email - Zimbra - 服务器阻止新连接

Question

我不知道这里是否是此类问题的正确位置...

我们有一个内部 Zimbra 邮件服务器，使用一个特定的帐户/计算机 zimbra 服务器只需“阻止”会话并暂停来自该设备的新登录。这台计算机在 Oulook 2010 中配置了一个帐户，并在 zimbra webmail 中使用另一个帐户。当 Zimbra 服务器阻止会话时，oulook 只是再次弹出身份验证表单，并且由于 zimbra 服务器已被阻止新连接，因此至少 30 分钟无法再次登录（？）。在 zimbra webmail 中显示“发生网络服务错误”。

我做了什么：

- Make a full scan with BitDefender Anti-virus (i've suspected that maybe a mail bot installed on user computer), but nothing was found
- Checked windows event logs, nothing related to outlook or massive errors/warnings was found
- Tried to check zimbra logs, and all logs are huge and have more than 800mb (compacted) and more than 4gb uncompressed. 

    below is the part of log with "Access from IP 10.10.10.54 suspended, for repeated failed login." The "10.10.10.54" IP address is the IP from that user which
    has the problems. But another interesting thing is that, has another lines in the log with an strange IP address, like an external IP address

我不知道是什么导致了这个问题，或者客户端计算机是否有问题。

有任何想法吗？

邮箱.log 的一部分：

2018-09-20 07:49:52,302 DEBUG [qtp127618319-1101376:https:https://mail.MYDOMAIN.com.br:7073/service/admin/soap/] [] AuthProvider - zimbra:no auth token
2018-09-20 07:49:52,303 INFO  [qtp127618319-1101376:https:https://mail.MYDOMAIN.com.br:7073/service/admin/soap/] [] misc - Access from IP 74.208.160.99 suspended, for repeated failed login.
2018-09-20 07:49:53,479 DEBUG [qtp127618319-1101329:https:https://mail.MYDOMAIN.com.br:7073/service/admin/soap/] [] AuthProvider - zimbra:no auth token
2018-09-20 07:49:53,479 INFO  [qtp127618319-1101329:https:https://mail.MYDOMAIN.com.br:7073/service/admin/soap/] [] misc - Access from IP 10.10.10.54 suspended, for repeated failed login.
2018-09-20 07:49:53,523 DEBUG [qtp127618319-1101376:https:https://mail.MYDOMAIN.com.br:7073/service/admin/soap/] [] AuthProvider - zimbra:no auth token
2018-09-20 07:49:53,524 INFO  [qtp127618319-1101376:https:https://mail.MYDOMAIN.com.br:7073/service/admin/soap/] [] misc - Access from IP 10.10.10.54 suspended, for repeated failed login.
2018-09-20 07:49:53,572 DEBUG [qtp127618319-1101329:https:https://mail.MYDOMAIN.com.br:7073/service/admin/soap/] [] AuthProvider - zimbra:no auth token
2018-09-20 07:49:53,572 INFO  [qtp127618319-1101329:https:https://mail.MYDOMAIN.com.br:7073/service/admin/soap/] [] misc - Access from IP 10.10.10.54 suspended, for repeated failed login.
2018-09-20 07:49:53,613 DEBUG [qtp127618319-1101376:https:https://mail.MYDOMAIN.com.br:7073/service/admin/soap/] [] AuthProvider - zimbra:no auth token
2018-09-20 07:49:53,613 INFO  [qtp127618319-1101376:https:https://mail.MYDOMAIN.com.br:7073/service/admin/soap/] [] misc - Access from IP 10.10.10.54 suspended, for repeated failed login.
2018-09-20 07:49:53,675 DEBUG [qtp127618319-1101329:https:https://mail.MYDOMAIN.com.br:7073/service/admin/soap/] [] AuthProvider - zimbra:no auth token
2018-09-20 07:49:53,675 INFO  [qtp127618319-1101329:https:https://mail.MYDOMAIN.com.br:7073/service/admin/soap/] [] misc - Access from IP 10.10.10.54 suspended, for repeated failed login.
2018-09-20 07:49:53,715 DEBUG [qtp127618319-1101376:https:https://mail.MYDOMAIN.com.br:7073/service/admin/soap/] [] AuthProvider - zimbra:no auth token
2018-09-20 07:49:53,715 INFO  [qtp127618319-1101376:https:https://mail.MYDOMAIN.com.br:7073/service/admin/soap/] [] misc - Access from IP 10.10.10.54 suspended, for repeated failed login.
2018-09-20 07:49:53,759 DEBUG [qtp127618319-1101329:https:https://mail.MYDOMAIN.com.br:7073/service/admin/soap/] [] AuthProvider - zimbra:no auth token
2018-09-20 07:49:53,759 INFO  [qtp127618319-1101329:https:https://mail.MYDOMAIN.com.br:7073/service/admin/soap/] [] misc - Access from IP 10.10.10.54 suspended, for repeated failed login.
2018-09-20 07:49:53,803 DEBUG [qtp127618319-1101376:https:https://mail.MYDOMAIN.com.br:7073/service/admin/soap/] [] AuthProvider - zimbra:no auth token
2018-09-20 07:49:53,803 INFO  [qtp127618319-1101376:https:https://mail.MYDOMAIN.com.br:7073/service/admin/soap/] [] misc - Access from IP 10.10.10.54 suspended, for repeated failed login.
2018-09-20 07:49:54,018 DEBUG [qtp127618319-1101329:https:https://mail.MYDOMAIN.com.br:7073/service/admin/soap/] [] AuthProvider - zimbra:no auth token

标签： emailauthenticationzimbra