{"id":35174,"date":"2019-10-31T22:02:43","date_gmt":"2019-10-31T19:02:43","guid":{"rendered":"https:\/\/prohoster.info\/blog\/zimbra-i-zashhita-ot-mejl-bombinga\/"},"modified":"2019-10-31T22:02:43","modified_gmt":"2019-10-31T19:02:43","slug":"zimbra-i-zashhita-ot-mejl-bombinga","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/zimbra-i-zashhita-ot-mejl-bombinga","title":{"rendered":"Zimbra a ochrana proti mail-bombardov\u00e1n\u00ed","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Mail-bombardov\u00e1n\u00ed je jednou z nejstar\u0161\u00edch forem kybernetick\u00fdch \u00fatok\u016f. V podstat\u011b p\u0159ipom\u00edn\u00e1 b\u011b\u017en\u00fd DoS \u00fatok, ale m\u00edsto vlny po\u017eadavk\u016f z r\u016fzn\u00fdch IP adres je na server odesl\u00e1n z\u00e1t\u011b\u017e elektronick\u00fdch zpr\u00e1v, kter\u00e9 v obrovsk\u00e9m mno\u017estv\u00ed p\u0159ich\u00e1zej\u00ed na jednu z e-mailov\u00fdch adres, co\u017e v\u00fdrazn\u011b zvy\u0161uje z\u00e1t\u011b\u017e na ni. Takov\u00fd \u00fatok m\u016f\u017ee v\u00e9st k nemo\u017enosti pou\u017e\u00edvat e-mailovou schr\u00e1nku a n\u011bkdy m\u016f\u017ee dokonce zp\u016fsobit selh\u00e1n\u00ed cel\u00e9ho serveru. Dlouh\u00e1 historie tohoto typu kybernetick\u00fdch \u00fatok\u016f vedla k \u0159ad\u011b pozitivn\u00edch a negativn\u00edch d\u016fsledk\u016f pro syst\u00e9mov\u00e9 administr\u00e1tory. Mezi pozitivn\u00ed faktory pat\u0159\u00ed dobr\u00e9 prozkoum\u00e1n\u00ed mail-bombardov\u00e1n\u00ed a existuj\u00edc\u00ed jednoduch\u00e9 zp\u016fsoby, jak se proti takov\u00e9mu \u00fatoku br\u00e1nit. Na negativn\u00ed stran\u011b v\u0161ak stoj\u00ed velk\u00e9 mno\u017estv\u00ed ve\u0159ejn\u011b dostupn\u00fdch softwarov\u00fdch \u0159e\u0161en\u00ed pro prov\u00e1d\u011bn\u00ed t\u011bchto \u00fatok\u016f a mo\u017enost pro \u00fato\u010dn\u00edka spolehliv\u011b se chr\u00e1nit p\u0159ed odhalen\u00edm.<\/p>\n

\"Zimbra<\/a><\/noindex><\/p>\n

D\u016fle\u017eitou charakteristikou tohoto kybernetick\u00e9ho \u00fatoku je, \u017ee jej prakticky nelze vyu\u017e\u00edt k vyta\u017een\u00ed zisku. \u00dato\u010dn\u00edk poslal na jednu z e-mailov\u00fdch schr\u00e1nek z\u00e1plavu elektronick\u00fdch zpr\u00e1v, znemo\u017enil \u010dlov\u011bku norm\u00e1ln\u011b pou\u017e\u00edvat e-mail, nebo nap\u0159\u00edklad hacknul \u010d\u00edsi firemn\u00ed e-mail a za\u010dal masov\u011b rozes\u00edlat tis\u00edce zpr\u00e1v po cel\u00e9m GAL, co\u017e vedlo k tomu, \u017ee server bu\u010f spadl, nebo za\u010dal zpomalovat tak, \u017ee jeho pou\u017e\u00edv\u00e1n\u00ed se stalo nemo\u017en\u00fdm. A co d\u00e1l? P\u0159eveden\u00ed takov\u00e9ho kybernetick\u00e9ho zlo\u010dinu na skute\u010dn\u00e9 pen\u00edze je t\u00e9m\u011b\u0159 nemo\u017en\u00e9, tak\u017ee samotn\u00e9 mail-bombardov\u00e1n\u00ed je v sou\u010dasnosti celkem vz\u00e1cn\u00fdm jevem a syst\u00e9mov\u00ed administr\u00e1to\u0159i p\u0159i navrhov\u00e1n\u00ed infrastruktury mohou jednodu\u0161e zapomenout na nutnost ochrany proti takov\u00e9mu kybernetick\u00e9mu \u00fatoku.<\/p>\n

