Page 2 of 2 FirstFirst 12
Results 11 to 15 of 15

Thread: Trying to track down spammer using my Zimbra server

  1. #11
    omegainstitute is offline Senior Member
    Join Date
    May 2007
    Location
    Rhinebeck, NY
    Posts
    62
    Rep Power
    8

    Default

    Thank you Quanah. I think I found the culprit and have things re-locked down for now. Going along the lines of LDAP locking down, it's safe to block outside access to port 389 then? That'll prevent further harvesting I presume.

    Again, thank you for your assistance.. You've been more than helpful!

    - Rob

  2. #12
    quanah is offline Zimbra Employee
    Join Date
    May 2007
    Location
    Zimbra
    Posts
    1,285
    Rep Power
    10

    Default

    Hi Rob,

    That is correct, you can lock down 389 to outside access. Glad to have been of help!

    Regards,
    Quanah
    Quanah Gibson-Mount
    Server Architect
    Zimbra, Inc
    --------------------
    Zimbra :: the leader in open source messaging and collaboration

  3. #13
    omegainstitute is offline Senior Member
    Join Date
    May 2007
    Location
    Rhinebeck, NY
    Posts
    62
    Rep Power
    8

    Default

    I thought I had it.. Turns out the account I thought was compromised, wasn't and just the fact that recently there has been a lot of activity (legit) involving said account. Trying to figure out what my next steps will be. I've activated cbpolicyd and upgraded my server to 7.2.4. Now to see what I can do next to figure out how to tighten up this stuff even further. I'm roughly at a 36% block rate right now, and I need to get that # up significantly (36% rejected via daily report information).

  4. #14
    hugolf is offline New Member
    Join Date
    Mar 2013
    Posts
    3
    Rep Power
    2

    Default Zimbra allowing abuse spammer via webmail...

    I am also suffering from the same problem, in my understanding it seems that the spammer is detected
    and taking advantage of any weakness or bug zimbra, because even without being able to authenticate,
    it makes the sending of emails.

    The catch is that it does not use SMTP for sending, but he got an automatic way, using soap or something,
    to manipulate the messages through webmail, creating new messages and sending via webmail, then move
    the message to trash (in my case). I know that it appears in the log mailbox.log very clearly.

    I checked too and my server is not open relay, and the log maillog, appears as the sender localhost (connect
    from localhost.localdomain [127.0.0.1]).

    Below is my mailbox.log pieces. Part of the more detailed log and without many cuts is attached hereto,
    please look at the attachment, the text below is for example only. For those who are helping, the better
    looking the attachment:


