domain aliases and rejecting false mail from addresses

[it@haco.com]

Hello,

We are running zimbra 8.6.0_BA_1182.NETWORK
and since we got problems from spam being sent from false addresses, I decided to implement these changes
https://wiki.zimbra.com/wiki/Rejecting_ ... _addresses
https://wiki.zimbra.com/wiki/Enforcing_ ... ername_8.5

however, now I have the problem that nobody that is using domain aliases is able to send mails.
(Sender address rejected: not owned by user)

I tried undoing the changes by

zmprov mcf zimbraMtaSmtpdRejectUnlistedRecipient no
zmprov mcf zimbraMtaSmtpdRejectUnlistedSender no
zmmtactl restart
zmconfigdctl restart

removing reject_sender_login_mismatch in the smtpd_sender_restrictions.cf file

and even doing

zmprov mcf zimbraMtaSmtpdSenderLoginMaps proxy:ldap:/opt/zimbra/conf/ldap-slm.cf -zimbraMtaSmtpdSenderRestrictions reject_authenticated_sender_login_mismatch

(actually I don't know at all if that last one did something)

but still alias domains are not working.

Could anyone help me to go back to the earlier situation and then how to get this working with domain aliases?

Thanks a lot

[it@haco.com]

I managed to undo my changes (I think) by using

Code: Select all

zmprov mcf zimbraMtaSmtpdSenderLoginMaps  '' -zimbraMtaSmtpdSenderRestrictions reject_authenticated_sender_login_mismatch
zmprov mcf zimbraMtaSmtpdRejectUnlistedRecipient no
zmprov mcf zimbraMtaSmtpdRejectUnlistedSender no

so now I'm back at start.

How can I stop users or a hacked account from using unexisting from addresses,
while allowing them to send from domain alias accounts.

[it@haco.com]

I succesfully made the changes

Code: Select all

zmprov mcf zimbraMtaSmtpdRejectUnlistedRecipient yes
zmprov mcf zimbraMtaSmtpdRejectUnlistedSender yes

without breaking the domain alias functionality.

Then it probably has to do something with:
https://wiki.zimbra.com/wiki/Enforcing_ ... ername_8.5

Any pointers or help?

[it@haco.com]

Does anyone by any change have some tips for me?

[yeeP6rai]

I've this issue too on 8.7.11 GA.
For domain this instructions is working, but for domain alias is not.
Is there solutions?
Thanks

[yeeP6rai]

I've this issue too on 8.7.11 GA.
For domain this instructions is working, but for domain alias is not.
Is there solutions?
Thanks

Any solutions?