I p\u0159esto, \u017ee je mail bombing s\u00e1m o sob\u011b z obchodn\u00edho hlediska pom\u011brn\u011b nesmyslnou \u010dinnost\u00ed, \u010dasto p\u0159edstavuje sou\u010d\u00e1st jin\u00fdch, slo\u017eit\u011bj\u0161\u00edch a v\u00edceetapov\u00fdch kybernetick\u00fdch \u00fatok\u016f. Nap\u0159\u00edklad p\u0159i hackov\u00e1n\u00ed e-mailu a jeho pou\u017e\u00edv\u00e1n\u00ed k p\u0159evzet\u00ed \u00fa\u010dtu na n\u011bjak\u00e9 ve\u0159ejn\u00e9 slu\u017eb\u011b \u00fato\u010dn\u00edci \u010dasto bombarduj\u00ed e-mailovou schr\u00e1nku ob\u011bti bezv\u00fdznamn\u00fdmi zpr\u00e1vami, aby se zpr\u00e1va s potvrzen\u00edm ztratila v jejich proudu a z\u016fstala bez pov\u0161imnut\u00ed. Mail bombing m\u016f\u017ee b\u00fdt tak\u00e9 pou\u017eit jako prost\u0159edek ekonomick\u00e9ho n\u00e1tlaku na podnik. Aktivn\u00ed bombardov\u00e1n\u00ed ve\u0159ejn\u00e9 e-mailov\u00e9 schr\u00e1nky podniku, na kterou p\u0159ich\u00e1zej\u00ed \u017e\u00e1dosti od klient\u016f, m\u016f\u017ee v\u00e1\u017en\u011b zt\u00ed\u017eit pr\u00e1ci s nimi a jako d\u016fsledek m\u016f\u017ee v\u00e9st k odst\u00e1vce za\u0159\u00edzen\u00ed, nevykonan\u00fdm objedn\u00e1vk\u00e1m, a tak\u00e9 ke ztr\u00e1t\u011b reputace a u\u0161l\u00e9 ziskovosti.<\/p>\n

Pr\u00e1v\u011b proto by spr\u00e1vce syst\u00e9mu nem\u011bl zapom\u00ednat na mo\u017enost proveden\u00ed mail bombingu a v\u017edy p\u0159ij\u00edmat pot\u0159ebn\u00e1 opat\u0159en\u00ed na ochranu p\u0159ed touto hrozbou. Pokud vezmeme v \u00favahu, \u017ee se to d\u00e1 ud\u011blat u\u017e ve f\u00e1zi budov\u00e1n\u00ed e-mailov\u00e9 infrastruktury, a \u017ee to spr\u00e1vci syst\u00e9mu zabere jen velmi m\u00e1lo \u010dasu a n\u00e1mahy, objektivn\u00ed d\u016fvody pro to, aby neochr\u00e1nil svou infrastrukturu p\u0159ed mail bombingem, prost\u011b neexistuj\u00ed. Pod\u00edvejme se tedy na to, jak je ochrana proti tomuto kybernetick\u00e9mu \u00fatoku zrealizov\u00e1na v Zimbra Collaboration Suite Open-Source Edition.<\/p>\n

