How to Implement Sender or Moderator Restricted Groups on Qmail-LDAP environment

Contents[edit]

Sender Restricted Groups[edit]

When a Sender send a mail to the group , the Qmail see whether the sender is allowed to send the mail or not . Also Sends back a mail to the sender , for him to reply and release the mail to the group members .

Please have following example of Sender Restricted group implemented in LDAP

# testgroup@krishnamaruti.com, groups, krishnamaruti.com  
dn: uid=testgroup@krishnamaruti.com,ou=groups,dc=krishnamaruti,dc=com
mailMessageStore: krishnamaruti.com/testgroup
objectClass: top
objectClass: person
objectClass: organizationalPerson
objectClass: inetOrgPerson
objectClass: qmailUser
objectClass: qmailGroup 
senderconfirm: TRUE
membersonly: TRUE
sn: GROUP-K
uid: testgroup@krishnamaruti.com
userPassword:: e01ENX1YMDNNTzFxblpkWWRneWZldUlMUG1RPT0=
cn: GROUP-K
deliveryMode: noLocal
givenName: KMLGRPOUP
mailAlternateAddress: testgroup-catchall@krishnamaruti.com 
mail: testgroup@krishnamaruti.com
rfc822sender: biswajit@tetrain.com
rfc822member: biswajit@tetrain.com

Please note

objectClass: qmailGroup is mandatory
mailAlternateAddress – A catch all type of address needs to be created as shown in example
The Restricted Sender is defined a email address by rfc822sender . The sender can belong to any domain . You can also define dnsender
Group Members are defined by 2 ways
- rfc822member , where any email address can come .
- dnmember , where you can define any distinquish names (dn) of this LDAP . For ex . dn: uid=tetra@krishnamaruti.com,dc=krishnamaruti,dc=com
To Ensure that the mails generated by the sender are authentic in nature , senderconfirm: TRUE is specified . An return mail to the same ID will be generated by Qmail ( Qmail-secetary ) and the sender has to reply this mail to release the sent mail to Group .

Moderator Restricted Groups[edit]

When a Sender send a mail to the group , the Qmail sends a mail to the defined moderators for approval . When Moderator replies , then Qmail releases the mail to the group members .

Please have following example of Modrator Restricted group implemented in LDAP

# group_1, tetrain.com, tetrain.com 
dn: uid=group_1,ou=tetrain.com,dc=tetrain,dc=com
objectClass: top
objectClass: qmailUser
objectClass: qmailGroup
objectClass: inetOrgPerson
sn: group_1
cn: group_1
uid: group_1
mailMessageStore: tetrain.com/group_1
mail: group_1@tetrain.com
mailAlternateAddress: group_1-catchall@tetrain.com
dnmoderator: uid=biswajit,ou=tetrain.com,dc=tetrain,dc=com
confirmtext: Do you really want to post to this group,R U Sure ?
moderatortext: Hello, hello!? Shall we proceed and send this out?
dnmember: uid=biswajit,ou=tetrain.com,dc=tetrain,dc=com
rfc822member: biswajit_gmail@gmail.com

Please note

objectClass: qmailGroup is mandatory
mailAlternateAddress – A catch all type of address needs to be created as shown in example
The Modrator is defined by dnmoderator for ex. uid=biswajit,ou=tetrain.com,dc=tetrain,dc=com ( The distinguish name in LDAP) . You can also define rfc822moderator , which can be any email address belonging to any domain .
To Ensure that the mails generated by the sender are moderated , confirmtext: and moderatortext is specified . An mail to the moderator's ID will be generated by Qmail ( Qmail-secetary ) and the any of the moderator has to reply this mail to release the sent mail to Group .

Allow full domain to send mail other restricted[edit]

Add an attribute like

filtersender: (mail=*@sceh.net)

This will allow all the populated address in the ldap having <anyuser>@sceh.net to send the mail to this list and will not allow any other domain to send mail to this list .

Referance[edit]

QLDAPGROUP file in Qmail Source after Qmail-LDAP patch Applied File:QLDAPGROUP.txt

I Hope it is clear . Please get back @ biswajit@tetrain.com for clarification