Split Domain with Zimbra as virus/spam scanning gateway

[mubley]

If I were to configure a Zimbra server per Deployment Scenario B in the Split Domain wiki entry (Split Domain - ZimbraWiki) with Zimbra accepting mail from the Internet and relaying all mail to a separate internal mail server, would Zimbra perform virus/spam scanning before relaying? Or would it simply relay with no virus/spam scanning?

The sentence in the wiki that reads "Since Zimbra can perform inbound email prescreening..." makes it sound like it would perform virus/spam scanning, but I just wanted to confirm that and see if anybody had experience with it.

Thanks.

[quetzal]

Hi mubley,

This is exactly what is happening to me right now. Did you find a solution?

Regards

[sumo ii]

Originally Posted by quetzal

Hi mubley,

This is exactly what is happening to me right now. Did you find a solution?

Regards

Same here. It is not adding any X-SPAM-LEVEL type headers. It would suit me if it did. Anybody know what needs to be chnged from the default setup?

[vavai]

Hi,

Originally Posted by mubley

If I were to configure a Zimbra server per Deployment Scenario B in the Split Domain wiki entry (Split Domain - ZimbraWiki) with Zimbra accepting mail from the Internet and relaying all mail to a separate internal mail server, would Zimbra perform virus/spam scanning before relaying? Or would it simply relay with no virus/spam scanning?

The sentence in the wiki that reads "Since Zimbra can perform inbound email prescreening..." makes it sound like it would perform virus/spam scanning, but I just wanted to confirm that and see if anybody had experience with it.

Thanks.

I'm using Zimbra as front-end mail server and act as Anti Virus + Anti spam for the back-end mail server using Microsoft Exchange Server on such client as a step before migrating Exchange.

In my scenario, Zimbra will not saved any mailbox (except Admin and another default account) so I used following command :

su - zimbra
zmprov md example.com zimbraMailCatchAllAddress @example.com
zmprov md example.com zimbraMailCatchAllForwardingAddress @example.com
zmprov md example.com zimbraMailTransport smtp:mail.example.com

Note : mail.example.com using Exchange server. I set the incoming MX records to point to Zimbra host/IP.

The above configuration will make Zimbra to perform virus & spam check for incoming mail and then relay the passed-check mail to the backend mail server.

[sumo ii]

Originally Posted by vavai

Hi,


I'm using Zimbra as front-end mail server and act as Anti Virus + Anti spam for the back-end mail server using Microsoft Exchange Server on such client as a step before migrating Exchange.

In my scenario, Zimbra will not saved any mailbox (except Admin and another default account) so I used following command :

su - zimbra
zmprov md example.com zimbraMailCatchAllAddress @example.com
zmprov md example.com zimbraMailCatchAllForwardingAddress @example.com
zmprov md example.com zimbraMailTransport smtp:mail.example.com

Note : mail.example.com using Exchange server. I set the incoming MX records to point to Zimbra host/IP.

The above configuration will make Zimbra to perform virus & spam check for incoming mail and then relay the passed-check mail to the backend mail server.

So you accept mail for non existant accounts, check that mail for vrus and spam and then forward that mail to the Exchange server that complains no such account? I don't like that too much.

I've got local users on my zimbra server and I have some users on an Exchange server in another building, split domain. I would like Zimbra to add the X-SPAM-LEVEL header to emails that it directs to the exchange server as they don't have an antispam system on the Exchange server. I could then use filters (I hope) in outlook to move emails to Spam based on the X-SPAM-LEVEL header. Any hints?

Thanks!

[vavai]

Originally Posted by sumo ii

So you accept mail for non existant accounts, check that mail for virus and spam and then forward that mail to the Exchange server that complains no such account? I don't like that too much.

I've got local users on my zimbra server and I have some users on an Exchange server in another building, split domain. I would like Zimbra to add the X-SPAM-LEVEL header to emails that it directs to the exchange server as they don't have an antispam system on the Exchange server. I could then use filters (I hope) in outlook to move emails to Spam based on the X-SPAM-LEVEL header. Any hints?

Thanks!

Please CMIIW, you need the above set for certain user, aren't you ?

[sumo ii]

Originally Posted by vavai

Please CMIIW, you need the above set for certain user, aren't you ?

Yes, Zimbra does not add the X-SPAM-LEVEL unless it delivers it to a local mailbox. Is there a way to make it add these headers before redirecting to the Exchange server.

It does add a X-Virus-Scanned: amavisd-new at example.com to the headers.

Thanks.

[acorley]

Ours is configured as stated above using the split domain.

Once the mail is received, processed and delivered...it's missing any spam related stuff.
It does have the virus scanner headers

X-Virus-Scanned: amavisd-new at our.zimbra.server.net

Any help would be appreciated. If I find a solution I'll post back.
Thanks!

[sumo ii]

I did realise that Zimbra does add the x-spam headers however the system that I was sending to was removing them, leaving only the X-Virus-Scanned. Take a good look at the destination server and be sure it is not removeing the X-SPAM headers.

[acorley]

Thanks for the idea. I don't think our destination server removes the tags though.

We're delivering to a groupwise server and have been performing mail filtering for some time through a different homebrew service (using MailScanner). I just checked one of the older messages (below)

Further Testing:
When sending a test email (including copied bits of spam messages to push the points up for SA) into a local account on the zimbra server; the mail gets flagged, subject rewrite, and delivered to 'junk'.

Sending the same message for delivery to a relayed domain, we just get the virus scanner header; no spam flagging, no subject rewrites, etc.

Thanks again for your thoughts sumo

Subject: [SPAM] Personal postmaster 79% Off

MIME-Version: 1.0

Content-Type: text/html; charset="ISO-8859-1"

Content-Transfer-Encoding: 7bit

X-DCS-MailScanner-Information: Please contact the ISP for more information

X-DCS-MailScanner: Found to be clean

X-DCS-MailScanner-SpamCheck: spam (blacklisted)

X-DCS-MailScanner-From: postmaster@domain.com
X-Spam-Status: Yes