After previously preparation for install Zimbra has been finished, we can install Zimbra right now. First, we can download Zimbra Binary from this link http://www.zimbra.com/downloads/zimbra-collaboration-open-source or if you are in Indonesia region, you can download at the following link http://mirror.linux.or.id/zimbra/binary/.
cd /opt/ wget -c https://files.zimbra.com/downloads/8.6.0_GA/zcs-8.6.0_GA_1153.UBUNTU14_64.20141215151116.tgz
After download, extract Zimbra, move into folder result of extract and install Zimbra
tar -zxvf zcs-8.6.0_GA_1153.UBUNTU14_64.20141215151116.tgz cd zcs-8.6.0_GA_1153.UBUNTU14_64.20141215151116 ./install.sh
type Y if asking license agreement
Do you agree with the terms of the software license agreement? [N] Y
Select the packages that will be installed
Install zimbra-ldap [Y] Y Install zimbra-logger [Y] Y Install zimbra-mta [Y] Y Install zimbra-dnscache [Y] N Install zimbra-snmp [Y] Y Install zimbra-store [Y] Y Install zimbra-apache [Y] Y Install zimbra-spell [Y] Y Install zimbra-memcached [Y] Y Install zimbra-proxy [Y] Y
Type Y if asked The system will be modified. Continue?
if you get message like below, press enter or type Yes and change domain name
DNS ERROR resolving MX for mail.imanudin.net It is suggested that the domain name have an MX record configured in DNS Change domain name? [Yes] Yes Create domain: [mail.imanudin.net] imanudin.net
if you not change domain name on above section, your domain name will become mail.imanudin.net and email of account will become user@mail.imanudin.net. Type 6 and then press key enter to change password of admin account. Type again 4 and then press key enter. Insert your password that you want
1) Common Configuration: 2) zimbra-ldap: Enabled 3) zimbra-logger: Enabled 4) zimbra-mta: Enabled 5) zimbra-snmp: Enabled 6) zimbra-store: Enabled +Create Admin User: yes +Admin user to create: admin@imanudin.net ******* +Admin Password UNSET +Anti-virus quarantine user: virus-quarantine.dgnsq8ewc@imanudin.net ...... ...... Address unconfigured (**) items (? - help) 6 Store configuration 1) Status: Enabled 2) Create Admin User: yes 3) Admin user to create: admin@imanudin.net ** 4) Admin Password UNSET 5) Anti-virus quarantine user: virus-quarantine.dgnsq8ewc@imanudin.net ...... ...... Select, or 'r' for previous menu [r] 4 Password for admin@imanudin.net (min 6 characters): [s8eNUeOms] Verys3cr3t
After insert password, Select, or ‘r’ for previous menu. If all has been configured, apply configuration and wait a moment until zimbra finished install
*** CONFIGURATION COMPLETE - press 'a' to apply Select from menu, or press 'a' to apply config (? - help) a Save configuration data to a file? [Yes] Yes Save config in file: [/opt/zimbra/config.24648] Saving config in /opt/zimbra/config.24648...done. The system will be modified - continue? [No] Yes Operations logged to /tmp/zmsetup10052014-214606.log
Type Yes if asked Notify Zimbra of your installation? and if has been appeared Configuration complete – press return to exit, your zimbra installation has been finished. Check Zimbra status with this command su – zimbra -c “zmcontrol status” and make sure all service running well. You can also trying access webmail via browser at url https://ZimbraServer
Congratulations, you have been finished install Zimbra 8.6 on Ubuntu 14.04. After install, you can improve anti spam with some method below :
- https://imanudin.net/2014/09/08/how-to-install-policyd-on-zimbra-8-5/
- https://imanudin.net/2014/09/09/zimbra-tips-how-to-configure-rate-limit-sending-message-on-policyd/
- https://imanudin.net/2014/09/11/improving-anti-spam-reject-unlisted-domain-on-zimbra-8-5/
- https://imanudin.net/2014/09/12/zimbra-tips-how-to-protect-policyd-webui/
- https://imanudin.net/2014/09/29/how-to-restrict-users-sending-to-certain-usersdomains-with-policyd/
- https://imanudin.net/2014/09/30/script-automatic-configure-cbpolicyd-on-zimbra-8-5/
- https://imanudin.net/2014/09/07/how-to-improvement-sender-must-loginenforcing-a-match-between-from-address-and-sasl-username-on-zimbra-8-5/
Good luck and hopefully useful 😀
Hey man, I want to thank you a lot for these kind of guides. You’re really good in explaining what to do and you’ve been of great help in my job. Thanks a lot.
Hi Edoardo Maria Elidoro,
Thanks for visit my blog. Hopefully useful 🙂
Helo Mas Iman,
id’like to ask about zimbra LOG, could it sync with other syslog server, such as Kiwi syslog server?
thanks a lot..
Hi Kahar,
I think that is possible. Even sync/centralized with ELK. Please take a look the example about ELK + Zimbra : https://wiki.zimbra.com/wiki/Centralized_Logs_-_Elasticsearch,_Logstash_and_Kibana
thank you so much mas Iman for the answer,
i have another question mas,,
i have only 1 mail server,
but i have 2 ip public.
and 1 domain
so far, i have the configuration like this :
domain : mail.kahar.com –> ip public A –> mail server
i want to set up fail over,,
if the ip public A is down will automatically switch to ip public B.
what should i do firts mas?
should i set the cpanel on domain the ip public B?
curently ns1.kahar.com using ip public A.
please i really need your advice, master iman..
i thank you very very much…
regards,
Hi Kahar,
You can use 2 ip public refer into single name (mail.kahar.com). Please configure in public dns (cPanel, sPanel or something else)
Hi,
i install zcs server with zimbra-proxy. My problem is this thing: When i try to log zimbra from internet i must use url https://domainorip:8443. How to change it to https://domainorip?
Hello Kamall,
Please try to configure PublicServiceHostname. Login to Zimbra Admin | Configure | Domains | Edit Domain | PublicServiceHostname. Insert URL access to your Zimbra. Example : mail.imanudin.net
Hi, Iman
thanks for your reply but that way don`t work for me. I had the name of PublicServiceHostname but when i use https and port 443 or http and port 80 i have in my browser connection timeout. I have NAT and i allowed connect to my zimbra from wan. This is my post-install zimbra config:
6) zimbra-store: Enabled
+Create Admin User: yes
+Admin user to create: admin@domainorip
+Admin Password set
+Anti-virus quarantine user: virus-quarantine.4ungyf6o@domainorip
+Enable automated spam training: yes
+Spam training user: spam.6xgmrbus@domainorip
+Non-spam(Ham) training user: ham.nqwlodc0@domainorip
+SMTP host: mails.domainorip
+Web server HTTP port: 8080
+Web server HTTPS port: 8443
+Web server mode: https
+IMAP server port: 7143
+IMAP server SSL port: 7993
+POP server port: 7110
+POP server SSL port: 7995
+Use spell check server: yes
+Spell server URL: http://mails.domainorip:7780/aspell.php
+Enable version update checks: TRUE
+Enable version update notifications: TRUE
+Version update notification email: admin@domainorip
+Version update source email: admin@domainorip
+Install mailstore (service webapp): yes
+Install UI (zimbra,zimbraAdmin webapps): yes
7) zimbra-spell: Enabled
8) zimbra-proxy: Enabled
+Enable POP/IMAP Proxy: TRUE
+IMAP proxy port: 143
+IMAP SSL proxy port: 993
+POP proxy port: 110
+POP SSL proxy port: 995
+Bind password for nginx ldap user: set
+Enable HTTP[S] Proxy: TRUE
+HTTP proxy port: 80
+HTTPS proxy port: 443
+Proxy server mode: https
Hello Kamal,
Please try to install nmap at your server and paste the results from the following command :
hi iman
i have a server in zimbra 7 debian5;how i can stop sending email with telnet from outside
thank you very much
Hi fatimainfo,
I think telnet can’t disable from outside. Maybe you can give me what the exactly your problem?
Hi iman,
thank you for your answer,
I have Zimbra mail server 7.2.7 , there are peoples ( hackers ) sends email containing links ( script ) from the latter, it retrieves the user name and password of account when one clicked this link , in this case the account has become a source of spam, which can put my server in the list of blacklists ( barracuda, ….),i can give you some party from log when he try and whent he sent spam,
May 13 10:36:07 mail postfix/smtpd[19366]: connect from unknown[1.42.42.14]
May 13 10:36:07 mail postfix/smtpd[19366]: setting up TLS connection from unknown[1.42.42.14]
May 13 10:36:08 mail postfix/smtpd[19366]: Anonymous TLS connection established from unknown[1.42.42.14]: TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)
May 13 10:36:10 mail postfix/smtpd[19366]: disconnect from unknown[1.42.42.14]
May 13 10:36:10 mail postfix/smtpd[19367]: connect from unknown[1.42.42.14]
May 13 10:36:10 mail postfix/smtpd[19367]: setting up TLS connection from unknown[1.42.42.14]
May 13 10:36:11 mail postfix/smtpd[19367]: Anonymous TLS connection established from unknown[1.42.42.14]: TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)
May 13 10:36:13 mail postfix/smtpd[19367]: 7E0E173C00F: client=unknown[1.42.42.14], sasl_method=LOGIN, sasl_username=test@mydomain.com
May 13 10:36:14 mail postfix/cleanup[17847]: 7E0E173C00F: message-id=
May 13 10:36:14 mail postfix/qmgr[23738]: 7E0E173C00F: from=, size=1628, nrcpt=1 (queue active)
May 13 10:36:15 mail postfix/smtpd[17852]: connect from localhost[127.0.0.1]
May 13 10:36:15 mail postfix/smtpd[17852]: 040B473C010: client=localhost[127.0.0.1]
May 13 10:36:15 mail postfix/cleanup[19116]: 040B473C010: message-id=
May 13 10:36:15 mail postfix/smtpd[17852]: disconnect from localhost[127.0.0.1]
May 13 10:36:15 mail postfix/qmgr[23738]: 040B473C010: from=, size=2098, nrcpt=1 (queue active)
May 13 10:36:15 mail postfix/smtp[17848]: 7E0E173C00F: to=, relay=127.0.0.1[127.0.0.1]:10024, delay=1.9, delays=1.3/0/0/0.6, dsn=2.0.0, status=sent (250 2.0.0 from MTA([127.0.0.1]:10025): 250 2.0.0 Ok: queued as 040B473C010)
May 13 10:36:15 mail postfix/qmgr[23738]: 7E0E173C00F: removed
May 13 10:36:15 mail postfix/smtpd[19367]: disconnect from unknown[1.42.42.14]
May 13 10:36:17 mail postfix/smtp[19372]: 040B473C010: to=, relay=mx2.hotmail.com[65.54.188.94]:25, delay=2.4, delays=0.09/0.02/0.89/1.4, dsn=2.0.0, status=sent (250 Queued mail for delivery)
May 13 10:36:17 mail postfix/qmgr[23738]: 040B473C010: removed
May 13 10:37:06 mail zmmailboxdmgr[19479]: status requested
May 13 10:37:06 mail zmmailboxdmgr[19479]: status OK
May 13 10:37:06 mail zmmailboxdmgr[19487]: status requested
May 13 10:37:06 mail zmmailboxdmgr[19487]: status OK
ather party
May 10 23:08:30 mail postfix/smtpd[6674]: 18F4473C00F: client=unknown[1.34.100.144], sasl_method=LOGIN, sasl_username=name@mail.mydomain.com
May 10 23:08:31 mail postfix/qmgr[7769]: 4D84873C015: from=, size=1116, nrcpt=1 (queue active)
May 10 23:08:31 mail postfix/smtp[6682]: 18F4473C00F: to=, relay=127.0.0.1[127.0.0.1]:10024, delay=1.7, delays=1.2/0.01/0/0.42, dsn=2.0.0, status=sent (250 2.0.0 from MTA([127.0.0.1]:10025): 250 2.0.0 Ok: queued as 4D84873C015)
May 10 23:08:31 mail postfix/qmgr[7769]: 18F4473C00F: removed
May 10 23:08:31 mail postfix/smtpd[6674]: disconnect from unknown[1.34.100.144]
May 10 23:08:32 mail postfix/smtp[6684]: 4D84873C015: to=, relay=gmail-smtp-in.l.google.com[74.125.136.27]:25, delay=1.3, delays=0.08/0.01/0.76/0.43, dsn=2.0.0, status=sent (250 2.0.0 OK 1462918154 c2si5161319wjf.185 – gsmtp)
May 10 23:08:32 mail postfix/qmgr[7769]: 4D84873C015: removed
May 10 23:08:56 mail zmmailboxdmgr[6771]: status requested
i need to do migration from zimbra 7.2.7 debian5 to zimbra 8.6.
thank you
Hello Fatimainfo,
The Zimbra version 7.x.x has bug 0day. You should close port 7071 from outside. Then, you can improve with some improvement below :
– https://wiki.zimbra.com/wiki/RestrictPostfixSenders for anti fake mail
– https://wiki.zimbra.com/wiki/How-to_for_cbpolicyd for rate limit sending message
For migration, please try this awesome tools : https://www.zextras.com/suite/migration-tool/