Hello,

we want to migrate our institute's mail and calendar services to Zimbra and have set up a 8.0.4 ZCS server. We would also like to provide a portal for our users to access some web services that are now only available from inside of our networks (by design).

Following these instructions:

ZCS 6.0:Zimlet Developers Guide:Portal - Zimbra :: Wiki
ZCS 6.0:Zimlet Developers Guide:Proxy Servlet Setup - Zimbra :: Wiki

we were able to set up the "home" tab and use IFrames to access the web content of some internal web services. This works beautifully.

However, with considerable irritation we found that

https://our.zimbra.server/services/p...ternal.service

now allows anybody to access our internal web service *without any authentication* from outside of our networks.

Is this a configuration fault on our side?
How can we make sure that only authenticated users can use the proxy functionality?

Many thanks in advance.
Yours sincerely,
Stefan Vollmar
--
Dr. Stefan Vollmar, Dipl.-Phys.
Head of IT group
Max-Planck-Institut für neurologische Forschung
Gleueler Str. 50, 50931 Köln, Germany
Tel.: +49-221-4726-213 FAX +49-221-4726-298
Tel.: +49-221-478-5713 Mobile: 0160-93874279
E-Mail: vollmar@nf.mpg.de MPI Koeln: Home