    mailbox.log mailbox.log

    Code:
    2013-08-06 02:59:29,809 INFO  [LmtpServer-953] [name=lucas.queiroz@navesa.com.br;mid=1680;ip=192.168.1.150;] mailop - Adding Message: id=41833, Message-ID=<20130806055929.882D4615273@mail.navesa.com.br>, parentId=41779, folderId=2, folderName=Inbox.
    2013-08-06 02:59:33,188 WARN  [btpool0-830://localhost:8080/service/soap/SendMsgRequest] [name=lucas.queiroz@navesa.com.br;mid=1680;ip=41.203.67.51;ua=zclient/7.1.4_GA_2555;] smtp - Failed to send message
    2013-08-06 02:59:33,190 INFO  [btpool0-830://localhost:8080/service/soap/SendMsgRequest] [name=lucas.queiroz@navesa.com.br;mid=1680;ip=41.203.67.51;ua=zclient/7.1.4_GA_2555;] mailop - Deleting Message (id=41832).
    2013-08-06 02:59:33,203 INFO  [btpool0-830://localhost:8080/service/soap/SendMsgRequest] [name=lucas.queiroz@navesa.com.br;mid=1680;ip=41.203.67.51;ua=zclient/7.1.4_GA_2555;] SoapEngine - handler exception
    2013-08-06 02:59:39,776 INFO  [btpool0-829://localhost:8080/service/soap/AutoCompleteRequest] [name=lucas.queiroz@navesa.com.br;mid=1680;ip=41.203.67.51;ua=zclient/7.1.4_GA_2555;] soap - AutoCompleteRequest
    2013-08-06 02:59:39,815 INFO  [btpool0-829://localhost:8080/service/soap/AutoCompleteRequest] [name=lucas.queiroz@navesa.com.br;mid=1680;ip=41.203.67.51;ua=zclient/7.1.4_GA_2555;] index - IndexDeferredItems(null, 50350): Deferred count out of sync - found=1 in progress=0 (deferred count=2)
    2013-08-06 02:59:39,827 INFO  [btpool0-829://localhost:8080/service/soap/AutoCompleteRequest] [name=lucas.queiroz@navesa.com.br;mid=1680;ip=41.203.67.51;ua=zclient/7.1.4_GA_2555;] index - Deferred Indexing: submitted 1 items in 14ms (71.43/sec). (0 items failed to index). IndexDeferredCount now at 1 NumNotSubmitted= 0
    2013-08-06 02:59:39,938 INFO  [btpool0-829://localhost:8080/service/soap/AutoCompleteRequest] [name=lucas.queiroz@navesa.com.br;mid=1680;ip=41.203.67.51;ua=zclient/7.1.4_GA_2555;] gal - autocomplete: overall=162ms, ranking=3ms, folder=83ms, gal=76ms
    2013-08-06 02:59:40,310 INFO  [btpool0-829://localhost:8080/service/soap/AutoCompleteRequest] [name=lucas.queiroz@navesa.com.br;mid=1680;ip=41.203.67.51;ua=zclient/7.1.4_GA_2555;] soap - AutoCompleteRequest
    2013-08-06 02:59:40,389 INFO  [btpool0-829://localhost:8080/service/soap/AutoCompleteRequest] [name=lucas.queiroz@navesa.com.br;mid=1680;ip=41.203.67.51;ua=zclient/7.1.4_GA_2555;] gal - autocomplete: overall=79ms, ranking=2ms, folder=2ms, gal=75ms
    2013-08-06 02:59:44,728 INFO  [btpool0-823://localhost:8080/service/soap/SendMsgRequest] [name=lucas.queiroz@navesa.com.br;mid=1680;ip=41.203.67.51;ua=zclient/7.1.4_GA_2555;] soap - SendMsgRequest
    2013-08-06 02:59:44,751 INFO  [btpool0-823://localhost:8080/service/soap/SendMsgRequest] [name=lucas.queiroz@navesa.com.br;mid=1680;ip=41.203.67.51;ua=zclient/7.1.4_GA_2555;] mailop - Adding Message: id=41834, Message-ID=<1556584983.408151.1375768784737.JavaMail.root@mail.navesa.com.br>, parentId=-1, folderId=5, folderName=Sent.
