Results 1 to 7 of 7

Thread: Creating a send-only user without mailbox

  1. #1
    S.F. is offline Junior Member
    Join Date
    Mar 2008
    Posts
    9
    Rep Power
    7

    Default Creating a send-only user without mailbox

    I'm currently planning a migration from a Postfix+Cyrus server to Zimbra (ZCS 8 NE). In our current setup we have a special user called mailrelay which can authenticate to Postfix in order to send mail, but which does not have a mailbox in Cyrus. This mailrelay user is used by other machines to send mail from Cron jobs und similar tasks through our mail server.

    Is it possible to create a similar send-only user in Zimbra? In particular, I'd like for this user to not have a mailbox, so that no one can (accidentally or otherwise) send mail to this user. Also, I'd prefer if this could be done such that it doesn't use up a license.

  2. #2
    lytledd is offline Elite Member
    Join Date
    Dec 2009
    Location
    Michigan
    Posts
    453
    Rep Power
    5

    Default

    Not necessary.

    As long as the servers are located within your 'MTA Trusted Networks', then they won't require authentication to send mail.

    Doug
    Ben Franklin quote:

    "Those who would give up Essential Liberty to purchase a little Temporary Safety, deserve neither Liberty nor Safety."

  3. #3
    S.F. is offline Junior Member
    Join Date
    Mar 2008
    Posts
    9
    Rep Power
    7

    Default

    Okay, but what if some of these servers are on external/public networks which we cannot trust? I don't think I can do without authentication in this case.

  4. #4
    speno is offline Senior Member
    Join Date
    Apr 2010
    Posts
    57
    Rep Power
    5

    Default

    Quote Originally Posted by S.F. View Post
    Okay, but what if some of these servers are on external/public networks which we cannot trust? I don't think I can do without authentication in this case.
    If you want to go down this route, you can edit postfix's mynetworks attribute using the Zimbra server attribute zimbraMtaMyNetworks. You can add the address of specific hosts in there to allow unauthenticated SMTP connections from it to your Zimbra's instance of postfix.

    That may be the easiest solution, but I'm sure there are ways to wrangle the config to use actual authentication.

  5. #5
    phoenix is online now Zimbra Consultant & Moderator
    Join Date
    Sep 2005
    Location
    Vannes, France
    Posts
    23,581
    Rep Power
    57

    Default

    Quote Originally Posted by speno View Post
    If you want to go down this route, you can edit postfix's mynetworks attribute using the Zimbra server attribute zimbraMtaMyNetworks. You can add the address of specific hosts in there to allow unauthenticated SMTP connections from it to your Zimbra's instance of postfix.
    You should never (IMO) add a server to your Trusted Networks that's on a public IP unless you can trust it 100% - if that server gets compromised you have just made yourself a nice open relay.

    Quote Originally Posted by speno View Post
    That may be the easiest solution, but I'm sure there are ways to wrangle the config to use actual authentication.
    Anything relaying through a ZCS server can use the submission Port 587 which will require authentication.
    Regards


    Bill


    Acompli: A new adventure for Co-Founder KevinH.

  6. #6
    S.F. is offline Junior Member
    Join Date
    Mar 2008
    Posts
    9
    Rep Power
    7

    Default

    Quote Originally Posted by phoenix View Post
    Anything relaying through a ZCS server can use the submission Port 587 which will require authentication.
    This is precisely what I want to do. However, this obviously requires authentication credentials, and I do not want to create a full-blown account for this. Is it possible to manually add an entry to the authentication database for this purpose? If so, how?

  7. #7
    lytledd is offline Elite Member
    Join Date
    Dec 2009
    Location
    Michigan
    Posts
    453
    Rep Power
    5

    Default

    Use an existing account's credentials, but with the from address like 'reporting@yourdomain.com'. I do this all the time. As long as it's a valid local domain, it'll work just fine. I also use postie for sending, it supports authentication.

    Doug
    Ben Franklin quote:

    "Those who would give up Essential Liberty to purchase a little Temporary Safety, deserve neither Liberty nor Safety."

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Similar Threads

  1. Creating a Shared Mailbox
    By Brian.Ingram@epescarriers.com in forum Administrators
    Replies: 4
    Last Post: 08-06-2012, 10:40 AM
  2. Creating a Shared Mailbox
    By Brian.Ingram@epescarriers.com in forum General Questions
    Replies: 2
    Last Post: 08-03-2012, 11:33 AM
  3. Creating an IMAP connection to a Zimbra mailbox
    By gregstalter in forum Administrators
    Replies: 7
    Last Post: 05-04-2012, 11:26 AM
  4. sending a welcome mail after creating new mailbox.
    By Caterpillar in forum Administrators
    Replies: 1
    Last Post: 07-19-2010, 03:17 AM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •