Results 1 to 6 of 6

Thread: How to configure Zimbra mail queues to reveal origin IP?

  1. #1
    Join Date
    Feb 2009
    Location
    Singapore
    Posts
    503
    Rep Power
    7

    Default How to configure Zimbra mail queues to reveal origin IP?

    We need to find out the IP address of our infected PCs spamming on Zimbra. Unfortunately Zimbra mail queues show the origin IP of every sender as 127.0.0.1, which is just useless information.

    Thanks,
    Boon Hong.

  2. #2
    Join Date
    Jan 2009
    Posts
    369
    Rep Power
    6

    Default

    You can see the origin IP of the mail in the log of zimbra.
    Please see in /var/log/zimbra.log.

  3. #3
    Join Date
    Feb 2009
    Location
    Singapore
    Posts
    503
    Rep Power
    7

    Default

    I have checked the log and it doesn't show where this indiasemagazine@gmail.com IP is from:

    Aug 18 09:36:29 home amavis[20371]: (20371-13) ESMTP::10024 /opt/zimbra/data/amavisd/tmp/amavis-20100818T045701-20371: <indiasemagazine@gmail.com> -> <xxx@xxx.com.sg> SIZE=5027 BODY=7BIT Received: from mail.example.com ([127.0.0.1]) by localhost (mail.example.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP for <xxx@xxx.com.sg>; Wed, 18 Aug 2010 09:36:29 +0800 (SGT)

  4. #4
    Join Date
    Jan 2009
    Posts
    369
    Rep Power
    6

    Default

    No, you must check the log in /var/log/zimbra.log.
    Please with the "postfix/smtpd" and "From" keyword, you will found what you want

  5. #5
    Join Date
    Feb 2009
    Location
    Singapore
    Posts
    503
    Rep Power
    7

    Default

    Hi Dalmate,

    The log only show external IP addresses. For internal, it still show 127.0.0.1 which is not helpful for us to identify which PC is infected:

    Aug 19 08:00:59 home postfix/smtpd[27200]: connect from localhost[127.0.0.1]

  6. #6
    Join Date
    Feb 2009
    Location
    Singapore
    Posts
    503
    Rep Power
    7

    Default

    I have open an RFE on this, please vote for it at: Bug 50112 &ndash; Origin IP only show 127.0.0.1

Similar Threads

  1. Replies: 7
    Last Post: 02-03-2011, 07:01 AM
  2. mta to not starting
    By cowanpf in forum Installation
    Replies: 2
    Last Post: 10-05-2009, 05:36 AM
  3. [SOLVED] Moving Zimbra to a new server
    By krolen in forum Administrators
    Replies: 109
    Last Post: 02-05-2009, 11:38 AM
  4. [SOLVED] Mailserver down when send file attach of 50Mb
    By ZMilton in forum Administrators
    Replies: 20
    Last Post: 04-10-2008, 12:44 PM
  5. fresh install down may be due to tomcat
    By gon in forum Installation
    Replies: 10
    Last Post: 07-25-2007, 09:09 AM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •