<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<p>I tend to set it to TRUE on all systems I install. Most customers
don't like it when their Webmailer appears in the search engines,
especially if it isn't always patched to the latest version, it
makes them uncomfortable. Good old security by obscurity. I can
understand this somewhat; OTOH is it pretty trivial to find Zimbra
installations anyway via eg. Shodan.</p>
<p><br>
</p>
<p>Setting this option will actually have the odd effect that Goodle
will find it anyway if you happen to hit the right terms but just
show no description (cf.
<a class="moz-txt-link-freetext" href="https://support.google.com/webmasters/answer/7489871?hl=en">https://support.google.com/webmasters/answer/7489871?hl=en</a>). An
alternate approach which hides the page better is</p>
<pre>zmprov mcf zimbraMailKeepOutWebCrawlers FALSE
zmprov mcf +zimbraResponseHeader "X-Robots-Tag: noindex"
zmmailboxdctl restart
</pre>
<p><br>
</p>
<p>Of course this won't help with people who search for Zimbra and
find some other installation and type in their password there. On
the contrary, this will make sure that they won't accidentally
find the right one.<br>
</p>
<p><br>
</p>
<p>Since historically Zimbra is more an ISP product it probably
makes sense to be able to search for it per default. Dunno, I
doubt that anybody will change the defaults so discussing this is
moot.<br>
</p>
<p><br>
</p>
<p>Cheers,</p>
<p>Malte<br>
</p>
<p><br>
</p>
<div class="moz-cite-prefix">On 21/03/2019 22:42, Barry de Graaff
wrote:<br>
</div>
<blockquote type="cite"
cite="mid:904319601.9061.1553204540379.JavaMail.zimbra@barrydegraaff.tk">
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
<div style="font-family: arial, helvetica, sans-serif; font-size:
12pt; color: #000000">
<div>
<style>p { margin: 0; }</style></div>
<div>That is nice... do you think it should be default?</div>
<div><br>
</div>
<div data-marker="__SIG_PRE__">Kind regards, <br>
<br>
Barry de Graaff<br>
Zeta Alliance <br>
Co-founder & Developer<br>
zetalliance.org | github.com/Zimbra-Community<br>
<br>
Signal: +31 617 220 227<br>
Fingerprint: 97f4694a1d9aedad012533db725ddd156d36a2d0</div>
<div><br>
</div>
<hr id="zwchr" data-marker="__DIVIDER__">
<div data-marker="__HEADERS__"><b>From: </b>"Malte S. Stretz"
<a class="moz-txt-link-rfc2396E" href="mailto:mss@msquadrat.de"><mss@msquadrat.de></a><br>
<b>To: </b><a class="moz-txt-link-abbreviated" href="mailto:users@lists.zetalliance.org">users@lists.zetalliance.org</a><br>
<b>Sent: </b>Thursday, 21 March, 2019 21:54:54<br>
<b>Subject: </b>Re: [Users] Zimbra login page is indexed in
search engines by default, is this good or bad?<br>
</div>
<div><br>
</div>
<div data-marker="__QUOTED_TEXT__">
<pre>zmprov mcf zimbraMailKeepOutWebCrawlers TRUE</pre>
<pre>zmmailboxdctl restart</pre>
<p><br>
</p>
<div class="moz-cite-prefix">On 21/03/2019 21:07, Randy Leiker
wrote:<br>
</div>
<blockquote
cite="mid:385026923.1094.1553198871169.JavaMail.%22Randy%20Leiker%22@RandysPC">
<div style="font-family: arial,helvetica,sans-serif;
font-size: 12pt; color: #000000"><font face="arial,
helvetica, sans-serif">Hi Barry,</font>
<div style="color: rgb(0, 0, 0);"><font face="arial,
helvetica, sans-serif"><br>
</font></div>
<div style="color: rgb(0, 0, 0);"><font face="arial,
helvetica, sans-serif">I've seen our own customers do
the same thing at times, by Googling "Zimbra" and
trying to login to whichever site they find in the
search results.</font></div>
<div style="color: rgb(0, 0, 0);"><font face="arial,
helvetica, sans-serif"><br>
</font></div>
<div><font face="arial, helvetica, sans-serif">On
Synacor's end, it would be trivial to start
discouraging search engine spiders by including a meta
tag like this on the login page:</font></div>
<div>
<pre id="line1"><font face="arial, helvetica, sans-serif"><<span class="start-tag">meta</span> <span class="attribute-name">name</span>="<a class="attribute-value" moz-do-not-send="true">robots</a>" <span class="attribute-name">content</span>="<a class="attribute-value" moz-do-not-send="true">noindex,nofollow,noarchive,nosnippet,noimageindex</a>" /></font></pre>
<div><font face="arial, helvetica, sans-serif">Combined
with adding a robots.txt file in the web site root
disallowing indexing of any content on the site,
that would at least start reducing the problem
gradually as Zimbra admins upgrade over time. But,
of course, it doesn't do anything to help with the
current situation.</font></div>
<br>
<div style="color: rgb(0, 0, 0); font-family: arial,
helvetica, sans-serif; font-size: 12pt;"><span></span>
<div>
<div>
<div><span style="color: rgb(255, 102, 0);
font-weight: bold;"><br>
Randy Leiker (</span><span style="font-weight:
bold;"> <span style="color: rgb(51, 51, 255);
background-color: rgb(255, 255, 255);"><a
class="moz-txt-link-abbreviated"
href="mailto:randy@skywaynetworks.com"
target="_blank" moz-do-not-send="true">randy@skywaynetworks.com</a></span>
<span style="color: rgb(255, 102, 0);">)</span></span><br>
<span style="color: rgb(0, 0, 153);">Skyway
Networks, LLC</span><br>
<span style="color: rgb(0, 0, 153);">1.800.538.5334</span>
<span style="color: rgb(255, 102, 0);">/</span>
<span style="color: rgb(0, 0, 153);">913.663.3900
Ext. 100</span><br>
<span style="color: rgb(0, 0, 153);"></span><a
href="http://www.skywaynetworks.com"
target="_blank" moz-do-not-send="true">https://skywaynetworks.com</a><br>
</div>
</div>
</div>
<span></span><br>
</div>
<hr id="zwchr" style="color: rgb(0, 0, 0); font-family:
arial, helvetica, sans-serif; font-size: 12pt;">
<div style="color: rgb(0, 0, 0); font-family: Helvetica,
Arial, sans-serif; font-size: 12pt; font-weight:
normal; font-style: normal; text-decoration: none;"><b>From:
</b>"Info Zeta Alliance" <a
class="moz-txt-link-rfc2396E"
href="mailto:info@zetalliance.org" target="_blank"
moz-do-not-send="true"><info@zetalliance.org></a><br>
<b>To: </b><a class="moz-txt-link-abbreviated"
href="mailto:users@lists.zetalliance.org"
target="_blank" moz-do-not-send="true">users@lists.zetalliance.org</a><br>
<b>Sent: </b>Thursday, March 21, 2019 2:42:02 PM<br>
<b>Subject: </b>[Users] Zimbra login page is indexed
in search engines by default, is this good or bad?<br>
<br>
<div style="font-family: arial, helvetica, sans-serif;
font-size: 12pt; color: #000000">
<div>Hello All,</div>
<div><br>
</div>
<div>Zimbra login page is indexed in search engines
by default, is this good or bad?<br>
</div>
<div><br>
</div>
<div>I see a lot of spammers taking advantage of
this, trying to trick people. By referencing</div>
<div>to the domain and found email addresses online.</div>
<div><br>
</div>
<div>Also, I see end users that just google Zimbra
and try to log-on on the first hit found,</div>
<div>yes I know...</div>
<div><br>
</div>
<div>But what is the use for indexing the login page
really? Do you think the default </div>
<div>behaviour (indexing) is good?</div>
<div><br>
</div>
<div>Please let me know!</div>
<div><br>
</div>
<div><br>
</div>
<div>Kind regards, <br>
<br>
Barry de Graaff<br>
Zeta Alliance <br>
Co-founder & Developer<br>
zetalliance.org | github.com/Zimbra-Community<br>
<br>
Signal: +31 617 220 227<br>
Fingerprint:
97f4694a1d9aedad012533db725ddd156d36a2d0</div>
</div>
</div>
<br>
</div>
</div>
</blockquote>
<br>
</div>
</div>
</blockquote>
</body>
</html>