Search found 4 matches

by Newtman
Tue Oct 03, 2017 11:54 am
Forum: Administrators
Topic: Account hacked in 8.6 P8 impossible to block. Possible bug!
Replies: 5
Views: 1167

Re: Account hacked in 8.6 P8 impossible to block. Possible bug!

Hello, The IPs come from the same host, you can block their IP. Also the log says auth_zimbra: hackedaccount@domain.com auth OK So I guess they know the password, it's really weird, I will need to replicate the error on my lab. Best regards He renew his IP really quickly, 5-10 minutes from a lot of...
by Newtman
Mon Oct 02, 2017 7:35 pm
Forum: Administrators
Topic: Account hacked in 8.6 P8 impossible to block. Possible bug!
Replies: 5
Views: 1167

Re: Account hacked in 8.6 P8 impossible to block. Possible bug!

Hello, do you have implemented the next on your server? https://wiki.zimbra.com/wiki/Enforcing_a_match_between_FROM_address_and_sasl_username_8.5 Best regards Hello Jorge, No, I don´t but isn´t me scenario look this my /var/log/zimbra.log: Oct 2 16:48:45 zimbra-mta saslauthd[16686]: auth_zimbra: ha...
by Newtman
Mon Oct 02, 2017 7:05 pm
Forum: Administrators
Topic: Account hacked in 8.6 P8 impossible to block. Possible bug!
Replies: 5
Views: 1167

Account hacked in 8.6 P8 impossible to block. Possible bug!

Hello, I´m sysadmin of a big Zimbra Collaboration 8.6.0 P8 running on CentOS 6.7, everyday a bunch of accouts are hacked using phishing by spammers... Las week an account was hacked, I locked it and changed password... But the account is still working! The status is locked, I changed the password a ...
by Newtman
Mon Aug 28, 2017 6:25 pm
Forum: Administrators
Topic: Delegated admins are losing their rights
Replies: 0
Views: 680

Delegated admins are losing their rights

Hello, I admin a big Zimbra Collaboration setup (+10.000 users and a lot of domains) with a lot of delegated admins for multiple domains. In the last ten days I seen a very strange problem, 3 of my admins lost their rights without any reason. I solved it with two lines: zmprov rvr domain example usr...

Go to advanced search