Sender right restriction Zimbra8 via Milter Service

Specially for Zimbra 8

The Zimbra milter allows for the regulation of distribution list senders on a Global or server level. When the milter server is enabled, only users who have been granted explicit sending permissions will be allowed. Enabling the Milter Server

Note that the Milter server should only be enabled on servers running the MTA.

    Global: Home > Configure > Global Settings > MTA > Milter Server

    Server: Home > Configure > Servers > Select Desired Server > MTA > Milter Server

   Alternatively using the CLI:

       # su - zimbra
       $ zmprov modifyConfig zimbraMilterServerEnabled TRUE

For a specific server (say eg.example.com):

       $ zmprov modifyServer eg.example.com zimbraMilterServerEnabled TRUE

The above steps will ensure that milter will be automatically started via "zmcontrol start"

To start the milter manually:

       $ zmmilterctl start

To check the status of the milter:

       $ zmmilterctl status

   The following will provide examples for granting sender permissions on the CLI:

   User - grants a user sending permissions to a distribution list

       $ zmprov grr dl distributionlist@domain.com usr user@domain.com sendToDistList

   Group (distribution list) - grants a group sending rights to distribution list

       $ zmprov grr dl distributionlist@domain.com grp groupdl@domain.com sendToDistListThe Zimbra milter allows for the regulation of distribution list senders on a Global or server level. When the milter server is enabled, only users who have been granted explicit sending permissions will be allowed.

Enabling the Milter Server

Note that the Milter server should only be enabled on servers running the MTA.

    Global: Home > Configure > Global Settings > MTA > Milter Server

    Server: Home > Configure > Servers > Select Desired Server > MTA > Milter Server

   Alternatively using the CLI:

       # su - zimbra
       $ zmprov modifyConfig zimbraMilterServerEnabled TRUE

For a specific server (say eg.example.com):

       $ zmprov modifyServer eg.example.com zimbraMilterServerEnabled TRUE

The above steps will ensure that milter will be automatically started via "zmcontrol start"

To start the milter manually:

       $ zmmilterctl start

To check the status of the milter:

       $ zmmilterctl status

   The following will provide examples for granting sender permissions on the CLI:

   User - grants a user sending permissions to a distribution list

       $ zmprov grr dl distributionlist@domain.com usr user@domain.com sendToDistList 
       $ zmprov grr dl all.staff@orientbell.com usr vijay.thakur@orientbell.com sendToDistList

   After granting or revoking rights for the milter, you must reaload the configuration for the changes to take effect.

         $ zmmtactl reload

Modifying and revoking grants

   If you want to remove or modify permissions, you'll need to use 'zmprov rvr' instead of 'zmprov grr'.

   Example of removing sendToDistList permissions for a user:

         $ zmprov rvr dl distributionlist@domain.com usr user@domain.com sendToDistList

   After granting or revoking rights for the milter, you must reaload the configuration for the changes to take effect.

         $ zmmtactl reload

Reference : http://wiki.zimbra.com/wiki/Enabling_and_administering_the_Zimbra_milter

NOTE: Before doing the above exercise be ensure that distribution list must be exists. and let client add the member to that distribution list.