Zimbra and MailScanner

[uxbod]

Well I have started to attempt to integrate ZCS with MailScanner and so far so good ... I have installed Postfix and MS on a front-end server and have querying ZCS for valid domains, mailboxes and aliases in real time via LDAP.

Junking emails via ZCS also updates a shared MySQL Bayes store.

Next part is to write a LDAP hook for the Black/White listing and allow ZCS account access to MailWatch for quarantine work.

[blazeking]

Thread subscribed. I'm curious as to how you configured MailScanner's access to the shared MySQL Bayes that Zimbra uses... or is it the other way around?

[uxbod]

It was easy enough actually. Updated /opt/zimbra/conf/salocal.cf.in with the following

use_bayes 1
bayes_auto_expire 0
bayes_store_module              Mail::SpamAssassin::BayesStore::MySQL
bayes_sql_dsn                   DBI:mysql:sa_bayes:xxxxxxxxxxxx
bayes_sql_username              sa_user
bayes_sql_password              xxxxxxxxx

To point to the Bayes MySQL store on the MailScanner server. Same config used on the MS server aswell. That way when somebody Junk/Unjunks a email in ZCS the Bayes will be modified.

Change the following configuration lines in /etc/MailScanner/Mailscanner.conf so that SPAM emails will appear in the Junk folder within ZCS

Spam Actions = deliver header "X-Spam-Flag: YES"
Non Spam Actions = deliver header "X-Spam-Flag: NO"

Alternatively you could update the header that ZCS uses

zmprov gacf zimbraSpamHeader
zimbraSpamHeader: X-Spam-Flag

but I am trying to keep my ZCS install as vanilla as possible.

[uxbod]

If anybody is running ZCS V6 with the B&L lists could they try this and let me know how long it takes to run

#!/usr/bin/perl

use Net::LDAP;

my $zcs_server = 'your.zcs.server.fqdn';
my $zmamavis_pass = 'XXXXXXXXXX';

$ldap = Net::LDAP->new($zcs_server) or die "$@";

@acc_filter = ( 'zimbraMailDeliveryAddress', 'zimbraMailAlias' );
@wbl_filter = ( 'amavisWhitelistSender', 'amavisBlacklistSender' );

$ldap->bind('uid=zmamavis,cn=appaccts,cn=zimbra', password => $zmamavis_pass);
$result = $ldap->search(filter=>'(&(zimbraMailStatus=enabled))', attrs => \@acc_filter);

@accounts = $result->entries;
foreach $account (@accounts) {
        foreach $emailaccount ($account->attributes) {
                $email = $account->get_value($emailaccount);
                $filter = "(&(zimbraMailDeliveryAddress=" . $email . ")(zimbraMailStatus=enabled))";
                $result = $ldap->search(filter=>$filter, attrs => \@wbl_filter);
                @lists = $result->entries;

                foreach $wbl (@wbl_filter) {
                        foreach $list (@lists) {
                                foreach $entry ($list->get_value($wbl)) {
                                        print "$email,$wbl,$entry\n";
                                }
                        }
                }
        }
}

$mesg = $ldap->unbind;

This is just a test before I write the MailScanner hook and if you can let me know how many accounts that would be great. You should see something like

uxbod@xxxxxxxxxxx,amavisWhitelistSender,wl1@xyz.com
uxbod@xxxxxxxxxxx,amavisWhitelistSender,wl12@abc.com
uxbod@xxxxxxxxxxx,amavisBlacklistSender,bl1@ghi.com

It is not the most efficient code but it works and I already have stub code for plugging into MS as a Perl module.

[uxbod]

Well I have created the plugin for MailScanner to query Zimbra V6 Black and White lists by LDAP. I based the code on Steve Freegards excellent SQL one. If anybody would like to try it then please PM me.

[leo de punk]

Originally Posted by uxbod

Well I have created the plugin for MailScanner to query Zimbra V6 Black and White lists by LDAP. I based the code on Steve Freegards excellent SQL one. If anybody would like to try it then please PM me.

Hi UXBOD,
I know this is a bit old thread, But I would like to know how did you query to zimbra from MailScanner. I'm trying to connect a MailScanner to my zimbra box and I am bit confused with the port setup for incoming and outgoing mails. can you please give me your instructions to connect mailscanner with zimbra in step by step as i am new to this?
what is the better way of installing/configuring mailscanner for zimbra (in the samebox or different box)???

many thanks in advance
regards
leo