    2013-08-06 02:59:44,760 INFO  [btpool0-823://localhost:8080/service/soap/SendMsgRequest] [name=lucas.queiroz@navesa.com.br;mid=1680;ip=41.203.67.51;ua=zclient/7.1.4_GA_2555;] smtp - Sending message to MTA at mail.navesa.com.br: Message-ID=<1556584983.408151.1375768784737.JavaMail.root@mail.navesa.com.br>, replyType=r
    2013-08-06 02:59:45,550 INFO  [LmtpServer-953] [name=lucas.queiroz@navesa.com.br;mid=1680;ip=192.168.1.150;] mailop - Adding Message: id=41835, Message-ID=<f6edba7e-ebb6-483f-afcb-db0b07851d98@brest-metropole-oceane.fr>, parentId=24877, folderId=2, folderName=Inbox.
    2013-08-06 02:59:46,869 WARN  [btpool0-823://localhost:8080/service/soap/SendMsgRequest] [name=lucas.queiroz@navesa.com.br;mid=1680;ip=41.203.67.51;ua=zclient/7.1.4_GA_2555;] smtp - Failed to send message
    2013-08-06 02:59:46,871 INFO  [btpool0-823://localhost:8080/service/soap/SendMsgRequest] [name=lucas.queiroz@navesa.com.br;mid=1680;ip=41.203.67.51;ua=zclient/7.1.4_GA_2555;] mailop - Deleting Message (id=41834).
    2013-08-06 02:59:46,878 INFO  [btpool0-823://localhost:8080/service/soap/SendMsgRequest] [name=lucas.queiroz@navesa.com.br;mid=1680;ip=41.203.67.51;ua=zclient/7.1.4_GA_2555;] SoapEngine - handler exception
    2013-08-06 02:59:46,887 INFO  [btpool0-823://localhost:8080/service/soap/AutoCompleteRequest] [name=lucas.queiroz@navesa.com.br;mid=1680;ip=41.203.67.51;ua=zclient/7.1.4_GA_2555;] soap - AutoCompleteRequest
    2013-08-06 02:59:46,919 INFO  [btpool0-823://localhost:8080/service/soap/AutoCompleteRequest] [name=lucas.queiroz@navesa.com.br;mid=1680;ip=41.203.67.51;ua=zclient/7.1.4_GA_2555;] index - IndexDeferredItems(null, 50353): Deferred count out of sync - found=1 in progress=0 (deferred count=2)
    2013-08-06 02:59:46,933 INFO  [btpool0-823://localhost:8080/service/soap/AutoCompleteRequest] [name=lucas.queiroz@navesa.com.br;mid=1680;ip=41.203.67.51;ua=zclient/7.1.4_GA_2555;] index - Deferred Indexing: submitted 1 items in 16ms (62.50/sec). (0 items failed to index). IndexDeferredCount now at 1 NumNotSubmitted= 0
    2013-08-06 02:59:47,029 INFO  [btpool0-823://localhost:8080/service/soap/AutoCompleteRequest] [name=lucas.queiroz@navesa.com.br;mid=1680;ip=41.203.67.51;ua=zclient/7.1.4_GA_2555;] gal - autocomplete: overall=142ms, ranking=5ms, folder=67ms, gal=70ms
    2013-08-06 03:00:55,841 INFO  [LmtpServer-953] [name=lucas.queiroz@navesa.com.br;mid=1680;ip=192.168.1.150;] mailop - Adding Message: id=41917, Message-ID=<20130806060054.F2AAF611448@mail.navesa.com.br>, parentId=41779, folderId=2, folderName=Inbox.
    2013-08-06 03:00:55,852 INFO  [LmtpServer-944] [name=lucas.queiroz@navesa.com.br;mid=1680;ip=192.168.1.150;] mailop - Adding Message: id=41918, Message-ID=<20130806060055.734D761399E@mail.navesa.com.br>, parentId=41779, folderId=2, folderName=Inbox.
    2013-08-06 03:00:57,051 INFO  [btpool0-832://localhost:8080/service/soap/SaveDraftRequest] [name=lucas.queiroz@navesa.com.br;mid=1680;ip=41.203.67.51;ua=zclient/7.1.4_GA_2555;] soap - SaveDraftRequest
    2013-08-06 03:00:57,065 INFO  [btpool0-832://localhost:8080/service/soap/SaveDraftRequest] [name=lucas.queiroz@navesa.com.br;mid=1680;ip=41.203.67.51;ua=zclient/7.1.4_GA_2555;] mailop - Adding Message: id=41919, Message-ID=<321378506.408627.1375768857058.JavaMail.root@mail.navesa.com.br>, parentId=-1, folderId=6, folderName=Drafts.
