Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Hot answers tagged

10

Why shouldn't you give up delivering email after one day? One good reason is weekends. Email is not now, and never was, particularly reliable. In the early days of the Internet, the 1980s, it was entirely possible for email to take a couple of days just to reach its destination, what with some network links not being 24x7, over expensive long distance ...


7

Use a dedicated line to define your FQDN. 192.168.10.9 mail.mydomain.com mail Remove it from the 127.0.0.1 line.


6

Having a properly configured SPF record can alleviate a little bit of that pain. It will prevent someone from sending email claiming it is from your domain.


6

With Postfix 2.7 or later it's pretty easy. First create one entry for each IP in master.cf, like this: out1 unix - - n - - smtp -o syslog_name=postfix-out1 -o smtp_helo_name=out1.yourdomain.tld -o smtp_bind_address=a.b.c.1 out2 unix - - n - - smtp -o syslog_name=postfix-...


5

Bulk email sending is a specialist’s role these days, that's why you're getting the advice you are. The big mail vendors like Mandril and Sendgrid maintain farms of machines not because of scale, but because of IP reputation. One of the most effective spam fighting techniques available to us is a database that tracks how well behaved IP addresses are with ...


4

Export each part of the chain into x509 format, then jam them together in your favorite text-editor-that-won't-mess-with-things, the subject (your certificate) first, then its signer, with the root at the bottom of the file. You'll end up with this: -----BEGIN CERTIFICATE----- (Your certificate's base64 data here) -----END CERTIFICATE----- -----BEGIN ...


4

I had the same problem trying to configure an account to act as a catch all address for multiple domains and found this valuable forum entry: catch all not working: Multi-value syntax The command zmprov modifyAccount catchall@mydomain.com zimbraMailCatchAllAddress @mydomain.com sets the zimbraMailCatchAllAddress attribute for account catchall@mydomain....


4

If you do implement this, it will likely do more harm than good. A lot of people do this when Bcc'ing a large group of people. They put themselves in the To: field and Bcc: everyone else. You'll just end up up with a lot of false positives. Just ensure that you've classified this and other emails like it as spam in SA and let the heuristics do their thing.


4

As others pointed out your SMTP relay has probably changed something. Looks like they chagned their advertised authentication mechanisms. I don't know if swaks tells you which authentication mechanism it used in it's output, but you could try specifying an auth-type and see if you get through. The parameter for digest-md5 would be: swaks -s smtp.strato.de ...


4

Let clear some side-question before proceed into main question: Will this files be archived while update of zimbra? Or they will be overwritten while updating? Yes, Zimbra will overwrite master.cf.in and all of zimbra predefined configuration templates. So what I've got here - Seems like Zimbra 8.6.0 is not loading this file, since there is no errors (...


4

The data.mdb file is actually a thin provisioned 86GB (by default) file. Rsync and sometimes cp commands will 'explode' the file to it's full size when copying to a backup directory. This obviously doesn't help if you want to create an offsite backup or if you are limited in resources. This behavior seems new in 8.0.1 The proper way to prevent this is to ...


4

No, this should not worry you at all. "Anonymous" simply means that the connection does not use an authority-issued certificate (that people usually buy), and that the TLS connection in itself therefore does not guarantee that the mail is coming from p3plsmtpout004.prod.phx3.secureserver.net. What is guaranteed is only confidentiality against passive ...


3

I can't really test this because I don't have a test setup of Zimbra to work with, but I'd suspect adding the zimbra user to AllowUsers and setting the ssh port back to 22 should be sufficient. If you're nervous about exposing ssh on a standard port, it should be possible to configure sshd to listen on your alternative port as well as port 22, and use ...


3

You have to use either different IPs or different ports. SNI (deciding which SSL certificate based on the name the other person is trying to reach) isn't supported on enough browsers yet for name-based SSL hosting to work.


3

I don't see anything wrong with the HR plan. It makes sense to me to keep the emails separated by role. If the additional licensing cost is approved then my opinion would be to go with it. You have a point about a user accessing email sent to one role from the other role, but I think the point is to take appropriate steps to keep the roles distinct and ...


