Prevent Autodiscover request

Discuss your pilot or production implementation with other Zimbra admins or our engineers.
mqaroush
Posts: 42
Joined: Sun Aug 03, 2014 4:31 am

Prevent Autodiscover request

Postby mqaroush » Wed Jul 03, 2019 9:53 am

How can i prevent Autodiscover request

Code: Select all

  [root@xxx~]# cat /opt/zimbra/log/access_log.2019-07-02 | grep pyth
91.235.116.123 -  -  [02/Jul/2019:15:11:55 +0000] "GET / HTTP/1.1" 200 - "-" "python-requests/2.18.4" 20
91.235.116.123 -  -  [02/Jul/2019:15:11:55 +0000] "POST /Autodiscover/Autodiscover.xml HTTP/1.1" 400 345 "-" "python-requests/2.18.4" 23
91.235.116.123 -  -  [02/Jul/2019:15:11:55 +0000] "GET / HTTP/1.1" 302 0 "-" "python-requests/2.18.4" 0
91.235.116.123 -  -  [02/Jul/2019:15:11:56 +0000] "GET / HTTP/1.1" 200 - "-" "python-requests/2.18.4" 20
91.235.116.123 -  -  [02/Jul/2019:15:11:56 +0000] "POST /Autodiscover/Autodiscover.xml HTTP/1.1" 400 345 "-" "python-requests/2.18.4" 7


raghuramn89@gmail.com
Posts: 7
Joined: Thu Jan 29, 2015 2:40 pm
Location: Hyderabad
Contact:

Re: Prevent Autodiscover request

Postby raghuramn89@gmail.com » Thu Jul 04, 2019 12:24 pm

Hi,

Check your ZCS version and make sure it's not compromised.
Ref: CVE-2019-9670
Secure ZCS versions, go through below URL to get more information about recent Zimbra vulnerabilities and latest fixes.
https://wiki.zimbra.com/wiki/Security_Center
mqaroush
Posts: 42
Joined: Sun Aug 03, 2014 4:31 am

Re: Prevent Autodiscover request

Postby mqaroush » Thu Jul 04, 2019 8:33 pm

Our system was compromised.... we were installed the last fix from zimbra and follow others recomendations...to this moment ..we dont know if we are compromised or not

Return to “Administrators”

Who is online

Users browsing this forum: MSN [Bot] and 7 guests