    2013-08-06 03:00:57,500 INFO  [LmtpServer-944] [name=lucas.queiroz@navesa.com.br;mid=1680;ip=192.168.1.150;] mailop - Adding Message: id=41920, Message-ID=<k38dWMJ6900000672@BAY0-MC1-F37.Bay0.hotmail.com>, parentId=41802, folderId=2, folderName=Inbox.
    2013-08-06 03:00:57,510 INFO  [LmtpServer-948] [name=lucas.queiroz@navesa.com.br;mid=1680;ip=192.168.1.150;] mailop - Adding Message: id=41921, Message-ID=<20130806060057.1B66E60F8E7@mail.navesa.com.br>, parentId=41779, folderId=2, folderName=Inbox.
    2013-08-06 03:00:57,897 INFO  [LmtpServer-948] [name=lucas.queiroz@navesa.com.br;mid=1680;ip=192.168.1.150;] mailop - Adding Message: id=41922, Message-ID=<20130806060046.B046360B80C@mail.navesa.com.br>, parentId=29049, folderId=2, folderName=Inbox.
    2013-08-06 03:00:57,986 INFO  [LmtpServer-944] [name=lucas.queiroz@navesa.com.br;mid=1680;ip=192.168.1.150;] mailop - Adding Message: id=41923, Message-ID=<20130806060057.CC28960B80C@mail.navesa.com.br>, parentId=41779, folderId=2, folderName=Inbox.
    2013-08-06 03:00:59,740 INFO  [btpool0-832://localhost:8080/service/soap/SendMsgRequest] [name=lucas.queiroz@navesa.com.br;mid=1680;ip=41.203.67.51;ua=zclient/7.1.4_GA_2555;] soap - SendMsgRequest
    2013-08-06 03:01:01,117 INFO  [LmtpServer-953] [name=lucas.queiroz@navesa.com.br;mid=1680;ip=192.168.1.150;] mailop - Adding Message: id=41924, Message-ID=<18782194.161.1375768889969.JavaMail.root@cci-martinique.mailinblack.com>, parentId=-1, folderId=2, folderName=Inbox.
    2013-08-06 03:01:01,199 INFO  [LmtpServer-944] [name=lucas.queiroz@navesa.com.br;mid=1680;ip=192.168.1.150;] mailop - Adding Message: id=41925, Message-ID=<9c596a44-3ec7-43fc-825d-c70b0e04ddca@groupe-crit.emea.microsoftonline.com>, parentId=35071, folderId=2, folderName=Inbox.
    2013-08-06 03:01:01,344 INFO  [btpool0-832://localhost:8080/service/soap/AutoCompleteRequest] [name=lucas.queiroz@navesa.com.br;mid=1680;ip=41.203.67.51;ua=zclient/7.1.4_GA_2555;] soap - AutoCompleteRequest
    2013-08-06 03:01:01,366 WARN  [btpool0-832://localhost:8080/service/soap/AutoCompleteRequest] [name=lucas.queiroz@navesa.com.br;mid=1680;ip=41.203.67.51;ua=zclient/7.1.4_GA_2555;] index - Unable to index: bcc:acelger@netscape.net
    2013-08-06 03:01:01,366 WARN  [btpool0-832://localhost:8080/service/soap/AutoCompleteRequest] [name=lucas.queiroz@navesa.com.br;mid=1680;ip=41.203.67.51;ua=zclient/7.1.4_GA_2555;] index - Unable to index: bcc:alaininvc@netscape.net
    2013-08-06 03:01:01,366 WARN  [btpool0-832://localhost:8080/service/soap/AutoCompleteRequest] [name=lucas.queiroz@navesa.com.br;mid=1680;ip=41.203.67.51;ua=zclient/7.1.4_GA_2555;] index - Unable to index: bcc:alan33fra@netscape.net
    2013-08-06 03:01:01,366 WARN  [btpool0-832://localhost:8080/service/soap/AutoCompleteRequest] [name=lucas.queiroz@navesa.com.br;mid=1680;ip=41.203.67.51;ua=zclient/7.1.4_GA_2555;] index - Unable to index: bcc:alendrickelf@netscape.net
    2013-08-06 03:01:01,366 WARN  [btpool0-832://localhost:8080/service/soap/AutoCompleteRequest] [name=lucas.queiroz@navesa.com.br;mid=1680;ip=41.203.67.51;ua=zclient/7.1.4_GA_2555;] index - Unable to index: bcc:alex16600@netscape.net
