Conficker.c in Zimbra ???

[arto]

Hi.

In our bussiness we have a ubuntu 8.04 server with zimbra 5.

We have a problem with few adress. When i send a message to this address the zimbra mail queue send me an error 451 with my ip "seems to be infected with conficker.c".

I don't understand. Conficker only works in windows!!!. And my ip is not listed in any blocked list. The realy server is blocked and my network seems cleaned.

What happends? What can i do?

Thanks from Barcelona.

[phoenix]

You should update your forum profile with the output of the following command (do not post the output in this thread):

zmcontrol -v

Originally Posted by arto

Hi.

In our bussiness we have a ubuntu 8.04 server with zimbra 5.

We have a problem with few adress. When i send a message to this address the zimbra mail queue send me an error 451 with my ip "seems to be infected with conficker.c".

I don't understand. Conficker only works in windows!!!. And my ip is not listed in any blocked list. The realy server is blocked and my network seems cleaned.

What happends? What can i do?

You should post the log file entries (so we can see what's happening) not just the single out-of-context line.

[arto]

Hi. The zimbra version is

Release 5.0.10_GA_2638.UBUNTU8 UBUNTU8 FOSS edition

And the log error said:

Jul 1 12:37:24 correu postfix/smtp[23028]: E2AEF39EC02C: to=<cuinestm@cuinestm.com>, relay=mail.cuinestm.com[86.109.162.54]:25, delay=2245, delays=2245/0/0.52/0.03, dsn=4.0.0, status=deferred (host mail.cuinestm.com[86.109.162.54] said: 451 213.151.104.74 Seems to be infected with Conficker.C (in reply to RCPT TO command))

[phoenix]

Originally Posted by arto

Release 5.0.10_GA_2638.UBUNTU8 UBUNTU8 FOSS edition

It's useless posting that information here, it should go in your forum profile (as I mentioned earlier) so we don't have to keep asking 'which version.....'.

Originally Posted by arto

Jul 1 12:37:24 correu postfix/smtp[23028]: E2AEF39EC02C: to=<cuinestm@cuinestm.com>, relay=mail.cuinestm.com[86.109.162.54]:25, delay=2245, delays=2245/0/0.52/0.03, dsn=4.0.0, status=deferred (host mail.cuinestm.com[86.109.162.54] said: 451 213.151.104.74 Seems to be infected with Conficker.C (in reply to RCPT TO command))

My point about the out-of-context was so you would post more of the log file than just one line. My suggestion would be to contact the mail administrator of that server and ask why they've returned that message - this is not a problem with Zimbra.

[arto]

More help?

[phoenix]

Originally Posted by arto

More help?

I've already answered your question in my previous post.

Originally Posted by phoenix

My suggestion would be to contact the mail administrator of that server and ask why they've returned that message - this is not a problem with Zimbra.

In the post you've deleted there is this line:

For further assistance, please send mail to postmaster.

You need to contact them, your question in this thread is not one we can answer.