MX gateway and relay server integration for Carbonio environments

Pitbull integration with Carbonio

In environments using Carbonio, Pitbull integration works on two channels:

• Inbound: DNS MX records point to the Pitbull gateway; Rspamd-based filtering, quarantine and policy engine secure inbound traffic.
• Outbound: Outbound traffic passes through Pitbull via relayhost on the Zextras Carbonio Postfix layer.

Relay Server Configuration

Carbonio is Zimbra-based and uses Postfix. Set relayhost = [relay.pitbull.com.tr]:587 via carbonio prov or Postfix main.cf. Authenticate with SASL password maps.

Inbound MX Gateway

• Point domain MX records to the Pitbull gateway address (priority 10)
• Rspamd spam, phishing and malware filtering at the gateway layer
• Malicious attachment scanning via ClamAV / Avast REST
• SPF, DKIM and DMARC checks + score breakdown
• Suspicious messages isolated in quarantine; admin-approved release workflow

Outbound Relay Settings

To route outbound traffic to the Pitbull relay on Carbonio:

# Carbonio / Postfix
relayhost = [relay.pitbull.com.tr]:587
smtp_sasl_auth_enable = yes
smtp_sasl_password_maps = lmdb:/opt/zextras/conf/relay_password
smtp_tls_security_level = encrypt

# /opt/zextras/conf/relay_password
[relay.pitbull.com.tr]:587 tenant@pitbull.com.tr:RELAY_TOKEN

postmap /opt/zextras/conf/relay_password
postfix reload

This configuration passes outbound traffic through the Pitbull outbound filtering engine. SMTP Abuse Radar, per-tenant rate limits and Emergency Outbound Lockdown are activated.

Authentication

• Add Pitbull include to SPF
• Enable DKIM signing from Pitbull panel and publish DNS TXT record
• Start DMARC at p=none and monitor reports

Operational Visibility

Monitor delivery rates, reject reasons, queue status and GeoIP/ASN distribution on NOC screens. Deliver periodic security summaries to management teams with executive PDF reports.