Le forum francophone est ici : https://www.zimbrafr.org/

Are the domains (webex.com at least) allowed for the CoS you're using for these users?

I'll have a deeper look during the week-end. PS... learned of a zero day nginx this morning ZDI-CAN-8296. Doesn't effect Zimbra from my understanding but we need more tools because who can keep up??? Yes, seen that yesterday. 1.x versions of nginx are impacted. However, considering how nginx is comp...

You're back?

June is starting in a nice way.

The patch to avoid this have been available for more than a month now.

You're not fixing the hack until you have patched your server and clean it up fully.

It's not solved at all.

You've fixed the part you can see (users not login) but you did not fix the root cause (compromised server).

The attachment issue is a permission problem for the upload folder.

To all people in this thread, your servers might be compromised.
viewtopic.php?f=15&t=65932

There's a permission issue on the upload folder (should be 750 not 550).

Your server might be compromised.
viewtopic.php?f=15&t=65932