Category Archives: Zimbra

Optimizing and securing Zimbra Open Source Edition

The next commands are used to optimize and secure my Zimbra Collaboration 8.8 Open Source Edition (executed as user zimbra in the CLI): zmdhparam set -new 3072 zmprov mcf zimbraMtaSmtpTlsMandatoryCiphers high zmprov mcf zimbraMtaSmtpdTlsMandatoryCiphers high zmprov mcf zimbraMtaSmtpdTlsCiphers high zmlocalconfig -e postfix_enable_smtpd_policyd=yes zmprov mcf zimbraMtaEnableSmtpdPolicyd TRUE zmprov mcf +zimbraMtaRestriction “check_policy_service unix:private/policy” zmprov mcf zimbraMtaSmtpTlsSecurityLevel may …

Continue reading “Optimizing and securing Zimbra Open Source Edition”

Backup Zimbra Open Source edition to a NAS with NFS

The most recent open source version of Zimbra Collaboration 8.8 has no official backup module. But with the help of scripting it is still possible to backup a mailbox. The following situation is assumed: Up-to-date Zimbra Collaboration 8.8 A file is available (emailaccounts.txt) containing all email addresses for the backup A NFS server is available …

Continue reading “Backup Zimbra Open Source edition to a NAS with NFS”

openssl pkcs12 export to ‘/opt/zimbra/ssl/zimbra/jetty.pkcs12’ failed(1)

When you encounter the following error: ** Creating file ‘/opt/zimbra/ssl/zimbra/jetty.pkcs12’ERROR: openssl pkcs12 export to ‘/opt/zimbra/ssl/zimbra/jetty.pkcs12’ failed(1):unable to load certificates140665143981720:error:0906D066:PEM routines:PEM_read_bio:bad end line:pem_lib.c:805: Do this (when for example having all the certs temporarily stored in /tmp/): chown zimbra:zimbra /tmp/*.crt chmod 666 /tmp/*.crt Source: https://forums.zimbra.org/viewtopic.php?t=60189

Backup emailaccounts with Zimbra zmmailbox

The following code makes it possible to loop through email addresses saved in the file /home/maarten/emailaccounts.txt. #!/bin/bash for i in $(cat /home/maarten/emailaccounts.txt); do zmmailbox -z -m $i getRestURL “//?fmt=tgz” > /backup/$i.$(date +%d-%m-%Y).tgz done For now the addresses have to be added manually to the file emailaccounts.txt, but with the zmprov command it’s possible to generate …

Continue reading “Backup emailaccounts with Zimbra zmmailbox”

Beveiliging van email in Zimbra met DKIM

Ik ben al een poosje bezig om mijn mailserver betrouwbaarder te maken door SPF-records aan de DNS toe te voegen. Tot nu toe is het nog niet helemaal geslaagd, maar vandaag heb ik wel een andere stap gezet, namelijk met DKIM. Hoe werkt DKIM? DKIM voegt het veld “DKIM-Signature” toe aan de header van een …

Continue reading “Beveiliging van email in Zimbra met DKIM”