Maldua's Zimbra FOSS Builds - Share your feedback

[realsparticle]

Hello to anyone who might be able to help.

This is a new server to replace our currently ransomeware locked old server that is now isolated and forensics are going on.

Clean Ubuntu 24.04 server. Totally clean new install of zimbra zimbra-installer-10.1.20.p1/zcs-10.1.20_GA_4200001.UBUNTU24_64.20260820122254
Downlaoded last night and fighting with it every since.

It is installed all services show running in the cli but the admin interface shows all services down.

I can configure via the admin interface but all monitoring shows as if the full list of services is down.

No idea what is going on. Is this a new issue or does anyone have any idea why this would be.

Cheers
Spart

[JDunphy]

It is installed all services show running in the cli but the admin interface shows all services down.

I can configure via the admin interface but all monitoring shows as if the full list of services is down.

No idea what is going on. Is this a new issue or does anyone have any idea why this would be.

Fairly common and documented often here. FWIW, it happened to me 10 years ago too.

What is happening is fairly low tech... they run a cron job that runs that same zmcontrol status you did from the command line and populate via syslog some STATUS commands in /var/log/zimbra-stats.log ... They also have perl program basically doing a tail -f (swatch) that looks for those lines and populates a DB given those lines. The admin interface then pulls from the database and creates the x or check mark icons. Bottom line: if zmcontrol status says you are ok than you are ok. If you want to fix it. Here is more detail on how to fix it.

viewtopic.php?f=15&t=65863

Jim

[phili67]

When I try to install on ubuntu 22.04, or Ubuntu 24.04, I get this error, someone could help me ?

It was my mistake—during a Zimbra 8.8.15 deployment, the common libraries are included, and I forgot to check the “Y” box for dependencies.

Sorry

root@mail:~/zcs-10.1.20_GA_4200001.UBUNTU22_64.20260820122323# bash install.sh

Operations logged to /tmp/install.log.qhPorLxl
Checking for existing installation...
zimbra-license-tools...NOT FOUND
zimbra-license-extension...NOT FOUND
zimbra-network-store...NOT FOUND
zimbra-ldap...NOT FOUND
zimbra-logger...NOT FOUND
zimbra-mta...NOT FOUND
zimbra-dnscache...NOT FOUND
zimbra-snmp...NOT FOUND
zimbra-license-daemon...NOT FOUND
zimbra-store...NOT FOUND
zimbra-apache...NOT FOUND
zimbra-spell...NOT FOUND
zimbra-convertd...NOT FOUND
zimbra-memcached...NOT FOUND
zimbra-proxy...NOT FOUND
zimbra-archiving...NOT FOUND
zimbra-onlyoffice...NOT FOUND
zimbra-core...NOT FOUND


----------------------------------------------------------------------
PLEASE READ THIS AGREEMENT CAREFULLY BEFORE USING THE SOFTWARE.
SYNACOR, INC. ("SYNACOR") WILL ONLY LICENSE THIS SOFTWARE TO YOU IF YOU
FIRST ACCEPT THE TERMS OF THIS AGREEMENT. BY DOWNLOADING OR INSTALLING
THE SOFTWARE, OR USING THE PRODUCT, YOU ARE CONSENTING TO BE BOUND BY
THIS AGREEMENT. IF YOU DO NOT AGREE TO ALL OF THE TERMS OF THIS
AGREEMENT, THEN DO NOT DOWNLOAD, INSTALL OR USE THE PRODUCT.

License Terms for this Zimbra Collaboration Suite Software:
https://www.zimbra.com/license/zimbra-p ... a-2-6.html
----------------------------------------------------------------------



Do you agree with the terms of the software license agreement? [N] y



Use Zimbra's package repository [Y] n

Checking for installable packages

Found zimbra-core (local)
Found zimbra-ldap (local)
Found zimbra-logger (local)
Found zimbra-mta (local)
Found zimbra-dnscache (local)
Found zimbra-snmp (local)
Found zimbra-store (local)
Found zimbra-apache (local)
Found zimbra-spell (local)
Found zimbra-proxy (local)


Select the packages to install

Install zimbra-ldap [Y] y

Install zimbra-logger [Y] u
A Yes/No answer is required

Install zimbra-logger [Y] y

Install zimbra-mta [Y] y

Install zimbra-dnscache [Y] y

Install zimbra-snmp [Y] y

Install zimbra-store [Y] y

Install zimbra-apache [Y] y

Install zimbra-spell [Y] y

Install zimbra-proxy [Y] y
Checking required space for zimbra-core
Checking space for zimbra-store
Checking required packages for zimbra-store
zimbra-store package check complete.

