Zimbra Forums

Users • Re: Printing Emails

2023-01-18T08:42:18

manuel.brignoli wrote:
I work around the problem by changing the zoom. Same problem with Google chrome and Microsoft Edge.

Hi Manuel, where do you change the zoom level? On Zimbra webmail or in the new tab that opens when you click on "print"?
Thank you

Statistics: Posted by 7224jobe — Wed Jan 18, 2023 8:42 am

Installation and Upgrade • Able to receive BUT Unable to send mails outside Zimbra!

2023-01-18T07:42:36

Hi,

I'm new to zimbra.
so, I deployed zimbra server on AWS and binded a static ip to it, I have purchased domain from godaddy, and added dns record accordingly.(which will be shared below)
I'm able to send mails to local users but cannot if I mail to google proton yahoo or any other, I have configured ssl, the logs are just fine there is no error, firewall rules are allowed to send all type of traffic,
even I'm able to receive mails from google (any other as well) but unable to send mail to gmail or anything else...
can anybody help me why it is happening ? or I'm missing something?
if there is anything I need to share further for solution, I can...
scrolled the internet but couldn't get anything.

Statistics: Posted by AnthrH3x — Wed Jan 18, 2023 7:42 am

Users • Re: Printing Emails

2023-01-18T06:38:51

I work around the problem by changing the zoom. Same problem with Google chrome and Microsoft Edge.

Statistics: Posted by manuel.brignoli — Wed Jan 18, 2023 6:38 am

Administrators • Re: DMARC alignment in Zimbra 8.8.15

2023-01-18T00:42:29

L. Mark Stone wrote:
Since we can easily override the default scores, this means you can create a very high score for the p=reject test to ensure you will never deliver an email that fails this test.

Hi Mark,

It can be a philosophical debate about where it is best to do spam/malware filtering. It has been much the same debate about if it is better to use RBLs (real-time block lists) at the Postfix milter versus within SpamAssassin.

The answer is going to vary based on an email admin's preferences, but I think it is safe to say that the spirit of the DMARC RFC standard documents strongly pushes it in the direction of doing DMARC tests at the milter. Historically, one of the grey areas with SPF and DKIM for email admins is whether or not to take action on an email that fails one or both of these checks. This led to widespread inconsistencies in email handling that could change at any time as SpamAssassin scoring changed. Another challenge has been what to do when the domain in the Return-Path and From headers did not match. So, recipients never knew if it was due to spoofing, or just someone using a persona in their email client incorrectly. This problem was solved with DMARC alignment tests.

DMARC was created to allow a domain owner to instruct recipients on how email that arrives at a recipient's mail server should be handled with no uncertainty, whether legitimate or spoofed. It also closes a frequently exploited loophole that existed pre-DMARC with SPF and DKIM in that a domain owner has a powerful tool to stop spoofing. But to reach its full potential, it requires most mail servers to do DMARC testing/filtering at the milter. A challenge that exists with testing DMARC in SpamAssassin is that email will still be in the spam quarantine, and accessible to the mailbox owner, even if the domain owner has a DMARC policy of reject, requiring that any non-compliant (spoofed/phishing) emails be deleted upon receipt. Plus, I am not aware of a capability in SpamAssassin or its plug-ins to send DMARC aggregate reports back to domain owners so they can monitor the effectiveness of their email security policies. As you know, the feedback loop that DMARC provides is really valuable to domain owners.

I understand the viewpoint of the convenience for a mailbox owner to see emails that failed DMARC tests in their spam folder, but DMARC should be viewed as something entirely different than spam filtering done based on email content or an RBL. In this case, DMARC shifts the responsibility for email deliverability to the domain owner, not the recipient's email admin. This means that it becomes the domain owner's responsibility to ensure they have SPF, DKIM, and DMARC correct, and are using responsible email sending policies. It can also be a practical means to educate recipients that did not receive an expected email from a sender, due to DMARC tests failing, that they need to put pressure on the email sender to fix their broken implementation.

Statistics: Posted by rleiker — Wed Jan 18, 2023 12:42 am

Administrators • Re: DMARC alignment in Zimbra 8.8.15

2023-01-17T23:52:07

mabi wrote:
It is unfortunately sad to hear that we will have to wait Zimbra 10 to see this integrated into Zimbra, if at all...

I think you will be pleasantly surprised. Zimbra 10 is a renewed focus on all things security and the current leadership at Zimbra recognizes how important this is for the product's road map. I have seen OpenDMARC included on a slide deck for Zimbra 10 shared with Zimbra partners as a planned feature. I will certainly keep pushing for it too with the right people at Zimbra.

mabi wrote:
Thank you also for your high quality webinars/videos/presentations, you really understand today's challenges in fighting such mails and the technologies/standards behind it.

You are welcome and the webinar series on email security was all about getting that information out there to help the Zimbra community. I am right there in the trenches with you battling many of the same email security problems we all see daily as email admins. It is well worth everyone's effort to not only implement, but understand these email security standards, as they solve a lot of problems.

Statistics: Posted by rleiker — Tue Jan 17, 2023 11:52 pm

Administrators • Re: Error displayin mail queues 1 mta multi environment

2023-01-17T15:19:42

As a start, on all servers as the zimbra Linux user you can execute "zmsshkeygen", and after all servers have finished generating new keys, then run "zmupdateauthkeys" on all servers to get the new keys for all of the servers distributed to all of the other servers.

Zimbra servers do a lot of inter-server communication via passwordless SSH. Never hurts to generate new keys to do so, especially when you see inexplicable behavior like this where the core functionality of both MTAs is otherwise fine as regards delivering mail.

