 |
Form tabs
UCE/Spam
Use this form to make changes to the default site configuration.
General tab
Use this tab for general information about the Internet Services system setup and site connection.
Primary domain name |
Your server's domain name. In outgoing mail, this will be added to the names of local users and to remote names that do not have a domain name specified. In the address user@huskyplanes.com, the domain name is huskyplanes.com. |
Primary DNS (Domain name server) |
The IP address of your primary DNS. If you do not maintain your own DNS server, obtain this address from your Internet Service Provider (ISP). If you have more than one DNS server, enter their addresses on the Advanced DNS form |
Postmaster name |
The name of the person responsible for Internet Services. All Internet mail addressed to "postmaster" will be sent to this person. In most cases, this is the administrator. We recommend that you create a separate mail address for the web administrator (for example, webadmin@huskyplanes.com). This way, rather than using the main administrator account for mail, you separate Internet and server administration. Default: Administrator |
Internet connection
Continuous |
Default. Select this if you have a full-time connection to the Internet. Outgoing mail will flow continuously and news and mail polling will be controlled by the Internet Service Account schedule that you specified on the Service Account form. |
Intermittent or dial-up |
Select this if you do not have a continuous connection to the Internet. Specify the connection schedule on the Service Account form. You must also set routing information on the Advanced Mail form.  NoteBefore configuring Internet Services for dial-up connections, you must already have installed and appropriately configured dial-up software on the computer on which Internet Services is installed (for example, FreePPP on Mac OS and Dial-Up Networking on Windows). You must also configure the system to recognize these. For more information, see your system documentation. You must set a low timeout value when you configure this software. The Scheduling tab of the Service Account form controls when you dial into your Internet Service Provider (ISP). The timeout value of your dial-up software is how you control when the connection is
dropped. |
Schedule |
Opens the Scheduling tab of the Service Account form. If you selected "Intermittent or dial-up", set up your scheduling on this form. |
Start Internet Services automatically |
Starts Internet Services whenever you start your server as long as Internet Services and your server are installed on the same machine. You cannot select this if they are installed on separate machines or as a clustered service. Default: Unselected  CautionDo not select this option if you have Internet Services running as a Windows NT service. Enabling both will result in two copies of Internet Services being started. |
Mail tab
Use this tab to set basic Internet mail protocols. You must at least enable SMTP mail if you want to send and receive Internet mail. You must also enable POP3 and IMAP4 options if you have users who send mail using third-party clients like Eudora or Outlook Express.
Enable SMTP |
Allows FirstClass to make connections to and receive connections from other SMTP servers to transfer Internet mail. Default: Selected |
SMTP server domain name |
The domain name for your SMTP server. Normally, this will be in a format like mail.firstclass.com. This name must be defined in your DNS and must point to the IP address of the machine on which Internet Services is installed. For each protocol you enable in Basic Internet Setup that requires a server domain name, we recommend that you provide a separate server domain name, even if all the names point to the same server machine. |
Enable POP3 (outbound) |
Enables the Internet Services POP3 server to serve out POP3 mail. Default: Selected |
Mail server (inbound) |
The name of the POP3 server from which your users import their POP mail. The server you enter in this field will be used unless another one is specified on a user's Mail Import form in personal preferences. |
Max outgoing mail |
The maximum number of messages you want to send simultaneously. Normally, you will accept the default 5. This is a large enough number to maintain significant mail flow but not so large as to cause memory problems. You may want to adjust this number if you notice mail overflow or low memory problems on your system, which you can monitor using the Internet Services Monitor. Increasing this number may require more memory resources. |
Enable IMAP4 (outbound) |
Enables the Internet Services IMAP 4 server to serve out IMAP4 mail. Default: Selected |
News tab
Use this tab to set up the basic Internet news protocol if you want to receive newsgroups.
