DLP milter connection

The DLP screen in the admin console writes the policy; for messages to actually be blocked, the DLP milter service must be connected to mail transfer (Postfix).

When you select the DLP module, the installer offers two options: 1 milter service only, 2 milter and Postfix connection. The choice is written to /etc/profelis-edition/dlp-postfix.conf.

Connecting later

sudo ./install.sh --wire-postfix
systemctl status profelis-dlp-milter

The service must be active (running). Define a test rule in the admin console and send a message that should be blocked; the sender should get a rejection.

Removing the connection

Run the installer again and choose 1 at the DLP question, or directly:

sudo ./scripts/install-dlp-milter.sh --unwire-postfix

Do not edit the Postfix setting by hand

A wrong milter setting can stop mail flow. Use only the options above to connect and disconnect.

The policy file is /opt/zimbra/conf/profelis-dlp-policy.properties; edit it from the admin console. See DLP.