[SOLVED] zimbra access to 98.136.92.79

[myakove]

on wireshark i see that zimbra access every several second to 98.136.92.79.
look at the attached file.

what is this?

thanks

[phoenix]

Your attachment is unreadable. Is this Zimbra Desktop or Zimbra Collaboration Suite?

[myakove]

Originally Posted by phoenix

Your attachment is unreadable. Is this Zimbra Desktop or Zimbra Collaboration Suite?

i fix the attach.
i'm running Zimbra Collaboration Suite open source.

[bdial]

did you google that ip by chance? if you did you probably would notice that the first result mentions it's a yahoo RBL used for antispam

[myakove]

yes i can see that but i don't use Zimbra as antispam.
so way my zimbra access this address?

Thanks

[Rich Graves]

You have zimbra configured to syslog to a zimbra or yahoo host. Since 98.136.92.79 goes by many names, you'll need to sniff udp port 53 to find what question gets that answer.

Look at your /etc/syslog.conf and the output of "zmlocalconfig snmp_trap_host"

For the group: If you don't have logger installed, where is the logger location configured?

[myakove]

thanks for your help, i think i found the problem.
how do i change or disable the snmp_trap_host?

Thanks

[myakove]

Originally Posted by myakove

thanks for your help, i think i found the problem.
how do i change or disable the snmp_trap_host?

Thanks

i manage to change it, lets see if its solve the problem

thanks again