Na Zimb\u0159e stoj\u00ed Postfix \u2014 jeden z nejspolehliv\u011bj\u0161\u00edch a funk\u010dn\u011b nejbohat\u0161\u00edch Mail Transfer Agent\u016f s otev\u0159en\u00fdm zdrojov\u00fdm k\u00f3dem v sou\u010dasnosti. A jednou z hlavn\u00edch v\u00fdhod jeho otev\u0159enosti je, \u017ee podporuje r\u016fzn\u00e9 extern\u00ed \u0159e\u0161en\u00ed pro roz\u0161\u00ed\u0159en\u00ed funkcionality. Konkr\u00e9tn\u011b Postfix pln\u011b podporuje cbpolicyd \u2014 pokro\u010dilou utilitu pro zaji\u0161t\u011bn\u00ed kybernetick\u00e9 bezpe\u010dnosti e-mailov\u00e9ho serveru. Krom\u011b ochrany p\u0159ed spamem a vytv\u00e1\u0159en\u00ed b\u00edl\u00fdch, \u010dern\u00fdch a \u0161ed\u00fdch seznam\u016f umo\u017e\u0148uje cbpolicyd administratorovi Zimbry nastavit kontrolu SPF podpisu, a tak\u00e9 stanovit omezen\u00ed na p\u0159\u00edjem a odes\u00edl\u00e1n\u00ed e-mail\u016f nebo dat. Tyto opat\u0159en\u00ed mohou nejen spolehliv\u011b chr\u00e1nit p\u0159ed spamem a phishingov\u00fdmi zpr\u00e1vami, ale tak\u00e9 chr\u00e1nit server p\u0159ed mail bombingem.<\/p>\n

Prvn\u00ed v\u011bc, kterou syst\u00e9mov\u00fd administr\u00e1tor pot\u0159ebuje, je aktivace modulu cbpolicyd, kter\u00fd je p\u0159edinstalov\u00e1n v Zimbra Collaboration Suite OSE na MTA serveru infrastruktury. To se prov\u00e1d\u00ed pomoc\u00ed p\u0159\u00edkazu zmprov ms `zmhostname` +zimbraServiceEnabled cbpolicyd. Pot\u00e9 bude nutn\u00e9 aktivovat webov\u00e9 rozhran\u00ed, aby bylo mo\u017en\u00e9 pohodln\u011b spravovat cbpolicyd. K tomu je nutn\u00e9 povolit p\u0159ipojen\u00ed na webov\u00e9m portu \u010d\u00edslo 7780 a vytvo\u0159it symbolick\u00fd odkaz pomoc\u00ed p\u0159\u00edkazu ln -s \/opt\/zimbra\/common\/share\/webui \/opt\/zimbra\/data\/httpd\/htdocs\/webui<\/b>, a pot\u00e9 upravit konfigura\u010dn\u00ed soubor pomoc\u00ed p\u0159\u00edkazu nano \/opt\/zimbra\/data\/httpd\/htdocs\/webui\/includes\/config.php<\/b>, kde je t\u0159eba zadat n\u00e1sleduj\u00edc\u00ed \u0159\u00e1dky:<\/p>\n

$DB_DSN=\"sqlite:\/opt\/zimbra\/data\/cbpolicyd\/db\/cbpolicyd.sqlitedb\";
\n$DB_USER=\"root\";
\n$DB_TABLE_PREFIX=>>;<\/p><\/blockquote>\n

\nPot\u00e9 zb\u00fdv\u00e1 pouze restartovat slu\u017eby Zimbra a Zimbra Apache pomoc\u00ed p\u0159\u00edkaz\u016f zmcontrol restart a zmapachectl restart. Pot\u00e9 z\u00edsk\u00e1te p\u0159\u00edstup k webov\u00e9mu rozhran\u00ed na adrese example.com<\/a><\/noindex>:7780\/webui\/index.php<\/b>. Hlavn\u00edm nuanc\u00ed je, \u017ee p\u0159ihl\u00e1\u0161en\u00ed do tohoto webov\u00e9ho rozhran\u00ed nen\u00ed ochr\u00e1n\u011bno, a abyste vylou\u010dili p\u0159\u00edstup neopr\u00e1vn\u011bn\u00fdch osob, m\u016f\u017eete po ka\u017ed\u00e9m p\u0159ihl\u00e1\u0161en\u00ed do webov\u00e9ho rozhran\u00ed jednodu\u0161e zav\u0159\u00edt p\u0159ipojen\u00ed na portu 7780.<\/p>\n

