Search found 20 matches
- Thu Nov 07, 2019 3:08 pm
- Forum: Administrators
- Topic: Script to block compromised account
- Replies: 0
- Views: 2762
Script to block compromised account
I already have a script running to check for excessive logins attempts from compromised accounts tail -n 50000 /var/log/mail.log|grep sasl_username|awk '{print $9}'|\cut -d"=" -f2|sort|uniq -c|sort --------------- Now i wrote another one to check for from=<accountsendingspam@domain.com> sc...
- Tue Oct 29, 2019 2:24 pm
- Forum: Administrators
- Topic: Account sending spam via webmail
- Replies: 0
- Views: 4020
Account sending spam via webmail
Cant identify compromised account sending spam thru webmail, any ideas? root@myserver:~# /opt/zimbra/common/sbin/postcat -q 1E1E23614A2 *** ENVELOPE RECORDS deferred/1/1E1E23614A2 *** message_size: 3779 3128 25 0 3779 0 message_arrival_time: Mon Oct 28 00:35:03 2019 create_time: Mon Oct 28 00:35:03 ...
- Tue Oct 22, 2019 8:35 pm
- Forum: Administrators
- Topic: Help add more outgoing IP - IP blacklisted
- Replies: 0
- Views: 2075
Help add more outgoing IP - IP blacklisted
My zimbra server IP is blacklisted only on hotmail.com servers, everything, from reverse dns, dkim, dmarc, spf is configured, opened tickets but they refuse to delist. Had virus incident. Can i add more IPs on zimbra to act only as outgoing smtp? Single server installation no split-dns Ubuntu 16.04 ...
- Sat Jun 15, 2019 1:27 pm
- Forum: Administrators
- Topic: POP3 vs IMAP: Zimbra CPU/Memory Utilization?
- Replies: 0
- Views: 1848
POP3 vs IMAP: Zimbra CPU/Memory Utilization?
Is there any graphs showing the difference between running Zimbra as only IMAP or POP3 Mail server? How it affects memory/cpu or disk utilization.
- Wed Jun 12, 2019 2:00 pm
- Forum: Administrators
- Topic: zimbraPrefPop3DownloadSince still needed?
- Replies: 2
- Views: 2177
Re: zimbraPrefPop3DownloadSince still needed?
Its been awhile since i have migrated my last zimbra server. Is the command zimbraPrefPop3DownloadSince still needed after migrating zimbra emails accounts/data to new server distro and zimbra version? https://wiki.zimbra.com/wiki/Download_the_POP3_email_from_a_specific_date yes thanks just discore...
- Wed Jun 12, 2019 1:56 pm
- Forum: Administrators
- Topic: Zimbra 8.6 Signature problem
- Replies: 2
- Views: 1610
Re: Zimbra 8.6 Sinnature problem
i guess its a well know problem with zimbra permissions
afaik the only way to solve is host signature img file in public site or enable zimbra briefcase create new folder and make it public
afaik the only way to solve is host signature img file in public site or enable zimbra briefcase create new folder and make it public
- Tue Jun 11, 2019 7:55 pm
- Forum: Administrators
- Topic: zimbraPrefPop3DownloadSince still needed?
- Replies: 2
- Views: 2177
zimbraPrefPop3DownloadSince still needed?
Its been awhile since i have migrated my last zimbra server.
Is the command zimbraPrefPop3DownloadSince still needed after migrating zimbra emails accounts/data to new server distro and zimbra version?
https://wiki.zimbra.com/wiki/Download_t ... cific_date
Is the command zimbraPrefPop3DownloadSince still needed after migrating zimbra emails accounts/data to new server distro and zimbra version?
https://wiki.zimbra.com/wiki/Download_t ... cific_date
- Tue May 28, 2019 1:16 pm
- Forum: Administrators
- Topic: Zimbra AJAX Webmail not loading
- Replies: 127
- Views: 120500
Re: Zimbra AJAX Webmail not loading
If you cant patch your zimbra follow this to prevent infection: https://lorenzo.mile.si/zimbra-cve-2019-9670-being-actively-exploited-how-to-clean-the-zmcat-infection/961/ Block IPS attacking Kill the process zmswatch Do not delete the suspicious files, just change permissions. Remove cron entries R...
- Mon May 27, 2019 1:25 pm
- Forum: Administrators
- Topic: Zimbra AJAX Webmail not loading
- Replies: 127
- Views: 120500
- Sat May 25, 2019 1:48 pm
- Forum: Administrators
- Topic: Zimbra AJAX Webmail not loading
- Replies: 127
- Views: 120500
Re: Zimbra AJAX Webmail not loading
We had exactly the same issue. And I saw that the files had the wrong permissions (executable instead of writeable). Version: 8.7.11_GA_3800.NETWORK I did the following (as root); cd /opt/zimbra/mailboxd find webapps -type d -exec chmod 0755 {} \; find webapps -type f -exec chmod 0644 {} \; Then re...