DANGER: 8.8.15p20 breaks IPv4 in dual-stack

Discuss your pilot or production implementation with other Zimbra admins or our engineers.
Post Reply
User avatar
jered
Advanced member
Advanced member
Posts: 57
Joined: Sat Sep 13, 2014 12:35 am
Location: Somerville, MA

DANGER: 8.8.15p20 breaks IPv4 in dual-stack

Post by jered »

I installed 8.8.15p20 this morning due to the critical security alert, but apparently this brought along a lot of other patches... including disabling IPv4 listening entirely! I suspect this is related to this item buried in the release notes: "ZCS-10278 Dual stack IPv4 + IPv6, Multiple domain & vhost"

ETA: Native (e.g. port 7143) services are listening on IPv4 so this seems to be a problem in the nginx config.

ETA2: Temp fix, I added "ipv6only=off" to the "${core.ipboth.enabled}listen" directive in:
/opt/zimbra/conf/nginx/templates/nginx.conf.mail.imap.default.template
/opt/zimbra/conf/nginx/templates/nginx.conf.mail.imaps.default.template

ETA3: This was introduced by a commit briefly before the release, and looks like it's been resolved in the github repo:
https://github.com/Zimbra/zm-nginx-conf ... 0510c0c353

https://github.com/Zimbra/zm-nginx-conf/pull/22

I suggest that Zimbra should pull p20 until this is fixed.
ghen
Outstanding Member
Outstanding Member
Posts: 264
Joined: Thu May 12, 2016 1:56 pm
Location: Belgium
ZCS/ZD Version: 9.0.0

Re: DANGER: 8.8.15p20 breaks IPv4 in dual-stack

Post by ghen »

The problem was introduced with zimbra-proxy-patch-8.8.15.1616046236.p20
There's already an update zimbra-proxy-patch-8.8.15.1617190845.p20 to restore the previous behaviour.
So just update again.
User avatar
jered
Advanced member
Advanced member
Posts: 57
Joined: Sat Sep 13, 2014 12:35 am
Location: Somerville, MA

Re: DANGER: 8.8.15p20 breaks IPv4 in dual-stack

Post by jered »

Thanks! Can confirm that "zimbra-proxy-patch amd64 8.8.15.1617190845.p20-1.u18" resolves this issue on Ubuntu 18.04.5.
Post Reply