Ochranu proti proudu e-mail\u016f vych\u00e1zej\u00edc\u00edch z vnit\u0159n\u00ed s\u00edt\u011b umo\u017e\u0148uj\u00ed kv\u00f3ty na odes\u00edl\u00e1n\u00ed e-mail\u016f, kter\u00e9 lze nastavit pomoc\u00ed cbpolicyd. Takov\u00e9 kv\u00f3ty umo\u017e\u0148uj\u00ed stanovit limit na maxim\u00e1ln\u00ed po\u010det e-mail\u016f, kter\u00e9 mohou b\u00fdt odesl\u00e1ny z jednoho po\u0161tovn\u00edho schr\u00e1nky za jednotkov\u00fd \u010das. Nap\u0159\u00edklad pokud mana\u017ee\u0159i va\u0161\u00ed spole\u010dnosti v pr\u016fm\u011bru odes\u00edlaj\u00ed 60-80 e-mail\u016f za hodinu, m\u016f\u017eete, s ohledem na malou rezervu, stanovit kv\u00f3tu na 100 e-mail\u016f za hodinu. Aby mana\u017ee\u0159i vy\u010derpali takovou kv\u00f3tu, budou muset odes\u00edlat jedno e-mail ka\u017ed\u00fdch 36 sekund. Z jedn\u00e9 strany je to dostate\u010dn\u00e9 pro plnohodnotnou pr\u00e1ci, a z druh\u00e9 strany, s takovou kv\u00f3tou, \u00fato\u010dn\u00edci, kte\u0159\u00ed z\u00edskali p\u0159\u00edstup k e-mailu jednoho z va\u0161ich mana\u017eer\u016f, nebudou moci sp\u00e1chat mail-bombing nebo masivn\u00ed spamovou \u00fatok na spole\u010dnosti.<\/p>\n

Aby bylo mo\u017en\u00e9 nastavit takovou kv\u00f3tu, je nutn\u00e9 v webov\u00e9m rozhran\u00ed vytvo\u0159it novou politiku pro omezen\u00ed odes\u00edl\u00e1n\u00ed e-mail\u016f a uv\u00e9st, aby platila jak pro e-maily odes\u00edlan\u00e9 uvnit\u0159 dom\u00e9ny, tak pro e-maily odes\u00edlan\u00e9 na extern\u00ed adresy. Prov\u00e1d\u00ed se to n\u00e1sleduj\u00edc\u00edm zp\u016fsobem:<\/p>\n

\"Zimbra
\n
\nPo tomto kroku bude mo\u017en\u00e9 podrobn\u011bji specifikovat omezen\u00ed t\u00fdkaj\u00edc\u00ed se odes\u00edl\u00e1n\u00ed e-mail\u016f, zejm\u00e9na stanovit \u010dasov\u00fd interval, po jeho\u017e uplynut\u00ed budou omezen\u00ed aktualizov\u00e1na, a tak\u00e9 zpr\u00e1vu, kterou u\u017eivatel obdr\u017e\u00ed, pokud p\u0159ekro\u010d\u00ed sv\u016fj limit. N\u00e1sledn\u011b lze tak\u00e9 nastavit samotn\u00e9 omezen\u00ed na odes\u00edl\u00e1n\u00ed e-mail\u016f. To lze definovat jak podle po\u010dtu odeslan\u00fdch e-mail\u016f, tak podle objemu p\u0159en\u00e1\u0161en\u00fdch dat. Co se t\u00fd\u010de e-mail\u016f, kter\u00e9 budou odesl\u00e1ny nad stanoven\u00fd limit, je mo\u017en\u00e9 s nimi zach\u00e1zet r\u016fzn\u00fdmi zp\u016fsoby. Nap\u0159\u00edklad je lze okam\u017eit\u011b odstranit, nebo je uchovat, aby byly odesl\u00e1ny hned po obnoven\u00ed limitu pro odes\u00edl\u00e1n\u00ed zpr\u00e1v. Druhou mo\u017enost lze vyu\u017e\u00edt p\u0159i hled\u00e1n\u00ed optim\u00e1ln\u00ed hodnoty pro limit na odes\u00edl\u00e1n\u00ed e-mail\u016f zam\u011bstnanci.<\/p>\n

