Hello,

Can you please advise how to block emails from specific ip addresses using policyd (I am using cluebringer-2.0.12-3.2) in Postfix

In fact, activating quota doesn't work. Your suggestions please.

Best regards,
Wafa Ben Khoud
Email Administrator

Hi:

I've never used policyd but this configuration guide looks like a start.

https://wiki.policyd.org/documentation

Set-up the Cluebringer database

https://uname.pingveno.net/blog/inde...9-with-Postfix

You might want to include what distribution you are running so others can help you.

Thank you Ztcoracat,

As mentionned I am using cluebringer-2.0.12-3.2 , the links that you specified were my first support/guide for installing and configuring policyd

I have problems when I configure quota limits. I tried to apply some limits but it doesn't work.

When I use the default database, the quota works correctly. I want to modify the control acces, policies and quota to block some IP addresses.

Regards,

You're Welcome.

Modifying the control policy and quota sounds complex to me. Maybe this will help?

Changing a Quota or Quotas Limit
Easiest method to change a quota is to delete your previously set quotas and quotas limits, and import a new rate-limit.sql:

https://wiki.zimbra.com/wiki/Cluebringer_Policy_Daemon

After doing some reading about Cluebringer if I understand it correctly you need to deny what you don't want going on and either Enable the Access Control Module or Disable the Access Control Module. The Access Control Policy should allow you to allow or deny access to your API's by a specific ip address.

http://docs.apigee.com/api-services/...control-policy

https://www.cyberciti.biz/faq/how-do...-linux-server/

You can block an ip address with iptables:-
https://linux-audit.com/blocking-ip-...with-iptables/

I looked for a manual for Cluebringer and found that it didn't exist yet. Sorry.
I'm afraid this is a limit at which I can help.

A last idea: go through all of the settings (mainly Access Control), (Graylisting) <or> (Quotas) and look through the 'options' those options should reveal what you need to select or set to block the ip address. Maybe there is a blacklist table?

If you're getting any kind of a warning, error or notice you may want to post that too.
Looking up warnings and errors most often lead to leads for fixes.

I've posted this link in the hope that it will help others to help you. Sorry I don't know more.
https://wiki.policyd.org/cluebringer.conf