Apple 10.6 - Manuals

6 Contents 94 Appendix A: Command-Line Parameters for the serveradmin Tool and Default Mail Service Settings 128 Appendix B: Sample Sieve Scripts 131 Index

7 This guide provides a starting point for administering Mail Service using its advanced administration tools. It contains information about configuring Mail Service using Server Admin. Mail Service Administration might not be the only guide you need when administering Mail Service, but it gives you...

8 Preface About This Guide Using Onscreen Help You can get task instructions onscreen in Help Viewer while you’re managing Mac OS X Server v10.6. You can view help on a server or an administrator computer. (An administrator computer is a Mac OS X computer with Mac OS X Server v10.6 administration so...

Preface About This Guide 9 Document Road Map Mac OS X Server v10.6 has a suite of guides which can cover management of individual services. Each service may be dependent on other services for maximum utility. The road map below shows some related documentation that you may need to fully configure yo...

10 Preface About This Guide Viewing PDF Guides Onscreen While reading the PDF version of a guide onscreen: Show bookmarks to see the guide’s outline, and click a bookmark to jump to the  corresponding section.Search for a word or phrase to see a list of places where it appears in the document.  Cl...

Preface About This Guide 11 Getting Documentation Updates Periodically, Apple posts revised help pages and new editions of guides. Some revised help pages update the latest editions of the guides. To view new onscreen help topics for a server application, make sure your server or  administrator com...

12 Mail service in Mac OS X Server is comprised of many different components that work together to provide incoming and outgoing Mail service, mail filtering, and mailing lists. This chapter begins with a look at the standard protocols used for sending and receiving mail. Then it explains how Mail s...

Chapter 1 Understanding Mail Service 13 The following image gives an overview of how the components of Mac OS X Server Mail service interact: Mac OS X Server External Mail Transfer Agent (MTA) Native Mail User Agent (MUA) Web Browser Optional Mail Delivery Agent Mail Delivery Agent (Squirrel Mail) M...

Nearly every Postfix application can run with fixed low privileges and no ability to  change ID, run with root privileges, or run as any other user. Postfix uses the configuration files main.cf and master.cf in /etc/postfix/. When Server Admin modifies Postfix settings, it overwrites the main.cf fi...

Chapter 1 Understanding Mail Service 15 Where Mail Is Stored Mail is stored in an outgoing queue awaiting transfer to a remote server or in a local mail store accessible by local mail users. Outgoing Mail Location By default, outgoing mail messages are stored in the following spool directory on the ...

Local Delivery Agent Mail is transferred from incoming mail storage to the mail recipient’s inbox by a local delivery agent (LDA). The LDA handles local delivery, making mail accessible by the user’s mail application. Two protocols are available from the Mac OS X Server LDA: POP and IMAP. Mac OS X S...

Chapter 1 Understanding Mail Service 17 The IMAP user’s computer can ask the server for message headers, ask for the bodies of specified messages, or search for messages that meet certain criteria. These messages are downloaded as the user opens them. IMAP connections are persistent and remain open,...

Using Mailing Lists with Mail Service Mac OS X Server provides two types of mailing lists: A Mailman-based list where a single mail message is distributed to recipients who  have subscribed to the listA wiki-based list that allows you to send a single message that is copied to each  member of a Ma...

Chapter 1 Understanding Mail Service 19 Using Network Services with Mail Service Mail service makes use of network services to ensure delivery of mail. Before sending mail, your Mail service will probably have a DNS service determine the Internet Protocol (IP) address of the destination. The DNS ser...

20 This chapter explains the basic configuration of Mail service. You learn about tools used to manage Mail service and configuration steps to manually configure Mail service or make changes after using the Server Setup Assistant. Managing Mail Service This sections provides basic steps to set up Ma...

Chapter 2 Mail Service Setup 21 Using Mail Service Tools Mac OS X Server provides two primary applications and one primary command-line tool to help you set up and manage Mail service: Â Server Admin: Use to start, stop, configure, maintain, and monitor Mail service when you install Mac OS X Server....

How User Account Settings Affect Mail Service In addition to setting up Mail service as described in this chapter, you can also configure individual mail settings for anyone who has a user account on your server. For each user, you need to: Enable mail usage. Â Enter the DNS name or IP address of yo...

