Results 1 to 6 of 6

Thread: How to configure Zimbra mail queues to reveal origin IP?

  1. #1
    bhwong is offline Elite Member
    Join Date
    Feb 2009
    Location
    Singapore
    Posts
    499
    Rep Power
    6

    Default How to configure Zimbra mail queues to reveal origin IP?

    We need to find out the IP address of our infected PCs spamming on Zimbra. Unfortunately Zimbra mail queues show the origin IP of every sender as 127.0.0.1, which is just useless information.

    Thanks,
    Boon Hong.

  2. #2
    dalmate is offline Elite Member
    Join Date
    Jan 2009
    Posts
    368
    Rep Power
    6

    Default

    You can see the origin IP of the mail in the log of zimbra.
    Please see in /var/log/zimbra.log.

  3. #3
    bhwong is offline Elite Member
    Join Date
    Feb 2009
    Location
    Singapore
    Posts
    499
    Rep Power
    6

    Default

    I have checked the log and it doesn't show where this indiasemagazine@gmail.com IP is from:

    Aug 18 09:36:29 home amavis[20371]: (20371-13) ESMTP::10024 /opt/zimbra/data/amavisd/tmp/amavis-20100818T045701-20371: <indiasemagazine@gmail.com> -> <xxx@xxx.com.sg> SIZE=5027 BODY=7BIT Received: from mail.example.com ([127.0.0.1]) by localhost (mail.example.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP for <xxx@xxx.com.sg>; Wed, 18 Aug 2010 09:36:29 +0800 (SGT)

  4. #4
    dalmate is offline Elite Member
    Join Date
    Jan 2009
    Posts
    368
    Rep Power
    6

    Default

    No, you must check the log in /var/log/zimbra.log.
    Please with the "postfix/smtpd" and "From" keyword, you will found what you want

  5. #5
    bhwong is offline Elite Member
    Join Date
    Feb 2009
    Location
    Singapore
    Posts
    499
    Rep Power
    6

    Default

    Hi Dalmate,

    The log only show external IP addresses. For internal, it still show 127.0.0.1 which is not helpful for us to identify which PC is infected:

    Aug 19 08:00:59 home postfix/smtpd[27200]: connect from localhost[127.0.0.1]

  6. #6
    bhwong is offline Elite Member
    Join Date
    Feb 2009
    Location
    Singapore
    Posts
    499
    Rep Power
    6

    Default

    I have open an RFE on this, please vote for it at: Bug 50112 &ndash; Origin IP only show 127.0.0.1

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Similar Threads

  1. Replies: 7
    Last Post: 02-03-2011, 07:01 AM
  2. mta to not starting
    By cowanpf in forum Installation
    Replies: 2
    Last Post: 10-05-2009, 04:36 AM
  3. [SOLVED] Moving Zimbra to a new server
    By krolen in forum Administrators
    Replies: 109
    Last Post: 02-05-2009, 11:38 AM
  4. [SOLVED] Mailserver down when send file attach of 50Mb
    By ZMilton in forum Administrators
    Replies: 20
    Last Post: 04-10-2008, 11:44 AM
  5. fresh install down may be due to tomcat
    By gon in forum Installation
    Replies: 10
    Last Post: 07-25-2007, 08:09 AM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •