Add RBLs and RHSBLs on zimbra server

-

How to add RBLs and RHSBLs on zimbra server

To verify already updated policies in host

[root@mail ]# su zimbra
[zimbra@mail ]$ zmprov gacf | grep zimbraMtaRestriction
zimbraMtaRestriction: reject_invalid_helo_hostname
zimbraMtaRestriction: reject_non_fqdn_sender

To add RBL server

[zimbra@mail /]$ zmprov mcf +zimbraMtaRestriction “reject_rbl_client zen.spamhaus.org”
[zimbra@mail /]$ zmprov mcf +zimbraMtaRestriction “reject_rbl_client psbl.surriel.com”
[zimbra@mail /]$ zmprov mcf +zimbraMtaRestriction “reject_rbl_client b.barracudacentral.org”

or

[zimbra@mail /]$ zmprov mcf \
zimbraMtaRestriction “reject_rbl_client zen.spamhaus.org” \
zimbraMtaRestriction “reject_rbl_client psbl.surriel.com” \
zimbraMtaRestriction “reject_rbl_client b.barracudacentral.org” \
zimbraMtaRestriction “reject_rbl_client bl.spamcop.net”

To add RHSBLs

[zimbra@mail /]$ zmprov mcf \
zimbraMtaRestriction “reject_rhsbl_client dbl.spamhaus.org” \
zimbraMtaRestriction “reject_rhsbl_client multi.uribl.com” \
zimbraMtaRestriction “reject_rhsbl_client multi.surbl.org” \
zimbraMtaRestriction “reject_rhsbl_client rhsbl.sorbs.net”

To add Sender RHSBLs

[zimbra@mail /]$ zmprov mcf \
zimbraMtaRestriction “reject_rhsbl_sender multi.uribl.com” \
zimbraMtaRestriction “reject_rhsbl_sender multi.surbl.org” \
zimbraMtaRestriction “reject_rhsbl_sender rhsbl.sorbs.net” \
zimbraMtaRestriction “reject_rhsbl_sender dbl.spamhaus.org”

To add Reverse Client RHSBLs

[zimbra@mail /]$ zmprov mcf +zimbraMtaRestriction “reject_rhsbl_reverse_client dbl.spamhaus.org”

or

To add all RBLs

$ zmprov mcf \
zimbraMtaRestriction reject_invalid_helo_hostname \
zimbraMtaRestriction reject_non_fqdn_sender \
zimbraMtaRestriction “reject_rbl_client zen.spamhaus.org” \
zimbraMtaRestriction “reject_rbl_client psbl.surriel.com” \
zimbraMtaRestriction “reject_rbl_client b.barracudacentral.org” \
zimbraMtaRestriction “reject_rbl_client bl.spamcop.net” \
zimbraMtaRestriction “reject_rhsbl_client dbl.spamhaus.org” \
zimbraMtaRestriction “reject_rhsbl_client multi.uribl.com” \
zimbraMtaRestriction “reject_rhsbl_client multi.surbl.org” \
zimbraMtaRestriction “reject_rhsbl_client rhsbl.sorbs.net” \
zimbraMtaRestriction “reject_rhsbl_reverse_client dbl.spamhaus.org” \
zimbraMtaRestriction “reject_rhsbl_sender multi.uribl.com” \
zimbraMtaRestriction “reject_rhsbl_sender multi.surbl.org” \
zimbraMtaRestriction “reject_rhsbl_sender rhsbl.sorbs.net” \
zimbraMtaRestriction “reject_rhsbl_sender dbl.spamhaus.org”

The output look like as follows:

[zimbra@mail /]$ zmprov gacf | grep zimbraMtaRestriction zimbraMtaRestriction: reject_invalid_helo_hostname
zimbraMtaRestriction: reject_non_fqdn_sender
zimbraMtaRestriction: reject_rbl_client zen.spamhaus.org
zimbraMtaRestriction: reject_rbl_client psbl.surriel.com
zimbraMtaRestriction: reject_rbl_client b.barracudacentral.org
zimbraMtaRestriction: reject_rbl_client bl.spamcop.net
zimbraMtaRestriction: reject_rhsbl_client dbl.spamhaus.org
zimbraMtaRestriction: reject_rhsbl_client multi.uribl.com
zimbraMtaRestriction: reject_rhsbl_client multi.surbl.org
zimbraMtaRestriction: reject_rhsbl_client rhsbl.sorbs.net
zimbraMtaRestriction: reject_rhsbl_reverse_client dbl.spamhaus.org
zimbraMtaRestriction: reject_rhsbl_sender multi.uribl.com
zimbraMtaRestriction: reject_rhsbl_sender multi.surbl.org
zimbraMtaRestriction: reject_rhsbl_sender rhsbl.sorbs.net
zimbraMtaRestriction: reject_rhsbl_sender dbl.spamhaus.org


Ref:

https://dilliganesh.wordpress.com/2017/10/10/how-to-add-rbls-and-rhsbls-on-zimbra-server/

Comments

Post a Comment

Popular posts from this blog

Cambium cnPilot E400/E410/E500 Configuration Tutorial

-
Image
Basic Connectivity:   Router (Broadband/mikrotik |dhcp enabled) >>> E400/E410/E500 + LAPTOP Cambium (Powered ON) [POE port] >>>> LAPTOP [LAN port] Step 1: Open Cambium controller in the browser. Step 2: After entering in to the site click on the Onboard Device option from Home Tab of Left Panel. Step 3: In the Onboard Option, we will get Claim Device option to adopt a Cambium AP. Step 4: Now we will move to the Cambium AP configuration Part. Below are credentials of default login access of cnpilot E400/E410/E500/E410/E500. IP:192.168.0.1 Command Line Access: Username: admin Telnet: Disabled by default Password: admin SSH: Enabled by default (on standard port: 22) ***We can also use dhcp IP to login to the cnpilot E400/E410/E500. We will get login page. Step 5: We can see several TAB on left panel. On the DashBoard Tab, we will get some overall information. Some are useful for the configuration; some are useful for troubleshoo...
Read more

Disabling Zimbra's AntiSpam, Amavis and AntiVirus filtering

-
 Check whether antispam and antivirus service is enabled currently on server using the given command zmprov -l gs <mail.example.com> | egrep -i 'serviceen|servicein'  The above command will list all the services which are currently installed and enabled on the server. Disable the antivirus and antispam services using the given commands zmprov -l ms <mail.example.com> -zimbraServiceEnabled antispam  zmprov -l ms <mail.example.com> -zimbraServiceEnabled amavis zmprov -l ms <mail.example.com> -zimbraServiceEnabled antivirus  Comment the following line in the file /opt/zimbra/postfix/conf/main.cf content_filter = smtp-amavis:[127.0.0.1]:10024  Restart services on server zmcontrol restart  Confirm that the antispam and antivirus services are disabled with the given command zmprov -l gs <mail.example.com> | egrep -i 'serviceen|servicein'  zmcontrol status 
Read more

Error "Unable to retrive Zimbra GPG key for package validation"

-
From the installation log we see: Executing: /tmp/tmp.mSlzRMclVa/gpg.1.sh --keyserver keyserver.ubuntu.com --recv-keys 9BE6ED79 gpg: requesting key 9BE6ED79 from hkp server keyserver.ubuntu.com gpg: keyserver timed out gpg: keyserver receive failed: keyserver error 1. Open port 11371 11371 tcp,udp hkp OpenPGP HTTP Keyserver 2. Force it to use port 80: gpg --keyserver hkp://keyserver.ubuntu.com:80 --recv-keys 9BE6ED79 Ref: https://wiki.zimbra.com/wiki/Error_%22Unable_to_retrive_Zimbra_GPG_key_for_package_validation%22
Read more