The Tool Desk
Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
Antihost offers Linux VPS plans with full root access, unlimited traffic on a 1 Gbps port and a 14-day free trial.
Install Zimbra on a clean, dedicated Ubuntu LTS VPS whose release is supported by the Zimbra Daffodil build you select. Before running the installer, set a permanent fully qualified hostname, publish working A and MX records, prepare the firewall, disable conflicting services and AppArmor, enable time synchronisation, and obtain the license required by your Zimbra edition.
Zimbra is not a package you safely add to a busy web or database server. Its installer changes global system configuration and installs a complete mail collaboration stack. Treat DNS, licensing, TLS and port policy as part of the installation, not as finishing tasks.
Do these 3 things before closing this tab:
1Fix the driver behind crashes, sound loss and screen glitches2Clear out junk files and repair common Windows errors3Scan for outdated or missing drivers - takes under a minuteChoose the Zimbra and Ubuntu versions first
Start at Zimbra’s current download matrix and select one exact release before provisioning the VPS. The Daffodil 10.1.0 GA download page lists 64-bit images for Ubuntu 24.04, 22.04, 20.04 and 18.04. The single-server installation guide’s support table is narrower and lists Ubuntu 18.04, 20.04 and 22.04. That difference matters: use the operating-system images explicitly supported by the documentation for the release and installation method you intend to run, rather than assuming every image in the download page applies to every guide.
| Zimbra information | What is established | Installation implication |
|---|---|---|
| Daffodil 10.1.0 GA | The download matrix lists 64-bit Ubuntu 24.04, 22.04, 20.04 and 18.04 images. | Confirm that your selected package supports the exact Ubuntu image before creating the VPS. |
| Single-server guide | The guide’s system table lists Ubuntu 18.04, 20.04 and 22.04. | If you are following that guide verbatim, choose one of those releases unless the release documentation says otherwise. |
| License | Daffodil 10.1 uses the new licensing system; older-edition licenses do not work with 10.1. | Obtain and have the matching license or key information ready before configuration. |
Zimbra documentation states that Zimbra Daffodil (v10) cannot be installed without a license. A trial, subscription or other entitlement must therefore be available during the menu-driven configuration; an older license file is not a substitute.
#1 Best Overall
- Powerful Turbo Fan:CAGIWIRU Electric Air Duster have reached speed up to 130000RPM,Can efficient remove dust and debris.With LED light and Three Adjustable Speed to meet with different cleaning tasks.
- With Attached USB C Fasting Charging cable.Charing 3 hours,Enjoy up to 240 minutes of use on the lowest setting, For third speed can use for 25mins.with four charging options to meet with your needs.
- Wide Application:Upgraded attached 5 different nozzles,making it suitable for a variety of scenes, such as car,pet, pc, keyboards, and other electronic devices. It also serves for office and home clean duster.
- Handy Design & Portable:Cordless air duster electric nozzle is Light weight and small size, design and comfortable to hold and space saving, convenient to carry around. You can put it in your room or inside the car without taking up space.
- Warranty & Support: Our Electric air duster comes with 5 years warranty and 24/7 customer service. During this period, if you have any questions,pls kindly feel free to contact us.
Plan the VPS before you order it
Use a dedicated host
Zimbra Collaboration is designed to be the only application suite installed on its server. Provision a full default Ubuntu Server installation, apply tested security updates, and reserve the machine for Zimbra. Do not share it with a control panel, web site, database, LDAP service, another mail transfer agent or a separate web server.
The installer makes global changes. Remove or disable an existing MTA, web server, database and LDAP service before starting. Do not create a zimbra Unix user yourself; the installer creates that account with the permissions it needs.
