Enabling and administering the Zimbra milter: Difference between revisions
(domain and style modification (by SublimeText.Mediawiker)) |
|||
| Line 3: | Line 3: | ||
<div class="col-md-12 ibox-content"> | <div class="col-md-12 ibox-content"> | ||
=Enabling and administering the Zimbra milter= | =Enabling and administering the Zimbra milter= | ||
{{KB|{{Unsupported}}|{{ZCS 8.0}}|{{ZCS 7.0}}|}} | {{KB|{{Unsupported}}|{{ZCS 8.6}}|{{ZCS 8.5}}|{{ZCS 8.0}}|{{ZCS 7.0}}|}} | ||
{{WIP}} | {{WIP}} | ||
==Getting Started== | ==Getting Started== | ||
| Line 13: | Line 13: | ||
'''''Note that the Milter server should only be enabled on servers running the MTA.''''' | '''''Note that the Milter server should only be enabled on servers running the MTA.''''' | ||
Global: Home > Configure > Global Settings > MTA > Milter Server | |||
Server: Home > Configure > Servers > Select Desired Server > MTA > Milter Server | |||
*Alternatively using the CLI: | *Alternatively using the CLI: | ||
su - zimbra | |||
zmprov modifyConfig zimbraMilterServerEnabled TRUE | |||
For a specific server (say mail.zimbra.lab): | |||
zmprov modifyServer mail.zimbra.lab zimbraMilterServerEnabled TRUE | |||
The above steps will ensure that milter will be automatically started via "zmcontrol start" | The above steps will ensure that milter will be automatically started via "zmcontrol start" | ||
To start the milter manually: | To start the milter manually: | ||
zmmilterctl start | |||
To check the status of the milter: | To check the status of the milter: | ||
zmmilterctl status | |||
Usage: zmmilterctl start|stop|restart|reload|refresh|status | Usage: zmmilterctl start|stop|restart|reload|refresh|status | ||
The following will provide examples for granting sender permissions on the CLI: | |||
*User - grants a user sending permissions to a distribution list | *User - grants a user sending permissions to a distribution list | ||
zmprov grr dl distributionlist@zimbra.lab usr user@zimbra.lab sendToDistList | |||
*Group (distribution list) - grants a group sending rights to distribution list | *Group (distribution list) - grants a group sending rights to distribution list | ||
zmprov grr dl distributionlist@zimbra.lab grp groupdl@zimbra.lab sendToDistList | |||
*All Entities - allows all entities on the server to send to a distribution list | *All Entities - allows all entities on the server to send to a distribution list | ||
zmprov grr dl distributionlist@zimbra.lab all sendToDistList | |||
*Domain - grant all users on a domain sending rights | *Domain - grant all users on a domain sending rights | ||
zmprov grr dl distributionlist@zimbra.lab dom zimbra.lab sendToDistList | |||
*Public - grant all users both internal/external sending rights | *Public - grant all users both internal/external sending rights | ||
zmprov grr dl distributionlist@zimbra.lab pub sendToDistList | |||
*After granting or revoking rights for the milter, you must reaload the configuration for the changes to take effect. | *After granting or revoking rights for the milter, you must reaload the configuration for the changes to take effect. | ||
zmmtactl reload | |||
==Verifying permissions for an entity== | ==Verifying permissions for an entity== | ||
| Line 67: | Line 69: | ||
*Checking a single user or entity: | *Checking a single user or entity: | ||
zmprov ckr dl distributionlist@zimbra.lab userorentity@zimbra.lab sendToDistList | |||
ALLOWED | |||
*Viewing granted permissions for the distribution list: | *Viewing granted permissions for the distribution list: | ||
| Line 74: | Line 76: | ||
1) Get the users Zimbra ID: | 1) Get the users Zimbra ID: | ||
zmprov ga user@zimbra.lab |grep -i "zimbraid: " | |||
2) Check the permissions on the distribution list: | 2) Check the permissions on the distribution list: | ||
zmprov gdl distributionlist@zimbra.lab |less | |||
3) Find the 'zimbraACE' entries and compare the users' id: | 3) Find the 'zimbraACE' entries and compare the users' id: | ||
zimbraACE: [zimbraId of user] usr sendToDistList | |||
For example; | |||
zimbraACE: c524877c-e0a6-4255-bb1b-d02b35cc2dd5 dom sendToDistList | |||
zimbraACE: 99999999-9999-9999-9999-999999999999 pub sendToDistList | |||
==Modifying and revoking grants== | ==Modifying and revoking grants== | ||
If you want to remove or modify permissions, you'll need to use 'zmprov rvr' instead of 'zmprov grr'. | |||
*Example of removing sendToDistList permissions for a user: | *Example of removing sendToDistList permissions for a user: | ||
zmprov rvr dl distributionlist@zimbra.lab usr user@zimbra.lab sendToDistList | |||
*After granting or revoking rights for the milter, you must reaload the configuration for the changes to take effect. | *After granting or revoking rights for the milter, you must reaload the configuration for the changes to take effect. | ||
zmmtactl reload | |||
==Troubleshooting the Zimbra milter== | ==Troubleshooting the Zimbra milter== | ||
| Line 103: | Line 106: | ||
*Verify the milters settings: | *Verify the milters settings: | ||
zmmilterctl status | |||
''Milter server is running.'' | |||
{{Article Footer| | {{Article Footer|ZCS 7.0 | ZCS 8.0, ZCS 8.5, ZCS 8.6| 2013}} | ||
Revision as of 09:50, 12 January 2016
Enabling and administering the Zimbra milter
- This article is a Work in Progress, and may be unfinished or missing sections.
