[P]Delete

Here is a small post on how to setup pflogsumm on your CentOS mail server running Postfix.  It takes advantage of logrorate being called nightly by cron. 1. Install pflogsumm # wget http://jimsun.linxnet.com/downloads/pflogsumm-1.1.3.tar.gz # tar zxvf pflogsumm-1.1.3.tar.gz 2. Run a test # cat /var/log/maillog | ./pflogsumm.pl 3. Update /etc/logrotate.d/syslog.  Add the following: prerotate cat /var/log/maillog | ./path_to_pflogsumm/pflogsumm.pl | mail -s "Postfix Logs Summary `date`" your-email-address endscript

I have a condition where my customers cannot sending email for some domain by directly. I give an advice to them for using Relay for all external delivery. But they do not want all external delivery using relay for security reason. They want just some domain receiver for using relay. Okay, because them using Zimbra 8.5/8.6, i can do relay for some domain only. # Create transport for domain receiver that would be relay   su - zimbra vi /opt/zimbra/postfix/conf/transportfile Fill with the following example   domain1.com       :[relay.example.com] domain2.com       :[relay.example.com] user1@domain3.com :[relay.example.com] The above example, every sending email to domain1.com and domain2.com or user1@domain3.com , will be relay to relay.example.com . If your relay server using port such as 465, 587 or another port, you can change like this  [relay.example.com]:587 # Postmap Transport postm...

On previous post, we can relay email based on user/domain receiver . But, on this guidance is reverse from previous post. ie the relay based on user/domain sender. Zimbra supported for multi domain. You can have many domain in one Zimbra server. I have condition where either domain cannot sending to some domains. For example, i have 2 domains in Zimbra server, domain1.com and domain2.com. domain1.com can sending email to domain3.com but domain2.com cannot sending email to domain3.com. Whereas domain1.com and domain2.com are in one Zimbra server. it is rather strange indeed. For be able sending to domain3.com from domain2.com, i am decide to relay every sending email from domain2.com. For do that, i do the following guidance # Add the following configuration in /opt/zimbra/postfix/conf/main.cf   sender_dependent_relayhost_maps = lmdb:/opt/zimbra/postfix/conf/bysender # Create file above and adding users/domains would be relay vi /o...

Issues         Starting zmconfigd...Failed. Starting zmconfigd...failed. Issue is /etc/hosts having 127.0.0.1 and ::1 zmconfigd was listening to ipv4, nc was trying to talk to ::1 Resolve - Disable IPv6 in /etc/hosts Commented out ::1 in /etc/hosts - Disable IPv6 in /etc/sysctl.conf vi /etc/sysctl.conf Add in the bottom net.ipv6.conf.all.disable_ipv6 = 1 net.ipv6.conf.default.disable_ipv6 = 1 Apply the change sysctl -p

Policyd has module access control. This module can use for some aims as improving anti spam reject unlisted domain like article has been wrote before. Module access control also can use for restrict users sending to certain users/domains and this article will explain how to apply. Assume you have been install and configure policyd like the following article  How To Install PolicyD on Zimbra 8.5 . For information, i have user with name user1@imanudin.net. This user can sending to domain local only (imanudin.net) and deny to other domain. Open policyd webui on http://ZimbraServer:7780/webui/index.php . First, create users and domains group. Select Groups. Add new group and given name users_local_only . Add member users to group users_local_only . Don’t forget to change status disable yes become no . Add new group and given name list_domain . Add member domains to group list_domain . Don’t forget to change status disable yes become no.  See the following pictu...

Still talking about Policyd. When you access policyd webui, it’s not asking username and password. So, everyone can access policyd configuration via webui. To protect policyd webui, we can use three ways. First, we can stopping Apache service Zimbra with zmapachectl stop . Second, we can use firewall to protect and third, we can use login username and password  with htaccess. From three options available, i am recommended to using third option. This is how to protect policyd webui using username and password with htaccess. cd /opt/zimbra/cbpolicyd/share/webui/ vi .htaccess fill with the following lines AuthUserFile /opt/zimbra/cbpolicyd/share/webui/.htpasswd AuthGroupFile /dev/null AuthName "User and Password" AuthType Basic   <LIMIT GET> require valid-user < /LIMIT> create htpasswd file, username and password touch .htpasswd /opt/zimbra/httpd/bin/htpasswd -cb .htpasswd USERNAME PASSWORD chang...