Quick wins for a faster PC:
Scan for outdated or missing drivers - takes under a minuteDriver Scan →Clear out junk files and repair common Windows errorsFree Scan →Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Capacity is workload-dependent
Zimbra’s generic single-server documentation does not publish one universal CPU, RAM or disk minimum for every VPS workload. Mailbox count, attachment volume, indexing, retention, antivirus activity and log growth determine the practical capacity. Do not turn an invented minimum into a promise. Instead, estimate mailbox and attachment growth, leave room for indexes and updates, and select storage with enough capacity for backups and recovery copies.
Prefer SSD-backed storage and a provider that exposes snapshots or independent backups. A snapshot is useful for rollback, but it is not a replacement for an application-consistent mail backup. Keep at least one recovery copy outside the VPS.
Rank #2
- Screen Cleaner is Your Screen’s New Bestfriend! - EVEO is proud to present a screen cleaner that’s perfectly suited for your TV. Meet your new screen cleaner, computer screen cleaner, laptop cleaner, iPad cleaner, Macbook,tv cleaner or any other electronic device. Our screen cleaner spray and wipe along with the included plush microfiber cloth, easily removes dust, fingerprints & other smudges on the screen’s surface. Clean effectively for a streak-free screen
- Gentle on your Screens - Our screen cleaner spray and wipes is compatible to be used even for the most sensitive LCD, LED, CRT, and OLED screens in proper use. Be at ease knowing that this product is compatible with all the major brands: LG, SONY, Samsung, Sharp, iPad, iPhone, Android screens, Kindle, PC monitors - we’ve got you covered! Can be used as LCD screen cleaner, tv cleaner, smart tv screen cleaner, and more
- Premium Super Soft Plush Microfiber Cloth - Included in this efficient screen cleaning kit. This screen cleaner spray and wipe has our signature plush microfiber cloth specially designed to comply with screens and monitors and leave them streak-free. Has been shown to effectively absorbs stubborn stains, zero streaks, and no fiber shedding. Always use this together with our screen cleaner for the best results
- Easy-to-Use Screen Cleaner Kit + microfiber cleaning cloth - The EVEO Screen Cleaning Kit will easily be your new favorite tool when it comes to taking care of the things you love most, quick and easy solution for a streak-free screen. Simply screw on the sprayer gun on the screen cleaner bottle. Spray the cleaning liquid onto the microfiber cloth, then wipe the screen until desired cleanliness & shine is achieved.
- Quality Screen Care Kit Worth Purchasing - Enjoy a convenient Screen Cleaner anytime, anywhere you need it. Your satisfaction is our top priority. We stand behind the quality of our products and that’s why, you shouldn’t be worrying at all. We manufacture the Best Screen Cleaner. and can be used for laptop cleaning kit, laptop screen cleaner, tv screen cleaner for smart tv. MacBook screen cleaner, monitor cleaner or screen cleaner spray for electronic devices with microfiber cleaning cloth
Check provider capabilities
| Capability | Why it matters | Question to resolve before deployment |
|---|---|---|
| 64-bit Ubuntu support | The Zimbra package and operating-system combination must match the selected release. | Is the exact supported Ubuntu LTS image available as 64-bit? |
| Static public IPv4 | DNS A and MX records and stable mail reputation depend on a persistent address. | Is the address dedicated, and can it be retained during a rebuild? |
| Reverse DNS (PTR) | Many receiving systems evaluate the identity associated with a sending address. | Can you set the PTR to the mail host’s FQDN? |
| SMTP port 25 | Internet mail delivery uses port 25. | Is outbound port 25 open by default, and can it be requested if blocked? |
| Firewall or security groups | You need precise control over public mail and HTTPS ports while keeping internal ports private. | Can rules be applied independently for IPv4 and IPv6? |
| Storage and recovery | Indexes, attachments, logs and backups grow over time. | What are the SSD capacity, IOPS, snapshot and backup options? |
| Time and network behavior | NTP, IPv6 routing and abuse policies affect reliable mail operation. | Is NTP available, is IPv6 enabled consistently, and are mail workloads permitted? |
Prepare the hostname and operating system
- Install a full Ubuntu Server image. Use the exact LTS release approved for your Zimbra package. Avoid a minimal image that omits expected system utilities unless you know how to add them.