Krom\u011b omezen\u00ed na odes\u00edl\u00e1n\u00ed e-mail\u016f umo\u017e\u0148uje cbpolicyd nastavit limit na p\u0159\u00edjem e-mail\u016f. Toto omezen\u00ed se na prvn\u00ed pohled jev\u00ed jako skv\u011bl\u00e9 \u0159e\u0161en\u00ed proti mail-bombardov\u00e1n\u00ed, av\u0161ak ve skute\u010dnosti nastaven\u00ed takov\u00e9ho limitu, i kdy\u017e velk\u00e9ho, m\u016f\u017ee v\u00e9st k tomu, \u017ee v ur\u010dit\u00fdch situac\u00edch se k v\u00e1m nedostane d\u016fle\u017eit\u00fd e-mail. Pr\u00e1v\u011b proto se siln\u011b nedoporu\u010duje nastavovat jak\u00e1koli omezen\u00ed pro p\u0159\u00edchoz\u00ed po\u0161tu. Pokud se v\u0161ak rozhodnete riskovat, je t\u0159eba k nastaven\u00ed limitu p\u0159\u00edchoz\u00edch zpr\u00e1v p\u0159istupovat s mimo\u0159\u00e1dnou opatrnost\u00ed. Nap\u0159\u00edklad lze omezit po\u010det p\u0159\u00edchoz\u00edch e-mail\u016f od d\u016fv\u011bryhodn\u00fdch partner\u016f, aby v p\u0159\u00edpad\u011b, \u017ee byl jejich po\u0161tovn\u00ed server kompromitov\u00e1n, nedoch\u00e1zelo k spamov\u00e9mu \u00fatoku na va\u0161i firmu.<\/p>\n

Aby se administr\u00e1tor syst\u00e9mu ochr\u00e1nil p\u0159ed n\u00e1valem p\u0159\u00edchoz\u00edch zpr\u00e1v b\u011bhem mail-bombardov\u00e1n\u00ed, m\u011bl by podniknout n\u011bco inteligentn\u011bj\u0161\u00edho ne\u017e jednoduch\u00e9 omezen\u00ed p\u0159\u00edchoz\u00ed po\u0161ty. T\u00edmto \u0159e\u0161en\u00edm mohou b\u00fdt \u0161ed\u00e9 seznamy. Princip jejich fungov\u00e1n\u00ed spo\u010d\u00edv\u00e1 v tom, \u017ee p\u0159i prvn\u00edm pokusu o dod\u00e1n\u00ed zpr\u00e1vy od nespolehliv\u00e9ho odes\u00edlatele je spojen\u00ed se serverem n\u00e1hle p\u0159eru\u0161eno, co\u017e vede k ne\u00fasp\u011b\u0161n\u00e9 dod\u00e1vce e-mailu. Pokud v\u0161ak v ur\u010dit\u00e9m \u010dasov\u00e9m obdob\u00ed nespolehliv\u00fd server znovu zkus\u00ed odeslat tut\u00e9\u017e zpr\u00e1vu, server spojen\u00ed nep\u0159eru\u0161\u00ed a dod\u00e1vka prob\u00edh\u00e1 \u00fasp\u011b\u0161n\u011b. <\/p>\n

