Jump to content

Sender right restriction Zimbra8 via Milter Service

From TetraWiki
Revision as of 13:49, 9 January 2015 by Biswajit (talk | contribs)


Specially for Zimbra 8

The Zimbra milter allows for the regulation of distribution list senders on a Global or server level. When the milter server is enabled, only users who have been granted explicit sending permissions will be allowed. Enabling the Milter Server

Via Zimbra Admin Panel

Global: Home > Configure > Global Settings > MTA > Milter Server
Server: Home > Configure > Servers > Select Desired Server > MTA > Milter Server 

Alternatively using the CLI:

# su - zimbra
$ zmprov modifyConfig zimbraMilterServerEnabled TRUE

For a specific server (say eg.example.com):

$ zmprov modifyServer eg.example.com zimbraMilterServerEnabled TRUE

The above steps will ensure that milter will be automatically started via "zmcontrol start"

To start the milter manually:

       $ zmmilterctl start

To check the status of the milter:

       $ zmmilterctl status 

Usage: zmmilterctl start|stop|restart|reload|refresh|status

The following will provide examples for granting sender permissions on the CLI:

User - grants a user sending permissions to a distribution list

$ zmprov grr dl distributionlist@domain.com usr user@domain.com sendToDistList 
$ zmprov grr dl all.staff@orientbell.com usr vijay.thakur@orientbell.com sendToDistList           

After granting or revoking rights for the milter, you must reaload the configuration for the changes to take effect.

$ zmmtactl reload

Modifying and revoking grants

If you want to remove or modify permissions, you'll need to use 'zmprov rvr' instead of 'zmprov grr'.

Example of removing sendToDistList permissions for a user:

$ zmprov rvr dl distributionlist@domain.com usr user@domain.com sendToDistList

After granting or revoking rights for the milter, you must reaload the configuration for the changes to take effect.

$ zmmtactl reload


Reference : http://wiki.zimbra.com/wiki/Enabling_and_administering_the_Zimbra_milter

NOTE: Before doing the above exercise be ensure that distribution list must be exists. and let client add the member to that distribution list.