- Patch the system. From an administrative SSH session, run
sudo apt update sudo apt full-upgradeReboot if the kernel or core services were updated, then reconnect and confirm that the system is healthy.
- Set the final FQDN. Replace the example name with the host you will publish in DNS:
sudo hostnamectl set-hostname mail.example.com hostname --fqdnThe second command must return the same fully qualified name. Avoid changing the hostname after Zimbra is configured.
- Install netcat. Zimbra’s prerequisite checks require
nc. On Ubuntu, install the packaged implementation withsudo apt install netcat-openbsdIf the installer reports that
ncis missing, resolve that before continuing. - Disable AppArmor and verify it is stopped. The installation instructions require AppArmor to be disabled. On a standard Ubuntu system you can use
sudo systemctl disable --now apparmor systemctl is-active apparmorThe status command should report that the service is not active. Confirm your organisation’s security policy before making this change, and do not leave a conflicting AppArmor profile silently blocking Zimbra services.
- Enable network time synchronisation. Mail timestamps, certificates and authentication depend on a correct clock. Enable NTP with
sudo timedatectl set-ntp true timedatectl statusUse the provider’s documented NTP service or another reliable source and keep it scheduled, not just corrected once.
- Confirm SSH access and recovery access. Keep a second administrative session open while installing. Make sure you can use the provider’s console if a firewall change cuts off SSH.
Publish DNS before installing Zimbra
DNS is a functional prerequisite for mail flow. Zimbra checks MX information when you create a domain, and its documentation requires both A and MX records for sending and receiving Internet mail.
| Record | Example | Purpose |
|---|---|---|
| A | mail.example.com A 203.0.113.25 |
Maps the mail host name to the VPS public IPv4 address. |
| MX | example.com MX 10 mail.example.com. |
Directs incoming mail for the domain to the Zimbra host. The target should resolve through the A record. |
| CAA | example.com CAA 0 issue "letsencrypt.org" |
Authorises Let’s Encrypt to issue a certificate when you use the documented certificate procedure. |
Use your DNS provider’s actual record editor; the values above are examples of the required shape, not addresses to copy. Allow for DNS TTL and propagation before you start the installer. Check from outside the VPS with your provider’s DNS tools or commands such as dig A mail.example.com and dig MX example.com, and verify that the answers are publicly visible.
An SMTP relay can be configured if DNS lookups are disabled in a particular environment, but that does not remove the MX requirement for Internet reception. Even with a relay host, an MX record is still required when the Zimbra server is expected to receive mail from the Internet.
Configure the firewall deliberately
Open only the protocols you intend to offer. Apply equivalent rules in both the VPS provider’s security group and the Ubuntu firewall if both are present. Keep Zimbra’s internal service ports private to the host or trusted management network; the public defaults below are the externally relevant protocols documented for Zimbra.
Rank #3
- 【Large size】：Measuring 800 x 300 mm/ 31. 5×12 inches, which is wider and taller than others. Large mouse pad can perfectly fit your keyboard and mouse of any size, and there is also ample space for peripherals such as phones, tablets, etc.
- 【LED backlight mouse pad】：Blade Hawks RGB mouse pad provides 7 static modes and 7 dynamic modes will give you the options you are looking for. Power-off memory function remembers the last lighting mode you selected. The super glow fiber Chroma will give you a colorful gaming setup that you want.
- 【Anti-slip rubber base】：Made from Natural rubber, this gaming mousepad will firmly grip your desktop, allowing you to enjoy the ultimate precision in the games you are most passionate about. It also comes with a texture that enhances this ability even further.
- 【Smooth and waterproof surface】: Micro-textured cloth surface, for extremely precise mouse control and a smooth movement. When liquid splashes on the gaming mouse pad, it forms water droplets and slides down. Will not delay your work or gameplay.
