Search found 78 matches

by zimico
Tue Oct 02, 2018 1:10 pm
Forum: Administrators
Topic: Brute force attack & SPAM configuration
Replies: 20
Views: 9138

Re: Brute force attack & SPAM configuration

One strategy here is to configure account lockout policies such that DoSFilter (or fail2ban) starts throttling/blocking requests before the mailbox is locked out. In that way, a legitimate remote user will not be locked out by a hacker doing a fast-paced dictionary attack. Hope that helps, Mark I t...
by zimico
Mon Oct 01, 2018 1:49 pm
Forum: Administrators
Topic: Brute force attack & SPAM configuration
Replies: 20
Views: 9138

Re: Brute force attack & SPAM configuration

How do you know that hacker is using more than one million IPs?
Regards,
by zimico
Fri Sep 21, 2018 1:27 pm
Forum: Installation and Upgrade
Topic: Zimbra for Production environment recommendation
Replies: 3
Views: 312

Re: Zimbra for Production environment recommendation

You can use physical or virtual server. Docker/container is not supported at the present. There is wiki about server sizing and requirement for zimbra installation.

Regards,
by zimico
Thu Sep 20, 2018 2:58 am
Forum: Administrators
Topic: Account compromised impossibile to stop spam
Replies: 17
Views: 949

Re: Account compromised impossibile to stop spam

I think you should not allow whole subnet, change to, for example: zmprov ms `zmhostname` zimbraMtaMyNetworks '127.0.0.0/8 192.168.5.1/32 192.168.5.3/32' postfix reload Use firewall to block smtp port on Web server. In my experience, do not allow web server having email server function. Regards.
by zimico
Tue Sep 18, 2018 5:04 am
Forum: Administrators
Topic: certbot-zimbra 0.4 released
Replies: 7
Views: 575

Re: certbot-zimbra 0.4 released

Hi Maxxer,
I do not see which are zimbra versions supported by this certbot-zimbra 4.0. I have just tested on Zimbra NE (trial) 8.8.9 but failed.
Regards.
by zimico
Sun Aug 26, 2018 10:00 am
Forum: Administrators
Topic: Zimbra Sending Lots of Spam.
Replies: 1
Views: 406

Re: Zimbra Sending Lots of Spam.

Hi, Please check your ZimbraMtaMyNetworks to ensure that you only allow authorized IP.s For example, $zmprov gs `zmhostname` zimbraMtaMyNetworks # name mail.zimilab.com zimbraMtaMyNetworks: 127.0.0.0/8 111.222.333.0/27 111.222.333.0/27 is my server subnet. In case your zimbra server is hosted in dat...
by zimico
Wed Aug 15, 2018 9:45 am
Forum: Installation and Upgrade
Topic: Multi IP address zimbra server
Replies: 4
Views: 858

Re: Multi IP address zimbra server

You can use prodmb.domain.colo for user's convenient.
Are you using multi server or single server? Because when you install mailbox server, it will ask you to input MTA server info (FQDN).
Regards,
by zimico
Wed Aug 15, 2018 8:50 am
Forum: Installation and Upgrade
Topic: Help regarding installation of zimbra in AWS
Replies: 4
Views: 512

Re: Help regarding installation of zimbra in AWS

Dear Mark,

I'm interesting in this topic too. Already filled out the form on your blog.

Best regards,
by zimico
Sun Aug 12, 2018 4:31 am
Forum: Installation and Upgrade
Topic: Multi IP address zimbra server
Replies: 4
Views: 858

Re: Multi IP address zimbra server

Hi Rama, If you have multi server you can access each server by difference IPs or use the same (one) IP for all servers/services. For example, you can use 1 static IP for MTA and another one for mailbox server or you can use only one static IP and do port NATs for those servers. The important thing ...
by zimico
Mon Jul 30, 2018 7:27 am
Forum: Administrators
Topic: Dictionary attack via IMAP ??
Replies: 4
Views: 515

Re: Dictionary attack via IMAP ??

I have the same kind of attack now from India, about 20-30 connections per hours. DosFilter recognizes this access but user is still locked out. (Hence, I have to increase the number of login failure and change to very complex password).
Minh

Go to advanced search