Zimbra Forums

I started playing around with a custom GPT this morning and after a bit of trial and error have it working pretty much where I want it without any previous knowledge other than feeding it a wiki page. We probably need to come up with a naming scheme for the GPT's to keep their number sane and predic...

As a sysadmin I need to give a straight answer to the leadership on how to proceed further but I see a bunch of strange things. - my team would prefer Ubuntu 22.04 but I still don't see the support of that and it isn't a selectable choice on the support page either. (I opened a support ticket with ...

Thanks for that too Mark! Wasn't aware of it. Here is it working with 8.8.15 but with the spamassassin command line tool. I run these as my own user here and not zimbra. It appears to spit the input file out to stdout with X-Spam-Status so thought I would throw out the rules that fired where j.txt w...

Thanks Mark,

Same results here... 4-5 seconds on lookups now back to normal.

Nice catch.

Jim

Once fixed, you should be able to use the standard commands to install your certificate. This. One quick solution... cd /tmp or cd since you are now the zimbra user. Reason: my $odir = Cwd::cwd(); #line 1287 ... Do some deploy stuff.... enough to screw up the certificate installation ... chdir($odi...

After walking through this again with this thread: https://forums.zimbra.org/viewtopic.php?t=72323, I decided to do what Barry did and start from scratch with the wiki page on describing this in simpler terms. That old wiki article is too detailed, too confusing, out of date, and acme.sh has changed...

I did it in a regex in postfix_header_checks at one time. I no longer do this anymore, but I had this in my notes where X.X.X.X was the internal ip address we didn't want included: # remove internal ip /^Received:.*X\.X\.X\.X.*/ REPLACE X-Received: Authenticated MUA on YYYY network There might be si...

How did this get set to true. Default is no. smtpd_tls_ask_ccert = yes The smtpd_tls_ask_ccert parameter in Postfix controls whether the Postfix SMTP server will ask remote clients for a client certificate when establishing a TLS encrypted connection. Setting smtpd_tls_ask_ccert = yes enables client...

I ran that earlier but wasn't sure what I was looking for. I imagine it's one of these or for the smtpd section. [zimbra@mx ~]$ postconf | grep -i tls smtp_enforce_tls = no smtp_tls_force_insecure_host_tlsa_lookup = no smtp_tls_mandatory_ciphers = medium smtp_tls_mandatory_protocols = smtp_tls_note...

Perhaps you can review this for me while it is still fresh in your mind.

https://wiki.zimbra.com/wiki/JDunphy-LE-Easy

Was this what you were looking for and would it have made using PKI certificates less painful?

Jim