- 【Plug and play】: This mouse and keyboard pad is powered by USB, plug and play, no driver required. One button control light modes. Press one time to change the lighting mode, press twice to change the brightness, press and hold about 3 seconds turn ON/OFF.
| Port | Protocol | Typical use | Exposure decision |
|---|---|---|---|
| 25 | SMTP | Server-to-server mail transfer and inbound mail. | Required for a server receiving Internet mail; confirm that the provider permits it. |
| 80 | HTTP | Web access and temporary Let’s Encrypt HTTP validation. | Allow during certificate issuance; keep it only if your web policy requires it. |
| 110 | POP3 | Unencrypted POP3 retrieval. | Open only if you deliberately support POP3; prefer encrypted access. |
| 143 | IMAP | Unencrypted IMAP retrieval or STARTTLS negotiation. | Open only for clients that need it and enforce TLS in the service policy. |
| 443 | HTTPS | Webmail and secure administration/client access. | Normally public for web access, protected by strong credentials and TLS. |
| 465 | SMTPS | Implicit-TLS message submission. | Open if your client policy uses this submission method. |
| 587 | Submission | Authenticated client message submission. | Open for mail clients and enforce authentication and encryption. |
Do not expose LDAP, database, message-store or other internal listener ports to the Internet simply because a scan shows them. Restrict SSH to administration addresses where practical, and account for IPv6 separately rather than assuming an IPv4 rule protects both stacks.
Download and run the Zimbra installer
- Select the matching package and license. Download the Zimbra Daffodil package that corresponds to your Ubuntu release and CPU architecture. For Daffodil 10.1, use the new licensing system; an older-edition license will fail validation.
- Transfer the archive to the VPS. Download it on the installation computer, verify the package you selected, and copy it to a temporary administrative directory, for example:
scp zcs-package-name.tgz root@mail.example.com:/root/Use the actual archive name supplied by Zimbra. Keep a copy of the release notes and license information with your deployment records.
- Extract the archive. On the VPS, unpack the file in a temporary location and enter the directory created by the archive. Do not mix files from different Zimbra releases.
- Run the supplied install script. Start the script provided in the package, normally named
install.sh, with administrative privileges:sudo ./install.shThe script checks for prerequisite Zimbra packages, installs the components you select and opens a menu-driven configuration. Read each warning; a detected web server, MTA, database, LDAP service or incompatible package is a reason to stop and correct the host rather than force the installation.
- Select the component set. Choose only the Zimbra components required for this server, accepting the package’s dependency checks. The installer creates the
zimbraaccount; do not pre-create or repurpose that user. - Set the logical hostname and domain. Enter the same FQDN returned by
hostname --fqdn, such asmail.example.com, and the mail domain, such asexample.com. If the installer reports an MX or hostname mismatch, stop and fix DNS or the system hostname before proceeding. - Set the administrator credential. Choose a unique, long administrator password and record it in an approved password manager. Do not reuse the VPS, SSH or DNS password.
- Enter license and key information. Provide the Daffodil 10.1 license or key data when requested. Installation cannot be completed without a valid license for the selected release.
- Review and commit the configuration. Confirm the hostname, domain, component list, password and licensing values in the final summary. Allow the installer to finish and start the services; do not interrupt package configuration halfway through.
Verify the new server before creating mailboxes
First confirm that the operating system and Zimbra agree on the name:
hostname --fqdn
zmhostnameBoth should return the same stable FQDN. Check that the expected listeners exist and that no unintended public listener is present:
sudo ss -tulpnFrom an external network, test DNS resolution for the A and MX records and test only the ports you elected to publish. Open the HTTPS administration or webmail endpoint and confirm that the browser reaches Zimbra over HTTPS. A reachable page alone is not proof of working mail flow: send a controlled test message to an external account and reply to it, then inspect the timestamps and headers for the expected host identity.
Rank #4
- 【Softer and More Comfortable】Vaydeer wrist rest has unique diamond pattern, which is the combination of softness and aesthetics. The materials of wrist rest are improved into higher quality memory foam and covered with silky smooth lycra. The computer wrist rest makes you as comfortable and cushiony as like rest your wrists on clouds.
- 【Ergonomic Wrist Saver】The wrist rests for keyboard and mouse comes with a 17.32×3.15×0.83 inch keyboard wrist pad and a 5.94×3.15×0.83 inch mouse wrist support. Based on ergonomic design, the unique concave shape is the perfect fit for your wrist joints. The wrist rest pad fits most computer keyboards and laptops, improve hand and wrist posture, release your wrist and arm stress.
- 【Non-Slip Rubber Bottom】Featuring an anti-skid silicone base on the bottom, this wrist keyboard support stays firmly in place on your desk, preventing the padding from sliding around, ensuring stable and consistent wrist support during extended computer sessions.
- 【Better Experience & Pain Relief】Our keyboard arm rest is beneficial to alleviate the soreness caused by direct contact and friction between your arm and a hard desk surface, reducing the risk of wrist fatigue or carpal tunnel. The soft texture of memory foam can evenly distribute the pressure around your wrists and provide good support with just enough give.
- 【Helpful in Multiple Scenarios】Whether you're working, studying, writing, typing, gaming, this keyboard and mouse rest combo is an essential accessory to add comfort and support to your hands and wrists. It’s also a great gift for men, women, family, friend, coworker, gamer, teacher, etc.
Create the first domain and user accounts only after the license, DNS and HTTPS checks pass. Start with one test mailbox, verify login, inbound delivery, outbound submission and attachment handling, and then apply your normal account-provisioning process.
Enable HTTPS with Let’s Encrypt
The documented Ubuntu procedure uses Certbot and a free Let’s Encrypt certificate. It depends on a correct FQDN, public DNS and temporary access to port 80.
- Confirm the name and CAA policy. Verify that
zmhostnameequalshostname --fqdn, that the A record points to this VPS, and that the DNS CAA record permitsletsencrypt.org. - Install Certbot. Install the Ubuntu Certbot package using the supported package source for your release. Keep the certificate’s renewal account and configuration under administrative control.
- Make port 80 available for standalone validation. The standalone challenge server must bind to port 80. If Zimbra is already listening there, follow the Zimbra procedure to change the proxy or mail mode temporarily before requesting the certificate; do not simply kill an unknown process.
- Request the certificate. A typical standalone request is
sudo certbot certonly --standalone -d mail.example.comUse the exact host name in the certificate and complete the email and terms prompts.
- Deploy the certificate into Zimbra. Copy or link the issued certificate, chain and private key using the Zimbra certificate-deployment procedure for your Daffodil release. Validate the chain and restart or reload the affected Zimbra services as instructed. Protect the private key and do not place it in a world-readable directory.
- Restore normal proxy and firewall settings. If you changed Zimbra’s proxy or mail mode for validation, return it to the production setting. Keep port 80 open only when it serves a deliberate redirect or is required by your renewal design.
- Test renewal. Run Certbot’s renewal simulation after deployment and schedule renewal monitoring. A certificate that works today but cannot renew will eventually interrupt webmail and client connections.
Troubleshoot the common installation failures
The installer says the hostname or MX is wrong
Check the value returned by hostname --fqdn, the value returned by zmhostname, the public A record for the mail host and the MX target for the domain. Correct the authoritative DNS zone and local hostname, wait for the new answers to propagate, and rerun the check. Do not bypass the warning by entering a short hostname.
Port 25 is blocked
Some VPS networks block outbound SMTP by default. Ask the provider to remove the restriction or use an authorised relay, and document whether inbound port 25 is also filtered. A relay can handle outbound delivery, but it does not remove the MX requirement when this server receives Internet mail.
Best Value
- 【No Drill Mounted】Cable management tray can be assembled in as little as 3 minutes or less-simply. Side clips easily clampe the edge of desk, pass through the holes on the sides, and secure excess cables with baskets. Desk cable management supports inward or outward installation to meet your needs in different scenarios, and provides you with great convenience when collecting and organizing wires.
- 【Rubber Pad Protects Desk】Wire organizer under desk built-in soft rubber pads on the clamp protect your desk from scratches, so you will not damage your furniture or office.
- 【Sturdy and Beautiful】Cord management under desk is made of high-quality carbon steel and holds about 15 lbs. The wire basket has 2 holes on each side of the tray to enable your cables to pass freely. Cable baskets are suitable for desk thickness use from 0.4" to 2.4".
- 【Space Saving & Keep Organized】Desk cable management tray holds all your power cords, outlet strips, USB hubs and computer transformers hidden from your feet, and the data cables will not enter the vacuum cleaner to keep your desk clean and tidy. Desk wire organizer is also suitable for use in the kitchen and outdoors.
- 【Reduce Safety Risks】Cable tray under desk keeps all plugs away from your kids, no more worry about tripping. Using 2 holes wire tray saves extra space, helps you easily cabling and wire protection. The mesh design is not easy to accumulate dust, but avoids safety accidents caused by messy wires.
An existing service conflicts with Zimbra
List active services and stop or remove the conflicting web server, MTA, database or LDAP service. Zimbra is intended to be the only application suite on the host. Re-run the prerequisite checks after the cleanup rather than forcing component installation over an existing stack.
Recommended Free Tools
AppArmor or a security profile blocks a service
Verify the AppArmor service is disabled and not running, as required by the installation procedure. If your organisation cannot permit that change, choose a deployment design that supports its security controls instead of leaving a partially confined Zimbra installation.
Let’s Encrypt cannot validate the name
Confirm public A-record resolution, the CAA record, the correct FQDN and inbound port 80. If Zimbra occupies port 80, change its proxy or mail mode according to the documented procedure before rerunning Certbot. Restore the normal mode and deploy the certificate only after validation succeeds.
The license is rejected
Confirm that the entitlement is for Daffodil 10.1 and uses the new licensing system. A license from an older Zimbra edition will not activate a 10.1 installation. Resolve the entitlement issue before provisioning domains or mailboxes.
Quick Recap
Operate the VPS safely after installation
- Keep Ubuntu and Zimbra patched on a planned schedule, testing updates before applying them to a production mail system.
- Monitor disk consumption, especially mailbox data, full-text indexes, attachments, logs and certificate files. Capacity planning must follow actual growth because no single universal VPS size fits every workload.
- Maintain independent backups and periodically perform a restore test. Provider snapshots are a useful additional rollback mechanism, not the only backup.
- Review firewall and security-group rules after every service change. Remove POP3 or unencrypted IMAP exposure if no client requires it.
- Monitor NTP status, DNS expiry, certificate renewal and SMTP port availability. A mail server can appear healthy locally while external delivery fails because of DNS or provider policy.
- Keep administrator credentials, license records and the exact Zimbra/Ubuntu version pair in a secure operations record.
Installation completion checklist
- The VPS runs a supported 64-bit Ubuntu LTS release for the chosen Zimbra package.
- The host is dedicated to Zimbra, patched and free of conflicting web, database, LDAP and MTA services.
- The final FQDN is stable, and
hostname --fqdnmatcheszmhostname. ncis installed, AppArmor is disabled and not active, SSH access works, and NTP is enabled.- Public A and MX records resolve correctly; a CAA record authorises Let’s Encrypt if you will use it.
- The Daffodil 10.1 license uses the new licensing system and was accepted by the installer.
- Only intended public ports are open: SMTP 25, HTTPS 443 and the selected submission, IMAP or POP services.
- HTTPS works with a deployed certificate, port 80 validation was completed, and renewal has been tested.
- A test mailbox can send and receive mail, and backups plus recovery access have been verified.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
