This material is copyright and is licensed for the sole use by Kliwon Klimis on 28th October 2008 425 cilce, , frood, grradt, 525254

Securing Zimbra

4.Now we will add one site to test out the blacklist. To test the blacklist functionality, enter a domain of a personal email account you have. In my case I will use gmail.com

marty.resnick@gmail.com

5. When completed, to save the file type:

:wq!

Now that our two files are created, we need to tell the anti-spam system where to find our lists. To do this, we will edit the amavisd.conf.in file located in the /opt/ zimbra/conf folder. To edit this file:

1. Switch user to Zimbra: su - zimbra

2. From a command line type the following:

Vi /opt/Zimbra/conf/amavisd.conf.in

3.With the file open, hit the I key on your keyboard to place vi in insert mode.

4.Directly above where the file reads

# ENVELOPE SENDER SOFT-WHITELISTING / SOFT-BLACKLISTING

5.Add the following two lines:

read_hash(\%whitelist_sender, '/etc/zimbra/whitelist'); read_hash(\%blacklist_sender, '/etc/zimbra/blacklist');

6. Once complete, save and exit the file by typing:

:wq!

7. In order for the change to take effect, we must restart the amavisd service: zmamavisdctl stop

zmamavisdctl start

Our blacklist and whitelist are now complete and ready for testing.

As this is not an officially supported feature, its management is not straightforward: you'll have to redo the modifications to amavisd. conf.in each time you upgrade Zimbra.

Anti-Virus

Along with anti-spam being built into the Zimbra Collaboration Suite, anti-virus is built-in as well. The program Zimbra uses ClamAV. In fact, you cannot enable one without the other. Once you enable anti-spam by checking on the checkbox in the Global Settings | AS/AV tab, anti-virus was also enabled.

[ 124 ]