Smyslem v\u0161ech t\u011bchto akc\u00ed je, \u017ee programy pro automatick\u00e9 masov\u00e9 rozes\u00edl\u00e1n\u00ed e-mail\u016f obvykle neov\u011b\u0159uj\u00ed \u00fasp\u011b\u0161nost doru\u010den\u00ed odeslan\u00e9 zpr\u00e1vy a nepodnikaj\u00ed pokusy o jej\u00ed op\u011btovn\u00e9 odesl\u00e1n\u00ed, zat\u00edmco \u010dlov\u011bk se v\u017edy ujist\u00ed, zda byla jeho zpr\u00e1va skute\u010dn\u011b odesl\u00e1na na spr\u00e1vnou adresu nebo ne. <\/p>\n

\u0160ed\u00e9 seznamy lze tak\u00e9 zapnout v webov\u00e9m rozhran\u00ed cbpolicyd. Aby v\u0161e fungovalo, je nutn\u00e9 vytvo\u0159it politiku, kter\u00e1 by zahrnovala v\u0161echny p\u0159\u00edchoz\u00ed e-maily ur\u010den\u00e9 pro u\u017eivatele na na\u0161em serveru, a pot\u00e9 na z\u00e1klad\u011b t\u00e9to politiky vytvo\u0159it pravidlo Greylisting, kde lze nastavit interval, b\u011bhem n\u011bho\u017e cbpolicyd vy\u010dk\u00e1 na op\u011btovnou odpov\u011b\u010f od nezn\u00e1m\u00e9ho odes\u00edlatele. Obvykle to trv\u00e1 4-5 minut. P\u0159itom lze \u0161ed\u00e9 seznamy nastavit tak, aby v\u0161echny \u00fasp\u011b\u0161n\u00e9 a ne\u00fasp\u011b\u0161n\u00e9 pokusy o doru\u010den\u00ed e-mail\u016f od r\u016fzn\u00fdch odes\u00edlatel\u016f byly br\u00e1ny v \u00favahu a na z\u00e1klad\u011b jejich mno\u017estv\u00ed se rozhodovalo o automatick\u00e9m p\u0159id\u00e1n\u00ed odes\u00edlatele na b\u00edl\u00fd nebo \u010dern\u00fd seznam.<\/p>\n

Upozor\u0148ujeme, \u017ee pou\u017e\u00edv\u00e1n\u00ed \u0161ed\u00fdch seznam\u016f by m\u011blo b\u00fdt prov\u00e1d\u011bno s maxim\u00e1ln\u00ed odpov\u011bdnost\u00ed. Nejlep\u0161\u00ed bude, pokud pou\u017eit\u00ed t\u00e9to technologie p\u016fjde ruku v ruce s neust\u00e1l\u00fdm veden\u00edm b\u00edl\u00fdch a \u010dern\u00fdch seznam\u016f, aby se vylou\u010dila mo\u017enost ztr\u00e1ty skute\u010dn\u011b d\u016fle\u017eit\u00fdch e-mail\u016f pro podnik. <\/p>\n

Krom\u011b toho m\u016f\u017ee p\u0159id\u00e1n\u00ed kontrol SPF, DMARC a DKIM pomoci ochr\u00e1nit se p\u0159ed mail bombingem. \u010casto e-maily, kter\u00e9 doraz\u00ed b\u011bhem mail bombingu, tyto kontroly neproch\u00e1zej\u00ed. O tom, jak to ud\u011blat, bylo zm\u00edn\u011bno v jednom z na\u0161ich p\u0159edchoz\u00edch \u010dl\u00e1nk\u016f<\/a><\/noindex>.<\/p>\n

