restrict the access for certain distribution lists

[tiger2000]

dear all,

we're evaluating the zcs 7.1.1 (standard edition) and hope to control the access rights to certain distribution lists.

e.g. only few of our local users can send emails to the distribution lists (e.g. all@local.domain)

i've found this can be done via the ancient postfix configuration, such as: RestrictPostfixRecipients - Zimbra :: Wiki

but from zcs 7.x product introduction, it looks like it can be done via the admin UI > Rights ??

can someone enlighten me on how to achieve this?

Thanks.

[prashant]

Create a dl or edit existing dl -> Goto ACL tabs and specify your ACL for that dl.

An Access Control List (ACL) is a set of Access Control Entries (ACE's). An ACE specifies who (the "Grantee") can do what (the "right") on this object (the "target"). The table below allows for adding and removing ACE's for the target you are editing.

[prashant]

Refer Zimbra Admin Guide by clicking help desk link in Admin console.

[gvillari]

Originally Posted by tiger2000

dear all,

we're evaluating the zcs 7.1.1 (standard edition) and hope to control the access rights to certain distribution lists.

e.g. only few of our local users can send emails to the distribution lists (e.g. all@local.domain)

i've found this can be done via the ancient postfix configuration, such as: RestrictPostfixRecipients - Zimbra :: Wiki

but from zcs 7.x product introduction, it looks like it can be done via the admin UI > Rights ??

can someone enlighten me on how to achieve this?

Thanks.

Hi,

the reference bug is the following:

Bug 9620 – policy for who can send to a distribution lists

you can run the command in the guide to restrict access to distribution list.

eg. for restrict access to local user you can run:

 zmprov grr dl group@test.com usr user1@test.com sendToDistList

where 'group@test.com' is the distribution list address and 'user1@test.com' is the local account address.

To verify:

zmprov ckr dl group@test.com user@test.com sendToDistList

Could this help?

Regards

[gvillari]

I forgot one think, after run:

 zmprov grr dl group@test.com usr user1@test.com sendToDistList

also run:

zmmtactl restart

because the changes to take effect!

Regards

[abhaycs]

Hi Guys,
I have already tried by adding a DL with ACL and can receive mail flag set for user who acts as grantee where I have selected a function call SendToDistList and select Allow.Save this acl and tried to send a mail from that user as well as other user in both the case the mail went through which is not suppose to be the way it should work .Please correct me if I am missing any thing

[gvillari]

Hi,

you have to do the following checks:

run:

zmprov ckr dl group@test.com user@test.com sendToDistList

the output must be 'ALLOWED'

Also, have you run:

zmmtactl restart

Regards

[tiger2000]

don't know why, but these commands don't work for my evaluation environment (7.1.1 NE)

zmprov grr dl list@domain.name usr user1@domain.name sendToDistList
zmmtactl restart
(also verify by "ckr" option, it shows "ALLOWED")


after running those commands, it's supposed only "user1@domain.name" can send to this list? however, we found others accounts still be able to send emails to this list.

anything else i should check?
Thanks.

[tiger2000]

by the way, where this right: SendToDistList is defined?
i can't find it from Admin Console > Rights

where can i find a full list for those rights not listed in Admin Console > Rights ??

Thanks in advance.

[gvillari]

Hi,

have you enable the milter server?

Admin console-> Global setting -> enable milter server-> save.
Then:

zmmtactl restart

Regards