[SOLVED] Internal Distribution List

[vtx624]

Hi zimbra,

Does anyone know if this RestrictPostfixRecipient really works?

RestrictPostfixRecipients - Zimbra :: Wiki

I tried implementing it and it doesn't seem to work.

Anyone help would be appreciated.

[phoenix]

Yes, of course it works. It would help if you post what you're trying to achieve, exactly what you've done and what problems you're seeing plus any errors from the log files.

[vtx624]

Thanks for the reply.

I am trying to create a private distribution list for test_dist@example.com which only our local domain can access. I have followed the guide, but it still seems like mail will come through to that distribution list. I am testing using telnet from another device.

Here's what I did
1. Create permitted_senders

example.com     OK
mail.example.com        OK

2. Create protected_recipients

test_dist@example.com   permitted_senders_list

3. Created and ran the scripts update_protected_recipients

#!/bin/bash
echo "rebuild permitted_senders..."
/opt/zimbra/postfix/sbin/postmap /opt/zimbra/postfix/conf/permitted_senders
echo "rebuild protected_recipients..."
/opt/zimbra/postfix/sbin/postmap /opt/zimbra/postfix/conf/protected_recipients

4. added this in main.cf

permitted_senders_list = check_sender_access hash:/opt/zimbra/postfix/conf/permitted_senders, reject
smtpd_restriction_classes = permitted_senders_list

5. added this in postfix_recipients_restrictions.cf

check_recipient_access hash:/opt/zimbra/postfix/conf/protected_recipients

6. reloaded postfix

I have tried to do this under both root and zimbra.

The logs show that it's coming in

May 15 08:34:07 mail postfix/qmgr[16677]: A72092245F6: from=<test@yahoo.com>, size=958, nrcpt=2 (queue active)
May 15 08:34:07 mail postfix/smtpd[25798]: disconnect from localhost[127.0.0.1]
May 15 08:34:07 mail postfix/smtp[25630]: A8A472245F4: to=<test@example.com>, orig_to=<test_dist@example.com>, relay=127.0.0.1[127.0.0.1]:10024, delay=26, d
elays=12/0.02/0.46/13, dsn=2.0.0, status=sent (250 2.0.0 Ok: queued as A72092245F6)

Here is a output of my permission files

mail:/opt/zimbra/postfix/conf# ls -l
total 276
-rw-r--r-- 1 root   postfix 17869 2008-11-18 12:05 access
-rw-r--r-- 1 root   postfix  8829 2008-11-18 12:05 aliases
-rw-r--r-- 1 root   postfix  3548 2008-11-18 12:05 bounce.cf.default
-rw-r--r-- 1 root   postfix 11681 2008-11-18 12:05 canonical
-rw-r--r-- 1 root   postfix  9904 2008-11-18 12:05 generic
-rw-r--r-- 1 root   postfix 17439 2008-11-18 12:05 header_checks
-rw-r--r-- 1 root   postfix 11942 2008-11-18 12:05 LICENSE
-rw-r--r-- 1 zimbra zimbra   2212 2009-05-15 08:11 main.cf
-rw-r--r-- 1 root   postfix 18426 2008-11-18 12:05 main.cf.default
-rw-r--r-- 1 root   postfix  3383 2008-11-18 12:05 makedefs.out
-r--r----- 1 zimbra zimbra   5269 2009-05-15 08:11 master.cf
-rw-r--r-- 1 zimbra zimbra   5363 2009-03-03 14:02 master.cf.in
-rw-r----- 1 root   postfix    37 2009-05-15 06:14 permitted_senders
-rw-r----- 1 root   postfix 12288 2009-05-15 06:14 permitted_senders.db
-rw-r--r-- 1 root   postfix 17588 2008-11-18 12:05 postfix-files
-rw-r----- 1 root   postfix    75 2009-05-15 04:30 postfix_recipient_restriction                                                                         s.cf
-rwxr-xr-x 1 root   postfix  6647 2008-11-18 12:05 postfix-script
-rwxr-xr-x 1 root   postfix 22197 2008-11-18 12:05 post-install
-rw------- 1 root   root     1024 2009-05-15 08:12 prng_exch
-rw-r----- 1 root   postfix    46 2009-05-15 05:03 protected_recipients
-rw-r----- 1 root   postfix 12288 2009-05-15 06:14 protected_recipients.db
-rw-r--r-- 1 root   postfix  6816 2008-11-18 12:05 relocated
-rw-r--r-- 1 root   postfix  1629 2008-11-18 12:05 TLS_LICENSE
-rw-r--r-- 1 root   postfix 12357 2008-11-18 12:05 transport
-rwxr-xr-x 1 root   postfix   243 2009-05-15 04:19 update_protected_recipients
-rw-r--r-- 1 root   postfix 12494 2008-11-18 12:05 virtual

Thanks for helping

[phoenix]

Originally Posted by vtx624

I have followed the guide, but it still seems like mail will come through to that distribution list. I am testing using telnet from another device.

Where is this other 'device', is it on the same subnet as the rest of your LAN? Have you actually tried sending an email from an external mail account not on your system?

Do you have any catch all email address on your Zimbra server?

[vtx624]

Phoenix,

Thanks for your help, i tried this in the production environment and it worked.