    2013-08-06 03:01:01,371 WARN  [btpool0-832://localhost:8080/service/soap/AutoCompleteRequest] [name=lucas.queiroz@navesa.com.br;mid=1680;ip=41.203.67.51;ua=zclient/7.1.4_GA_2555;] index - Unable to index: subject:_blank_
    2013-08-06 03:01:01,371 WARN  [btpool0-832://localhost:8080/service/soap/AutoCompleteRequest] [name=lucas.queiroz@navesa.com.br;mid=1680;ip=41.203.67.51;ua=zclient/7.1.4_GA_2555;] index - Unable to index: mime-version:1.0
    2013-08-06 03:01:01,371 WARN  [btpool0-832://localhost:8080/service/soap/AutoCompleteRequest] [name=lucas.queiroz@navesa.com.br;mid=1680;ip=41.203.67.51;ua=zclient/7.1.4_GA_2555;] index - Unable to index: content-type:multipart/alterna
    2013-08-06 03:01:01,371 WARN  [btpool0-832://localhost:8080/service/soap/AutoCompleteRequest] [name=lucas.queiroz@navesa.com.br;mid=1680;ip=41.203.67.51;ua=zclient/7.1.4_GA_2555;] index - Unable to index: content-type:boundary=
    2013-08-06 03:01:01,371 WARN  [btpool0-832://localhost:8080/service/soap/AutoCompleteRequest] [name=lucas.queiroz@navesa.com.br;mid=1680;ip=41.203.67.51;ua=zclient/7.1.4_GA_2555;] index - Unable to index: content-type:-
    2013-08-06 03:01:01,371 WARN  [btpool0-832://localhost:8080/service/soap/AutoCompleteRequest] [name=lucas.queiroz@navesa.com.br;mid=1680;ip=41.203.67.51;ua=zclient/7.1.4_GA_2555;] index - Unable to index: content-type:-
    2013-08-06 03:01:01,371 WARN  [btpool0-832://localhost:8080/service/soap/AutoCompleteRequest] [name=lucas.queiroz@navesa.com.br;mid=1680;ip=41.203.67.51;ua=zclient/7.1.4_GA_2555;] index - Unable to index: content-type:=_part_408626_125
    2013-08-06 03:01:01,380 INFO  [LmtpServer-948] [name=lucas.queiroz@navesa.com.br;mid=1680;ip=192.168.1.150;] mailop - Adding Message: id=41926, Message-ID=<20130806060123.9C7C71A862@smtp7alinto.alinto.net>, parentId=-1, folderId=2, folderName=Inbox.
    2013-08-06 03:01:01,422 WARN  [btpool0-832://localhost:8080/service/soap/AutoCompleteRequest] [name=lucas.queiroz@navesa.com.br;mid=1680;ip=41.203.67.51;ua=zclient/7.1.4_GA_2555;] index - Unable to index: x-bigfish:zzdd29hc89bhc85fhdbe
    2013-08-06 03:01:01,447 INFO  [btpool0-832://localhost:8080/service/soap/AutoCompleteRequest] [name=lucas.queiroz@navesa.com.br;mid=1680;ip=41.203.67.51;ua=zclient/7.1.4_GA_2555;] index - Deferred Indexing: submitted 9 items in 99ms (90.91/sec). (0 items failed to index). IndexDeferredCount now at 10 NumNotSubmitted= 1
    2013-08-06 03:01:01,572 INFO  [btpool0-832://localhost:8080/service/soap/AutoCompleteRequest] [name=lucas.queiroz@navesa.com.br;mid=1680;ip=41.203.67.51;ua=zclient/7.1.4_GA_2555;] gal - autocomplete: overall=228ms, ranking=3ms, folder=151ms, gal=74ms
    2013-08-06 03:01:02,592 INFO  [LmtpServer-953] [name=lucas.queiroz@navesa.com.br;mid=1680;ip=192.168.1.150;] mailop - Adding Message: id=41932, Message-ID=<OF378A9176.699159A6-ONC1257BBF.00211614-C1257BBF.0021183A@groupetg.com>, parentId=-1, folderId=2, folderName=Inbox.
