distribution list tweak

[scalper]

Hi,

Sorry if this question is a bit out of topic here.

I have this one distribution list, let say all@domain.com and I want the list to only accept mails internally and not from outside. Is there any config that I can do?

One more thing, what is the attributes for distribution lists. I am looking/making some scripts for bulk add users with distribution list for users accordingly to let say departments.

Thanx in advanced! Cheers for zimbra!

[KevinH]

There are no ACL's today. All lists are open. Use zmprov it has a bulk command option.

[claros]

Originally Posted by scalper

Hi,

Sorry if this question is a bit out of topic here.

I have this one distribution list, let say all@domain.com and I want the list to only accept mails internally and not from outside. Is there any config that I can do?

You can only disable the mailing list putting it to inactive from the admin interface

Originally Posted by scalper

One more thing, what is the attributes for distribution lists. I am looking/making some scripts for bulk add users with distribution list for users accordingly to let say departments.

Have a look at this script and change it as you need:

#!/bin/sh
for i in `zmprov gaa | grep dep.example.com`
do
zmprov adlm alluser@dep.example.com $i
done
zmprov rdlm alluser@dep.example.com <spam>@dep.example.com
zmprov rdlm alluser@dep.example.com <notspam>@dep.example.com
zmprov rdlm alluser@dep.example.com <wiki>@dep.example.com
echo "Lista alluser@dep.example.com Aggiornata!"

Ciao,
Claudio

[area]

I solve this issue by configuring a domain like 'company.local' and adding that domain to the local DNS server.

I can then add distribution lists to that domain; eg All.Staff@company.local

As the 'local' domain isn't know to external DNS servers, it won't resolve externally and therefore can't be used externally (well at least easily).

[scalper]

Originally Posted by area

I solve this issue by configuring a domain like 'company.local' and adding that domain to the local DNS server.

I can then add distribution lists to that domain; eg All.Staff@company.local

As the 'local' domain isn't know to external DNS servers, it won't resolve externally and therefore can't be used externally (well at least easily).

then the usr1@company.local mail forwards to usr1@company-fqdn.net ?

[jdell]

I did this on our Open Exchange box in postfix. We are getting ready to switch over to Zimbra, so I imagine I will be doing it again real soon...

Looking at postfix on our OX box, here is what I did:

List of originating domains or users that can send to protected list
jdell@portal:/etc/postfix> cat insiders
localhost OK
mydomain.com OK
host.mydomain.com OK
user@external-domain.com OK

Distribution lists that are being protected
jdell@portal:/etc/postfix> cat protected_destinations
all.staff@mydomain.com insiders_only
admin.staff@mydomain.com insiders_only
mgmt.staff@mydomain.com insiders_only

In main.cf, you would want something like the following:
smtpd_restriction_classes= insiders_only
insiders_only= check_sender_access hash:/etc/postfix/insiders, reject
smtpd_recipient_restrictions= hash:/etc/postfix/protected_destinations, ...

I'm not a postfix expert, and I believe this can be spoofed by a spammer who forges the mail headers, but in 3 years, I haven't had that happen (but before I put this in place, several spams did find there way to distribution lists).

There is probably a more elegant way to do this, and now that we are discussing this, anybody else think there ought to be an admin UI that allows you to restrict?

Also, from another thread, I don't think you can edit the postfix main.cf directly, rather you need to add this to /opt/zimbra/conf/zmmta.cf

If you get this working in your Zimbra, please post your setup!

[area]

Originally Posted by scalper

then the usr1@company.local mail forwards to usr1@company-fqdn.net ?

Well no, as you are trying to hide the email address for the FQDN.

I would just add all the users the list@company.local distribution list or forward to an obsfucated email address for
the FQDN - eg: a6d2nda@company.fqdn.net.

[scalper]

Originally Posted by area

Well no, as you are trying to hide the email address for the FQDN.

I would just add all the users the list@company.local distribution list or forward to an obsfucated email address for
the FQDN - eg: a6d2nda@company.fqdn.net.

okay.. then how the users will retrieve the email? need clarification thanx

[area]

Originally Posted by scalper

okay.. then how the users will retrieve the email? need clarification thanx

Hmmm - the concept of a distribution list is that an email sent to the list is delivered to everyone on that list; ie: to the
inbox for each user who belongs to that list.

[jdell]

I've created a wiki page for how I did this with postfix to restrict who can send to my distribution lists.

http://wiki.zimbra.com/index.php?tit...tfixRecipients