Search found 84 matches

by halfgaar
Sat Feb 15, 2020 12:04 pm
Forum: Administrators
Topic: CVE-2019-9670 being actively exploited
Replies: 248
Views: 228934

Re: CVE-2019-9670 being actively exploited

The first thing I'd try, is to just upgrade to the latest version (8.8.15 Patch-7). You can download it at zimbra.org (although I don't know why they offer that, as opposed to zimbra.com, where you have to fill out a form for the open source edition). There are some difficulties upgrading from 8.6 t...
by halfgaar
Sat Feb 08, 2020 11:56 am
Forum: Administrators
Topic: CVE-2019-9670 being actively exploited
Replies: 248
Views: 228934

Re: CVE-2019-9670 being actively exploited

zim_mike wrote:Doesn't the server or the client let you know when there are updates?


It doesn't seem to, to my dismay :(
by halfgaar
Tue Jun 11, 2019 7:16 pm
Forum: Administrators
Topic: CVE-2019-9670 being actively exploited
Replies: 248
Views: 228934

Re: CVE-2019-9670 being actively exploited

I've mentioned it before as a method against attacks on HTTP traffic, but to reiterate: If you have an extra server (small VM will do) and if your user base allows it, you can block the HTTP(S) traffic, and only allow the web mail to be used through an authenticated HTTP proxy . I use this kind of p...
by halfgaar
Sun Jun 09, 2019 12:38 pm
Forum: Administrators
Topic: Zimbra Collaboration 8.7.x and Ubuntu OS update corrupts/removes Zimbra installation
Replies: 40
Views: 78979

Re: Zimbra Collaboration 8.7.x and Ubuntu OS update corrupts/removes Zimbra installation

I just performed an upgrade from Ubuntu 14.04 Zimbra 8.7.11, to Ubuntu 16.04, Zimbra 8.8.12. Let me document my findings: The instructions on the wiki (as per today) didn't work. After having to fix Java VM debugging startup parameters from localconfig.xml , the mailboxdaemon complained about the st...
by halfgaar
Tue Jun 04, 2019 4:54 pm
Forum: Administrators
Topic: Zimbra Collaboration 8.7.x and Ubuntu OS update corrupts/removes Zimbra installation
Replies: 40
Views: 78979

Re: Zimbra Collaboration 8.7.x and Ubuntu OS update corrupts/removes Zimbra installation

Joho and David, did you see/use the (semi) official Upgrade Ubuntu 14.x to Ubuntu 16.x and update ZCS 8.7 & above As always, make some kind of backup. My Zimbra virtual machine is on a logical volume, so I always make a backup snapshot. I close all tcp ports when I do it so nothing gets mutated....
by halfgaar
Thu May 30, 2019 7:47 pm
Forum: Administrators
Topic: CVE-2019-9670 being actively exploited
Replies: 248
Views: 228934

Re: CVE-2019-9670 being actively exploited

You can always use 'stat' to look at the ctime: you can't change that.
by halfgaar
Mon May 27, 2019 6:41 pm
Forum: Administrators
Topic: How to properly backup Zimbra?
Replies: 18
Views: 11000

Re: How to properly backup Zimbra?

What LVM strategy you use? Snapshotting /opt/zimbra/store ? I outlined it some post back, but in short: the entire virtual machine is on an logical volume, which I snapshot and backup. But, your issue emphasis the important of being able to restore one account, which is kind of tricky with the FOSS...
by halfgaar
Mon May 20, 2019 1:40 pm
Forum: Administrators
Topic: CVE-2019-9670 being actively exploited
Replies: 248
Views: 228934

Re: CVE-2019-9670 being actively exploited

Smart.

Are you still in a position to do 'diff -r' on the dirs? I'd like to see the difference.
by halfgaar
Mon May 20, 2019 6:48 am
Forum: Administrators
Topic: CVE-2019-9670 being actively exploited
Replies: 248
Views: 228934

Re: CVE-2019-9670 being actively exploited

I want to find out if this version has the same vulnerability... 8.7.6_GA_1776.FOSS I am not quite sure because there are no patches released for this version. There are: you need to update to 8.7.11 and then apply patch 11. I have found this messages in the log, however there is nothing else, like...
by halfgaar
Sun May 12, 2019 7:42 am
Forum: Administrators
Topic: How to properly backup Zimbra?
Replies: 18
Views: 11000

Re: How to properly backup Zimbra?

I feel that if you can write that script, you can also do what I typed, or automate that :) Apparently, VirtualBox can use raw disk back-ends, so it should be easy enough for you to migrate to LVM using dd, except that your current disk layout may not support it, so you may need to take it offline a...

Go to advanced search