mailcleaner spam filtering

[firemike]

thinking about improvements of spam filtering, i read about mailcleaner ( start [Mailcleaner] ).
So i just installed MailCleaner 2010 Beta 3 inside a VM - with success.

But now, when configuring a new domain with MC, i have problems connecting to zimbraLdap.
What are the correct parameters for
- base DN
- bind user and pw
- user attribute
- ..

Who has experiences with the edge MTA mailcleaner in conjunction with zimbra and can help?

[phoenix]

Originally Posted by firemike

thinking about improvements of spam filtering, i read about mailcleaner ( start [Mailcleaner] ).
So i just installed MailCleaner 2010 Beta 3 inside a VM - with success.

But now, when configuring a new domain with MC, i have problems connecting to zimbraLdap.
What are the correct parameters for
- base DN
- bind user and pw
- user attribute
- ..

Who has experiences with the edge MTA mailcleaner in conjunction with zimbra and can help?

I've used it with my server and you shouldn't have any problems connecting to the Zimbra LDAP unless you still have anonymous searches disabled, check the Release Notes for details.

[reivilob]

Hi
Just an example that works fine:

Authentication type : ldap/Active Directory
Authentication server : your-zimbra-ip:389
Base DN: ou=yourou,dc=mydomain,dc=ch
Bind user : uid=mailcleaner,ou=yourou,dc=mydomain,dc=ch
Bind password : passwordforusermailcleaner
User attribute : uid
Use SSL:
Protocol version: 3
Username modifier : only use entered username (without domain)
Address lookup: fetch address(es) from ldap directory

I don't know if something special in the Zimbra configuration ...
If you need more idea just feel free to ask support on MailCleaner OpenSource Forum or professional support on MailCleaner Anti spam solution

Regards
O. Bourgeois

[Klug]

Olivier, I think using SMTP callout with MailCleaner is better than LDAP (less load on ZCS server).

You just have to configure your ZCS server to reject mails for not existing users (search "reject" in /opt/zimbra/conf/zmmta.cf and change "no" to "yes" on the line, then restart postfix).

[reivilob]

Hi Klug

Yes SMTP callout is always better than LDAP

But LDAP is better as authentication protocol for the user to access to the quarantine, because its allow to directly retreive from the LDAP/AD all the aliases of the user (if specified in the AD...)

Thanks for the information about the necessary postfix modification..

Meilleures salutations à toute la France ...
A+
Olivier

[dehylus]

Work fine zimbra + mailcleaner? howto?

Thanks.