Zimbra Forums

Thanks Dan, What I have done so far is port forward http traffic through to the mailbox server. I haven't checked POP3IMAP, however webmail access seems to be working fine. Do you see any security implications to leaving it this way (I imagine there is exposing the mail store)? Cheers, Matt I don't...

The firewall itself doesn't support SNAT rules. Is there something i can do on the mailbox server to "fake" an outgoing ip address? No, I'm afraid that can only be done on the device that is doing the NAT service. If your router doesn't support SNAT (and many don't), you are left with onl...

The simplest possible solution, and one that has often worked for me, is in this thread:
http://www.zimbra.com/forums/administra ... 0-1-a.html

[quote user="owl700"]Have you applied this? I do not know if your version is affected first search the forum to make sure This is a pretty old security issue, back in the 4.x series. The user's profile says he's using 5.0.9, which is WAY beyond when this was patched, so it should not be an...

I did a whois on your ip address and got this result (partial): [quote]$ whois 80.229.16.48 % This is the RIPE Database query service. % The objects are in RPSL format. % % The RIPE Database is subject to Terms and Conditions. % See http://www.ripe.net/db/support/db-terms-conditions.pdf >% Note: Thi...

I may be guessing too much, but in similar settings where I've set these things up, the problem has been that although you're port-forwarding INCOMING traffic, your OUTGOING traffic is going from a different IP address due to the default NAT configuration for the router. For example, if your main pu...

Actually there's something else you ought to look at. Notice this part of your SA headers: [QUOTE]RCVD_IN_PBL=0.905, RCVD_IN_SORBS_DUL=0.877[/QUOTE] Two realtime blacklists list your IP. Though you've whitelisted yourself, others who use those blacklists may score them higher, which means your IP ma...

[quote user="ejecthunter"]thanks for the detailed explanation, i now understand a bit better...and actually i have a static IP...i only the dydns to point the eject.mine.nu to my IP, might the above help better>?[/quote] Well, sure, this at least means that my worries about you getting lum...

Hey ejecthunter, I'm afraid I won't be much use to you; as I said to the other poster, I haven't actually set up a DynDNS -based Zimbra myself, I merely pointed out those wikis. All my own Zimbra work has been on static IPs. I will warn you, based on the experiences of others I've read on this forum...

I've always used /opt/zimbra/conf/spamassassin/local.cf as the place to make those changes, rather than the file you mention; however, as I understand it either should work. I don't know why your whitelist is not being parsed properly. However, we'd know a lot more if you would post a header (at lea...