[sieve] Restrict redirects to only own domain
Hello list,
I'd like to let my colleagues redirect mail automatically (via a sieve filter) to other mailboxes within the same domain, but deny redirects to outside mailboxes (gmail, yahoo etc.) since this is considered bad practice and could lead to blacklisting (forwarding spam for example).
If I set sieve_max_redirect to 0 then no redirect is allowed, at all. I wish to let redirects to internal mailboxes still possible.
Ideas ?
Yassine.
Hello list,
I'd like to let my colleagues redirect mail automatically (via a sieve filter) to other mailboxes within the same domain, but deny redirects to outside domains (gmail, yahoo etc.) since this could lead to blacklisting (forwarding spam for example).
If I set sieve_max_redirect to 0 then no redirect is allowed, at all. I wish to let redirects to internal mailboxes still possible. Ideas ?
Yassine.
On 16.10.18 12:48, Yassine Chaouche wrote:
I'd like to let my colleagues redirect mail automatically (via a sieve filter) to other mailboxes within the same domain, but deny redirects to outside domains [...] Ideas ?
Set up a simple internal web application or some other mechanism that allows your colleagues to enter the local address part for forwarding only. Use backend logic to generate a sieve script containing
redirect :copy "localpart@yourdomain.tld";
or whatever suits your needs.
-Ralph
Thanks Ralph but I don't fully understand how could this prevent them from forwarding to any other domain by other means, for example by using a managesieve-able client
Yassine.
On 10/16/18 12:37, Ralph Seichter wrote:
On 16.10.18 12:48, Yassine Chaouche wrote:
I'd like to let my colleagues redirect mail automatically (via a sieve filter) to other mailboxes within the same domain, but deny redirects to outside domains [...] Ideas ? Set up a simple internal web application or some other mechanism that allows your colleagues to enter the local address part for forwarding only. Use backend logic to generate a sieve script containing
redirect :copy "localpart@yourdomain.tld";
or whatever suits your needs.
-Ralph
On 16.10.2018 15:43, Yassine Chaouche wrote:
I don't fully understand how could this prevent them from forwarding to any other domain by other means, for example by using a managesieve- able client
Well, your OP made no mention of your environment. ;-) You posted on the Dovecot mailing list, so I suppose we know what your IMAP server is, but you mentioned nothing beyond that.
I made the assumption that your users are allowed to use sieve, based on the subject line, but you did not elaborate on how they use it. Simplest form: Sieve files. If you generate the files, you can screen the content and also keep them read-only for users.
If you have important restrictions/conditions, you need to mention them to us.
-Ralph
Op 16/10/2018 om 12:42 schreef Yassine Chaouche:
Hello list,
I'd like to let my colleagues redirect mail automatically (via a sieve filter) to other mailboxes within the same domain, but deny redirects to outside mailboxes (gmail, yahoo etc.) since this is considered bad practice and could lead to blacklisting (forwarding spam for example).
If I set sieve_max_redirect to 0 then no redirect is allowed, at all. I wish to let redirects to internal mailboxes still possible.
Ideas ?
The redirect action implicitly adds an X-Sieve-Redirected-From header. You could block such e-mails from being routed outside your domain in your MTA. I believe most MTAs have routing features that would support doing this.
Regards,
Stephan.
participants (3)
-
Ralph Seichter
-
Stephan Bosch
-
Yassine Chaouche