Hello All, Since we have upgraded from 8.6 to 8.7.11 we are plagued by a bug that is hard to reproduce. What happens is that a user composes an email and then hits send. Then Zimbra sends an email with empty message body. It is hard to reproduce but I feel it happens often on replies with inline ima...

Milter probably still works, perhaps a binary changed location.

Did you check the log? Also I filed an issue here to track any progress from the forum.

https://github.com/Zimbra-Community/mai ... s/issues/5

I think the real problem is the communication and lack of a security overview/summary page where all this stuff is documented.

Because even if stuff gets fixed, after some time, it is hard to understand what happened and when.

https://github.com/Zimbra/zm-web-client ... 924b915d68 <-- Looks like code clean-up

According to Malte Stretz: These are the last two XSS issues fixed: https://github.com/Zimbra/zm-web-client/commit/8c646be0322c0ab6858652c184133b924b915d68 https://github.com/Zimbra/zm-web-client/commit/92d2886277e7d8d4f4835a26355fa93dfebc5504 I looked into: ZCS-2645 Bug 108265 - Persistent XSS - me...

Hello Abhi, Sorry, it's a bit late. But for whoever else may need it. First you need to add for all your trusted proxies: zmprov mcf +zimbraMailTrustedIP < trusted zimbra proxies here > Then in your extension: ZimbraSoapContext zsc = getZimbraSoapContext(context); zsc.getRequestIP() I tried this on ...

In the Universal UI (New UI) the setting `Display names in place of email addresses when available` does not have any effect, the short name is always displayed by default. And one has to click a down arrow to show the from and to headers. To prevent spoofing, can I suggest, please consider ALWAYS t...

Hello All,

Here is an unofficial and unsupported build for Zimbra 8.8.5 Universal UI for CentOS 7.

https://zetalliance.org/zcs-8.8.5_GA_20 ... 124635.tgz


Kind regards,

Barry de Graaff
Zeta Alliance
Co-founder & Developer
zetalliance.org | github.com/Zimbra-Community

There is something here:

https://github.com/Zimbra-Community/DAWebmail


Regards, Barry

The Zeta Alliance crowdfunder `Zimbra Mailinglists` has found a way to set the correct Return-Path on a DL. Basically what I do is filter the original message with Milter and discard it. Before discarding I take some headers and the body from the mail and place them in a new mail and toss that to th...