Greylisting help

Ask questions about your setup or get help installing ZCS server (ZD section below).
Post Reply
hjai
Posts: 1
Joined: Wed Nov 15, 2017 3:41 am

Greylisting help

Post by hjai »

I'm running Zimbra 8.7.10_GA_1829 (build 20170524161336) open source edition. I followed this page https://wiki.zimbra.com/wiki/Cluebringer_Policy_Daemon and implemented the percentage policy example via the policyd web GUI. If I set it to apply to "Default Inbound", no greylisting occurs. If I set it to "Default", greylisting does occur, which is great. My only problem is, if my users try to send mail from Outlook via a hotspot, or send an email through their native smartphone app, they are greylisted. How do I prevent this greylisting of valid users?
syntaxys
Posts: 26
Joined: Sat Sep 13, 2014 12:06 am

Re: Greylisting help

Post by syntaxys »

You should permit authenticated users and your networks before checking against policy services like:

/opt/zimbra/conf/zmconfigd/smtpd_sender_restrictions.cf

Code: Select all

permit_sasl_authenticated
permit_mynetworks
permit_tls_clientcerts
%%exact VAR:zimbraMtaSmtpdSenderRestrictions reject_authenticated_sender_login_mismatch%%
%%contains VAR:zimbraMtaSmtpdSenderRestrictions check_sender_access lmdb:/opt/zimbra/conf/postfix_reject_sender%%
%%contains VAR:zimbraServiceEnabled cbpolicyd^ check_policy_service inet:localhost:%%zimbraCBPolicydBindPort%%%%
...
/opt/zimbra/conf/zmconfigd/smtpd_recipient_restrictions.cf

Code: Select all

permit_sasl_authenticated
permit_mynetworks
reject_non_fqdn_recipient
reject_unlisted_recipient
%%contains VAR:zimbraServiceEnabled cbpolicyd^ check_policy_service inet:localhost:%%zimbraCBPolicydBindPort%%%%
...
Post Reply