    2013-08-06 03:01:03,640 INFO  [LmtpServer-953] [name=lucas.queiroz@navesa.com.br;mid=1680;ip=192.168.1.150;] mailop - Adding Message: id=41933, Message-ID=<20130806060103.8BCB360F4D9@mail.navesa.com.br>, parentId=41928, folderId=2, folderName=Inbox.
    2013-08-06 03:01:04,018 INFO  [LmtpServer-953] [name=lucas.queiroz@navesa.com.br;mid=1680;ip=192.168.1.150;] mailop - Adding Message: id=41934, Message-ID=<20130806060103.BF5FE608840@mail.navesa.com.br>, parentId=41928, folderId=2, folderName=Inbox.
    2013-08-06 03:01:04,525 INFO  [LmtpServer-953] [name=lucas.queiroz@navesa.com.br;mid=1680;ip=192.168.1.150;] mailop - Adding Message: id=41935, Message-ID=<20130806060104.4A1F2604A54@mail.navesa.com.br>, parentId=41928, folderId=2, folderName=Inbox.
    2013-08-06 03:01:05,412 INFO  [btpool0-832://localhost:8080/service/soap/SendMsgRequest] [name=lucas.queiroz@navesa.com.br;mid=1680;ip=41.203.67.51;ua=zclient/7.1.4_GA_2555;] soap - SendMsgRequest
    2013-08-06 03:01:05,435 INFO  [btpool0-832://localhost:8080/service/soap/SendMsgRequest] [name=lucas.queiroz@navesa.com.br;mid=1680;ip=41.203.67.51;ua=zclient/7.1.4_GA_2555;] mailop - Adding Message: id=41936, Message-ID=<1771680391.408695.1375768865417.JavaMail.root@mail.navesa.com.br>, parentId=-1, folderId=5, folderName=Sent.
    2013-08-06 03:01:05,448 INFO  [btpool0-832://localhost:8080/service/soap/SendMsgRequest] [name=lucas.queiroz@navesa.com.br;mid=1680;ip=41.203.67.51;ua=zclient/7.1.4_GA_2555;] smtp - Sending message to MTA at mail.navesa.com.br: Message-ID=<1771680391.408695.1375768865417.JavaMail.root@mail.navesa.com.br>, replyType=r
    2013-08-06 03:01:06,312 INFO  [LmtpServer-953] [name=lucas.queiroz@navesa.com.br;mid=1680;ip=192.168.1.150;] mailop - Adding Message: id=41937, Message-ID=<20130806060106.3BCEE60F4D9@mail.navesa.com.br>, parentId=41928, folderId=2, folderName=Inbox.
    2013-08-06 03:01:06,765 INFO  [LmtpServer-953] [name=lucas.queiroz@navesa.com.br;mid=1680;ip=192.168.1.150;] mailop - Adding Message: id=41938, Message-ID=<20130806060106.ABD6F60F648@mail.navesa.com.br>, parentId=41928, folderId=2, folderName=Inbox.
    2013-08-06 03:01:09,183 INFO  [LmtpServer-953] [name=lucas.queiroz@navesa.com.br;mid=1680;ip=192.168.1.150;] mailop - Adding Message: id=41939, Message-ID=<20130806060109.1E6D560F648@mail.navesa.com.br>, parentId=41928, folderId=2, folderName=Inbox.
    2013-08-06 03:01:09,240 INFO  [LmtpServer-956] [name=lucas.queiroz@navesa.com.br;mid=1680;ip=192.168.1.150;] mailop - Adding Message: id=41940, Message-ID=<20130806060109.2C6AB60F6DB@mail.navesa.com.br>, parentId=41928, folderId=2, folderName=Inbox.
    2013-08-06 03:01:09,970 INFO  [LmtpServer-956] [name=lucas.queiroz@navesa.com.br;mid=1680;ip=192.168.1.150;] mailop - Adding Message: id=41941, Message-ID=<09a15eef-4cd7-4488-b96d-cb206a0608aa@marseille.archi.fr>, parentId=35071, folderId=2, folderName=Inbox.
    2013-08-06 03:01:12,704 INFO  [btpool0-823://localhost:8080/service/soap/AutoCompleteRequest] [name=lucas.queiroz@navesa.com.br;mid=1680;ip=41.203.67.51;ua=zclient/7.1.4_GA_2555;] index - Deferred Indexing: submitted 16 items in 124ms (129.03/sec). (0 items failed to index). IndexDeferredCount now at 16 NumNotSubmitted= 0