Chapter 2 Mail Service Setup 23 To start the mail configuration assistant: 1 In Server Admin, select a computer in the Servers list, then select Mail. If Mail is not listed beneath the server you selected, you must start Mail service. Click the + button at the bottom of the Servers lists, then selec...

6 Configure additional settings for Mail service. Additional settings that you can change affect how Mail service stores mail, limits junk mail, and handles undeliverable mail. See the following sections for instructions: “ Â Working with Mail Service Data Storage” on page 79 “ Â Limiting Junk Mail ...

Chapter 2 Mail Service Setup 25 Administering Mail Service You must turn on Mail service administration before you can use Server Admin to configure or enable it. This allows Server Admin to start, stop, and change settings for Mail service. To enable Mail Service for administration: 1 Open Server A...

Viewing Mail Service Settings from the Command Line To view Mail service configuration settings: $ sudo serveradmin settings mail To view a specific setting: $ sudo serveradmin settings mail: setting To view a group of settings: You can view a group of settings that have part of their names in commo...

Chapter 2 Mail Service Setup 27 Enabling SMTP Access SMTP is used for transferring mail between Mail service and sending mail from users’ mail clients. The SMTP Mail service stores outgoing mail in a queue until it has found the mail exchange server at the mail’s destination. Then it transfers the m...

Relaying SMTP Mail Through Another Server Rather than delivering outgoing mail to its destinations, your SMTP Mail service can relay outgoing mail to another server. Normally, when an SMTP server receives a message addressed to a remote recipient, it attempts to send that message to that server or t...

Chapter 2 Mail Service Setup 29 Saving Mail Messages for Monitoring and Archival Purposes You can configure Mail service to send a blind carbon copy (Bcc) of each incoming or outgoing message to a user or group. You might want to do this to monitor or archive messages. Senders and receivers of mail ...

Chapter 2 Mail Service Setup 31 Mail accepted for local delivery is queued until POP or IMAP services are enabled, delivery to /var/mail/ is enabled, or the message expires and a Non Delivery Receipt (NDR) is sent to the sender (after 72 hours by default). If delivery to /var/mail/ is enabled, users...

Restricted SMTP Relay and SMTP Authentication Interaction The following table describes the results of using restricted SMTP relay and SMTP authentication (see “SMTP Authentication” on page 64) in various combinations. SMTP requires authentication Restricted SMTP relay Result On Off All mail servers...

Chapter 2 Mail Service Setup 33 When adding to the list, Server Admin accepts a variety of notations. You can: Enter a single IP address or the network/netmask pattern, such as 192.168.40.0/21. Â Enter a host name, such as mail.example.com. Â Enter an Internet domain name, such as example.com. Â Rej...

3 If you want, log the packets to monitor the SMTP abuse. 4 Add more filters for the SMTP port to allow or deny access from other IP addresses or address ranges. For additional information about Firewall service, see Network Services Administration. Limiting Junk Mail and Viruses You can configure M...

Chapter 2 Mail Service Setup 35 Mail Service Filtering Mail service uses SpamAssassin (spamassassin.apache.org) to filter spam, or junk mail, from incoming mail messages. Mail service uses ClamAV (www.clamav.net) to detect viruses in mail messages. Both tools are managed within the Filters pane of M...

Chapter 2 Mail Service Setup 37 Training the junk mail filter without user interaction: You can also train the junk mail filter by giving it known junk and good mail messages. Accurate training requires a large sample, so a minimum of 200 messages of each type is advised. 1 Choose a mailbox of 200 m...

Enabling Virus Screening Before you can benefit from mail screening, it must be enabled. While enabling screening, you configure screening parameters. Mac OS X Server uses ClamAV (from www.clamav.net) to scan mail messages for viruses. If a suspected virus is found, you can deal with it several ways...

Chapter 2 Mail Service Setup 39 Server-Side Mail Rules Mac OS X Server supports Sieve scripts to process server-side mail rules. Sieve is an Internet standard mail filtering language for server-side filtering. Sieve scripts interact with incoming mail before final delivery. Sieve acts much like rule...

Managing Mail Quotas Mail quotas define how much disk space a user’s mail can use on the mail server. Quotas are set on a per-user basis in the user’s record in Workgroup Manager. Although you don’t set a mail user’s quota in Server Admin, you do manage quota enforcement and your server’s response t...

Chapter 2 Mail Service Setup 41 Viewing a User’s Quota Usage When a mail user is over quota, Server Admin (in the Mail> Maintenance > Accounts pane) reports a percent free which is negative. This percent is proportional to the amount the user is over quota. For example, suppose a user has a 2 ...