Hope that helps,
Mark

Statistics: Posted by L. Mark Stone — Tue Jan 17, 2023 3:19 pm

Administrators • Unable to access account

2023-01-17T14:30:07

Dears

A user is unable to access his account

Checking logs , i found the following error in mailbox.log

2023-01-17 16:12:23,166 ERROR [qtp2011482127-27018://localhost:8080/service/soap/BatchRequest] account - can't get profile image id : system failure: fetching folder data for mailbox 858

I tried to re-index the account but still the same

Also found below in mailbox.log

2023-01-17 01:10:39,744 INFO [MailboxPurge] [name=username@domain-name;mid=858;] purge - Purging messages.
2023-01-17 01:10:39,749 WARN [MailboxPurge] [name=username@domain-name;mid=858;] purge - Unable to purge mailbox 858

Any solution ?
Version : 8.8.15_P36
Thanks for help

Statistics: Posted by shrf — Tue Jan 17, 2023 2:30 pm

Administrators • Error displayin mail queues 1 mta multi environment

2023-01-17T12:27:19

Hi,

I have a multi server environment, with 2mtas and two mailboxes, since some day ago one on mtas display from web admin mail queue on one mta, but other mta work perfects

When you use refresh buton no mail showed on mail queue view

It is strange because active is hsoed but not deferred.

Any suggestion where is the issue?

Thanks

Statistics: Posted by nirt — Tue Jan 17, 2023 12:27 pm

Zimlets • Re: Looking for an old zimlet

2023-01-17T11:08:01

This Zimlet was removed as by itself it does not do anything, and it needs to be configured by the admin for it to become useful, in the end it is just not providing a good enough protection.

I re-uploaded the sources for your educational purpose here: https://files.zimbra.tech/nextcloud/ind ... doBJX9FKSo

Statistics: Posted by barrydegraaff — Tue Jan 17, 2023 11:08 am

Administrators • How to set User or Mailbox to ReadOnly?

2023-01-17T10:41:02

Hello everyone.

I have to set a lot of users and mailboxes on a Zimbra server to ReadOnly. It could also be done by domain (so whole domain as R/O).
So the users should still be able to read his emails but not delete, move or create new ones.

Would be great, if a mail comes to (from other domain on the same server), send back any message that it can not be answered.

I have found posts about zmmailbox but it only seems to work for shared mailboxes.
Any other ideas?

Greets

Statistics: Posted by Tadls — Tue Jan 17, 2023 10:41 am

Administrators • Re: Mail-backup - different sizes.

2023-01-17T10:15:36

Hello,
I did the backup via 7071 and it looks good already. At least no big differences between 3 exports.

Is it normal that they are not exactly the same size? Actually should be.

Code:

-rw-r----- 1 zimbra zimbra  307683504 Jan 17 10:23 1.uka.tgz
-rw-r----- 1 zimbra zimbra  307683460 Jan 17 10:56 2.uka.tgz
-rw-r----- 1 zimbra zimbra  307683618 Jan 17 11:06 3.uka.tgz

Greets

Statistics: Posted by Tadls — Tue Jan 17, 2023 10:15 am

Spanish • Re: zimbra no envia correos externos

2023-01-16T16:19:02

Hola phoenix

Sólo una pregunta rápida, ¿puedes recibir correo electrónico en tu servidor ZCS?
Si es correcto, puedo recibir correos del exterior de cualquier dirección sin problemas.

Statistics: Posted by bit10 — Mon Jan 16, 2023 4:19 pm

Administrators • Re: DMARC alignment in Zimbra 8.8.15

2023-01-16T15:18:01

Thanks Randy for your perspective; we agree it's much better to reject emails as early in the process as possible, rather than having SpamAssassin be primarily responsible for AS functionality. And including OpenDMARC in the shipping product would be a good thing; Zimbra 10 is scheduled to be released this quarter, so not too long a wait.

I would say however that the existing SpamAssassin tests for DMARC compliance that ship with Zimbra 8.8.15 and 9.0.0 include multiple separate tests, each of whose score depends on the p= value in the sender's DMARC record. With the default scores, an email that fails the SpamAssassin test where p=none in the sender's DMARC record gets a small score added to the email's overall score, whereas the test when p=reject, if failed, adds a much higher score to the email's overall SpamAssassin score.

Since we can easily override the default scores, this means you can create a very high score for the p=reject test to ensure you will never deliver an email that fails this test. (To learn how to create custom scores for existing SpamAssassin tests, please reference the zzsauser.cf file section in my anti-spam blog post here: https://www.missioncriticalemail.com/20 ... ices-2019/)

Leveraging OpenDMARC would be better of course, but we can granularly reject emails presently that fail DMARC no problem.

Best regards to all,
Mark

Statistics: Posted by L. Mark Stone — Mon Jan 16, 2023 3:18 pm

Administrators • Re: 1 user gets smime.p7m while others receive correctly

2023-01-16T14:55:20

What is "NoSpamProxy"?

Statistics: Posted by Klug — Mon Jan 16, 2023 2:55 pm

Administrators • Re: DMARC alignment in Zimbra 8.8.15

2023-01-16T14:15:49

Hi,

Thank you so much for your answer, you understand exactly what I am talking about. I had a quick look at OpenDMARC and this seems the only way to go forward for more precise anti-spam/malware/phishing/etc. It is unfortunately sad to hear that we will have to wait Zimbra 10 to see this integrated into Zimbra, if at all...

Thank you also for your high quality webinars/videos/presentations, you really understand today's challenges in fighting such mails and the technologies/standards behind it.

Best regards,
Mabi

Statistics: Posted by mabi — Mon Jan 16, 2023 2:15 pm