Search found 67 matches

by omegainstitute
Mon Jul 22, 2013 9:08 am
Forum: Administrators
Topic: Trying to track down spammer using my Zimbra server
Replies: 14
Views: 1791

Trying to track down spammer using my Zimbra server

Thank you Quanah. I think I found the culprit and have things re-locked down for now. Going along the lines of LDAP locking down, it's safe to block outside access to port 389 then? That'll prevent further harvesting I presume. Again, thank you for your assistance.. You've been more than...
by omegainstitute
Mon Jul 22, 2013 8:26 am
Forum: Administrators
Topic: Trying to track down spammer using my Zimbra server
Replies: 14
Views: 1791

Trying to track down spammer using my Zimbra server

[quote user="quanah"]It would be in /var/log/zimbra.log on the MTA.Find your connect ... line from the bad IPlike: Jul 19 11:59:32 edge01-zcs postfix/smtps/smtpd[29706]: connect from some.host.com[XX.XXX.XX.XXX] Then you should see a call to zmsoap to auth: Jul 19 11:59:33 edge01-zcs sasla...
by omegainstitute
Fri Jul 19, 2013 5:36 pm
Forum: Administrators
Topic: Trying to track down spammer using my Zimbra server
Replies: 14
Views: 1791

Trying to track down spammer using my Zimbra server

Thank you Quanah, I have made a modification to my Trusted Networks (pearing down the local lan to a specific subnet instead of a /21)Any input on where I would start looking for option b? I've checked /opt/zimbra/logs for possible user credentials and IPs and haven't come up with a hit yet....
by omegainstitute
Thu Jul 18, 2013 1:40 pm
Forum: Administrators
Topic: Importing Sent Items
Replies: 1
Views: 288

Importing Sent Items

Have you tried checking the logs to see if there's anything in there to show you when the errors occured? I'm thinking mailbox.log would be the first place I'd check.
by omegainstitute
Thu Jul 18, 2013 12:55 pm
Forum: Administrators
Topic: Trying to track down spammer using my Zimbra server
Replies: 14
Views: 1791

Trying to track down spammer using my Zimbra server

[quote user="10330phoenix"]Is this a new problem or has it been happening for a while? [/QUOTE] This is a problem that has persisted for a couple of months now. I've been so busy I haven't had time to properly address it, but I also do not want to get our IP shutdown, as emails goi...
by omegainstitute
Thu Jul 18, 2013 12:07 pm
Forum: Administrators
Topic: Trying to track down spammer using my Zimbra server
Replies: 14
Views: 1791

Trying to track down spammer using my Zimbra server

Taking one of the message ID's (B897C2690016) and GREP'ing the logs for it I came up with: maillog:Jul 15 06:42:04 zimbra postfix/smtpd[16114]: B897C2690016: client=unknown[173.44.183.38] maillog:Jul 15 06:42:04 zimbra postfix/cleanup[16154]: B897C2690016: message-id= maillog:Jul 15 06:42:04...
by omegainstitute
Thu Jul 18, 2013 12:06 pm
Forum: Administrators
Topic: Trying to track down spammer using my Zimbra server
Replies: 14
Views: 1791

Trying to track down spammer using my Zimbra server

Hello everyone, I'm trying to track down how emails are being sent from my server when the following is setup (Version = Release 7.1.4_GA_2555.RHEL5_64_20120105094627 RHEL5_64 FOSS edition)For Global Settings->MTA I have: (Authentication) Enable Authentication: TRUE (Protocol Checks) Sender Addr...
by omegainstitute
Fri Feb 17, 2012 10:07 am
Forum: Administrators
Topic: mailbox is crashing
Replies: 7
Views: 1116

mailbox is crashing

I've upgraded to 7.1.4 and I am still seeing a lot of these warnings in my mailbox.log:2012-02-17 00:00:26,951 WARN [btpool0-643://zimbra.server/service/soap/GetInfoRequest] [name=bryanp@eomega.org;mid=371;ip=192 .168.1.201;ua=ZimbraWebClient - FF3.0 (Win)/7.1.4_GA_2555;] soap - unable to create...
by omegainstitute
Wed Feb 15, 2012 10:07 am
Forum: Administrators
Topic: mailbox is crashing
Replies: 7
Views: 1116

mailbox is crashing

Thanks... I have scheduled an upgrade of my installation tonight. Hopefully that takes care of it :)

Go to advanced search