Search found 41 matches

by gabrieles
Wed Sep 19, 2018 3:22 pm
Forum: Administrators
Topic: Account compromised impossibile to stop spam
Replies: 9
Views: 281

Re: Account compromised impossibile to stop spam

L. Mark Stone wrote:Any chance that your workstation/laptop from which you ssh'd in to Zimbra to make your password change has a keystroke logger compromise installed?

or a malicious wordpress plugin installed on your 446.it website?
Have you explicitly set the website ip address into zimbraMtaMynetworks?
by gabrieles
Wed Sep 19, 2018 12:44 pm
Forum: Administrators
Topic: Account compromised impossibile to stop spam
Replies: 9
Views: 281

Re: Account compromised impossibile to stop spam

cesko446 wrote:... i've setup a new password (64 chars) from ssh and restart ...


what exactly you restarted?
by gabrieles
Fri Sep 14, 2018 7:29 am
Forum: Administrators
Topic: Enforcing a match between FROM address and sasl username
Replies: 1
Views: 99

Re: Enforcing a match between FROM address and sasl username

The first method sets a rule that refuses the connection if the sasl_username used to authenticate on your MTA differs from the MAIL FROM: line of the envelope. Basically if someone steals your credentials, can authenticate as you@yourdomain.com, and then send a lot oof spam to internal accounts as ...
by gabrieles
Fri Sep 07, 2018 7:19 am
Forum: Administrators
Topic: Zimbra webmail SLOW
Replies: 12
Views: 645

Re: Zimbra webmail SLOW

IOwait is around 10% constantly.
there's a high probability that you have a disk issue. That means slow working mysql and mailboxd. That means general poor performances.
by gabrieles
Thu Sep 06, 2018 8:11 am
Forum: Administrators
Topic: SSL certificates: domain name mismatch with common name
Replies: 2
Views: 137

Re: SSL certificates: domain name mismatch with common name

Give us some more info. You have the default domain "example.com", certificates for "mail.example.com" and access your webmail via "mail.example.com" url When you add a new domain "another.com", and you want to access it via "webmail.another.com" you...
by gabrieles
Wed Sep 05, 2018 8:16 am
Forum: Administrators
Topic: command databases mysql for multiserver
Replies: 5
Views: 168

Re: command databases mysql for multiserver

Assuming that you have a list of account as dualboot said, you can use zmmailbox this way: for i in $(cat my_account_list); do zmmailbox -z -m $i gact > some_folder/$i.txt ; done BUT zmmailbox is really slow and resource-consuming, if used per-account and here we need a separate file for each accoun...
by gabrieles
Mon Sep 03, 2018 10:27 am
Forum: Administrators
Topic: Zimbra 8.8.9 and Cbpolicyd
Replies: 3
Views: 345

Re: Zimbra 8.8.9 and Cbpolicyd

About the first issue, is an old problem between zimbra and policyd. I think it's caused by the double postfix pass (postfix-> amavis-> postfix). I've tested that in systems without the amavis module, it works correctly. For what concerns the second issue, in 8.7.11 looks working fine: ... track=SAS...
by gabrieles
Mon Sep 03, 2018 10:03 am
Forum: Administrators
Topic: unknown non authenticate mail sender
Replies: 3
Views: 331

Re: unknown non authenticate mail sender

And restart MTAs, to kill active sessions, or previously authenticated users can continue to send even after a password change.
by gabrieles
Wed Aug 22, 2018 9:47 am
Forum: General Questions
Topic: Hacking, spamming
Replies: 4
Views: 1350

Re: Hacking, spamming

to see what account are compromised cat /var/log/zimbra.log | sed -n 's/.*sasl_username=//p' | sort | uniq -c | sort -n to change compromised account password zmprov sp user@domain.tld newpassword on EVERY mta kill postfix sessions, or spammers authenticated with old passwords will keep sending zmmt...
by gabrieles
Thu Aug 09, 2018 8:14 am
Forum: Administrators
Topic: Send mail always send to spam folder at gmail
Replies: 1
Views: 163

Re: Send mail always send to spam folder at gmail

What is your domain's SPF record ?

Go to advanced search