Zimbra

jareep · #1 (**permalink**) 03-19-2008, 12:02 PM

I have all of the RBL's enabled in Zimbra. Additionally, I have a Microsoft Fax server that sends an email when a fax arrives. It answers the SMTP HELO message with something like "helo=<fax01>" and not FQDN fax01.lfs.com. How do I whitelist that server in such a way with all of the RBL's enabled that Zimbra will accept the SMTP message?

jareep · #2 (**permalink**) 03-19-2008, 12:04 PM

Here is the zimbraMtaRestriction list I'm using:

Quote:

zmprov mcf
zimbraMtaRestriction reject_invalid_hostname
zimbraMtaRestriction reject_non_fqdn_hostname
zimbraMtaRestriction reject_non_fqdn_sender
zimbraMtaRestriction "reject_rbl_client dnsbl.njabl.org"
zimbraMtaRestriction "reject_rbl_client cbl.abuseat.org"
zimbraMtaRestriction "reject_rbl_client bl.spamcop.net"
zimbraMtaRestriction "reject_rbl_client dnsbl.sorbs.net"
zimbraMtaRestriction "reject_rbl_client sbl.spamhaus.org"
zimbraMtaRestriction "reject_rbl_client relays.mail-abuse.org"

phoenix · #3 (**permalink**) 03-19-2008, 12:26 PM

IP Address whitelisting - Zimbra :: Wiki
Improving Anti-spam system - Zimbra :: Wiki

jareep · #4 (**permalink**) 03-19-2008, 01:04 PM

Tried that and I'm still getting:

Mar 19 15:00:36 localhost postfix/smtpd[1426]: NOQUEUE: reject: RCPT from 24-123-456-789.static.hckr.nc.charter.com[24.123.456.789]: 504 5.5.2 <fax01>: Helo command rejected: need fully-qualified hostname; from=<fax@mydomain.com> to=<fax@mydomain.com> proto=SMTP helo=<fax01>

jareep · #5 (**permalink**) 03-20-2008, 09:25 AM

Removed the reject_non_fqdn_hostname and now I'm getting:

Quote:

Mar 20 11:16:41 localhost postfix/smtpd[1040]: NOQUEUE: filter: RCPT from 24-123-456-789.static.hckr.nc.charter.com[24.123.456.789]: <24-123-456-789.static.hckr.nc.charter.com[24.123.456.789]>: Client host triggers FILTER smtp-amavis:[127.0.0.1]:10026; from=<fax@mydomain.com> to=<fax@mydomain.com> proto=SMTP helo=<fax01>
Mar 20 11:16:43 localhost postfix/qmgr[4355]: 03A5D1692AC: from=<fax@mydomain.com>, size=13123, nrcpt=1 (queue active)
Mar 20 11:16:43 localhost postfix/smtp[465]: 03A5D1692AC: to=<olive@mydomain.com>, orig_to=<fax@mydomain.com>, relay=none, delay=1.5, delays=1.5/0/0/0, dsn=4.4.1, status=deferred (connect to 127.0.0.1[127.0.0.1]: Connection refused)

Ideas?

Bill Brock · #6 (**permalink**) 03-20-2008, 10:03 AM

You could add the machine's IP to your trusted IP's in the Admin GUI. Add the IP and append it with /32. This will allow this IP and only this ip in addition to any other trusted networks you have listed.