Postini Integration Help

[mikec]

Hello all -

Im setting one of the Domains on my Zimbra Network Edition up to use Postini for spam and Inbound/Outbound archiving and have run into a bit of a snag. The Inbound archiving and spam control works great (simple mx change). As for the outbound I am having trouble figuring out how I can preform a relay for a single domain back to Postini. Does anyone know of a way to do this via Postfix?

Does anyone know if something like this will work.

#vi /etc/postfix/transport
domain.tld smtp:[relay.host]port
anotherdomain.tld smtp:[relay.host]Port

#postmap hash:/etc/postfix/transport


in /etc/postfix/main.cf
transport_maps = hash:/etc/postfix/transport





Thanks again

[dljordaneku]

I can't answer your question but it does bring up a question of my own. How does Zimbra start and work if the mx record for your email domain is not point to your Zimbra server?

dj

[mikec]

Well that has to do with the priority of the mx records. ie..

mail.postini1.com. mx priority 10
mail.postini2.com. mx priority 20
mail.realmailserver.com. mx priority 30

In this example mail will go to the mx10 postini.. after postini filters it passes it to the next priority mx and eventually back to the real mail server.

[mlodick]

Zimbra doesn't care in any particular way if your MX record doesn't point to your server. It will prompt you to change your MX record if it can't find one during the install process, but that's about it.

I have my MX record pointed at a spam filtering service, and then the mail is directed from there to my Zimbra server. This has never caused me a problem.

Regarding using Postini as a spam filter and archive, for archiving and compliance, you're going to want to make sure internal only mail gets sent out to Postini and back in again, otherwise it wouldn't be captured by the service - at least if they do it like I'd assume they do. I think you could just change your zimbraMailTransport attribute for each user to point to Postini, but I'm not sure if there's an easier way.

Mike

[uxbod]

#vi /etc/postfix/transport
domain.tld smtp:[relay.host]port
anotherdomain.tld smtp:[relay.host]Port
#postmap hash:/etc/postfix/transport
in /etc/postfix/main.cf
transport_maps = hash:/etc/postfix/transport

In theory that should work, though you need to ensure the changes persist across a restart of ZCS. Are you using FOSS or NE ? If NE have you looked at ZAD ?

[mikec]

In theory that should work, though you need to ensure the changes persist across a restart of ZCS

Thanks I will give this a shot.

I run NE... But there is no way for me to give the complience officer access to ZAD without giving Admin access.

[mikec]

So I have given this a try and can’t seem to get things working.

Here is what I have done.
I edited :
[root@mail conf]#pwd
/opt/zimbra/postfix/conf
[root@mail conf]# ls -ltr transport*
-rw-r--r-- 1 root postfix 12448 Oct 27 01:58 transport
[root@mail conf]# tail transport
#
# AUTHOR(S)
# Wietse Venema
# IBM T.J. Watson Research
# P.O. Box 704
# Yorktown Heights, NY 10598, USA
#
# TRANSPORT(5)
mydomain.net :[outbounds7.obsmtp.com]
.mydomain.net :[outbounds7.obsmtp.com]

[zimbra@mail conf]$ postmap hash:/opt/zimbra/postfix/conf/transport

////now I have////

[zimbra@mail conf]$ ls -ltr transport*
-rw-r--r-- 1 root postfix 12448 Oct 27 01:58 transport
-rw-r--r-- 1 zimbra zimbra 12288 Oct 27 01:59 transport.db

////then I ran///

zmlocalconfig -e postfix_transport_maps=ldap:/opt/zimbra/conf/ldap-transport.cf,hash:/opt/zimbra/postfix/conf/transport

////then zmcontrol stop/start and take a look at the main.cf//////

[zimbra@mail conf]$ more main.cf
sender_canonical_maps = ldap:/opt/zimbra/conf/ldap-scm.cf
virtual_alias_domains = ldap:/opt/zimbra/conf/ldap-vad.cf
recipient_delimiter =
smtpd_tls_cert_file = /opt/zimbra/conf/smtpd.crt
smtpd_tls_auth_only = no
myhostname = mail.bitstechnology.net
virtual_mailbox_domains = ldap:/opt/zimbra/conf/ldap-vmd.cf
mydestination = localhost
mailbox_size_limit = 0
smtpd_client_restrictions = reject_unauth_pipelining
virtual_alias_maps = ldap:/opt/zimbra/conf/ldap-vam.cf
transport_maps = ldap:/opt/zimbra/conf/ldap transport.cf,hash:/opt/zimbra/postfix/conf/transport <---------

As far as I can tell everything looks to be in the right place... but emails sent from mydomain are not being relayed to outbounds7.obsmtp.com. It’s as if the rule is not in play. Keep in mind that mydomain is a virtual domain on the zimbra server. I am wondering if this is the problem?

[mikec]

Anyone have any thoughts on this?