Edge MTA account lookup

[Cringer]

Hi,

I've got Zimbra installed inside my firewall for internal users. This all works great.

Historically we have MDaemon as our edge MTA, but it keeps getting a huge amount of undeliverable email set to it. If it could refuse emails to unknown emails, the traffic would reduce massively.

It can do email account checking (LDAP) via its domain connector, but I just can't seem to get it to talk to my Zimbra server. I think I have opened up the correct ports on the firewall (TCP & UDP 389). I'm also uncertain of the required security to pass.

Can anyone help?

[Klug]

You can use LDAP callout or SMTP callout.

SMTP callout is not enable by default in Zimbra (and I do not understand why).

Here's how to enable it :
. edit /opt/zimbra/conf/zmmta.cf
. search for "POSTCONF smtpd_reject_unlisted_recipient no"
. change the "no" to "yes"
. restart MTA

You'll have to do it after each Zimbra upgrade.

I have not tried LDAP callout as my edge MTA run perfectly with SMTP callout.

[Cringer]

Hi Klug,

Fortunately my edge MTA only seems to support LDAP.

Plus from what I can gather (while experementing using an LDAP Browser program), that Zimbra LDAP is version 3, and I don't know what version my edge MTA uses.

Thanks for your words of wisdom, they might enable me to choose a better edge MTA at some point.

[Klug]

If the Edge MTA becomes the issue, change it 8)

You can either use Zimbra "directly" as MTA or, if you _need_ a edge MTA that forwards to different servers based on the domain address, you can have a look at MailCleaner.

[raj]

Just plain simple Postfix or Postfix with mysql will do perfect job of MX gateway
Lots of articles on google to make Postfix gateway..
Easy would be to do Zimbra as Edge MTA..it has postfix in it anyway..so why reinvent the wheel

Raj