Getting Started
The Zimbra milter allows for the regulation of distribution list senders on a Global or server level. When the milter server is enabled, only users who have been granted (with steps below) explicit sending permissions will be allowed.
Enabling the Milter Server
Note that the Milter server should only be enabled on servers running the MTA.
Global: Home > Configure > Global Settings > MTA > Milter Server
Server: Home > Configure > Servers > Select Desired Server > MTA > Milter Server
- Alternatively using the CLI:
su - zimbra zmprov modifyConfig zimbraMilterServerEnabled TRUE
For a specific server (say mail.zimbra.lab):
zmprov modifyServer mail.zimbra.lab zimbraMilterServerEnabled TRUE
The above steps will ensure that milter will be automatically started via "zmcontrol start"
To start the milter manually:
zmmilterctl start
To check the status of the milter:
zmmilterctl status
Usage: zmmilterctl start|stop|restart|reload|refresh|status
The following will provide examples for granting sender permissions on the CLI:
- User - grants a user sending permissions to a distribution list
zmprov grr dl distributionlist@zimbra.lab usr user@zimbra.lab sendToDistList
- Group (distribution list) - grants a group sending rights to distribution list
zmprov grr dl distributionlist@zimbra.lab grp groupdl@zimbra.lab sendToDistList
- All Entities - allows all entities on the server to send to a distribution list
zmprov grr dl distributionlist@zimbra.lab all sendToDistList
- Domain - grant all users on a domain sending rights
zmprov grr dl distributionlist@zimbra.lab dom zimbra.lab sendToDistList
- Public - grant all users both internal/external sending rights
zmprov grr dl distributionlist@zimbra.lab pub sendToDistList
- After granting or revoking rights for the milter, you must reaload the configuration for the changes to take effect.
zmmtactl reload
Verifying permissions for an entity
- Checking a single user or entity:
zmprov ckr dl distributionlist@zimbra.lab userorentity@zimbra.lab sendToDistList ALLOWED
- Viewing granted permissions for the distribution list:
1) Get the users Zimbra ID:
zmprov ga user@zimbra.lab |grep -i "zimbraid: "
2) Check the permissions on the distribution list:
zmprov gdl distributionlist@zimbra.lab |less
3) Find the 'zimbraACE' entries and compare the users' id:
zimbraACE: [zimbraId of user] usr sendToDistList
For example;
zimbraACE: c524877c-e0a6-4255-bb1b-d02b35cc2dd5 dom sendToDistList zimbraACE: 99999999-9999-9999-9999-999999999999 pub sendToDistList
Modifying and revoking grants
If you want to remove or modify permissions, you'll need to use 'zmprov rvr' instead of 'zmprov grr'.
- Example of removing sendToDistList permissions for a user:
zmprov rvr dl distributionlist@zimbra.lab usr user@zimbra.lab sendToDistList
- After granting or revoking rights for the milter, you must reaload the configuration for the changes to take effect.
zmmtactl reload
Troubleshooting the Zimbra milter
- Verify the milters settings:
zmmilterctl status Milter server is running.
