How to automatically send alert email to admin

Discuss your pilot or production implementation with other Zimbra admins or our engineers.
lzmwtt
Posts: 17
Joined: Tue Mar 07, 2017 7:48 pm

How to automatically send alert email to admin

Postby lzmwtt » Sun Jul 19, 2020 1:10 pm

Dear Sir,

Just check whether we can set one policy/rule to send alert email to admin account automatically. The scenario as follow:-

If one account was hacked to cause sending lots of spam mails to outside via this account, the outcome is caused IP to be blacklisted then the mail server can not send outgoing. Therefore, I am going to setup one rule, if outgoing mails are too many from one specific account, for example, sending >100 emails within 1 hour, the server will send an alert email to admin or lock this account immediately to prevent from protecting server ip to be blacklisted.

I would appreciate anyone knows how to do.

Thanks a lot.


7224jobe
Advanced member
Advanced member
Posts: 190
Joined: Sat Sep 13, 2014 1:55 am
ZCS/ZD Version: 8.8.15_GA_3869.RHEL7_64 Patch4

Re: How to automatically send alert email to admin

Postby 7224jobe » Mon Jul 20, 2020 7:31 am

Hi, I think you can achieve this using Policyd integrated in Zimbra. Take a look at https://blog.zimbra.com/2020/03/2-3-zim ... h-policyd/ and https://wiki.zimbra.com/wiki/How-to_for_cbpolicyd .
yllyxzmz
Posts: 13
Joined: Thu Mar 15, 2018 11:29 pm

Re: How to automatically send alert email to admin

Postby yllyxzmz » Sat Aug 08, 2020 5:44 pm

The article shows how to limit emails when an account is hijacked, but that doesn't help much if nobody notices it.

Is there a way to alert an admin when the threshold is triggered? Or to automatically lock the account?

Slowing a hacked account down is only half the battle! :)
phoenix
Ambassador
Ambassador
Posts: 26700
Joined: Fri Sep 12, 2014 9:56 pm
Location: Liverpool, England

Re: How to automatically send alert email to admin

Postby phoenix » Sun Aug 09, 2020 5:06 am

A quick internet search found this: http://www.bachus.us/blog/2014/07/02/zimbra-abuse-alerts/ - see if that does what you need.
Regards

Bill

Rspamd: A high performance spamassassin replacement

Per ardua ad astra
yllyxzmz
Posts: 13
Joined: Thu Mar 15, 2018 11:29 pm

Re: How to automatically send alert email to admin

Postby yllyxzmz » Tue Aug 18, 2020 2:51 pm

phoenix wrote:A quick internet search found this: http://www.bachus.us/blog/2014/07/02/zimbra-abuse-alerts/ - see if that does what you need.


That looks fantastic, thank you. I'll give this a shot and see how it goes.
yllyxzmz
Posts: 13
Joined: Thu Mar 15, 2018 11:29 pm

Re: How to automatically send alert email to admin

Postby yllyxzmz » Tue Aug 18, 2020 3:04 pm

phoenix wrote:A quick internet search found this: http://www.bachus.us/blog/2014/07/02/zimbra-abuse-alerts/ - see if that does what you need.


Though I was wondering one other thing -- is there any way to automatically lock an account that hit the cbpolicyd thresholds? Might be nice, because if the alert comes at 1am and I don't see it until I wake up, it could still get us in trouble in the interim....

EDIT: Whoops, sorry. I see now that the link you sent does that as well. Excellent!
phoenix
Ambassador
Ambassador
Posts: 26700
Joined: Fri Sep 12, 2014 9:56 pm
Location: Liverpool, England

Re: How to automatically send alert email to admin

Postby phoenix » Tue Aug 18, 2020 4:26 pm

yllyxzmz wrote:
phoenix wrote:A quick internet search found this: http://www.bachus.us/blog/2014/07/02/zimbra-abuse-alerts/ - see if that does what you need.


Though I was wondering one other thing -- is there any way to automatically lock an account that hit the cbpolicyd thresholds? Might be nice, because if the alert comes at 1am and I don't see it until I wake up, it could still get us in trouble in the interim....

EDIT: Whoops, sorry. I see now that the link you sent does that as well. Excellent!
I'm glad that does everything you need. :)
Regards

Bill

Rspamd: A high performance spamassassin replacement

Per ardua ad astra

Return to “Administrators”

Who is online

Users browsing this forum: No registered users and 14 guests