[SOLVED] restrict sending mails to other domains

[stalker]

Hello Guys,

I want to restrict all users of zimbra to send emails to other domains like gmail hotmail etc. But they can communicate into local domain. I've used configuration provided in below link but it didn't work. Please help me.

RestrictPostfixSenders - Zimbra :: Wiki

I am using zimbra version : Release 7.1.0_GA_3140.UBUNTU10_64 UBUNTU10_64 NETWORK edition.

Thanks.

[beli.sk]

Hi,
Have a look at a similar article:
RestrictPostfixRecipients - Zimbra :: Wiki

Maybe you could use parts of it to deny outgoing mail to some domains/addresses.

[stalker]

Thanks mate.

I already found the solution.

I am marking it as solved.

Here is the solution.

Changes in /opt/zimbra/conf/zmmta.cf
Replace
POSTCONF smtpd_sender_restrictions LOCAL postfix_smtpd_sender_restrictions
With
POSTCONF smtpd_sender_restrictions FILE postfix_smtpd_sender_restrictions

Create a file /opt/zimbra/conf/access_sender and add following content to it.
postmaster@xyz.com
xyz.com reject_unauth_destination
.xyz.com reject_unauth_destination

Execute following command using zimbra user
postmap hash:/opt/zimbra/conf/access_sender

Add following line to /opt/zimbra/postfix/conf/main.cf
smtpd_restriction_classes = local_only
local_only = check_recipient_access hash:/opt/zimbra/conf/local_domains, reject

Create a file /opt/zimbra/conf/local_domains and add following content to it.
xyz.com OK
localhost OK
127.0.0.1 OK

Voila.

[drewy]

I have similar needs to restrict outgoing email. I followed every steps you proposed but when I run the postmap command, I got the following message:

postmap: warning: /opt/zimbra/conf/access_sender, line 1: expected format: key whitespace value

If I ignore this warning and proceed with all the steps, I'm unable to send any email from Zimbra. If I reset the zmmta.cf and main.cf back to the default settings, it works again.

I've also tried to omit the line ¨postmaster@xyz.com¨ in access_sender. There isn't any error message when I run postmap hash:. But I get the same result. I can't send any email.

I'm running Release 7.1.2_GA_3268.UBUNTU10_64 UBUNTU10_64 FOSS edition.

Please advise.

[stalker]

can you please post what configuration you did in conf file?

[drewy]

I followed the steps you suggested:

1) In zmmta.cf, I modified:
POSTCONF smtpd_sender_restrictions FILE postfix_smtpd_sender_restrictions

2) In access_sender file, I added:
toto.com reject_unauth_destination
.toto.com reject_unauth_destination

I omitted the first line "postmaster@toto.com¨ because I got a warning message when I do a postmasp hash: with zimbra user.

3) In main.cf, I added:
smtpd_restriction_classes = local_only
local_only = check_recipient_access hash:/opt/zimbra/conf/local_domains, reject

4) In local_domains file, I added:
toto.com OK
localhost OK
127.0.0.1 OK

When I restarted zimbra and performed telnet, I didn´t get the following response:
220 zimbra.toto.com ESMTP Postfix

However, when I commented out the last two lines in main.cf file, and restart Zimbra, everything works fine again - which means I´m still unable to restrict outgoing email to external domain names.
#smtpd_restriction_classes = local_only
#local_only = check_recipient_access hash:/opt/zimbra/conf/local_domains, reject

Please help.

[stalker]

Did you execute the following command?

postmap hash:/opt/zimbra/conf/local_domains

[drewy]

That´s one missing step that I didn´t do.

There isn´t any error messages and it´s working, but I´m still able to send email to outside domains. What else did I miss?

[stalker]

Originally Posted by drewy

That´s one missing step that I didn´t do.

There isn´t any error messages and it´s working, but I´m still able to send email to outside domains. What else did I miss?

Well, please check MTA logs. And if it's possible try to restart MTA.

[drewy]

After spending countless hours trying to get this to work, I finally discovered the way to fix.

1) Firstly, in /opt/zimbra/conf/zmmta.cf
It should´ve been modified as
POSTCONF smtpd_sender_restrictions FILE postfix_smtpd_sender_restriction.cf

2) Then, I added this
echo ¨hash:/opt/zimbra/conf/access_sender¨ > /opt/zimbra/conf/postfix_smtpd_sender_restriction.cf

Alas, it´s working now. Thanks.