Zimbra loves Nextcloud! And that is why Zimbra and Nextcloud work together to make both products integrate seamlessly. The Nextcloud Talk Zimlet add a button in the new appointment window that allows you to create a Nextcloud Talk meeting from the Zimbra Calendar. Screenshots Installing This Zimlet depends on the installation of Nextcloud Zimlet for […]
Author Archive | Barry de Graaff
Authentication Bypass in MailboxImportServlet vulnerability
Zimbra 8.8.15 patch 33 and Zimbra 9.0.0 patch 26 contain an important security update that fixes an authentication bypass in MailboxImportServlet (CVE-2022-37042 and CVE-2022-27925). If you are running a Zimbra version that is older than Zimbra 8.8.15 patch 33 or Zimbra 9.0.0 patch 26 you should update to the latest patch as soon as possible. […]
Zimbra with Let’s Encrypt Certificates a step-by-step guide (update)
By Barry de Graaff on August 10, 2022 in Community, Security & Privacy, Zimbra Server, Zimbra SkillZ
This article is a step-by-step instruction on setting up a Zimbra with Let’s Encrypt certificates. If you are running a multi server installation of Zimbra it is recommended you set-up a dedicated VM for obtaining the Let’s Encrypt certificate and follow this blog. Prerequisites This guide assumes you are using Ubuntu 20 and you have […]
Deprecation of the “X-XSS-Protection” header
Hello Zimbra Customers, Partners & Friends, In the past Zimbra recommended to set the X-XSS-Protection HTTP response header. This header used to enable additional protection against cross-site scripting (XSS) attacks in some web browsers. However this header is now deprecated and support is removed from most browsers. In case you have configured Zimbra to use […]
Automated installation of Zimbra and Lets Encrypt update!
Previously we introduced the zinstaller script that can be used for automating the installation of Zimbra. The zinstaller script will install a Zimbra 9 single server on Ubuntu 20 and will also obtain and install a 60-day trial license. It now also supports automated installation of Zimbra with Let’s Encrypt certificates and it will take […]
Zimbra SkillZ: Add an External Email Warning in Zimbra via the Admin Console
Hello Zimbra Customers, Partners & Friends, New with 9.0.0 Patch 25, you can add an external email warning in Zimbra using the Admin Console. An external email warning message alerts you when you receive email from an external domain. This is done using a Sieve filter, and it can be enabled per account, COS, domain […]