Enable NNTP |
Provides for message transfer to and from Internet newsgroups by enabling the NNTP client protocol on your server. Default: On |
NNTP server domain name |
The domain name you want associated with the NNTP protocol (for example, news.firstclass.com). This name must be defined in your DNS and must point to the IP address of the machine on which Internet Services is installed. For each protocol you enable in Basic Internet Setup that requires a server domain name, we recommend that you provide a separate server domain name even if all the names point to the same server machine. |
NNTP feed server |
The name of the server that provides your news feed. This is where newsgroup posts created on your system are sent. In most cases, this is your Internet Service Provider's news server. |
Web tab
Use this tab to set up your web server.
Enable HTTP |
Lets you publish HTML documents from your web server by enabling the HTTP protocol on your server. Default: On |
HTTP Server domain name |
|
File tab
Use this tab to configure the File Transfer Protocol (FTP).
Enable FTP |
Allows users to download files from your server and from users' home pages with an FTP client. To make files available for FTP, place them in the Internet Services/FTP folder. Default: On |
FTP server domain name |
The domain name you want associated with your FTP server. This name must resolve to your FTP server machine, be defined in your DNS server, and point to the IP address of the machine on which Internet Services is installed. We recommend that you provide a separate server domain name for each protocol you enable that requires a domain name. |
Directory tab
Use this tab to enable the Lightweight Directory Access Protocol (LDAP) to give users with LDAP clients access to your FirstClass Directory.
Note
Enable LDAP |
Allows Internet users to search the Directory using an LDAP client. Default: On |
UCE/Spam - Relaying tab
Use this tab to set up rules for SMTP mail relaying and SMTP AUTH.
Disable all relaying, including SMTP AUTH and trusted IPs |
Disallows all relaying through your system. Default: Selected We recommend you enable relaying only in cases where you need to support POP3 or IMAP4 users who send mail outside your organization, or in cases where your Internet Services acts as the Internet contact point for a group of SMTP servers. |
UCE/Spam - RBL tab
Use this tab to enable the Realtime Blackhole Lists (RBL) option to handle problem addresses found on your RBL services.
Enable RBL lookups |
Rejects connections from any IP address listed on the RBL hosts to which you are subscribed. Connection requests from an IP address found on one of your RBL services are cached for an hour to avoid the system having to look up a bad IP address repeatedly. Default: Off |
Inject X-RBL-Warning header instead of NDN |
Internet Services sends a 550 error message, followed by information in the "Help text" field. A message goes to the recipient at your site who can use personal mail rules to filter messages of this type. Default: Off |
RBL host name |
Example: rbl.spamcop.org |
NDN text |
Example: You have been tagged by our RBL service. Message not delivered. Please contact yourRBLhost.com for further information. |
Enable SURBL lookups |
Rejects connections from any IP address listed on the SURBL host to which you are subscribed. Default: Off |
SURBL host name |
Example: multi.surbl.org |
Caution
IP addresses or domains listed as trusted in your Internet Services Filters folder override your RBL/SURBL settings. Even if an IP address or domain is identified as a spammer, if you've listed it as trusted Internet Services will pass it to the server for processing.
UCE/Spam - Junk tab
Use this tab to configure junk mail handling.
Reject unknown domain names |
Internet Services does a reverse Domain Name Server (DNS) lookup on the IP address of any connecting SMTP server to find an associated domain name and, if no domain name is found, rejects mail from that server. Default: Off Notes The connecting IP address may not be the address of the original server. For example, if server A routes a message to your system through server B, Internet Services will try to resolve the IP address of server B. Querying the DNS server on every inbound SMTP connection can put extra load on your system, but Internet Services caches lookups so that SMTP servers that send you a lot of mail won't increase your system load. |
NNTP crossposting limit |
Internet Services rejects messages posted to more than this number of newsgroups. Excessive crossposting in NNTP newsgroups is often an indicator that a message is junk mail. Default: 10 |
Strike list
You can set up rules in your Filters folder to register strikes against an SMTP server that repeatedly attempts to deliver spam to your site. Use this section to count the "strikes" registered against a server by your mail rules within a specified period of time and to "strike out" and temporarily block a server if the number of strikes reaches the maximum number you set.
