====== Zimbra - Whitelist or Blacklist ======

https://wiki.zimbra.com/wiki/Anti-spam_Strategies

https://wiki.zimbra.com/wiki/New_Features_ZCS_8.5#Ability_to_blacklist_specific_IP_addresses

https://wiki.zimbra.com/wiki/New_Features_ZCS_8.5#Ability_to_whitelist_blacklisted_IP_addresses

https://wiki.zimbra.com/wiki/New_Features_ZCS_8.5#Ability_to_reject_or_accept_deny_emails_for_specific_users

<note tip>Users can use **ZWC -> Preferences -> Mail -> Spam Mail Options**</note>

<note tip>If enabled, users can also **right-click on a message** and choose to **block** (blacklist) or **allow** (whitelist) the sender or entire sender domain</note>

===== Spamassassin =====

<code>
su - zimbra
vim /opt/zimbra/data/spamassassin/localrules/sauser.cf
</code>

then:

<code>
zmamavisdctl restart
</code>

==== sauser.cf ====

Do not use this example blindly.  **It must be modified**.  Older example:

<code>
use_bayes 1
skip_rbl_checks 0
use_razor2 1
use_dcc 1
use_pyzor 1
dns_available yes

## Optional Score Increases
## Choose your preferred values...
score DCC_CHECK 4.000
score SPF_FAIL 4.000
score SPF_HELO_FAIL 4.000
score RAZOR2_CHECK 2.500
score PYZOR_CHECK 2.500
score BAYES_99 3.000
score BAYES_90 3.000
score BAYES_80 3.000
bayes_ignore_header Received: from localhost

## Black and White List
whitelist_from statistics@reporting.smtproutes.com
whitelist_from no-reply@my.swmailassure.com
whitelist_from support@vitelity.com
whitelist_from payments@ems.travelers.com
</code>

----

<note important>Old info below...</note>

See also **[[internet:mail:zimbra:zimbra_spam|Zimbra Antivirus and Antispam]]**

See also **[[internet:mail:zimbra:zimbra_dkim|Zimbra DKIM Configuration]]**

https://wiki.zimbra.com/wiki/Improving_Anti-spam_system

**Howto**: http://shahzadlinux.blogspot.com/2016/03/how-to-blacklist-or-whitelist-ip.html

===== By Sender E-Mail Address =====

:!: This will affect **all users**!

As ''root'':

<file>
vim /opt/zimbra/data/spamassassin/localrules/sauser.cf
</file>

Add at the bottom, modifying for your needs:

<file>
## Black and White List
whitelist_from statistics@reporting.smtproutes.com
blacklist_from spammer@example.com
</file>

Restart the filter:

<file>
zmamavisdctl restart
</file>

==== Examples of Valid Entries ====

  * ''spammer@example.com'' - blocks/allows all email from spammer@example.com
  * ''example.com'' - blocks/allows all email from ANY address at example.com

===== By IP Address =====

==== Zimbra 8.5+ ====

:!: As a last resort, you can add an IP address to the Postfix ''mynetworks'' definition of **trusted hosts**.

Become the ''zimbra'' user:
<file>
su - zimbra
</file>

=== Whitelist ===

<file>
vim /opt/zimbra/conf/postfix_rbl_override

xxx.xxx.xxx.xxx OK
</file>

then:

<file>
postmap /opt/zimbra/conf/postfix_rbl_override

zmprov mcf +zimbraMtaRestriction 'check_client_access lmdb:/opt/zimbra/conf/postfix_rbl_override'
</file>

=== Blacklist ===

<file>
vim /opt/zimbra/conf/postfix_blacklist

xxx.xxx.xxx.xxx REJECT
</file>

then:

<file>
postmap /opt/zimbra/conf/postfix_blacklist

zmprov mcf +zimbraMtaRestriction 'check_client_access lmdb:/opt/zimbra/conf/postfix_blacklist'
</file>

=== Restart the MTA ===

<file>
zmmtactl restart
</file>