Installing:
zimbra-core
zimbra-ldap
zimbra-logger
zimbra-mta
zimbra-dnscache
zimbra-snmp
zimbra-store
zimbra-apache
zimbra-spell
zimbra-proxy

The system will be modified. Continue? [N] y

Beginning Installation - see /tmp/install.log.qhPorLxl for details...

zimbra-core-components is missing. ERROR
zimbra-timezone-data will be installed.
zimbra-common-mbox-db will be installed.
zimbra-common-mbox-docs will be installed.
zimbra-common-mbox-conf-msgs will be installed.
zimbra-common-mbox-native-lib will be installed.
zimbra-common-mbox-conf-rights will be installed.
zimbra-common-mbox-conf-attrs will be installed.
zimbra-common-mbox-conf will be installed.
zimbra-common-core-libs will be installed.
zimbra-common-core-jar will be installed.
zimbra-core will be installed.
zimbra-ldap-components is missing. ERROR
zimbra-ldap will be installed.
zimbra-logger will be installed.
zimbra-mta-components is missing. ERROR
zimbra-mta will be installed.
zimbra-dnscache-components is missing. ERROR
zimbra-dnscache will be installed.
zimbra-snmp-components is missing. ERROR
zimbra-snmp will be installed.
zimbra-store-components is missing. ERROR
zimbra-jetty-distribution is missing. ERROR
zimbra-mbox-conf will be installed.
zimbra-mbox-store-libs will be installed.
zimbra-mbox-webclient-war will be installed.
zimbra-mbox-war will be installed.
zimbra-mbox-service will be installed.
zimbra-mbox-admin-console-war will be installed.
zimbra-store will be installed.
zimbra-apache-components is missing. ERROR
zimbra-apache will be installed.
zimbra-spell-components is missing. ERROR
zimbra-spell will be installed.
zimbra-proxy-components is missing. ERROR
zimbra-memcached is missing. ERROR
zimbra-proxy will be installed.

Unable to find missing packages in repository. System is not modified.

It was my fault sorry, I thought

[realsparticle]

It is installed all services show running in the cli but the admin interface shows all services down.

I can configure via the admin interface but all monitoring shows as if the full list of services is down.

No idea what is going on. Is this a new issue or does anyone have any idea why this would be.

Fairly common and documented often here. FWIW, it happened to me 10 years ago too.

What is happening is fairly low tech... they run a cron job that runs that same zmcontrol status you did from the command line and populate via syslog some STATUS commands in /var/log/zimbra-stats.log ... They also have perl program basically doing a tail -f (swatch) that looks for those lines and populates a DB given those lines. The admin interface then pulls from the database and creates the x or check mark icons. Bottom line: if zmcontrol status says you are ok than you are ok. If you want to fix it. Here is more detail on how to fix it.

viewtopic.php?f=15&t=65863

Jim

Many thanks Jim,

I did eventually fix it, it was a PITA.

Now workign through securing and locking this server down. Do we know if this version is patched against the latest round of attacks?

Cheers
Spart

[phili67]

Thank's for the reply, but I'm not updating zimbra, it's a first install.
It's urgent, because we have been hacked from a 8.8.15 P47 version through smnp.

[JDunphy]

Now workign through securing and locking this server down. Do we know if this version is patched against the latest round of attacks?

Cheers
Spart

Hard to know what is published these days or what you have but i would hope so... the network version is patched and the maldua bulid would have the patch as they were the first to have a solution for the FOSS community.

I normally patch myself as I explained here:

viewtopic.php?p=318449#p318449

Take a look at /opt/zimbra/conf/swatchrc and look for the dosnmp function in that configuration file for swatch ... if you see back ticks (`) in the dosnmp function than it's not patched but you will probably find system to execute the trap command indicating it was patched. I don't run any snmp manager here so I patched the regular expression and null out the dosnmp function. Why execute anything retrieved from a log file parse if there is nothing listening for those traps to begin with (ie. alerts) was my logic so: sub dosnmp { return 1; }

Jim

[Carlos A. P. Cunha]

Upgrade Zimbra 8.8.15 P45 to 10.1.20p1 successfully updated

I also installed version 10.1.20p1 on Ubuntu 24.04, and everything worked fine.

Regards;

[phili67]

I installed Ubuntu 24.04 with Zimbra 10.1.20 after a hack on a 8.8.15 server.
I exported all the mailing lists and accounts as TGZ files to restore everything on the new server.
I set up strict security measures:
- I disabled SMNP
- via Fail2ban on HTTP/HTTPS, Postfix, and SMTP
- I set up Fail2ban to protect against RCE attacks
- I added filters to the Nginx proxy to protect against XSS attacks, modified the CSP
- And set up scripts for incremental backups of mailboxes via BTFRS synchronization to store them off-site.

Version 10.1.20 is truly an excellent release—many thanks to Maldua’s and his team.