All our users should be setup to use Zimbra (Zimbra connector, LDAP, IMAP, or web client) through our Internet connection, not our internal LAN. Our internal IP address of the Zimbra server is 10.9.10.205. Some of our users were incorrectly setup to connect to 10.9.10.205, not our external address. Where can I find out how users are connecting to the server? I have used grep "ip=10.9.10.205" audit*" in /opt/zimbra/log, but I'm not sure if that is pickup up all users (web, etc.).