    2013-08-06 03:01:12,825 INFO  [btpool0-823://localhost:8080/service/soap/AutoCompleteRequest] [name=lucas.queiroz@navesa.com.br;mid=1680;ip=41.203.67.51;ua=zclient/7.1.4_GA_2555;] gal - autocomplete: overall=249ms, ranking=3ms, folder=175ms, gal=71ms
    2013-08-06 03:07:35,102 INFO  [btpool0-829://localhost:8080/service/soap/MsgActionRequest] [name=lucas.queiroz@navesa.com.br;mid=1680;ip=41.203.67.51;ua=zclient/7.1.4_GA_2555;] soap - MsgActionRequest
    2013-08-06 03:07:35,104 INFO  [btpool0-829://localhost:8080/service/soap/MsgActionRequest] [name=lucas.queiroz@navesa.com.br;mid=1680;ip=41.203.67.51;ua=zclient/7.1.4_GA_2555;] mailop - moving Message (id=42232) to Folder Trash (id=3)
    2013-08-06 03:07:35,105 INFO  [btpool0-829://localhost:8080/service/soap/MsgActionRequest] [name=lucas.queiroz@navesa.com.br;mid=1680;ip=41.203.67.51;ua=zclient/7.1.4_GA_2555;] mailop - moving Message (id=42231) to Folder Trash (id=3)
    2013-08-06 03:07:35,106 INFO  [btpool0-829://localhost:8080/service/soap/MsgActionRequest] [name=lucas.queiroz@navesa.com.br;mid=1680;ip=41.203.67.51;ua=zclient/7.1.4_GA_2555;] mailop - moving Message (id=42230) to Folder Trash (id=3)
    2013-08-06 03:07:35,107 INFO  [btpool0-829://localhost:8080/service/soap/MsgActionRequest] [name=lucas.queiroz@navesa.com.br;mid=1680;ip=41.203.67.51;ua=zclient/7.1.4_GA_2555;] mailop - moving Message (id=42228) to Folder Trash (id=3)
    2013-08-06 03:07:35,108 INFO  [btpool0-829://localhost:8080/service/soap/MsgActionRequest] [name=lucas.queiroz@navesa.com.br;mid=1680;ip=41.203.67.51;ua=zclient/7.1.4_GA_2555;] mailop - moving Message (id=42227) to Folder Trash (id=3)
    2013-08-06 03:07:35,110 INFO  [btpool0-829://localhost:8080/service/soap/MsgActionRequest] [name=lucas.queiroz@navesa.com.br;mid=1680;ip=41.203.67.51;ua=zclient/7.1.4_GA_2555;] mailop - moving Message (id=42226) to Folder Trash (id=3)
    Last edited by hugolf; 08-07-2013 at 04:55 AM. Reason: better visualization

  5. #15
    omegainstitute is offline Senior Member
    Join Date
    May 2007
    Location
    Rhinebeck, NY
    Posts
    62
    Rep Power
    8

    Default

    Doesn't the user need to be authenticated with the machine in order to send SOAP commands to it?

    What port does SOAP use for an outside connection? Is it piggy-backed in with regular HTTP requests? I wonder if there's a way to block injecting SOAP from the firewall standpont.

Page 2 of 2 FirstFirst 12

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Similar Threads

  1. Zimbra is a SPAMMER again
    By warcries in forum Administrators
    Replies: 1
    Last Post: 09-06-2011, 02:43 AM
  2. Zimbra is a SPAMMER
    By warcries in forum Administrators
    Replies: 2
    Last Post: 07-19-2011, 12:03 AM
  3. mailbox log -indicate ip spammer how to
    By alherman in forum Administrators
    Replies: 6
    Last Post: 06-23-2010, 12:07 AM
  4. Blacklisting spammer IP
    By apnatek in forum Administrators
    Replies: 2
    Last Post: 08-08-2007, 05:47 PM
  5. I'm a spammer ????
    By rmvg in forum Users
    Replies: 4
    Last Post: 03-31-2006, 10:12 AM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •