On the source server – su – cp -a /opt/zimbra/ssl /sslbk tar -czf /sslbk.tgz /sslbk Copy sslbk.tgz to the / directory on the server you want to copy the certificate to On the destination server stop the zimbra service. On … Continue reading →
Getting a lot of email spam which has similar subject lines? You can reject it before it gets put into a mailbox As zimbra execute zmprov gs `zmhostname` zimbraMtaHeaderChecks You should see: zimbraMtaHeaderChecks: pcre:/opt/zimbra/conf/postfix_header_checks We need to add a new … Continue reading →
I have found the following two sites helpful in finding issues with the configuration of SSL secured web sites https://ssltools.digicert.com/checker/ https://www.ssllabs.com/ssltest/analyze.html Test which ciphers (TLS, SSL, etc) are enabled nmap -sV –script ssl-enum-ciphers -p 443 www.yourdomain.com Ref: https://nmap.org/nsedoc/scripts/ssl-enum-ciphers.html
Continue reading →For Zimbra 8.5 and newer Execute as the zimbra user: zmprov mcf zimbraMtaSmtpdTlsCiphers high zmprov mcf zimbraMtaSmtpdTlsProtocols ‘!SSLv2,!SSLv3’ zmprov mcf zimbraMtaSmtpdTlsMandatoryCiphers high zmprov mcf zimbraMtaSmtpdTlsExcludeCiphers ‘aNULL,MD5,DES’ Within 2 minutes, zmconfigd will update postfix for you, and the system will be … Continue reading →
Create an account w/ password of test1234 for email address user@abc.com with the name First Z Last and make them change their password the first time they log on zmprov createAccount user@abc.com ‘test1234’ zimbraPasswordMustChange TRUE displayName ‘First Z. Last’ \ … Continue reading →
The ‘Server status’ tab in the admin console shows an extra entry for “localhost”, or a server that you removed from the system some time ago (using the zmprov deleteServer command) with all services crossed out. Resolution: First get the output … Continue reading →
Purpose With Dumpster the users (and more importantly, admins) can recover deleted files (Emails, Contacts, Calendar or apointments, Tasks, Files, etc.) from a period of time. This feature is really useful to recover specific files deleted by mistake, and makes … Continue reading →
zmprov -l gaa -s `zmhostname`
Continue reading →Enabling LDAPS at installation time To enable LDAPS at installation time, change the port used by the LDAP server in the installation menu from 389 to 636. Enabling LDAPS after installation Modify the URL used by LDAP on all servers, … Continue reading →
There are a couple of customizations that can only be done by editting the /opt/zimbra/postfix/conf/main.cf file. The problem is, if you do any upgrades, you loose your changes. After being burned by this, I added this script to my servers … Continue reading →