Carbonio as a non-authenticated SMTP Relay for internal machines - Install & Setup

RE: Carbonio as a non-authenticated SMTP Relay for internal machines

Bzambrano — Thu, 29 May 2025 19:35:35 +0000

@alfsal amigo sabras como configurar el correo para que envie mails a otros correos como gmail, o en que parte se configura el smtp.

RE: Carbonio as a non-authenticated SMTP Relay for internal machines

Sharif — Mon, 12 May 2025 06:25:31 +0000

@itguy

I am going to take a look the issue and will update you guys!

RE: Carbonio as a non-authenticated SMTP Relay for internal machines

Iamout — Fri, 09 May 2025 02:17:04 +0000

@Md. Shariful Islam - How does one created a post where links are NOT removed. Perhaps, create a post and explain for others to understand. Thank you.

@ALFSAL - I wonder why you did not continue in English after your first post?

RE: Carbonio as a non-authenticated SMTP Relay for internal machines

ALFSAL — Wed, 07 May 2025 11:16:50 +0000

sure. Actually If you translate my last post, it is exactly what you mention. The thing is I dont know why the file paths were removed when I referenced them. I will try using the double quotes here:

/opt/zextras/common/conf/relay_domains_whitelist.cf

RE: Carbonio as a non-authenticated SMTP Relay for internal machines

Sharif — Wed, 07 May 2025 08:36:54 +0000

@alfsal

Hi,

These are some useful findings. Why don't you create a separate post where you could describe your objectives, initiatives, CLI references and result in a clear way so that it can be a easy to read and useful reference for others who need this.

I am sure all users would appreciate your contribution.

RE: Carbonio as a non-authenticated SMTP Relay for internal machines

ALFSAL — Wed, 07 May 2025 02:28:02 +0000

Como nadie me respondió, me puse a leer varios post de zimbra y encontré la solución.

Lo que voy a documentar sirve para que el carbonio SOLAMENTE permita hacer relay de correo hacia los dominios que se encuentren listados en un archivo. No importa si la conexion que se recibe al puerto 25 esta autenticado o no. Eso si, quien intente enviar el correo debe conocer una cuenta de correos de uno de los dominios LOCALES del Carbonio para que se le permite ese relay. Caso, contrario no se le permitirá ese envío.

Como usuario "zextras" crear el archivo removed link y definir alli los dominios a los cuales se permitirá el envío de correos, así (omitir los simbolos ++++):

++++++++++++++++++++++++

hotmail.com OK

gmail.com OK

+++++++++++++++++++++++

Grabar el archivo y ejecutar:

$postmap removed link

Confirmar que se crea el archivo:

removed link .lmdb

Ahora, con el mismo usuario "zextras", editar el archivo removed link y dejarlo tal cual como se muestra abajo (omitir los simbolos ++++):

+++++++++++++++++++++++++++++++++++++++++++++++++++++

check_recipient_access lmdb: removed link

reject

+++++++++++++++++++++++++++++++++++++++++++++++++++

Finalmente, solo reiniciar el servicio "mta":

$zmcontrol restart mta

Listo, ahora se puede comprobar que SOLO se permitirá enviar correos a los dominios listados en el archivo.

Carbonio as a non-authenticated SMTP Relay for internal machines

ALFSAL — Fri, 04 Apr 2025 16:21:14 +0000

Hi Community,

Could you help me with the following?

I´m trying to use a single server Carbonio CE as a simple SMTP relay for my internal machines which cannot support SMTP autentication. But I need to restrict the domains where they are allowed to send the notifications. I have read this post (https://community.zextras.com/forum/postid/10088/) but It didn´t work because I think it is valid only for authenticated senders.

Is there any simple way to setup a GLOBAL domain whitelist where all the emails can only be sent no matter if the senders are or not smtp authenticated?

Thanks in advance!

Alf