Search found 63 matches

by Ace Suares
Fri Feb 23, 2024 10:30 am
Forum: Administrators
Topic: Attached emails won't open in new window
Replies: 1
Views: 587

Attached emails won't open in new window

Dear all, Sometimes forwarded emails are attached as eml files. So when my clients receive such an email with attached eml files, clicking on them wants to open them in a new window. The pop-up blocker of the browser prevents it. After enabling pop-ups for our zimbra server in the browser, it still ...
by Ace Suares
Wed Oct 26, 2022 12:44 pm
Forum: Administrators
Topic: help with tracking down source of failed logins, please.
Replies: 4
Views: 1839

Re: help with tracking down source of failed logins, please.

Dear all, These entries in the log file look like they are standalone entries, but actually they are caused by a fails SASL login on postfix. Oct 26 14:01:36 newz saslauthd[6623]: : auth failure: [user=xxxxxxxxxxxxx] [service=smtp] [realm=xxxx.org] [mech=zimbra] [reason=Unknown] Oct 26 14:01:36 newz...
by Ace Suares
Wed Oct 26, 2022 12:43 pm
Forum: Administrators
Topic: [SOLVED] Lots of brute forcing via port 7073 internal!?
Replies: 1
Views: 1246

Re: Lots of brute forcing via port 7073 internal!?

Dear all, These entries in the log file look like they are standalone entries, but actually they are caused by a fails SASL login on postfix. Oct 26 14:01:36 newz saslauthd[6623]: : auth failure: [user=xxxxxxxxxxxxx] [service=smtp] [realm=xxxx.org] [mech=zimbra] [reason=Unknown] Oct 26 14:01:36 newz...
by Ace Suares
Wed Oct 26, 2022 12:43 pm
Forum: Administrators
Topic: Weird Authentication Failures
Replies: 2
Views: 1920

Re: Weird Authentication Failures

Dear all, These entries in the log file look like they are standalone entries, but actually they are caused by a fails SASL login on postfix. Oct 26 14:01:36 newz saslauthd[6623]: : auth failure: [user=xxxxxxxxxxxxx] [service=smtp] [realm=xxxx.org] [mech=zimbra] [reason=Unknown] Oct 26 14:01:36 newz...
by Ace Suares
Tue Oct 25, 2022 8:20 pm
Forum: Administrators
Topic: [SOLVED] Lots of brute forcing via port 7073 internal!?
Replies: 1
Views: 1246

[SOLVED] Lots of brute forcing via port 7073 internal!?

Hi, It seems that people see soms brute force attacks via port 7073, but they seem to come from the zimbra server itself, not from internet. Anyone with more information? 2022-10-24 04:44:18,404 INFO [qtp2012482127-8453:smtp://zimbra.xxx.com:7073/service/admin/soap/] [ip=12.34.56.78;port=33358;soapI...
by Ace Suares
Mon Oct 24, 2022 2:59 am
Forum: Administrators
Topic: help with tracking down source of failed logins, please.
Replies: 4
Views: 1839

Re: help with tracking down source of failed logins, please.

12.34.56.78 is the external IP for the zimbra server, ports 7073 and 7071 are closed from outside by firewall.
by Ace Suares
Mon Oct 24, 2022 2:58 am
Forum: Administrators
Topic: help with tracking down source of failed logins, please.
Replies: 4
Views: 1839

Re: help with tracking down source of failed logins, please.

We see the same behaviour, also for non-existing accounts 2022-10-24 04:44:18,404 INFO [qtp2012482127-8453:smtp://zimbra.xxx.com:7073/service/admin/soap/] [ip=12.34.56.78;port=33358;soapId=2fa5bc82;] account - Error occurred during authentication: authentication failed for [lastname.firstname]. Reas...
by Ace Suares
Mon Oct 24, 2022 2:52 am
Forum: Administrators
Topic: Weird Authentication Failures
Replies: 2
Views: 1920

Re: Weird Authentication Failures

We see the same here. Also for non-existing accounts. I blocked 7073 and 7071 in the firewall just to be sure, but these authentication comes from the inside (via webmail I suppose).
8.8.15.GA.3869.UBUNTU18.64 UBUNTU18_64 FOSS edition, Patch 8.8.15_P34
by Ace Suares
Mon Dec 28, 2020 2:06 am
Forum: Administrators
Topic: Deleting domain with aliases gives problems
Replies: 1
Views: 1091

Deleting domain with aliases gives problems

Hi, zmprov -l dd abc.com ERROR: account.DOMAIN_NOT_EMPTY (domain not empty: abc.com (remaining entries: [uid=abuse,ou=people,dc=abc,dc=com] [uid=hostmaster,ou=people,dc=abc,dc=com] [uid=postmaster,ou=people,dc=abc,dc=com] ...)) (cause: com.zimbra.cs.ldap.LdapException$LdapContextNotEmptyException co...
by Ace Suares
Fri Oct 30, 2020 5:56 am
Forum: Administrators
Topic: Zimbra won't shutdown - Stopping zimlet webapp fails
Replies: 18
Views: 19838

Re: Zimbra won't shutdown - Stopping zimlet webapp fails

When looking at the log, the amount of 'Modified db pages' stays the same in all Buffer Pools.

This Flush Dirty Pages code does not seem to work all and just sits waiting for the timeout.