====== установка ======

[[Zimbra Ubuntu 20.04 LTS]]

[[Zimbra установка CentOS 7]]

====== Zimbra B/W list ======

Whitelist Edit /opt/zimbra/conf/postfix_rbl_override. Add IP address(es) SPACE OK to the file, one IP address per line:
<code bash>
1.2.3.4 OK
</code>
Run the postmap to save and apply the changes in Postfix:
<code bash>
postmap /opt/zimbra/conf/postfix_rbl_override
</code>
Run the zmprov to apply the changes to the Zimbra Collaboration Server:
<code bash>
zmprov mcf +zimbraMtaRestriction 'check_client_access lmdb:/opt/zimbra/conf/postfix_rbl_override'
</code>
postmap will need to be rerun on the file any time an IP address is added or removed.

Blacklist Edit /opt/zimbra/conf/postfix_blacklist. Add IP address SPACE REJECT to the file, one IP address per line:
<code bash>
1.2.3.4 REJECT
</code>
Run the postmap to save and apply the changes in Postfix:
<code bash>
postmap /opt/zimbra/conf/postfix_blacklist
</code>
Run the zmprov to apply the changes to the Zimbra Collaboration Server:
<code bash>
zmprov mcf +zimbraMtaRestriction 'check_client_access lmdb:/opt/zimbra/conf/postfix_blacklist'
</code>
postmap will need to be rerun on the file anytime an IP address is added or removed.

====== Zimbra сделать пользователя админом ======

<code bash>
su zimbra
zmprov ma i.familiya@domain.ru zimbraIsAdminAccount TRUE
</code>

====== Zimbra служебные сообщения ======

  * кому приходят все служебные сообщения
<code bash>
zmlocalconfig -e smtp_destination=admin@domain.ru
</code>

====== Zimbra очистка удаленных сообщений ======

  zmprov mc default zimbraDumpsterEnabled "TRUE" zimbraDumpsterPurgeEnabled "TRUE" zimbraDumpsterUserVisibleAge "30d" zimbraMailDumpsterLifetime "30d"
  zmprov -l gaa domain.com
<code bash>
for user in `cat /opt/scripts/users.txt`
 do
  echo $user
  zmmailbox -z -m $user -A emptyDumpster

done
</code>
====== Zimbra DKIM ======

<code bash>
/opt/zimbra/libexec/zmdkimkeyutil -a -d augin.ru

DKIM Data added to LDAP for domain augin.ru with selector 5F3D460E-6B1E-11E8-A38D-447DBD4C0A9A
Public signature to enter into DNS:
5F3D460E-6B1E-11E8-A38D-447DBD4C0A9A._domainkey IN      TXT     ( "v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdb7uSwZM3LgewOmOJE8q0CyNlj0gDlUTzKcIE7Mu7Jn7y/Fz8jVnm12qmUzzb6DFvemh7+miAqyZwFnCOQJzcW9Dots3P+en/+GaRKHqpE1vCvpm25P82nrK6/D+yCd7uvL5eIK7N3oOzbz9r8im90JLzjst/JhuZvGeGK1dT3U1vLAEbayqFgm6/9Nlp5mrvIQvAUx427296"
        
</code>
====== Zimbra отключение redolog ======
  zmprov mcf zimbraRedoLogEnabled FALSE
====== Zimbra letsencrypt ======
<code bash>
yum install certbot git -y
git clone https://github.com/VojtechMyslivec/letsencrypt-zimbra.git /opt/letsencrypt-zimbra
cp /opt/letsencrypt-zimbra/letsencrypt-zimbra.cfg{.example,}
#правим файл настроек
#добавляем sudo
cp configs/sudoers.conf /etc/sudoers.d/zimbra_certbot
#запускаем тест
sudo -Hu zimbra sudo /usr/bin/certbot -h
#получаем сертификат
sudo -Hiu zimbra /opt/letsencrypt-zimbra/obtain-and-deploy-letsencrypt-cert.sh -v
#добавляем cron
cp /opt/letsencrypt-zimbra/configs/cron.conf /etc/cron.d/letsencrypt-zimbra

</code>
====== Zimbra backup ======

<code bash>
Syntax:
   zxsuite backup doExternalRestore {source_path} [attr1 value1 [attr2 value2...]]

PARAMETER LIST

NAME                          TYPE                 EXPECTED VALUES    DEFAULT
source_path(M)                Path                                    
accounts(O)                   Account Name[,..]                       all
domains(O)                    Domain Name[,..]                        all
filter_deleted(O)             Boolean              true|false         true
skip_system_accounts(O)       Boolean              true|false         true
skip_aliases(O)               Boolean              true|false         false
skip_distribution_lists(O)    Boolean              true|false         false
provisioning_only(O)          Boolean              true|false         false
skip_coses(O)                 Boolean              true|false         false
notifications(O)              Email Address                           

(M) == mandatory parameter, (O) == optional parameter

Usage example:

zxsuite backup doexternalrestore /opt/zimbra/backup/restorePath/ accounts john@example.com,jack@example.com domains example.com filter_deleted false skip_system_accounts false
Restores the example.com domain, including all system accounts, and the john@example.com and jack@example.com accounts from a backup located in /opt/zimbra/backup/restorePath/
</code>

<code bash>
zxsuite backup doexternalrestore /mnt/ filter_deleted false skip_system_accounts false concurrent_accounts 10
zxsuite backup monitor ID
</code>