How to restrict outgoing email as well as external web access for certain users? - Page 2
Page 2 of 3 FirstFirst 123 LastLast
Results 11 to 20 of 23

Thread: How to restrict outgoing email as well as external web access for certain users?

  1. #11
    Active Member
    Join Date
    Feb 2013
    Posts
    14
    Quote Originally Posted by INNOVOT View Post
    You would need to use zmprov and extract the members of the DL.
    Ok.. I will try crate a script to extract users from distribution list, put this user in the postfix_restricted_senders file end recreate a .db.
    Wen itīs done I back here to show how-to..

    tks all

  2. #12
    Active Member
    Join Date
    Jun 2013
    Posts
    6

    Add pop while sending mail to external domain in Zimbra Browser

    Quote Originally Posted by Cine View Post
    Hello Kingcu,

    as far as I know it's not possible to restrict web access directly from Zimbra, while restricting outgoing emails is pretty easy by customizing Postfix's configuration:
    [al commands must be ran as 'root']

    1 - Create a file called "postfix_restricted_senders" in /opt/zimbra/conf/
    2 - Populate the file using the following syntax (one entry per line):
    Code:
    restricted_user1@domain.tld  insider_only
    restricted_user2@domain.tld  insider_only
    restricted_user3@domain.tld  insider_only
    3 - Use postmap to prepare the .db file that postfix will use:
    Code:
    /opt/zimbra/postfix/sbin/postmap /opt/zimbra/conf/postfix_restricted_senders
    4 - Insert the following Keys in "/opt/zimbra/conf/localconfig.xml"
    Code:
    <key name="postfix_insider_only">
       <value>check_recipient_access hash:/opt/zimbra/conf/postfix_local_domains,reject</value>
     </key>
    
     <key name="postfix_smtpd_restriction_classes">
       <value>insider_only</value>
     </key>
    5 - Insert the following lines in "/opt/zimbra/conf/zmmta.cf" in the "MTA" section (just before the "RESTART mta" line)
    Code:
    POSTCONF smtpd_restriction_classes       LOCAL   postfix_smtpd_restriction_classes
    POSTCONF insider_only     LOCAL   postfix_insider_only
    6 - Finally, add the following line in "/opt/zimbra/conf/postfix_recipient_restrictions.cf" (after the "reject_non_fqdn_recipient" line)
    Code:
    check_sender_access hash:/opt/zimbra/conf/postfix_restricted_senders
    7- The MTA should restart itself after step 6, check your logs and restart it manually if it doesn't restart automatically.

    To add new restricted senders edit the "/opt/zimbra/conf/postfix_restricted_senders" file and execute the command in step 3 to finalize the changes.

    Remember that this procedure must be applied again after each Zimbra update (only need to repeat steps 4,5 and 6)


    As usual, try this configuration on a test environment before applying it in production

    Hope this helps,
    Cine





    Hello,

    How can i show pop while sending mail to external domain on Zimbra Browser and Zimbra Desktop at front end.
    Please guide me how ca i achieve this..

    Thanks,

  3. #13
    ZeXtras Community Manager ZeXtras Employee Cine's Avatar
    Join Date
    Apr 2011
    Posts
    2,352
    Quote Originally Posted by Anand View Post
    Hello,

    How can i show pop while sending mail to external domain on Zimbra Browser and Zimbra Desktop at front end.
    Please guide me how ca i achieve this..

    Thanks,
    Hello Anand!

    I'm afraid I don't get what you need to do... Could you make an example please?

    Have a nice day,
    Cine
    IT Support Team Contact Form
    Sales Team Contact Form

    ZeXtras Website
    # ZeXtras Wiki # ZeXtras Store

    Have ZeXtras Suite or ZeXtras Migration Tool been helpful to you?
    Share your experience in the Zimbra Gallery!

    ZeXtras Suite on the Zimbra Gallery
    ZeXtras Migration Tool on the Zimbra Gallery

  4. #14
    Active Member
    Join Date
    Jun 2013
    Posts
    6

    Hii..

    Quote Originally Posted by Cine View Post
    Hello Anand!

    I'm afraid I don't get what you need to do... Could you make an example please?

    Have a nice day,
    Cine
    Hello,

    Actually, when i am Composing a mail and sending it to users other than Zimbra(like gmail,or other domain), i should get a pop when i click on send button saying "You are sending a mail to Other Domain User. Please confirm to proceed".
    Please suggest how can i approach to this...


    thanks,

  5. #15
    ZeXtras Community Manager ZeXtras Employee Cine's Avatar
    Join Date
    Apr 2011
    Posts
    2,352
    Quote Originally Posted by Anand View Post
    Hello,

    Actually, when i am Composing a mail and sending it to users other than Zimbra(like gmail,or other domain), i should get a pop when i click on send button saying "You are sending a mail to Other Domain User. Please confirm to proceed".
    Please suggest how can i approach to this...


    thanks,
    Hello Anand!

