Search found 96 matches

by milauria
Mon Oct 09, 2023 1:29 am
Forum: Installation and Upgrade
Topic: Migration from Centos 7 (8.8.15_GA_4308) to Rocky 8.7 (8.8.15_GA_4522)
Replies: 2
Views: 5092

Re: Migration from Centos 7 (8.8.15_GA_4308) to Rocky 8.7 (8.8.15_GA_4522)

What about upgrading from Centos 7 to Rocky 8 on the same server (in place upgrade) … do I need to download Zimbra for Rocky and run the Zimbra installer on top of the existing Zimbra after completing the upgrade to Rocky 8?
I am on Zimbra 8.8.15 FOSS on Centos 7
Thanks
by milauria
Mon Jul 31, 2023 6:21 am
Forum: Installation and Upgrade
Topic: Dnsmasq Issue When Installing Zimbra 8.5
Replies: 14
Views: 2776

Re: Dnsmasq Issue When Installing Zimbra 8.5

My limited experience is that dnsmasq is not mandatory even though it is a little and simple DNS server (as well as DNS caching). You could also avoid it and point resolv.conf to another DNS server (LAN or public depending if you need to split the DNS) and maybe activate the zimbra service dnscache ...
by milauria
Tue Jun 27, 2023 1:46 am
Forum: Administrators
Topic: Z-Push breaks zimbra services
Replies: 2
Views: 2611

Re: Z-Push breaks zimbra services

I read few recommendations to run z-push in a separate server from Zimbra and I liked the idea to leave Zimbra configuration as clean as possible with no tweaks. I deployed a separate VM with minimal resources and installed z-push from repository (https://kb.kopano.io/display/ZP/Installation) togeth...
by milauria
Wed Nov 23, 2022 10:56 pm
Forum: Administrators
Topic: Unable to update SSL certificate
Replies: 6
Views: 5784

Re: Unable to update SSL certificate

Have you created the certificate chain properly ?
https://wiki.zimbra.com/wiki/Certificate_Chain
by milauria
Tue Nov 01, 2022 11:32 pm
Forum: Administrators
Topic: warning tls smtpd_tls_ask_ccert = no please help
Replies: 6
Views: 10632

Re: warning tls smtpd_tls_ask_ccert = no please help

Hello, for the records I set the following to reflect in the postfix configuration: zmprov mcf zimbraMtaSmtpTlsAskCcert yes originally it was set to "no". I read this setting has been introduced with 8.8.15. I am monitoring the situation in case this modification causes more harm than bene...
by milauria
Tue Oct 25, 2022 11:15 pm
Forum: Administrators
Topic: warning tls smtpd_tls_ask_ccert = no please help
Replies: 6
Views: 10632

Re: warning tls smtpd_tls_ask_ccert = no please help

I also have consistent warnings in the zimbra.log of this kind: mail postfix/smtpd[8706]: warning: permit_tls_clientcerts is requested, but "smtpd_tls_ask_ccert = no" The log reads like below: Oct 25 04:45:40 mail postfix/smtpd[8706]: connect from mail15.xxx[198.2.xxx.xx] Oct 25 04:45:41 m...
by milauria
Tue Oct 25, 2022 2:34 am
Forum: Administrators
Topic: Using nginx before Zimbra
Replies: 18
Views: 4274

Re: Using nginx before Zimbra

by milauria
Fri Oct 21, 2022 11:11 am
Forum: Administrators
Topic: Using nginx before Zimbra
Replies: 18
Views: 4274

Re: Using nginx before Zimbra

My reverse proxy in front of zimbra has also the following: settings to be able to upload attachments up to 20M: client_body_buffer_size 128k; client_max_body_size 20m; index index.htm index.html; server_tokens off; limit_req_zone $binary_remote_addr zone=one:10m rate=1r/s; and also the header to pa...
by milauria
Mon Oct 17, 2022 11:02 pm
Forum: Administrators
Topic: Outgoing SMTP Authentication undo
Replies: 0
Views: 1031

Outgoing SMTP Authentication undo

I have enabled in the past the outgoing SMTP authentication following the wiki https://wiki.zimbra.com/wiki/Outgoing_SMTP_Authentication Now I don't use this external service any more and I am sending out emails to the world directly from my mail server Which are the settings to be undone ? Would it...
by milauria
Wed Oct 05, 2022 1:54 pm
Forum: Administrators
Topic: SSL Certificate Differs When Accessed Externally and Internally.
Replies: 6
Views: 3024

Re: SSL Certificate Differs When Accessed Externally and Internally.

It might be that you need to reload the nginx proxy that runs in front of zimbra so that the new certificates gets “published”…