Zimbra Forums

Thanks a lot, the missing line (now in the Wiki) was:
postconf -e smtpd_tls_mandatory_protocols='!SSLv2,!SSLv3'
SSLv3 is now also refused on port 465.

Hi, We have used the Wiki entry: https://wiki.zimbra.com/wiki/How_to_disable_SSLv3 to disable SSLv3 in Zimbra 8.5 (3042 patch 8.5.0_P2) with Proxy For the MTA we ran: zmprov mcf zimbraMtaSmtpdTlsProtocols '!SSLv2,!SSLv3' as zimbra then restarted, and checked on port 25 with: openssl s_client -connec...

Thank you very much, this fixed the problem. Could I just ask a final question, should we reverse this fix prior to installing the future Patch 2? For others with the same issue, the exact changes were:- The files to change are read only so you will need to add write access, as zimbra user, with: ch...

Ok great thank you.



Unfortunately I can't see comments c6 and c7 on that page, only c1, c9, c10 and c12 so can't see the workarounds.



Do I need to create a Bugzilla login to see them?

Thank you very much for the response. I don't know if you are linked with Zimbra, but do you know when we might see 8.5 Patch2? The following files are reportedly affected: /opt/zimbra/main/ZimbraServer/conf/nginx/nginx.conf.mail.imap.template /opt/zimbra/main/ZimbraServer/conf/nginx/nginx.conf.mail...

I noticed in the 'nginx.log' log file that before the upgrade it logged, for example: 2014/09/28 23:07:11 [info] 14970#0: *43238 client 100.100.100.100 connected to 10.10.10.10:993 since upgrading to 8.5.0 it now logs: 2014/10/02 15:04:19 [info] 19778#0: *25472 client 100.100.100.100:31398 connected...

Hi, Just to add to the above. A full 'zmprov gd mail.example2.com' shows the correct complete combined certificate and key of the virtual domain. Also: 'zmprov gd mail.example2.com | grep Virtual' shows correctly: zimbraVirtualHostname: mail.example2.com zimbraVirtualIPAddress: 10.10.10.2 So the cer...

Hi All, We have just upgraded from 8.0.8 to 8.5 Prior to the upgrade everything was working well with the machine having 2 additional IP addresses and the proxy setup to handle https connections for two extra domains. For example: Main server: mail.example.com (on 10.10.10.1) IP2: mail.example2.com ...

[QUOTE]If you setup a new z-push-2 installation, then download the z-push-2 backend version from the SVN on the sourceforge site, and copy the BACKEND_PROVIDER and all the ZIMBRA_ settings from your z-push 1.5 config.php over to the new config.php you will be ready to start. Follow the instructions ...

[QUOTE]If you look at my earlier post #843, I used a combination of Rel 53 files and most recent files from repository, plus some minor modification documented and linked in this thread. Working quite nicely with Z-Push 2.0.1 on a separate and virtual machine runnning Ubtuntu 10.04.04.[/QUOTE] Any c...