Zimbra offers Open Source email server software and shared calendar for Linux and the Mac
Go Back   Zimbra :: Forums > Zimbra Collaboration Suite > Administrators

Welcome to the Zimbra :: Forums!
Welcome, if you would like to post a comment please register. We also encourage you to explore all things Zimbra with our team and members of the community.

Reply
 
LinkBack Thread Tools Search this Thread Display Modes
  #1 (permalink)  
Old 06-23-2011, 03:59 AM
Active Member
 
Posts: 29
Default Problem with disabling "Add X-Originating IP to messages"

Hello,
some of our customers connects to Zimbra server over POP3 from Outlook.
When they send message to particular domain messages are rejected with this text:
<xxxx@xxx.xx>: host mail.xxx.xx[xxx.xxx.xxx.xxx] said: 554
Service unavailable; Client host [our zimbra server name] blocked using
Barracuda Reputation;
http://bbl.barracudacentral.com/q.cgi?ip=<public customer IP address> (in reply to end of
DATA command)

I realized that problem is with showing "Originating IP address".
I disabled "Add X-Originating IP to messages" in Admin Console, but problem persist. When I send message from Web Console x-Originating IP is not added, but when I send from Outlook it appears again.

I configured Outlook to submit messages over 465 port with enabled SSL encryption - the same problem.

Please help me solve this problem.
Thank You.
Reply With Quote
  #2 (permalink)  
Old 06-23-2011, 04:15 AM
Zimbra Consultant & Moderator
 
Posts: 20,315
Default

Quote:
Originally Posted by Mindaugas View Post
Hello,
some of our customers connects to Zimbra server over POP3 from Outlook.
When they send message to particular domain messages are rejected with this text:
<xxxx@xxx.xx>: host mail.xxx.xx[xxx.xxx.xxx.xxx] said: 554
Service unavailable; Client host [our zimbra server name] blocked using
Barracuda Reputation;
http://bbl.barracudacentral.com/q.cgi?ip=<public customer IP address> (in reply to end of
DATA command)
Then you should go to the Barracuda site and get yourself removed from the list (or whitelisted).

Quote:
Originally Posted by Mindaugas View Post
I configured Outlook to submit messages over 465 port with enabled SSL encryption - the same problem.
Port 587 (requires authentication) is the correct Submission port.
__________________
Regards


Bill
Reply With Quote
  #3 (permalink)  
Old 06-23-2011, 04:39 AM
Active Member
 
Posts: 29
Default

Quote:
Originally Posted by phoenix View Post
Then you should go to the Barracuda site and get yourself removed from the list (or whitelisted).
Our Zimbra server public IP address is not blacklisted, our customers public IP address is blacklisted which appears as X-Originating IP address.
But anyway I filled tthe removal form.

Quote:
Originally Posted by phoenix View Post
Port 587 (requires authentication) is the correct Submission port.
I've changed to 587 port. The same behavior.

But main question is is it possible to disable adding of "X-Originating IP address" totally?
Reply With Quote
  #4 (permalink)  
Old 07-24-2011, 01:41 PM
Loyal Member
 
Posts: 81
Default

Configuration > Global Settings > MTA > Messages:
[] Add X-Originating IP to messages
Reply With Quote
  #5 (permalink)  
Old 07-24-2011, 10:50 PM
Active Member
 
Posts: 29
Default

Quote:
Originally Posted by jerryboi View Post
Configuration > Global Settings > MTA > Messages:
[] Add X-Originating IP to messages
Yes, this option is unchecked. But this option not working when mail is sent over SMTP (Outlook - POP3).
Reply With Quote
  #6 (permalink)  
Old 10-05-2011, 04:57 PM
Moderator
 
Posts: 1,432
Default

I know I am coming to this late, but the setting in Zimbra only applies to messages sent via ZCO or ZWC. If you have Outlook sending via SMTP, the X-Originating-IP header won't appear anyway. You'll see exactly the same result if your customer uses Thunderbird or any other POP/SMTP client (or IMAP/SMTP).

The real issue here is that the receiving mail server is looking at the Received: headers and deciding to block the mail because a blacklisted ip address appears somewhere in there. This is a pretty bad practice--generally, you only want to block, if at all, based on the final hop before delivery.
__________________
Elliot Wilen
Berkeley, CA

Don't forget to enter your Zimbra version in your forum profile.
Reply With Quote
Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes


Similar Threads

Why Join?

Registering let's you ask questions, makes it easier to search, displays any files attached to posts, and notifies you about replies.

blog.zimbra.com




 

SEO by vBSEO ©2011, Crawlability, Inc.