Zimbra :: Forums - View Single Post - DNSBL with "Whitelist Hosts/IP Addresses In Postfix" howto do this the zimbra way

heinzg · #1 (**permalink**) 02-24-2009, 11:02 AM

Hi all!

I have been looking... but have not yet found an obvious "how to" do this the zimbra way i.e. with zmprov or in the admin gui.

I have started using the dnsbl feature and am happy with the results i am getting with it... but as it is in the world of black lists I have noticed that from time to time one of the major German free mailer is being black listed, and today then one of the ip addresses of my mail service provider.

I have come across a howto on howtoforge.com in which it describes how to do this with Postfix.
But I am a bit reluctant to go and edit the zimbra ~/postfix/conf/main.cf file without asking in the forum.

In short here is what is suggested to do in the howtoforge.com "how-to-whitelist-hosts-ip-addresses-in-postfix":

Create a postfix/rbl_override file with one entry per line
Code:
```
1.2.3.4 OK
1.2.3.5 OK
mail.freemailer.tld OK
```
Then run:
Code:
```
postmap /etc/postfix/rbl_override
```

Next open postfix/main.cf and search for the smtpd_recipient_restrictions parameter. Add check_client_access hash: ..../postfix/rbl_override to that parameter, after reject_unauth_destination, but before the first blacklist.
Like So:

Code:

[...]
smtpd_recipient_restrictions = reject_invalid_hostname,
                               reject_unauth_pipelining,
                               permit_mynetworks,
                               permit_sasl_authenticated,
                               check_client_access hash: ..../postfix/rbl_override,
                               reject_unauth_destination,
                               reject_rbl_client dnsbl.sorbs.net,
                               reject_rbl_client cbl.abuseat.org,
                               permit
[...]

Then restart Postfix

old question: So How Do You Do This The Zimbra Way?

Revised question: How do you add Whitelists / or excludes to supplement DNSD, so that you can still obtain mail from a site that has been blacklisted on a DNSDL service.
Above it is explained exactly how to do this with a stock Postfix install. Note the bold bits...

Cheers
Heinzg