Mission Critical Email

Blog

Zimbra Microsoft Active Directory Integration and Data Sovereignty

We’ve seen an uptick in inbound Zimbra inquiries from companies running Microsoft 365 increasingly concerned about data sovereignty, with their email data in Microsoft 365 and in many cases, all of their files in OneDrive. Yesterday, we got an inquiry from a company freaked out by the Stryker device wipe attack; …

Zimbra Mailboxd Java Tuning For Large Environments

The heart of Zimbra is mailboxd, a big Java application. Zimbra ships with Java, and Java Garbage Collection (“GC”) settings tuned with defaults that are suboptimal for Zimbra mailbox servers supporting demanding environments: large mailboxes (up to 200GB per user), users who regularly send and receive large attachments (up to …

New Outlook – De Facto Privacy Breach and Data Sovereignty Violations

Many customers, regulated or not, use Zimbra to ensure privacy and control data sovereignty.  Unfortunately, using Microsoft’s “New” Outlook creates de facto privacy breach and data sovereignty violations when connected to any non-Microsoft email services. To get straight to the point, we strongly recommend that users concerned about privacy and …

Zimbra ZBUG-4827: 100% CPU Utilization Due To AutoComplete (Contacts Ranking Database) Bug

In April 2025 I opened a Support Case with Zimbra, which resulted in Zimbra issuing ZBUG-4827: Contact Ranking fetch causing slowness.  This is an AutoComplete (Contacts Ranking Database) bug. This blog post will help you identify if your Zimbra system is subject to this bug, and your options for addressing …

Fail2Ban and PCRE Script Using Zimbra’s Daily Mail Report

While Fail2Ban’s automation works great, we find that reviewing the “Recipient address rejected” section of Zimbra’s Daily Mail Report yields evidence of potential Advanced Persistent Threats as well as probes from senders whom you’d like to block. Manually grepping through /var/log/zimbra.log* on the logger host to find the sender’s IP …