Results 1 to 10 of 11

Thread: Stopping continuous spam from spammer using Zimbra

Hybrid View

  1. #1
    Join Date
    Jul 2013
    Posts
    6
    Rep Power
    2

    Default Stopping continuous spam from spammer using Zimbra

    I get 2 or 3 emails a day from someone using Zimbra.

    How do I get them stopped?

    This is one of the many names used:
    kenvalazquez@yahoo.com;

    How do I report this?

    Thanks
    Macy McFarland

  2. #2
    phoenix is offline Zimbra Consultant & Moderator
    Join Date
    Sep 2005
    Location
    Vannes, France
    Posts
    23,587
    Rep Power
    58

    Default

    Quote Originally Posted by MacKindly View Post
    I get 2 or 3 emails a day from someone using Zimbra.

    How do I get them stopped?

    This is one of the many names used:
    kenvalazquez@yahoo.com;

    How do I report this?
    Your question doesn't makes sense to me, you say they are using Zimbra yet the email address you show is a yahoo address - how do you know it's from a Zimbra server? In any case we can't do anything about, these are Community support forums for people using the Zimbra Collaboration Server and we have no control over who sends mail to you. You can try contacting the user and tell them they are sending mail to an incorrect address or report them to yahoo. If those don't work and you still think it's from a Zimbra server you'll need to contact the Administrator of the server and tell them. n
    Regards


    Bill


    Acompli: A new adventure for Co-Founder KevinH.

  3. #3
    Join Date
    Jul 2013
    Posts
    6
    Rep Power
    2

    Default

    Quote Originally Posted by phoenix View Post
    Your question doesn't makes sense to me, you say they are using Zimbra yet the email address you show is a yahoo address - how do you know it's from a Zimbra server? In any case we can't do anything about, these are Community support forums for people using the Zimbra Collaboration Server and we have no control over who sends mail to you. You can try contacting the user and tell them they are sending mail to an incorrect address or report them to yahoo. If those don't work and you still think it's from a Zimbra server you'll need to contact the Administrator of the server and tell them. n
    I have definitely not made myself clear. I will paste below how I know it comes from Zimbra:

    <head> … </head><body style="margin: 0px; overflow: hidden;"><div id="xcnavbar" style="height: 44px; position: relative;"> … </div>
    <!--
    ***** BEGIN LICENSE BLOCK *****
    Zimbra Collaboration Suite Web Client
    Copyright (C) 2004, 2005, 2006, 2007, 2008, 2009, 2010 Zimbra, Inc.

    The contents of this file are subject to the Zimbra Public License
    Version 1.3 ("License"); you may not use this file except in
    compliance with the License. You may obtain a copy of the License at
    Licensing for open source server & client technology: enterprise messaging and collaboration software by Zimbra.

    Software distributed under the License is distributed on an "AS IS"
    basis, WITHOUT WARRANTY OF ANY KIND, either express or implied.
    ***** END LICENSE BLOCK *****
    -->
    <script src="/zimbra/res/I18nMsg,AjxMsg,ZMsg,ZmMsg,AjxKeys,ZmKeys,ZdMsg,Ajx TemplateMsg.js.zgz?v=201306050001&skin=velodrome2" type="text/javascript"></script>
    <!-- image overlays and masks -->
    <script> … </script><div style="display:none"> … </div>

    There is more but this identifies the zimbra connection. I get 2 or 3 emails a day with this type of content:


    Dear Macy

    I'm emailing this morning to make sure and make sure you got the earlier box

    Shipments fleetly transferred to ((((MY ADDRESS GOES HERE, I WON'T PUT IT ON THIS THREAD.)))))#
    https://docs.google.com/a/qjehf.org/...xndhI4XRzp0nfU

    I have never gone to or opened the link for obvious reasons.

    I would like very much to find out who is doing this and report them and since it is coming from your server I thought you could help me.

