Sorry; my bad on the port - I had been working with a Barracuda just before I wrote that... If you are on a single-server, try looking at the following (from an 8.8.10 server): zimbra@zimbra:~$ zmprov gs `zmhostname` | grep MailMode zimbraMailMode: https zimbraReverseProxyMailMode: redirect zimbra@z...

I hate to wake up a long dead thread, but I'm seeing exactly the same thing. Running 8.7.11 and after trying for an A rating on SSL Labs IMAPS no longer works through proxy. Connecting to 7993 works, but 993 doesn't. The error I'm seeing in nginx.log is: 2018/10/22 11:21:42 [info] 5609#0: *254 clie...

Hi Mark, I have tested zimbra dosfilter with lower threshold and fail login policy. Dosfilter recoginzed bad ip but the account was still locked out. Could you show me your current configuration. Regards, Minh. Just did a blog post on this: https://www.missioncriticalemail.com/2018/10/19/using-zimb...

Z-Push worked well in the past, but I've not seen a lot of posts in the past few years about it, so I can't say if it works or not.

For the Exchange migration, you can always export the calendars and contacts and then import them in to Zimbra, individually for each person.

Hope that helps,
Mark

ActiveSync is a Microsoft product, so you need Network Edition or ZeXtras Mobile to use it.

Mark

Audriga presented at the recent North American ACTIV8 Partner meeting in Texas. They are a German-based commercial enterprise, so using their tool costs money. But they have moved millions of mailboxes and you can try it for free to see if it works for you. https://www.groupware-migration.com/en.htm...

If you use fail2ban and a password lockout policy, just set the fail2ban threshold lower than the lockout policy. In this way, a brute force attacker will get their IP blocked before the user's mailbox is set to Locked Out status; the legitimate user can keep using their email. You can do the same t...

Thanks for your input Mark ! Glad that helped! And to your original question "Are there any other considerations I should take into account on the new setup ?" I'd recommend leveraging the variety of new security services within Zimbra. -- Postscreen will reduce the number of junk emails ...

Hi, Thanks for update. I'm planning to purchase "Professional Edition" to configure HA cluster with Zimbra. My requirement is to configure two servers in two DC, so if there any problem in one DC, i can still have my service from other DC. Before purchasing just want to make sure, if its ...

No benefit to security. Spam checks are by domain as well as by IP (and content). So if you allow compromised mailboxes to send enough spam to get you blacklisted, changing MTAs or ip addresses won’t fix anything. If anything, ip addresses that are new sources of email are ranked with heightened sus...