Mailing Lists Use this section to determine how to configure and manage mailing lists with built-in mailing list functionality of Mac OS X Server. Setting Up a Wiki-Based Mailing List To send mail messages to all members of a wiki group, you can enable server group mailing lists. Each member of the ...

Chapter 2 Mail Service Setup 43 About Mailman Some of Mailman’s main features include the following (from www.list.org/features.html): Web-based list administration for nearly all tasks, including list configuration, Â moderation (post approvals), and management of user accounts.Web-based subscribin...

Setting Up a Mailman Mailing List This section describes the process of setting up a Mailman mailing list. To do this, you enable the service, define a list name, and add subscribers to the list. When you create a mailing list, you must specify a master password that gives you control over all lists...

Chapter 2 Mail Service Setup 45 Creating a Mailing List Mailing lists distribute a single mail message to multiple recipients. After you create a mailing list, mail sent to the list’s address is sent to all subscribers. Mailing lists have list administrators who can change list membership and list f...

Setting a List’s Maximum Message Length You can set the maximum size message that the list accepts. You can disallow large attachments by setting a small maximum size, or you can allow file collaboration by setting an unlimited message size. You use Server Admin to set the maximum message length. To...

Chapter 2 Mail Service Setup 47 Customizing the Mailing List Welcome Message When subscribers join a mailing list, by assignment or self-subscription, they receive an automated welcome message. The message explains where to find the list archives and how to unsubscribe. You can customize it by addin...

Chapter 2 Mail Service Setup 49 3 Select Bounce Processing in the Configuration Categories link section. 4 Select the bounce processing options you want. Each option section has a link to a help page that explains the option setting. 5 Click Submit Your Changes. Designating a Mailing List as Private...

If the subscribers are users on the mail server, you can use the Users and Groups button to add a local groups to the list. 7 Choose from the following subscriber privileges: Â Users subscribed to list: This means the user will receive mail sent to the list address. Â Users may post to list: This me...

Chapter 2 Mail Service Setup 51 Designating a List Administrator When you set up a mailing list, you designate at least one user to administer it. This administrator has access to the other list settings pages for all lists on the server. You can designate more than one list administrator and change...

This is not the user’s login password. The master list password was set when mailing lists were enabled on the server. It was mailed to list administrators designated at that time. 3 Change list settings as desired. Designating a List Moderator When you set up a list, you can designate another user ...

Chapter 2 Mail Service Setup 53 Viewing Mailing List Archives If the list administrator has enabled message archiving, you can access and search the archived messages. To view a list’s archives: 1 In a web browser, enter the URL of the list information page. This is usually server.domain.tld/ mailma...

Chapter 2 Mail Service Setup 55 List Subscriber Options A subscriber can customize their mailing list subscriptions. Without being designated a list administrator or having user privileges on the server, the user has control of a number of aspects of his or her subscriptions. The following section g...

Unsubscribing from a Mailing List Via Mail Unsubscribing from a mailing list via mail is similar to subscribing to a mailing list via mail. Depending on the list’s settings, you might need to confirm your subscription removal or wait for moderator response. To unsubscribe via mail: 1 Open the mail p...

Chapter 2 Mail Service Setup 57 5 Enter a new password in the indicated field, and enter it again to confirm it. To change your password for all lists that you belong to on this server, select Change Globally. 6 Click Change My Password. Disabling List Mail Delivery You can temporarily disable deliv...

Choosing MIME or Plain Text Digests If you subscribe to a mailing list and receive digests (a single mail with all of a day’s postings in it), you can choose whether to receive them as a MIME digest (a collection of individual posts) or as a plain text digest (one message with the text of all posts)...

Chapter 2 Mail Service Setup 59 Setting Mail Service Logging Options Mail service logs can show the following levels of reported detail:  Debug: All debugging information  Information: Connection transactions, delivery attempts, authentication attempts  Notice: Authentication failures  Critical:...

Client-Specific Configuration for Mail Service Client Access to your Mail service requires: Enabling users to access your Mail service. See “  Designating Authorized Mail Service Users” on page 62.Configuring and managing the tools they use to access Mail service. Some of these  topics are discuss...

Chapter 2 Mail Service Setup 61 Using Webmail WebMail is a web-based mail user agent (MUA). It allows a web browser such as Apple’s Safari to compose, read, and forward mail like any other mail client. Mac OS X Server’s WebMail functionality is provided by a software package called SquirrelMail at w...

