https://wiki.tetrain.com/index.php?action=history&feed=atom&title=Rejecting_false_%22mail_from%22_addresses 2026-07-25T07:38:11Z Revision history for this page on the wiki MediaWiki 1.43.9 https://wiki.tetrain.com/index.php?title=Rejecting_false_%22mail_from%22_addresses&diff=2355&oldid=prev 2017-02-10T10:11:17Z

<p>Editing Rejecting false &quot;mail from&quot; addresses</p> <p><b>New page</b></p><div> Rejecting false &quot;mail from&quot; addresses<br /> 1.-Zimbra Collaboration 8.5 and above <br /> Please use the next commands to increase the security and reject the logins for users that doesn&#039;t exist in the LDAP: <br /> zmprov mcf zimbraMtaSmtpdRejectUnlistedRecipient yes <br /> zmprov mcf zimbraMtaSmtpdRejectUnlistedSender yes <br /> zmmtactl restart <br /> zmconfigdctl restart <br /> <br /> 2.- For Zimbra Collaboration 8.0.x and previous <br /> Open the file /opt/zimbra/conf/zmconfigd/smtpd_sender_restrictions.cf and add this line into the middle of the file, prior to the tag_as_foreign.re lines: Add this: <br /> check_sender_access hash:/opt/zimbra/conf/domainrestrict <br /> <br /> It should look like this.. <br /> check_sender_access hash:/opt/zimbra/conf/domainrestrict <br /> %%contains VAR:zimbraServiceEnabled antivirus^ check_sender_access regexp:/opt/zimbra/postfix/conf/tag_as_foreign.re%% <br /> <br /> 3. Zimbra Collaboration 7.x <br /> You should follow the next steps: <br /> su - zimbra <br /> zmlocalconfig -e postfix_smtpd_sender_restrictions=&quot;reject_unknown_sender_domain, permit_mynetworks, permit_sasl_authenticated, check_sender_access hash:/opt/zimbra/conf/domainrestrict, permit&quot; <br /> <br /> 4.-Remaining steps are same for ZCS 8.0.x and previous versions <br /> i.-Create the file &quot;/opt/zimbra/conf/domainrestrict&quot; and add your domain(s) to it. <br /> <br /> localdomain.com REJECT <br /> anotherlocaldomain.com REJECT <br /> ii.- Create the hash database of &quot;/opt/zimbra/conf/domainrestrict&quot;. Run as &#039;zimbra&#039; user. <br /> postmap /opt/zimbra/conf/domainrestrict <br /> iii.- Restart zmmtactl. <br /> zmmtactl stop <br /> zmmtactl start <br /> <br /> 5.- Testing <br /> <br /> i.- Make following connection from a non-local host which is not part of mynetworks. <br /> telnet ZCS_server_address 25 <br /> mail from: user@localdomain.com <br /> rcpt to: user2@localdomain.com <br /> <br /> ii.- You should get following error at the rcpt command if you used the Zimbra Collaboration 8.6 steps: <br /> 550 5.1.0 &lt;hi@example.com&gt;: Sender address rejected: example.com <br /> iii.- You should get following error at the rcpt command <br /> 554 5.7.1 &lt;user@localdomain.com&gt;: Sender address rejected: You&#039;re not me!</div>

Prashantkumar