Blocking domains

Discuss your pilot or production implementation with other Zimbra admins or our engineers.
yellowhousejake
Advanced member
Advanced member
Posts: 60
Joined: Tue Sep 09, 2014 9:57 am
ZCS/ZD Version: Release 8.8.9.GA.3019.UBUNTU16.64

Blocking domains

Postby yellowhousejake » Thu Sep 05, 2019 4:05 pm

Release 8.8.9.GA.3019.UBUNTU16.64 UBUNTU16_64 NETWORK edition, Patch 8.8.9_P8

Good morning,

On our previous Zimbra install we blocked many domains using a pcre table and setting a property for main.cf to use that table as a sender restriction. That does not work with 8.8.9 so I changed our file to lmdb format, but I am not able to get it loaded into main.cf.

I created the file properly and placed in in /opt/zimbra/common/conf
I ran postmap on that file
-- postmap /opt/zimbra/common/conf/cog-reject
I ran zmprov to add that file as a restriction
-- zmprov mcf +zimbraMtaRestriction 'check_client_access lmdb:/opt/zimbra/common/conf/cog-reject.lmdb'
I checked to see that the restriction was in place, and it was listed in the output
-- zmprov gcf zimbraMtaRestriction

Restarting or reloading the mta does not add the restriction to main.cf and the domains in the file are not being rejected.

I next looked at the cf files in /opt/zimbra/conf/zmconfigd finding the smtpd_sender_restrictions.cf file containing the line
%%contains VAR:zimbraMtaSmtpdSenderRestrictions check_sender_access lmdb:/opt/zimbra/conf/postfix_reject_sender%%

So I renamed my reject file to 'postfix_reject_sender', ran postmap on the file, and reloaded the zimbra mta again. Still no entry in the postfix main.cf.

Obviously I am doing something wrong, but what I do not know.

Any suggestion would appreciated.

DAve


slacker1337
Posts: 4
Joined: Fri Aug 30, 2019 8:54 am

Re: Blocking domains

Postby slacker1337 » Thu Sep 05, 2019 6:50 pm

Try this one:

zmprov ms `zmhostname` +zimbraMtaSmtpdSenderRestrictions "check_sender_access lmdb:/opt/zimbra/conf/postfix_reject_sender"

Reference: https://wiki.zimbra.com/wiki/Domain_lev ... g_of_users
yellowhousejake
Advanced member
Advanced member
Posts: 60
Joined: Tue Sep 09, 2014 9:57 am
ZCS/ZD Version: Release 8.8.9.GA.3019.UBUNTU16.64

Re: Blocking domains

Postby yellowhousejake » Thu Sep 05, 2019 7:00 pm

Arrrrrg! How did I miss that in my searches?

Thank you, changes made and it is working again.

DAve

Return to “Administrators”

Who is online

Users browsing this forum: No registered users and 9 guests