62 Use this chapter to tune Mail service beyond a basic setup. This chapter discusses topics beyond the basic configuration to get Mail service running. It includes information about using Mail service virtual hosting environments, more specific security tuning, information about managing the data s...

Chapter 3 Mail Service Advanced Configuration 63 Access via ACL Access via Workgroup Manager Result Off On User has mail access granted according to his or her user record settings in Workgroup Manager. This is the default. Off Off User has no mail access. On On User has mail access granted accordin...

Some administrators find it easier to designate mail access using ACLs if they do all their other configuration using ACLs. They also might have mixed network environments that necessitate using ACLs to assign mail access. To enable mail access using ACLs: 1 In Server Admin, select the server that h...

Chapter 3 Mail Service Advanced Configuration 65 Enabling multiple methods allows a client to use any of the enabled methods. If you want to require any of these authentication methods, enable only one method. To allow secure SMTP authentication: 1 In Server Admin, select a computer in the Servers l...

Before enabling Kerberos authentication for incoming Mail service, you must integrate Mac OS X with a Kerberos server. If you’re using Mac OS X Server for Kerberos authentication, this is already done for you. Enabling multiple methods allows a client to use any of the enabled methods. If you want t...

Chapter 3 Mail Service Advanced Configuration 67 Securing Mail Service with SSL Secure Sockets Layer (SSL) connections ensure that the data sent between your mail server and your users’ mail clients is encrypted. This allows secure and confidential transport of mail messages across a local network. ...

Configuring SSL Transport for SMTP Connections SSL transport enables mail transmitted over the network to be securely encrypted. You can choose Require, Use, or Don’t Use SSL for IMAP connections. Before using SSL connections, you must have a security certificate for mail use. For more information a...

Chapter 3 Mail Service Advanced Configuration 69 Using an SSL Certificate from an External Certificate Authority If you do not have a valid certificate, you can acquire one from a certificate authority and add it to the System keychain: Generate a Certificate Signing Request (CSR) A CSR is a file th...

Chapter 3 Mail Service Advanced Configuration 71 Importing an SSL Certificate into the Keychain from the Command Line You can import your SSL certificate into the Keychain using Keychain Access or from the command line with certtool . To import an SSL certificate using certtool : 1 Log in to the ser...

To export a certificate to OpenSSL: Â $ sudo certadmin export For more information, see the certadmin man page. You can also access the System keychain locally from Keychain Access. Creating a Password File from the Command Line The password file contains the password you specified when you created ...

Chapter 3 Mail Service Advanced Configuration 73 A Mail Service Virtual Host Virtual hosting is a method you can use to host more than one domain name on the same computer and IP address, with overlapping mail user names. For example, a mail server can receive mail transfer requests for two domains,...

Adding or Removing Virtual Hosts Before you can enable virtual hosting, you must add a list of locally hosted virtual domains to your mail server. Virtual hosting must be enabled to add or remove virtual hosts. If virtual hosting is not enabled, see “Enabling Virtual Hosting” on page 73. If you enab...

Chapter 3 Mail Service Advanced Configuration 75 To associate a user to a virtual host using Mac OS X Server–style aliases: 1 Add a Virtual Host Name using the directions in “Adding or Removing Virtual Hosts” on page 74. 2 In Workgroup Manager, open the user account you want to work with, if it isn’...

Chapter 3 Mail Service Advanced Configuration 77 Creating Additional Mail Addresses for Users Mail service allows each user to have more than one mail address. These additional addresses are called aliases. Every user has one mail address that’s formed from the short name of the user account. In add...

To create a Postfix-style alias: 1 Create the file /etc/postfix/aliases, if none exists. 2 For each alias, make a line in the file with the following format: alias:localaddress1,localaddress2,...For example, for your domain example.com, if you want to give user name bob”an alias of robert.fakeuser y...

Chapter 3 Mail Service Advanced Configuration 79 Working with Mail Service Data Storage Mail service stores each message as a separate file in a mail folder for each user. This is the user’s mailbox. Incoming mail is stored on the startup disk in the /var/spool/imap/dovecot/mail/ folder. Dovecot mai...

When Mail service starts for the first time, it creates an empty mail store at the default location. You can ignore this or delete it after you specify an alternate mail storage location and restart Mail service. 2 In Server Admin, select a computer in the Servers list, then select Mail. 3 Click Set...