    Macy

  4. #4
    phoenix is offline Zimbra Consultant & Moderator
    Join Date
    Sep 2005
    Location
    Vannes, France
    Posts
    23,587
    Rep Power
    58

    Default

    Quote Originally Posted by MacKindly View Post
    I have definitely not made myself clear. I will paste below how I know it comes from Zimbra:
    I don't doubt that you're getting spam but that information doesn't actually prove it's coming from Zimbra, what you've posted could from a spoofed email. You need to post the headers from one of these emails so we can see where it's actually come from.

    Quote Originally Posted by MacKindly View Post
    I have never gone to or opened the link for obvious reasons.
    The link takes to a page that doesn't exist.
    Regards


    Bill


    Acompli: A new adventure for Co-Founder KevinH.

  5. #5
    Join Date
    Jul 2013
    Posts
    6
    Rep Power
    2

    Default

    Here is the header:

    <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
    <html>
    <head>
    <!--
    launchZCS.jsp
    * ***** BEGIN LICENSE BLOCK *****
    * Zimbra Collaboration Suite Web Client
    * Copyright (C) 2007, 2008, 2009, 2010 Zimbra, Inc.
    *
    * The contents of this file are subject to the Zimbra Public License
    * Version 1.3 ("License"); you may not use this file except in
    * compliance with the License. You may obtain a copy of the License at
    * Licensing for open source server & client technology: enterprise messaging and collaboration software by Zimbra.
    *
    * Software distributed under the License is distributed on an "AS IS"
    * basis, WITHOUT WARRANTY OF ANY KIND, either express or implied.
    * ***** END LICENSE BLOCK *****
    -->

    <meta http-equiv="Content-Type" content="text/html;charset=utf-8">

    <title>XFINITY Connect</title>
    <link href="/zimbra/css/images,common,dwt,msgview,login,zm,spellcheck,wiki ,skin.css?v=201306050001&debug=&skin=velodrome2&lo cale=en_US" rel="stylesheet" type="text/css" />

    <link rel="SHORTCUT ICON" href="/zimbra/img/logo/favicon.ico">
    <script>
    appContextPath = "/zimbra";
    appCurrentSkin = "velodrome2";
    appExtension = ".zgz";
    appDevMode = false;

    function purl(name, temp_string ) {
    name = name.replace(/[\[]/,"\\\[").replace(/[\]]/,"\\\]");
    var regexS = "[\\?&]"+name+"=([^&#]*)";
    var regex = new RegExp( regexS );
    var results = regex.exec( temp_string );
    if( results == null )
    return "";
    else

    At least I think that's the header. It's what I seen when I select inspect elements.

  6. #6
    phoenix is offline Zimbra Consultant & Moderator
    Join Date
    Sep 2005
    Location
    Vannes, France
    Posts
    23,587
    Rep Power
    58

    Default

    Quote Originally Posted by MacKindly View Post
    At least I think that's the header. It's what I seen when I select inspect elements.
    No, they aren't the headers - the headers will have the servers & IP addresses that the message has travelled through to get to your Inbox. Which mail client are you using?
    Regards


    Bill


    Acompli: A new adventure for Co-Founder KevinH.

Similar Threads

  1. Continuous Outlook '10 crashing with Zimbra installed
    By rjp-nolaf in forum Zimbra Connector for Outlook
    Replies: 7
    Last Post: 01-24-2012, 03:06 PM
  2. Continuous Outlook '10 crashing with Zimbra installed
    By rjp-nolaf in forum Error Reports
    Replies: 3
    Last Post: 01-20-2012, 02:48 PM
  3. Zimbra is a SPAMMER again
    By warcries in forum Administrators
    Replies: 1
    Last Post: 09-06-2011, 03:43 AM
  4. Zimbra is a SPAMMER
    By warcries in forum Administrators
    Replies: 2
    Last Post: 07-19-2011, 01:03 AM
  5. stopping spam senders
    By ddjs in forum Administrators
    Replies: 6
    Last Post: 10-10-2007, 07:54 AM

Tags for this Thread

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •