenderLoginMaps proxy:ldap:/opt/zimbra/conf/ldap-slm.cf -zimbraMtaSmtpdSenderRestrictions reject_authenticated_sender_login_mismatch

(actually I don't know at all if that last one did something)

but still alias domains are not working.

Could anyone help me to go back to the earlier situation and then how to get this working with domain aliases?

Thanks a lot


it@haco.com
Posts: 4
Joined: Wed Sep 07, 2016 1:37 pm

Re: domain aliases and rejecting false mail from addresses

Postby it@haco.com » Wed Sep 07, 2016 3:07 pm

I managed to undo my changes (I think) by using

Code: Select all

zmprov mcf zimbraMtaSmtpdSenderLoginMaps  '' -zimbraMtaSmtpdSenderRestrictions reject_authenticated_sender_login_mismatch
zmprov mcf zimbraMtaSmtpdRejectUnlistedRecipient no
zmprov mcf zimbraMtaSmtpdRejectUnlistedSender no


so now I'm back at start.

How can I stop users or a hacked account from using unexisting from addresses,
while allowing them to send from domain alias accounts.
it@haco.com
Posts: 4
Joined: Wed Sep 07, 2016 1:37 pm

Re: domain aliases and rejecting false mail from addresses

Postby it@haco.com » Wed Sep 07, 2016 3:19 pm

I succesfully made the changes

Code: Select all

zmprov mcf zimbraMtaSmtpdRejectUnlistedRecipient yes
zmprov mcf zimbraMtaSmtpdRejectUnlistedSender yes


without breaking the domain alias functionality.

Then it probably has to do something with:
https://wiki.zimbra.com/wiki/Enforcing_a_match_between_FROM_address_and_sasl_username_8.5

Any pointers or help?
it@haco.com
Posts: 4
Joined: Wed Sep 07, 2016 1:37 pm

Re: domain aliases and rejecting false mail from addresses

Postby it@haco.com » Wed Sep 14, 2016 1:08 pm

Does anyone by any change have some tips for me?
yeeP6rai
Posts: 38
Joined: Mon Feb 12, 2018 10:16 am

Re: domain aliases and rejecting false mail from addresses

Postby yeeP6rai » Mon Feb 12, 2018 12:24 pm

I've this issue too on 8.7.11 GA.
For domain this instructions is working, but for domain alias is not.
Is there solutions?
Thanks
yeeP6rai
Posts: 38
Joined: Mon Feb 12, 2018 10:16 am

Re: domain aliases and rejecting false mail from addresses

Postby yeeP6rai » Fri Oct 05, 2018 9:45 am

yeeP6rai wrote:I've this issue too on 8.7.11 GA.
For domain this instructions is working, but for domain alias is not.
Is there solutions?
Thanks

Any solutions?

Return to “Administrators”

Who is online

Users browsing this forum: MSN [Bot] and 6 guests