Skip to Content
Last modified by Sebastian Marsching on 2022/05/29 13:59
From version 1.1
edited by Sebastian Marsching
on 2022/04/03 22:51
Change comment: There is no comment for this version
To version 2.2
edited by Sebastian Marsching
on 2022/04/03 23:06
Change comment: Tag [Network] hinzugefügt

Summary

Details

Page properties
Tags
... ... @@ -1,0 +1,1 @@
1 +Network
Content
... ... @@ -43,13 +43,16 @@
43 43  However, for OpenDKIM and [SpamAssassin](https://sebastian.marsching.com/wiki/SpamAssassin), you also want to trust your other mail servers. You can get this effect by editing the configuration files and adding the appropriate IP addresses there:
44 44  
45 45  `/opt/zimbra/conf/opendkim-localnets.conf.in` (Zimbra 8 only):
46 +```
47 +%%zimbraMtaMyNetworksPerLine%%
48 +192.0.2.1/32
49 +[2001:db8::1]/128
50 +```
51 +`/opt/zimbra/conf/salocal.cf.in`:
52 +```
53 +%%uncomment VAR:zimbraMtaMyNetworks%%trusted_networks %%zimbraMtaMyNetworks%% 192.0.2.1/32 [2001:db8::1]/128
54 +```
46 46  
47 - %%zimbraMtaMyNetworksPerLine%%
48 - 192.0.2.1/32
49 - [2001:db8::1]/128
50 -
51 - %%uncomment VAR:zimbraMtaMyNetworks%%trusted_networks %%zimbraMtaMyNetworks%% 192.0.2.1/32 [2001:db8::1]/128
52 -
53 53  In recent Zimbra versions (ZCS 8.5 and newer) it might be more elegant to add your own `trusted_networks` line to `/opt/zimbra/data/spamassassin/localrules/sauser.cf`.
54 54  
55 55  **Important note:** Earlier versions of this tutorial suggested also adding the hosts to the `@mynetworks` list in `amavisd.conf.in`. However, this is not a good idea because it will cause [SpamAssassin](https://sebastian.marsching.com/wiki/SpamAssassin) to treat all e-mail as "submitted" by an authenticated client and thus it will also treat all hosts as trusted, even if it would not otherwise (as explained on the [SpamAssassin mailing list](http://mail-archives.apache.org/mod_mbox/spamassassin-users/201604.mbox/%3Cxn0k4sewlxfk5pi005%40news.gmane.org%3E)). For this reason, `zimbraMtaMyNetworks` should only contain the Zimbra server itself and the `@mynetworks` option in the Amavis configuration should not be changed.