Skip to Content
Last modified by Sebastian Marsching on 2022/05/29 13:59
From version 2.1
edited by Sebastian Marsching
on 2022/04/03 22:56
Change comment: There is no comment for this version
To version 1.1
edited by Sebastian Marsching
on 2022/04/03 22:51
Change comment: There is no comment for this version

Summary

Details

Page properties
Content
... ... @@ -43,16 +43,13 @@
43 43  However, for OpenDKIM and [SpamAssassin](https://sebastian.marsching.com/wiki/SpamAssassin), you also want to trust your other mail servers. You can get this effect by editing the configuration files and adding the appropriate IP addresses there:
44 44  
45 45  `/opt/zimbra/conf/opendkim-localnets.conf.in` (Zimbra 8 only):
46 -```
47 -%%zimbraMtaMyNetworksPerLine%%
48 -192.0.2.1/32
49 -[2001:db8::1]/128
50 -```
51 -`/opt/zimbra/conf/salocal.cf.in`:
52 -```
53 -%%uncomment VAR:zimbraMtaMyNetworks%%trusted_networks %%zimbraMtaMyNetworks%% 192.0.2.1/32 [2001:db8::1]/128
54 -```
55 55  
47 + %%zimbraMtaMyNetworksPerLine%%
48 + 192.0.2.1/32
49 + [2001:db8::1]/128
50 +
51 + %%uncomment VAR:zimbraMtaMyNetworks%%trusted_networks %%zimbraMtaMyNetworks%% 192.0.2.1/32 [2001:db8::1]/128
52 +
56 56  In recent Zimbra versions (ZCS 8.5 and newer) it might be more elegant to add your own `trusted_networks` line to `/opt/zimbra/data/spamassassin/localrules/sauser.cf`.
57 57  
58 58  **Important note:** Earlier versions of this tutorial suggested also adding the hosts to the `@mynetworks` list in `amavisd.conf.in`. However, this is not a good idea because it will cause [SpamAssassin](https://sebastian.marsching.com/wiki/SpamAssassin) to treat all e-mail as "submitted" by an authenticated client and thus it will also treat all hosts as trusted, even if it would not otherwise (as explained on the [SpamAssassin mailing list](http://mail-archives.apache.org/mod_mbox/spamassassin-users/201604.mbox/%3Cxn0k4sewlxfk5pi005%40news.gmane.org%3E)). For this reason, `zimbraMtaMyNetworks` should only contain the Zimbra server itself and the `@mynetworks` option in the Amavis configuration should not be changed.