Search found 4 matches

by MattPson
Mon Jul 08, 2019 6:24 pm
Forum: Administrators
Topic: CVE-2019-9670 being actively exploited (Hacked Server)
Replies: 248
Views: 631158

Re: CVE-2019-9670 being actively exploited

I spent quite some time last Friday to clean out my system, recreate the crontab, nuking /opt/zimbra/log, reapplying the latest patch etc. and it seems that it finally worked. No odd processes and rampant cpu loads for all weekend. Great success! :) Next up is to upgrade to 8.8 in the next few days....
by MattPson
Fri Jul 05, 2019 2:58 pm
Forum: Administrators
Topic: CVE-2019-9670 being actively exploited (Hacked Server)
Replies: 248
Views: 631158

Re: CVE-2019-9670 being actively exploited

I feel the attacks are increasing in both cleverness and frequency. I keep on finding the bitcoinminer under different names regardless of attempting to remove all access points and shutting down processes. I have also patched my system and followed every suggestion in this thread to no avail. $ zmc...
by MattPson
Mon Apr 04, 2016 12:48 pm
Forum: Installation and Upgrade
Topic: [SOLVED] Problems accessing the web interface after tweaking cipher suites (SSL)
Replies: 4
Views: 5205

Re: Problems accessing the web interface after tweaking cipher suites (SSL)

Thanks! The "zmprov -l mcf ..." solved the major problem. It turns out that disabling all the ciphers was not a good idea and then trying to read instructions in the middle of the night (Swedish time) didn't work out that well either. In short: I re-enabled a couple of ciphers, restarted m...
by MattPson
Sun Apr 03, 2016 11:42 pm
Forum: Installation and Upgrade
Topic: [SOLVED] Problems accessing the web interface after tweaking cipher suites (SSL)
Replies: 4
Views: 5205

[SOLVED] Problems accessing the web interface after tweaking cipher suites (SSL)

Hello, I have a problem with my Zimbra 8.0.8 server that was working 100% ok until I tried to disable some (insecure) ciphers with the command: zimbra@mailserver:~/log$ zmprov mcf +zimbraSSLExcludeCipherSuites TLS_RSA_WITH_RC4_128_MD5 +zimbraSSLExcludeCipherSuites TLS_RSA_WITH_RC4_128_SHA +zimbraSSL...