Tak\u017ee ochrana p\u0159ed takovou hrozbou, jako je mail bombing, je docela jednoduch\u00e1 a lze ji uskute\u010dnit ji\u017e b\u011bhem budov\u00e1n\u00ed infrastruktury Zimbra pro va\u0161e podnik\u00e1n\u00ed. Je v\u0161ak d\u016fle\u017eit\u00e9 neust\u00e1le sledovat, aby rizika spojen\u00e1 s pou\u017eit\u00edm takov\u00e9 ochrany nikdy nep\u0159evy\u0161ovala v\u00fdhody, kter\u00e9 z n\u00ed z\u00edsk\u00e1v\u00e1te.
\n
Zdroj: habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041c\u0435\u0439\u043b-\u0431\u043e\u043c\u0431\u0438\u043d\u0433 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043e\u0434\u043d\u043e\u0439 \u0438\u0437 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0441\u0442\u0430\u0440\u044b\u0445 \u0440\u0430\u0437\u043d\u043e\u0432\u0438\u0434\u043d\u043e\u0441\u0442\u0435\u0439 \u043a\u0438\u0431\u0435\u0440-\u0430\u0442\u0430\u043a. \u041f\u043e \u0441\u0432\u043e\u0435\u0439 \u0441\u0443\u0442\u0438 \u043e\u043d\u0430 \u043d\u0430\u043f\u043e\u043c\u0438\u043d\u0430\u0435\u0442 \u043e\u0431\u044b\u0447\u043d\u0443\u044e DoS-\u0430\u0442\u0430\u043a\u0443, \u0442\u043e\u043b\u044c\u043a\u043e \u0432\u043c\u0435\u0441\u0442\u043e \u0432\u043e\u043b\u043d\u044b \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u0441 \u0440\u0430\u0437\u043d\u044b\u0445 ip-\u0430\u0434\u0440\u0435\u0441\u043e\u0432, \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0432\u0430\u043b \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u044b\u0445 \u043f\u0438\u0441\u0435\u043c, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0432 \u043e\u0433\u0440\u043e\u043c\u043d\u044b\u0445 \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u0430\u0445 \u043f\u0440\u0438\u0445\u043e\u0434\u044f\u0442 \u043d\u0430 \u043e\u0434\u0438\u043d \u0438\u0437 \u043f\u043e\u0447\u0442\u043e\u0432\u044b\u0445 \u0430\u0434\u0440\u0435\u0441\u043e\u0432, \u0437\u0430 \u0441\u0447\u0435\u0442 \u0447\u0435\u0433\u043e \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0430 \u043d\u0430 \u043d\u0435\u0433\u043e \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0432\u043e\u0437\u0440\u0430\u0441\u0442\u0430\u0435\u0442. \u0422\u0430\u043a\u0430\u044f \u0430\u0442\u0430\u043a\u0430 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0435\u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043f\u043e\u0447\u0442\u043e\u0432\u044b\u0439 \u044f\u0449\u0438\u043a, […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-35174","post","type-post","status-publish","format-standard","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Zimbra a ochrana p\u0159ed mail bombingem | ProHoster","description":"Mail bombing je jednou z nejstar\u0161\u00edch forem kybernetick\u00fdch \u00fatok\u016f.","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/zimbra-i-zashhita-ot-mejl-bombinga","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Zimbra \u0438 \u0437\u0430\u0449\u0438\u0442\u0430 \u043e\u0442 \u043c\u0435\u0439\u043b-\u0431\u043e\u043c\u0431\u0438\u043d\u0433\u0430 | ProHoster","og:description":"\u041c\u0435\u0439\u043b-\u0431\u043e\u043c\u0431\u0438\u043d\u0433 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043e\u0434\u043d\u043e\u0439 \u0438\u0437 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0441\u0442\u0430\u0440\u044b\u0445 \u0440\u0430\u0437\u043d\u043e\u0432\u0438\u0434\u043d\u043e\u0441\u0442\u0435\u0439 \u043a\u0438\u0431\u0435\u0440-\u0430\u0442\u0430\u043a.","og:url":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/zimbra-i-zashhita-ot-mejl-bombinga","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:02:43+00:00","article:modified_time":"2019-10-31T19:02:43+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"35174","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 22:11:40","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 02:09:01","updated":"2026-01-21 22:11:40","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/35174","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=35174"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/35174\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=35174"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=35174"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=35174"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}