Make sure to substitute with the actual name of your server as it shows in the admin panel and make sure to substitute 192.168.0.124 with the actual ip address of your server.

All I did was:Īt the command prompt, login as root and execute the following commands That may be stop exploitations BUT: now I can't get legitimate email from those untrusted ip addresses.Ĭan anyone from Zimbra address this? It's a pretty serious bug when you can't modify ANY server settings through the admin UI because of this. The only way that I found to stop this is to simply block those IP addresses in the iptables firewall. The 'localnet' trusted network rule may be fine for most installations, but, for my case, there are untrusted boxes on the local network that have already exploited my box and started sending thousands of spam. I tried to change the field from 127.0.0.0/8 192.168.0.64/26Īnd I get the following error: Message: Error! Value for MTA Trusted Networks must contain local subnets: 192.168.0.64/26.Īdditional information about MTA Trusted Networks configuration can be found at Zi - Zimbra :: Wiki It allows any box within that ip range send messages from whomever to whomever) In other words, it is an open relay for any box within the ip address range. This means that for any box within the ip address range of 192.168.0.65 to 192.168.0.125 basically has a free pass to send email to anywhere unchecked. (the actual ip of the box is different and is a public address, I just used 192.168.0.

There is a field called 'MTA Trusted Networks:'. When I log into the admin control panel and click on 'Servers' -> '' and then I click on the 'MTA' Tab, My problem is this: When trying to set the MTA Trusted Networks in the Zimbra Admin Utility to only trust the local box, (not the entire local network) it won't let me do it.

Trusted ips hosts zimbra