Number of strikes to allow |
Default: 3 |
Reset strike counter after |
The number of minutes with no strikes after which to reset the counter. Default: 1 minute |
Amount of time to block struck IPs |
The number of minutes to block struck out IPs. Default: 5 minutes |
UCE/Spam - Mail Rules tab
Use this tab to control how the rules.MailRules document scores spam. The required statements must be present in the rules.MailRules document for these options to work.
To enable the score fields, you must make a change and close the form. If you don't touch a spam-score field, that field is not enabled and Internet Services will use the fallback scores configured in the rules.MailRules file.
Low spam score |
The minimum and maximum score for a message to be flagged as "Low". Default: Min: 15, Max: 25 |
Medium spam score |
The maximum score for a message to be flagged as "Medium". Default: 50 |
High spam score |
The maximum score for a message to be flagged as "High". Messages scoring higher than this value are flagged as "Extreme". Default: 100 |
Extreme causes NDN |
Select this field to automatically reject a message that exceeds the High spam maximum score. Default: Off |
SubjectBlock causes NDN |
Select this field to automatically reject a message if the subject contains words in the rules.SubjectBlock file. Default: Off |
Crosspost limit |
Increases the spam score for any message that has more than this number of recipients. Default: 15 |
UCE/Spam - Abuse tab
Use this tab to configure the behaviour of the Security tab located on the Internet Services Monitor.
Abuse note level |
Internet Services will note IP addresses whose abuse score exceeds this amount to identify any further suspicious activity. Default: 50 |
Abuse warning level |
Internet Services will mark IP addresses whose abuse score exceeds this amount with a yellow warning light on the Security tab located on the Internet Services Monitor. Default: 100 |
Abuse danger level |
Internet Services will mark IP addresses whose abuse score exceeds this amount with a red light. Default: 500 |
Abuse autoblock level |
Internet Services will add IP addresses whose abuse score exceeds this amount to the temporary IP blocklist. Default: Off |
Abuse block time |
The period of time that IP addresses will remain on the temporary IP blocklist. Default: 1 hour |
Abuse reset interval |
The time after which Internet Services will reset the score for IP addresses that have not engaged in suspicious activity during this period. Default: 6 hours |
Connections tab
Use this tab to reject connections based on filter documents in your Filters folder and to enable the black hole option.
Reject connections based on Filters |
Rejects connections based on entries in filter documents in your Filters folder. Default: On |
Connection black hole
Use this section to lock down connections attempting to deliver spam to your site or launch denial of service attacks against your system.
Note
You must select "Reject connections based on Filters" to use the black hole feature.
Maximum number of connections to tie up |
Default: None |
Time to hold connections |
Default: 5 minutes |
Hold connections from
Sites guilty of abusing your system |
Default: On |
Sites identified as spammers by an RBL site |
Default: On |
Sites who have been blocked by mail rules or by striking out |
Default: Off |
Sites in the Filters folder |
Default: Off |
Service tab
Use this tab to specify additional Internet Services settings.
Service account |
The account to which automatched addresses are linked and which Internet Services uses for mail and news routings and for public access through HTTP, FTP, and LDAP. This name must match the name on the Gateway form in order for the gateway to connect to the server. The default name is Internet. Do not change this name unless you reconfigure the Internet account and do not change it to the name of a third party gateway. |
Internet Services priority
The priority of Internet Services operations on this machine.
High |
Select this if Internet Services is running on a dedicated machine or on a system with multiple CPUs. |
Medium |
(Default) Select this if the server and Internet Services are running on the same machine. |
Low |
Select this to allow other software to run on this machine with little performance impact. Only do this temporarily, because Internet Services' performance will be significantly reduced. |
Configuration refresh interval |
Determines how often the configuration module will query the server to locate new configuration resources. Set to 0 to disable. Default: 5 minutes |
Internet sessions |
The maximum number of incoming Internet protocol connections that Internet Services will accept. Default: 10. Each session uses only one connection. Because Internet Services uses caching, the actual number of sessions used may be less than the number of requests. Check the Internet Monitor to see whether the number of sessions you have set is appropriate or connections are being rejected. |
Configure |
Opens the Service Account form. Use this form to view or update the gateway settings for the Internet account. |
| |
