Zimbra 8.6 restrict to user sending mail to certain domain

-

Introduction

Controlling email flow within an organization is crucial for maintaining security and compliance. ZimbraZimbra 8.6 offers robust features that allow administrators to restrict users from sending emails to specific domains or addresses. 

This article will provide a step-by-step guide on how to implement these restrictions effectively, ensuring that your email system remains secure and well-regulated.

How to restrict to user sending mail to certain domain.

To configure on zimbra mta.


 Step 1: To add lines in file /opt/zimbra/conf/zmconfigd/smtpd_sender_restrictions.cf as bellow:
#vi /opt/zimbra/conf/zmconfigd/smtpd_sender_restrictions.cf
Adding lines the top as following:
check_sender_access lmdb:/opt/zimbra/postfix/conf/restricted_senders
Step 2: To add lines in file /opt/zimbra/conf/zmconfigd.cf
vim /opt/zimbra/conf/zmconfigd.cf
Adding the lines following before RESTART mta.
POSTCONF smtpd_restriction_classes local_only
    POSTCONF local_only FILE postfix_check_recipient_access.cf
    RESTART mta

Step 3: To create file "/opt/zimbra/conf/postfix_check_recipient_access.cf"
vi /opt/zimbra/conf/postfix_check_recipient_access.cf
Adding the lines following:
check_recipient_access lmdb:/opt/zimbra/postfix/conf/local_domains, reject
Step 4: To create file "/opt/zimbra/postfix/conf/restricted_senders" and list all user whom you restrict.
vi /opt/zimbra/postfix/conf/restricted_senders
Adding the lines following:
user@yourdomain.com            local_only
If you restricting all users in domain.
yourdomain.com            local_only
Step 5: To create file “/opt/zimbra/postfix/conf/local_domains” to list all domain where restrict to user sending mail.
vi /opt/zimbra/postfix/conf/local_domains
Adding the lines following:
yourdomain.com                     OK
otheralloweddomain.com      OK
Step 6: Run command the below to apply.
postmap /opt/zimbra/postfix/conf/restricted_senders
postmap /opt/zimbra/postfix/conf/local_domains
zmmtactl stop
zmmtactl start
*Note: I’m not survive when you upgrade system. Before upgrade you backup the configrue
If you undo this configure.
#postconf -e smtpd_restriction_classes=' '
#zmmtactl reload

Conclusion

Implementing user-specific email restrictions in Zimbra 8.6 is an essential step towards enhancing your organization's email security and compliance. By following this guide, you can ensure that your email system operates within defined parameters, preventing unauthorized communications. Stay updated with our future articles for more valuable insights and practical tips on managing your email infrastructure. Thank you for reading the huuphan.com page!
Source: https://wiki.zimbra.com/wiki/Restrict_users_to_certain_domain 

Comments

  1. UnknownMarch 19, 2020 at 11:45 AM

    is it possible to have multiple rules for the blokcing? example: 1st config has useer1 & user2 and can only send to gmail.com; 2nd config has user3 & useer4 and can only send to yahoo.com

    ReplyDelete

Post a Comment

Popular posts from this blog

zimbra some services are not running [Solve problem]

-
Introduction How to solved zimbra some services are not running. That after, to installed zimbra mail server. The display a some admin console status red in environment multiple server ( zimbra ldap, zimbra mailbox, zimbra mta etc.). Link to below you maybe likes: How to install and configure zimbra multi server.   How to restrict to user sending mail on zimbra 8.6. How to Restrict Sending to Distribution list in zimbra mail. How to change last login time for all accounts in zimbra ldap. How to zimbra reject authenticated sender login mismatch. Error zimbra some services are not running as bellow Step by step guide the solve problem zimbra some services are not running To restart and enable cron service the permanently. service crond restart chkconfig crond on Opening rsyslog.conf file and uncomment the following. vim /etc/rsyslog.conf Uncomment these two lines $modload imupd $UDPServerRun514   To restart and enable rsyslog service the permanently. servic...
Read more

Bash script list all IP addresses connected to Server with Country Information

-
Introduction This script is designed to list all IP addresses connected to your server, retrieve geographical information for each IP using ipinfo.io , and display the results in a clean format. This guide will walk you through the script, explaining each part in detail, and ensuring you understand how to implement and use it effectively. What is Bash? Bash (Bourne Again Shell) is a Unix shell and command language written by Brian Fox for the GNU Project as a free software replacement for the Bourne shell. It has since become the default login shell for most Linux distributions. Bash can execute commands, read and execute commands from a file, and provide constructs for condition testing, looping, and functions. Prerequisites A Linux -based server with administrative privileges. Internet connection for accessing ipinfo.io . Basic knowledge of Bash scripting. List all IP addresses connected to Server us Bash Script Running to bash script list all IP addresses connected to Server ./stu...
Read more

Zimbra Client host rejected Access denied fixed

-
Introduction While using Zimbra , you might encounter the "Client host rejected: Access denied" error, which can disrupt your workflow. This is a common issue that can be resolved easily if you understand the causes and the solutions. This article provides a detailed guide on how to fix this error on Zimbra, helping you quickly resume your work smoothly. Zimbra client host rejected Access denied error log Dec 19 01:21:28 mail postfix/amavisd/smtpd[5106]: NOQUEUE: reject: CONNECT from unknown[192.168.1.113]: 554 5.7.1 <unknown[192.168.1.113]>: Client host rejected: Access denied; proto=SMTP Dec 19 01:21:28 mail postfix/amavisd/smtpd[5106]: lost connection after CONNECT from unknown[192.168.1.113] Dec 19 01:21:28 mail postfix/amavisd/smtpd[5106]: disconnect from unknown[192.168.1.113] Allow the network " 192.168.1.0/24 " of client host for zimbraMtaMyNetworks attribute [zimbra@mail ~]$ zmprov ms `zmhostname` zimbraMtaMyNetworks "127.0.0.0/8 192.1...
Read more