    I get it now... Unfortunately to achieve this you'd need to develop a dedicated Zimlet, which is a task that cannot be explained with a step by step guide (also, I'm all but a developer so I can't be of much help ).

    Have a nice day,
    Cine
    the ZeXtras Team
    IT Support Team Contact Form
    Sales Team Contact Form

    ZeXtras Website
    # ZeXtras Wiki # ZeXtras Store

    Have ZeXtras Suite or ZeXtras Migration Tool been helpful to you?
    Share your experience in the Zimbra Gallery!

    ZeXtras Suite on the Zimbra Gallery
    ZeXtras Migration Tool on the Zimbra Gallery

  6. #16
    Active Member
    Join Date
    Oct 2013
    Posts
    6
    Hi everyone, I readed this thread because I need to make a rule to block mail to an external address.
    I tryed to use the steps explained in this thread but I have some problem and it cannot work.
    I use zimbra 8.0.7 FOSS edition.
    I need to block the ability to send email from my zimbra users to an external mail address.

    anyone can help me??

    Thanks
    Andrea

  7. #17
    ZeXtras Community Manager ZeXtras Employee Cine's Avatar
    Join Date
    Apr 2011
    Posts
    2,352
    Quote Originally Posted by xandrea View Post
    Hi everyone, I readed this thread because I need to make a rule to block mail to an external address.
    I tryed to use the steps explained in this thread but I have some problem and it cannot work.
    I use zimbra 8.0.7 FOSS edition.
    I need to block the ability to send email from my zimbra users to an external mail address.

    anyone can help me??

    Thanks
    Andrea
    Hello Andrea,
    welcome to the forums!

    I think that the info you are looking for are in THIS thread

    Have a nice day,
    Cine
    the ZeXtras Team
    IT Support Team Contact Form
    Sales Team Contact Form

    ZeXtras Website
    # ZeXtras Wiki # ZeXtras Store

    Have ZeXtras Suite or ZeXtras Migration Tool been helpful to you?
    Share your experience in the Zimbra Gallery!

    ZeXtras Suite on the Zimbra Gallery
    ZeXtras Migration Tool on the Zimbra Gallery

  8. #18
    Active Member
    Join Date
    Oct 2013
    Posts
    6
    Quote Originally Posted by Cine View Post
    Hello Andrea,
    welcome to the forums!

    I think that the info you are looking for are in THIS thread

    Have a nice day,
    Cine
    the ZeXtras Team
    Thanks Cine.. I think it is what I was looking for.

    Andrea

  9. #19
    Junior Member
    Join Date
    Mar 2015
    Posts
    2
    just an update for reference to update this for 8.6.0

    this file: /opt/zimbra/conf/zmmta.cf
    has moved here: /opt/zimbra/conf/zmconfigd.c

    this file: /opt/zimbra/conf/postfix_recipient_restrictions.cf
    has moved here: /opt/zimbra/conf/zmconfigd/smtpd_recipient_restrictions.cf


    Just an update to the first post (missing info for a needed file):
    you have to create this file /opt/zimbra/conf/postfix_local_domain
    formatted like this:
    Code:
    mylocaldomain.com OK
    myotherlocaldomain.com OK
    then execute this to create the postmap db
    Code:
    /opt/zimbra/postfix/sbin/postmap /opt/zimbra/conf/postfix_local_domains
    Last edited by penzoiders; 03-30-2015 at 06:37 PM.

  10. #20
    Junior Member
    Join Date
    Mar 2015
    Posts
    2
    Quote Originally Posted by penzoiders View Post
    just an update for reference to update this for 8.6.0

    this file: /opt/zimbra/conf/zmmta.cf
    has moved here: /opt/zimbra/conf/zmconfigd.c

    this file: /opt/zimbra/conf/postfix_recipient_restrictions.cf
    has moved here: /opt/zimbra/conf/zmconfigd/smtpd_recipient_restrictions.cf


    Just an update to the first post (missing info for a needed file):
    you have to create this file /opt/zimbra/conf/postfix_local_domain
    formatted like this:
    Code:
    mylocaldomain.com OK
    myotherlocaldomain.com OK
    then execute this to create the postmap db
    Code:
    /opt/zimbra/postfix/sbin/postmap /opt/zimbra/conf/postfix_local_domains
    edit:
    this way is not working in 8.6.0

    (as root)
    I've put a test restricted_sender and a test local_domain.
    "postmapped" the 2 files

    edited the 3 files ( /opt/zimbra/conf/zmconfigd/smtpd_recipient_restrictions.cf, /opt/zimbra/conf/zmconfigd.cf and /opt/zimbra/conf/localconfig.xml)
    as noted in the first post

    (as zimbra)
    restarted services

    all was running but what I get is that no one is able to send mail (rejected sender)



    what I'm trying to achieve is that mylocaldomain.com mailboxes can send only mails to mylocaldomain.com and myotherlocaldomain.com
    anyone knows the easiest way to get this done?

Page 2 of 3 FirstFirst 123 LastLast

LinkBacks (?)

  1. 08-02-2013, 01:49 PM

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •