Posts

Manually clean up zimbra zmcat/zmcpustat exploit

Symptoms: server load high, cpu usage 300% To clean up manually follow this steps: STOP the process but dont kill it, use kill -STOP [PID] Hide from search engine (su zimbra): zmprov mcf zimbraMailKeepOutWebCrawlers TRUE +zimbraResponseHeader "X-Robots-Tag: noindex" chmod 755 /opt/zimbra/data/tmp/ chmod 755 /opt/zimbra/data/tmp/upload Delete malicious JSP, find using this command: grep -R '(request.getParameter.' /opt/zimbra/mailboxd /opt/zimbra/jetty For example: /opt/zimbra/mailboxd/webapps/zimbraAdmin/public/jsp/Alert.jsp and /opt/zimbra/jetty/webapps/zimbra/js/zimbra/csfe/XZimbra.jsp > /opt/zimbra/mailboxd/webapps/zimbraAdmin/public/jsp/Alert.jsp > /opt/zimbra/jetty/webapps/zimbra/js/zimbra/csfe/XZimbra.jsp chattr +i /opt/zimbra/mailboxd/webapps/zimbraAdmin/public/jsp/Alert.jsp /opt/zimbra/jetty/webapps/zimbra/js/zimbra/csfe/XZimbra.jsp Fix modified jsp files, find using: rpm -qa zimbra* | xargs rpm -qV - | egrep -E '^.{2}5' | grep .jsp For...

Always use TLS when sending email

Image
Email filtering by ISP today is very bad, returning 250 2.0.0 OK but actually no email was sent, your email is lost. Also someone can read your email when sent How do you know if your email has been filtered or not? try telnet to the external smtp server port 25, the normal response should be like this: And when filtered, response like this: See, there are no STARTTLS in the filtered network, so the e-mail client is forced to send in plain text, unencrypted. Not only email clients, but also applications that send notifications via email Tips: Use other SMTP port like 587, 465 Always use TLS in your mail client SMTP setting: STARTTLS or SSL/TLS

Toolbox for development environment

Image
Fedora 31 have a new feature called Toolbox. Toolbox is great for installing development environment without cluttering base system Ref: https://docs.fedoraproject.org/en-US/fedora-silverblue/toolbox/ Check out my terminal recording, installing PHP 5.6:

Optimize SSD on Linux

After installing the SSD on your laptop, there are some adjustments that need to be done so that it is optimal . I'm using Fedora 30 File system My Partition is: Disk /dev/sda: 465.8 GiB, 500107862016 bytes, 976773168 sectors Disk model: Samsung SSD 860 Units: sectors of 1 * 512 = 512 bytes Sector size (logical/physical): 512 bytes / 512 bytes I/O size (minimum/optimal): 512 bytes / 512 bytes Disklabel type: gpt Disk identifier: DF4E716F-F00A-40F3-8176-C97A52F36998 Device      Start       End   Sectors   Size Type /dev/sda1    2048    253951    251904   123M EFI System /dev/sda2  253952 976773119 976519168 465.7G Linux LVM And logical volume are: Root, Home, Archive, VM, Games Format as ext4 with default block size (4096 best for SSD), and set reserved block to 1% # mkfs.ext4 -L Home -m 1 /dev/VG/YourHome Copying I did not reinstall lin...