For Zimbra 8.5 and newer Execute as the zimbra user: zmprov mcf zimbraMtaSmtpdTlsCiphers high zmprov mcf zimbraMtaSmtpdTlsProtocols ‘!SSLv2,!SSLv3’ zmprov mcf zimbraMtaSmtpdTlsMandatoryCiphers high zmprov mcf zimbraMtaSmtpdTlsExcludeCiphers ‘aNULL,MD5,DES’ Within 2 minutes, zmconfigd will update postfix for you, and the system will be … Continue reading →
The ‘Server status’ tab in the admin console shows an extra entry for “localhost”, or a server that you removed from the system some time ago (using the zmprov deleteServer command) with all services crossed out. Resolution: First get the output … Continue reading →
Purpose With Dumpster the users (and more importantly, admins) can recover deleted files (Emails, Contacts, Calendar or apointments, Tasks, Files, etc.) from a period of time. This feature is really useful to recover specific files deleted by mistake, and makes … Continue reading →
zmprov -l gaa -s `zmhostname`
Continue reading →Enabling LDAPS at installation time To enable LDAPS at installation time, change the port used by the LDAP server in the installation menu from 389 to 636. Enabling LDAPS after installation Modify the URL used by LDAP on all servers, … Continue reading →
I have found the following two sites helpful in finding issues with the configuration of SSL secured web sites https://ssltools.digicert.com/checker/ https://www.ssllabs.com/ssltest/analyze.html Test which ciphers (TLS, SSL, etc) are enabled nmap -sV –script ssl-enum-ciphers -p 443 www.yourdomain.com Ref: https://nmap.org/nsedoc/scripts/ssl-enum-ciphers.html
Continue reading →There are a couple of customizations that can only be done by editting the /opt/zimbra/postfix/conf/main.cf file. The problem is, if you do any upgrades, you loose your changes. After being burned by this, I added this script to my servers … Continue reading →
If you need all your email from your Zimbra server to be directed through a relay server, use the following command on your Zimbra server su zimbra zmprov ms `hostname` zimbraMtaRelayHost my.relay.server.com zmmtactl restart where: my.relay.server.com is the smtp server … Continue reading →