On the 8.8.15 P20 FOSS - We use the zimbraReverseProxySSLCiphers in the wiki article linked by JDunphy above - prepended with TLS_AES_256_GCM_SHA384: for TLSv1.3

We get an A+ rating - with individual scores on the right of 100,100,90,90

How are you sending the emails? Are you using the SOAP API?

In the Admin tool for the user's Class Of Service->Preferences-Sending Mail - do you have "Save to sent" checked? And in the Admin tool for the account ->Preferences-> is the same box checked?

There are 2 approaches pinned in this forum. I used this one https://forums.zimbra.org/viewtopic.php?f=15&t=62705 - tweaked to use DNS validation for certbot instead of editing the nginx templates. It has worked great for me this far. See post No.7 in the thread. Many others have used JDunphy's ...

Answering my own question in case anyone else needs it. The short answer is YES zimbra has an LDAP configuration setting ( zimbraMtaSmtpdTlsReceivedHeader ) to control it. The default is set to no. To enable the TLS details in the header, as the zimbra user set the value to yes, and reload postfix. ...

When emails are received by zimbra from our external scanning service - Proofpoint- the header just shows "with ESMPTS" Received: from dispatch1-eu1.ppe-hosted.com (dispatch1-eu1.ppe-hosted.com [185.132.181.7]) by mail.mydomain.com (Postfix) with ESMTPS id 9C01E1027CAA0 for <joebloggs@mydo...

Release 70 of the z-push zimbra backend has been uploaded to SourceForge https://sourceforge.net/projects/zimbrabackend/ As always - please read the full Release Notes before upgrading - Workaround Z-Push issue in SmartForward/SmartReply from shared folder - Add 2 to continue statement in GetNextMes...

I have an issue with some messages redirected from zimbra mailboxes over to Exchange server. The emails contain an excel spreadsheet. For testing purposes, I have had the originator of the messages send a CC copy directly to one of the exchange mailboxes I can open the message in zimbra, and the spr...

bulletxt wrote:you might use the mdb_copy command: https://wiki.zimbra.com/wiki/OpenLDAP_P ... Tuning_8.0

That document says "Note: The copied MDB file will *not* be a sparse file. It will be the actual size of the database." so I don't think it will help

but result is B TLS 1.3 No TLS 1.2 Yes TLS 1.1 Yes TLS 1.0 Yes SSL 3 No SSL 2 No If you did those steps and it still shows that 1.0 and 1.1 are available, it would suggest the connection is not hitting the proxy, or is hitting another proxy. Can you verify that the Proxy is enabled, either (a) enab...