[afnog] Securing a Zimbra Mail Server

Alex Rhys-Hurn alex at itworx.co.ke
Thu Apr 21 07:20:48 UTC 2016


Hi, 

A bit more on securing a zimbra server: 

You should deploy a multi tiered approach as well with a Zimbra proxy server sitting in front of the main mailbox/mta server in its simplest form. 

You can then ensure that you have DKIM and SPF set up properly. 

Then in ZImbra web management, enable blocking of risky attachments (I block all the ones in the list) 

Although I have good success with the spam control in ZImbra, its important to train users to use the spam/not spam button to teach zimbra what is and isnt spam. 

I also use an Untangle Unified Threat Management Appliance infront of my zimbra to add extra phish, spam and virus cover to the mails and provide firewall and IPS. 

Hope that helps. 

Alex 

> From: "Jordan Turyatunga" <jkturyatunga at aol.com>
> To: afnog at afnog.org, mathias at houngbo.net
> Sent: Saturday, 16 April, 2016 16:12:54
> Subject: Re: [afnog] Securing a Zimbra Mail Server

> Thanks Mathias

> Sent from AOL Mobile Mail
> Get the new AOL app: mail.mobile.aol.com

> On Friday, March 11, 2016 Mathias HOUNGBO < mathias at houngbo.net > wrote:

> I think you should setup/configure

> update OS
> firewall
> dnssec
> spamfilter
> dkim
> strong user's password
> httpS only

> Le 10/03/2016 07:31, Jordan Turyatunga a écrit :

>> Hey Team,

>> I have installed a new Zimbra Mail Server, how would i make sure it is secured
>> from hackers and spams.

>> Regards,
>> Jordan

>> _______________________________________________
>> afnog mailing list https://www.afnog.org/mailman/listinfo/afnog

> Il n'y a pas de raccourci pour atteindre le développement.
> Open source is not limited to software and it is not limited to english either!
> Mefies toi de la médiocrité, c'est la moisissure de l'esprit

> --
> My blog : Made in Bénin - http://mathias.houngbo.net Charter President ONG
> IGBANet - http://www.igbanet.org/ (GDG Cotonou, WTM Cotonou, BJNOG, Cotonou
> LUG, Cotonou Wireless, CodeKid, Hackerspace Cotonou)
> System and Network Administrator at BCEAO Bénin --- C.T.O & Co-Founder at
> STARSOFT INFORMATIQUE

> _______________________________________________
> afnog mailing list
> https://www.afnog.org/mailman/listinfo/afnog
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.afnog.org/pipermail/afnog/attachments/20160421/a6e32046/attachment.html>


More information about the afnog mailing list