Search found 350 matches

by chauvetp
Tue May 24, 2016 1:43 pm
Forum: Administrators
Topic: Seemingly untraceable login
Replies: 4
Views: 4665

Re: Seemingly untraceable login

Thanks! That was what I was missing. It seems a bit difficult to track though. Is there a way to match the saslauthd message with the postfix/smtps/smtpd message? Or is it just a matter of proximity to the logs? Alternatively, is there a way to log (in /var/log/maillog) the username that failed auth...
by chauvetp
Mon May 23, 2016 8:47 pm
Forum: Administrators
Topic: Seemingly untraceable login
Replies: 4
Views: 4665

Re: Seemingly untraceable login

Hi liverpoolfcfan, Thanks for the link. That's the odd thing. We almost always have the originating IP. It's there for every session I can specifically identify as IMAP, ActiveSync, SMTP, and the Zimbra Web Client. Access to the admin port (7071) is only allowed from the other Zimbra servers and a v...
by chauvetp
Mon May 23, 2016 3:31 pm
Forum: Administrators
Topic: Seemingly untraceable login
Replies: 4
Views: 4665

Seemingly untraceable login

Hello, We've been having some brute force login attempts (where the attackers appear to be trying 20 or so attempts for a user before moving on). Normally, these are easy to trace for me, but I cannot find the source of these. There is no oip in the log entries, just the ip of one of our Zimbra prox...
by chauvetp
Thu Sep 17, 2015 8:22 am
Forum: Administrators
Topic: How to see ONLY aliases in the GAL and autocomplete?
Replies: 6
Views: 4977

How to see ONLY aliases in the GAL and autocomplete?

I would need to know a bit more about your environment for this to be certain, but this is going on the assumption that each account, if it has an alias, should have that alias set as a distribution list pointing to the real account. Run the following for each account to obtain the aliases & dis...
by chauvetp
Wed Sep 16, 2015 9:44 am
Forum: Administrators
Topic: How to know if backup completed?
Replies: 1
Views: 1149

How to know if backup completed?

I would recommend using the zmbackupquery command as part of your scripts to check if the backup is completed.
by chauvetp
Wed Sep 16, 2015 9:39 am
Forum: Administrators
Topic: Deleted /var/log/zimbra.log file
Replies: 4
Views: 2399

Deleted /var/log/zimbra.log file

Have you tried creating a blank zimbra.log file, making sure it is owned by the Zimbra user/group (chown zimbra:zimbra zimbra.log) and restarting Zimbra?



You may need to set the permissions (chmod 644 zimbra.log) on the file as well.
by chauvetp
Wed Sep 16, 2015 9:35 am
Forum: Administrators
Topic: How to see ONLY aliases in the GAL and autocomplete?
Replies: 6
Views: 4977

How to see ONLY aliases in the GAL and autocomplete?

This may be a nasty hack, but you could do the following: Set all accounts to hide the GAL address (zmprov ma username@domain zimbraHideInGAL TRUE) or set as false via the class of service. Then create distribution lists (with a single address) instead of the alias, and have those with zimbraHideInG...
by chauvetp
Fri Aug 21, 2015 8:28 am
Forum: General Zimbra Feedback
Topic: what happened to the security center..?
Replies: 8
Views: 5186

what happened to the security center..?

Can we have the old forums back when the separation from Telligent goes into effect? ;)
by chauvetp
Fri Aug 21, 2015 8:26 am
Forum: General Questions
Topic: Does Zimbra needs root login enabled ?
Replies: 4
Views: 2398

Does Zimbra needs root login enabled ?

Postfix runs as root at the very least. Root access is needed to start Zimbra since Liunx/UNIX requires low ports (below 1024) to be started by (not necessarily running as) root. That being said, I don't think Zimbra needs to login as root, but it needs to have sudo access to run certain commands. Y...
by chauvetp
Wed Aug 12, 2015 10:43 am
Forum: Administrators
Topic: SSL Certificates on multidomain server
Replies: 9
Views: 3956

SSL Certificates on multidomain server

Would using certificates with SANs (Subject Alternative Names) work? It's not exactly the same but we have the same domain with multiple names because people use it as different names (i.e. some use zmail.newpaltz.edu and some use zimbra.newpaltz.edu).