IP Address Whitelisting

[georgelazar]

Hi,

I have followed the following wiki article:

http://wiki.zimbra.com/index.php?tit...s_whitelisting

but still the mails are rejected but now with the following message:

name@example.com>: connect to 127.0.0.1[127.0.0.1]:10026:

Connection refused

This is the warning received by the sender.

There is now firewall between (everything is on localhost, no iptables).

Before this setup the sender received the following errors:

<<< 450 4.7.1 Client host rejected: cannot find your hostname, [xx.xx.xx.xx]
<name@example.com>... Deferred: 450 4.7.1 Client host rejected: cannot find your hostname, [xx.xx.xx.xx]
But I need to keep Anti Spam settings.


I have ZCS 6.0 on Ubuntu 8.04 64bit.
Please advise.

Thanks.

[uxbod]

Please check /var/log/zimbra.log for any error messages from postfix when it starts as you may have a error in your configuration.

[georgelazar]

Originally Posted by uxbod

Please check /var/log/zimbra.log for any error messages from postfix when it starts as you may have a error in your configuration.

Nothing relevant, only:

postfix/smtp[29915]: connect to 127.0.0.1[127.0.0.1]:10026: Connection refused

it is like amavis doesn't listen on 10026 too.
I didn't pay attanetion to details like how the ports should be specified:
10024,10026; or 10024, 10026;
in the wiki article there is a space between them, in my setup also..

Thanks.

[uxbod]

Would you post the files you have changed please so that we may check the syntax.

[veronica]

Amavis port is changed as far as i see from 10024 to 10026. Was it intentional ?

[georgelazar]

Originally Posted by uxbod

Would you post the files you have changed please so that we may check the syntax.

amavis.conf.in:

$inet_socket_port = 10024, 10026; # listen on this local TCP port(s) (see $protocol)
$interface_policy{'10026'} = 'CLIENTWHITELIST';
$policy_bank{'CLIENTWHITELIST'} = {
bypass_spam_checks_maps => [1],
final_spam_destiny => D_PASS,
};

and added:
amavis_client_whitelist (like in the article) with the following content:
xx.xx.xx.xx FILTER smtp-amavis:[127.0.0.1]:10026 (where xx.xx.xx.xx is the IP to be whitelisted)

and all the other details specified in the article.

Thanks.

[uxbod]

$inet_socket_port = [10024, 10026];

[veronica]

How can you have service listen on 2 different ports at same time ?

[uxbod]

It will fork two different processes.

[georgelazar]

Originally Posted by veronica

How can you have service listen on 2 different ports at same time ?

That shouldn't be a problem, I also have postfix listening on two different ports for standard SMTP and two different ports for SSL/TLS SMTP.

Amavis listening on two different ports in order to have IP white listing is described here:
IP Address whitelisting - Zimbra :: Wiki