After previously preparation for install Zimbra has been finished , we can install Zimbra right now. First, we can download Zimbra Binary from this link  http://www.zimbra.com/downloads/zimbra-collaboration-open-source or if you are in Indonesia region, you can download on follows link  http://mirror.linux.or.id/zimbra/binary/ . view source print ? cd /opt/ wget -c  http://files2.zimbra.com/downloads/8.5.0_GA/zcs-8.5.0_GA_3042.RHEL7_64.20140828204420.tgz After finished download, extract Zimbra, cd to folder result of extract and install Zimbra 1. tar -zxvf zcs-8.5.0_GA_3042.RHEL7_64.20140828204420.tgz 2. cd zcs-8.5.0_GA_3042.RHEL7_64.20140828204420 3. sh install .sh type Y if asking license agreement Do you agree with the terms of the software license agreement? [N] Y Select the packages to install like follows Install zimbra-ldap [Y] Y Install zimbra-logger [Y] Y Install zimbra-mta [Y] Y Install zimbra-dnscache [Y] N Install...

Usually, i am always using SUSE Linux Enterprise Server as operating system for Zimbra Mail Server. But, starting from Zimbra 9.x.x, SLES has been deprecated (end of life) and may be will not supported by Zimbra. Therefore, i attempt to using CentOS as operating system for Zimbra. For easy understanding, this is my information system Domain : imanudin.net Hostname : mail IP Address : 192.168.26.11 # Configure Network First, we must configure network on CentOS. Assuming name of your network interface is eth0 vi /etc/sysconfig/network-scripts/ifcfg-eth0   DEVICE=eth0 ONBOOT=yes NM_CONTROLLED=no BOOTPROTO=none IPADDR=192.168.26.11 NETMASK=255.255.255.0 DNS1=192.168.26.11 GATEWAY=192.168.26.2 DNS2=192.168.26.2 USERCTL=no Restart network service and setup for automatic boot 1. service network restart 2. chkconfig network on # Configure Disable Selinux & Firewall Open file /etc/sysconfig/selinux and change SELINUX=enforcin...

For increase reputation of email server, we could adding SPF records on public DNS. What is SPF record? as information from this link :  https://support.google.com/a/answer/33786?hl=en , an SPF record is a type of Domain Name Service (DNS) record that identifies which mail servers are permitted to send email on behalf of your domain. The purpose of an SPF record is to prevent spammers from sending messages with forged From addresses at your domain. Recipients can refer to the SPF record to determine whether a message purporting to be from your domain comes from an authorized mail server. How to configure SPF records? On this section, i will configure SPF records on my public DNS using cPanel. Fill of spf records is using TXT records like the following example :   imanudin.net     IN     TXT     "v=spf1 a mx ip4:115.124.78.180 include:mail.imanudin.net -all" OR "v=spf1 mx ip4:115.124.78.180 ~all" Information : Domain...

DKIM (DomainKeys Identified Mail)  is a method of signing electronic emails using public private key. DKIM is used by receiving mail server for identifying email, that they are sent by authorized mail servers. It also minimize the possibility of getting emails SPAM. This tutorial will provide you a quick and easy way to set up DomainKeys with your  POSTFIX running on CentOS and RHEL systems. How DKIM Works ? When we configured DKIM on sending servers. First we generated a public/private key pair for signing outgoing messages. Public key is configured as TXT record on domains name server, and the private key is configured in outbound email server. When an email is sent by an authorized user of the email server, the server uses the stored private key to  generate  a digital signature of the message, which is inserted in the message as a header, and the email is sent as normal. Step 1: Install DKIM-milter First make sure you have  enabled EPEL  re...

Domain: hifisenses.com Email user: admin@hifisenses.com IP Server: - Websites: 54.169.2.144 - Mail Server: 23.229.189.137 Create A record: Hifisenses.com  Mail.hifisenses.com Create MX record Test: