Zimbra Mail 8.8.15 - mta trust networks

Tiago SM — Mon, 06 Feb 2023 15:19:20 +0000

Zimbra Mail 8.15 - mta trust networks error
/var/log/zimbra.log

Jan 9 11:01:22 mail amavis[98061]: (!!)TROUBLE in pre_loop_hook: Invalid IPv4 network mask or CIDR prefix length [127.0.0.0/8,192.168.0.13/32,::1,2888:bb:30:300:2222:3fff:eeee:ca8d] 
Jan 9 11:01:22 mail amavis[98061]: (!)_DIE: Suicide () TROUBLE in pre_loop_hook: Invalid IPv4 network mask or CIDR prefix length: [127.0.0.0/8,192.168.0.13/32,::1,2888:bb:30:300:2222:3fff:eeee:ca8d]
Jan 9 11:01:34 mail postfix/smtps/smtpd[98117]: fatal: open dictionary: expecting "type:name" form instead of "::1"
Jan 9 11:01:35 mail postfix/master[6018]: warning: process /opt/zimbra/common/libexec/smtpd pid 98117 exit status 1
Jan 9 11:01:35 mail postfix/master[6018]: warning: /opt/zimbra/common/libexec/smtpd: bad command startup -- throttling

The IPs line format is wrong! [127.0.0.0/8,192.168.0.13/32,::1,2888:bb:30:300:2222:3fff:eeee:ca8d]

How to Fix?
Settings > Zimbra Admin > Servers > MTA Trust Networks field. In the property format, loopback IPV4 and IPV6 must be included!

IPV4/mask IPV6/mask

127.0.0.0/8 192.168.0.13/32 ::1/128 2888:bb:30:300:2222:3fff:eeee:ca8d/64

PFSense

Tiago SM — Mon, 06 Feb 2023 15:01:25 +0000

How to list blocked IPs and unblock IP?

$pfctl -t sshguard -T show
   1.0.246.105
   1.9.79.191
   1.52.149.133
   1.53.170.75
   1.164.252.130
   1.212.246.18
   1.217.60.210
   1.235.197.132

To unblock an IP, e.g. 1.235.197.132, run:

$pfctl -t sshguard -T delete 1.235.197.132

1/1 addresses deleted.

https://docs.netgate.com/pfsense/en/latest/firewall/easyrule.html
easyrule pass [destination port]

DEV Community: Tiago SM

Zimbra Mail 8.8.15 - mta trust networks

PFSense