Zimbra Forums

We're having to move our Zimbra to a new server. This will entail a change of IP address. The server is NATd with split DNS. Currently the server has SPF, DKIM and DMARC records set in the DNS. Unfortunately the DNS settings have an uneditable TTL of 4 hours. 1. Am I correct in thinking the DKIM and...

Some useful links: http://xmodulo.com/block-unwanted-ip-addresses-linux.html http://shorewall.net/ipsets.html http://iplists.firehol.org/ - I've been using firehol_level2 on 443, 465, 587 and 993. https://www.nova-labs.net/strong-firewall-configuration-for-linux-with-blacklist-blocklist-auto-update/...

Bug 64970 already exists from 2011.

https://bugzilla.zimbra.com/show_bug.cgi?id=64970

Outlook has allowed multipe exchange accounts in a single profile since version 2010. It's crazy that ZCO can't deal with this.

Default backup schedule is a full backup at the weekend with incremental backups on all other days. Using this a month's worth of backups would include 4 full backups. If the schedule was changed to doing a full backup once a month with the rest of the month running incrementals then it would take u...

Zimbra support have confirmed that this is no longer possible.

This as a regression. Bug 107498 created

Nobody's got any input on this?

At the moment I have the disclaimers set blank:
And run a cp command with cron to replace the file created in /opt/zimbra/data/altermime

Surely there has to be a better way

Zimbra 8.7.1 NE Previously I've been used to using: zmprov mcf zimbraDomainMandatoryMailSignatureText < disclaimer.txt I read that this is now deprecated and I should use: zmprov md example.com zimbraAmavisDomainDisclaimerText "text disclamer" How do I implement a text disclaimer over more...

If anyone's interested I found the best way to prevent this has been to use ipsets to dynamically update firewall rules for stmp and https ports

We're wanting to upgrade from 8.0.9 to 8.7.1. In testing we're receiving the messages about installing the proxy and memcached. I've read here that the two services can be installed before upgrade using dpkg and then configured as described here . In testing this seems to work ok. Can anyone here sp...

Thanks for your input. Access to 7071 has been restricted from day one. I had a look at fail2ban but there's a couple of problems I can see with it. Firstly it's known to not work well with distributed attacks. There's little point banning an IP address if that address isn't going to be involved in ...