From d29ffc759dc44f349a44006a95cef2934ab4fb16 Mon Sep 17 00:00:00 2001
From: Seth Hall <seth@icir.org>
Date: Fri, 10 Jun 2011 14:09:26 -0400
Subject: [PATCH] Added Zimbra to the webmail detection over SMTP.

---
 policy/protocols/smtp/webmail-ident.bro | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/policy/protocols/smtp/webmail-ident.bro b/policy/protocols/smtp/webmail-ident.bro
index d5d563dfb2..bf4af0010d 100644
--- a/policy/protocols/smtp/webmail-ident.bro
+++ b/policy/protocols/smtp/webmail-ident.bro
@@ -26,7 +26,8 @@ export {
 	                   | /^Sun Java\(tm\) System Messenger Express/
 	                   | /\(IMP\)/  # Horde Internet Messaging Program
 	                   | /^SquirrelMail/
-	                   | /^NeoMail/ &redef;
+	                   | /^NeoMail/ 
+	                   | /ZimbraWebClient/ &redef;
 }