Search found 20 matches

by yvespires
Thu Nov 07, 2019 3:08 pm
Forum: Administrators
Topic: Script to block compromised account
Replies: 0
Views: 2760

Script to block compromised account

I already have a script running to check for excessive logins attempts from compromised accounts tail -n 50000 /var/log/mail.log|grep sasl_username|awk '{print $9}'|\cut -d"=" -f2|sort|uniq -c|sort --------------- Now i wrote another one to check for from=<accountsendingspam@domain.com> sc...
by yvespires
Tue Oct 29, 2019 2:24 pm
Forum: Administrators
Topic: Account sending spam via webmail
Replies: 0
Views: 4019

Account sending spam via webmail

Cant identify compromised account sending spam thru webmail, any ideas? root@myserver:~# /opt/zimbra/common/sbin/postcat -q 1E1E23614A2 *** ENVELOPE RECORDS deferred/1/1E1E23614A2 *** message_size: 3779 3128 25 0 3779 0 message_arrival_time: Mon Oct 28 00:35:03 2019 create_time: Mon Oct 28 00:35:03 ...
by yvespires
Tue Oct 22, 2019 8:35 pm
Forum: Administrators
Topic: Help add more outgoing IP - IP blacklisted
Replies: 0
Views: 2075

Help add more outgoing IP - IP blacklisted

My zimbra server IP is blacklisted only on hotmail.com servers, everything, from reverse dns, dkim, dmarc, spf is configured, opened tickets but they refuse to delist. Had virus incident. Can i add more IPs on zimbra to act only as outgoing smtp? Single server installation no split-dns Ubuntu 16.04 ...
by yvespires
Sat Jun 15, 2019 1:27 pm
Forum: Administrators
Topic: POP3 vs IMAP: Zimbra CPU/Memory Utilization?
Replies: 0
Views: 1847

POP3 vs IMAP: Zimbra CPU/Memory Utilization?

Is there any graphs showing the difference between running Zimbra as only IMAP or POP3 Mail server? How it affects memory/cpu or disk utilization.
by yvespires
Wed Jun 12, 2019 2:00 pm
Forum: Administrators
Topic: zimbraPrefPop3DownloadSince still needed?
Replies: 2
Views: 2176

Re: zimbraPrefPop3DownloadSince still needed?

Its been awhile since i have migrated my last zimbra server. Is the command zimbraPrefPop3DownloadSince still needed after migrating zimbra emails accounts/data to new server distro and zimbra version? https://wiki.zimbra.com/wiki/Download_the_POP3_email_from_a_specific_date yes thanks just discore...
by yvespires
Wed Jun 12, 2019 1:56 pm
Forum: Administrators
Topic: Zimbra 8.6 Signature problem
Replies: 2
Views: 1608

Re: Zimbra 8.6 Sinnature problem

i guess its a well know problem with zimbra permissions

afaik the only way to solve is host signature img file in public site or enable zimbra briefcase create new folder and make it public
by yvespires
Tue Jun 11, 2019 7:55 pm
Forum: Administrators
Topic: zimbraPrefPop3DownloadSince still needed?
Replies: 2
Views: 2176

zimbraPrefPop3DownloadSince still needed?

Its been awhile since i have migrated my last zimbra server.

Is the command zimbraPrefPop3DownloadSince still needed after migrating zimbra emails accounts/data to new server distro and zimbra version?

https://wiki.zimbra.com/wiki/Download_t ... cific_date
by yvespires
Tue May 28, 2019 1:16 pm
Forum: Administrators
Topic: Zimbra AJAX Webmail not loading
Replies: 127
Views: 120403

Re: Zimbra AJAX Webmail not loading

If you cant patch your zimbra follow this to prevent infection: https://lorenzo.mile.si/zimbra-cve-2019-9670-being-actively-exploited-how-to-clean-the-zmcat-infection/961/ Block IPS attacking Kill the process zmswatch Do not delete the suspicious files, just change permissions. Remove cron entries R...
by yvespires
Sat May 25, 2019 1:48 pm
Forum: Administrators
Topic: Zimbra AJAX Webmail not loading
Replies: 127
Views: 120403

Re: Zimbra AJAX Webmail not loading

We had exactly the same issue. And I saw that the files had the wrong permissions (executable instead of writeable). Version: 8.7.11_GA_3800.NETWORK I did the following (as root); cd /opt/zimbra/mailboxd find webapps -type d -exec chmod 0755 {} \; find webapps -type f -exec chmod 0644 {} \; Then re...