Search found 17 matches

by Zuser
Thu Jun 11, 2020 11:38 am
Forum: Zimbra Connector for Outlook
Topic: The installer was interrupted...
Replies: 11
Views: 12490

Re: The installer was interrupted...

FYI: this still happens with Windows 10 (1909), ZCO 8.8.15.1867 and Outlook from Office 2019 and the solution is still to do a repair on Office. Why am I not surprised? :)
by Zuser
Mon Jun 08, 2020 2:37 pm
Forum: Administrators
Topic: [Resolved] ERROR: Unable to start TLS: SSL connect attempt failed error:14090086
Replies: 49
Views: 90372

Re: [Resolved] ERROR: Unable to start TLS: SSL connect attempt failed error:14090086

As an aside we were seeing the same error message for a different reason: updated the cert due to upcoming expiry, cert chain is correct with valid expiration dates (not using Comodo/Sectigo). What was needed was a simple 'ldap stop', 'ldap start' as zimbra user as we didn't do a service restart. Ap...
by Zuser
Mon Jun 08, 2020 2:33 pm
Forum: Administrators
Topic: Account name different from email address
Replies: 20
Views: 9774

Re: Account name different from email address

FWIW Zimbra’s 2FA implementation provides an application -unique password for mobile devices that don’t support 2FA natively. Hope that helps, Mark As you say, that is not 2FA, it's an alternative password. One that may actually be shorter than the user's normal password. This doesn't solve brute f...
by Zuser
Thu Feb 27, 2020 2:13 pm
Forum: Administrators
Topic: zmprov crashes asfter upgradefrom zimbra 8.6 to zimbra 8.8.15
Replies: 2
Views: 3271

Re: zmprov crashes asfter upgradefrom zimbra 8.6 to zimbra 8.8.15

We had the same moving from 8.8.11 to 8.8.15, the reason was an old manual installation of ZxSuite Talk under an older version (8.8.6 IIRC) that didn't uninstall correctly. Moving /opt/zimbra/lib/jars/zcs-lib-apache-httpcore4.jar and /opt/zimbra/lib/jars/zcs-lib-apache-httpclient4.jar already made b...
by Zuser
Thu Feb 27, 2020 2:03 pm
Forum: Administrators
Topic: Account name different from email address
Replies: 20
Views: 9774

Re: Account name different from email address

We ended up firewalling IMAP (port 993) from outside, only accessible from internal networks and VPN now. In a pinch I guess we could temporarily allow a specific IP through the firewall if some boss person really needed IMAP. Of course we still need to allow port 443 (EAS and web access) and most m...
by Zuser
Wed Dec 19, 2018 4:11 pm
Forum: Administrators
Topic: Account name different from email address
Replies: 20
Views: 9774

Re: Account name different from email address

We have the same issue: various mailboxes are being attacked on the IMAP port (993) via a slow dictionary attack: 2-3 connections per minute from unique IPs, so fail2ban can't do anything about it. We can't do packet inspection on a border router since the traffic is encrypted and although we could ...
by Zuser
Thu Jul 12, 2018 3:57 pm
Forum: Installation and Upgrade
Topic: Stability of version 8.8.x (upgrade)
Replies: 3
Views: 2747

Re: Stability of version 8.8.x (upgrade)

We have recently updated from 8.6.0 patch 8 to 8.8.8 (2009) and then patch 6 (1728) (all Network Edition). Following this we are experiencing a range of issues: - random slowdowns are occurring, e.g. logging in on the web UI generates a SearchRequest with elapsed=8900 in mailbox.log, myslow.log show...
by Zuser
Thu Mar 01, 2018 11:54 am
Forum: Administrators
Topic: How to pipe incoming mail into local script
Replies: 2
Views: 1829

Re: How to pipe incoming mail into local script

Solved: /opt/zimbra/postfix/conf/main.cf has: transport_maps = proxy:ldap:/opt/zimbra/conf/ldap-transport.cf, lmdb:/opt/zimbra/postfix/conf/transport ldap-transport.cf appears to take precedence, so changing the given account's zimbraMailTransport uses the transport I have defined (zmprov ma foo@exa...
by Zuser
Wed Feb 28, 2018 8:15 pm
Forum: Administrators
Topic: How to pipe incoming mail into local script
Replies: 2
Views: 1829

Re: How to pipe incoming mail into local script

In the meantime I think I found the right way, but unfortunately it still doesn't work, can anyone point out what I'm doing wrong? added mailbox foo@example.com in Zimbra added the following line in /opt/zimbra/postfix/conf/master.cf.in just above the maildrop line: my_transport unix - n n - - pipe ...
by Zuser
Wed Feb 28, 2018 6:31 pm
Forum: Administrators
Topic: How to pipe incoming mail into local script
Replies: 2
Views: 1829

How to pipe incoming mail into local script

Hi, if I have a Zimbra mail server called "zimbra.example.com" which hosts "example.com" and receives mail to foo@example.com, what is the correct way of forwarding such mail to a local script? I've looked at putting foo: "|/opt/test.rb" in /etc/aliases, but that's for ...