Chapter 3 Mail Service Advanced Configuration 81 6 To change a location, click the Edit (/) button below the Additional Mail Store Locations box, edit the path to the new location, and click OK. 7 To remove a location, select the location to be deleted and click the Remove (-) button next to the Add...

Setting Up Mail Server Clustering with Xsan With Xsan, you can cluster multple mail servers that share the mail store. This provides mission-critical redundancy and high performance and allows you to easily maintain the pooled storage using Xsan tools and software. Each server also has a primary SMT...

83 Use this chapter to monitor and maintain Mail service. This chapter discusses how to watch over Mail Service and the mail store, including archiving, logging, and handling undeliverable mail. Starting or Stopping Mail Service Normally, Mail service starts after you finish using the Server Assista...

If the service is running, click Stop Mail. From the command line: Start and stop the Mail service using the serveradmin command. To start the Mail service: m sudo serveradmin start mail To stop the Mail service: m sudo serveradmin stop mail If you plan to turn off Mail service for an extended perio...

Chapter 4 Monitoring and Maintaining Mail Service 85 Blocking Inbound Mail Connections You can prevent Mail service from receiving inbound mail from external servers. You might do this to isolate a problem or to prevent conflicts with another Mail service running on your network. You might also do t...

3 Find the line that reads “admins:” 4 Edit the line to add the short name of the administrator account after the colon. 5 Save your changes. For more information see the man page for imapd.conf. Monitoring Mail Service Activity This section describes how to use Server Admin and the command line to ...

Chapter 4 Monitoring and Maintaining Mail Service 87 To view a Mail service log: 1 In Server Admin, select a computer in the Servers list, then select Mail. 2 Click the Logs button. 3 From the View pop-up menu, choose a log type. 4 Click Save. From the command line: You can use tail or another file-...

Viewing Mail Accounts You can use Server Admin to see a list of users who have used their mail accounts at least once. For each account, you see the user name, disk space quota, disk space used, and percentage of space available to the user. Mail accounts that have never been used aren’t listed. To ...

Chapter 4 Monitoring and Maintaining Mail Service 89 Retrying Undelivered Outgoing Messages Sometimes the outgoing mail queue has undelivered messages that are properly addressed, but for some reason the messages aren’t sent (for example, if the destination server is down, or if the firewall is bloc...

The computer responds with the following output: mail:nbSamples = <samples>mail:v2Legend = "throughput"mail:samplesArray:_array_index:0:v n = <sample> mail:samplesArray:_array_index:0:t = <time>mail:samplesArray:_array_index:1:v n = <sample> mail:samplesArray:_array_i...

91 Use this chapter to find information about how to work with Mail service when it is not performing as expected. This chapter discusses situations where Mail service is not performing optimally. It also includes links to other resources for more information and advanced configuration techniques fo...

When a Disk Is Full Mail service becomes erratic if the disk storing your mail reaches maximum capacity. When your disk reaches full capacity, you’ll experience the following: Â Postfix: If the operating system can still spawn the smtpd process, Postfix tries to function and attempts to accept the m...

Chapter 5 Troubleshooting Mail Service 93 Books For general information about mail protocols and other technologies, see these books: A good introduction to internet Mail service can be found in  Internet Messaging, by David Strom and Marshall T. Rose (Prentice Hall, 1998).For more information abou...

94 The following table provides the parameters for use with the serveradmin tool to change settings for Mail service from the command line. It also gives the default values after configuration with the Server Setup Assistant on a server that is an Open Directory Master. Parameter Default Value mail:...

128 The following are examples of common sieve scripts a user might want to use. Vacation Notification Script #--------# This is a sample script for vacation rules.# Read the comments following the pound/hash to find out# what the script is doing.#---------## Make sure the vacation extension is used...

Appendix B Sample Sieve Scripts 129 Self-Defined Forwarding #--------# This is a sample script to illustrate how Sieve could be used# to let users handle their own mail forwarding needs.# Read the comments following the pound/hash to find out what the# script is doing.#---------## No need to add any...

A access ACLs 63administrator 85anonymous 26, 27connection control 32, 33, 34frequency of user 88Mailman 18 See also IMAP accounts, administrator 85 See also user accounts ACLs (access control lists) 63addresses. See email addresses, IP addresses administrator account for 85folder access 85mailing l...