Many Zimbra administrators have setup TLS encryption to protect their users’ login credentials and email in transit. But TLS is a complex standard, and often unknowingly misconfigured. Deploying TLS correctly does not require a university degree in cryptography, but rather a working knowledge of some key concepts and awareness of pitfalls to avoid. And, with […]
Tag Archives | zimbra security
Configuring Fail2Ban on Zimbra
This article is a how-to guide on installing Fail2Ban to block attacking hosts using a null route or blackhole routes. This can help mitigate brute force attacks on Zimbra. Especially brute force attacks on SMTP are very common. Prerequisite: Fail2ban has been tested in combination with netfilter-persistent and iptables. If you use ufw or firewalld […]
Zimbra SkillZ: Add an External Email Warning in Zimbra via the Admin Console
Hello Zimbra Customers, Partners & Friends, New with 9.0.0 Patch 25, you can add an external email warning in Zimbra using the Admin Console. An external email warning message alerts you when you receive email from an external domain. This is done using a Sieve filter, and it can be enabled per account, COS, domain […]
Traffic Light Protocol (TLP) Zimlet
The Traffic Light Protocol (TLP) Zimlet adds a menu to Zimbra that allows the use of First.org Traffic Light Protocol (TLP) confidentiality designations. By using TLP you can set a confidentiality designation on an email similar to the functionality offered by the Confidential Header Zimlet. Benefits of the TLP approach is that it works on […]
Implementing Custom Authentication using a Zimbra extension (updated)
By Barry de Graaff on June 15, 2022 in Community, Open Source, Security & Privacy, Zimbra SkillZ, Zimlets
In this article you will learn how to implement Custom Authentication using a Zimbra extension. The Java project and source code can be found at https://github.com/Zimbra/zimbra-custom-authentication. Take a look at https://github.com/Zimbra/zm-extension-guide if you are new to Java or building Zimbra extensions. The zm-extension-guide covers all the things needed to build the Custom Authentication extension. Zimbra […]
Zimbra Email Security Webinar Series: DNSSEC (updated)
Hello Zimbra Customers, Partners & Friends, Zimbra’s Barry de Graaff and Randy Leiker from Skyway Networks team up for a webinar series focused on Email Security. These hands-on webinars will include practical how-to information and best practices to help you maximize Zimbra security. In this fourth episode of the Zimbra Email Security Webinar Series, join […]