Prevent Autodiscover request

[mqaroush]

How can i prevent Autodiscover request

Code: Select all

  [root@xxx~]# cat /opt/zimbra/log/access_log.2019-07-02 | grep pyth
91.235.116.123 -  -  [02/Jul/2019:15:11:55 +0000] "GET / HTTP/1.1" 200 - "-" "python-requests/2.18.4" 20
91.235.116.123 -  -  [02/Jul/2019:15:11:55 +0000] "POST /Autodiscover/Autodiscover.xml HTTP/1.1" 400 345 "-" "python-requests/2.18.4" 23
91.235.116.123 -  -  [02/Jul/2019:15:11:55 +0000] "GET / HTTP/1.1" 302 0 "-" "python-requests/2.18.4" 0
91.235.116.123 -  -  [02/Jul/2019:15:11:56 +0000] "GET / HTTP/1.1" 200 - "-" "python-requests/2.18.4" 20
91.235.116.123 -  -  [02/Jul/2019:15:11:56 +0000] "POST /Autodiscover/Autodiscover.xml HTTP/1.1" 400 345 "-" "python-requests/2.18.4" 7 

[raghuramn89@gmail.com]

Hi,

Check your ZCS version and make sure it's not compromised.
Ref: CVE-2019-9670
Secure ZCS versions, go through below URL to get more information about recent Zimbra vulnerabilities and latest fixes.
https://wiki.zimbra.com/wiki/Security_Center

[mqaroush]

Our system was compromised.... we were installed the last fix from zimbra and follow others recomendations...to this moment ..we dont know if we are compromised or not