Enabling and administering the Zimbra milter: Difference between revisions

(Created page with "{{Article Infobox|{{admin}}|{{ZCS 8.0}}|{{ZCS 7.0}}||}} ==Getting Started== The Zimbra milter allows for the regulation of distribution list senders on a Global or server le...")
 
Line 5: Line 5:
The Zimbra milter allows for the regulation of distribution list senders on a Global or server level. When the milter server is enabled, only users have been granted explicit sending permissions will be allowed.  
The Zimbra milter allows for the regulation of distribution list senders on a Global or server level. When the milter server is enabled, only users have been granted explicit sending permissions will be allowed.  


*In ZCS 8, to enable the Milter through the Administrators console;
==Enabling the Milter Server==


       Global: Home > Configure > Global Settings > MTA > Milter Server
       Global: Home > Configure > Global Settings > MTA > Milter Server
Line 49: Line 49:




*Verifying permissions for an entity
==Verifying permissions for an entity==
 
*Checking a single user or entity:
 
        $ zmprov ckr dl distributionlist@domain.com userorentity@domain.com sendToDistList
        ALLOWED
 
*Viewing granted permissions for the distribution list:


1) Get the users Zimbra ID:
1) Get the users Zimbra ID:
Line 66: Line 73:
           zimbraACE: 99999999-9999-9999-9999-999999999999 pub sendToDistList
           zimbraACE: 99999999-9999-9999-9999-999999999999 pub sendToDistList


*Modifying and revoking grants--if you want to remove or modify permissions, you'll need to use 'zmprov rvr' instead of 'zmprov grr'.
==Modifying and revoking grants==
 
*If you want to remove or modify permissions, you'll need to use 'zmprov rvr' instead of 'zmprov grr'.


*Example of removing sendToDistList permissions for a user:  
*Example of removing sendToDistList permissions for a user:  
Line 74: Line 83:
*After granting or revoking rights for the milter, you must reaload the configuration for the changes to take effect.  
*After granting or revoking rights for the milter, you must reaload the configuration for the changes to take effect.  


           $ zmmtactl reload  
           $ zmmtactl reload
 


==Troubleshooting the Zimbra milter==
==Troubleshooting the Zimbra milter==

Revision as of 18:11, 7 August 2013

Admin Article

Article Information

This article applies to the following ZCS versions.

ZCS 8.0 Article ZCS 8.0 ZCS 7.0 Article ZCS 7.0


Getting Started

The Zimbra milter allows for the regulation of distribution list senders on a Global or server level. When the milter server is enabled, only users have been granted explicit sending permissions will be allowed.

Enabling the Milter Server

     Global: Home > Configure > Global Settings > MTA > Milter Server
     Server: Home > Configure > Servers > Select Desired Server > Milter Server 
  • On the CLI:
        # su - zimbra
        $ zmmilterctl start

To check the status of the milter:

        $ zmmilterctl status 

Usage: zmmilterctl start|stop|restart|reload|refresh|status


When the milter server is enabled, all distribution lists will be regulated. Only those entities which have been granted explicit rights to send to a distribution list will be allowed.


  • The following will provide examples for granting sender permissions on the CLI:
  • User - grants a user sending permissions to a distribution list
        $ zmprov grr dl distributionlist@domain.com usr user@domain.com sendToDistList            
  • Group (distribution list) - grants a group sending rights to distribution list
        $ zmprov grr dl distributionlist@domain.com grp groupdl@domain.com sendToDistList
  • All Entities - allows on entities on the server to send to a distribution list
        $ zmprov grr dl distributionlist@domain.com all sendToDistList
  • Domain - grant all users on a domain sending rights
        $ zmprov grr dl distributionlist@domain.com dom domain.com sendToDistList
  • Public - grant all users both internal/external sending rights
        $ zmprov grr dl distributionlist@domain.com pub sendToDistList


Verifying permissions for an entity

  • Checking a single user or entity:
        $ zmprov ckr dl distributionlist@domain.com userorentity@domain.com sendToDistList
        ALLOWED
  • Viewing granted permissions for the distribution list:

1) Get the users Zimbra ID:

         $ zmprov ga user@domain.com |grep -i "zimbraid: "

2) Check the permissions on the distribution list:

         $ zmprov gdl distributionlist@domain.com |less

3) Find the 'zimbraACE' entries and compare the users' id:

         zimbraACE: [zimbraId of user] usr sendToDistList
         For example;
         zimbraACE: c524877c-e0a6-4255-bb1b-d02b35cc2dd5 dom sendToDistList
         zimbraACE: 99999999-9999-9999-9999-999999999999 pub sendToDistList

Modifying and revoking grants

  • If you want to remove or modify permissions, you'll need to use 'zmprov rvr' instead of 'zmprov grr'.
  • Example of removing sendToDistList permissions for a user:
          $ zmprov rvr dl distributionlist@domain.com usr user@domain.com sendToDistList
  • After granting or revoking rights for the milter, you must reaload the configuration for the changes to take effect.
          $ zmmtactl reload

Troubleshooting the Zimbra milter

  • Verify the milters settings:
         $ zmmilterctl status 
         Milter server is running.
         $ zmmilterctl status 

Additional information to be posted



Verified Against: Zimbra Collaboration Suite 8 Date Created: 2013
Article ID: https://wiki.zimbra.com/index.php?title=Enabling_and_administering_the_Zimbra_milter Date Modified: 2013-08-07



Try Zimbra

Try Zimbra Collaboration with a 60-day free trial.
Get it now »

Want to get involved?

You can contribute in the Community, Wiki, Code, or development of Zimlets.
Find out more. »

Looking for a Video?

Visit our YouTube channel to get the latest webinars, technology news, product overviews, and so much more.
Go to the YouTube channel »


Jump to: navigation, search