3

I would use zmmboxsearch on the command line is a really easy way to dump messages. So if you wanted to dump all the messages in the inbox, as the zimbra user do: zmmboxsearch -d /tmp/user/ -m user@domain.com -l 10000 -q "in:inbox" This will dump all the raw messages that match the query for user in /tmp/user. The "-l" is the limit, by default it only ...


3

I've successfully used imapsync to migrate from dovecot to zimbra using a master password. I did change the master user separator from * to +, because the * causes the shell to process it as a wildcard. Find this line in your dovecot.conf and change it to read: auth_master_user_separator = + Here's the command I typically use: /usr/bin/imapsync \ --...


3

The imapsync --authuser1 option explained by Jazzy Pierre may solve your issue. Have a try. (I wrote imapsync).


3

You don't need a dedicated DNS Server for zimbra, you can user your existing network DNS, add zimbra entries there and make your zimbra server use that DNS server. As a workaround to that DNS issue, it happens to me also, when no DNS server is available, to use /etc/hosts file to resolve zimbra servers hostnames internally.


3

Tighten the config, make sure it's not relaying, and clean everything up. Then contact the blacklist sites and have them retest. That's really all you can do, find who's blacklisting you after cleaning things up and contacting them to re-evaluate your site and be taken off the lists.


3

Blacklisting can be tested (and monitored for free) here: http://www.unlocktheinbox.com/blacklist.aspx?st=BL. Just make sure to check both your domain and IP.


3

If you want send mails from different Ip's from a single mail server than you should think about postfix multiple instance on a single host. And you can assign a different Ip address for each instance and your null instance will submit mails for each instance. for more detail you may refer these links This one for how to assign Ip and all http://souptonuts....


3

Have you considered using a mail journaling solution? Searching across that large a dataset seems like it would be difficult with what you're proposing. My preferred method is to use MailArchiva in its free or commercial version. It works with Exchange, Sendmail, Zimbra, etc. and is powered by the Apache Lucene search engine. This would leave you free to ...


3

Webmail MTA hostname Exactly what it says. It's hostname for your server. Since zimbra can be clustered, and you can have multiple servers each one should (ideally) have unique hostname. eg: mta1.myzimbra.tld mta2.myzimbra.tld This setting should match your unix hostname (for RHEL located @ /etc/sysconfig/network) Relay MTA for external delivery Usage ...


3

Of course you can do this. Subdomains are just separate VirtualHost configurations. The names don't matter. i.e., to Apache, mail.domain.com and mail.anotherdomain.com are as different as mail.domain.com and mail2.domain.com. e.g.: <VirtualHost 192.168.1.1:80> ServerName mail.mysite.com DocumentRoot /home/mysite.com/sites/mail/public_html ... &...


3

If you are using the etoken (pki-usb-authentication) you will probably do Client Certificate authentication in the browser. This would require to reconfigure the Apache server to require a client certificate. And here is the problem. You can not determine which user is about to authenticate, before the user/browser provided the client certificate. Thus users ...


3

Zimbra (ZCS) is using Jetty as application server with configuration file generated from template and variables. You can either: a) adjust zimbraAdminPort and zimbraAdminURL # su - zimbra $ zmprov prov> getConfig zimbraMailSSLPort zimbraMailSSLPort: 443 prov> getConfig zimbraAdminPort zimbraAdminPort: 7071 prov> getConfig zimbraAdminURL ...


3

What you are describing is a split domain situation. This is well documented on the Zimbra wiki. What you want is the following: By default all e-mail to example.org is routed to Zimbra. If the recipient for example.org, for example foo@example.org does not exist in Zimbra, it must be routed to the other mail system. If it exists on the other mail system, ...


3

But is it possible to extract the existing accounts from Zimbra including authentication credentials, accounts and aliases, distribution lists, etc -- to run the same servers a la carte, without the Zimbra "suite" involved? YES First task that you needs was parsing zimbra LDAP data extracted with this command (taken from this page) /opt/zimbra/openldap/...


3

Take a look at this python script, this should do the job: https://github.com/quentinsf/IMAPdedup


Only top voted, non community-wiki answers of a minimum length are eligible