Top 10 Cybersecurity Mistakes That Put You at Risk (And How to Fix Them)

-
Image
In today’s hyperconnected world, our personal data is more valuable than ever. Every login, every online purchase, and every file we store on the cloud carries digital fingerprints. Cybercriminals know this, and they are constantly improving their methods to exploit our mistakes. The majority of hacks don’t happen because systems are unbreakable — they happen because people make avoidable cybersecurity mistakes. In this article, we reveal the Top 10 Cybersecurity Mistakes That Put You at Risk , explain why they matter, and give you exact steps to protect yourself. 1. Using the Same Password Everywhere One of the most common — and dangerous — mistakes is reusing the same password across multiple websites. If just one website is breached, attackers can use that same password to access your: Email Social media accounts Banking apps Cloud storage This method is called credential stuffing . ✅ How to fix it: Create a unique password for each account. Use a pass...
Post a Comment

How to Install Zimbra Mail Server the correct way

-

 




Prerequisites 

  • OS: Ubuntu 22.04 LTS (64-bit)
  • RAM: 8 GB+ recommended.
  • CPU: 4 cores+.
  • Storage space – 50 GB+
  • Hostname: must resolve properly (ex: mail.example.com)
  • Ports open: 25, 80, 443, 7071, 465, 587

DNS Setup

You need to create few records for domain to get started. They are as follows.

TypeHostValue
A@Your IP address
AmailYour IP address
MX@mail.yourdomain.com 10
TXT@v=spf1 a mx ip4:138.68.14.182 ~all
TXT_dmarcv=DMARC1; p=quarantine; rua=mailto:admin@cybertech-arena.com; ruf=mailto:admin@cybertech-arena.com; fo=1 Auto


Wait 5-15 minutes for propagation.

Set Hostname and Hosts File on VPS

SSH into your Contabo VPS:

ssh root@your_vps_ip

Set the hostname:

hostnamectl set-hostname mail.yourdomain.com

Replace mail.yourdomain.com  with your domain.

Edit /etc/hosts:

nano /etc/hosts

Add your VPS IP and hostname:

123.45.67.89   mail.yourdomain.com mail

Save (CTRL+O → ENTER → CTRL+X).
Test:

hostname -f

Should print:

mail.yourdomain.com

Install System Dependencies

apt update && apt upgrade -y
apt install net-tools wget curl unzip tar dnsutils -y

Download Zimbra OSE 10.1.4 (Community Build)

cd /opt
wget https://github.com/maldua/zimbra-foss-builder/releases/download/zimbra-foss-build-ubuntu-22.04/10.1.4/zcs-10.1.4_GA_4200000.UBUNTU22_64.20241224171952.tgz

Extract and enter folder:

tar xvf zcs-10.1.4_GA_4200000.UBUNTU22_64.20241224171952.tgz
cd zcs-10.1.4_GA_4200000.UBUNTU22_64.20241224171952
Run the Installer               

sudo ./install.sh

During installation:

  • Accept license → Y

  • Enable components:

zimbra-ldap
zimbra-logger
zimbra-mta
zimbra-snmp
zimbra-store
zimbra-apache
zimbra-spell
zimbra-memcached
zimbra-proxy

When asked:

The system will be modified. Continue? [N] Y

choose Y

  • Set Admin password when prompted.

  • Verify domain: it should detect mail.yourdomain.com.

    • When finished, installer outputs:
    Configuration complete - press return to exit

  • Start Zimbra and Check Services

    • su - zimbra
zmcontrol status

    Access Zimbra Admin Portal & Web Mail Client

    To access the Zimbra Admin Portal, type below URL in Web Browser

    https://mail.yourdomain.com:7071


    To access Zimbra Mail Web Client, type the following URL in the browser

    https://mail.yourdomain.com

    Enter Your Username And PassWord




    Note: For both the URLs we can use user name as “admin” and password that we set during the installation

    Create User Mailboxes (via CLI)

    su - zimbra
zmprov ca user1@example.com strongpassword displayName "User One"
zmprov ca user2@example.com strongpassword displayName "User Two"

    Verify:

    zmprov -l gaa

    Setting Up DKIM (DomainKeys Identified Mail)

     su - zimbrazmprov ms mail.yourdomain.com zimbraDomainKeyStatus enabled
zmprov ms mail.yourdomain.com zimbraDomainKeySelector selector1
zmprov ms mail.yourdomain.com zimbraDomainKeyBits 1024
zmprov ms mail.yourdomain.com zimbraDomainKeyAlgo rsa
zmprov ms mail.yourdomain.com zimbraDomainKeyMethod rsa
zmprov ms mail.yourdomain.com zimbraDomainKeyPrefix dkim

    Run this command to verify:

    zmprov gms mail.yourdomain.com
    You should see DKIM keys enabled.
    Add DKIM DNS Record:
    Zimbra will automatically generate the DKIM DNS entry for you. You will need to add the generated DKIM TXT record to your DNS settings.

    You can retrieve the DKIM public key:
    cat /opt/zimbra/dkim/domainkeys/mail.yourdomain.com
    The public key will look something like:
    v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A...
    Add this as a TXT record in your Namecheap DNS settings:

    Verify DKIM:
    After adding the DKIM record, you can verify the setup by sending an email to an external address (like Gmail) and checking if the email passes the DKIM check.



    Comments

    Post a Comment

    Popular posts from this blog

    How to build your SMTP server

    -
    Image
    This are commands used on the video for ease of following up  sudo hostnamectl set-hostname mail.notuuk.com sudo nano /etc/hosts    ( navigate to the last line and add ur domain mail.yourdomain.com)  ctrl x     y   enter hostname sh <(curl https://cyberpanel.net/install.sh || wget -O - https://cyberpanel.net/install.sh) RECORDS TO ADD type: A  name: @    ipv4: IP off proxy status ttl: auto type: A  name: mail    ipv4: IP off proxy status ttl: auto type: A  name: www    ipv4: IP off proxy status ttl: auto type: A  name: www.mailserver    ipv4: IP off proxy status ttl: auto type: A  name: www.mail    ipv4: IP off proxy status ttl: auto type: mx  name: @    mailserver: mail.yourdomain.com IP off proxy status ttl: auto type: txt type: txt
    Read more

    How to Install and Configure Evilginx2 on a Digital Ocean VPS [2025 Guide]

    -
    Image
      Introduction: Evilginx2 is a powerful phishing framework often used by red teamers and ethical hackers to simulate advanced man-in-the-middle attacks. In this guide, I’ll show you how to install and configure Evilginx2 on a DigitalOcean VPS from scratch. ⚠️ Disclaimer: This guide is for educational purposes only. Do not use Evilginx without proper authorization.   Prerequisites A registered domain name A DigitalOcean VPS (Ubuntu 20.04 or later) Basic Linux terminal knowledge An SSH client Step 1: Set Up Your VPS Create a Droplet on DigitalOcean (Ubuntu 20.04 LTS or later version).  SSH into your VPS:  ssh root@your_server_ip Step 2: Update & Install Dependencies apt update && apt upgrade -y apt install wget curl golang unzip nano -y Step 3: Go to google and search for evilginix        Go to releases--- choose the latest for Linux        Right click and copy link address       wget...
    Read more

    Evil-ginx On Local host

    -
    Image
      Evilginx is a type of tool known as a reverse-proxy phishing framework. Conceptually, it sits between a user and a real website and relays traffic while capturing session data and credentials. Because of its ability to intercept two-factor authentication tokens and session cookies, tools in this class are highly effective for targeted credential theft — and correspondingly, highly dangerous. That double-edged nature is why people in cybersecurity treat Evilginx-style tools carefully. On one hand, security professionals study them to understand attack mechanics so they can build defenses and detect abuse.  If your interest is legitimate — for example, you want to learn how attackers operate so you can defend systems — there are responsible ways to do that: Use Trusted Learning Platforms: Environments such as TryHackMe, Hack The Box, and OWASP Juice Shop let you practice offensive and defensive techniques legally in isolated, gamified challenges. They teach how attacks w...
    Read more