Results 1 to 8 of 8

Thread: Permit sending to distribution lists only to authenticated users

  1. #1
    sgros is offline Intermediate Member
    Join Date
    Aug 2008
    Location
    Zagreb, Croatia
    Posts
    15
    Rep Power
    7

    Default Permit sending to distribution lists only to authenticated users

    Hi all!

    Is there any way Zimbra can be configured to permit sending mail to distribution lists only to authenticated users?

    The problem I have is that we have a distribution list with many addresses from the outside of the organization. Now, I just figured out that one spammer sent mail to this list and the mail was delivered to all recipients. As all our distribution lists are only used by members of the organization, the best solution, and most secure, would be to allow sending mail only to authenticated users.

    Thanks,
    Stjepan

  2. #2
    uxbod's Avatar
    uxbod is offline Moderator
    Join Date
    Nov 2006
    Location
    UK
    Posts
    8,017
    Rep Power
    24

  3. #3
    sgros is offline Intermediate Member
    Join Date
    Aug 2008
    Location
    Zagreb, Croatia
    Posts
    15
    Rep Power
    7

    Default

    Thanks for the welcome.

    Now, if I understand correctly, this page on Wiki describes how to select which users can send email to protected addresses and Zimbra enforces this by checking MAIL FROM command?

    What I wanted is that Zimbra allows sending to the protected mail address no matter what MAIL FROM is as long as the user is properly authenticated to postfix.

    Stjepan

  4. #4
    dljordaneku is offline Elite Member
    Join Date
    Sep 2007
    Location
    Richmond, Ky
    Posts
    281
    Rep Power
    7

    Default

    If you put their address in the distribution list wouldn't they be authenticated users? If you tell Zimbra that the that user gets emails from that list are you not in fact in one way authenticating that user?

    For us we used our external spam filter to stop any emails coming to that list from the outside. If you don't have an external spam filter then I would think the best solution would be the Postfix fix in the wiki article.

    dj

  5. #5
    sgros is offline Intermediate Member
    Join Date
    Aug 2008
    Location
    Zagreb, Croatia
    Posts
    15
    Rep Power
    7

    Default

    Quote Originally Posted by dljordaneku View Post
    If you put their address in the distribution list wouldn't they be authenticated users? If you tell Zimbra that the that user gets emails from that list are you not in fact in one way authenticating that user?
    Yes. But everything depends on how you define "authenticated" and what your requirements are. My problem are not the local users, but the outside spammers. Using default setup, outside spammer can send an email to distribution list without any problem. Applying "fix" from wikipage it has a minor inconvenience that he has to know a single valid user from this distribution list.

    So, I was wondering if it's possible to restrict sending an email message to a distribution list only after successful AUTH exchange with postfix. That way, there is no way for spammer (attacker) to send an email to a distribution list unless he compromises someone's account which is problem for itself.

    For us we used our external spam filter to stop any emails coming to that list from the outside. If you don't have an external spam filter then I would think the best solution would be the Postfix fix in the wiki article.
    Ok, I guess that the only way to proceed forward is to follow guidelines given on the wiki page.

    Thanks.
    S

  6. #6
    jwriteclub is offline Intermediate Member
    Join Date
    Apr 2008
    Posts
    23
    Rep Power
    7

    Default Mailing Lists

    Bump:

    Is there any progress on a solution for this and the bug in bugzilla?

    ~ Christopher

  7. #7
    mmorse's Avatar
    mmorse is offline Moderator
    Join Date
    May 2006
    Location
    USA
    Posts
    6,242
    Rep Power
    21

  8. #8
    jwriteclub is offline Intermediate Member
    Join Date
    Apr 2008
    Posts
    23
    Rep Power
    7

    Default

    GNR = version 6?

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Similar Threads

  1. Nested distribution lists
    By Britt in forum Administrators
    Replies: 6
    Last Post: 05-10-2013, 04:01 AM
  2. REstricting outside users not send mail to Distribution lists
    By rameshparvathaneni in forum Administrators
    Replies: 1
    Last Post: 06-24-2008, 03:18 AM
  3. Replies: 4
    Last Post: 01-29-2008, 08:43 PM
  4. [SOLVED] list of distribution lists and users
    By scrapper in forum Administrators
    Replies: 3
    Last Post: 12-12-2007, 01:23 PM
  5. Replies: 3
    Last Post: 07-19-2007, 02:00 AM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •